AWS Configuration

​

Background:

The first step when helping a customer set-up AWS credentials is to ask their IT department if they have:

• Keys for a user with TranslateFullAccess and AmazonS3FullAccess policies
• An S3 bucket that user has access to

If the customer does not have a keys for a user with that information or a bucket. Someone from their IT department will have to do the following:

​

Access:

Configuring the AWS Configuration in AI Hub, will enable the customer to access all available services via the AWS Bedrock ecosystem, including:

• Amazon Titan Express
• AI21 Labs
• Anthropic Claude Models
• Amazon Textract
• Amazon Transcribe

​

Create a new user

• Search for IAM and select IAM.
• Select Users, “Create User”
• 
• You do not need to select “Provide user access to the AWS Management Console”
• Attach policies directly
  • TranslateFullAccess
  • AmazonS3FullAccess
  • AmazonTextractFullAccess (OCR Only)
  • AmazonTranscribeFullAccess (ASR only)
  • 
• Now click Create User
• Search for the user created in the previous step and select
  • 
• Click Security credentials
  • 
• Click “Create access key”
  • 
• Select Third-party service, select Next
  • 
• Name the key
• Download .csv file this is your “AWS Access Key ID” and “AWS secret access key”. You will not be able to recreate the .csv

​

Create AWS data access ARN

• Search for the user you created in “Create user” steps
• Click into the user
  • Scroll down to Permissions policies
  • Select “TranslateFullAccess”
  • The ARN will be on the top right

​

Create S3 Bucket

• Type in S3 in bar
• Click S3
• Create Bucket
  • 
  • Choose an AWS region
    • We reccommend US-EAST-1
  • Select a General purpose
  • Name the bucket
  • 
  • Unselect “block public access”
  • 
  • Disable Bucket versioning
  • 
  • (Optional) we recommend that you add a LILT tag, so that you can track your usage
  • 
  • Click create the bucket
  • 
• Enter this bucket name into LILT’s Amazon credentials, and select the region the Bucket is assigned

​

FAQs

Q: Which Amazon Translate actions do I need to include in the IAM policy? A: Translate, S3 bucket Q: Do specific resource types need to be indicated in the policy or the ARN? A: Ideally yes, you would create a very specific IAM. Without specific resource types, someone could have more or less privileges than what you want on your AWS account. Q: For the ARN, we need more information about what exactly is required. Is this for encryption? A: No it is to access translate client, S3, and other resources needed for translation. Q: What happens if we turn on the “Use Terminology” option? Will this create a terminology resource in AWS with our LILT glossary/TB or the other way around (it will use custom terminology already uploaded to AWS)? A: LILT will send the terminology from the data source to AWS, and the terminology will be used in AWS.