Skip to main content

Set up your cloud environment

Manage reusable cloud provider credential profiles in AI Trust. These profiles securely store the authentication details required to connect to cloud environments. Use these profiles for cluster deployments and AI agent discovery, eliminating the need to enter credentials each time.

Before you begin

Ensure you have access, required permissions, and credentials to connect to your AWS, GCP, or other supported cloud provider.

Add a cloud environment

  1. In the AI Trust Manager main menu, select Agent Trust > Cloud environments .

  2. Select Environments > Add environment.

  3. Select the Cloud provider: AWS or GCP.

  4. Configure authentication for your cloud provider:

    • AWS:

      CloudFormation setup required: AI Trust Manager requires a CloudFormation stack in your AWS account to establish OIDC federation. Open the CloudFormation stack in a new tab and complete the setup. When the stack is created, return to this page to save the credential profile.

      1. Select Launch CloudFormation stack and sign in to your AWS account.

        注記

        Select View template to download the template required to create your cloudFormation stack.

      2. Complete the CloudFormation stack configuration using the template.

      3. Return to AI Trust Manager and proceed with configuring credential details. Fill out the following credential details:

        1. Provide the 12-digit AWS account ID identifier of the AWS account where the required resources and deployments are managed.

        2. Add a Resource prefix used to identify and organize the AWS resources created by the platform. Use a unique, descriptive value to distinguish these resources from others in your account.

        3. Specify the ECR region where the Amazon Elastic Container Registry (ECR) repository containing the agent image is located.

    • GCP:

      Workload identity setup required: AI Trust manager requires additional configuration to establish a secure workload identity before the cluster can connect to GCP. Copy the command shown and run this command in Google Cloud Shell to grant AI Trust Manager the required IAM permissions. AI Trust Manager will automatically detect when the setup is complete.

      1. Select Download full setup script (.sh) for your project to download a shell script containing the configuration and commands required to set up the integration for your selected GCP project. The script is automatically customized with your project details, so you can run it in your environment without manually entering the required configuration values.

      2. Select Open cloud shell to open Google Cloud Shell with the required setup context and starts the verification process. Use Cloud Shell to run the setup script and verify that the required permissions, resources, and trust configuration are correctly configured for your GCP.

      3. Select Enable artifact registry onboarding to automatically create credentials for secure access to the selected Google Cloud Artifact Registry and pull agent images from private repositories.

  5. After providing the required information for the cloud credential, select Add environment.

このセクションの内容: