{
  "schema_version": 2,
  "id": "operate/rc/subscriptions/bring-your-own-cloud/iam-resources/cloudformation",
  "title": "Create IAM resources using CloudFormation",
  "url": "https://redis.io/docs/latest/operate/rc/subscriptions/bring-your-own-cloud/iam-resources/cloudformation/",
  "summary": "",
  "aliases": [
    "/operate/rc/how-to/view-edit-cloud-account/iam-resources/cloudformation",
    "/operate/rc/cloud-accounts/iam-resources/cloudformation",
    "/operate/rc/cloud-integrations/aws-cloud-accounts/iam-resources/cloudformation",
    "/operate/rc/subscriptions/aws-cloud-accounts/iam-resources/cloudformation/"
  ],
  "tags": [
    "docs",
    "operate",
    "rc"
  ],
  "last_updated": "2026-09-25T15:00:18+01:00",
  "page_type": "content",
  "content_hash": "85c853b35b6ec142869f28e790f1c46d3544ca39f2bf9e39271cc541125d142f",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "You can use [AWS CloudFormation](https://aws.amazon.com/cloudformation/) to create the IAM resources for Redis Cloud Bring your Own Cloud (BYOC).\n\n> [!WARNING]\n> We use the provided credentials to configure your AWS environment and provision required resources.\n>\n> You **must not** change the configurations of provisioned resources or stop or terminate provisioned instances. If you do, your databases will be inaccessible and Redis will not be able to ensure database stability. See [Avoid service disruption](https://redis.io/docs/latest/operate/rc/subscriptions/bring-your-own-cloud/cloud-account-settings#avoid-service-disruption) for more details."
    },
    {
      "id": "create-resources-using-cloudformation-on-the-aws-console",
      "title": "Create resources using CloudFormation on the AWS Console",
      "role": "content",
      "text": "The following link uses CloudFormation to create a stack using the AWS console:\n\n<a href=\"https://console.aws.amazon.com/cloudformation/home?#/stacks/new?stackName=RedisCloud&templateURL=https://s3.amazonaws.com/iam-resource-automation-do-not-delete/RedisCloud.yaml\">\n<img alt=\"Launch RedisCloud template\" src=\"https://s3.amazonaws.com/cloudformation-examples/cloudformation-launch-stack.png\"/>\n</a>\n\nWhen the stack finishes, select the stack and then the **Outputs** tab. You need the following information to [create a Cloud Account](https://redis.io/docs/latest/operate/rc/subscriptions/bring-your-own-cloud/cloud-account-settings) in the Redis Cloud console:\n\n- **Access Key ID**: The `accessKeyId` output.\n- **Secret Access Key**: Follow the link to AWS Secrets Manager in the `accessSecretKey` output and select **Retrieve secret value**. \n- **IAM Role Name**: The `IAMRoleName` output."
    },
    {
      "id": "create-resources-using-cloudformation-through-aws-cli",
      "title": "Create resources using CloudFormation through AWS CLI",
      "role": "content",
      "text": "You can also use the AWS command-line interface (CLI) to create the stack:\n\n[code example]\n\nYou can track the status of the cloud formation with the following command:\n\n[code example]\n\nAfter the stack finishes, you can retrieve the outputs from the `Outputs` section of the response.\n\nYou need the following information to [create a Cloud Account](https://redis.io/docs/latest/operate/rc/subscriptions/bring-your-own-cloud/cloud-account-settings) in the Redis Cloud console:\n\n- **Access Key ID**: The `accessKeyId` output.\n- **Secret Access Key**: Extract the secret ID from the `accessSecretKey` output. The secret ID is the `name` query parameter in the `accessSecretKey` output. \n\n    For example, if the `accessSecretKey` output is `https://console.aws.amazon.com/secretsmanager/home?region=<region>/secret?name=/redislabsuser/secret_access_key`, then the secret ID is `/redislabsuser/secret_access_key`.\n\n    Use the secret ID to retrieve the secret value using the AWS secretsmanager CLI:\n\n    [code example]\n    Replace `<accessSecretKey-ID>` with the secret ID you extracted from the `accessSecretKey` output.\n- **IAM Role Name**: The `IAMRoleName` output."
    }
  ],
  "examples": [
    {
      "id": "create-resources-using-cloudformation-through-aws-cli-ex0",
      "language": " shell",
      "code": "aws cloudformation create-stack --stack-name RedisCloud --template-url \\\nhttps://s3.amazonaws.com/iam-resource-automation-do-not-delete/RedisCloud.yaml \\\n--capabilities CAPABILITY_AUTO_EXPAND CAPABILITY_NAMED_IAM CAPABILITY_IAM",
      "section_id": "create-resources-using-cloudformation-through-aws-cli"
    },
    {
      "id": "create-resources-using-cloudformation-through-aws-cli-ex1",
      "language": "shell",
      "code": "aws cloudformation describe-stacks --stack-name RedisCloud",
      "section_id": "create-resources-using-cloudformation-through-aws-cli"
    },
    {
      "id": "create-resources-using-cloudformation-through-aws-cli-ex2",
      "language": " shell",
      "code": "aws secretsmanager get-secret-value --secret-id=<accessSecretKey-ID>",
      "section_id": "create-resources-using-cloudformation-through-aws-cli"
    }
  ]
}