Granting access to a specific wallet to Starton Identity and Access Management

In this tutorial, you will learn how to connect an AWS Key Management System (KMS) to Starton

To connect Starton to your AWS KMS, you can:

• grant access to Starton only to one wallet of your KMS
• grant full access to Starton on your KMS

info

By granting access to Starton only to one wallet, you’ll have to create new wallets and import them every time on your own. Granting full access to Starton enables you to dynamically create new wallets with the Starton API.

note

Starton provides test wallets hosted on our Key Management System, but when going in production, to maintain control over your wallets, you should use your own KMS.

To connect Starton to your AWS KMS, you can grant access to Starton only to one wallet of your KMS. You can also grant full access to Starton on your KMS.

info

By granting access to Starton only to one wallet, you’ll have to create new wallets and import them every time on your own.

Creating a wallet on AWS

1. On your AWS dashboard, search Key Management Service.

   You access a listing of your existing keys.

   info

   A key is an equivalent to a wallet in this use case.

2. Click Create a key.

3. Set up your key:

   1. In Key type, select Asymmetric. 1. In Key usage, select Sign and verify. 1. In Key spec, select ECC_SECG-P256K1. 1. In Advanced options, select Multi-region key.

4. Click Next.

5. In Alias, enter a name for your key.

6. Skip step 3 Define key administrative permissions.

7. In step 4 Define key usage permissions, in Other AWS account, enter Starton information:

   1. In arn:aws:iam::, enter 052805596453.

Connecting your wallet on Starton

1. From the Dashboard, go to Wallets.
2. Click + Wallet.
3. Select Connect a single Wallet from a Key Management System.
4. Enter a Wallet name.
5. Enter a Description.
6. Enter the Key ARN. You will find it on AWS in the General Configuration panel following a arn:aws:kms:eu-west-3:XXXXXXXXXXXX:key/mrk-XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXformat.