# AWS Identities

### Generating a Decube AWS Identity

* Step 1: Go to My Account → Integrations → Identities.
* Step 2: Click on **⊕ Add new**

{% hint style="info" %}
You can create up to 5 active Decube AWS Identities at one time.
{% endhint %}

<figure><img src="/files/qY9xTb8eXxQvj5jfBmRt" alt=""><figcaption></figcaption></figure>

* Step 3: Name the identity. This name will be shown in the Data Source form when adding/modifying connection to the data source.

<figure><img src="/files/tw40jomyKRksmlQkk8vv" alt=""><figcaption></figcaption></figure>

* Step 4: Take note of the **ARN** and **External ID**.

{% hint style="info" %}
The ARN and External ID are unique to your organisation. These values will be used when setting up the **AWS Role**.
{% endhint %}

<figure><img src="/files/TKwoZDxcd2mWrCHhS9v6" alt=""><figcaption><p>New AWS Identity was sucessfully added</p></figcaption></figure>

To understand how to use the AWS Identities in a specific data source connection, please go to the respective data sources page and see the section on **AWS Roles**. Link to the docs: [AWS Glue](/transformation-tools/aws-glue.md), [AWS S3](/datalake/s3.md) [dbt Core](/transformation-tools/dbt-core.md).

### Deleting a Decube AWS Identity

{% hint style="info" %}
Before you can delete a Decube AWS Identity, you need to ensure it is not being used as a connection option in any connected data sources.
{% endhint %}

<figure><img src="/files/B9fYX2eDX7ONzE1WVudZ" alt=""><figcaption><p>Example of an identity is being used by a data source</p></figcaption></figure>

* Step 1: Click on the bin icon on right side. Make sure the identity you want to delete is not being used by any connected data sources.

<figure><img src="/files/vdy3CzSJJYl2QPGXOEVg" alt=""><figcaption></figcaption></figure>

* Step 2: Enter "`Delete`" to confirm the deletion.

<figure><img src="/files/ba7OAilh4M2eaNNt1DtT" alt=""><figcaption></figcaption></figure>

* You will see a success message once the identity was successfully deleted.

<figure><img src="/files/kUwQq29Ti2AKjDcFcWKE" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.decube.io/security-and-connectivity/aws-identities.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.