## Standard AWS Account

**Archera's account ID:**`967800896805`

**Full principal for production:**

```
arn:aws:iam::967800896805:user/reserved-write
```

**Full principal for Read-only:**

```
arn:aws:iam::967800896805:user/reserved-read
```

## AWS GovCloud Account

**Archera's GovCloud account ID:**`202754554539`

**Full principal for GovCloud production:**

```
arn:aws:iam::202754554539:user/reserved-write
```

**Full principal for GovCloud Read-only:**

```
arn:aws:iam::202754554539:user/reserved-read
```

## Command Line Setup

**Create Read-only role via CLI:**

```
aws iam create-role \
  --role-name ReservedAI-Read \
  --assume-role-policy-document '{
    "Version": "2012-10-17",
    "Statement": [{\
      "Effect": "Allow",\
      "Principal": {"AWS": "arn:aws:iam::967800896805:user/reserved-read"},\
      "Action": "sts:AssumeRole",\
      "Condition": {"StringEquals": {"sts:ExternalId": "YOUR_EXTERNAL_ID"}}\
    }]
  }'
```

## Related Resources

- [What IAM permissions does the Archera AWS Read-only deployment require?](https://docs.archera.ai/help-center/aws-onboarding/iam-permissions-trial)
- [What IAM permissions does the Archera AWS production deployment require?](https://docs.archera.ai/help-center/aws-onboarding/iam-permissions-production)
- [How Does Archera Access my AWS Environment?](https://docs.archera.ai/help-center/security/aws-access)
- [Do I Need to Grant Archera Access to my GovCloud Account?](https://docs.archera.ai/help-center/security/govcloud-access)