Science Cloud AWS Account Login Procedure

Overview

The Science Cloud uses a centralized Identity and Access Management system. This system provides users a single Science Cloud identity to access all of their AWS accounts through a new single sign-on (SSO) workflow.

AWS Console Login Experience

NASA Users

If you have a NASA identity, once you are notified that your Science Cloud identity is ready, your AWS Console login process will be:

1. Navigate to the access portal link: http://aws.sciencecloud.nasa.gov/
2. Log in using your @nasa.gov email address
3. You will be prompted to authenticate using your PIV credentials via Launchpad
4. Once authenticated, you'll be redirected to the AWS Access Portal

NASA Collaborators

If you do not have a NASA identity, once you are notified that your Science Cloud identity is ready, your AWS Console login process will be:

1. Navigate to the access portal link: http://aws.sciencecloud.nasa.gov/
2. Enter the email address you were invited to the Science Cloud with (this email address will be specified when you are notified that your Science Cloud identity is ready)
3. Follow login prompts
4. Complete multi-factor authentication (MFA) preferably using Microsoft Authenticator
   • If this is your first time logging in, you'll be guided through setting up MFA. The Science Cloud team supports Microsoft Authenticator for MFA.
5. Once authenticated, you'll be redirected to the AWS Access Portal

AWS Access Portal

After successful authentication, you'll land on the AWS Access Portal - your central hub for accessing AWS resources.

What you'll see:

• A list of AWS accounts you have permission to access
• Available roles for each account based on your assigned permissions

How to access your Science Cloud AWS account:

1. Select the AWS account you want to access
2. Choose the appropriate role 
3. Click to launch the AWS Management Console or use programmatic access options

Session Duration for Standard Science Cloud Roles

Programmatic Access to AWS

To access AWS programmatically, log in to the Science Cloud Portal, select your account, and click 'Access Keys' for role-specific instructions.