Loading
Salesforce now sends email only from verified domains. Read More
Intelligent Document Reader
Create and Configure an AWS Account for Intelligent Document Reader

Create and Configure an AWS Account for Intelligent Document Reader

Intelligent Document Reader uses the Amazon Web Services Textract API for document data extraction. Before configuring Intelligent Document Reader, create an AWS account, set up an Identity and Access Management (or IAM) user, and assign Amazon Textract permissions.

Required Editions

Available in: Lightning Experience
Available in: Automotive Cloud, Consumer Goods Cloud, Education Cloud, Financial Services Cloud, Health Cloud, Manufacturing Cloud, Media Cloud, Net Zero Cloud, Nonprofit Cloud, Public Sector Solutions. View product and edition availability.
Intelligent Document Reader is available with the Intelligent Document Reader add-on license.
Note
Note For Intelligent Document Reader to function properly, create an AWS account even if you have an existing account. The AWS account is charged for any AWS services that are used based on the pricing agreements between your organization and AWS.

To learn how to configure an AWS account for Intelligent Document Reader, watch this video.

Extract the AWS Account ID and Access Keys

The 12-digit AWS account ID is a unique identifier for your AWS account. The AWS access keys are specific to a user. Create a user, and then use the access keys to create the external credential.

  1. Log in to your AWS account.
  2. In the Dashboard, copy and save the Account ID from the AWS Account section.
  3. Click Access management | Users | Create user.
  4. Enter a username, and then click Next.
  5. Select Attach policies directly.
  6. In the search field, type textract, and then select the AmazonTextractFullAccess policy name.
  7. Click Next.
  8. Click Create user.
  9. Click the username that you created.
  10. Click Create access key.
  11. Select the Command Line interface (CLI) use case.
  12. Select the confirmation prompt and click Next.
  13. Click Create access key.
  14. Copy the Access key ID and Secret access key, or download the .csv file that contains these credentials.
    You can’t retrieve the access key later.
  15. Click Show.
  16. Copy and save the secret access key.
  17. Click Done.

Extract the ARN Value for a User

To extract the ARN (Amazon Resource Name) value, use the same user you created to extract the access keys.

  1. Log in to your AWS account.
  2. Click Access management | Users, and then click the username that you created.
  3. Copy and save the ARN of the user from the Summary section.
  4. Click Access management | Role | Create role.
  5. In the Service or use case search field, type textract , and then select Textract.
  6. Click Next, and then click Next.
  7. In the Role details section, enter a role name.
  8. Click Create role.
  9. Click Access management | Roles, and then click the role you created.
  10. To attach a textract service to this role, click the Permission tab, click Add permissions, and then select Attach policies.
  11. In the search field, type textract , and then select the AmazonTextractFullAccess policy name.
  12. Click Add Permissions.

Attach a Role to a User

After you create a role and a user, attach the role to the user.

  1. Log in to your AWS account.
  2. Open the role you created.
  3. In the Trust relationships tab, click Edit trust policy.
  4. Click Add next to Add a principal.
  5. Select IAM users as the Principal type.
  6. Paste the user ARN value as the ARN.
  7. Click Add principal.
  8. Click Update policy.
  9. Copy and save the role ARN value from the role window.
    You need this ARN value to create the external named credential.
 
Loading
Salesforce Help | Article