> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kubox.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# kubox admin cloud-account create

Register a role the management plane may assume

### Synopsis

Registers a role in your AWS account for the plane to build clusters with.

The plane mints an external ID and prints it here. It is shown ONCE: reads never
return it, so that no tenant can discover a value another tenant's role already
trusts. Losing it means creating the account again under a different name.

Registering is only half the handshake. Until the external ID is in the role's
trust policy, the plane cannot assume the role and verification fails -- which is
the expected state between these two steps, not a fault.

```
kubox admin cloud-account create [flags]
```

### Options

```
      --account-id string          The AWS account being connected
      --artifact-key string        Key encrypting sealed credentials; must be a DIFFERENT key from --stack-key
      --artifact-key-arn string    The key --artifact-key resolves to today; must be a DIFFERENT key
  -h, --help                       help for create
      --name string                Name for this account within your organisation
      --region string              Region this account's clusters are built in
      --role-arn string            ARN of the Creator role, when it already exists and custody is reported here
      --sealer-role-arn string     ARN of the tenant's artifact sealer role, reported with --role-arn
      --stack-key string           Key encrypting that state, e.g. awskms://alias/your-key
      --stack-key-arn string       The key --stack-key resolves to today; what drift is measured against
      --state-backend string       Where this account's cluster state lives, e.g. s3://your-bucket/prefix
      --unsealer-role-arn string   ARN of the tenant's artifact unsealer role, reported with --role-arn
```

### Global options

See [global options](/cli-reference/kubox#global-options).

### SEE ALSO

* [kubox admin cloud-account](/cli-reference/kubox_admin_cloud-account)	 - Work with the cloud accounts a management plane may build into