SecurityAudit is enough
The AWS-managed read-only policy suffices. No custom permission set, no write access.
← All integrations
Cloud & configuration posture Reads data
Amazon Web Services
Check AWS accounts with read-only access
The connector reads an AWS account via the AWS SDK. You store an IAM user with the SecurityAudit managed policy, that is read-only access, plus the regions to be scanned. Findings are deduplicated per account, check and resource, and carry first and last seen timestamps.
Vendor: Amazon · docs.aws.amazon.com
What is synchronized automatically
- Configuration checks per account and region
- Selection of the regions to scan
- Deduplicated per account, check and resource
- First and last seen per finding
Your benefits
Fixed means verified
If a complete run no longer finds a misconfiguration, the finding closes automatically. Manually decided ones stay closed.
Connect Amazon Web Services with isidaten
We show you the connector live in your own environment – non-binding and free of charge.