Connector · AWS

AWS Cloud Connect

Connect an AWS account or organization. Discovery uses read-only describe/list calls only — it never mutates your cloud — to build a full inventory of resources and APIs. Credentials stay on the box; nothing leaves the region.

Connect to AWS

Pick a scope, then run discovery. We assume read-only permissions on your API and infrastructure assets.

Connect an Account

Enter a single AWS account ID.

Account ID

Region

Cred profile (local demo)

Connect an Organization

Enter an Organization Unit to onboard every account under it.

Secrets Manager secret (optional — cross-account role)

AWS auth uses the appliance IAM role — no secret needed for this account. To inventory your account, point to a Secrets Manager secret holding a read-only role_arn (+ external_id); the appliance reads it via its role and assumes that role. The secret is never stored in the box.

Discovery result

No discovery run yet. Connect an account to inventory it.

How it works

① Connect

② Inventory

Resources (EC2/ECS/ECR/ELB/S3) and APIs are catalogued into the box DB, in-region.

③ Assess

Every API is run through the posture checks; gaps and risk scores surface in Governance.