Connect Amazon Web Services
Grant CloudVision360 a read-only role across an AWS account or a whole organization, with auto-discovery of new accounts.
Online version, always current: https://cloudvision360.com/docs/platform/connect-aws/
CloudVision360 reads AWS through a least-privileged role. It uses Organizations, Config, security posture data, Security Hub findings (GuardDuty and Inspector), Cost Explorer and the Cost Optimization Hub.
What access is requested
A read-only role (based on AWS SecurityAudit and billing read access). For an organization, grant it in the management account so member accounts are covered. Remediation uses a separate write role granted only if you enable it.
Connect with CloudFormation or Terraform
- In CloudVision360, open Inventory → Cloud connections, choose Connect a cloud, then Amazon Web Services.
- Choose single account or organization.
- Download the CloudFormation template or Terraform module shown and review the permissions it declares.
- Deploy it, then paste the role ARN and external ID back into the connection form.
The external ID ties the trust relationship to your tenant so the role cannot be assumed by anyone else.
Auto-discovery
Connected at the organization level, CloudVision360 discovers new member accounts automatically and assesses them without another connection step.
Native findings
AWS Security Hub findings from GuardDuty and Inspector are ingested and mapped into CloudVision findings, so you get one list and one severity scale rather than several consoles. See native findings ingestion.
Verify
The first assessment runs within minutes of saving. The connection health panel lists any permission still missing.