You can connect one, or many AWS (Amazon Web Services) accounts to Secfix.
🔒 Note: Secfix needs read-only AWS credentials with limited permissions in order to monitor your AWS configurations. An AWS administrator for your organization can create the necessary IAM role through the AWS Management Console.
Add an account to Secfix
Navigate to Integrations > Cloud Infrastructure Providers
Go to Amazon Web Services
Click Connect
Create policy
Navigate to the AWS policy creator and click on the JSON tab
Paste the policy below into the editor
Click Review policy and name the policy
SecfixAdditionalPermissionsClick Create policy
Create role
Navigate to the AWS role creator and make sure Another AWS Account is selected
Paste the Account ID field from Secfix into the account ID field in AWS
Select Require external ID
Paste the external ID field from Secfix into the external ID field in AWS
Confirm that Require MFA is not selected
Click Next: Permissions
Search for
SecurityAuditpolicy and check the box next to theSecurityAudit.
Search for
SecfixAdditionalPermissionsand check the box next toSecfixAdditionalPermissionsClick Next
Click Next: Review and name the role
secfix-auditor
Click Create role
🔒 Note: If you use S3 bucket policies, be sure to add access for this role.
Add role ARN
After the Role is created in AWS, you will return to Secfix and click Next
Navigate to the
secfix-auditorrole in AWS that you just createdCopy the Role ARN from AWS, and paste it into Secfix
Click Finish