Configuration

  1. Log in to AWS.

  2. In a separate browser tab, log in to the Delinea Platform.

  3. Navigate to Discovery > Entitlement & Threat Sources.

  4. Go to Create and select the AWS option. The Integrate AWS dialog opens.

  5. Create AWS stack trust role:

    1. In the integration dialog, select Cloud Formation Installation.

      Amazon AWS opens with the CloudFormation > Stacks > Create stack page displayed. If this page is not displayed, you may not have the needed permissions. Send the link (along with a request to create a trust role) to your AWS admin.

      The AWS form is prefilled with:

      1. Template URL: https://authomize-cloud-formation.s3.amazonaws.com/authomize_cloud_formation.json

      2. Stack name: Authomize-Trust-Role

      3. Parameters: ExternalID is set.

    2. In the Parameters section, set IncludeIAMIdentityCenter to True.

    3. Skip the Permissions section.

    4. Review and acknowledge the capabilities.

    5. Click Create stack.

      In AWS, the newly created stack is displayed in the CloudFormation > Stacks > Authomize-Trust Role page.

    6. Ensure that the stack creation is complete (A), then click your username (B) to reveal the Account ID number (C):

    7. Copy the account ID.

  6. Complete the integration in the Delinea Platform:

    1. In the Account Number field, enter the account number, copied from above.

      If there are multiple account numbers, enter them in comma-delimited format.

    2. (Optional) To also integrate the AWS Identity Center, enter the Management account number. If you include the Management account number, also add that number in the Account Number field (comma-delimited).

    3. Skip Assume Role.

    4. Leave the Regions field empty if you want to retrieve data from all regions in your organization. If you specify the regions, the data will be retrieved only from those regions listed.

  7. (Optional) You can enter a unique name for this integration.

    By default, the integration will be named AWS.

  8. Select Save.

The AWS option is displayed as a connected app. The synchronization process begins, and its status will be shown when it is completed.