Install IAM assessment on AWS
Install the P0 IAM assessment integration on AWS to collect IAM data. Required to use Access Inventory and Posture for your AWS accounts.
Last updated
Install the P0 IAM assessment integration on AWS to collect IAM data. Required to use Access Inventory and Posture for your AWS accounts.
Install the IAM assessment integration to let P0 collect and analyze the IAM configuration of your AWS accounts.
You must install the IAM assessment integration to use Access Inventory or Posture. P0 builds the identity graph and evaluates posture findings from the data this integration collects. Without it, Inventory and Posture have no data to display.
Existing P0 account at p0.app.
At least one AWS account on which to install P0.
The ability to create roles, add trust relationships, and create and assign role policies. You have this if the IAMFullAccess managed policy is attached to your user.
Navigate to Integrations on p0.app, then select AWS.
Choose the IAM assessment component.
Click Add account, enter your numeric AWS account ID, then click Next.
Review the generated commands. P0 sets up an AWS IAM Access Analyzer for unused access and creates a read-only IAM role that P0 assumes to collect IAM data.
Provision access using the AWS CLI or Terraform. To use the AWS CLI:
Copy the commands from the P0 configuration page.
Run the commands with the AWS CLI or in AWS CloudShell, or apply the Terraform configuration instead.
Return to the P0 configuration page and click Next to verify the installation. When verification succeeds, P0 takes you to the integration configuration page and the account appears as installed under the IAM assessment component.
Create an environment and run your first scan. See Creating an environment.
View your results in Access Inventory and Posture.
Last updated