> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/environments/creating-an-environment/install-iam-assessment-aws.md).

# Install IAM assessment on AWS

Install the **IAM assessment** integration to let P0 collect and analyze the IAM configuration of your AWS accounts.

{% hint style="warning" %}
You must install the **IAM assessment** integration to use **Access Inventory** or **Posture**. P0 builds the identity graph and evaluates posture findings from the data this integration collects. Without it, Inventory and Posture have no data to display.
{% endhint %}

## Prerequisites

* Existing P0 account at [p0.app](https://p0.app/).
* At least one AWS account on which to install P0.
* The ability to create roles, add trust relationships, and create and assign role policies. You have this if the [IAMFullAccess managed policy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/IAMFullAccess.html) is attached to your user.

## Install the integration

1. Navigate to **Integrations** on [p0.app](https://p0.app), then select **AWS**.
2. Choose the **IAM assessment** component.
3. Click **Add account**, enter your numeric AWS account ID, then click **Next**.
4. Review the generated commands. P0 sets up an [AWS IAM Access Analyzer](https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html) for unused access and creates a read-only IAM role that P0 assumes to collect IAM data.

## Provision access

Provision access using the AWS CLI or Terraform. To use the AWS CLI:

1. Copy the commands from the P0 configuration page.
2. Run the commands with the AWS CLI or in [AWS CloudShell](https://docs.aws.amazon.com/cloudshell/latest/userguide/welcome.html), or apply the Terraform configuration instead.

## Verify the installation

Return to the P0 configuration page and click **Next** to verify the installation. When verification succeeds, P0 takes you to the integration configuration page and the account appears as installed under the **IAM assessment** component.

## Next steps

* Create an environment and run your first scan. See [Creating an environment](/environments/creating-an-environment.md).
* View your results in [Access Inventory](/inventory/access-inventory.md) and [Posture](/posture/posture-overview.md).