Offboard AWS accounts from ACE

You can offboard AWS accounts from ACE with the following methods:

Do the following:

1. Offboard accounts:

   • For accounts onboarded using the CloudFormation Stack method:

     You can offboard accounts in one of these ways:

     • From the AWS Console: In the AWS console go to CloudFormation and delete or update the stack/stackset as required.

     • From the CLI: From the AWS CLI run the following command:

       aws cloudformation delete-stack --stack-name <stack-name>

       Note: Replace <stack-name> with the name of the stack to offboard.

     • Using the API:

       1. Go to the API Delete an AWS account.

       2. Follow the instructions on the page.

     Note: If you remove an account from AWS (not its stack/stackset), it will not automatically disappear from ACE. Make sure the stack is deleted before the account is deleted.

   • For accounts onboarded using the API or Terraform methods:

     • Using the API:

       1. Go to the API Delete an AWS account.

       2. Follow the instructions on the page.

2. Remove any Kubernetes Security related resources. See For Kubernetes Cluster Scan.