Offboard AWS accounts from ACE

You can offboard AWS accounts from ACE with the following methods:

Do the following:

1. Offboard accounts:

   • For accounts onboarded using the CloudFormation Stack method:

     You can offboard accounts in one of these ways:

     • From the AWS Console: In the AWS console go to CloudFormation and delete or update the stack/stackset as required.

     • From the CLI: From the AWS CLI run the following command:

       aws cloudformation delete-stack --stack-name <stack-name>

       Note: Replace <stack-name> with the name of the stack to offboard.

     • Using the API:

       1. Go to the API Delete an AWS account.

       2. Follow the instructions on the page.

     Note: If you remove an account from AWS (not its stack/stackset), it will not automatically disappear from ACE. Make sure the stack is deleted before the account is deleted.

   • For accounts onboarded using the API:

     • Using the API:

       1. Go to the API Delete an AWS account.

       2. Follow the instructions on the page.

   • For accounts onboarded using Terraform methods:

     1. Run the AWS CLI in AWS CloudShell or from your local machine.

     2. If running from you local machine:

        1. Login to your AWS account.

        2. Set region environment parameter.

     3. Navigate to the directory you used to run terraform apply during onboarding.

     4. Run:

        terraform destroy

     5. When prompted, enter the Client ID and Client Secret.

     6. When prompted to approve the changes, type Yes and press Enter. Terraform resources and permissions are removed.

2. Remove any Kubernetes Security related resources. See For Kubernetes Cluster Scan.