Onboard AWS accounts to Cloud App Analyzer

This topic explains how to perform automatic onboarding of AWS accounts to Cloud App Analyzer. The onboarding process is performed using the AWS onboarding wizard that you access from the Cloud App Analyzer interface.

The onboarding wizard is user-friendly and self-explanatory. This section aims to offer additional details you might require.

For additional security information, see Permissions required by Prevasio to scan your AWS accounts.

Before you start

Make sure you are logged on to AWS Console with administrative permissions to deploy a CloudFormation stack and preferably permissions to read the AWS Organization service and the Organization accounts hierarchies. For further details, see Permissions required by Prevasio to scan your AWS accounts.

Required permissions

Your AWS account requires permissions to allow you to create CloudFormation and IAM resources.
(Optional) If you plan to onboard multiple AWS accounts and you want to display AWS Account Names in the Cloud App Analyzer Dashboard, it's necessary to establish a role within your management account that grants us permission to execute the describe-account command.

For further details, see in AWS documentation .