Adding an AWS Cloud Infrastructure Connection

Cloud Infrastructure Sync allows us to monitor your company’s cloud IP footprint and automatically update it when addresses are changed or replaced.

Setting up this feature takes less than 15 minutes. Once complete, we begin collecting your IPs and a self-published company is generated within 3-5 business days. This company is visible in your Ratings Tree. We’ll scan your AWS infrastructure multiple times per day and will make any updates that are consistent after two consecutive 24 hour periods. Assets added to infrastructure when a connection is setup have a 60-day grace period before they impact grading.

Step 1: Add Account Info

1. Navigate to the Cloud Infrastructure Sync page in the Attack Surface section.
2. Select the Add Connection dropdown.
3. Select Amazon Web Services (AWS).
4. Enter a name for the connection. Optionally, you may also enter a description. The name and description identify the connection; the self-published company can have a different name, and will be named in step 2.
5. Select whether you’d like us to scan a single AWS account or multiple AWS accounts under an AWS Org.
6. Enter an AWS application ID. Use the single AWS account ID to connect a single account or the Org/Management account ID to connect multiple accounts.
7. Select the account region associated with the AWS application ID you used.
8. Select Continue.

Step 2: Confirm Self-Published Company

A new self-published company based on the AWS infrastructure in the account you added will be created. This way, you can have a self-published company and rating for your AWS infrastructure.

Self-published companies are managed like any other subsidiary in your Ratings Tree. They’re classified as company-provided assets because the IPs are provided via an automated sync with your company.

1. Select a parent company for the self-published company.
2. Enter a name for the self-published company, e.g., “Saperix, Inc. AWS.”
3. Enter the primary domain associated with the parent.
4. Enter a description for the self-published company, e.g., “Saperix, Inc. AWS Infrastructure.”
5. Select a visibility setting for the self-published company. Cloud Infrastructure Sync assets impact your rating regardless of your choice during setup.
6. Select Continue.

Step 3: Set Up Sync Permissions

This step contains a list of the permissions required to set up an IAM role for Cloud Infrastructure Sync as well as instructions for doing so. During setup, you’ll deploy a stack set on all or a subset of accounts, at your preference. Your choice must match the account ID provided in step 1.

This setup includes the minimum required permissions; we recommend leaving them as-is, but you may change or remove them as needed. Changing permissions may affect Cloud Infrastructure Sync's ability to monitor your cloud infrastructure.

1. Download the Configuration Instructions.
2. Download the Configuration File (JSON).
3. Complete the steps in the instructions.
4. Select Finish Adding Connection.