Note: It may take up to 15 mins to add your AWS Cloud Account in Cloudnosys.

Prerequisites #

Before you set up your AWS Cloud Account on Cloudnosys, you need to have:

• An account on Cloudnosys (https://cloudnosys.com/docs/sign-up/)
• An AWS Cloud Account
• Permission to create service accounts
• Permission to deploy stack set and CFTs

1. Begin Setup #

1. Navigate to the Cloud Accounts dashboard and click on the Add Account button.

   

2. Select Amazon Web Services from the Select your Cloud Account Provider page.

   

3. Enter a valid string in the AWS Account Name field. You can input any name here.

   

4. Select the regions that you want to protect your resources from, if you are not sure, then choose, select all (Recommended).

   

5. Click on Next and you’ll see the following page:

   

6. If you already have a Role ARN, then insert Role ARN and skip the next section completely. Otherwise, continue.

2. Get a Role ARN #

1. For the ARN, log into your AWS console in a new tab or click here to go to your AWS console and then go to IAM.

   

2. Navigate to Roles in the IAM console and click on the Create Role button.

   

3. Select AWS account, check the Another AWS Account button, and Require external ID checkbox, as shown in the picture below.

   

4. Navigate back to the Cloudnosys Console tab, and copy the AWS Account ID and External ID.
   
   
   
5. Paste them into the Account ID and External ID fields in your AWS console shown above in Step 3. And then click on the Next button.

   Note: Do not refresh the Cloudnosys tab at this point, because External ID changes every time the page is refreshed.
   
   

6. On the next screen that appears, click on the Create Policy button.

   

7. This will open a new tab with the AWS Create Policy screen. Do NOT close the previous tab yet.
   

   

8. Navigate back to your Cloudnosys tab and select your desired policy out of the two given policies, by clicking on either of them.

   Cloudnosys provides two types of Policies:
   – Full Protection Policy (Full-Access) – Provides Remediation [RECOMMENDED]
   – Security and Audit Policy (Read-Only) – Does not provide Remediation

   

9. After deciding on the desired policy, click on the corresponding policy’s View Policy button. This will pop open a modal showing the policy in JSON format. Click on the Copy Policy button to copy it.

   

10. Go back to the Create Policy page and paste it into the JSON editor – you can overwrite what is already written there. Then click on the Next: Tags button.
    

    

     

11. Click on the Next: Review button.
    
    
    
    
12. On the Review Policy page that appears, enter your Policy name and description, and then click on Create Policy.

    
    
    

13. Navigate back to the AWS Console tab where the Create Role page is opened. Refresh the tab.
    
    
    
14. Search for the policy you just created and select it. Then click on Next.

    

15. On the next screen, finally, name the role and click on Create Role.

     

16. This would successfully create your IAM Role, generate a Role ARN, and take you to the Roles page.

    

17. Locate your Role name, click on it, and it will open up your role Summary – displaying your Role ARN near the top of the summary. Copy the Role ARN and then navigate back to the Cloudnosys Console tab.
    

3. Complete setting up #

1. Paste the Role ARN into the ARN field shown below.

   

2. Complete the setup by clicking Test Connection and you have set up your AWS Cloud Account!

   

Congratulations! You’re all set to get insight into the risks & vulnerabilities in your AWS account/(s) and protect your environment.

What’s Next… #

As you configure your AWS account with Cloudnosys, we highly recommend you implement the following advanced features to get the most comprehensive protection of your environment:

• EagleEye (Real-time threat detection)
  https://cloudnosys.com/docs/eagleeye-live-monitoring-setup/
  
• Cloudxray (Malwares & OS Scanning)
  https://cloudnosys.com/docs/cloud-xray/