Create Bundles

Learn how to group integrations, roles, resources, and access scopes together from the Apono UI

Bundles allow admins to manage access to integrations, roles, resources, and access scopes by grouping them together.

Bundles offer you the following benefits:

• Streamline the access request process for users

• Integrate easily with existing access flows

• Minimize administrative overhead through centralized management

---

Prerequisite

Item	Description
Cloud Resources	One or more resources in a cloud platform that has been integrated with Apono If you have not already, integrate Apono with a cloud platform to control access to its resources: AWS integrations Azure integrations GCP integrations Kubernetes integrations

---

Create a bundle

Create Bundle page

Follow these steps to create a bundle from the Apono admin portal:

1. On the Bundles page, click Create Bundle. The Create Bundle page appears.
2. Enter a Bundle Name.

This name will identify the bundle on the Bundles page and when creating access flows.

1. Click Select target. The Select target type menu appears.

2. Select the target type.

Access Scope

1. Select Access Scope. The Select access scope menu appears.

You may enter keywords into the search bar to locate an access scope.

1. (Optional) Click (eye icon) to preview the contents of the access scope in a popup window.
2. Select an access scope. The menu closes.

Integrations

1. Select Integrations. The Select integration menu appears.

You may enter keywords into the search bar to locate an integration.

1. Select an integration. The Select resource type menu appears with integration-specific resource types.

2. Select a resource type.

3. Click Done.

4. Click permissions. The Permissions menu appears.

5. Select one or more roles to grant the requester.

6. (Optional) Refine the available resources:

   1. Click in the populated to field. A list of resources appears.

   2. Select one or several resources.

By default, the user has access to Any resources. However, the following options allow you to define access more granularly:

• Any resources except specific

• Select by name

• Select by tags

To ensure you do not exceed the AWS inline policy character limit, read AWS Limitations when creating bundles with AWS resources.

1. (Optional) Change the integration:

   1. Click in the populated from field. A list of integrations with the available resources appears.

   2. Select an integration.

1. (Optional) Add another access target:

   1. Click + at the end of the row. A new target row appears. &#xNAN;NOTE: You can also press (copy icon) to duplicate the row.
   2. Repeat steps 3-5.

2. Click Create Bundle. The new bundle appears on the Bundles page.

After creating a bundle, you can add the bundle to an access flow.

---

Add a bundle to an access flow

Selecting an access target

After creating a bundle, you can incorporate the bundle into an access flow to streamline access requests.

Follow these steps to add a bundle to an access flow:

1. Define the permitted requesters for the bundle ( Self Serve | Automatic ).
2. Define access to the bundle ( Self Serve | Automatic ).
3. (Self Serve only) Set the access duration of the bundle.
4. Click Create Access Flow (Self Serve) or Review and Create > Create and Grant (Automatic).

After adding the bundle to an access flow, end users will be able to request access to the bundle in Slack, Teams, CLI, or the Apono User Portal .