# Create Bundles

**Bundles** allow admins to manage access to integrations, roles, resources, and access scopes by grouping them together.

Bundles offer you the following benefits:

* Streamline the access request process for users
* Integrate easily with existing [access flows](/docs/access-flows/access-flows.md)
* Minimize administrative overhead through centralized management

***

### Prerequisite

<table><thead><tr><th width="202">Item</th><th>Description</th></tr></thead><tbody><tr><td><strong>Cloud Resources</strong></td><td><p>One or more resources in a cloud platform that has been integrated with Apono<br><br>If you have not already, integrate Apono with a cloud platform to control access to its resources:</p><ul><li><a href="/pages/XnEdLdWUhsNqPBJJwaQU">AWS integrations</a></li><li><a href="/pages/T88Xlh1cOFcLTKsgCUeX">Azure integrations</a></li><li><a href="/pages/oAecduSreroNg11JU6uw">GCP integrations</a></li><li><a href="/pages/L6TxTfv7la9gqSsv8eFG">Kubernetes integrations</a></li></ul></td></tr></tbody></table>

***

### Create a bundle

<figure><img src="/files/fBpllzCiPSP6Lm0dLfI1" alt="" width="563"><figcaption><p><em>Create Bundle page</em></p></figcaption></figure>

Follow these steps to create a bundle from the Apono admin portal:

1. On the [**Bundles**](https://app.apono.io/bundles) page, click **Create Bundle**. The **Create Bundle** page appears.

{% hint style="success" %}
If [Space Management](/docs/user-administration/space-management.md) is enabled, select a space from the space selector at the top of the page to create a space-specific bundle.

If no space is selected, the bundle will be created at the global account level.
{% endhint %}

2. Enter a **Bundle Name**.

{% hint style="success" %}
This name will identify the bundle on the **Bundles** page and when [creating access flows](/docs/access-flows/creating-access-flows-in-apono.md).
{% endhint %}

3. Click **Select target**. The **Select target type** menu appears.
4. Select the target type.

{% hint style="info" %}
If you are creating a bundle within a space, **only space-specific access scopes** can be used to define the bundle’s resources.
{% endhint %}

<details>

<summary>Access Scope</summary>

1. Select **Access Scope**. The **Select access scope** menu appears.

{% hint style="success" %}
You may enter keywords into the search bar to locate an access scope.
{% endhint %}

2. (Optional) Click <img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf6tv7vrABRqb_3sHCQCkp-gGx-9GBQoWehtQXr2GjwUAv4jEwSuTan9BsckFs_R3hKm1zWb86-4gCVU2AUtQspUPRizHDEtlXAPc1m_OyItAOugW6buj8hpUTBGTjgccmKsyn-tQ?key=A4EZtKjLdP_MEnXmQA_WQ-Ky" alt="" data-size="line"> (eye icon) to preview the contents of the access scope in a popup window.
3. Select an access scope. The menu closes.

</details>

<details>

<summary>Integrations</summary>

1. Select **Integrations**. The **Select integration** menu appears.

{% hint style="success" %}
You may enter keywords into the search bar to locate an integration.
{% endhint %}

2. Select an integration. The **Select resource type** menu appears with integration-specific resource types.
3. Select a resource type.
4. Click **Done**.
5. Click **permissions**. The **Permissions** menu appears.
6. Select one or more roles to grant the requester.
7. (Optional) Refine the available resources:
   1. Click in the populated **to** field. A list of resources appears.
   2. Select one or several resources.

{% hint style="info" %}
By default, the user has access to **Any resources**. However, the following options allow you to define access more granularly:

* **Any resources except specific**
* **Select by name**
* **Select by tags**

To ensure you do not exceed the AWS inline policy character limit, read [AWS Limitations](/docs/aws-environment/aws-integrations/integrate-an-aws-account-or-organization/aws-best-practices.md) when creating bundles with AWS resources.
{% endhint %}

8. (Optional) Change the integration:
   1. Click in the populated **from** field. A list of integrations with the available resources appears.
   2. Select an integration.

</details>

5. (Optional) Add another access target:
   1. Click **+** at the end of the row. A new target row appears. \[**NOTE**: You can also press <img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdgCtitfwMmw4mwsSFI7fdMw2QQP4binSZBGySkdt62yC56ZDOnQKjX1XPusZGpe3fpZf0uVhwO_3ZWPLReqsZPAc_rOfzBfbQB6MPF0o-1_M0z18hTxjAyyg46xgJLIh6_YZ1m9w?key=A4EZtKjLdP_MEnXmQA_WQ-Ky" alt="" data-size="line"> (copy icon) to duplicate the row.]
   2. Repeat steps **3-5**.
6. Click **Create Bundle**. The new bundle appears on the **Bundles** page.

After creating a bundle, you can [add the bundle to an access flow](#add-a-bundle-to-an-access-flow).

***

### Add a bundle to an access flow

<figure><img src="/files/ZUpOQmt42vsl0M4oXUS4" alt="" width="563"><figcaption><p><em>Selecting an access target</em></p></figcaption></figure>

After [creating a bundle](#create-a-bundle), you can incorporate the bundle into an access flow to streamline access requests.

Follow these steps to add a bundle to an access flow:

1. Define the permitted requesters for the bundle ([ Self Serve ](/docs/access-flows/creating-access-flows-in-apono/self-serve-access-flows.md#define-permitted-requestors)| [Automatic ](/docs/access-flows/creating-access-flows-in-apono/automatic-access-flows.md#define-permitted-users)).
2. Define access to the bundle ([ Self Serve ](/docs/access-flows/creating-access-flows-in-apono/self-serve-access-flows.md#bundles)| [Automatic ](/docs/access-flows/creating-access-flows-in-apono/automatic-access-flows.md#bundles)).
3. (Self Serve only) [Set the access duration ](/docs/access-flows/creating-access-flows-in-apono/self-serve-access-flows.md#set-the-duration-of-access)of the bundle.
4. Click **Create Access Flow** (Self Serve) or **Review and Create > Create and Grant** (Automatic).

After adding the bundle to an access flow, end users will be able to request access to the bundle in [Slack](/docs/access-requests-and-approvals/slack/requesting-access-with-slack.md), [Teams](/docs/access-requests-and-approvals/teams/requesting-access-with-teams.md), [CLI](/docs/access-requests-and-approvals/cli/requesting-access-with-cli.md), or the [Apono User Portal ](/docs/access-requests-and-approvals/web-portal/requesting-access-with-web-portal.md).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.apono.io/docs/access-flows/create-bundles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
