# Create Bundles

**Bundles** allow admins to manage access to integrations, roles, resources, and access scopes by grouping them together.

Bundles offer you the following benefits:

* Streamline the access request process for users
* Integrate easily with existing [access flows](https://docs.apono.io/docs/access-flows/access-flows)
* Minimize administrative overhead through centralized management

***

### Prerequisite

<table><thead><tr><th width="202">Item</th><th>Description</th></tr></thead><tbody><tr><td><strong>Cloud Resources</strong></td><td><p>One or more resources in a cloud platform that has been integrated with Apono<br><br>If you have not already, integrate Apono with a cloud platform to control access to its resources:</p><ul><li><a href="../aws-environment/aws-integrations">AWS integrations</a></li><li><a href="../azure-environment/azure-integrations">Azure integrations</a></li><li><a href="../gcp-environment/gcp-integrations">GCP integrations</a></li><li><a href="../kubernetes-environment/kubernetes-integrations">Kubernetes integrations</a></li></ul></td></tr></tbody></table>

***

### Create a bundle

<figure><img src="https://1094436629-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fv6MBfUGvblSdAz31yJXm%2Fuploads%2Fgit-blob-ba7eccdc0d5eb7a23a7c912cd308753017c0dfc4%2F2024-08-12_16-53-49.png?alt=media" alt="" width="563"><figcaption><p><em>Create Bundle page</em></p></figcaption></figure>

Follow these steps to create a bundle from the Apono admin portal:

1. On the [**Bundles**](https://app.apono.io/bundles) page, click **Create Bundle**. The **Create Bundle** page appears.

{% hint style="success" %}
If [Space Management](https://docs.apono.io/docs/user-administration/space-management) is enabled, select a space from the space selector at the top of the page to create a space-specific bundle.

If no space is selected, the bundle will be created at the global account level.
{% endhint %}

2. Enter a **Bundle Name**.

{% hint style="success" %}
This name will identify the bundle on the **Bundles** page and when [creating access flows](https://docs.apono.io/docs/access-flows/creating-access-flows-in-apono).
{% endhint %}

3. Click **Select target**. The **Select target type** menu appears.
4. Select the target type.

{% hint style="info" %}
If you are creating a bundle within a space, **only space-specific access scopes** can be used to define the bundle’s resources.
{% endhint %}

<details>

<summary>Access Scope</summary>

1. Select **Access Scope**. The **Select access scope** menu appears.

{% hint style="success" %}
You may enter keywords into the search bar to locate an access scope.
{% endhint %}

2. (Optional) Click <img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf6tv7vrABRqb_3sHCQCkp-gGx-9GBQoWehtQXr2GjwUAv4jEwSuTan9BsckFs_R3hKm1zWb86-4gCVU2AUtQspUPRizHDEtlXAPc1m_OyItAOugW6buj8hpUTBGTjgccmKsyn-tQ?key=A4EZtKjLdP_MEnXmQA_WQ-Ky" alt="" data-size="line"> (eye icon) to preview the contents of the access scope in a popup window.
3. Select an access scope. The menu closes.

</details>

<details>

<summary>Integrations</summary>

1. Select **Integrations**. The **Select integration** menu appears.

{% hint style="success" %}
You may enter keywords into the search bar to locate an integration.
{% endhint %}

2. Select an integration. The **Select resource type** menu appears with integration-specific resource types.
3. Select a resource type.
4. Click **Done**.
5. Click **permissions**. The **Permissions** menu appears.
6. Select one or more roles to grant the requester.
7. (Optional) Refine the available resources:
   1. Click in the populated **to** field. A list of resources appears.
   2. Select one or several resources.

{% hint style="info" %}
By default, the user has access to **Any resources**. However, the following options allow you to define access more granularly:

* **Any resources except specific**
* **Select by name**
* **Select by tags**

To ensure you do not exceed the AWS inline policy character limit, read [AWS Limitations](https://docs.apono.io/docs/aws-environment/aws-integrations/integrate-an-aws-account-or-organization/aws-best-practices) when creating bundles with AWS resources.
{% endhint %}

8. (Optional) Change the integration:
   1. Click in the populated **from** field. A list of integrations with the available resources appears.
   2. Select an integration.

</details>

5. (Optional) Add another access target:
   1. Click **+** at the end of the row. A new target row appears. \[**NOTE**: You can also press <img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdgCtitfwMmw4mwsSFI7fdMw2QQP4binSZBGySkdt62yC56ZDOnQKjX1XPusZGpe3fpZf0uVhwO_3ZWPLReqsZPAc_rOfzBfbQB6MPF0o-1_M0z18hTxjAyyg46xgJLIh6_YZ1m9w?key=A4EZtKjLdP_MEnXmQA_WQ-Ky" alt="" data-size="line"> (copy icon) to duplicate the row.]
   2. Repeat steps **3-5**.
6. Click **Create Bundle**. The new bundle appears on the **Bundles** page.

After creating a bundle, you can [add the bundle to an access flow](#add-a-bundle-to-an-access-flow).

***

### Add a bundle to an access flow

<figure><img src="https://1094436629-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fv6MBfUGvblSdAz31yJXm%2Fuploads%2Fgit-blob-490a9ed769221a57298a4e064f32378547b91720%2F2024-08-19_09-41-57.png?alt=media" alt="" width="563"><figcaption><p><em>Selecting an access target</em></p></figcaption></figure>

After [creating a bundle](#create-a-bundle), you can incorporate the bundle into an access flow to streamline access requests.

Follow these steps to add a bundle to an access flow:

1. Define the permitted requesters for the bundle ([ Self Serve ](https://docs.apono.io/docs/creating-access-flows-in-apono/self-serve-access-flows#define-permitted-requestors)| [Automatic ](https://docs.apono.io/docs/creating-access-flows-in-apono/automatic-access-flows#define-permitted-users)).
2. Define access to the bundle ([ Self Serve ](https://docs.apono.io/docs/creating-access-flows-in-apono/self-serve-access-flows#bundles)| [Automatic ](https://docs.apono.io/docs/creating-access-flows-in-apono/automatic-access-flows#bundles)).
3. (Self Serve only) [Set the access duration ](https://docs.apono.io/docs/creating-access-flows-in-apono/self-serve-access-flows#set-the-duration-of-access)of the bundle.
4. Click **Create Access Flow** (Self Serve) or **Review and Create > Create and Grant** (Automatic).

After adding the bundle to an access flow, end users will be able to request access to the bundle in [Slack](https://docs.apono.io/docs/access-requests-and-approvals/slack/requesting-access-with-slack), [Teams](https://docs.apono.io/docs/access-requests-and-approvals/teams/requesting-access-with-teams), [CLI](https://docs.apono.io/docs/access-requests-and-approvals/cli/requesting-access-with-cli), or the [Apono User Portal ](https://docs.apono.io/docs/access-requests-and-approvals/web-portal/requesting-access-with-web-portal).