> For the complete documentation index, see [llms.txt](https://docs.apono.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.apono.io/docs/aws-environment/aws-integrations/integrate-with-aws.md).
# Integrate with AWS
## Integrate with AWS
### Overview
* \*\* Reduce Over Privileges \*\*- Discover existing privileges to AWS roles, groups and services to convert to on-demand access flows to reduce over-privileges.
* \*\*Self Service Access \*\*- Empower your developers to gain self-servable access to AWS services, buckets, instances and more using Slack.
* \*\*Automated Approval Workflows \*\*- Create approval workflows to specific sensitive resources.
* \*\*Restricted Third Party Access \*\*- Grant third-party (customer or vendor) time-based access to specific S3 buckets, RDS or EC2 instances with MFA verification.
* **Review Access** - View a detailed access audit of who was granted access to which specific instances, buckets or other resources in AWS.
{% hint style="success" %}
Start Here
Great place to start! Follow these steps to integrating an AWS cloud account.
{% endhint %}
### Prerequisites
* Administrator permissions of the account you would like to connect.
### Connect an AWS Account
## In Apono
1. From the [Integration Catalog](https://app.apono.io/catalog), select **Connect Your AWS Account**
2. When clicking **Open Cloud Formation**, you will be redirected to the AWS sign in page in a new tab.
### In AWS
1. Sign in to your AWS user and click **Next**
2. Within the AWS create stack page, scroll down, tick the acknowledge box and then select **Create Stack**
*Apono integrates with AWS natively, using AWS CloudFormation as a standard mechanism to deploy all required configurations including a Cross Account Role with Read permission, a SNS notification message, and the Apono Connector that runs using an AWS ECS on Fargate.*
### Back to Apono
3. Validate you've integrated Apono by seeing the integration is active and synced [here](https://app.apono.io/catalog/connected?categories=Amazon+Web+Services).
{% hint style="success" %}
Hurray!
You've successfully integrated AWS with Apono. You can now create <\>s to AWS IAM resources like AWS Roles.
{% endhint %}
4. If you would like to use Apono to create Access Flows with resources like to S3 buckets, RDS databases or other AWS services you can easily connect them to Apono as well. Just select them from the [Integration Catalog](https://app.apono.io/catalog).
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.apono.io/docs/aws-environment/aws-integrations/integrate-with-aws.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.