Amazon Account

Integrate a specific account and its resources

Example Terraform Resource Usage

---

resource "apono_integration" "aws-account-integration" {
  name                     = "Amazon Account"
  type                     = "aws-account"
  connector_id             = "apono-connector-id"
  connected_resource_types = ["resource-type-1", "resource-type-2"]
  metadata = {
    region = "<Region>"
    profile = "<AWS Profile Name (Optional)>"
    credentials_rotation_period_in_days = "<Credentials rotation period (in days)>"
    credentials_cleanup_period_in_days = "<User cleanup after access is revoked (in days)>"
    enable_audit = "<Enable Audit>"
  }
}

Schema

---

• type aws-account

• connected_resource_types List of resource types to sync. The following are the available resource type/s you can use:

  • aws-account

  • aws-account-s3

  • aws-account-s3-bucket

  • aws-account-s3-folder

  • aws-account-iam

  • aws-account-iam-group

  • aws-account-iam-policy

  • aws-account-iam-role

  • aws-account-region

  • aws-account-systems-manager

  • aws-account-systems-manager-parameter-store

  • aws-account-systems-manager-parameter-store-param

  • aws-account-ec2

  • aws-account-ec2-loadbalancer

  • aws-account-ec2-instance

  • aws-account-ec2-service

  • aws-account-rds-instance

  • aws-account-eks-cluster

  • aws-account-ecr

  • aws-account-ecr-repository

  • aws-account-ecs

  • aws-account-ecs-cluster

  • aws-account-sagemaker

  • aws-account-sagemaker-notebook

  • aws-account-lambda

  • aws-account-lambda-function

  • aws-account-secrets-manager

  • aws-account-secrets-manager-secret

  • aws-account-sqs

  • aws-account-sqs-queue

  • aws-account-sns

  • aws-account-sns-topic

  • aws-account-dynamodb

  • aws-account-dynamodb-table

  • aws-account-cloudformation

  • aws-account-cloudformation-stack

  • aws-account-cloudformation-stackset

  • aws-account-kms

  • aws-account-kms-key

  • aws-account-emr

  • aws-account-emr-cluster

  • aws-account-acm

  • aws-account-acm-certificate

  • aws-account-ses

  • aws-account-route53

  • aws-account-route53-hostedzone

  • aws-account-cognito

  • aws-account-elasticache

Metadata

• region (Required | String) Region

  • Possible values: us-east-1, us-east-2, us-west-1, us-west-2, eu-central-1, eu-central-2, eu-west-1, eu-west-2, eu-south-1, eu-south-2, eu-west-3, eu-north-1, af-south-1, ap-east-1, ap-southeast-3, ap-southeast-4, ap-southeast-5, ap-southeast-7, ap-south-1, ap-south-2, ap-northeast-3, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-northeast-1, ca-central-1, ca-west-1, me-south-1, me-central-1, sa-east-1, il-central-1, mx-central-1

• profile (Required | String) AWS Profile Name (Optional)

  • Default value: apono

• credentials_rotation_period_in_days (Optional | String) Credentials rotation period (in days)

• credentials_cleanup_period_in_days (Optional | String) User cleanup after access is revoked (in days)

• enable_audit (Optional | String) Enable Audit

  • Default value: false

  • Possible values: true, false