Skip to content

Commit 4e160c1

Browse files
CSOAR-3365: added IAM info
1 parent d2cddd9 commit 4e160c1

File tree

6 files changed

+41
-0
lines changed

6 files changed

+41
-0
lines changed

docs/platform-services/automation-service/app-central/integrations/aws-cloudtrail.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,7 @@ import IntegrationEngine from '../../../../reuse/automation-service/integration-
3939
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
4040
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
4141
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
42+
import IAMConfiguration from '../../../../reuse/automation-service/iam-configuration.md';
4243

4344
<IntegrationsAuth/>
4445

@@ -56,6 +57,8 @@ import IntegrationTimeout from '../../../../reuse/automation-service/integration
5657

5758
<IntegrationsAuthAWS/>
5859

60+
<IAMConfiguration/>
61+
5962
For information about AWS CloudTrail, see [CloudTrail documentation](https://docs.aws.amazon.com/cloudtrail/).
6063

6164
## Change Log

docs/platform-services/automation-service/app-central/integrations/aws-route53.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,7 @@ import IntegrationEngine from '../../../../reuse/automation-service/integration-
3737
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
3838
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
3939
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
40+
import IAMConfiguration from '../../../../reuse/automation-service/iam-configuration.md';
4041

4142
<IntegrationsAuth/>
4243

@@ -53,6 +54,8 @@ import IntegrationTimeout from '../../../../reuse/automation-service/integration
5354

5455
<IntegrationsAuthAWS/>
5556

57+
<IAMConfiguration/>
58+
5659
For information about AWS Route 53, see [Route 53 documentation](https://docs.aws.amazon.com/route53/).
5760

5861
## Change Log

docs/platform-services/automation-service/app-central/integrations/aws-s3.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,7 @@ import IntegrationEngine from '../../../../reuse/automation-service/integration-
4141
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
4242
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
4343
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
44+
import IAMConfiguration from '../../../../reuse/automation-service/iam-configuration.md';
4445

4546
<IntegrationsAuth/>
4647

@@ -57,6 +58,8 @@ import IntegrationTimeout from '../../../../reuse/automation-service/integration
5758

5859
<IntegrationsAuthAWS/>
5960

61+
<IAMConfiguration/>
62+
6063
## Change Log
6164

6265
* October 3, 2019 - First upload

docs/platform-services/automation-service/app-central/integrations/aws-simple-notification-service.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,7 @@ import IntegrationEngine from '../../../../reuse/automation-service/integration-
3434
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
3535
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
3636
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
37+
import IAMConfiguration from '../../../../reuse/automation-service/iam-configuration.md';
3738

3839
<IntegrationsAuth/>
3940

@@ -51,6 +52,8 @@ import IntegrationTimeout from '../../../../reuse/automation-service/integration
5152

5253
<IntegrationsAuthAWS/>
5354

55+
<IAMConfiguration/>
56+
5457
For information about Amazon Simple Notification Service, see [Amazon Simple Notification Service documentation](https://docs.aws.amazon.com/sns/).
5558

5659
## External Libraries

docs/platform-services/automation-service/app-central/integrations/aws-sqs.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,7 @@ import IntegrationEngine from '../../../../reuse/automation-service/integration-
3737
import IntegrationLabel from '../../../../reuse/automation-service/integration-label.md';
3838
import IntegrationProxy from '../../../../reuse/automation-service/integration-proxy.md';
3939
import IntegrationTimeout from '../../../../reuse/automation-service/integration-timeout.md';
40+
import IAMConfiguration from '../../../../reuse/automation-service/iam-configuration.md';
4041

4142
<IntegrationsAuth/>
4243

@@ -52,6 +53,8 @@ import IntegrationTimeout from '../../../../reuse/automation-service/integration
5253

5354
<IntegrationsAuthAWS/>
5455

56+
<IAMConfiguration/>
57+
5558
For information about AWS SQS, see [SQS documentation](https://docs.aws.amazon.com/sqs/).
5659

5760
## Change Log
Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
### AWS IAM Role-Based Access Guide
2+
3+
To enable AWS IAM Role-based authentication without sharing their Access/Secret keys, follow the steps below.
4+
5+
---
6+
7+
#### Customer-Side Configuration
8+
9+
1. **Create an IAM Role** in AWS account.
10+
2. **Attach Required Policies** to the role depending on the AWS services they want to allow access to (e.g., `AmazonEC2ReadOnlyAccess`, `AWSWAFFullAccess`, etc.).
11+
3. **Update the Trust Policy** to allow your product's AWS account to assume this role.
12+
13+
Example Trust Policy:
14+
```json
15+
{
16+
"Version": "2012-10-17",
17+
"Statement": [
18+
{
19+
"Effect": "Allow",
20+
"Principal": {
21+
"AWS": "arn:aws:iam::<sumo-account-id>:root"
22+
},
23+
"Action": "sts:AssumeRole"
24+
}
25+
]
26+
}

0 commit comments

Comments
 (0)