AWS is a cloud platform that is often used and therefore has high priority to governance customers. An AWS collector is needed.

Comments

  • AWS has some scripting tools, with which you could export the current users, groups, and roles. As a first step, use a script to export regularly to CSV and then collect the CSV's. (My company can help you do that, if you need it).

  • That's exactly what we currently do ... However, collecting natively from AWS is much more compelling.

  • Klaus, can you provide more details about what you expect to collect from AWS, and samples of scripts if you have them?

  • Kristen, please allow for some time to provide input ...

  • Kristen, users, groups, roles and direct and indirectly assigned permissions are currently most important. I do not own the scripts that are being used today.