---
updatedAt: 2025-11-03T10:02:29.000Z
agentTools:
  projectIndex: https://help.zluri.com/llms.txt
---

# AWS Identity Center

This guide explains how to connect an **AWS account** to **Zluri** using a custom IAM role and secure access delegation.

## Prerequisites

* Administrator access to the **AWS Management Console**
* Permission to create and assign **IAM roles**
* Access to **AWS Organizations**, **SSO**, and **IAM Identity Center**

## Step 1: Log in to AWS Console

1. Sign in to the [AWS Management Console](https://aws.amazon.com/console/).

   <Image align="center" border={false} src="https://files.readme.io/896fe5b2ce1ed33fcae830267285bea7d0fcf1616d4c1ce921c943662364e772-AWSStep1.png" />

## Step 2: Navigate to IAM

1. From the AWS home page, open the **Services** menu.
2. Select **IAM** to open the Identity and Access Management dashboard.

   <Image align="center" border={false} src="https://files.readme.io/1a78da0c5d80d16b30df4f44dda0b7e1516b1b174af4a0471f31fab0740be5e0-AWSStep2.png" />

## Step 3: Create a New IAM Role

1. In the IAM console, select **Roles** from the left navigation pane.
2. Click **Create role**.

   <Image align="center" border={false} src="https://files.readme.io/ee709075e34e471435e772f4e6528f3e2ef3602a3c1bc03deb49fa2c81bcb6bc-Screenshot_2025-10-31_at_4.20.40_PM.png" />

## Step 4: Select the Trusted Entity Type

1. On the **Trusted entity type** screen, select **AWS account**.

   <Image align="center" border={false} src="https://files.readme.io/ee6d4cf9968978fa8e84dba4a4edb5c34c0b471e73c276775ab1f47b41ac8f6c-AWS_4.png" />

## Step 5: Configure Trusted Entity Details

1. Select **Another AWS account** as the trusted entity type.
2. Enter the **Zluri AWS Account ID**:\
   `908321198367`

   <Image align="center" border={false} src="https://files.readme.io/f9731fc528dbd3f0c1668b6966c7450c06eb02657c491c0b505bc0636a913e16-AWS_5.png" />
3. Under **Options**, enable **Require external ID**.
4. Enter an **External ID**.
   * Use the same value on the AWS integration page in Zluri.
5. Click **Next**.

## Step 6: Attach Required Policies

1. On the **Permissions** page, attach the following policies:
   * `AWSOrganizationsReadOnlyAccess`
   * `AWSSSOReadOnly`
   * `AWSSSODirectoryReadOnly`
2. Click **Next**.

   <Image align="center" border={false} src="https://files.readme.io/033bc348da80aced9ed25c42b18ee88151a7d9d53cc41f3f3c9d5142eb579306-AWS6.png" />

## Step 7: Review and Create the Role

1. On the **Review** screen, set the **Role Name** to:\
   `Zluri_AWS_Integration_IDC`
2. Review all settings and click **Create role**.

## Step 8: Retrieve Role Details

1. Open the newly created role.
2. In the **Role Summary** page, copy the **Role ARN**.
3. Paste this value into Zluri under **Role ARN**.

## Step 9: Verify the External ID

1. In the **Trust relationships** tab, locate the **External ID** configured for Zluri.
2. Ensure it matches the ID used in Zluri’s integration setup.

   <Image align="center" border={false} src="https://files.readme.io/da78e887a97c0530be1312f9ee94af459d93867ae7612f6d12886a58ebbeb595-Screenshot_2025-10-31_at_4.23.34_PM.png" />

## Step 10: Retrieve the Identity Store ID

1. Navigate to **AWS IAM Identity Center → Settings**.
2. Copy the **Identity Store ID**.
3. Use this value in Zluri under **Identity Store ID**.

   <Image align="center" border={false} src="https://files.readme.io/59b52bcd7ce38b8e98e367d289084d8e1df2e6ac4a92eaf05398662a14b1ec17-Screenshot_2025-10-31_at_4.23.42_PM.png" />

## Step 11: Select AWS Region

1. Identify the **AWS Region** where the organization’s resources are managed.
2. Enter the same region in Zluri’s integration configuration.

## Step 12: Define the External ID Format

When creating the **External ID**, only the following characters are supported:

> `a-z`, `A-Z`, `0-9`, `_`, `+`, `=`, `,`, `.`, `@`, `:`, `/`, `-`

## Step 13: Complete the Integration in Zluri

1. Log in to **Zluri**.
2. Navigate to **Sources → Integrations → AWS**.
3. Enter the following details in the integration form:
   * **Role ARN** (from Step 8)
   * **External ID** (from Step 9)
   * **Identity Store ID** (from Step 10)
   * **Region** (from Step 11)
4. Click **Connect** to finalize the setup.

**Integration Complete**

Zluri now has secure, read-only access to the AWS account for data monitoring and analysis.