AWS Manual Connection

Use this method if your organization prefers to create and manage the IAM role and permissions manually instead of using the OX CloudFormation template.

In this method, you create the IAM role and policy in AWS, then connect the generated AWS Role ARN in OX.

Step 1: Create the IAM role [AWS]

1. Sign in to the AWS Management Console.

2. Open the IAM service.

3. Create a new role.

4. For Role type, select Another AWS account.

5. Configure the role using the following values.

Setting	Value
Account ID	351456651185 (OX AWS account ID)
Require external ID	Enabled
External ID	External ID generated in the OX AWS connector
Require MFA	Disabled

1. Select Next: Permissions.

Step 2: Create the IAM policy [AWS]

1. Attach the following AWS managed policies:

   • ViewOnlyAccess

   • SecurityAudit

2. Create the OX integration policy using the JSON policy provided below.

3. Attach the OX integration policy to the role.

4. Select Next: Tags.

5. Select Next: Review.

6. Configure the role.

Setting	Value
Role name	OxAWSIntegrationRole (recommended) or a custom name
Description	Optional

1. Select Create role.

OX integration policy

When creating the OX integration policy, include the AWS managed policies listed above and add the following JSON policy.

<existing JSON policy>

Step 3: Connect AWS in OX [OX]

1. In OX, go to Settings > Connectors.

2. Select AWS.

1. In the AWS Role ARN field, paste the copied Role ARN.

2. Select Connect.

Verify that the connector status changes to Connected.