Ctrlk
Book a demoOX Security
For the complete documentation index, see llms.txt. This page is also available as Markdown.

AWS Manual Connection

Use this method if your organization prefers to create and manage the IAM role and permissions manually instead of using the OX CloudFormation template.

In this method, you create the IAM role and policy in AWS, then connect the generated AWS Role ARN in OX.

Step 1: Create the IAM role [AWS]

  1. Sign in to the AWS Management Console.

  2. Open the IAM service.

  3. Create a new role.

  4. For Role type, select Another AWS account.

  5. Configure the role using the following values.

Setting
Value

Account ID

351456651185 (OX AWS account ID)

Require external ID

Enabled

External ID

External ID generated in the OX AWS connector

Require MFA

Disabled

  1. Select Next: Permissions.

Step 2: Create the IAM policy [AWS]

  1. Attach the following AWS managed policies:

    • ViewOnlyAccess

    • SecurityAudit

  2. Create the OX integration policy using the JSON policy provided below.

  3. Attach the OX integration policy to the role.

  4. Select Next: Tags.

  5. Select Next: Review.

  6. Configure the role.

Setting
Value

Role name

OxAWSIntegrationRole (recommended) or a custom name

Description

Optional

  1. Select Create role.

OX integration policy

When creating the OX integration policy, include the AWS managed policies listed above and add the following JSON policy.

Step 3: Connect AWS in OX [OX]

  1. In OX, go to Settings > Connectors.

  2. Select AWS.

  1. In the AWS Role ARN field, paste the copied Role ARN.

  2. Select Connect.

Verify that the connector status changes to Connected.

Last updated