AWS IAM Integration Guide

Overview

The AWS IAM integration enables Adoptech to automatically collect identity and access management information from your AWS environment.

Once connected, Adoptech imports users, groups, roles and permission assignments to support access reviews, privileged access monitoring and compliance evidence collection.

This integration helps organisations:

• Maintain visibility of AWS identities and permissions
• Support periodic access reviews
• Identify privileged accounts and role assignments
• Demonstrate compliance with access control requirements
• Generate audit-ready evidence automatically

Prerequisites

Before configuring the integration, ensure you have:

• An active AWS account
• IAM administrative permissions
• Permission to create API access keys
• Access to the AWS Management Console

What Data We Collect

Once connected, Adoptech retrieves read-only IAM information including:

• IAM users
• IAM groups
• IAM roles
• Role assignments
• Group memberships
• Access policies
• Permission assignments
• Account metadata

Adoptech does not make changes to your AWS environment.

What We Use the Data For

The imported IAM data is used to:

• Support access reviews
• Identify privileged accounts
• Monitor user and role assignments
• Verify access control processes
• Generate compliance evidence
• Support audit preparation activities

Before you get started you need the following:

The following configuration items are required to integrate AWS S3 with Adoptech:

• AWS API access key
• AWS API secret key
• AWS API region

How to Configure the Integration

1. Go to the Apps and Integrations page in the Adoptech portal.
   
   
2. On the Apps and Integrations page, find AWS IAM click Get Started and Connect:
   
   
   
3. Enter the credentials and select Connect
   
    
   
   
4. Once Connected you will be shown a list of available tests and be able to enable appropriate tests for your business
   
   
   

How the Integration Works

Adoptech securely connects to AWS using the supplied API credentials.

IAM information is retrieved on a scheduled basis and mapped to controls, checks and tests within the platform.

All collected information is stored as evidence to support security reviews and audits.

Sync Frequency

IAM data is synchronised regularly throughout the day.

This includes:

• New users
• New roles
• Permission changes
• Group membership changes

Security & Data Privacy

The AWS IAM integration uses read-only access.

Adoptech:

• Cannot create users
• Cannot modify permissions
• Cannot change policies
• Cannot alter your AWS environment

All data is encrypted in transit and at rest.