Skip to main content

Overview

Connect to AWS by using an IAM user’s access key to assume the IAM role you specify.

Configuring AWS Access

Before creating the connection, make sure:
  1. You have an IAM user or IAM principal that can call sts:AssumeRole.
  2. You have an IAM role with the permissions you want to use.
  3. That role’s trust policy allows that principal to assume it.
  4. If you use third-party-style cross-account protection, you have the ExternalId value ready for the connection.

Connect In Mistle

Open Integrations in the dashboard, choose AWS, then select Access key + AssumeRole. Enter:
FieldValue
accessKeyIdIAM user access key ID
secretAccessKeyIAM user secret access key
roleArnRole ARN that Mistle should assume
externalIdOptional external ID if your trust policy requires one
durationSecondsOptional STS session duration between 900 and 43200

Official References