Skip to navigation

AWS: Connect Source Accounts

Who can use this feature

Anyone with these permissions: Manage source connections

This article explains how to connect an AWS source account to Eon. You can connect as many source accounts as you need.

Connect a source account

You’ll start this procedure in the Source accounts > AWS accounts page by clicking New Connection and selecting Connect account.

You can connect an AWS account using either CloudFormation or Terraform.

Before you start

Before you connect your AWS account, make sure:

  • You can log in to the relevant AWS account with permissions to deploy CloudFormation stacks and perform the actions in Eon’s stack template.

  • You understand the permissions Eon needs in the account.

See AWS: Permissions Deployment Files for details on both of these points.

1

Log in to the source account

In a new tab, log in to your AWS account with permissions to deploy CloudFormation stacks. Make sure to use the same browser you’re logged into Eon with.

While you’re there, copy the AWS account ID so you can provide it to Eon in the next step.

2

Give Eon the source account details

Returning to the tab you have Eon opened in, paste the account ID in AWS account ID.

Leave Role Name as the default value. If, for some reason, you already have a role in your account called EonSourceAccountRole, you can set a different role name.

Click Launch CloudFormation in AWS. The AWS CloudFormation Quick create stack page opens in a new tab.

3

Deploy the role stack template

In the Quick create stack tab that opened, the form is pre-filled for your account’s configuration. Review the stack name and parameters.

Scroll to the bottom of the page and select the acknowledgement checkbox, then click Create stack.

The stack is deployed to your AWS account. Wait for about a minute until the status changes to CREATE_COMPLETE.

4

Confirm the stack was created

After the stack’s status changes to CREATE_COMPLETE, return to Eon and click Connect. Eon checks the account for the deployed permissions, and the new account is connected to Eon.

Eon now has read access to your AWS account and can start discovering resources.

See also