Connect AWS

Connect AWS, Microsoft, or both on the Connect the services you use screen. AWS is shown beside Microsoft, without opening an optional menu.

  1. Enter the 12-digit AWS account ID and choose Connect AWS.
  2. In the AWS window, sign in to that account as an administrator authorized to create the evidence role. Review the prefilled CloudFormation setup, acknowledge the IAM permissions and choose Create stack.
  3. Return to Aevyra. It verifies the approved role and marks AWS connected automatically. Choose Show my results to start collection.

There are no policies, external IDs or role ARNs to copy. Each workspace receives a separate role, including when the same AWS account is connected to several workspaces.

If approval takes longer

Leave Aevyra open while AWS finishes. Refreshing the page resumes the approval check for up to 20 minutes. Choose Open AWS approval again if you need another window. After the window expires, choosing Connect AWS checks any completed setup before opening another approval.

If AWS reports that the stack already exists and Aevyra is still waiting, check the stack status and your AWS account. Complete or repair that stack in CloudFormation, then retry in Aevyra. A failed stack may need to be deleted before retrying; an AWS administrator should review its resources first.

Reviewing access

An existing connection shows Review AWS access. If an updated evidence policy needs another approval, Aevyra creates a new role for that policy version and keeps the existing connection usable until the new role passes verification. Old approved roles are not deleted automatically; your AWS administrator can remove retired Aevyra stacks after confirming that no workspace uses them.

Scope

The setup creates one IAM evidence role. It does not enable Inspector, Security Hub, Config recording, logging or other paid collection services. Available evidence depends on your account, region, existing services and authorized read permissions. The report shows gaps where evidence is unavailable.

If Aevyra says AWS setup is temporarily unavailable, contact the Aevyra operator. Provider hosting must be ready before new AWS connections can be approved.