AWS

This feature is in Early Release/BETA. Please contact your Epiphany Systems support or sales contact to learn more.

About This Document

This guide details the steps necessary to connect AWS to the Epiphany Intelligence Platform. The Epiphany Intelligence Platform leverages data from AWS to provide greater visibility into the network exposure, permission boundaries, and privilege use in your environment.

Overview

AWS allows API access by virtue of an access key, which can be created in the Management Console by an admin user. The permissions granted to the API key will be limited to those of the user associated to that key.

The Epiphany Intelligence Platform requires the Programmatic-Access credential type to the AWS API, which is a default access type within the system when adding a new user. It will also primarily need the Security Audit permission policy for IAM data points and other policies to collect network data points.

Version Compatibility

• Epiphany Site Collector: Version 1.0 and later.

• AWS: The most recent AWS architecture.

Prerequisites

• Access to the AWS Management Console

• Ability to create a new user with programmatic access key

What is Needed For Integration

• The Access Key ID

• The Secret Access Key

• The Account Region

Legal Notice