Access Key & Secret Key
Connect your AWS account using IAM user access keys.
AWS
Connect and manage your Amazon Web Services account.
2 minute read
Connecting your AWS account to Cloud2Gether allows the platform to discover and analyze your cloud resources, costs, and infrastructure. Cloud2Gether requires read-only access to your AWS account — it will never create, modify, or delete any resources.
Prerequisites
Before you begin, make sure you have:
- An active AWS account with access to the IAM Console
- Permissions to create IAM users and/or roles in your AWS account
- A Cloud2Gether account — sign up here if you don’t have one
Connection Methods
Cloud2Gether supports three methods to connect your AWS account. Choose the one that best fits your security requirements and organizational setup.
| Method | Security | Complexity | Best For |
|---|---|---|---|
| Access Key & Secret Key | Medium | Low | Quick setup, development and testing environments |
| Role Delegation | High | Medium | Production environments, multi-account setups (Recommended) |
| Access Key + Role Name | High | Medium | Central account assuming roles across multiple accounts |
Recommendation
For production environments, we strongly recommend using Role Delegation. It avoids storing long-lived credentials and follows AWS security best practices by using temporary credentials through IAM role assumption.
Required AWS Permissions
Regardless of the connection method you choose, Cloud2Gether needs read-only access to your AWS services in order to inventory resources, analyze costs, and provide recommendations.
The simplest approach is to use the AWS managed policy ReadOnlyAccess (ARN: arn:aws:iam::aws:policy/ReadOnlyAccess). This policy grants read-only access to all AWS services.
Custom Policies
If your organization requires a more restrictive policy, you can create a custom IAM policy that grants read-only access only to the specific services you want Cloud2Gether to analyze. Contact our support team for guidance on minimum required permissions.
Next Steps
Choose your preferred connection method and follow the step-by-step guide:
- Access Key & Secret Key — Use IAM user credentials directly
- Role Delegation — Create a cross-account IAM role (recommended)
- Access Key + Role Name — Use IAM user credentials to assume a role
Role Delegation
Connect your AWS account using cross-account IAM role delegation.
Access Key + Role Name
Connect your AWS account using IAM access keys combined with role assumption.
Feedback
Was this page helpful?
Was this page helpful?
Let us know how we can improve