​

Connect AWS Account (Cross-Account Role)

Follow these simple steps to set up cross-account access using AWS IAM Roles and CloudFormation.

---

​

1. Basic Configuration

Identify this integration within your workspace:

1. Account Name: Enter a clear, recognizable name (e.g., Production-AWS-CrossAccount).
2. Environment: Click the dropdown menu and select your environment type (e.g., Production, Staging, Development).

---

​

2. Authentication Method

Select Cross-Account (Assume Role) as your authentication method.

1. Create the Role: Use the provided CloudFormation template link to deploy the required Zero-X scan role in your AWS Management Console.
2. Role ARN: Copy the generated IAM Role Amazon Resource Name (ARN) from AWS and paste it here (e.g., arn:aws:iam::123456789012:role/ZeroXScanRole).
3. External ID (Optional but Recommended): Click Generate to create a unique External ID, and ensure it matches the sts:ExternalId condition in your IAM role trust policy.

---

​

3. CloudTrail Integration (Optional)

Toggle on any additional feature integrations as required:

• Enable CloudTrail Event Routing: Automatically forwards CloudTrail events from S3 using EventBridge notifications.
• Enable ECR Image Scanning: Automatically discovers and scans container images hosted in Amazon Elastic Container Registry (ECR).
• Enable EKS Cluster Auditing: Automatically discovers and monitors Kubernetes clusters in Amazon Elastic Kubernetes Service (EKS).

---

​

4. Analysis Scope

• AWS Regions: Click the dropdown menu and select all target AWS regions to analyze (e.g., us-east-1, eu-west-1).

---

​

5. Verify & Finalize

• Click the Verify Integration button at the bottom right to validate role permissions and finalize setup.