> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zero-x.cloud/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS Cross account

# Connect AWS Account (Cross-Account Role)

Follow these simple steps to set up cross-account access using AWS IAM Roles and CloudFormation.

***

## 1. Basic Configuration

Identify this integration within your workspace:

1. **Account Name**: Enter a clear, recognizable name (e.g., `Production-AWS-CrossAccount`).
2. **Environment**: Click the dropdown menu and select your environment type (e.g., `Production`, `Staging`, `Development`).

***

## 2. Authentication Method

Select **Cross-Account (Assume Role)** as your authentication method.

1. **Create the Role**: Use the provided CloudFormation template link to deploy the required Zero-X scan role in your AWS Management Console.
2. **Role ARN**: Copy the generated IAM Role Amazon Resource Name (ARN) from AWS and paste it here (e.g., `arn:aws:iam::123456789012:role/ZeroXScanRole`).
3. **External ID** *(Optional but Recommended)*: Click **Generate** to create a unique External ID, and ensure it matches the `sts:ExternalId` condition in your IAM role trust policy.

***

## 3. CloudTrail Integration (Optional)

Toggle on any additional feature integrations as required:

* **Enable CloudTrail Event Routing**: Automatically forwards CloudTrail events from S3 using EventBridge notifications.
* **Enable ECR Image Scanning**: Automatically discovers and scans container images hosted in Amazon Elastic Container Registry (ECR).
* **Enable EKS Cluster Auditing**: Automatically discovers and monitors Kubernetes clusters in Amazon Elastic Kubernetes Service (EKS).

***

## 4. Analysis Scope

* **AWS Regions**: Click the dropdown menu and select all target AWS regions to analyze (e.g., `us-east-1`, `eu-west-1`).

***

## 5. Verify & Finalize

* Click the **Verify Integration** button at the bottom right to validate role permissions and finalize setup.