Connect Amazon Web Services (AWS)

Imports your AWS resource inventory: EC2 instances and S3 buckets.

For the general flow of adding a source, see Connect Data Sources.

Before you start

• AWS account with IAM management rights

• Primary AWS region to monitor

Step 1 — Create a read-only IAM policy

IAM → Policies → Create policy → JSON:

ec2:DescribeInstances
s3:ListAllMyBuckets
s3:GetBucketLocation
s3:GetBucketVersioning
s3:GetEncryptionConfiguration
s3:GetBucketLogging
s3:GetBucketPublicAccessBlock

Step 2 — Create an IAM user and access keys

1. IAM → Users → Create user (e.g., harven-connector)

2. Attach the policy created in Step 1

3. Security credentials → Create access key

4. Type: Application running outside AWS

5. Copy the Access Key ID and Secret Access Key

What to enter in HARVEN

• Access Key ID — IAM key identifier (IAM → Users → Security credentials → Access keys)

• Secret Access Key — Secret key (shown once only) (IAM → Users → Security credentials → Access keys)

• Region — Primary AWS region (e.g., eu-west-1) (AWS console → region selector top right)

What HARVEN reads

• ec2_instances — EC2 instances: identification (instance_id, instance_type, instance_state), network (private_ip_address, public_ip_address, vpc_id), context (launch_time, platform, security_groups, tags)

• s3_buckets — S3 buckets: identification (name, region, creation_date), security (versioning_status, encryption_enabled, public_access_blocked, logging_enabled)

Official documentation

• Manage IAM access keys

Need help? Contact [email protected].