Key Features

• AWS Configuration: Includes setting up a root email alias for streamlined account management, creating an AWS IAM user for ServiceNow integration, enabling account suspension via Service Control Policies, and optionally configuring Terraform or a cloud native interface for provisioning. Additional steps involve populating dependent tables for cloud discovery, setting up provisioning modes, configuring scan settings for data visualization, managing group memberships for access control, and reviewing certification and request policies.
• Azure Configuration: Focuses on setting up account suspension permissions through OAuth credentials, establishing an Azure Service Principal credential for suspension and termination actions, and optionally configuring a cloud native interface. Similar to AWS, it involves populating dependent tables from Azure cloud discovery, configuring scans for visualization, managing group memberships, and reviewing certification policies.

Key Outcomes

• Centralized and Secure Cloud Account Management: By setting up shared email aliases, IAM users (AWS), and service principals (Azure), customers achieve efficient, secure management across multiple cloud accounts.
• Flexible Provisioning: Supports multiple provisioning modes including Terraform and cloud native interfaces, allowing customers to select the approach that best fits their operational model.
• Governance and Compliance: Default certification policies automate periodic certification of cloud accounts, and request policies enforce consistent workflows and data checks during account provisioning.
• Access Control and Security: Assigning members to appropriate groups ensures proper permissions for account request, approval, provisioning, and certification processes, reducing unauthorized access risks.
• Data Visualization and Monitoring: Scan configurations enable visualization of account compliance and policy violations, supporting ongoing governance and optimization.