Connecting AWS to Osto

Find Your AWS Account ID

Your AWS Account ID uniquely identifies your AWS account and is required for integration.

To find it:

• In the AWS Console, search for IAM.

• Open the IAM (Identity and Access Management) service.

• On the IAM Dashboard, locate the AWS Account section.

• Copy the Account ID and save it — you’ll need it later.

Create or Use an Existing IAM User

Osto connects to AWS using an IAM user with restricted, read-only permissions. If you don’t already have one, create it:

• In the IAM sidebar, click Users.

• Click Create user.

• Enter a user name (for example, osto-cloud-security-posture-management).

• Click Next.

Assign Permissions to the IAM User

Osto requires read-only access to scan and assess your cloud resources. Assign the following AWS-managed policies:

• Under Set permissions, choose Attach policies directly.

• Search for and select the following policies:

  • SecurityAudit

  • ViewOnlyAccess

• Click Next, review details, and then click Create user.

Create Access Keys

Osto authenticates using access keys associated with your IAM user. To create one:

• Return to IAM → Users.

• Click on the user you created.

• Go to the Security credentials tab.

• Scroll down to Access keys and click Create access key.

• Choose Third-party service (for integrations and monitoring).

• Check the confirmation box and click Next.

(Optional) Add a Description Tag

• Add a tag description such as "Osto integration key for monitoring resources".

• Click Create access key.

Retrieve and Secure Your Keys

After the access key is created, the console will display:

• Access Key ID

• Secret Access Key

Click Done after securely saving both values.

Fill in the Osto Cloud Connector Form

In the Osto platform, open the Connect a Cloud Provider window and select Amazon Web Services (AWS).

Fill in the fields as follows:

• Name: A friendly name for your AWS connection (e.g., “Prod AWS Account”).

• Description: Optional description for easier identification.

• AWS Account ID: The account ID you copied earlier.

• Access Key ID: The Access Key ID from the IAM user you created.

• Secret Access Key: The Secret Access Key generated in the previous step.

Once filled, click Connect to authenticate and establish the integration.

Verify Connection

After connecting successfully:

• Your AWS assets will start syncing automatically.

• The Osto Dashboard will display asset count and necessary metrics.

• The connector’s status will change to Active.