What Deixic does with Amazon Web Services.

How Deixic helps with Amazon Web Services.

Read information

Review resources, security evidence and S3 public-access settings from Amazon Web Services as evidence and to check state.

Choose the actions

Deixic supports actions on S3 public-access blocking. Grant only the tools and permissions the task needs.

Keep your decisions

Deixic checks your policy before a change; sensitive changes wait for a named approver. The action record keeps the decision and result.

1 of 1 changing operations require approval. See how approvals work.

Example workflow

Review resources in Amazon Web Services

Review resources in the Amazon Web Services account I specify. Return the relevant identifiers, what you found, and any information still needed to answer my question.

1. Confirm the account and the question to answer. Read resources and keep the relevant identifiers with the result.
2. Review the proposed action and its inputs. Apply your policy and obtain any required approval before running it.
3. Check the returned information against the question. Refresh Amazon Web Services when the decision needs current facts, and record what is still missing.

Use your existing agent with Deixic. Calls you route through Deixic follow your access and approval policy.

Provider access

Supported Amazon Web Services reads and actions.

Choose the reads and actions your task needs. Your connection’s permissions and your agent’s access determine what it can use.

Permissions

Choose the access for Amazon Web Services.

Confirm the credential identity and the target region and service; a valid signature authenticates the request, but the identity still needs permission for the resource.

Find Amazon Web Services in the appManage connected accounts

Connection

AWS Signature v4

Supported operations

Read and act

Reads

3

Actions

1

Provider permissions

Grant only the permissions needed for the task.

What you need to connect

• Static access key ID (alternative) (optional)
• Static secret access key (alternative) (optional)
• AWS region
• Resource Explorer inventory configuration (JSON) (optional)
• Managed role session (optional)
• Session token (optional)

Deixic checks calls routed through its gateway and requests approval when your policy requires it.

Reference and troubleshooting

Amazon Web Services operation reference, troubleshooting, and questions

Connectors for related work