Skip to main content
Connect your Amazon Web Services (AWS) account so Myrmex can read your resource configuration and account activity, audit your cloud security posture, and help you fix misconfigurations. Myrmex reaches the AWS APIs through a Collector using a least-privilege IAM access key — everything is read in real time, on demand, and nothing from your account is stored on the Myrmex side.

​
What Myrmex Can Do

Read and inventory

Enumerate services and resources — EC2, S3, IAM, VPC, and more — for real-time, read-only analysis.

Cloud posture audit

Run a Security Posture audit against your account using CIS, ISO 27001, and NIST controls.

Find misconfigurations

Surface public buckets, overly permissive IAM, unencrypted volumes, and risky security groups.

Guided remediation

Get prioritized fixes and, on approval, apply changes to close the gaps.

​
Before You Start

  • A Collector deployed where it can reach the AWS APIs over HTTPS. See Deploying the agent.
  • An IAM user with programmatic access and a least-privilege policy — ReadOnlyAccess is enough for analysis; add narrowly scoped write permissions only when you want Myrmex to remediate.
  • Your AWS account ID and the default region you work in.

​
Step 1 — Create the Credential in AWS

1

Attach a least-privilege policy

In the AWS console, open IAM → Policies and prepare ReadOnlyAccess, or a tighter policy scoped to the services you want Myrmex to read.
2

Create an IAM user

Under IAM → Users, add a dedicated user for Myrmex and attach the policy from the previous step.
3

Generate an access key

On the user’s Security credentials tab, create an access key for programmatic access. Copy the Access Key ID and the Secret Access Key — the secret is shown only once.
Start with a read-only key for analysis and grant write permissions only when you want the agents to apply changes for you.

​
Step 2 — Add the Integration in Myrmex

In the Directory, choose Add Integration → Amazon Web Services (AWS) and fill in:

​
Connect

Click Connect to validate the credentials and finish. The account then appears under Environment → Integrations, and you can start asking the AI about it in the Workspace.
Prefer least privilege and rotate the access key periodically. Myrmex only needs read access for analysis; grant write permissions solely for remediation.