The purpose of this document is to provide set up information on the Amazon integration.


Here you can set up to run scans against instances in the Amazon cloud. It will also enable the option to run discovery scans using ARNs added in this setup. Amazon service is implemented in both OUTSCAN and HIAB.


Amazon targets can only be added to OUTSCAN/HIAB via discovery scans. Only OUTSCAN is Whitelisted by Amazon as an authorized scanner, and scanning from HIAB may require additional authorization from Amazon.

Set Up Amazon

To setup Amazon:

  1. Go to Main Menu > Settings > Integrations to open the Integration Settings window.
  2. Select the Amazon tab. 

    Set Up Amazon

Follow the below procedure to scan instances:

  1. To enable this feature, select the Enabled box.
  2. Create a new user role with the Account Id and External Id noted.
  3. Apply IAM policy given below for the role on Amazon cloud to grant access to the targets.

       "Version": "2012-10-17",
       "Statement": [{
          "Sid": "Stmt1400711494000",
          "Effect": "Allow",
          "Action": [
          "Resource": ["*"]


    Any role which gives you read-only access to the required Actions listed in the policy will work.

  4. Enter the Amazon Resource Name (ARN) for the newly created role in the table using + New button.
  5. Click Save to save the current settings.


AWS Documentation


© 2022 Outpost24® All rights reserved. This document may only be redistributed unedited and unaltered. This document may be cited and referenced only if clearly crediting Outpost24® and this document as the source. Any other reproduction and redistribution in print or electronically is strictly prohibited without explicit permission.


Outpost24® and OUTSCAN™ are trademarks of Outpost24® in Sweden and other countries.