Setup Wizard

Configure CloudAtlas to access your AWS accounts.

Credentials

Root Role

Child Roles

Ready

AWS Credentials

Base access keys configured in .env

Configured

Primary Region

Management Account Role

The IAM role CloudAtlas assumes as its identity

Root Role ARN

Paste the ARN after creating the role below.

Child Account Roles

Read-only role deployed in every member account

Inventory Role Name

Org Admin Role (for setup)

This assumes OrganizationAccountAccessRole in each child account and creates CloudAtlasInventoryRole with ReadOnlyAccess automatically. Requires admin access — if the client controls IAM, use the manual setup guide instead.

Advanced Configuration

Scan role, scan workers — optional, defaults work for most setups

Active Scan Role

Role assumed in each account during scans. Auto-updated after setup.

Scan Workers

Parallel threads per account (5–10 recommended).

Go to Dashboard