Connecting AWS with CloudFormation

  • Updated

When integrating an AWS account, customers have the option to connect using CloudFormation:

AWScf.png

  • Once you have selected the options above, select Next in the bottom right corner to continue with the next steps.
  • On the next page, select if you will be integrating a standard AWS account or an AWS GovCloud account

AWScfgovcloud.png

  • Next, select which AWS products that you would like Vanta to scan

awscfproducts.png

  • On the following screen, download the .yaml file 

AWScfdownloadscript.png

  • Navigate to AWS CloudFormation and create a new Stack using the "With new resources (standard)" option

AWScfcreatestack.png

  • On the Create Stack page, select the following options and upload the .yaml file you downloaded from Vanta

awscfcreatestack3.png

  • On the Specify stack details page, provide a stack name, and the other parameters should be pre-filled based on the file you previously uploaded.

AWscfstackdetails3.png

  • There is no need to Configure stack options. You can leave the defaults or update them as you wish and move on to review.
  • At the bottom of the Review page, ensure to select the acknowledgment at the bottom of page and hit Submit
  • Once the stack completes, you can click on the "Outputs" tab and copy the role ARN that was created:

awscfoutputs3.png

  • After you've copied the role ARN, you can head back to Vanta and paste it here:

Awscfrolearn.png

  • After clicking next, you can configure the regions that you would like Vanta to read in resources from and mark any resources out of scope as necessary