If you already have AWS integrated with Vanta, you have the ability to allow Vanta to read resources from the Identity Store.
- First, you will need to update the permissions of your "VantaAdditionalPermissions" policy in AWS. The following permissions need to be added to the policy
"identitystore:Describe*",
"identitystore:Get*",
"identitystore:IsMemberInGroups",
"identitystore:List*"
- You can add these in the "Allow" section of your VantaAddtionalPermissions policy:
- After the policy has been updated, Navigate to the integrations page and select Manage>Edit on the AWS integration:
- Select the pencil icon next to your account
- Enable the AWS IAM Identity Center option
- You will find the Identity store ID and IAM Identity Center ARN information on the Settings page of the IAM identity center in the AWS console here
Updated