Requirements

You must have sufficient permissions to create new roles in your company's AWS account. Typically, this requires administrator access or IAM permissions to create and manage roles.

Deploy the CloudFormation stack provided by Copla and copy the Role ARN and External ID from the stack Outputs tab.

Permissions

Scope

Copla requires read-only access using the AWS managed SecurityAudit policy.

What data we collect in this connection?

Copla collects Assets and Access Control information.

Default Resources

Global

• IAM roles (excluding AWS service-linked roles)
• IAM policies (customer-managed policies that are attached)
• Route 53 hosted zones
• CloudFront distributions
• WAF web ACLs for CloudFront (global scope)

Region-specific

• S3 buckets
• EC2 instances