Versions Compared

Version Old Version 15 New Version Current
Changes made by

Christine Gross

Maeve O'Malley

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

To Bring the SSO users, Groups and Permission sets into an AWS app instance in Zilla, this AWS app instance must have AWS Organization app instance as Parent Application.

...

Follow the steps here for AWS Organization Sync for this AWS app instance’s Parent Applicationhttps://zilla.atlassian.net/wiki/pages/resumedraft.action?draftId=2210168855

Info

Notes:

  1. “Discover Child Apps” configuration should be set as to “Yes” in the AWS Organization Organizations App which is parent of this AWS app.

  2. “Sync AWS SSO accounts in Child AWS Apps” configuration should also be set as to “Yes” in the AWS Organization Organizations parent App.

  3. The AWS Organization Organizations App adds SSO configurations to it’s its child AWS apps. These SSO configurations are hidden in the child AWS apps.

  4. The configurations of the discovered AWS child Apps should not be edited manually. If the configurations are edited manually, it removes the hidden SSO configurations.

  5. To restore the hidden SSO configurations to this child AWS app, sync the Parent AWS Organization Organizations App.

Refer AWS - Hidden SSO configurations for more details.

 

Info

 Notes:
To sync all S3 buckets data, Zilla requires the following permissions to be allowed in the Zilla IAM Reader role:

  • ListAllMyBuckets

  • GetBucketLocation

  • GetBucketPolicy

  • GetBucketAcl

  • GetBucketPublicAccessBlock

  • GetBucketOwnershipControls

  • GetBucketPolicyStatus

  • GetEncryptionConfiguration

  • ListAccessPoints

  • GetAccessPoint

  • GetAccessPointPolicy

  • GetAccessPointPolicyStatus

Set up AWS Application Integration on Zilla

  1. Login to Zilla at http://app.zillasecurity.com/.

     

  2. Once you are signed in, you will land on the Applications page.

     

  3. Click Add Application. You will see a library of all applications listed which are supported by Zilla.

     

  4. Type “aws” into the search bar to filter the results.

     

  5. Click on Add to Applications next to the Amazon Web Services entry. You will see a dialog box appear.

    All the fields are optional. Click Add to Applications.

  6. You will be redirected back to the Applications page and you will see the Amazon Web Services entry included in the list.

     

  7. Click the application instance to configure its integration.

  8. Click Sync now in the top right corner. You will see a dialog box appear.

  9. Click the slider under API Integration to enable.

  10. Enter the Role ARN. For example: arn:aws:iam::<YOUR_AWS_ACCOUNT_ID>:role/Zilla-IAM-Reader-Role created above. and click Next.

  11. Click Next again.

     

  12. Your sync will begin. Once it completes, you will see the below message.

     

  13. Click Done . You will then see a message like this if the sync completed successfully.

  14. You can close the message dialog and navigate to the Accounts tab to the IAM Users from your AWS account.

     

  15. Next, click the Permissions tab to browse the permissions assigned to each user.

  16. Click the Resources tab to browse the AWS resources (S3 Buckets and S3 Access points).

    Image RemovedImage Added

  17. Click the Profile tab to browse the AWS account Security Settings.

...