Importing data from AWS Organizations into ZIlla is a 3-step process:
Create an AWS Organizations application instance in Zilla.
Create
Zilla-SSO-Reader-Role
in Management Account of AWS Organization and createZilla-IAM-Reader-Role
in all Member accounts of AWS Organization. AWS Organization - Creating Zilla-IAM-Reader-Role And Zilla-SSO-Reader-RoleImport AWS SSO Users, Groups and Group Members via API Integration in the AWS Organizations application instance: AWS Organization - API Integration.
Note:
In step 3, the status value for AWS SSO users will be imported using SCIM endpoint and SCIM token should be provided.
If SCIM is not configured, use the browser extension sync to update the status value for AWS SSO users: AWS Organization - Browser Extension.
When you have finished with all the steps above, review the information in Zilla that was synced.
Having trouble? Try our Troubleshooting articles or contact support@zillasecurity.com.