--- title: "Connect Clarity Security to AWS" slug: "aws" description: "Learn how to connect Clarity Security to AWS to automate your identity life cycle management and user access reviews. " tags: ["connectors", "How-To", "marketplace", "application", "AWS"] updated: 2023-05-02T21:22:25Z published: 2023-05-02T21:22:25Z canonical: "help.claritysecurity.com/aws" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # AWS This guide will teach you how to set up the connector between [AWS](https://aws.amazon.com/) and [Clarity Security](https://claritysecurity.io). **Estimated time to setup connector:** 10 minutes If you encounter any problems, please contact your support team or [support@claritysecurity.io](mailto:support@claritysecurity.io). ## Supported Connector Capabilities ## Below are capabilities supported by the connector at this time. | **Method** | **Supported** | | --- | --- | | Provision User | Yes | | List Groups and Policies | Yes | | Add User to Groups and Policies | Yes | | Remove User from Groups and Policies | Yes | | Deactivate User | Yes | | Delete User | Yes | ## ## How To Setup The Connector ### Step 1: Log in to AWS IAM Visit [AWS IAM](https://console.aws.amazon.com/iam/) and sign in with administrative-level credentials. ### Step 2: Navigate to Access Management > Users Once you have AWS Identity and Access Management (IAM) open, you want to Navigate to "Access Management" and then "Users". ![AWS IAM Dashboard](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/1.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 3: Click "Add User" Click on the "Add User" button in the upper right to begin creating a new user. ![AWS IAM Add User Button](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/2.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 4: Configure the User Give the user a descriptive name such as "Clarity-App-Connector" and select the "Access key - Programmatic access" credential type. ![AWS IAM User configuration screen](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/3.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 5: Attach the Existing Policy "IAM FullAccess" Search for the "Attach existing policies directly" option to find the "IAM FullAccess" policy, then attach this to the new user account. ![Attach the existing policy IAM FullAccess](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/4.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 6: Review the New User and Create Review the settings and permissions for the new user and click Create if everything looks correct. ![Review your New User and Permissions](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/5.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 7: Record the Credentials Record the Access Key ID and Secret Access Key from AWS in a secure location so that they can be used in Step 11. ![Record the key id and secret key](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/6.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 8: Log in to Clarity Security Your URL will be https://your-tenant.claritysecurity.io/login ### Step 9: Navigate to Applications Click on the **Applications** tab and then click **Marketplace** to bring up the application connector marketplace. ![Applications Marketplace button](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Applications%20Screenshot.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 10: Find AWS and click Connect Either scroll or use the search filter in the upper right to search for the AWS option in the Marketplace. ![AWS icon and Connect button from Marketplace](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Amazon%20AWS.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 11: Fill out the First Configuration Page Fill out the "Connect App" page using the credentials from Step 7. - access_key_id: copy and paste the AWS Access Key ID from Step 7 - secret_access_key: copy and paste the AWS secret access key from Step 7 - Unique Identifier: aws (default) - Access via: API (default) Unique IdentifierIf you are connecting Clarity Security to multiple AWS environments, change the unique identifier field to reflect the specific environment this connection is for (every unique identifier must be unique from others) ![AWS Connect App Form Step 1](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/AWS_config.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 12: Fill out the App Settings Form Complete the form for Step 2 of the "Configure App" process by filling out the form. Review the chart at the top of this page to determine if the API connection does not support any features.![Configure App Step 2](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Configure%20App%202.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 13: Fill out the User Settings Form Complete the form for Step 3 of the "Configure App" process by filling out the form with the values representing your organization's needs. Review the chart at the top of this page to determine if the API connection does not support any features (such as deactivate vs. delete).![Configure App Step 3](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Configure%20App%203.png?sv=2026-02-06&spr=https&st=2026-11-09T19%3A49%3A38Z&se=2026-11-09T20%3A49%3A38Z&sr=c&sp=r&sig=qtyuJ%2B0mZZszN8vTGpj5lHp8H7padTl5pOtikPqnij0%3D) ### Step 14: Validate Your Selections and Save Save Clicking the Save button will trigger the first full sync for your application (even if you selected Manual Syncing).  This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes. ## Need Help? If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST. A Service User is a user, or service account, discovered by Clarity in a downstream application. An Entitlement is an assignable permission found in a downstream application. Common examples include licenses, groups, and policies. Service User Entitlements are the pairings of users and active entitlement access in downstream applications. An attribute is a piece of information used to describe a service user, entitlement, or identity. Common examples include First Name, Last Name, Job Title, Department, etc.