Connect Infragraph to AWS

The AWS connection connects your Amazon Web Services data to the resource graph.

Set up the connection

Complete the following steps to establish a new AWS connection:

1. From the Resource graph Overview at the top right, click Create Connection.
2. Select Amazon Web Services (AWS) from the list of data sources.
3. Click Select Amazon Web Services (AWS).
4. Click View Terraform module in Registry to review the IAM Role OIDC Federation and IAM Policy requirements scope.
5. Copy the generated module block and add it to your HCP Terraform or Terraform Enterprise linked VCS repository.
   1. Configure your AWS credentials for the accounts you added in the sync scope. Refer to the AWS Terraform provider authentication and configuration documentation for more information.
   2. Run a Terraform apply operation to create the required IAM resources in your AWS environment.
6. We recommend clicking the module repo link and subscribing to the module GitHub repository to be notified of changes to ensure your connections continue to work.
7. Click the Provide connection details button.
8. Choose a Sync scope:
   • Organization: Infragraph syncs all accounts in the organization. Enter the Management account ID for the organization.
   • Specific Accounts: Infragraph only syncs data from the specified accounts. Enter the AWS Account IDs you want to include in this connection. You can manually enter IDs separated by commas or new lines or click Upload CSV to import up to 100 accounts in bulk.
9. Click the Create connection button.

Sync AWS data

To find the current sync status for your connector, complete the following steps:

1. Click Connections in your HCP organization's left navigation panel.
2. Check the connection sync status.

Infragraph reports one of the following statuses:

• Awaiting initial sync means that the connection was created but Infragraph has not initiated the first data sync.
• Successful means there were no errors in the latest sync and Infragraph synced the data.
• Partial failure means at least one error occurred in the latest sync.

To manually initiate a new sync, select Sync connection from the … menu in the Actions column.

View AWS data

To find AWS data connected to your resource graph, complete any of the following actions:

• Go to the Inventory page. Click an individual resource type to view it in the graph explorer.
• Query resources with a saved query that includes AWS resources.
• Build the query from scratch using AWS resources in the query editor.