AWS

Connecting AWS is an automated flow based on a CloudFormation template. Polylane never gets write access to your infrastructure: the stack only grants a read-only role that Polylane assumes cross-account.

Setup

1. Enter your 12-digit AWS Account ID.
2. Select the AWS Region to connect.
3. Click Deploy stack on AWS. You are redirected to the CloudFormation console with the template pre-loaded.
4. Review the template and click Create stack.
5. The stack creates an IAM role with read-only access that Polylane assumes.
6. Return to Polylane. Within minutes your resources start syncing.

The CloudFormation template is open: you can review exactly which permissions are granted before you create the stack.

Permissions

The IAM role is strictly read-only:

• The AWS-managed ReadOnlyAccess policy
• No write, delete, or modify permissions
• Cross-account assumption only, from Polylane's AWS account

Investigate alarms

When connecting you can let Polylane subscribe to the CloudWatch Alarms in the account. When an alarm fires, Polylane picks it up and investigates it automatically. This is optional and can be changed later.

Disconnecting

Delete the CloudFormation stack in your AWS account. That removes the IAM role and every other resource the stack created. You can also disconnect the account from Polylane, which stops all syncing.