Skip to main content
NEW · Blast Radius: a field playbook for leaked API keys on AWS, GCP and Azure
Documentation menu

Integrations

AWS S3

Connect S3 bucket scanning through CloudFormation, manual IAM setup, or an IaC template.

Connect S3 with CloudFormation

  1. In Scan Sources, choose AWS S3.
  2. Open CloudFormation (Auto).
  3. Enter a source name in Label.
  4. Enter the bucket account in AWS Account ID.
  5. Select Create & Open CloudFormation.
  6. In the AWS console, review the account and template permissions, then deploy the stack.

Use the official CloudFormation documentation for deployment. Return to Cremit's source list and review the new source's connection status and discovered buckets.

Other installation methods

Under Manual Setup, enter the label and account ID, then select Generate Setup Instructions. Review the generated role and trust configuration before applying it in AWS.

Under IaC Templates, choose Select IaC Tool and select Generate & Download Template. Download the generated template and apply it with that IaC tool.

Enable the intended buckets in the source detail, then review scan status. For access errors on KMS-encrypted objects, also check the connection role's key permissions.