# Configuring the AWS SaaS Connector

To connect Amazon Web Services (AWS) to Agentic Fabric, you'll create a CloudFormation StackSet to create an IAM role. This will allow Agentic Fabric to discover Amazon Bedrock agents and other non-human identities. For additional information about the datasets specific to AWS, refer to the AWS SaaS [connector documentation](https://documentation.sailpoint.com/connectors/saas/aws/help/saas_connectivity/aws/datasets.html).

!!! important

If your organization has already configured an AWS SaaS source, you can use the existing source for agent discovery. The fields will be prepopulated with the source's information. You can edit these fields to configure a new integration.

## Configuring AWS for Agentic Fabric

Review the Amazon Web Services SaaS connector documentation for information on the required [prerequisites](https://documentation.sailpoint.com/connectors/saas/aws/help/saas_connectivity/aws/prerequisites.html) and [permissions](https://documentation.sailpoint.com/connectors/saas/aws/help/saas_connectivity/aws/required_permission.html).

## Connecting AWS to Agentic Fabric

1. Go to the **Connect Sources** step of the Agentic Fabric onboarding experience.
2. Select **AWS SaaS** from the left pane.
3. In the **AWS Bedrock & AgentCore** section, complete the following:

- In the **Source Name** field, enter a unique name for the source.

- In the **Source Owner** field, select the identity who will own the source.

- In the **StackSet Name** field, enter a name for the StackSet.

- In the **Administrator Account ID** field, enter your administrator account ID.

- In the **Role Name** field, enter the IAM role name that will be created on your AWS accounts.

- In the **Region** field, enter the region name for the AWS data center. The default region is `us-east-1`.

4. In the **AWS Target Accounts** section, select the **Enable Aggregation of accounts once StackSet is deployed.** checkbox to aggregate accounts after the StackSet is deployed.
5. Select the **Plus** icon to view the sensor role being granted.
6. Select the **I acknowledge that AWS CloudFormation might create IAM resources with custom names.** checkbox. This statement must be acknowledged before you can discover accounts.
7. Select **Discover Accounts** to start the temporary IAM delegation process and discover the member accounts under the management account.
8. Review the information in the **Discover Accounts** window and complete the following actions:

- Select **Open AWS Console** to open the request in the AWS IAM console.
    - Sign in to the administrator account and select **Approve**.
    - Return to Agentic Fabric. StackSet events will start to populate in the **StackSet Events** section.

!!! note

If the request is not approved, AWS onboarding will remain in a pending state. If you leave Agentic Fabric and return to onboard the AWS source, the **Discover Accounts** window will display again.

9. Select the accounts to onboard. At least one account must be selected before you can deploy. The management account is automatically included.
10. Select **Create StackSet**. Creation of the stack will take some time. You can view the completed source later by selecting **Admin > Connections > Sources** from the navigation menu.
11. Choose another connector to configure or select **Continue** to proceed to the next onboarding step.

Configuring the AWS SaaS Connector

To connect Amazon Web Services (AWS) to Agentic Fabric, you'll create a CloudFormation StackSet to create an IAM role. This will allow Agentic Fabric to discover Amazon Bedrock agents and other non-human identities. For additional information about the datasets specific to AWS, refer to the AWS SaaS connector documentation.

Important

If your organization has already configured an AWS SaaS source, you can use the existing source for agent discovery. The fields will be prepopulated with the source's information. You can edit these fields to configure a new integration.

Configuring AWS for Agentic Fabric

Review the Amazon Web Services SaaS connector documentation for information on the required prerequisites and permissions.

Connecting AWS to Agentic Fabric

Go to the Connect Sources step of the Agentic Fabric onboarding experience.
Select AWS SaaS from the left pane.
In the AWS Bedrock & AgentCore section, complete the following:
- In the Source Name field, enter a unique name for the source.
- In the Source Owner field, select the identity who will own the source.
- In the StackSet Name field, enter a name for the StackSet.
- In the Administrator Account ID field, enter your administrator account ID.
- In the Role Name field, enter the IAM role name that will be created on your AWS accounts.
- In the Region field, enter the region name for the AWS data center. The default region is us-east-1.
In the AWS Target Accounts section, select the Enable Aggregation of accounts once StackSet is deployed. checkbox to aggregate accounts after the StackSet is deployed.
Select the Plus icon to view the sensor role being granted.
Select the I acknowledge that AWS CloudFormation might create IAM resources with custom names. checkbox. This statement must be acknowledged before you can discover accounts.
Select Discover Accounts to start the temporary IAM delegation process and discover the member accounts under the management account.
Review the information in the Discover Accounts window and complete the following actions:
- Select Open AWS Console to open the request in the AWS IAM console.
- Sign in to the administrator account and select Approve.
- Return to Agentic Fabric. StackSet events will start to populate in the StackSet Events section.
Note

If the request is not approved, AWS onboarding will remain in a pending state. If you leave Agentic Fabric and return to onboard the AWS source, the Discover Accounts window will display again.
Select the accounts to onboard. At least one account must be selected before you can deploy. The management account is automatically included.
Select Create StackSet. Creation of the stack will take some time. You can view the completed source later by selecting Admin > Connections > Sources from the navigation menu.
Choose another connector to configure or select Continue to proceed to the next onboarding step.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.