AWS IAM
Connect TigerIdentity to AWS IAM for identity and access management across all your AWS accounts with just-in-time privilege provisioning.
Key features
Multi-Account Support
Sync IAM data across all AWS accounts in your organization with automatic discovery.
IAM Entities
Track users, roles, groups, and policies across your entire AWS estate.
Access Keys
Monitor IAM access keys, rotation status, and last usage timestamps.
Assume Role Chains
Map role assumption paths and cross-account trust relationships.
CloudTrail Events
Stream CloudTrail events for real-time visibility into AWS API activity.
Just-In-Time Access
Dynamically create and revoke IAM roles based on TigerIdentity policies.
Connect AWS IAM in four steps.
Create IAM Role
Deploy a cross-account IAM role with read permissions for IAM and CloudTrail.
Discover Accounts
TigerIdentity automatically discovers all accounts in your AWS Organization.
Sync IAM Data
Continuous sync of users, roles, groups, policies, and access keys across all accounts.
Provision Access
Create temporary IAM roles on-demand based on policy evaluation and approval workflows.
Cloud Infrastructure Integration
Real-time identity signals from AWS IAM.
Every event, action, and change from AWS IAM feeds the TigerIdentity policy engine and TIDR baseline in real time.
< 50 ms
Cloud Infrastructure Integration
Configuration example
connector:
type: aws-iam
name: "aws-production"
config:
role_arn: "arn:aws:iam::123456789012:role/TigerIdentityAccess"
external_id: "${AWS_EXTERNAL_ID}"
regions:
- us-east-1
- us-west-2
sync:
users: true
roles: true
groups: true
policies: true
access_keys: true
events:
cloudtrail: true
event_types:
- AssumeRole
- GetSessionToken
- CreateAccessKey
- DeleteAccessKey
provisioning:
enabled: true
role_prefix: "TigerIdentity-"
max_session_duration: 3600Common use cases
Zero Standing Privilege
Eliminate permanent IAM roles. Grant just-in-time access based on real-time context.
Cross-Account Access
Centralize multi-account access control without federation complexity.
Credential Rotation
Automatically detect and alert on stale access keys and long-lived credentials.
Least Privilege Enforcement
Analyze actual IAM usage and recommend right-sized policies.
Ready to connect AWS IAM?
See how TigerIdentity integrates with your AWS IAM environment in a personalized demo.