Case Study: AWS simplifies multi-account human access management with CloudQuery

AWS streamlines multi-account access and auditing with CloudQuery in 5 minutes

The customer AWS faced the challenge of managing human access across multiple AWS accounts in a scalable and secure way, moving away from the legacy method of creating individual IAM users per account, which was unworkable at scale. To solve this, AWS utilized its own service, AWS IAM Identity Center, to centralize identity management.

The solution implemented by AWS IAM Identity Center provided centralized single sign-on, connecting to external identity providers and using permission sets to define access. This eliminated the need for static access keys and provided temporary credentials. The results included streamlined access management, improved security through centralized MFA, and no additional AWS charge for the service. To further enhance governance, AWS used the vendor CloudQuery to audit the configuration, using SQL queries to perform continuous access reviews and ensure compliance with frameworks like SOC 2.

AWS