Showing results for 
Show  only  | Search instead for 
Did you mean: 

AWS EC2 inventory for multiple accounts

Has anyone had success with inventorying AWS across multiple accounts using a Beacon deployed in AWS?

I have an on-prem FNM server, and beacon that is an EC2 deployed in a main account in AWS.   We configured the roles and policies according to this:

We get the full instance information for the account that the beacon lives in...but configured the IAM role in another account we own and assigned it to the other account per the instructions---however, it doesn't pull any instance information for that account.   

Wanted to check here first before i submit a ticket and rope in support.  Testing this method before we go to production at a customer that has "a lot of" accounts, so would prefer to use this method and avoid creating IAM Users...which is preferred anyway.


(3) Replies
By Level 8 Champion
Level 8 Champion

We have succeeded to have inventories for multiple accounts. However it took some time for me as a non-aws guy to explain to the AWS team how they should setup the accesses. The instruction in the manual is a bit complicated to understand since it doesn't have any visualisations.

One thing I remember that the AWS team did configure wrong was that they tried to use wildcards in the Resource ARN's which is not supported.

You might get a better understanding whats going wrong if you run the compliance importer in verbose mode.

Thanks mag00 for letting me know there's hope.  I'll double check the things you mention and turn on verbose. Much appreciated.  

By Community Manager Community Manager
Community Manager

I'm not sure this will be directly related to what you're working through, but for reference here is another thread discussing working with multiple AWS accounts: AWS to FNMS connector

(Did my reply solve the question? Click "ACCEPT AS SOLUTION" to help others find answers faster. Liked something? Click "KUDO". Anything expressed here is my own view and not necessarily that of my employer, Flexera.)