Qintorava DocsProduct documentation
Integration profile

Discovery provider · Amazon Web Services

Discover AWS Organizations accounts and regional resources by assuming a governed IAM role.

Demo baseline · November 13, 2026
Download PDF

Prerequisites

  • IAM role with a Qintorava trust policy
  • Read-only resource permissions in each account
  • Organizations read access for multi-account discovery

Configuration steps

  1. Create or select the cross-account role
  2. Set the trust-policy external ID
  3. Select accounts, regions, and resource families
  4. Test AssumeRole and preview inventory

Provider fields

FieldTypeRequirement and options
AWS partition
partition		selectRequired
aws, aws-us-gov, aws-cn
Organizations ID
organizationId		textOptional
AWS account IDs
accountIds		tag_listRequired
Cross-account role ARN
roleArn		textRequired
Trust-policy external ID
externalId		textRequired
Regions
regions		tag_listRequired
Resource types
resourceTypes		tag_listOptional
Enumerate AWS Organizations
useOrganizations		booleanOptional

Verify and troubleshoot

Test with the narrowest supported non-production scope. Confirm that the connection test reaches the expected provider and that the preview or receipt matches the intended scope. Check identity, credential references, network access and provider permissions before retrying. Record the failure stage and redact sensitive payloads when escalating.