Connect Your Cloud Provider

Overview

Connecting your cloud provider unlocks automated evidence collection for dozens of controls — no more manual exports. Nexxis uses read-only access and never modifies your cloud environment.

Supported providers:

• AWS (via IAM Role — recommended)
• Google Cloud Platform (via Service Account)
• Microsoft Azure (via App Registration)

---

Connecting AWS

Step 1: Create an IAM Role

In your AWS console:

1. Go to IAM → Roles → Create Role
2. Select AWS Account as the trusted entity type
3. Enter Nexxis's account ID: 123456789012 (shown in Settings → Integrations)
4. Enable Require External ID and copy the External ID from Nexxis

Step 2: Attach Policies

Attach these AWS managed policies to the role:

• SecurityAudit — read-only access to security configurations
• ReadOnlyAccess — read-only access to services Nexxis monitors

Principle of Least Privilege: If you want to limit scope, see Minimal AWS Policy for a scoped policy.

Step 3: Connect in Nexxis

1. Go to Settings → Integrations → Cloud Providers
2. Click Add → AWS
3. Paste the IAM Role ARN
4. Click Test Connection
5. If the test passes, click Save

---

Connecting Google Cloud

Step 1: Create a Service Account

1. Go to IAM & Admin → Service Accounts
2. Click Create Service Account
3. Name it nexxis-compliance-reader
4. Assign the Viewer role at the project level
5. Download the JSON key file

Step 2: Connect in Nexxis

1. Settings → Integrations → Cloud Providers → Add → GCP
2. Upload the service account JSON key
3. Click Test Connection → Save

---

Connecting Azure

Step 1: Create an App Registration

1. In Azure Portal: Azure Active Directory → App Registrations → New Registration
2. Name it Nexxis Compliance Reader
3. Copy the Application (client) ID and Directory (tenant) ID
4. Under Certificates & Secrets, create a new client secret

Step 2: Assign Permissions

Assign the Reader role to the app registration at the subscription level.

Step 3: Connect in Nexxis

1. Settings → Integrations → Cloud Providers → Add → Azure
2. Enter Tenant ID, Client ID, and Client Secret
3. Click Test Connection → Save

---

What Nexxis Collects

Data is collected **once per hour** by default. You can trigger a manual refresh anytime.