Connect your AWS account

Start from the AWS Account Setup modal so STRUX can pass your generated ExternalId into AWS.

1. 1Sign in to STRUX and open the dashboard.
2. 2When the AWS Account Setup modal appears, confirm the region requirement is ap-south-1.
3. 3Click Open CloudFormation Quick Create and keep the STRUX tab open.

Use the modal button, not a manually built CloudFormation URL, because the role validation depends on the generated ExternalId.

AWS opens the Quick create stack page with the template, stack name, and ExternalId already filled.

1. 1Scroll to the Capabilities section.
2. 2Check I acknowledge that AWS CloudFormation might create IAM resources with custom names.
3. 3Click Create stack.

CloudFormation needs a short moment to create the cross-account IAM role.

1. 1Stay on the CloudPilotAccessStack page.
2. 2Refresh or wait until the stack status shows CREATE_COMPLETE.
3. 3Continue only after the green complete status appears.

This usually completes in under two minutes.

After the stack is complete, use the stack tabs to find the IAM role that was created.

1. 1Stay inside CloudPilotAccessStack.
2. 2Click the Resources tab.
3. 3Look for the CloudPilotRole resource row.

The Physical ID opens the actual IAM role page where AWS shows the full ARN.

1. 1In the Resources table, find CloudPilotRole.
2. 2Click the Physical ID named CloudPilotAccess-default.
3. 3AWS will navigate from CloudFormation to IAM.

STRUX validates access by assuming this IAM role, so copy the ARN exactly as AWS shows it.

1. 1On the IAM role page, find the ARN field in the Summary panel.
2. 2Click the copy icon beside the ARN.
3. 3The ARN should look like arn:aws:iam::123456789012:role/CloudPilotAccess-default.

Paste the copied ARN back into the setup modal to confirm STRUX can assume the role.

1. 1Return to the STRUX tab.
2. 2Click Next if the modal is still on the deploy step.
3. 3Paste the Role ARN and click Validate & Save.

The CloudFormation Outputs tab also contains RoleArn; either source is fine as long as the ARN is copied exactly.

A successful validation stores the role ARN and marks the AWS account as connected.

1. 1Open Settings.
2. 2Confirm the AWS Account badge reads Connected.
3. 3You can now use AWS-backed STRUX workflows.