Connect Your AWS Account

Link your AWS account via IAM role ARN so NightWatch can read your CloudTrail logs and send you real threat alerts. Takes under 5 minutes.

🔗
AWS Connection
Checking connection status...
› › ›
1
Your AWS Account
Confirm the account ID NightWatch will use
›

NightWatch accesses your AWS account using cross-account IAM roles. The AWS account below is the one NightWatch will assume into.

NightWatch AWS Account ID
Loading...
Enter this account ID when creating the IAM role in step 2.
2
Create IAM Role in AWS Console
Follow these exact steps — takes ~3 minutes
›

AWS Console Setup

  1. Sign in to the AWS Console of the account you want to connect
  2. Go to IAM → Roles → Create role
  3. Select "Another AWS account" and enter the NightWatch account ID shown above
  4. Check "Require external ID" — enter this unique ID:
Loading...
  1. Attach a permissions policy — either ReadOnlyAccess (recommended for most users), or create a custom policy with:
{ "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": [ "cloudtrail:LookupEvents", "s3:GetObject", "iam:GetUser", "iam:ListUsers", "iam:ListRoles" ], "Resource": "*" }] }
  1. Name the role (e.g., "NightWatch-Monitoring") and create it
  2. Copy the Role ARN (looks like: arn:aws:iam::123456789012:role/NightWatch-Monitoring)
Select AWS Region
3
Enter Your Role ARN
Test and save the connection
›
IAM Role ARN
Found in AWS IAM → Roles → [your role] → "Role ARN" field
AWS Account ID
The 12-digit account ID of the AWS account you're connecting
4
All Set
Connection verified and saved
›
✅

AWS Connected!

NightWatch is now monitoring your CloudTrail logs. You'll receive email alerts for any detected threats.