How-to
Connect assets
Bring assets into the Console: cloud connectors, on-prem agents, manual records, and CMDB sync.
Cloud connectors
The Console reads from AWS, Azure, and GCP through read-only roles. No write permissions are needed for the default assessments.
1
Create the role
Follow the provider-specific instructions in Settings → Connectors. The template grants only
Describe/Get/List level permissions.2
Paste the role ARN/ID
The Console verifies the role is reachable and reports any missing read permissions before saving.
3
Choose a schedule
Inventory refresh defaults to every six hours. You can change this per connector.
On-prem agents
For data that does not leave your environment, deploy the lightweight Console agent. It opens a single outbound TLS connection — no inbound ports.
CMDB sync
If you already maintain a CMDB, point the Console at it as the source of truth for asset ownership and criticality. Cloud connectors then enrich what's already there.