AWS
AWS provides the infrastructure foundation for modern companies. Iru complements this by delivering unified compliance visibility across your AWS environment and providing device trust verification for secure access to AWS resources.
Unified AWS Compliance Evidence
Iru Compliance Automation connects to multiple AWS services, providing continuous evidence collection across your infrastructure.
Core AWS Services as Evidence Sources
- CloudTrail: All management activity and configuration changes flow into Iru as audit-trail evidence
- AWS Config: Resource inventory, compliance evaluations, and configuration timelines for infrastructure posture
- IAM: Users, roles, groups, policies, access keys, MFA status, and credential reports for access-control evidence
- IAM Identity Center: Permission sets, account assignments, and SSO application provisioning tied to your directory
- KMS: Key metadata, rotation status, and access policies ensure encryption governance
- Secrets Manager: Secret configuration, rotation policies, and access controls surface as security evidence
- S3: Bucket encryption, public-access blocks, versioning, and policies become compliance artifacts
- Security Hub: Aggregated findings and compliance posture across regions flow into a single evidence feed
- AWS Organizations: Multi-account governance, SCPs, and organizational policies appear as structural evidence
The Result
Your SOC 2, ISO 27001, HIPAA, or NIST audit spans both infrastructure and devices. No fragmented evidence collection.
Device Trust for AWS Access
Iru Endpoint provides the missing layer: device trust verification.
Device Posture as Access Policy
Connect device compliance status to AWS resource access decisions. An employee's Mac enrolls in Iru with full encryption and updated security tools—the device reports compliant. That compliance status flows to your AWS IAM policies or conditional access rules, unlocking access to sensitive resources. A device falls out of compliance, and access is restricted automatically.
VPN & Network Access Control
Deploy AWS VPN Client to your fleet via Iru's Library Items. Verify device posture before granting access to internal resources, AWS infrastructure, or hybrid environments. Device context becomes part of your access decision.
The Bridge: Endpoints to Infrastructure
When auditors ask, "Can you show me everyone who has access to our AWS account, what devices they're using, and what's running on those devices?"—you have one unified answer: device posture, user access, and infrastructure security all in Iru.
Integrations (26)
AWS IAM
Connect AWS IAM to Iru Compliance Automation to collect users, roles, policies, MFA status, and credential-report evidence.
AWS IAM Identity Center (Identity Store)
Connect the IAM Identity Center Identity Store to Iru Compliance Automation to collect directory users, groups, and memberships.
AWS IAM Identity Center (SSO)
Connect IAM Identity Center (SSO) to Iru Compliance Automation to collect permission sets, assignments, and SSO application metadata.
AWS CloudTrail
Connect AWS CloudTrail to Iru Compliance Automation to collect management event history, trail configuration, and event selectors.
AWS Config
Connect AWS Config to Iru Compliance Automation to collect Config rules, conformance packs, and resource configuration history.
AWS KMS
Connect AWS KMS to Iru Compliance Automation to collect key inventory, rotation status, and grant metadata.
AWS Secrets Manager
Connect AWS Secrets Manager to Iru Compliance Automation to collect secret inventory, rotation schedules, and tags.
AWS Security Hub
Connect AWS Security Hub to Iru Compliance Automation to collect findings, control status, and standard subscriptions as posture evidence.
Amazon GuardDuty
Connect Amazon GuardDuty to Iru Compliance Automation to collect detector configuration, finding metadata, and threat-intel settings.
Amazon Inspector
Connect Amazon Inspector to Iru Compliance Automation to collect vulnerability findings, scan coverage, and assessment metadata.
AWS CodeCommit
Connect AWS CodeCommit to Iru Compliance Automation to collect repository inventory, branch protection, and pull-request history.
Amazon S3
Connect Amazon S3 to Iru Endpoint to export unified activity logs, and to Iru Compliance Automation to collect bucket configuration and access-control evidence.
AWS Auto Scaling
Connect AWS Auto Scaling to Iru Compliance Automation to collect EC2 and Application Auto Scaling group configuration and activity.
AWS Lambda
Connect AWS Lambda to Iru Compliance Automation to collect function inventory, runtime, IAM role binding, and layer configuration metadata.
AWS Organizations
Connect AWS Organizations to Iru Compliance Automation to collect OU structure, account, and SCP metadata.
Amazon CloudWatch
Connect Amazon CloudWatch to Iru Compliance Automation to collect metric, alarm, and Logs metadata as monitoring evidence for audits.
Amazon DynamoDB
Connect Amazon DynamoDB to Iru Compliance Automation to collect table inventory, encryption settings, and control-plane metadata.
Amazon EC2
Connect Amazon EC2 to Iru Compliance Automation to collect instance inventory, security groups, and VPC network metadata as evidence.
Amazon ECS
Connect Amazon ECS to Iru Compliance Automation to collect cluster inventory, task definitions, and service configuration evidence.
Amazon EFS
Connect Amazon EFS to Iru Compliance Automation to collect file-system inventory, encryption status, and mount-target metadata.
Amazon EKS
Connect Amazon EKS to Iru Compliance Automation to collect cluster inventory, node-group configuration, and add-on metadata as evidence.
Amazon RDS
Connect Amazon RDS to Iru Compliance Automation to collect database instance configuration, cluster, and snapshot inventory metadata.
Amazon Redshift
Connect Amazon Redshift to Iru Compliance Automation to collect cluster configuration, snapshot, and parameter metadata for provisioned clusters.
Amazon Redshift Data API
Connect Amazon Redshift Data API to Iru Compliance Automation to collect statement and schema metadata for clusters and serverless workgroups.
Amazon Redshift Serverless
Connect Amazon Redshift Serverless to Iru Compliance Automation to collect namespace, workgroup, snapshot, and access metadata.
AWS Elastic Load Balancing (ELB)
Connect Elastic Load Balancing to Iru Compliance Automation to collect ALB, NLB, and Classic Load Balancer configuration and listeners.
Library Items (3)
Amazon Chime
Meet, chat, and place business calls with a single, secure application.
Amazon WorkSpaces
Secure, reliable, and scalable access to persistent desktops from any location.
AWS VPN Client
A fully-managed remote access VPN solution used to securely access resources within both AWS and your on-premises network.