# AWS integration

Connect your AWS accounts so Anyshift can continuously scan and map your cloud infrastructure into a versioned resource graph.

Source: https://anyshift.io/for-agents/integrations/aws

## Availability

- Available.

## Capabilities

- Agentless read-only scanning across all your AWS accounts

- Supports IAM users and IAM roles for access

- Optional CloudTrail forwarder for real-time change tracking

## Connect and verify

- Check the intended project's existing integration before adding a connection.

- Verify that the resources and time window needed for the task are covered. Connection status alone does not establish that the evidence is available.

[AWS setup and permissions](https://docs.anyshift.io/pages/integration/aws)

## Use cases

- Trace an incident from a CloudWatch alert to the Terraform PR that caused it

- Map blast radius across AWS accounts when a resource changes

## Continue

[All integrations](https://anyshift.io/for-agents/integrations)

[Query your project with Graph MCP](https://anyshift.io/for-agents/product/context)