WEBVTT

1
00:00:00.935 --> 00:00:03.028 position:50% align:center size:88%
Open Keyless cloud access.

2
00:00:03.028 --> 00:00:05.843 position:50% align:center size:88%
Choose your AWS account and region.

3
00:00:05.843 --> 00:00:10.918 position:50% align:center size:88%
Platform staff must prepare the runtime
reader and exact customer roles before setup.

4
00:00:12.132 --> 00:00:14.723 position:50% align:center size:88%
Preview and review the complete command.

5
00:00:14.723 --> 00:00:19.850 position:50% align:center size:88%
Run it in AWS CloudShell, review
the change set, then type apply.

6
00:00:19.850 --> 00:00:23.651 position:50% align:center size:88%
This prepares cloud access without
creating workloads or scanners.

7
00:00:24.723 --> 00:00:28.383 position:50% align:center size:88%
Copy only the final public
JSON into the output field.

8
00:00:28.383 --> 00:00:31.545 position:50% align:center size:88%
It must match this workspace
and the reviewed target.

9
00:00:31.545 --> 00:00:34.466 position:50% align:center size:88%
Never paste keys, secrets or tokens here.

10
00:00:35.555 --> 00:00:38.314 position:50% align:center size:88%
Preview the separate read
and write connections.

11
00:00:38.314 --> 00:00:40.684 position:50% align:center size:88%
Execution consent stays off.

12
00:00:40.684 --> 00:00:43.114 position:50% align:center size:88%
Exact existing connections are reused;

13
00:00:43.114 --> 00:00:45.994 position:50% align:center size:88%
conflicting identities are
never silently overwritten.

14
00:00:47.178 --> 00:00:50.802 position:50% align:center size:88%
Import the connections, then
test each one separately.

15
00:00:50.802 --> 00:00:52.368 position:50% align:center size:88%
Read both results.

16
00:00:52.368 --> 00:00:56.273 position:50% align:center size:88%
These checks do not prove every
cloud permission or perform a repair.

17
00:00:57.792 --> 00:01:02.196 position:50% align:center size:88%
For Azure, review the directory,
subscription and resource group.

18
00:01:02.196 --> 00:01:06.175 position:50% align:center size:88%
The optional writer uses a separate
application scoped to that group.

19
00:01:06.175 --> 00:01:08.831 position:50% align:center size:88%
Review the CloudShell
command before applying it.

20
00:01:09.959 --> 00:01:13.398 position:50% align:center size:88%
Paste Azure's public output
and preview the connections.

21
00:01:13.398 --> 00:01:18.572 position:50% align:center size:88%
Platform staff must verify and approve
these application IDs for this workspace.

22
00:01:18.572 --> 00:01:21.646 position:50% align:center size:88%
Copy the application handoff
while import is blocked.

23
00:01:22.944 --> 00:01:27.058 position:50% align:center size:88%
After staff approval, refresh
application approval and import.

24
00:01:27.058 --> 00:01:31.203 position:50% align:center size:88%
Saving does not verify access
or enable execution consent.

25
00:01:31.203 --> 00:01:33.959 position:50% align:center size:88%
Test the identities before
relying on their evidence.