AWS Integration

SecurityV0's AWS integration must be provisioned without console clickops.

This integration guide starts with the org-mode bootstrap path:

• delegated-admin / security account registration
• service-managed StackSets deployment
• member-account read-only role rollout
• parameterized ExternalId-based trust

Primary setup path

Use the provided automation artifacts:

• Org-mode bootstrap
• Templates

Rules

• Console setup is not the primary workflow.
• CloudFormation / StackSets is the default org-mode bootstrap path.
• Validation and teardown should be scripted.
• Terraform wrappers/modules may be added, but the StackSets baseline is the first required path.