Skip to main content
Updating an AWS account keeps Plerion’s permissions up to date, ensuring the platform can continue scanning your cloud environments and reporting accurate findings. You should update an account if:
  • Template update required: The Plerion CloudFormation template has been updated with new permissions. This is flagged by the PLERION-PLN-02 detection. If this finding fails, update the account.
  • Enable or disable CWPP: Add or remove the Cloud Workload Protection Platform (CWPP) capability for an existing account.

​
Steps to update a single AWS account

If you onboarded your AWS account using the Automated mode, you can update the CloudFormation stack in one of three ways:
  • Update existing stack using the AWS Console
  • Update existing stack using the CLI
  • Create a new stack

​
Update existing stack using the AWS Console

1

Open the AWS account you want to update

  • On the Plerion dashboard, go to Settings > Integrations, and find the AWS account you want to update
  • Click the edit icon next to Role ARN
2

On the Update Existing Stack (Console) tab, click Launch stack

3

On the Specify stack details page in AWS, open Configure stack options

4

Copy the stack parameters from Plerion to AWS

Copy each value from Plerion’s Stack Parameters box into the matching field in AWS. The box only lists the parameters your integration uses, so leave any other field at its default.

5

Select the CWPP capability (optional)

To enable workload protection, select CWPP before continuing.
Select CWPP if you want to scan workloads such as EC2, Lambda, or ECS.
6

Review and confirm capabilities

On the Review page, tick the required Capabilities box.
7

Submit the stack update

  • In AWS, click Update stack to apply the changes.
  • Plerion will automatically detect the updated resources and refresh the integration when the update completes.

​
Update existing stack using the CLI

1

Open the AWS account you want to update

  • On the Plerion dashboard, go to Settings > Integrations, and find the AWS account you want to update
  • Click the edit icon next to Role ARN
2

On the Update Existing Stack (CLI) tab, copy the CLI command

3

Insert stack parameters

Copy all values from Plerion’s Stack Parameters box into the CLI command.
4

Run the CLI command

  • Execute the command in your terminal.
  • Plerion will automatically detect the updated resources once the update completes.

​
Create a new stack

1

Open the AWS account you want to update

  • On the Plerion dashboard, go to Settings > Integrations, and find the AWS account you want to update
  • Click the edit icon next to Role ARN
2

On the Create a New Stack tab, click `Launch stack`

3

Deploy the stack in AWS

Follow the on-screen instructions in AWS to create the new stack.
4

Verify the update in Plerion

After deployment, Plerion will detect the new resources and refresh the integration.

​
Manual mode

If you onboarded your AWS account using Manual mode, update the IAM role directly.
1

Edit the IAM role in AWS

In your AWS account, open the IAM role used by Plerion and edit its configuration.
2

Apply the updated policy

Replace the trust policy or permissions JSON with the updated values shown in Plerion.
3

Validate the integration in Plerion

Save your changes in AWS, then return to Plerion and click Update to validate the integration.

​
Steps for updating multiple AWS accounts

You can only update multiple accounts from the management account integration.
1

Open the AWS management account you want to update

  • On the Plerion dashboard, go to Settings > Integrations, and find the AWS management account you want to update
  • Click the edit icon next to Role ARN
2

Select Multi Account Onboarding

  • On the Edit integration page, click Update using Multi Account Onboarding.
  • On the Select capabilities screen, click Next.
3

Click the Update Existing StackSet tab

4

Copy the stack parameters to AWS

Copy each value from Plerion’s Stack Parameters box into the matching field in AWS. The box only lists the parameters your integration uses, so leave any other field at its default.
5

Set deployment options

On the Set deployment options page in AWS, set Automatic deployment to Deactivated.
6

Review and submit the update

  • On the Review page in CloudFormation, tick the required Capabilities box, then click Submit.
  • Plerion will automatically detect the updated StackSet resources once the update completes.