> ## Documentation Index > Fetch the complete documentation index at: https://docs.plerion.com/llms.txt > Use this file to discover all available pages before exploring further. # Linking target accounts to an AWS service account > Link AWS target accounts to your service account so CWPP appliances can scan workloads centrally across accounts. You can link target accounts either when creating new AWS integrations or by updating existing ones. The service account can only be linked to a target account that is part of the same AWS organization. *** ## Create new target accounts ### Onboard a single AWS account Sidebar navigation with Settings expanded and Integrations highlighted Click `Add single AWS account` to continue with onboarding a single AWS account. Integrations page with AWS account option and plus button to add integration
Integrations page with AWS account option, with the single account option or multi-account option * Select `CSPM`, `CIEM` and `CWPP` * For the CWPP deployment, choose `Service account` and select your service account. * Click `Next` to continue. Single-account capabilities with CWPP Service account Click `Launch stack` to open the **Quick create stack** page in AWS CloudFormation. Launch CloudFormation stack for AWS service account CloudFormation with Service account parameter present *** ### Onboard multiple AWS accounts using StackSets Sidebar navigation with Settings expanded and Integrations highlighted Click `Add accounts using Multi-Account Onbooarding` to add mutiple AWS accounts at once. Integrations page with AWS account option and plus button to add integration
Integrations page with AWS account option, with the single account option or multi-account option * Select `CSPM`, `CIEM` and `CWPP` * For the CWPP deployment, choose `Service account` and select your service account. * Click `Next` to continue. Single-account capabilities with CWPP Service account * Use the **ServiceAccountId** shown in Plerion. ServiceAccountId parameter reference in Plerion guide Update Existing StackSet flow in Plerion *** ## Update existing target accounts ### Update a single AWS account * On the Plerion dashboard, go to `Settings` > `Integrations`, and find the AWS account you want to update * Click the edit icon next to **Role ARN** Integrated AWS account with Role ARN highlighted In the capabilities list, enable CWPP.\ Under **Deployment strategy**, choose `Service account` and select the service account you created earlier. Select Service account for CWPP in single-account update If the Plerion template shows updated parameters, modify the stack parameters as shown in the guide. * Update the stack using the **AWS Console** or **CLI** by following the instructions in Plerion. * Automated mode is recommended for simplicity and reliability. Once the stack update completes, the AWS account integration will be updated and linked to the service account. ### Update multiple AWS accounts * On the Plerion dashboard, go to `Settings` > `Integrations`, and find the AWS management account you want to update * Click the edit icon next to **Role ARN** * In the **Edit integration** page, choose `Update using Multi Account Onboarding`. * On the **Select capabilities** screen, enable `CSPM`, `CIEM`, and `CWPP`. * Under **Deployment strategy**, select **Service account** and choose the service account you created earlier. Selecting service account for CWPP in multi-account update flow Switch to the **Update Existing StackSet** tab and follow the instructions provided in Plerion. Update Existing StackSet guide in Plerion When prompted, enter the **ServiceAccountId** shown in the guide. ServiceAccountId parameter in update guide * Complete the update using the **AWS Console** or **CLI**, as instructed in Plerion. * Automated mode is recommended for simplicity and reliability. Once the StackSet finishes, both existing and new AWS account integrations will be updated and linked to the service account. *** ## Verify the link On the Plerion dashboard, go to `Settings` → `Integrations` and open the AWS account integration.\ The integration will show the linked **Service account**, and CWPP scans will appear once they begin. AWS integration page showing linked service account
CWPP Asset Scans section showing recent scans *** ## Additional resources created * **`PlerionApplianceRole` (IAM role in the target account):** Assumed by service account appliances to run scans in the target account.