•The agent is using the authentication parameters to access the AWS account. In case of sub-account, the agent tries to authenticate against them.  If the "ALLOW SUB-ACCOUNT SKIPS" checkbox is checked, the agent will ignore failed sub-account authentications and will continue with the inventory.

•The name of the S3 bucket needs to be provided in the BUCKET NAME field. After the authentication, the agent will connect to this bucket and download the object/files by either using the OBJECT KEYS or the OBJECT KEY PATTERN.

•When importing the data from a CSV object, the data within the file should be comma (,) separated.

•The AWS REGIONS field can be used to select specific regions for the import only. If left empty, data from all active regions will be fetched.

•For the inventory it is recommended to setup a custom inventory account under the parent AWS account. It is necessary to provide the ACCESS KEY ID and the SECRET ACCESS KEY for the account.

•It is recommended to setup a custom inventory role. The permissions required for the inventory are assigned to this role. When connecting, the user account authenticates using the ACCESS KEY ID and the SECRET ACCESS KEY. Afterwards the user account uses the ASSUME ROLE ARN CHAIN in order to inventory the respective service.

•It is possible to use a session token for the connection with the Session Token Service by entering the token into the SESSION TOKEN field. If the value of this field is null, the default value will be used.