AWS infrastructure

Knocknoc shipsorchestrates AWS Security Groups, which gate network access to EC2 instances and anything else a security group fronts. It is a built-in integration: the agent drives it with the AWS CLI on the agent host, authenticating as a restricted IAM user you create. The setup, the IAM policy and the knoc configuration are on AWS (EC2) Security Groups.

Other AWS services are not built in. Where you need one, a Custom script knoc runs a script foryou updatingwrite security groups in AWS. Checkouton the backendagent documentation here:host. https://docs.knocknoc.io/books/admin-guide/page/aws-ec2-security-groupsAWS WAF Ipset

This includes an IAM role for updating the security group. 

This approach allows foris a largeworked degree of flexibility in using Knocknoc for AWS resources, and could easily be adapted to any of the other methods available.example.

Further more nuanced support for AWS services is on the roadmap. Please feel free to provide feedback if you have any other requirements.

Providing your own script

Knocknoc agent simply runs the script provided in the Backend config with the arguments documented. It's a simple matter of replacing the script and ensuring the user 'knocknoc-agent' can run the script with correct permissions, and you can adapt it to work however you like.