Integration

AWS is a hosting target you reach with an IAM access key. You paste the key, and the agent uses it for the infrastructure work in a Plan you approved.

What it does

• Deploys to the AWS services a Plan names, using your key.
• Reads back whether a deploy succeeded, so the result shows in Selfbase.
• Checks the key once when you paste it, so a mistyped key surfaces then rather than mid-Run.
• Waits for you. The agent never ships on its own, on any plan.

Connecting

Open Workspace settings, then Connections, and choose AWS. Paste an access key ID and secret from IAM, then Users, then Security credentials.

What each permission is for

• An IAM access key ID and secret Whatever that IAM identity is allowed to do, the key can do. AWS gives an app no way to narrow a pasted key, so scope it in IAM before you paste it.
• sts:GetCallerIdentity One free call when you paste the key, to confirm it works and to show which account it belongs to.

We do not ask for your AWS console sign-in, and we never create a key of our own.

How your credentials are held

Your credential is encrypted with a key that belongs to your workspace and stored as ciphertext. It is decrypted only at the moment it is used, and never inside a sandbox where code runs. We never log it.

Removing it

Disconnect under Workspace settings, then Connections, which deletes our copy. Delete the key itself in the AWS console under IAM, then Users, then Security credentials, which ends our access immediately.

To have everything Selfbase holds about you deleted, see data deletion.

Support

Email hello@selfbase.com. Our privacy policy and terms cover every integration.