Combined Access Overview

When you do not want to allow EC2 instances to assume the role due to security or other considerations, you can use the combined access method.

As shown in the following diagram, key-based access is used to access the gateway account. The created user can then assume the role in the monitored accounts. This approach allows you to install the Front Server anywhere, as long as it has access to the AWS website.