Synqly Now Integrates with AWS IAM Identity for Scalable Identity and Audit Log Access

Synqly is announcing a new AWS IAM Identity integration that allows OEM customers to connect AWS identity data and CloudTrail audit logs to their security and IT workflows through Synqly’s unified API. Teams that need to query IAM users, enumerate groups, and pull management event logs across AWS environments can now do so without building or maintaining a bespoke AWS connector.

What Is AWS IAM Identity?

Amazon Web Services (AWS) is the world’s most widely deployed cloud computing platform. AWS Identity and Access Management (IAM) is the native service that controls who and what can access AWS resources. IAM manages users, groups, roles, and policies, while AWS CloudTrail records the management events generated by those identities. Together, they form the audit and access control foundation for virtually every organization running workloads in the cloud.

What OEM Customers Can Do with This Integration

With the Synqly AWS IAM Identity integration, OEM customers can query IAM users and groups, retrieve detailed user objects that include group membership and role assignments, and pull CloudTrail management events as normalized audit log data. This matters for security vendors building identity governance workflows, SIEM pipelines that need cloud audit telemetry, and compliance-driven tools that must demonstrate who did what inside an AWS environment.

The integration supports the following capabilities through Synqly’s normalized API: Get User, Get Group, Get Group Members, Query Users, Query Groups, and Query Audit Log. The Query Audit Log function pulls CloudTrail LookupEvents data, returning event objects that can feed directly into downstream SIEM, ticketing, or case management platforms. Because Synqly normalizes all output into OCSF-aligned entity management events, the data is consistent regardless of which identity provider sits behind the connector.

For product and engineering teams, this eliminates the cost of writing and maintaining direct AWS SDK integrations for each customer deployment. Rather than managing IAM credential rotation, regional client configuration, and policy enforcement per customer, the integration is handled once through Synqly. Role-based access using AWS IAM role assumption is supported and recommended for production, aligning with AWS security best practices and reducing the risk of long-lived credential exposure.

The use cases are broad. A vulnerability management platform can cross-reference CVEs against the IAM users and groups that own affected resources. An incident response tool can pull CloudTrail events tied to a specific user or session within a defined time window. A compliance reporting tool can enumerate group membership and generate access reviews for auditors, all through a single API call, normalized and ready.

This integration is part of Synqly’s expanding Identity Access Management connector category, which supports a growing set of providers under one standardized interface. OEM customers already using Synqly for SIEM, ticketing, or endpoint integrations can add AWS IAM Identity to the same pipeline without any additional abstraction work.

Where to Find More Details

Full setup instructions, required IAM policy actions, and credential configuration options are available in the AWS IAM Identity Configuration Guide on Synqly Docs. You can also explore the AWS IAM Identity integration partner page for a summary of supported capabilities. To see the full list of Synqly’s integration partners or to get started, visit synqly.com/integration-partners.