The Aqua Cloud API can be used to onboard new AWS accounts in an automated fashion. Due to security requirements around the usage of the external ID (see more details here), this is a multi-step process.

  1. First, request an external ID from the API. You can request up to 50 external IDs in a single request, but each external ID may only be used once.
  2. Next, submit a POST containing the UUID per the "create key" documentation: