Step 1: Create a Secure Connection

To securely scan your AWS account, we use a one-click CloudFormation setup. This creates a read-only IAM Role in your account that Loxe AI can temporarily use. We never see or store your secret keys, and you remain in complete control.

After creating the stack, navigate to the Outputs tab in CloudFormation and paste the RoleArn and your region below.

Step 2: Run the Evidence Tracer

Once the connection is ready, our agent will perform a live, read-only scan of your S3 buckets for the SOC 2 CC6.1 control. Your results will appear below.