What Permissions Does Kawach.AI Take and Why?

Kawach.AI follows a strict principle of minimal and purpose-driven access across cloud platforms such as GCP (Google Cloud Platform), Azure, AWS (Amazon Web Services) etc, ensuring effective compliance monitoring without impacting your cloud operations.

• Authorization Requirements:
  

  Requires appropriate administrative access (such as project owner, account admin, or IAM role permissions) to securely authorize the integration and assign required roles.

• Resource Visibility (Read-Only):
  

  Gains read-only access to cloud resources, configurations, and assets to review infrastructure setup, resource states, and overall environment posture.

• Security and IAM Configuration Access (Read-Only):
  

  Reviews IAM roles, policies, and security configurations to evaluate access controls, detect misconfigurations, and ensure compliance with security standards.

• Monitoring and Logs Access (Read-Only):
  

  Accesses monitoring data, logs, and metrics to assess system health, identify anomalies, and surface compliance-related alerts.

• Infrastructure and Deployment Review (Read-Only):
  

  Analyzes infrastructure-as-code configurations (such as CloudFormation) to validate secure deployment practices and governance controls.

• Identity and Profile Access (Read-Only):
  

  Reads basic profile and identity information required for authentication, authorization validation, and integration setup.

• Purpose of Access:
  

  These permissions enable Kawach.AI to continuously monitor risks, detect security gaps, enforce compliance policies, and maintain audit readiness across cloud environments.

• Non-Intrusive Operation:
  

  All access is strictly read-only, ensuring that no cloud resources, configurations, or deployments are modified while compliance checks run continuously.

Your Data is Safe

Kawach.AI is designed with a strong focus on cloud security and data protection. All integrations operate strictly in read-only mode, meaning no changes are made to your cloud resources, configurations, or infrastructure.

This ensures that your environments remain fully secure and under your control while Kawach.AI continuously monitors for risks, compliance gaps, and security issues. You gain complete visibility and actionable insights without any impact on your existing cloud operations.