Connect AWS Bedrock

Anchor a scope, establish trust, then read only the accounts you choose.

What are we anchored to?

This decides what can be enumerated — and what stays invisible

Single AWS accountOne account, connected directly. Nothing to enumerate.no enumeration
AWS OrganizationAnchored at the management account, so every member account can be listed and connected in one pass.enumerates · organizations:ListAccounts

Account ID

Anchoring at a single account means nothing beside it can ever be seen. Its siblings will not appear, and their spend will not be attributable.

Regions to scan

Inference is regional; unlisted regions are not read

Cancel

Enter the account id and pick at least one region

You run every grant yourself, in your own console. Pathfinder never asks for a password or a key you typed into it, and no role it can assume carries a write permission.