Seemplicity

On the “select type of trusted entity” choose “Another AWS account”

in the Account ID field add the account number: 104338399232 and click “Next: Permissions”

in the policy table search for securityhub and mark AWSSecurityHubReadOnlyAccess policy then click “Next: Tags”

Add any tag required by your practices and click next

In the roles table find the role just created and click it 

From the summary screen copy the Role ARN and paste it above in the relevant field

For extra security go to the “Trust relationships” tab and click the “edit trust relationships” 

in the window opened change arn:aws:iam::104338399232:root to arn:aws:iam::104338399232:role/seemplicity_collector then update the trust policy

1. In your AWS console go to IAM service
2. On the left menu side choose roles
3. Choose “Create Role”
4. On the “select type of trusted entity” choose “Another AWS account”
5. in the Account ID field add the account number: 104338399232 and click “Next: Permissions”
6. in the policy table search for securityhub and mark AWSSecurityHubReadOnlyAccess policy then click “Next: Tags”
7. Add any tag required by your practices and click next
8. Add a role name and click next
9. In the roles table find the role just created and click it 
10. From the summary screen copy the Role ARN and paste it above in the relevant field
11. For extra security go to the “Trust relationships” tab and click the “edit trust relationships” 
12. in the window opened change arn:aws:iam::104338399232:root to arn:aws:iam::104338399232:role/seemplicity_collector then update the trust policy

Name: &lt;Friendly name for this collection instance&gt;

AWS Account #: &lt;The account # to collect from&gt;

Role Name: &lt;Name of the role to assume in the collected account&gt;

Regions: &lt;COmma seperated list of AWS regions to collector from&gt;

1. Name: &lt;Friendly name for this collection instance&gt;
 AWS Account #: &lt;The account # to collect from&gt;
 Role Name: &lt;Name of the role to assume in the collected account&gt;
 Regions: &lt;COmma seperated list of AWS regions to collector from&gt;