Security

Read-Only Access
IRIE performs discovery without modifying customer resources. Discovery activities are limited to authorized read-only operations, allowing organizations to evaluate their environments while maintaining operational control.

Cross-Account Access
For organizations operating multiple accounts, IRIE supports secure cross-account discovery using native capabilities. Customers determine which accounts participate and may revoke access at any time.

AssumeRole
IRIE uses the AssumeRole capabilities to obtain temporary credentials for discovery activities. Long-lived credentials are not required for normal discovery operations.

Cross-Account Trust
Cross-account trust is configured during onboarding. Review the trusted principal, External ID conditions, and permission policy with your security team before granting access.

Least Privilege
Customer access policies are designed to grant only the permissions required for supported discovery activities. Access should be reviewed periodically as governance practices evolve.

Customer Data Isolation
IRIE is designed so that each customer’s discovery information remains logically isolated. Data handling practices are intended to support enterprise governance and customer confidentiality.

Encryption Review
Review the deployment’s transport encryption, storage encryption, key management, and retention controls with Short Hill as part of your security evaluation. Requirements should be confirmed for the environment in which IRIE will operate.

Reviewable Records
Discovery and analytics run histories and recorded findings provide a basis for review and troubleshooting. Confirm event coverage, retention, and audit requirements during your security evaluation.

Privacy
IRIE is designed to collect infrastructure information necessary for discovery and analysis. Customers retain ownership and control of their environments and determine when discovery is performed.

Secure Deployment
Deployment guidance follows security best practices, including customer-controlled access, documented onboarding procedures, and secure configuration recommendations.