Integration Guides
These guides walk you through connecting your cloud providers and services to CloudQuery Platform. Each guide covers authentication setup, configuration, and verification — everything you need to start syncing data into the Asset Inventory.
How integrations work
The end-to-end flow for getting data into CloudQuery Platform is:
- Create an integration — authenticate with your cloud provider and configure which resources to sync
- Create a sync — schedule how often data is fetched and to which destination
- Browse and query — view resources in the Asset Inventory or run SQL in the SQL Console
Choose your integration
| Provider | Authentication method | Automated setup | Best for | Guide |
|---|---|---|---|---|
| AWS | Cross-account IAM role (OIDC) | Yes — CloudFormation wizard | First-time AWS users, multi-account orgs | Guided setup |
| AWS | Cross-account IAM role (IRSA) | No | Custom IAM policies, IaC-managed roles | Manual setup |
| AWS CUR | Cross-account IAM role | Yes — CloudFormation | Cost and usage data from AWS Billing | Guide |
| GCP | Service Account (JSON key) | No | GCP projects, orgs, or folders | Guide |
| Azure | Service Principal | No | Azure subscriptions or management groups | Guide |
| GitHub | PAT or GitHub App | No | Repositories, issues, PRs, org data | Guide |
| Kubernetes | Cloud provider credentials | No | EKS, AKS, or GKE clusters | EKS · AKS · GKE |
For providers not listed above, see the General Integration Setup Guide. CloudQuery supports hundreds of integrations — the guides above cover the most common cloud providers with provider-specific authentication steps.
Recommended starting path
If you’re setting up CloudQuery Platform for the first time:
- AWS users: Start with the AWS Guided Setup. The CloudFormation wizard handles IAM role creation automatically — no CLI commands needed.
- GCP users: Follow the GCP guide. You need a service account with the Viewer role and a JSON key file.
- Azure users: Follow the Azure guide. You need a service principal created via the Azure CLI.
- Multi-cloud: Set up each provider separately using the guides above, then create syncs for each. All resources appear together in the Asset Inventory.
After setup
Once your integration is configured and your first sync completes:
- Asset Inventory — Browse all synced resources in one place at Asset Inventory. Filter by provider, resource type, region, tags, and more.
- SQL Console — Run ClickHouse SQL queries against your synced data for security analysis, compliance checks, or cost optimization.
- Policies — Set up automated policies to continuously evaluate your cloud resources against best practices.
- Alerts — Configure alerts to get notified when queries return results that need attention.
General guides
These guides cover setup steps that apply to any integration or destination, regardless of the specific provider:
- General Integration Setup Guide — step-by-step walkthrough for configuring any integration
- General Destination Setup Guide — how to add destinations beyond the default ClickHouse database