Onboarding

Preparing your cloud credentials

We only ever need read-only access. Here's exactly how to set it up in AWS or Azure — takes less than 5 minutes.

☁ AWS Setup
Create a read-only IAM user in your AWS account. This gives us visibility into your resources with zero ability to make changes.
1

Open IAM in AWS Console

Go to console.aws.amazon.com → Services → IAM → Users → Add User

2

Name the user

Call it something like nubolabs-readonly so it's easy to identify and revoke later.

3

Attach permissions

Select "Attach policies directly" and search for and attach:

ReadOnlyAccess
4

Create access keys

Go to the user → Security credentials → Create access key → Select "Third-party service"

5

Send us the credentials

Email your Access Key ID and Secret Access Key to:
kenziebollon@nubolabs.co.uk

We recommend using a secure method like 1Password Share. Never send via Slack or WhatsApp.

🔷 Azure Setup
Create a service principal with Reader role in your Azure subscription. Read-only, zero ability to make changes.
1

Open Azure Cloud Shell

Go to portal.azure.com and click the Cloud Shell icon (top right) or use the Azure CLI locally.

2

Create a service principal

Run this command:

az ad sp create-for-rbac --name "nubolabs-readonly" --role Reader --scopes /subscriptions/YOUR_SUBSCRIPTION_ID
3

Copy the output

The command returns a JSON object with appId, password, and tenant. Copy all of it.

4

Send us the credentials

Email the JSON output to:
kenziebollon@nubolabs.co.uk

Use a secure sharing method. We recommend 1Password Share or similar.

5

Revoke after audit

Once the audit is complete, delete the service principal:

az ad sp delete --id YOUR_APP_ID
🔒

Our security commitment

Your credentials are used solely for the agreed audit. They are stored encrypted, never shared with any third party, and we request you revoke them within 30 days of audit completion unless on an active retainer. We have never and will never make changes to a client's infrastructure without explicit written approval. Read our full Privacy Policy and Terms of Service.

Ready to go? Send your credentials and we'll get started.

Email credentials →