Reference & Troubleshooting
Access
| Need | Do |
|---|---|
| Get / re-get your AWS account | Self-service login (top of page) |
| Console loads but actions denied | You may be OBSERVE (read-only); ask a facilitator |
| Link says token expired | Just re-click the self-service login for a fresh one |
DAC quick map
| You want to… | Go to |
|---|---|
| Top risks at a glance | Dashboards → IaaS |
| Browse sensitive data | Data Stores (Tree View) |
| Work exposed resources | Reports → Overexposed Resources |
| Work identities/entitlements | Reports → Monitored Identities / Entitlements |
| Explain access | Access Review / Access Graph / Permission Summary |
| Investigate activity | Investigation → Activities |
| Framework posture | Security Posture |
Environment facts
- Region:
us-east-1for everything. - 1 DAC tenant : 1 AWS account.
- Local Collector: one per tenant/account, deployed in advance.
- Reset handled by facilitators (tag-based cleanup).