---
title: Registering Cloud Provider Accounts
slug: kronpam-reference-guide-3-9-0/registering-cloud-provider-accounts
docTags: 
createdAt: 2026-10-09T10:35:49.250Z
---

Before a Cloud Secrets sync can be created, the AWS, Azure, or GCP account must be registered in Kron PAM under Administration > Cloud Integration, with the Vault switch enabled under Credential Usage. Only accounts with Vault enabled appear in the Account dropdown when adding a Cloud Secrets sync.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/CTXsbBQb3-EPjB7i2U2v4_image.png "Figure – Cloud Integration Screen")

### AWS

·         Account Name (required).

·         Region (required).

·         API Key (required).

·         Secret Key.

·         Active: toggle to activate or deactivate the account.

·         Credential Usage: Enable for CIEM / Enable for Vault / Enable for Device Discovery switches. Enable for Vault must be turned on for this account to be usable in a Cloud Secrets sync.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/jnDD1oCg2CeIxg-7aAVSA_image.png "Figure – Administration > Cloud Integration – Add AWS Account")

### Microsoft Azure

·         Account Name (required).

·         Client ID (required).

·         Tenant ID (required).

·         Secret Key.

·         Resource Groups (required).

·         Subscription ID (filled in automatically).

·         Active.

·         Credential Usage: Enable for CIEM / Enable for Vault / Enable for Device Discovery switches. Enable for Vault must be turned on for this account to be usable in a Cloud Secrets sync.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/r3x-AMcRsT4XdynxvkiqM_image.png "Figure – Administration > Cloud Integration – Add Azure Account")

### Google Cloud Platform

·         Account Name (required).

·         Client Secrets (required).

·         Zone (required).

·         Project IDs (optional; if left empty, the service account's own project is used).

·         Active.

·         Credential Usage: Enable for CIEM / Enable for Vault / Enable for Device Discovery switches. Enable for Vault must be turned on for this account to be usable in a Cloud Secrets sync.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/yrSAcljH_gPcIOAwVNDT7_image.png "Figure – Administration > Cloud Integration – Add GCP Account")

The Cloud Integration list screen shows all registered accounts with their Account Name, Account Type, Status (Active/Passive), and separate indicators for whether the account is enabled for CIEM, Device Discovery, and Vault.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/HoPJhd6f7MmOHVrVo6VZL_image.png "Figure – Administration > Cloud Integration – Account List")