ShellShift – Setup

Connect your source AWS account

We need read-only access to scan your source environment. No write permissions required.

Source account details

AWS Account ID

IAM Role ARN (read-only)

Source region

Create a read-only role with policy ReadOnlyAccess and trust principal arn:aws:iam::ShellShift_ACCOUNT:root. We never store your credentials.

← Back to dashboard

The target account needs write permissions so ShellShift can recreate your resources there.

Target account details

AWS Account ID

IAM Role ARN (write access)

Target region

Migration name (optional)

Double-check the details before we start the inventory scan.

Source account –

Source region –

Target account –

Target region –

Migration name –

IAM access Verification on scan start