Can customers restrict Nuon’s access to their infrastructure?

QUESTION

Can customers restrict Nuon’s access to their infrastructure?

ANSWER

Yes, customers of software vendors using Nuon to install their apps into customer cloud accounts, own and control the IAM roles that grant access.

The customer creates these roles when deploying the CloudFormation stack provided by the software vendor - and the roles are granted to the Nuon runner inside the customer cloud VPC.

The customer can scale down the ASG EC2 VM to turn off the runner and prevent access to the customer's cloud by the Nuon control plane.

Nuon operates under a least-privilege model, ensuring no unnecessary permissions are granted.