Accounts & Supported Providers
How MCM connects to cloud and infrastructure providers, and which providers are supported.
Accounts & Supported Providers
An account in MCM is a credential-backed connection to a cloud provider, source control system, container registry, or host. Connecting an account is a one-time step — every MCM module (Discovery, FinOps, Governance, SecOps, Orchestration, and Observability) then uses that connection without any per-module credential setup.
Connecting an Account
MCM provides a guided onboarding wizard for each provider type, with permission templates and step-by-step validation. Each connected account shows a live connection status — Active, Warning, or Failed — so credential issues are visible before they cause module outages. Accounts can be labelled with environment tags (Production, Staging, Development) that carry through to all modules.
Supported Providers
Cloud Providers
| Provider | Credential Type | Modules Unlocked |
|---|---|---|
| IAM Role (cross-account assumed role) | Discovery, FinOps, Governance, SecOps, Orchestration, Observability | |
| Service Principal (App Registration + client secret) | Discovery, FinOps, Governance, SecOps, Orchestration, Observability |
Source Control
| Provider | Credential Type | Modules Unlocked |
|---|---|---|
| Personal Access Token or GitHub App | Discovery (repos, orgs), SecOps (code scanning) |
Container Providers
| Provider | Credential Type | Modules Unlocked |
|---|---|---|
| Username + Access Token | Discovery (images), SecOps (container scanning) | |
| Docker socket or daemon API | Discovery (containers), SecOps (container scanning) |
Host Providers
| Provider | Credential Type | Modules Unlocked |
|---|---|---|
| SSH key or agent-based (Wazuh agent) | Discovery (hosts), Governance (host policies), SecOps (host scanning), Observability (host logs & metrics) |