Start here

Getting started

From a new Shonin org to the first person opening the AWS console, in four steps.

#1. Create your Shonin org

Open https://app.shonin.ai, choose a name for your Shonin org and enter your email. Shonin is invite-only for now: you need an invite code. You get an email to verify your address and create your account; you are the first administrator, and a primary admin (see Second factor).

The name of your Shonin org is also its address: https://<your Shonin org>.app.shonin.ai.

#2. Connect your AWS organization

An administrator of your AWS management account deploys the Shonin installation with one click, then you enter the code it shows in Shonin. See Connect your AWS organization.

You can skip this step if your Shonin org only uses accounts that another company shares with it: see Share accounts with another company.

#3. Give people access

In the dashboard, ask the Assistant to invite people and to assign permission sets, for example:

Invite alice@acme.example, Alice Smith, as an administrator
Create a permission set ReadOnly with arn:aws:iam::aws:policy/ReadOnlyAccess
Assign ReadOnly to alice@acme.example on the account production

See People and groups and Permission sets and assignments.

People see the accounts and permission sets assigned to them in Console access, with Open console and Access keys (Console access), and can use them from a terminal with the shonin command (Command line and SDKs).

#4. Share accounts with another company

The Shonin org that connected an AWS organization can delegate single accounts to another Shonin org, which then assigns its own permission sets on them. See Share accounts with another company.

#Next

• Single sign-on with Google Workspace, so your people sign in with their company account.
• Second factor: set up an authenticator app.