The Scaleway integration enables security and compliance teams to automate User Access Reviews (UAR) by syncing user and access data from Scaleway. This helps organizations review who has access to Scaleway resources and maintain accurate access records for compliance monitoring.
Key Capabilities
User Access Review Data Sync: Import Scaleway user and application access data into Drata
Access Governance: Monitor which users and applications have access to your Scaleway organization
Compliance Monitoring: Maintain visibility into system access to support audit and compliance requirements
This integration supports User Access Review workflows, helping demonstrate compliance with access control policies.
Prerequisites & Data Access
Scaleway Access Requirements
Your Scaleway role must have access to Organization Features.
You must retrieve your Scaleway Organization ID.
You must create a Scaleway application and API key to authenticate the integration.
You must create a policy with organization feature access for the application.
Drata Role Requirements
To create or modify connections, you must have one of the following Drata roles with write access: Admin, Workspace Manager, or DevOps Engineer
Access Reviewers can view the connection page but cannot create or modify connections
Permissions & Required Access
Permission / Access | Why It’s Needed |
Access to Organization features | Allows Drata to retrieve organization-level access data |
Scaleway Organization ID | Identifies the organization being connected |
Secret Key (API key) | Authenticates the integration with Scaleway |
Step-by-Step Setup
Step 1: Retrieve Your Scaleway Organization ID
Log in to your Scaleway account.
Navigate to your Organization Dashboard.
Open the Settings tab.
Locate and copy the Organization ID.
Expected outcome:
You have copied the Scaleway Organization ID required for the integration.
Step 2: Create a Policy for the Application
Select your profile icon in the top-right corner.
Navigate to Identity and Access Management (IAM).
Open the Policies tab.
Select Create policy.
Enter the following details:
Name
Description
Principal
Configure the principal:
Principal type: Select Application
Application: Enter or select the application name.
Add a rule:
Select Access to Organization features.
Validate the rule and create the policy.
Expected outcome:
A policy with organization feature access is created.
Step 3: Create the Scaleway Application
In IAM, navigate to the Applications tab.
Select Create application.
Enter the following details:
Application name
Description
Attach the policy created in Step 2.
Select Create application.
Expected outcome:
A Scaleway application is created with the required policy.
Step 4: Generate an API Key
In IAM, open the API keys tab.
Select Generate API key.
Configure the key with the following settings:
API key bearer: Select An application and choose the application created earlier.
Expiration: Select Never.
Object Storage usage: Select No, skip for now.
Generate the API key.
Copy the Secret Key and store it securely.
Expected outcome:
You have generated a Secret Key that will be used to authenticate the integration.
Step 5: Connect Scaleway in Drata
Log in to Drata → go to the Connections page.
Navigate to your Available Connections.
Search for and start the Scaleway connection process.
Enter the following information when prompted:
Scaleway Organization ID
Secret Key
Expected outcome:
Scaleway is successfully connected and access data begins syncing to Drata.
Important Notes
Authentication method: The Scaleway integration uses an API key (Secret Key) tied to a Scaleway application.
Required policy: The application must have a policy granting Access to Organization features.
Security best practice: Store API keys securely and rotate them according to your organization’s security policies.
Network restrictions: If your organization uses a Web Application Firewall (WAF), ensure required Drata IP addresses are allowlisted so the connection can be established.