Revoke Access
How to remove InfraDesk access from your AWS account
You can revoke InfraDesk access at any time. Revoking access does not delete or modify any AWS resource.
â Revoking access only removes InfraDesk ability to scan your account. It does not delete, stop, or modify any AWS resource. Your existing waste reports remain accessible in your InfraDesk dashboard.
Recommended
Option 1: Delete the CloudFormation stack
This is the recommended method. Deleting the CloudFormation stack removes the IAM role and all associated permissions in one step.
1
Open AWS Console
Go to console.aws.amazon.com and sign in to the AWS account you connected to InfraDesk.
2
Navigate to CloudFormation
In the search bar, type "CloudFormation" and click on the service.
3
Find the InfraDesk stack
Look for a stack named InfraDeskAccess-* (for example, InfraDeskAccess-1b5f80d8). This is the stack InfraDesk created.
4
Select and delete the stack
Click the stack name â click the Delete button â confirm deletion. The IAM role is removed immediately after the stack deletion completes.
5
Verify deletion
After deletion, the stack status shows DELETE_COMPLETE. InfraDesk can no longer access your account.
Alternative
Option 2: Delete the IAM role manually
If you prefer to manage IAM directly, you can delete the IAM role without touching the CloudFormation stack.
1
Open AWS Console â IAM
Navigate to IAM â Roles in your AWS Console.
2
Find the InfraDesk role
Search for a role named InfraDeskRole or InfraDesk-* in the roles list.
3
Delete the role
Click the role name â click Delete â confirm. InfraDesk can no longer assume this role.
Note: If you delete the IAM role but not the CloudFormation stack, the stack will show a drift or error state. We recommend deleting the stack (Option 1) instead.
How to verify access is removed
âIn AWS Console â IAM â Roles: the InfraDeskRole should no longer appear.
âIn InfraDesk dashboard: the account will show an error or disconnected status on next scan attempt.
âIn CloudFormation: the stack shows DELETE_COMPLETE status.
What happens after you revoke access
đ
Existing reports are preserved
Your waste reports, savings proof cards, and scan history remain in your InfraDesk dashboard. Revoking access does not delete your data.
đ
Future scans stop
InfraDesk will no longer be able to scan your AWS account. Scheduled scans and alerts will stop for the disconnected account.
âī¸
AWS resources are unchanged
No AWS resources are deleted, stopped, or modified when you revoke access. Your production environment is not affected.
đ
You can reconnect later
If you want to reconnect InfraDesk, deploy a new CloudFormation stack from the connect page. A new IAM role will be created.