Managing Multiple AWS Partitions From a Single Kion Installation

Last updated: October 23, 2026

The steps below document how to manage other AWS partitions from a single Kion installation. For example, you may want to manage GovCloud if you're currently running Commercial, or manage Commercial if you're currently running GovCloud.

Note: Any AWS accounts in a separate partition will not be accessible until these steps are completed.

To enable multi-partition management:

  1. Choose an AWS account as the central point of authentication. We recommend using an empty account for partition access.

  2. In the Kion application, navigate to Settings > System Settings > AWS Settings > AWS Partitions.

  3. Click Download CloudFormation to download the cloudtamer-partition-user AWS CloudFormation.

  4. Choose the AWS partition type in the Select An AWS Partition dropdown menu.

  5. In the AWS account that you have chosen as the central point of authentication:

  • If the cloudtamer-service-role already exists, perform an update stack operation in AWS CloudFormation.

  • If the cloudtamer-service-role does not exist, perform a create stack operation in AWS CloudFormation.

  1. Generate IAM access keys from the cloudtamer-service-user IAM user.

  2. In the Kion application, navigate to Settings > System Settings > AWS Settings > AWS Partitions.

  3. Enter the AWS Access Key ID and AWS Secret Access Key for the IAM access keys.

  4. Click Save.

Within 5-10 minutes (depending on the number of linked accounts in this partition), all the AWS accounts are updated to use the AWS account as the central point of authentication.