# Add a public cloud connection

> Learn how to connect to public cloud resources from CubeCMP.

CubeCMP integrates with AWS to enable hybrid cloud resource allocation and centralized management.

## Configure public cloud integration for the entire cluster {#configure-public-cloud-integration-for-the-entire-cluster}

To enable **site-wide** public cloud access, configure the AWS integration under the DEFAULT project. Applying the integration at the DEFAULT project level allows all projects in the CubeCMP tenant to use the configured public cloud provider.

:::warning

Configuring a public cloud integration at the cluster level grants cloud access to all users who have permission to use cloud resources. For more granular access control, configure the public cloud integration at the project level instead.

To learn more about configuring cloud integration at an individual project leve, reference [Configure public cloud resource for individual projects](#configure-public-cloud-resource-for-individual-projects)

:::

1. In the CubeCMP management console, switch to the **DEFAULT** tab.
   To confirm that you switched to the **DEFAULT** project management interface, check that the left sidebar displays `Default Project Settings`.
2. Under the default project, navigate to **Cube > Cloud Providers**.
3. To enable authentication to the public cloud providers, configure:
   1. **Access Key**: A unique identifier for the AWS cluster.
   2. **Secret Key**: A private key to authenticate access to the resources.
4. To set the default region for the workloads to spawn, click **Default Region** and set the desired region.
5. To verify the access credentials and IAM roles configuration, click **Validate**.
6. Once the credential details are validated successfully, to save and apply the configuration, click **Save**.

## Configure public cloud resource for individual projects {#configure-public-cloud-resource-for-individual-projects}

To enable **project-level** public cloud access, configure the AWS integration under the individual project. Applying the integration at the individual project level allows all projects in the CubeCMP tenant to use the configured public cloud provider.

1. In the CubeCMP management console, switch to the **PROJECTS** tab.
   To confirm that you switched to the **PROJECTS** management section, check that the left sidebar displays the desired project name.
2. To select the project for individual cloud integration setting, click on the **Projects** drop down and select the project to edit.
3. Navigate to **Cube > Cloud Providers**.
4. To enable authentication to the public cloud providers, override any default credentials that may be present:
   1. **Access Key**: A unique identifier for the AWS cluster.
   2. **Secret Key**: A private key to authenticate access to the resources.
5. To set the default region for the workloads to spawn, click **Default Region** and set the desired region.
6. To verify the access credentials and IAM roles configuration, click **Validate**.
7. Once the credential details are validated successfully, to save and apply the configuration, click **Save**.