Connect AWS
Overview
Connect AWS to CloudPi to ingest Cost and Usage Report (CUR) data and enable detailed cost reporting, allocation, and optimization.
Prerequisites
- AWS billing access and permission to create IAM roles and manage CUR exports.
- CUR enabled with resource IDs and a supported format (Parquet recommended).
- Cost allocation tags activated in AWS.
Configuration Workflow
- Configure the AWS Cost and Usage Report (CUR).
- Activate cost allocation tags.
- Create a cross-account IAM role for CloudPi.
- Grant CloudPi access to the CUR S3 bucket.
- Add AWS details in CloudPi.
- Validate ingestion and backfill historical data if needed.
Step 1 - Configure the AWS CUR
- Open Billing and Cost Management in AWS.
- Create a new Cost and Usage Report.
- Enable Include resource IDs.
- Set Time granularity to Hourly.
- Enable Refresh automatically.
- Choose Parquet format and deliver to an S3 bucket.
Step 2 - Activate Cost Allocation Tags
- In AWS, navigate to Cost Allocation Tags.
- Activate the tags required for reporting and cost assignment.
Step 3 - Create a Cross-Account IAM Role
- Use the CloudPi-provided template or IAM instructions.
- Use the External ID provided by CloudPi.
- Apply least-privilege permissions required for CUR access.
Step 4 - Grant CloudPi Access to the CUR Bucket
- Update the S3 bucket policy to allow the CloudPi role to read CUR files.
- Ensure the role has permission to list and read report objects.
Step 5 - Connect in CloudPi
- Go to Integrations or Cloud Onboarding.
- Select AWS and enter:
- Account ID
- Role ARN
- External ID
- CUR bucket name and report prefix
Step 6 - Validate and Backfill
- Confirm the integration status is Connected.
- Validate data in Billing Hub and Cost Assignment.
- If historical filtering is required, backfill prior CUR data.
Multi-Account Guidance
Connect the AWS management account first to capture organization-wide costs. Add member accounts only if needed for specific scopes.
Troubleshooting
If data does not appear: - Verify CUR delivery to S3. - Confirm tag activation. - Recheck IAM role trust and bucket policies.
For assistance, contact support@cloudpi.ai.