Onboard AWS to CloudHiro's cost optimization platform
The following guide will show you how to set up your account to allow CloudHiro to access it in a secure manner. We will create a separate role for CloudHiro.
Confirm the email you get and login
Go to ShowExternalID and copy the externalID for later use. If no external ID is shown, log out and login again.
Login to your AWS account as an admin (for a whole organization, use the management account) and make sure you are in us-east-1 (N. Virginia).
Launch the CloudHiro stack and fill in the key parameters:
- Deployment mode - Organization (role deployed to every account in the selected OUs) or SingleAccount (this account only).
- External ID - Replace cloudhiro with the value you copied from CloudHiro.
- Customer name - lowercase letters, digits and dashes.
- OUs to onboard - Go to AWS Organizations and paste the Root (r-xxxx) unit (Organization mode only).
- Create a Cost and Usage Report - set to True to create a new CUR + S3 bucket, or enter an existing CUR bucket name.
Check the IAM acknowledgements and click Create stack.
Optional permissions (all off by default, can be enabled later by updating the stack):
- Full access - tag resources, start/stop instances, etc.
- Reserved Instances / Savings Plans management
- Auto-remediation - clean up or right-size wasteful resources (EC2, snapshots, S3, Lambda, ECS and more), scoped by OU or account.
- Integrations - EKS, CloudTrail, Route53 query logs, VPC Flow Logs, S3 Storage Lens.
Reserved Instances Management:
Make sure that"Reserved Instances and Savings Plans discount sharing preference" is enabled for all accounts and enabled by default. AWS → AWS billing → Billing preferences →"Reserved Instances and Savings Plans discount sharing preference".
That's it - We are all done!