Creating AWS Role ARN to integrate with HyperCloud™

Follow these simple steps to quickly create a Role ARN from your AWS account to integrate with HyperCloud™. Once the integration is complete, you can start link your AWS account to start benefitting from our analytics and account management capabilities.

Linked Accounts

NOTE: If you are using a linked account, make sure your payer account has granted access to Cost Explorer API

Read more about how to provide access to linked acounts on AWS Documentation

Step 1: Create Policy

To create a role ARN, you will need to have apolicy in place that has permissions to manage accounts and access Cost Explorer API.

      1. Log in to your AWS account with your user credentials
      2. Navigate to Policies
      3. Click Create Policy
      4. Choose the JSON tab
      5. To create a policy to manage accounts, copy and paste this code into the editor
        {
        "Version": "2012-10-17",
        "Statement": [
        {
        "Sid": "VisualEditor0",
        "Effect": "Allow",
        "Action": [
        "organizations:*",
        "config:*",
        "tag:*",
        "ce:*"
        ],
        "Resource": "*"
        }
        ]
        }
      6. To create a policy for Cost Explorer API, copy and paste this code into the editor
        {
        "Version": "2012-10-17",
        "Statement": [
        {
        "Effect": "Allow",
        "Action": [
        "ce:*"
        ],
        "Resource": [
        "*"
        ]
        }
        ]
        }
      7. Click Review:Policy

Step 2: Review Policy and Create

  1. On the Review Policy screen, enter the name of the policy you want to save
  2. Enter Description (optional)
  3. Click Create Policy

Step 3 : IAM

Once your policy is created, proceed to create the role ARN using the policy you just created.

  1. From your AWS console, navigate to Services> Administration & Security> IAM

Step 4 : Create Role

  1. On the left hand menu choose Roles
  2. Click Create Role

Step 5: Review Role and Finalize

  1. Choose Another AWS account for your trusted entity
  2. Input the Account ID from Create Analytic Profile popup dialog from the HyperCloud™ Portal
  3. Check the checkbox for Require External ID
  4. Input the External ID from Create Analytic Profile popup dialog from the HyperCloud™ Portal
  5. Click on Next:Permissions

Step 6: Select Policy

  1. Search for the policy name you create in Step 1 and 2 and select
  2. Click Next:Review

Step 7: Review role and Create

  1. Enter the name for your role and description(optional)
  2. Click Create Role to finish creating the role

Step 8: Copy Role ARN

  1. Click on the Role you created
  2. Copy the Role ARN to the Create Analytic Profile popup
Learn More