Amazon Web Services (AWS) Integration

Overview

CloudTuner.ai provides comprehensive AWS cost optimization through automated billing data analysis, resource discovery, and intelligent recommendations. We support both AWS Organizations (root accounts) and individual AWS accounts.

Prerequisites

• AWS account with administrative access
• AWS Cost and Usage Reports (CUR) or Data Exports enabled
• S3 bucket for billing data storage

Connection Options

Option 1: AWS Root Account (Recommended for Organizations)

Best for companies using AWS Organizations with multiple linked accounts.

Step 1: Configure Data Export

1. Navigate to AWS Billing & Cost Management → Data Exports
2. Click Create export
3. Select Standard data export type
4. Choose CUR 2.0 format
5. Enable Include resource IDs
6. Set time granularity (Daily recommended)
7. Configure S3 bucket and path prefix

Step 2: Create IAM Policy Create a new IAM policy with these permissions:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "CloudTunerBillingAccess",
      "Effect": "Allow",
      "Action": [
        "cur:DescribeReportDefinitions",
        "s3:GetObject",
        "s3:ListBucket",
        "s3:GetBucketLocation"
      ],
      "Resource": [
        "arn:aws:s3:::your-billing-bucket/*",
        "arn:aws:s3:::your-billing-bucket"
      ]
    },
    {
      "Sid": "CloudTunerResourceDiscovery",
      "Effect": "Allow",
      "Action": [
        "ec2:Describe*",
        "s3:GetBucketPublicAccessBlock",
        "s3:GetBucketPolicyStatus",
        "s3:GetBucketTagging",
        "s3:GetBucketAcl",
        "s3:ListAllMyBuckets",
        "iam:GetAccessKeyLastUsed",
        "iam:ListUsers",
        "iam:GetLoginProfile",
        "iam:ListAccessKeys",
        "cloudwatch:GetMetricStatistics"
      ],
      "Resource": "*"
    }
  ]
}

Step 3: Create IAM User

1. Go to IAM → Users → Create user
2. Attach the policy created above
3. Generate access keys for programmatic access
4. Save the Access Key ID and Secret Access Key securely

Step 4: Connect to CloudTuner.ai

1. Log into your CloudTuner.ai dashboard
2. Navigate to Data Sources → Add New
3. Select AWS Root Account
4. Enter your credentials and billing export details:
   • AWS Access Key ID
   • AWS Secret Access Key
   • Export Name (from Step 1)
   • S3 Bucket Name
   • Export Path Prefix

Option 2: AWS Linked Account

For individual AWS accounts that are part of an AWS Organization.

1. Follow Steps 2-3 from the Root Account setup
2. In CloudTuner.ai, select AWS Linked Account
3. Enter only Access Key ID and Secret Access Key
4. Billing data will be imported through the root account

Data Synchronization

• Initial import: 24-48 hours after connection
• Ongoing updates: Hourly synchronization
• Historical data: Up to 13 months (depending on AWS retention)

Troubleshooting

• Connection Failed: Verify IAM permissions and access keys
• No Billing Data: Ensure Data Export is properly configured and S3 bucket is accessible
• Missing Resources: Check resource discovery permissions in IAM policy