Setting up CloudForecast to report on your AWS spend will take about 10-15 minutes. Please follow all the steps thoroughly to ensure proper integration with CloudForecast. If you have any follow up questions, feel free to reach out to us at hello@cloudforecast.io. We're here to help!


Step 1: S3 Bucket Creation

  1. Log in to AWS Management Console

  2. After logging in, click here to navigate to the console directly: https://console.aws.amazon.com/s3/

  3. Select Create Bucket

  4. After clicking, “Create Bucket”, a modal will pop up on AWS console. 

  5. In the console, type in your Bucket name (i.e. companyname-aws-billing), select a region in the relevant fields and then press Create. Copy this bucket name in a notepad for later use. We highly recommend selecting US East (N.Virginia) as a data center. 

  6. It is not necessary to set permissions, etc. press next until you reach the button that says "Create Bucket"


Step 2: Bucket Permissions

  1. Click your user name in the top navigation bar of AWS and then select “My Billing Dashboard”

  2. Under “My Billing Dashboard” proceed to "Preferences" on the left navigation.

  3. Check the box next to “Receive Billing Reports” and then enter the S3 Bucket name created from the S3 Bucket Creation. Click on the link “Sample Policy” and copy the policy provided and paste in a seperate notepad. 

  4. Press save preferences. 

  5. Go back to the Amazon S3 Console: https://console.aws.amazon.com/s3/ and select the Bucket you just created from “S3 Bucket Creation”.

  6. A modal on the right side will pop up that is related to the Bucket. Scroll down to Permissions and select "Permissions". 

  7. Click Permissions from the top tab and and then “Bucket Policy”. 

  8. Paste the policy that you copied from Step 3 and press save. 


Step 3: Enable Billing Reports

  1. Click on your username in the top navigation bar of AWS and select “My Billing Dashboard”

  2. On the left navigation, select Preferences. Ensure your user S3 bucket name appears in this field and all the checkboxes under the report are all selected: Monthly Report, Detailing Billing Report, Cost allocation report and Detailed billing report with resources and tags. 

  3. Press Save Preferences


Step 4: Enable Tags for Billing Reports

  1. While still in “My Billing Dashboard”, select Cost Allocation Tags.

  2. Ensure all the tags are enabled and active that you want to use to analyze spend in CloudForecast. 


Step 5: Generate Access Credentials

  1. Click on your username in the top navigation bar of AWS and select “My Security Credentials”

  2. On the left navigation, select “Users” and then click “Add user”.

  3. In step one of details, type in a User name in the “User name” field that you want to use for CloudForecast. 

  4. Under access type, ensure only “programmatic access” is selected and then press “Next:Permissions” to go to step 2 of the form.

There are two options for adding policy for the user.  Option A: add user to a group or Option B: attach it to an existing policy.


Option A - Add User to a Group

  1. Ensure “Add User to group” is highlighted and then press “Create Group”

  2. In the “Group name” field, enter in a name you want for CloudForecast.

  3. On the bottom right hand corner, press “Create Group”

  4. Copy the following user policy and replace F00 with the bucket name: 

    {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Effect": "Allow",
                "Action": [
                    "s3:Get*",
                    "s3:List*"
                ],
                "Resource": [
                    "arn:aws:s3:::FOO",
                    "arn:aws:s3:::FOO/*"
                ]
            },
            {
                "Effect": "Allow",
                "Action": [
                    "organizations:ListAccounts"
                ],
                "Resource": [
                    "*"
                ]
            }
        ]
    }


  5. Navigate back to your AWS tab.

  6. On the bottom table, select the group that you just created from step 3 and click into that group. You can either scroll to find or use the search functionality. This will open up a new tab in your browser 

  7. Under the permissions tab, open “Inline policies” and select “click here”

  8. Select Custom Policy and press the Select button

  9. Name the Policy in Policy Name. Paste in the policy from above (ensure F00 has been replaced with the bucket name!) and press Apply Policy. 

  10. Go back to your original tab from step 6, and ensure the CloudForecast Group is selected. Press “Next: Review” on the bottom right to go. 

  11. Press Create User and you will be given two keys to copy in a notepad: Bucket Name, Access Key ID and Secret Access Key.

  12. Navigate back to CloudForecast. Under the setup portion, enter in the Bucket Name, Access Key ID and Secret Access Key and press “Confirm”

  13. CloudForecast will connect to your AWS account to verify your settings! You will receive your first email report within 24 hours from CloudForecast. 


Option B - Attaching an existing policy

  1. Ensure “Attach existing policies directly” is highlighted and then press the “Create policy” button right below. 

  2. A new tab will pop up and select “Create Your Own Policy” with the blue bottom on the right

  3. Copy the following user policy and replace f00 with the bucket name: 

    {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Effect": "Allow",
                "Action": [
                    "s3:Get*",
                    "s3:List*"
                ],
                "Resource": [
                    "arn:aws:s3:::FOO",
                    "arn:aws:s3:::FOO/*"
                ]
            },
            {
                "Effect": "Allow",
                "Action": [
                    "organizations:ListAccounts"
                ],
                "Resource": [
                    "*"
                ]
            }
        ]
    }


  4. After you are done pasting the policy, press "Create Policy" to save.  

  5. Navigate back to the tab from Step 1 and search for the policy you just crated. Ensure the left checkbox is checked off next to the policy.

  6. Press “Next: Review” 

  7. Press “Create user” in step 3, and you will be given two keys to copy in a notepad: Access Key ID and Secret Access Key.

  8. Navigate back to CloudForecast. Under the setup portion, enter in the Bucket Name, Access Key ID and Secret Access Key and press “Confirm”

  9. CloudForecast will connect to your AWS account to verify your settings! You will receive your first email report within 24 hours from CloudForecast. 

Things to note

  • Within 24 hours, you should receive your first report from CloudForecast. Feel free to reach out to us if you do not receive your first email report. 

  • If your AWS account has historical cost data (more than 30 days), your report will be retroactive with the data provided

  • If your AWS account is new, please give us up to 7 days to provide accurate reporting and forecast on your AWS.