メインコンテンツへスキップ

CloudFormation and StackSet

Attribute provides a holistic platform for cloud cost, including the ability to understand cost attribution and accountability from the resource level up to the feature, application, team, and customer levels.

To achieve this, Attribute requires several levels of access:

  • Access to billing information.
  • Attribute sensor implementation, to gain resource utilization information.

The detailed permissions are documented in the CloudFormation template provided by Attribute.

注意

Depending on your cloud implementation, additional permissions may be required for specific resources.

CloudFormation Using StackSet

To ensure a smooth implementation, we leverage CloudFormation to both create the billing information and complete the necessary setup. The CloudFormation template is supplied by Attribute.

Important

All stacks must be applied in region us-east-1.

Management Account Setup

On the Management account, run the following:

  1. Go to CloudFormation → Stacks → Create stack → With new resources (standard).
  2. Select Choose an existing template.
  3. Upload the template provided by Attribute.
  4. Add the required stack details:
    • Stack name: A name of your choosing. Do NOT use AttributeRegistration — that name is used by a child stack.
    • Account name: Will be added automatically as needed; can be overridden if needed.
    • Account type: management.
  5. Deploy the stack.

Subaccount Deployments

  1. Go to CloudFormation → StackSets → Create StackSet.

  2. On the Choose a template page:

    1. Choose Service-managed permissions.
    2. Choose Template is ready.
    3. Choose Upload a template file and upload the template provided by Attribute (the same file used for the management account setup, now applied to subaccounts).
    4. Click Next.

    Choose a template page, with annotations on Template is ready (1), Upload a template file (2), and the uploaded attribute-cf-base.yml file (3)

  3. On the Specify StackSet details page:

    1. Enter a StackSet name.
    2. Leave AccountName empty so subaccount names are detected automatically.
    3. Set AccountType to sub.
    4. Click Next.

    Specify StackSet details page, with annotations on StackSet name (1), AccountName left empty (2), and AccountType set to sub (3)

  4. On the Set deployment options page:

    1. Deployment targets: choose Deploy to organizational units (OUs).
    2. Apply an account filter if needed.
    3. Specify regions: must be us-east-1.
    4. Create the StackSet.

    Set deployment options page, with annotations on Deploy to organizational units (1) and the us-east-1 region selected (2)


Trademarks: AWS is a trademark of Amazon.com, Inc. or its affiliates. All other trademarks are the property of their respective owners.