CloudFormation and StackSet
Attribute provides a holistic platform for cloud cost, including the ability to understand cost attribution and accountability from the resource level up to the feature, application, team, and customer levels.
To achieve this, Attribute requires several levels of access:
- Access to billing information.
- Attribute sensor implementation, to gain resource utilization information.
The detailed permissions are documented in the CloudFormation template provided by Attribute.
Depending on your cloud implementation, additional permissions may be required for specific resources.
CloudFormation Using StackSet
To ensure a smooth implementation, we leverage CloudFormation to both create the billing information and complete the necessary setup. The CloudFormation template is supplied by Attribute.
All stacks must be applied in region us-east-1.
Management Account Setup
On the Management account, run the following:
- Go to CloudFormation → Stacks → Create stack → With new resources (standard).
- Select Choose an existing template.
- Upload the template provided by Attribute.
- Add the required stack details:
- Stack name: A name of your choosing. Do NOT use
AttributeRegistration— that name is used by a child stack. - Account name: Will be added automatically as needed; can be overridden if needed.
- Account type:
management.
- Stack name: A name of your choosing. Do NOT use
- Deploy the stack.
Subaccount Deployments
-
Go to CloudFormation → StackSets → Create StackSet.
-
On the Choose a template page:
- Choose Service-managed permissions.
- Choose Template is ready.
- Choose Upload a template file and upload the template provided by Attribute (the same file used for the management account setup, now applied to subaccounts).
- Click Next.

-
On the Specify StackSet details page:
- Enter a StackSet name.
- Leave AccountName empty so subaccount names are detected automatically.
- Set AccountType to
sub. - Click Next.

-
On the Set deployment options page:
- Deployment targets: choose Deploy to organizational units (OUs).
- Apply an account filter if needed.
- Specify regions: must be
us-east-1. - Create the StackSet.

Trademarks: AWS is a trademark of Amazon.com, Inc. or its affiliates. All other trademarks are the property of their respective owners.