Freemium Configuration Guide (Read-only)
Morfless requires limited read-only IAM Permissions for their Freemium offering.
Follow along with our walkthrough guide that will walk you through the steps to set up READONLY permissions with Morfless. In this process, you will:
-
Create a Morfless account
-
Link your AWS accounts
-
Enable granular data setting on AWS Console
Morfless adheres to the security principle of least privilege, ensuring that our permission set grants us the bare minimum access necessary to perform our analysis, and nothing beyond that.
These permissions will empower us to:
-
Utilise Cost Explorer for the analysis of 12 months' worth of daily historical cost and usage data.
Before proceeding, please ensure you are Logged In to the AWS console with your management/payer account.
In the following steps, Morfless will redirect to this AWS account so that we can link them.
Step 1: Create a Morfless account
-
Go to https://morfless.com
-
Click “Get Morfless Free” Button on the top.
3. Enter your details and click “Register”. This will create a Morfless user account and kick off our verification process
4. Check your work email address for your four digit verification code. Type your code into the verification code window and hit enter.
5. On initial login you will be directed to Morfless’ dashboard.
Step 2: Link all of your AWS accounts
Prerequisites:
- You are logged into your AWS Management account.
- You have activated trusted access for StackSets: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-activate-trusted-access.html
1. Connect Account - This enables you to connect the Billing/Payer Account that you would like included in your savings analysis. Clicking this button will direct you to your AWS account and open a pre-configured CloudFormation template
In your Dashboard screen, click the “Connect Account” button. This will take you to your AWS account to review our READONLY CloudFormation template. Note: You may see this page refresh periodically. This is because Morfless is regularly checking to see if the Link to AWS has been established.
Review the CloudFormation stack that is going to give Morfless read-only permission to your billing details. You can review the full template here: https://morfless-public.s3.ap-southeast-2.amazonaws.com/morfless-readonly-1329.yaml Once you are happy to proceed, please tick the check-boxs and press “Create stack”.
The CloudFormation stack will take about two minutes per account in your organisation to complete. It will do this automatically in the background. You can safely close that browser window and move onto enabling granular data settings.
Step 3: Enable granular data setting on AWS Console
1. In your AWS console, go to "Billing and Cost Management."
2. In the left hand menu, click on "Cost Management Preferences," under "Preferences and Settings."
3. Click on the "Cost Explorer" tab and check the two boxes under the "Hourly granularity (up to 14 days of past data)" section.