Description of the permissions required to generate a Potential Savings report

In order to assess your workloads and provide a Potential Savings Report, Zesty requires that an IAM Role be created and attached to your AWS account.

This role consists of read-only permissions of metadata only and does not allow Zesty to take any actions on your behalf or gain any insights into your data or applications.

Detail

The required permission set can be summarized as follows, with each action applying to the resources listed:

• Describe: Returns a description of the metadata for the following resources - EC2, ELB, Autoscaling, Organizations, Cloudwatch, Savings Plans, Cost Explorer.
• List: Returns a list of the following resources currently in use - EC2, Organizations, Cloudwatch, Savings Plans, Cost Explorer.
• Get: Queries a specific cost metric - Cost Explorer.
• GetResources: Returns all tagged or previously tagged resources that are located in the specified AWS Region for the account
• GetTagKeys: Returns all tag keys in the specified AWS Region for the account.
• GetTagValues: Returns all tag values for the specified key in the AWS Region for the account.
• GetMetricStatistics: Used to fetch historical utilization metrics from Cloudwatch.
• DescribeReportDefinitions: Lists AWS Cost and Usage Reports available to the account; used to verify existing CUR configurations.