Integrate your AWS account with Zesty

This topic describes how to integrate (“onboard”) your AWS account with Zesty by creating an IAM role.

This procedure is done once per AWS account or when you want to update permissions on an already-integrated account. If your account has the relevant permissions, you do not need to run this procedure.

To easily integrate a master and account and its subaccounts, see Onboarding Accounts to Zesty with StackSets.

This procedure is used to see potential savings with Commitment Manager and to deploy Zesty Disk (on standalone instances). The procedure is identical, except for a few steps that are pointed out within.

Prerequisites

• Access to the Zesty platform

• User account in AWS with permissions to add Zesty IAM roles with the required roles.

To Integrate your AWS account with Zesty:

1. From the Zesty platform main menu, select Organization Settings > Accounts.
   The Accounts page displays existing accounts.

2. Enable Zesty permissions, by doing one of the following:

   • To create a new account, click Add account.

     On the Choose provider page of the Create new account wizard, click AWS (the cloud provider to link with Zesty).
     Skip to the next step.

   • To add additional permissions to an existing account, from that account’s Action menu, click Update permissions.

3. Configure the connection:

   This step uses CloudFormation to configure permissions for Zesty.

   1. In Step 1 (Permission presets), do the following:

      • If you are configuring Zesty Disk, select Zesty Disk.

        You can select other permissions, too.

      • If you are configuring Commitment Manager, select Read-only.
        You can select other permissions, too.

   2. In Step 2 (CUR), select I will provide the CUR later/it is a sub-account.

      If you have already enabled CUR, you can select I have a CUR report already enabled and then enter the S3 bucket name.

   3. In Step 3, select a region in which to create the stack.

      Your choice in this step is not relevant.

   4. In Step 4, approve the permissions to be assigned to the IAM role.

   5. In Step 5, click Create IAM role.

      The AWS Quick create stack page is displayed.

   6. In the AWS console, scroll down to the Capabilities section.

   7. Select I acknowledge that AWS CloudFormation might create IAM resources with custom names, then click Create stack.

      In the AWS console, the CloudFormation > Stacks page is displayed.

      The Events tab shows the different events taking place.

4. Verify the integration:

   1. From the AWS console CloudFormation page, select the Outputs tab and copy the ARN value.

      If the ARN value is not displayed, refresh the table until it is.

   2. In the Zesty platform Verify Integration screen of the wizard, paste the entire ARN value (including arn:) in the ROLE ARN field, then click Connect.

   3. Unless you have more accounts to connect, click No.

Zesty takes a few moments to finalize the integration and prepare the new account.

The Create new account wizard is completed.