Connect Your AWS Account
Noros connects to your AWS environment using a read-only IAM role to access your cost and usage data. The entire setup process is guided by Noros directly in the chat.
Prerequisites
An active Noros account
Permissions to create IAM roles in your AWS payer (management) account
CloudFormation StackSets enabled in your AWS Organization
Onboarding Steps
Step 1: Provide Your AWS Account Information
When you start the onboarding process, Noros will ask for:
AWS Account ID — Your 12-digit payer account ID
Organizational Unit ID — Found in the AWS Organizations console under your root account
Step 2: Deploy the CloudFormation Stack
Noros supports multiple integration methods:
CloudFormation (recommended) — Noros provides a pre-configured CloudFormation stack URL. Click the link, scroll to the bottom of the AWS CloudFormation console, check "I acknowledge that AWS CloudFormation might create IAM resources", and click Create stack.
Terraform — Use the provided Terraform configuration to deploy the IAM role.
CLI — Run the provided AWS CLI commands to create the role manually.
Console — Follow step-by-step instructions to create the IAM role through the AWS Management Console.
Step 3: Verify Access
Once the stack is deployed, Noros will automatically verify that it can access your cost and usage data. You can also trigger verification manually by asking Noros to check your account status.
Step 4: Start Saving
You'll receive a confirmation when your data analysis is complete and Noros is ready to answer questions about your AWS environment. Initial data processing may take a few minutes depending on the size of your environment.
Optional: External ID
During onboarding, you may be offered the option to configure an External ID as an additional AWS security best practice. This adds an extra layer of protection to the cross-account IAM role.
Connecting Additional Accounts
You can connect multiple AWS accounts to Noros. To add another account, simply tell Noros in the chat — for example, "I'd like to connect another AWS account" — and it will walk you through the same process.
What Noros Can Access
Noros uses minimal, read-only permissions to access your cost and billing data. It cannot read sensitive workload data, modify resources, change network rules, or access anything beyond cost and usage information. Learn more about AWS permissions →
Last updated