Skip to main content
Prerequisites
  • An active MilkStraw AI account
  • AWS account with permissions to create IAM roles and policies on your management (payer) account
  • Access to the AWS Management Console
This connection is established securely using a least-privilege cross-account IAM role, which you deploy in your AWS environment via CloudFormation.
If you prefer the terminal, you can connect your account with the MilkStraw CLI instead.

​
Connecting a single AWS account

1

Initiate connection

In the MilkStraw AI app, enter your Company Name and Management Account ID (your payer account), then click Create Organization.
2

Deploy CloudFormation

On the Management account card, click Connect. We’ll open a CloudFormation template in your AWS Console to deploy a least-privilege cross-account IAM role with a unique external ID.
3

Execute CloudFormation stack

In the AWS CloudFormation console, acknowledge the required capabilities, and execute the stack. This action creates a secure cross-account IAM role in your account with a unique external ID and the necessary least-privilege permissions for monitoring.
4

Verify access

Once the stack is CREATE_COMPLETE, return to MilkStraw AI and click Verify. We’ll check access to the necessary AWS services.
If your AWS account isn’t part of an AWS Organization yet, MilkStraw AI creates one when you click Verify.

​
Connecting an AWS organization

If you are using AWS Organizations with multiple linked accounts, you will need to onboard your entire organization after connecting your management account.
1

Connect management account

Complete the steps above for your management account.
2

Enable StackSets trusted access

On the Sub-accounts card, click Enable in AWS, and turn on trusted access with AWS Organizations.
3

Launch organization StackSet

Click Connect next to Connect sub-accounts, and deploy the StackSet wrapper template in AWS CloudFormation.
4

Deploy AWS CloudFormation

The pre-filled StackSet wrapper template is automatically deployed to every child account in your organization.
5

Verify organization access

Once all stacks are CREATE_COMPLETE, return to MilkStraw AI and click Verify to confirm access for your entire organization.
Once access across all accounts is verified, your AWS Organization is successfully connected to MilkStraw AI. What happens next?
  • MilkStraw AI securely monitors your usage using least-privilege permissions.
  • We analyze your usage patterns and identify opportunities.
  • To start saving, click Activate on the Overview page. A payment method is required. See Activate and track savings.