Account connection guide
AWS billing access guide
Set up read-only Cost Explorer access with either an access key pair or a cross-account role.
Minimum access
ce:GetCostAndUsage
Before you connect
Use a dedicated IAM user or a dedicated cross-account billing role.
Never use the AWS root user.
Grant read-only billing access only.
If you use a role, make sure the trust policy allows the Rateplane source identity and optional external ID.
Setup steps
- 1.Create a dedicated IAM principal for Rateplane billing reads.
- 2.Grant Cost Explorer read access, including ce:GetCostAndUsage.
- 3.If using access keys, generate the key pair and store it securely.
- 4.If using a role, copy the role ARN and optional external ID into Rateplane.
- 5.Run the in-app connection test before saving the account.
How to verify it worked
The connection test should report that Cost Explorer can be queried.
Your first manual sync should import spend records without a last-sync error.
If the test fails, re-check the IAM policy and any trust relationship settings.