Configuring Your GovCloud AccountConfiguring your GovCloud account is slightly different than configuring a standard account in CloudCheckr. Standard accounts require one set of AWS credentials, but you can use two sets of AWS credentials for GovCloud accounts: one set for the GovCloud account and a second set for the commercial account associated with the GovCloud account. Depending on the organizational structure, this second account may be a linked commercial account or a payer account. You need the commercial account credentials because the cost data for the GovCloud account is written to the commercial account with the region GovCloud. In addition, you must add the master payer account to CloudCheckr to get cost data. The Payer credentials are optional, but if you do not add them, CloudCheckr will not be able to report on the AWS costs for the GovCloud account.
- Click New Account.
- Type a name for your account, go the Cloud Provider section, select Amazon Web Services, and click Create.
Add CredentialsOnce your GovCloud account is created, you will need to add your AWS GovCloud account credentials and another pair of credentials. Once those are added and saved, you can establish which CloudCheckr email reports and alerts you would like to receive. To connect to your AWS GovCloud and Payer account, CloudCheckr needs an IAM access key and secret key for each accounts. We strongly recommend that you also create a read-only user for each account in AWS IAM and use those keys in CloudCheckr. You can create read-only credentials using one of these methods:
Review Data within the GovCloud Account
Depending on the size of your AWS deployment, the snapshot may take only a few minutes or a couple hours. As soon as your initial snapshot finishes, CloudCheckr will send you an Inventory Summary, S3 Summary, and Best Practices Report email (if you entered an email address when configuring your account). Once your initial snapshot finishes, you can begin reviewing the data within your account. If you chose not to add your paying credentials when creating your account, you can add those at any point by editing the account.