Quickstart

Prerequisites

  • An active MilkStraw AI account
  • AWS account with permissions to create IAM roles and policies on your management (payer) account
  • Access to the AWS Management Console

This connection is established securely using a least-privilege cross-account IAM role, which you deploy in your AWS environment via CloudFormation.

If you prefer the terminal, you can connect your account with the MilkStraw CLI instead.

Connecting a single AWS account#

Initiate connection#

In the MilkStraw AI app, enter your Company Name and Management Account ID (your payer account), then click Create Organization.

Deploy CloudFormation#

On the Management account card, click Connect. We’ll open a CloudFormation template in your AWS Console to deploy a least-privilege cross-account IAM role with a unique external ID.

Execute CloudFormation stack#

In the AWS CloudFormation console, acknowledge the required capabilities, and execute the stack. This action creates a secure cross-account IAM role in your account with a unique external ID and the necessary least-privilege permissions for monitoring.

Verify access#

Once the stack is CREATE_COMPLETE, return to MilkStraw AI and click Verify. We’ll check access to the necessary AWS services.

If your AWS account isn’t part of an AWS Organization yet, MilkStraw AI creates one when you click Verify.

Connecting an AWS organization#

If you are using AWS Organizations with multiple linked accounts, you will need to onboard your entire organization after connecting your management account.

Connect management account#

Complete the steps above for your management account.

Enable StackSets trusted access#

On the Sub-accounts card, click Enable in AWS, and turn on trusted access with AWS Organizations.

Launch organization StackSet#

Click Connect next to Connect sub-accounts, and deploy the StackSet wrapper template in AWS CloudFormation.

Deploy AWS CloudFormation#

The pre-filled StackSet wrapper template is automatically deployed to every child account in your organization.

Verify organization access#

Once all stacks are CREATE_COMPLETE, return to MilkStraw AI and click Verify to confirm access for your entire organization.

Once access across all accounts is verified, your AWS Organization is successfully connected to MilkStraw AI.

What happens next?

  • MilkStraw AI securely monitors your usage using least-privilege permissions.
  • We analyze your usage patterns and identify Fluid Savings opportunities.
  • To start saving, click Activate on the Overview page. A payment method is required. See Activate and track savings.