CloudFormation IAM Role Setup

This setup method leverages a CloudFormation script that creates an IAM role in AWS. The script can be accessed from the Virtana Platform setup form. Using this script is the simplest and quickest of the three AWS integration setup methods and is recommended over the other setup methods.

You can view a list of permissions granted by the IAM role.

When you use the CloudFormation script to create a new AWS Integration in Virtana Platform, the script populates a read-only IAM role in your AWS account. The IAM role is linked to Virtana Platform using the integration’s Account ID and External ID. Once created, it may take a few minutes for the integration status to be updated.

About This Task

Using this installation method requires that you first start the setup of an AWS integration in Virtana Platform. You access the stack you created and copy the Role ARN value from AWS and paste it into Virtana Platform to complete the configuration.

flow diagram representing the tasks a user must complete using CloudFormation setup


You must have enabled Cost Explorer and created a Cost and Usage Report in AWS.

You must have administrator access to both Virtana Platform and to AWS.


  1. In Virtana Platform:

    1. Navigate to Settings > Integrations > Cloud Providers.

    2. Click Add Integration and select the appropriate integration type.

    3. Optional: Enter a descriptive name for the integration instance to identify what it is for.

      If no name is given, Optimize provides a unique default name.

  2. Under AWS Authentication, select the IAM role authentication type, and then click the link to Open script in AWS.

    This opens a new tab in AWS.


    Keep Optimize open to the integration setup.

  3. In AWS, do the following:

    1. Check I acknowledge that AWS CloudFormation might create IAM resources.

    2. Select Create Stack.

      This process may take a few minutes. Wait for the stack to say CREATE_COMPLETE before proceeding to the next section.

    3. Select the stack you just created, navigate to the Outputs tab, and copy the Role ARN Value.

  4. In Optimize, paste the Role ARN value into the IAM Role ARN field and click Save.

    Make sure there are no extra spaces after you have pasted the value into the field.