Read-only AWS access

Connect your AWS account

You launch a CloudFormation stack in your account. It creates an IAM role we can assume. The role can read Cost Explorer. It cannot create, change, or delete resources.

1. 01

   Launch the stack

   Opens the AWS console. You stay in your account the whole time.

2. 02

   We read last month’s bill

   Cost Explorer by service. No CloudTrail dumps, no object contents, no write APIs.

3. 03

   You disconnect anytime

   Delete the stack. The role is gone. We cannot get back in.

One-click launch is waiting on our AWS account. Leave your email below, or connect Vercel / Netlify instead.