Today, 18 December 2023, we release support for AWS account level tags and Azure subscription level tags in Cloudability.

With this release, customers can now retrieve AWS account level tags and Azure subscription tags from their cloud accounts and create tag dimensions in Cloudability for better cost allocation, chargeback and reporting of their cloud spend. The account tags will appear while creating a tag dimension in Organize > Tags & Labels screen. For easy identification of account level tags, we have appended the below mentioned prefixes for account tags in AWS and Azure respectively: 

Prefix for AWS: "cldy:aws:accountleveltag:" 

Prefix for Azure: "cldy:azure:subscriptionleveltag:" 

Examples:

AWS account level tags

Azure subscription level tags

How to enable AWS account tags and Azure subscription tags?

To get account level tags from AWS Organizations, Cloudability needs an additional permission named organizations:ListTagsForResource 

If you are an existing AWS customer in Cloudability, you can enable this feature using 2 options:

Option 1 - Re-credential your AWS master payer account(s) for which you want to enable AWS account level tags

Option 2 - If you don't want to re-credential, you can grant the above mentioned permission to Cloudability IAM role that is added in your AWS account using the steps below:

Step 1 - Go to IAM Dashboard in AWS and click on Roles

Step 2 - Search for the role that you assigned to Cloudability. If you have not renamed the role, it should show up as CloudabilityRole. Click on this role.

Step 3 - Under Permission policies, click on CloudabilityManagementAccountPolicy

Step 4 - Click on Edit

Step 5 - Switch to Visual view on the top right. Expand Organizations

Step 6 - Check the permission ListTagsForResource

Step 7 - Click Next

Step 9 - Verify that the permission shows a green tick under the Cost tab in the permissions pane (displayed on click of eye icon for the respective master account) in Cloudability, as below:

Note: It may take a couple of hours for the permissions to get updated in Cloudability UI.

If you are a new AWS customer in Cloudability, the above mentioned permission would be part of Cloudability credentialing template, so granting additional permission is not required. 

If you are an existing or new Azure customer in Cloudability, no additional permissions are required and the subscription level tags will appear in Organize > Tags & Labels module.