Manage Connected AWS Accounts in Spotto
After the first validation, connected AWS accounts appear under Connectors > Cloud Accounts, next to any Azure subscriptions. This page covers checking their status, changing the configuration and removing accounts.
Account Status
Each standalone AWS account has its own row with a status badge: Completed, Pending, In progress, Failed or Deleting.... When something needs attention, a notice appears under the badge:
| Notice | What to do |
|---|---|
| Waiting for Validation | The latest saved configuration hasn't been validated yet. If it doesn't change, open AWS setup and select Retry Validation. |
| Settings Need Validation | The settings changed since the last validation. Existing data stays available. Select Retry Validation. |
| Waiting for the Next Scan | The role works and a scan is queued. If it hasn't changed within a few hours, sync the account from Details. |
| AWS Role Could Not Be Used | Check the role exists, trusts Spotto with the External ID and has the policies. See troubleshooting. |
| Billing Source Needs Attention | Check the billing export details and the billing role access. See troubleshooting. |
| Last Scan Failed | The last scan didn't finish. Sync the account again. |
| Validation Failed | Select Retry Validation. If it fails again, contact your support team with the code shown. |
Last good scan shows when Spotto last collected data successfully. Data from that scan stays available while a problem is fixed. In an account's Details, Open AWS Setup next to the notice takes you straight to the configuration, where you can retry validation.
Organizations
An AWS organization appears as one AWS Organization row with the account count and a summary, such as All accounts ready or 2 need attention. Its accounts don't get rows of their own. Select Details to see every account in it, filter by group and search by name or ID. Select the edit icon to open the organization's setup.
Sync An Account
Select Details for an account, then Sync AWS account to queue a new scan. Show AWS sync steps shows the progress of each stage. Spotto also scans AWS accounts automatically.
Account Names
AWS accounts have several name-like values. Spotto displays the first one available:
- Friendly name: a name you set in Spotto.
- Native AWS account name: read from AWS with
account:GetAccountInformation. - Account Name entered in the AWS setup.
- AWS Account ID: always shown alongside the name.
Spotto doesn't use the IAM account alias or the AWS Organizations account name. Changing the friendly name in Spotto doesn't rename anything in AWS.
Edit Friendly Name, Group And Environment
In an organization's Details, select an account's pencil icon, or open an account's Details and select Edit metadata. Set its Friendly name, Icon, Group and Environment (Production, Non-Production or Mixed). Select Manage Groups to create shared group names. These fields only affect how Spotto displays and groups the account. They don't change AWS or trigger a scan.
Refresh Organization Commitments
For an organization with Organization Commitments Planning on the management account, account Details includes an Organization commitments section. Select Refresh organization commitments to collect Reserved Instances and Savings Plans data for the whole organization. This is separate from Sync AWS account, and you can start it from any member account.
The refresh runs in stages: Account inventory, Payer analytics, Payer recommendations, Preparing portfolio and Publishing data. Completed with warnings means some evidence was unavailable; it isn't treated as zero. AWS allows three Savings Plans recommendation calculations a day, so after a refresh requests one, the button is unavailable for 8 hours. The section shows Refresh cooldown active and when you can try again.
Review the results under Investigate > Cost > Commitments. See Commitments Planning.
Change The Configuration
Select the edit icon on the account's or organization's row in Cloud Accounts. The setup page shows only that account or organization. Change accounts, billing sources or purposes, then select Update. Spotto validates the new configuration and starts a new scan.
To connect a different AWS account or organization, use + Create > AWS instead. That adds a new one and leaves this one unchanged.
If the change affects permissions, such as adding billing or commitments planning, regenerate the role instructions or setup package for the affected accounts and apply them in AWS before selecting Update.
An account ID can't be changed after connection. Remove the account and add the correct one.
Remove AWS Accounts
- One account: select the trash icon on a standalone account's row. On an organization's row, the trash icon opens its Details so you can choose the account. You can also open an account's setup from its edit action and select Delete. Confirm Delete this AWS account?. Spotto removes the account and queues offboarding, which deletes the data collected for it.
- The knock-on effects: removing a standalone account, or an organization's management account, removes that whole configuration and offboards every account in it. Removing an account that a billing source uses as its export definition, billing payer or S3 storage account also removes that billing source.
- A whole configuration: in AWS setup, select the trash icon on the standalone account or organization, confirm Remove, then select Update. Until you select Update, you can select Keep followed by the configuration name to undo it, and the accounts keep scanning.
Removing an account from Spotto doesn't delete anything in AWS. Delete the IAM role, its CloudFormation stack or its Terraform resources separately.
A company or MSP administrator who can manage cloud accounts can remove AWS accounts even if AWS preview access is later turned off for the company.