Connect Azure or AWS to Spotto: Choose a Cloud
Spotto reads your cloud through read-only access that you grant, then analyses cost, resources, security and recommendations. You can connect Azure, AWS or both to the same Spotto company. Each subscription or AWS account appears under Connectors > Cloud Accounts.
Choose Your Cloud
| Azure | AWS (preview) | |
|---|---|---|
| How Spotto connects | A service principal with Reader and optional read roles | A cross-account IAM role, SpottoReadOnlyRole, that trusts Spotto with your company's External ID |
| Setup options | Click & Connect, PowerShell, Terraform, manual, GDAP for partners, guest access | CloudFormation, Bash, PowerShell, Terraform, manual IAM |
| Scope | Subscriptions, management groups, tenant | Standalone accounts or AWS organizations, up to 100 accounts per organization and 250 per company |
| Billing data | Cost Management data and exports | AWS Data Exports (CUR 2.0) or legacy CUR in S3 |
| Who you need | Someone who can grant Reader and admin consent | Someone with IAM administrator access in each account |
| Start here | Connect Azure | Connect AWS |
Spotto only reads by default. Azure write-back, such as dismissing Advisor recommendations or VM schedules, is optional and uses separate roles. See Azure write permissions. During the AWS preview, Spotto never changes AWS resources.
Before You Connect
You need a Spotto account and company. If you don't have one yet, start with Portal Setup.
AWS support is in preview: contact us to have it enabled for your company. If you're working with the Spotto team and don't have Portal access yet, your AWS administrator can follow the AWS setup guide for AWS administrators.