Connecting AWS Securely

Creating an IAM User

For security, we recommend creating a dedicated IAM user with minimal permissions.

Step 1: Create IAM Policy

In the AWS Console, go to IAM → Policies → Create Policy. Use this JSON:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ce:GetCostAndUsage",
        "ce:GetCostForecast"
      ],
      "Resource": "*"
    }
  ]
}

Step 2: Create IAM User

Go to IAM → Users → Add User. Create a user with programmatic access only and attach the policy you created.

Step 3: Save Credentials

Save the Access Key ID and Secret Access Key. Enter these in the Scamallteoir setup wizard.

Security Best Practices

• Never use your root account credentials
• Rotate access keys regularly (every 90 days)
• Use a dedicated IAM user just for Scamallteoir
• Consider using AWS Organizations for multi-account setups