apptio

API Flow for Adding Apptio/Cloudability FinOps to AWS Accounts

OVERVIEW

Cloudability is a product from Apptio and is the FinOps tool adopted by SCT/CsVD. It already has access to review spend data through the Census master payer account (109223337795). To perform granular analysis of workloads deployed and resource utilization, it requires its master payer account user assume a role in the subordinate accounts. A facet of that account linking is annotating the suborinate account role with a unique identifier created within Cloudability and associated with the account within the application. Fortunately, Cloudability supplies APIs that allow this identifier to be extracted programatically, which is the purpose of this code.

Ultimately, the account setup comes down to orchestrating a few API calls to Cloudability. This mostly boils down to activating the account in Cloudability and once activated, the identifier described above can be retrieved. That identifier is then used to create the role.

PROCESSING

TODO

A service account exists in Cloudability that is intended for this process. That account (key/secret) will be managed in AWS Secret Manager. Right now it is just sourced as vars but needs to move into ASM.
Needs to be integrated with broader account management/creation.ls
Needs some additional testing, got as far as testing all the API calls and extracting values.
Minimally do2 account, id 107742151971, which is already setup in Apptio needs to be addressed differently, ie. will need to TF import the handful of resources managed with this processing. Example with RESTAPI: terraform import restapi_object.cloudability_account /107742151971

mcgin314/apptio

About

Resources

Stars

Watchers

Forks

Releases

Languages