Your workspace is ready.

Step 1 · Create the role in your AWS account

One CloudFormation stack. Read-only. Scoped to Cost Explorer, Compute Optimizer, SecurityAudit and Billing. Nothing is modified in your account.

Step 2 · Waiting for AWS

After you approve the stack in the AWS console, the template posts your Role ARN back here automatically — no copy & paste. Usually finishes in 60–90 seconds.

Account connected

— is queued for the first sync. First numbers appear on your cost view within 15 minutes of the worker running — see "Known gap" at the bottom of that page.

The CloudFormation stack in your account keeps the read-only role, a one-shot setup Lambda, and the Lambda's exec role. The Lambda only runs at setup — $0 at rest. To disconnect this account from CloudPilot, delete the stack and all three go together.