AI and cloud costs
BetaConnect AWS costs to Sondola
What Sondola reads from AWS costs: Bedrock spend, and the rest of your AWS bill. Read-only, with the source and period beside every number.
In beta. You can connect it today and it is built to the vendor's documented API, but it has not yet run for long across many workspaces. Check its first readings against the tool itself.
Read-only. Sondola never changes your data in AWS costs.
- Credential
- API key
- Refresh
- Once a day
- How it connects
- Collected automatically
- Setup time
- About 8 minutes
What Sondola reads from AWS costs
- Bedrock spend
- The rest of your AWS bill
What you need
- Access to IAM in the AWS account that pays the bill. Cost Explorer must be on in Billing. If Cost Explorer already shows data, it is on. Otherwise turn it on in Billing and check back in a day.
Collection timing and the period a reading covers are separate. Check the source's data-through date as well as the metric's reporting period.
Connect AWS costs in 3 steps
- Create a policy
In IAM, Policies, Create policy, JSON. Paste the policy below. It allows one action, reading costs. Name the policy using the value below.
Policy name: sondola-cost-reader-policy.AWS: IAM policies ↗ - Create a user for Sondola
In IAM, Users, create sondola-cost-reader without console access, and attach only that policy.
User name: sondola-cost-reader. - Create an access key
On the user, Security credentials, Create access key, Third-party service. Paste the access key ID and the secret here. AWS shows the secret once.
AWS shows the secret once. If you lose it, delete that key and create a new one.
Enter credentials only in your Sondola workspace. Keep keys out of screenshots, public repositories and support messages.
What Sondola asks you for
IAM, Users, sondola-cost-reader, Security credentials, Create access key. It usually starts with AKIA.
Shown once, next to the access key ID, when you create the key.
If you delete this user in AWS, AI spend falls back to your books and bank.Secrets are stored encrypted in your workspace, in a vault kept separate from the application database. Sondola never shows them again.
Permissions
- An IAM policy that allows one action, reading costs, attached to a dedicated user, sondola-cost-reader, with no console access.
- Only reads. Sondola never writes to your AWS account.
Refresh and first reading
Once a day. Most tools refresh once or twice a day, and every number shows when it was read.
Save and test asks Cost Explorer for yesterday. AWS charges $0.01 for each Cost Explorer request. Sondola makes about two a day, so about 60 cents a month on your AWS bill. Only reads. Sondola never writes to your tools.
Troubleshooting
Save and test rejects the credential.
If you delete this user in AWS, AI spend falls back to your books and bank. AWS shows the secret once. If you lose it, delete that key and create a new one.
The test passes but no reading appears.
The collector runs on its schedule, so a successful test does not mean a reading has landed. Check the source's data-through date and the metric's reporting period, and treat a missing reading as missing, not zero.
A number differs from AWS costs.
Compare the definition, unit and reporting period with the same number in AWS costs before treating a difference as an error. When a stored reading changes, its history keeps the old value, the new value and the reason.
Provider documentation
Readings missing or old? Read the setup and troubleshooting guide and the worked freshness example.
Related integrations
See your company clearly by Monday.
Apply in two minutes. Once you are in, your first numbers arrive minutes after you connect a tool.
Free for qualifying startups. Read-only.