​
What this enables

  • Inspect AWS resources across services and regions
  • Read CloudWatch logs and metrics

​
How it works

You create a cross‑account role in your AWS account that trusts the app’s AWS account. The role name is unique per user. When a task needs AWS access, the app uses that role to access your account to perform read‑oriented operations requested by you.

​
Setup

1

Open AWS settings

In the app, open Settings → AWS and enter your 12‑digit account ID.
2

Create the role

Follow the provided CloudFormation link to deploy the stack. This sets up the cross‑account role with a unique external identifier.
3

Verify access

Return to the app and check status. A successful access check confirms setup.
Placeholder: diagram of cross‑account access from the app account to your account

​
Using it

  • “Show EC2 instances by region.”
  • “Read the last 2 hours from /aws/lambda/my-func filtering ERROR.”
  • “Plot CPU utilization for i-0123456789abcdef over 24 hours.”