Cloud Account Status & Configurations Dashboard

Introduction

The Cloud Account Status & Configurations dashboard provides users an overview of all the details for a particular cloud account, as well as the permissions validation, background processes, and governance configurations available for each of the products enabled for a cloud account (e.g. FinOps, CloudOps, Assessments, etc.).

This is where users can go to review, set up, and modify any feature configurations for their cloud accounts after onboarding is completed.

Navigating to Cloud Account Status & Configurations

To access the Cloud Account Status & Configurations page, go to Governance > Account Governance > Cloud Accounts > in the Actions column, click the three vertical dots corresponding to any onboarded cloud account > click View.

The Cloud Account Status & Configurations page shows the Details tab by default, and product-specific tabs depending on which ones the cloud account has access to.

For example, if a user had selected the FinOps and SecOps products while onboarding an account, then they should see a FinOps tab and a SecOps tab on the Cloud Account Status & Configurations page in addition to the Details tab.

Details Tab

The Details tab contains a summary of the details set up for the cloud account during onboarding. This tab includes sections like Cloud Account Type, Prerequisites, Credentials, Basic Settings, and Advanced Settings.

Product Tabs

The product tabs such as FinOps, SecOps, CloudOps, and Assessments appear only if they were selected/enabled during account onboarding.

In the product-specific tabs, you will see a list of sections corresponding to the specific features that are included for each product (e.g. Budget Management and Cost Anomaly for the FinOps tab).

Product-Specific Features

Features that are specific to a product are shown on the top of the page under a specific product tab, followed by common features near the bottom. You can expand each section that corresponds to a feature to view additional details and the status for that particular feature.

Shared Functionality and Integrated Tools

The Shared Functionality and Integrated Tools section near the bottom of any product tab page shows the features that are common for all the selected products for a cloud account.

For these features, users can apply changes to configurations for one product and the same configuration will be applied for any other products. This helps reduce the effort required to make the same configurations across every product for a particular cloud account.

Feature Permissions, Statuses, and Configurations

Whether it’s a product-specific or common feature, you can expand the section for a feature to view any essential information related to it, such as permissions, background processes and their respective statuses, and governance configurations that can be made by users.

Permissions

Any issues with permissions that are set up in the user's cloud environment for their cloud account and product will be displayed alongside each feature. For example, users can see Active/Inactive/Degraded next to the feature name.

  • Active: The feature is functioning as expected with the right permissions and configurations.
  • Inactive: The feature is not functioning correctly and requires corrections for its permissions and/or configuration for it to be fixed.
  • Degraded: Some parts of the feature are working as expected and require changes to the permissions/configurations for it to be fixed.

Process Status

If there are any background processes or syncs that are associated with a particular functional area for a product, they will be displayed right below the feature name, along with the call-to-actions View History and Re-Run (some are always shown and a few are shown on failure).

  • The View History option opens a pop-up screen that shows the different status that a process has gone through (shows the last 10 records).
  • The Re-Run option will re-run the sync for a product feature. This helps verify the status after you’ve made any changes to the permissions and/or configurations.

Governance Configurations

If a feature has any additional governance configurations that a user can make, such as Notifications, then those will appear along with a Configure button.

Clicking on the Configure button will show a pop-up window where the user can apply or modify the required configuration settings.

Summary Table for Permissions, Process Status, and Configurations

Refer to the table below for more detailed information about the permission status, process status, and configurations for features.

Feature StatusPermission StatusProcess (Sync) StatusConfiguration
ActiveSucceededSucceededConfigured
InactiveFailedFailed - ALLNot-configured
InactiveFailedFailed - ALLConfigured
DegradedSucceededFailed – At least one succeededConfigured
DegradedSucceededFailed - ALLConfigured
DegradedSucceededN/ANot-configured
InProgressInProgressN/AConfiguration is allowed with OnDemand permission check.
PendingSucceededIn the queueNot-configured

Available Features and Configuration Requirements by Product

The table below summarizes the unique features available within each product in the Cloud Account Status & Configurations page and explains whether it needs to be configured by users.

Product NameFunctional Group /FeaturesGovernance Configuration to be Done or NotFeature Description
FinOpsCost ProcessingNoAllows the platform to sync cost data periodically for the required access and configurations.
FinOpsCost VisibilityNoIncludes details about Cost Posture, Dashboards, and Reports.
FinOpsCost AnomalyYesView cost anomalies detected by the platform based on cost data from the cloud providers.
FinOpsBudget ManagementNoManage budgets and set up thresholds to raise alerts when budgets are exceeded.
FinOpsUsage based Cost OptimizationNoCost optimization recommendations based on usage data include cloud native, scheduled recommendations, idle, rightsizing based on rules, and AI-based profiler.
FinOpsRate based Cost OptimizationNoRate based optimization recommendations from cloud native providers, along with reservation utilization details.
FinOpsFinOps Governance ReportsNoGovernance reports that analyze how your cloud account is performing with respect to controlling costs.
SecOpsThreat ManagementYesAllows the system to sync threat data periodically for the required access and configurations. Real-time threat configuration can be configured by the user for certain cloud providers (AWS and Azure).
SecOpsVulnerability AssessmentsNoVulnerability Assessments allows the system to sync vulnerability data periodically for the required access and configurations.
SecOpsAccess PostureNoAccess Posture allows the users to view all access issues identified by executing IAM policies. Users could take necessary actions to fix any issues.
SecOpsCloud Native SecurityNoAWS Security Hub Posture allows the system to sync security hub data periodically for the required access and configuration.
FinOps/SecOps/CloudOps/AssessmentsGuardrailsYesPolicy Engine plays a crucial role in enforcing governance and compliance within the cloud platform as per the policy engine selected by the user.
FinOps/SecOps/CloudOps/AssessmentsInventoryNoCloud Inventory enables users to explore, oversee, and observe resources utilized within a cloud environment.
CloudOpsActivity LogsYesActivity enables users to comprehend the diverse operations conducted within a cloud environment.
FinOps/CloudOpsMonitoringYesCloud monitoring enables users to observe, track, and analyze the performance and status of resources within a cloud environment.
CloudOpsAutomationNoRunbooks facilitate users in documenting, automating, and executing standardized procedures within a cloud environment.
CloudOpsPatch ManagementNoPatch management involves the systematic process of applying updates and fixes to software systems within a cloud environment to enhance security and performance while minimizing vulnerabilities.
CloudOpsBackup ManagementNoBackup management entails securing data through regular backups within a cloud environment, while patch management involves the timely application of updates to maintain system integrity.
AssessmentsAuto-AssessmentsNoAuto-Assessment allows the system to perform an automated Well Architected Assessment on the entire cloud account upon onboarding.
FinOps/SecOps/CloudOps/AssessmentsTagging GovernanceNoTag governance allows the users to create baselines and generate posture on baselines to give details about missing tags and values for each resource that needs to be fixed.