Cloud Accounts
On the [Tenant & Organization > Cloud Account] page, you can connect cloud service provider accounts and manage their credentials, collection status, and access configurations.
Metric Cards
Three summary cards are displayed at the top of the page:
| Card | Description |
|---|---|
| Total Accounts | Total registered accounts, split by Root and General |
| Summary by Provider | Distribution bar chart across AWS, Azure, and Google Cloud |
| Collection Issues | Count of accounts with collection failures or cancellations |
Viewing Cloud Accounts
Accounts are displayed in a paginated table. Use the tab bar above the table to filter by account scope:
| Tab | Description |
|---|---|
| All Accounts | Every registered cloud account |
| Root Account | Parent accounts that manage permissions |
| General Accounts | Workload accounts (Direct or Delegated) |
Each tab shows a badge with the current count.
Table Columns
| Column | Description |
|---|---|
| Name | Account display name (alias) |
| Cloud Account ID | Provider-specific identifier — AWS Account ID, Azure Subscription ID, or Google Cloud Project ID |
| Provider | Cloud service provider (AWS, Azure, Google Cloud) |
| Access Type | Root Account, Delegated, or Direct |
| Credential Status | Current credential validity — Valid, Invalid, Expired, or Unknown |
| Collection Status | Latest collection result — Pending, Running, Success, Failure, or Canceled |
| Last Collected | Timestamp of the most recent successful collection |
Click any row to navigate to the account’s detail page.
Search and Filters
| UI Element | Description |
|---|---|
| Search | Search by account name or Cloud Account ID |
| Filter (funnel icon) | Filter by Credential Status and/or Collection Status. Each category has an “All” toggle and individual checkboxes |
| All Provider | Filter by provider (AWS, Azure, Google Cloud). Supports multi-select |
| More menu (⋮) | Additional options: Set Display (column visibility and page size), Refresh |
Filter Popover
Click [Filter] to open the filter popover with two tabs:
| Tab | Description |
|---|---|
| Credential Status | Filter by credential validity — All, Valid, Invalid, Expired, Unknown |
| Collection Status | Filter by collection result — All, Pending, Running, Success, Failure, Canceled |
Provider Filter
Click [All Provider] to select one or more cloud providers — AWS, Google Cloud, or Azure.
Tab Filtering
Use the tab bar to filter accounts by scope. Each tab displays a count badge:
Account Detail
Clicking a row opens the detail page for that account. The header displays the account name, provider badge, access type badge, and creation date. A [Disconnect] button is available in the top-right corner.
Detail Metric Cards
Three metric cards summarize the account’s health:
| Card | Description |
|---|---|
| Credential & IAM Status | Current validity of credentials and IAM permissions |
| Collection Status | Latest resource collection status across all resource types |
| Cost Summary | Month-to-date cost with trend comparison against the previous month |
Basic Info
The Basic Info card shows account properties. Account Name and Description support inline editing — click the edit icon, modify the value, and save.
| Field | Editable | Description |
|---|---|---|
| Account Name | Yes | Display name for the account |
| Description | Yes | Free-text description of the account’s purpose |
| Cloud Account ID | No | Provider-specific account identifier |
| Provider | No | AWS, Azure, or Google Cloud |
| Access Type | No | Root Account, Delegated, or Direct |
| Manager | No | Assigned account manager |
| Tags | No | Applied tags displayed as badges |
Credentials
The Credentials card displays the secret schema type and masked credential fields. Click [Update Credentials] to replace the stored credentials with new values.
Attached General Accounts
For Root Account type accounts, an additional Attached General Accounts section appears below the Credentials card. It lists all general accounts linked to this root account in a searchable, filterable table.
| Column | Description |
|---|---|
| Name | General account display name |
| Cloud Account ID | Provider-specific identifier |
| Provider | Cloud service provider |
| Access Type | Delegated or Direct |
| Credential Status | Credential validity of the attached account |
| Collection Status | Latest collection result of the attached account |
Connecting an Account
Click [Connect Account]
Click the [+ Connect Account] button at the top right of the list page. You will be navigated to a multi-step wizard.
Select a Provider
Choose the cloud service provider — AWS, Azure, or Google Cloud. The stepper shows 4 steps: Provider → Account Info → Verify → Save.
Configure Account Info
Select the account type (General Account or Root Account), enter the Account ID, Account Name, and Description. For Root Accounts, configure credentials directly. For General Accounts, select a connection method (Delegated or Direct).
Verify and Save
Review the configuration, verify the connection, and save the account. It will appear in the account list once registration completes.
Bulk Register
Use the [Bulk Register] button to register multiple Delegated General Accounts at once based on a selected Root Account. The wizard guides you through 5 steps.
Select Root Account
Choose the Root Account that serves as the delegation basis. The selected Root Account’s provider automatically determines the candidate list and credential fields.
Click the dropdown to search and select a Root Account from the list.
Select Target Accounts
Browse and select the Delegated General Accounts to register. Accounts are listed with their availability status — only Selectable accounts can be checked.
Use the checkboxes to select individual accounts or use the header checkbox to select all on the current page. The status filter dropdown lets you narrow the list:
| Filter | Description |
|---|---|
| All | Show all candidate accounts |
| Selectable | Accounts available for registration (default) |
| Duplicate | Accounts already registered |
| Unavailable | Accounts that cannot be registered |
Configure Credentials
Enter the credential details that will be applied identically to all selected accounts. For AWS, provide the Role Name and External ID.
| Field | Description |
|---|---|
| Role Name | The IAM Role name (the part after role/ in the Role ARN). CloudOps does not auto-create the role — you must pre-create it in AWS |
| External ID | The External ID configured in the IAM Role’s trust policy for assume-role |
Validation
CloudOps runs a connection test (STS AssumeRole) for each selected account. The result shows Passed or Failed with a reason for each account.
| Status | Description |
|---|---|
| Passed | Connection test succeeded — the account will be registered |
| Failed | Connection test failed — the account will not be registered. Check the Reason column for details |
Result
Review the registration results. A summary shows total selected, success, and failed counts. Use the Success and Failed tabs to inspect individual accounts.
Disconnecting an Account
Open the disconnect dialog
On the account detail page, click the [Disconnect] button in the top-right corner.
Confirm disconnection
Review the warning message, then check the confirmation checkbox: “I understand that this action is permanent and agree to disconnect the account.” Click [Disconnect] to proceed.