Skip to main content

Connect a GCP Account (CloudCADI hosted on AWS)

Prerequisites​

Before you start

Open CloudCADI's GCP onboarding page and note down the two values shown there - Account ID, Attribute. You'll copy these into GCP in the steps below.

CloudCADI GCP prerequisite values

  1. In the GCP Console, go to IAM & Admin.

  2. Select Workload Identity Federation from the left panel, then click Create pool.

    Open Workload Identity Federation and create a pool

  3. Enter a name for the identity pool and click Continue.

    Name the identity pool

  4. Under Add a provider to pool, select AWS.

    Select AWS as the provider

  5. Fill in the provider details, using the values noted from CloudCADI's UI:

    • Provider Name: (e.g., aws-provider)
    • AWS Account ID: Use the 12-digit AWS account number

    Click Continue then click Save.

    Enter provider name and aws account id

  6. Once the pool is created, click Grant access.

    Grant access to the pool

  7. Select Grant access using service account impersonation, then select an existing service account (or create one and select it). Under Select principals, choose aws_role and paste the Attribute value from CloudCADI's UI, then click Save.

    Grant access via service account impersonation

  8. A popup will appear in the middle of the page. Select the Provider and download the configuration file by clicking the Download Config button.

    Download config file

  9. The configuration file will be downloaded successfully.

  10. Back in CloudCADI, enter the GCP Organization ID and the Service Account you used, paste the contents of the downloaded file into WIF credential configuration (JSON), then click Save & Validate.

    Enter organization ID, service account, and WIF config in CloudCADI

Auto and Manual Onboarding​

Once the prerequisites above are complete, projects can be onboarded either automatically or manually.

Auto​

  1. Enter your Organization ID in the field provided. Use the CLI command to assign the three required roles, or manually assign them at the organization level.

    Grant required roles via CLI or manually

  2. Click Next - all projects under that organization with billing and pricing export enabled are fetched.

  3. Select the projects to onboard and click Done. The selected projects are onboarded.

    Select projects to onboard

Manual Setup​

  1. Enter the Project Name, Project ID, Project Number, Fully Qualified Detailed Billing Report Table Name, and Fully Qualified Pricing Report Table Name, verify all the fields, and click Confirm.
Before you start

For enabling Detailed Usage Cost and Pricing exports and obtaining the fully qualified BigQuery table names, refer to the GCP Billing Export documentation.

Enter project and billing export details

  1. Review the configuration and click Done.

    Review configuration and finish