Connect Your AWS Account

ExplainMyBill.ai uses secure, read-only access to analyze your AWS bill. We cannot create, modify, or delete AWS resources.

Step 1 — Copy Your External ID

Use this External ID when creating your IAM role:

3fd68fa5-0735-4de9-916b-fbdc83b0cd32

Step 2 — Create an IAM Role

  1. Open the AWS Console.
  2. Go to IAM → Roles → Create role.
  3. Select AWS account.
  4. Select Another AWS account.
  5. Enter this ExplainMyBill.ai AWS Account ID:
111415917473

This is not your AWS account ID. This lets ExplainMyBill.ai securely assume the read-only role you create.

Step 3 — Add the External ID

Tick Require external ID, then paste this value:

3fd68fa5-0735-4de9-916b-fbdc83b0cd32

Step 4 — Attach Permissions

Attach these AWS-managed policies:

Step 5 — Copy Your Role ARN

After creating the role, copy the Role ARN.

It will look like this:

arn:aws:iam::123456789012:role/ExplainMyBillReadOnlyRole

Step 6 — Return to ExplainMyBill.ai

Your customer ID is:

direct-7fc0c656-d0f3-480a-a135-363d68bbb181

After creating the IAM role, continue and paste your Role ARN.

Continue to ExplainMyBill.ai
Advanced: Show Trust Policy 
{
  "Effect": "Allow",
  "Principal": {
    "AWS": "arn:aws:iam::111415917473:role/explainmybillnew-ApiFunctionRole-SR4mv5mLIQP"
  },
  "Action": "sts:AssumeRole",
  "Condition": {
    "StringEquals": {
      "sts:ExternalId": "3fd68fa5-0735-4de9-916b-fbdc83b0cd32"
    }
  }
}