Connect Your AWS Account

ExplainMyBill.ai uses secure, read-only access to analyze your AWS bill. We cannot create, modify, or delete AWS resources.

Step 1 — Copy Your External ID

Use this External ID when creating your IAM role:

c0c3689b-8a0a-4d5d-92f4-cee8095855d5

Step 2 — Create an IAM Role

  1. Open the AWS Console.
  2. Go to IAM → Roles → Create role.
  3. Select AWS account.
  4. Select Another AWS account.
  5. Enter this ExplainMyBill.ai AWS Account ID:
111415917473

This is not your AWS account ID. This lets ExplainMyBill.ai securely assume the read-only role you create.

Step 3 — Add the External ID

Tick Require external ID, then paste this value:

c0c3689b-8a0a-4d5d-92f4-cee8095855d5

Step 4 — Attach Permissions

Attach these AWS-managed policies:

Step 5 — Copy Your Role ARN

After creating the role, copy the Role ARN.

It will look like this:

arn:aws:iam::123456789012:role/ExplainMyBillReadOnlyRole

Step 6 — Return to ExplainMyBill.ai

Your customer ID is:

direct-0929ef47-0dc5-4271-beb1-7b53351e2f7a

After creating the IAM role, continue and paste your Role ARN.

Continue to ExplainMyBill.ai
Advanced: Show Trust Policy 
{
  "Effect": "Allow",
  "Principal": {
    "AWS": "arn:aws:iam::111415917473:role/explainmybillnew-ApiFunctionRole-SR4mv5mLIQP"
  },
  "Action": "sts:AssumeRole",
  "Condition": {
    "StringEquals": {
      "sts:ExternalId": "c0c3689b-8a0a-4d5d-92f4-cee8095855d5"
    }
  }
}