Enable Cloudability Connectivity via AWS Linked Accounts

Cloudability's current AWS integration model requires connectivity through an AWS Organizations Management (Master/Billing) Account. While this architecture has served customers well, it is becoming increasingly difficult to support in large, highly regulated enterprises.

At organisations such as Commonwealth Bank, the AWS Management Account is one of the most heavily protected accounts in the environment. Due to evolving cyber security standards, regulatory obligations, and the scale of modern cloud estates, access to these accounts is now tightly restricted and, in many cases, operational activity is actively discouraged or prohibited.

As a result, integrating third-party platforms directly with the Management Account creates unnecessary security exceptions, governance overhead, and adoption barriers.

Enhancement Request

Enable Cloudability to support data collection through a designated AWS linked account within an AWS Organization, rather than requiring direct connectivity to the Management Account.

AWS already provides mechanisms that make this possible through delegated IAM permissions, Data Exports, Cost and Usage Reports (CUR), and other billing-related controls. We are seeking an IBM-endorsed and fully supported architecture that allows Cloudability to leverage these capabilities while maintaining complete functionality.

Business Value

• Aligns with modern enterprise security practices by reducing dependencies on highly privileged Management Accounts.
• Removes adoption barriers for large regulated organisations such as banking, government, healthcare, and critical infrastructure.
• Reduces security and compliance overhead associated with approving third-party integrations in sensitive accounts.
• Future-proofs Cloudability's AWS onboarding model as organisations continue to strengthen cyber controls around Management Accounts.
• Improves competitiveness by providing a deployment option better suited to large-scale enterprise environments.

Desired Outcome

IBM formally supports Cloudability connectivity through a designated AWS linked account, using AWS-native delegation and billing data access mechanisms, eliminating the need for operational integration with the AWS Management Account.

As cyber controls continue to tighten across large enterprises, this capability will become increasingly important for maintaining and expanding Cloudability adoption within highly regulated industries.