Connections

Connect both clouds in minutes.

CloudOptify connects to Azure and AWS with read-only access, verifies every connection before saving it, and starts analyzing automatically. No agents to install, nothing deployed into your environment.

Microsoft Azure

Connect one or more Azure tenants through a standard Microsoft consent flow that grants read-only access to cost data and resource metadata. Verify with one click, then choose exactly which subscriptions CloudOptify analyzes.

Authentication Microsoft Entra app consent — secrets held server-side, encrypted at rest
Access level Read-only: billing & cost data, resource metadata, utilization metrics
Scope control Per-subscription selection — analyze only what you choose
Multi-tenant Connect multiple tenants and filter across them with the global filter

Amazon Web Services

Connect AWS with read-only access and discover the accounts in your AWS Organization automatically. Two authentication methods are supported — including a keyless option where no long-lived secret exists at all.

IAM Role Recommended A cross-account role you create and control, protected by a unique External ID. No secret is ever stored — access is short-lived credentials, revoked instantly by deleting the role.
Access keys Read-only IAM user keys, AES-256 encrypted at rest and never shown again after saving
Access level Read-only: Cost Explorer, resource metadata, CloudWatch utilization
Organizations Member accounts discovered automatically — pick the ones to analyze

Every connection, the same rules.

Read-only, always

Every connection method grants read access only. CloudOptify can never create, modify, or delete anything in your cloud.

Verified before saved

Every connection is tested end-to-end against your cloud before it is persisted — a misconfiguration fails immediately with a clear message.

Revocable instantly

Remove consent, delete the role, or revoke the key on your side and access ends immediately. You stay in control.

Discovery built in

New subscriptions and accounts that appear in your cloud are discovered automatically on every sync — nothing drifts out of view.

Connected in minutes, insight on the first scan.

Step-by-step setup guides for both clouds live in the documentation.