AWS Marketplace Install

This document provides the steps for installing the Kubecost product from the AWS marketplace. More info on different tiers.

Step 1: Create an IAM policy

To deploy Kubecost from AWS Marketplace, you need to assign an IAM policy with approriate IAM permission to a Kubernetes (K8s) service account before starting the deployment. You can either use AWS managed policy arn:aws:iam::aws:policy/AWSMarketplaceMeteringRegisterUsage or creating your own IAM policy. You can learn more info on how to create a new policy
Example IAM policy:
"Version": "2012-10-17",
"Statement": [
"Action": [
"Effect": "Allow",
"Resource": "*"

Step 2: Create an IAM role for service account (IRSA).

We recommend doing this via eksctl. The command below helps to automate these manual steps:
  • Create an IAM role with AWS managed IAM policy.
  • Create a K8s service account name awsstore-serviceaccount in your Amazon EKS cluster.
  • Set up trust relationship between the created IAM role with awsstore-serviceaccount.
  • Modify awsstore-serviceaccount annotation to associate it with the created IAM role
Please remember to replace CLUSTER_NAME with your actual Amazon EKS cluster name.
eksctl create iamserviceaccount \
--name awsstore-serviceaccount \
--namespace kubecost \
--cluster CLUSTER_NAME \
--attach-policy-arn arn:aws:iam::aws:policy/AWSMarketplaceMeteringRegisterUsage \
--approve \
More details and how to set up the appropriate trust relationships is available here.
Note: Your Amazon EKS cluster needs to have IAM OIDC provider enabled to set up IRSA. You can learn more on how to enable IAM OIDC provider with this AWS documentation

Step 3: Deploy Kubecost with attached IAM role

  • Define which available version you would like to install using this following command (you can check available version title from the AWS Marketplace product, e.g: prod-1.95.0):
  • Deploy Kubecost with Helm using the following command:
helm upgrade -i kubecost kubecost/cost-analyzer \
--namespace kubecost --create-namespace \
--set prometheus.nodeExporter.enabled=false \
--set global.grafana.enabled=false \
--set global.grafana.proxy=false \
--set awsstore.useAwsStore=true \
--set${IMAGETAG} \
--set imageVersion=${IMAGETAG} \
--set \
--set \
--set \
--set prometheus.server.image.tag=v2.35.0
  • You can run these following commands to enable port-forwarding and access Kubecost dashboard at http://localhost:9090
kubectl port-forward --namespace kubecost deployment/kubecost-cost-analyzer 9090
You can now start monitoring your Amazon EKS cluster cost with Kubecost. For advanced setup or other questions, contact us at [email protected] to schedule these sessions.