CloudPeek Docs Download

Use CloudPeek

Accounts

Each AWS account you add has its own sign-in, default region and widgets. Here's how to add more, change them, keep them signed in, and remove them.

Updated 14 October 2026

Add an account

First give CloudPeek a sign-in to the account: an IAM user's access key, or an IAM Identity Center permission set (see Get started). Then:

  1. On the Accounts tab, tap Add Account, below your accounts.
  2. Under Sign in with, choose IAM keys or SSO, and fill in the form as in Get started, step 2.
  3. Tap Validate & Save. CloudPeek checks the sign-in with AWS, and that it can read CloudWatch, before it saves anything.
  • Temporary credentials: with IAM keys, add the Session token too. Paste credentials block fills in all three from a profile, export lines or the AWS CLI's JSON, and the region and label if it names them. The account then needs updating when they expire.
  • Several roles or accounts through one access portal: add each as an account of its own. After saving one, tap Add Another Account to add the next from the same approval, without going back to the browser. A long list of accounts can be searched by name or number. With only one account available, CloudPeek chooses it for you.
  • Adding the same sign-in again, the same access key or the same role in the same account through the same portal, updates the account already there rather than adding it twice. Its widgets carry on.

Several accounts

Add as many accounts as you like. Each widget refreshes with the sign-in of the account it was made for, so widgets from production, staging and your billing account sit side by side on the Home Screen.

The Accounts tab lists each account with:

  • how it signs in: KEYS, SSO, or DEMO for the sample account;
  • its default region and AWS account number;
  • its access portal or access key, and how many dashboards it has;
  • a warning when it needs attention, such as Sign-in expired · sign in again, Key rejected · update it or Expires and when.

Tap an account to see its dashboards. Pin widgets from them, or tap + to create a widget from the account's metrics.

A widget only ever refreshes with an account in the same AWS account it was made for. If you remove that account, the widget says AWS account … · not added until you add it again.

Account Details

Open an account on the Accounts tab and tap Account Details, at the top of its dashboards. It shows:

  • Label, which you can change;
  • Signs in with: Access key, Temporary credentials, IAM Identity Center or Sample data;
  • Account ID and Default region, which you can change;
  • for SSO, the Start URL, Role and Identity Center region; for keys, the Access key ID, partly hidden;
  • Identity, the IAM user or role CloudPeek signs in as;
  • how many widgets come from the account.

It also has Sign In Again (or Update Access Key) and Remove Account.

Change an account's label or default region

  1. Open the account's Account Details.
  2. Edit Label, or choose another Default region. The list only offers regions in the account's own partition (commercial, China or GovCloud), where its sign-in works.

The default region is where CloudPeek lists the account's dashboards, and where new presets and AI widgets look for metrics. Changing it:

  • lists the account's dashboards again, and refreshes its widgets;
  • doesn't move presets and AI widgets you've already added: each keeps the region it was added in. To move a preset, add it again from Create Widget, choosing the region in the preview, then remove the old one;
  • doesn't change dashboard widgets, which query the regions their dashboard names.

When a sign-in ends

A sign-in stops working when an IAM Identity Center session reaches your organisation's limit, or when an access key is deactivated, deleted or expires. CloudPeek says so on the account (Sign-in expired · sign in again or Key rejected · update it), in a banner (Your AWS sign-in has expired), and on its widgets, which keep their last data and say Sign-in expired. When CloudPeek knows ahead of time when a sign-in will end, as with temporary access keys or an Identity Center device registration, it warns you a week before: Expires and when.

IAM Identity Center

  1. Tap Sign In Again: on the banner, on a widget that says the sign-in expired, or in Account Details.
  2. The portal and regions are filled in. Tap Continue in Browser and approve the code.
  3. CloudPeek chooses the same account and role as before, and saves.

CloudPeek renews Identity Center credentials by itself, in the app and in the widgets, until your organisation's session limit, so this is only needed when that limit is reached. Signing in again to one account also renews the other accounts from the same portal that need it.

Access keys

  1. In the IAM console, create a new access key for the user if the old one was deleted or deactivated.
  2. In CloudPeek, tap Update Access Key in Account Details, or Update Key on the banner.
  3. The access key ID and region are filled in. Enter the new key ID if it changed, and the secret access key, then tap Validate & Update Key.

Either way, the new sign-in must reach the same AWS account: the account's widgets show that account's metrics. CloudPeek says so if it doesn't. Widgets carry on as they were, with nothing to change on the Home Screen.

Remove an account

  1. Open the account's Account Details.
  2. Tap Remove Account, at the bottom, and confirm. CloudPeek says how many widgets go with it.
  • Its credentials are deleted from this device, with the widgets only it could refresh. Widgets that another account you've added can refresh, because it signs in to the same AWS account, are kept.
  • Removing your last account removes every widget.
  • Remove All Accounts, at the bottom of Settings, removes every account and widget at once.
  • Removing an account doesn't change anything in AWS. To stop the access key or role working anywhere, see Take CloudPeek's access away.

The sample account

Explore with sample dashboards, on the Accounts tab before you've added an account, adds a sample account with built-in data: dashboards called Monthly-Spend and Production-API with every kind of widget. It's listed as Demo and never contacts AWS.

  • Its widgets work like any other, including on the Home Screen.
  • It has no AWS credentials, so it can only write AI widgets with the Anthropic API.
  • To remove it, open its Account Details and tap Remove Account.