Locking/Unlocking an account

This page describes the different sections of the lease details page:

Account Summary

Account summary contains the basic information about the lease and its associated account:

1. The Status of the lease. See lease status here
2. Lease ID. This is the unique identifier of the lease. 
3. AWS Account ID: When a lease is active, an AWS account is associated to it. This is the AWS account ID for the current lease.
4. Account template used for this lease.
5. User who has requested the lease. The lease owner may be different than the requester as managers and administrators can request leases on behalf of other users.
6. Approved by: Shows the user who has approved (or rejected the lease). For account templates that do not require approval, the lease it auto approved.
7. Login to the AWS account using AWS Identity Center.

Note: When a manager or administrator requests an account for an account template he/she can approve, the lease will be automatically approved.

Account Timeline

The timeline shows you the different stages an account (lease) can go through. It also shows you what current state the account is in.

Team members

This sections shows the users who can access this account. If the account template allows team sharing, then the owner (or a manager/admin) can share the account with other users. 

The "Status" columns indicates if the share is active (The other user can see and access the lease) or if the account is being shared (Status = "Sharing...").

By clicking on "Update", managers and administrators can share or un-share the account with other users. Refer to How to share an account for more details.

Budget & Duration

Account limits versus Account templates limits:

It is important to understand how duration and budget work:

1. The initial budget/duration of an account (or lease) is set on account creation, based on the account template used.
   • i.e: If the account template has a budget of $50, then the account created will have a default budget of $50.
   • The expiration date is calculated on account creation/start. This is particularly important for accounts related to events: The duration countdown will only start when the event (and therefore the lease) actually start, not when it's created.
2. During the account lifetime, managers and administrators can update the budget/expiration, independently from the account template. They can, for instance, extend the budget or prolongate the lifetime for a particular account without having to change the account template.

Budget

The budget card shows the maximum budget for the account and the current spend.

In this example, the maximum budget for this account is $50 and so far, $4.26 have been spent. Managers and Administrators can extendlock (and unlock) accounts. Accounts can be locked if they are over budget or reduce)if they have expired. 

Once locked, the budgetaccount is not accessible anymore to the end user, but remains active and accessible to the managers and administrators.

Accounts that are locked keep on incurring cost as existing resources are not stopped.

Lock an account

From the lease details page, click on the Actions button and select "Lock account":

Confirm the action by clicking on the "Update" button.Lock":

Duration

The duration card shows when this account will expire.

The expirationaccount datestatus changes to "Account locked" and name of the user who locked the account is calculatedshown:

on

The account creation/start. This is particularly important for accounts related to events: The duration countdownowner will onlybe startnotified whenby thee-mail event (and therefore the lease) actually start, not when it's created.

In this example,that the account has been runninglocked.

for

 8

days

Unlock an account

From the lease details page, click on the Actions button and willselect expire"Unlock inaccount":

20

days and 6 hours. Managers and Administrators can extend (or reduce)

Confirm the lifespan of the accountaction by clicking on the "Update" button.Unlock":

The account status return to its previous state:

The account owner will be notified by e-mail that the account has been unlocked.

 

Lock/Unlock accounts in bulk:

From the leases page, select the accounts you want to lock/unlock and click on the "Actions" button and select "Lock account"/"Unlock accounts":