Kion projects are different from Google Cloud projects, which are added to Kion as accounts. To learn how to view a Google Cloud project, see the Viewing Accounts.
To display all the projects that you have permission to view, click Projects > All Projects in the left navigation menu. This will show the project list.
By default, these are displayed in card view and the list only includes active projects. To view archived projects, click the filter icon , open the State filter dropdown, select Archived, and click Apply.
Project Card View
By default, projects are shown in card view. Each card shows the following information:
- Cloud Access menu in the top blue bar. You can click on this menu, then click on a cloud access role to log into the console using that role. If this menu says No assigned cloud access roles, you need to add a cloud access role first. For more information, see Add a Cloud Access Role.
- The project name.
- A star to mark the project as a favorite. Favorites appear under Quick Projects.
- A project status badge, which indicates whether it is:
- On Track - the project is spending in accordance with the project spend plan.
- Overburning - an overburning event has been triggered for this project, which indicates a spending threshold has been reached or exceeded. To learn the triggers that caused this event, see the Enforcements tab on the project details page.
- Overspending - the project has spent more than was available through the project spend plan.
- Funding Lapsed - the project does not have any active funding sources on the project spend plan.
- No Spend Plan - the project does not have a spend plan. For more information, see What is a Project Spend Plan?
- Archived - the project has been archived by the owner and is only available for record-keeping.
You can also view the projects in list view by clicking the list icon on the top right. Use the grid icon next to it to switch back to card view.
Clicking the ellipsis menu on the right of a project gives you the option to:
- View Project: displays the project detail screen.
- Edit Project: allows you to edit the project display name>, permission scheme, owners, description, and budget enforcement actions.
- Delete Project: deletes the project; you must remove all objects attached to the project first.
- Archive Project:archives the project.
- Manage User Permissions: allows you to assign users and groups to project roles; roles have individual permissions on the project.
- Edit Spend Plan: allows you to edit the project spend plan for the project.
- Find in Org Chart: locates the project in the organization chart.
- Project Diagnostics: displays a list of all the cloud rules or cloud access roles and any problems encountered applying these to the cloud accounts attached to the project.
- Download Project Financials: allows you to download a financial record of the project.
- Move Project: allows you to move the project.
You can click on a project's name to visit its detail page.
Project Details: Overview Tab
Click the name of the project to view its details page, including a tab menu for the project. A More tab will display when there are more tabs than the screen can accommodate; you can click More to review the remaining menu options.
The Overview tab shows by default, which has three subsections: project details, total spending, and recent activity.
The Project Details section shows:
- Created: date when the project was added to Kion
- Lifespan: the start and end date of the project determined by the spend plan
- Parent OU: parent of the current project
- Description: optional section to store information about the project
- On the lower left, you'll see a snapshot of the current project in the organization chart. Hover over each circle to see the name of the project and its position relative to OUs. The View Project in Org Chart button takes you to the organization chart.
- Activity Feed: a list of events involving this project.
The Resource Inventory section shows the number of active resources associated with the project. Click View All Project Resources to view a pre-filtered list of the project's resources. For more information, see Resource Inventory Overview.
The Total Spending section provides the same level of detail that is on the project card view. You can change the dropdown to view the following options:
- Lifetime: spending information since the 1st of the month in which the project was created.
- This Month: spending information since the 1st of the current month.
- Current Funding Sources: spending information since the 1st of the month for the earliest of the active funding sources.
Project Details: Financials Tab
In the Financial tab detail screen, you’ll see a few sections:
The Total Spending graph shows an overview of spending for the project. You can use the dropdown menu to view total spending for the Month, Lifetime, or Current Funding Source.
The Monthly Spending graph section shows a breakdown of the most recent months spending compared to the previous six months and the next month’s forecasted spend.
The Spending by Account table shows all AWS accounts that are currently attached to the project
As of Kion v2.29, there is no longer a Monthly Spending section. The notion of payments has been removed to make it easier to make changes to spend plans.
If you click on the Spend Reports button in the upper right-hand corner of the Monthly Spending graph you will see a report builder. For more info on spend reports, see the "Spend Reports" section of our Reports Overview article. You can expand the "Building Project Reports" section at the bottom of that article for step-by-step instructions on how to build your report.
Project Details: Accounts Tab
The Accounts tab provides a list of all cloud accounts attached to the project, including:
- Account Name
- Account Number
- Account Type
- Cloud Access menu to log into the console using a cloud access role
Financial enforcement actions are configurable actions you can set on a project when a spending threshold is surpassed. You can also set financial enforcements on funding sources.
Under the Enforcements tab, you will see a table with the following information:
- Trigger: The conditions that must be met for the enforcement event to take place. The enforcement description will display below the trigger, if applicable.
- Event: The enforcement action that will take place when the trigger conditions are met.
- Origin: Where the enforcement action originates (local, inherited, global).
- Applied By: The user that applied the trigger.
- Status: Whether or not the enforcement is enabled or disabled.
You can learn how to add a new financial enforcement action on this project in the Add a Financial Enforcement Action to a Project article.
Project Details: Users Tab
The Users tab provides a list of users who have access to the project. This includes users that are in groups as well. To see the group names, you can click on the User Groups subtab. Options on this tab include:
- Hover over each icon under Permission Origin to see if the permission is local (applied directly on the project), inherited (inherited from a parent OU), or global (applied across the entire application).
- Hover over each icon under Cloud Access Type to see if the user has cloud access via web access, short-term access keys, and/or long-term access keys.
- You can click the Manage User Permissions button to manage users and user groups on this project.
Project Details: Permissions Tab
The Permissions tab provides access lists by user or by permissions.
If you click on By User, you get a list of all users with access to the project. If you click on a user, you get a list of project permissions the user has. If you click on a permission, you get a list of roles where the user is assigned the permission. If you click on a role, you see where the permission originated.
If you click on By Permission, you get a list of permissions. If you click on a permission, you get a list of users with that permission. If you click on a user, you get a list of roles the user is assigned the permission. If you click on a role, you see where the permission originated.
You can click the Manage User Permissions button to manage users and user groups on this project.
Project Details: Cloud Management Tab
The Cloud Management tab provides access to several subtabs: Cloud Rules, Cloud Access Roles, AWS Long-Term Access Keys, Shared AMIs, and AWS Service Catalog Portfolios. Click any of these subtabs to see a list of the objects of that type associated with this project. You can expand the info for each object by clicking the caret on the left.
Project Details: Compliance Tab
The Compliance tab includes the following sections, which display compliance measures relating to this project:
The compliance summary provides an overview of the object's compliance. It includes the following:
The doughnut charts on the Findings and Compliance Checks cards show findings and checks broken down by severity as follows:
- Green: compliant checks (not applicable for findings).
- Maroon: non-compliant checks/findings of critical severity.
- Red: non-compliant checks/findings of high severity.
- Orange: non-compliant checks/findings of medium severity.
- Yellow: non-compliant checks/findings of low severity.
- Blue: non-compliant checks/findings of informational severity.
- Slate: suppressed findings (not applicable for checks).
These give you insight at a glance to see whether an item is fully compliant, and show you which non-compliant checks for that item need your attention most urgently.
You'll also see:
- The compliance score for this item. For more info, see our Compliance Score article.
- A count of findings/checks at each severity. Click any number to see a list of findings/checks at that severity.
- A Total count of all findings/checks for this object.
- A View All link to see all findings/checks.
- A Compliance Trends graph that shows the total number of findings over time for this item. This visualization can be filtered to show daily active findings or cumulative active findings and can display up to six months of data.
This section displays a list of all the compliance standards that apply to this object.
Standards can be filtered by Compliant and Non-compliant states using the dropdown menu on the top left. Use the arrow buttons on the top right to navigate through the pages of results.
You can also:
- Click on the standard name to visit the detail page for the standard.
- Click the findings badges to view the findings.
Click the ellipsis menu on the right of a standard to:
- Rescan all checks - run all checks in this standard again on demand.
- Edit standard - edit the standard.
The findings badges on this page are color coded to indicate the highest level of severity recorded for the compliance checks with active findings. The colors represent the following:
- Gray: no findings. All checks are compliant.
- Maroon: highest severity non-compliant checks are critical severity.
- Red: highest severity non-compliant checks are high severity.
- Orange: highest severity non-compliant checks are medium severity.
- Yellow: highest severity non-compliant checks are low severity.
- Blue: highest severity non-compliant checks are informational severity.
- Slate: suppressed findings.
Keep in mind that the color on the findings badge reflects the highest level severity recorded, not the count of findings at that severity level. For example, if you see the following badge, it means there are 62 active findings and at least one of the findings is high severity. It does NOT mean there are 62 findings of high severity.
You can click on the findings badges to see a list of the findings, including their severity information.
Savings Opportunities Tab
The Savings Opportunities tab shows a savings opportunity summary that is specific to this project. You can learn more about savings opportunity summaries in the Savings Opportunities Overview article. The terms and charts, and menus are the same in both locations, but while the overview's summary applies to all projects, the summary you see on a project's details page will only apply to that project.
The Notes tab allows you to view project notes added by other users. You can add a new note by clicking the Add button in the top right corner.
Use the Settings tab to configure in-app and email notification settings for this project.
When configuring notifications settings, keep in mind that these settings can be configured in multiple places. Resource level settings configured here override user and global configurations but not locked settings. Resource level settings are, however, user specific. Configurations made here will only apply to the user that configures them. For information about the precedence order for notification settings, see Notifications.
- Notification to project owners when a project's funds are about to expire or run out.
- Notification to selected users and user groups when an enforcement action is taken or cleared.
- Notification to project owners when a project access request is created or canceled.
- Notification to project owners when an project cloud rule exemption request is created or canceled.
- Notification to project owners when a project cloud access role exemption request is created or canceled.