> For the complete documentation index, see [llms.txt](https://docs.archera.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.archera.ai/help-center/aws-onboarding/upgrading-the-archera-aws-integration-from-visibility-only-to-commitment-management.md).

# Upgrading the Archera AWS Integration from Visibility Only to Commitment Management

AWS customers who onboarded onto Archera using the **Visibility Only** (`read-only` access) can upgrade to **Commitment Management** (write access) simply by updating their current `ArcheraAI` CloudFormation stack with the following information.<br>

1. Change the CloudFormation template URL from the `ReservedAI-Read` Template URL to the `ReservedAI-Write` Template URL

{% hint style="info" %}
**ReservedAI-Write Template URL:**

{% code overflow="wrap" %}

```
https://archera-cloudformation-production.s3.us-east-1.amazonaws.com/ReservedAI-Write-Cloudformation.template
```

{% endcode %}
{% endhint %}

2. Replace the `ReservedAIPrincipal` CloudFormation Parameter from `arn:aws:iam::967800896805:user/reserved-read` to

{% code overflow="wrap" %}

```
arn:aws:iam::967800896805:user/reserved-write
```

{% endcode %}

{% hint style="warning" %}
Please do not modify the `ExternalId` parameter within the CloudFormation stack, as it is critical to the integration with the Archera portal.
{% endhint %}

Refer to [#upgrade-from-visibility-only-to-commitment-management-with-aws-cloudformation](#upgrade-from-visibility-only-to-commitment-management-with-aws-cloudformation "mention")for step-by-step procedure to make the upgrade from Visibility Only to Commitment Management.

#### Upgrade from Visibility Only to Commitment Management with AWS CloudFormation

1. Sign in to the AWS console for your AWS management account.
2. Navigate to AWS CloudFormation.
3. Identify and select the CloudFormation Stack named `ArcheraAI` .

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FsDaEaRtQmKHqNtylNhYa%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_init.png?alt=media&amp;token=76872ee4-5009-49bd-b559-3fa47d308840" alt=""><figcaption></figcaption></figure>

4. Navigate to the `Parameters` tab in the right pane. Ensure the `ReservedAIPrincipal` reads `arn:aws:iam::967800896805:user/reserved-read`

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2Fb2hWS5KtF9vMQdPhAj9C%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_cloudformation-parameters.png?alt=media&amp;token=96c16817-6a5f-46d7-86a0-ac51f7c0438b" alt=""><figcaption></figcaption></figure>

5. With the `ArcheraAI` stack selected, click on `Update stack` on the top right of the page.

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FRrpUDC4Dxl7Nl0C40kPU%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_update-stack.png?alt=media&amp;token=42cf96a4-60e4-422e-aeaa-e4a166a37949" alt=""><figcaption></figcaption></figure>

6. From the dropdown, choose `Make a direct update`.

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FmAIc48cVt4UFBcnGsrPK%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_update-stack-direct-update.png?alt=media&amp;token=71eb7b2e-2f88-4ad6-91c8-fe6dbbdae16d" alt=""><figcaption></figcaption></figure>

7. On the `Update Stack` page, click on `Replace existing template` and then select `Amazon S3 URL` under the Specify template section. Once the selection is made, enter the following Amazon S3 URL in the text field and click Next.

{% hint style="info" %}
Amazon S3 URL:

{% code overflow="wrap" %}

```
https://archera-cloudformation-production.s3.us-east-1.amazonaws.com/ReservedAI-Write-Cloudformation.template
```

{% endcode %}
{% endhint %}

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FWweqTjjTjYIYVkz1XkvV%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_replace-s3-url.png?alt=media&amp;token=86fdee8d-413d-4d11-8471-2405ec6ef9b8" alt=""><figcaption></figcaption></figure>

8. On the next page (`Specify stack details`), update the `ReservedAIPrincipal` from `arn:aws:iam::967800896805:user/reserved-read` to

{% code overflow="wrap" %}

```
arn:aws:iam::967800896805:user/reserved-write
```

{% endcode %}

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2F7LXpOpx6LfZzPxhx7VUB%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_change-param-value.png?alt=media&amp;token=7fd181f2-ed44-41d7-89a2-2fa69e77b2f6" alt=""><figcaption></figcaption></figure>

9. Click Next.
10. On the `Configure stack options` page, leave the defaults as-is, and scroll to the bottom of the page.

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FZei8raBT0PHlQ0fbls2J%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_configure-stack-options.png?alt=media&amp;token=43181b9a-449c-40a0-be6c-39c5644ccac9" alt=""><figcaption></figcaption></figure>

At the bottom of the page, check the box `I acknowledge that AWS CloudFormation might create IAM resources with custom names`  and click Next.

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FPmpP9WC4iseqP1IWxrzN%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_acknowledge.png?alt=media&amp;token=bfd368b5-2117-4696-8cf4-53a4a2995228" alt=""><figcaption></figcaption></figure>

11. On the `Review ArcheraAI` page, ensure the following values
    1. In Step 1: Specify template,  `Template URL` should now reflect the `ReservedAI-Write-Cloudformation.template` URL
    2. In Step 2: Specify stack details, `ReservedAIPrincipal` should now read `arn:aws:iam::967800896805:user/reserved-write`

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FUQN3TLPOzuaN0K3vA35J%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_stack-review.png?alt=media&amp;token=8da12233-9460-4327-8a72-35b14c4f035e" alt=""><figcaption></figcaption></figure>

12. Once you have reviewed these values, scroll to the bottom of the page to review the `Change set preview` that highlights that the resource `ReservedAIRole` will be modified and replaced with the write permissions. Click `Submit`.

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FgboZyE74dDyUofPUBP9O%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_submit-stack-update.png?alt=media&amp;token=dc43a5c5-8d98-4047-9431-553fed164151" alt=""><figcaption></figcaption></figure>

13. Once submitted, the stack status changes to `UPDATE_IN_PROGRESS` as shown below.

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FNQvyZoj4KzUElf1Q525q%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_update-in-progress.png?alt=media&amp;token=9a0fcc23-737c-4cc4-b0fd-b9c5d47b4d28" alt=""><figcaption></figcaption></figure>

14. In a minute, once the stack update is complete, the status changes to `UPDATE_COMPLETE`

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FF8epGYtIbXIuzUn1W9k7%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_update-complete.png?alt=media&amp;token=76c73336-063e-47ad-9acc-3b222a5ce0a0" alt=""><figcaption></figcaption></figure>

15. To verify the change took effect, navigate to the following URL and search for `ReservedAI`. You should now see the updated IAM role name, `ReservedAI-Write`.

{% code overflow="wrap" %}

```
https://us-east-1.console.aws.amazon.com/iam/home?region=us-east-1#/roles
```

{% endcode %}

<figure><img src="https://1366734593-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFLclbZ9VfKQxJZcz8vsm%2Fuploads%2FVqHTLDLLO0igtEVUr9cm%2Faws-onboarding_aws-upgrade-from-visibility-to-commitment-management_verify.png?alt=media&amp;token=06846851-d5da-4101-b224-e20a372f69a7" alt=""><figcaption></figcaption></figure>

With the updated IAM role with write permissions, you should now be able to manage commitments in the Archera portal.

{% hint style="info" %}
To verify the health of the AWS integration, navigate to the Archera portal.

<p align="center"><a href="https://app.archera.ai/settings/integrations/aws?provider=aws" class="button primary" data-icon="arrow-up-right-from-square">Navigate to the In-App AWS Integration</a></p>
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.archera.ai/help-center/aws-onboarding/upgrading-the-archera-aws-integration-from-visibility-only-to-commitment-management.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
