# Cost and Security Management extension > Track cloud spend, efficiency, and compliance inside Cloud Management Platform (CMP) using the Cost and Security Management extension --- Site [llms.txt](/llms.txt) --- The extension pulls spend and efficiency data from your CloudBolt Cost and Security Management (CSMP) instance and displays it against your resource handlers, so you can see what a cloud account is costing without leaving CMP. ## Prerequisites - You need a CSMP domain (*yourdomain.cloudbolt.app*) and an API key. - The resource handler must already be added to your CSMP instance as an adapter. The extension reads AWS, Azure, and GCP resource handlers. ## Setup overview 1. Download the extension and connect it to CSMP. 1. Open the extension to check which resource handlers have data. 1. Open a resource handler to view its Spend, Efficiency, and Compliance tabs. 1. Run the caching jobs so the dashboard widgets have data to display. ## Set up the extension 1. In CSMP, collect your API key and note your domain. See Collecting an API Access Key. 1. In CMP, select **Library** and search for **Cost and Security Management**. 1. Select the **download** icon, then **Import** to confirm. 1. Restart the web server on each web node in the appliance: SSH in, switch to the root account with `sudo su -`, then run `systemctl restart httpd`. 1. Go to **Admin** > **Cost and Security Management**. The page opens on the **Getting Started** tab. 1. Under **Integration Setting**, enter your CSMP domain and API key. 1. Select **Validate**. If validation succeeds, select **Save Credentials**. When a saved key expires, a warning appears above **Integration Setting**. Edit the section and enter a new key. ## View spend, efficiency, and compliance Saving the credentials adds the tabs below to every supported resource handler. To check which handlers CSMP has data for, go to **Admin** > **Cost and Security Management** and select the **Resource Handlers** tab. ### Spend details On a resource handler with cost data, select the **Spend** tab. The **Overview** tab shows the top-level breakdown. Use the tabs to the right of Overview to filter and customize what is displayed. ### Efficiency details On a resource handler with cost data, select the **Efficiency** tab to view details for Unused, Unoptimized, and Suppressed. The **Efficiency (Cost Service Adviser) Configuration** section of the extension's page determines what is displayed, such as how long a service must sit idle to be reported and whether snapshots whose volume or database no longer exists are included. Those settings are saved to your CSMP account. ### Compliance details On an AWS or Azure resource handler, select the **Compliance** tab to see how the account scores against CIS, PCI DSS, NIST, HIPAA, and AWS Well-Architected. ### Server costs Each AWS and Azure server has a **Costs** tab that shows that server's cost summary and breakdown, along with the savings CSMP has identified. The **Form Customization** section on the extension's page sets a link to the rightsizing documentation that appears on this tab. ## Dashboard widgets The extension adds five widgets to the CMP dashboard: - **Cloud Provider's Spend Details**: spend over the last 30 days, by resource handler, service, and region. - **Most Expensive Cloud Services**: the five services costing the most. - **Cost in Cloud Providers**: daily cost per provider, with each provider's share of the total. - **Cost Efficiency in Cloud Providers**: the savings available from unused, unoptimized, and suppressed services. - **Compliance Summary**: the compliance score for each resource handler, by framework. The widgets read cached data rather than calling CSMP directly, so a widget remains empty until its caching job runs. Two recurring jobs keep the cache up to date. Both are added as enabled and are set to run daily at 00:10. - **CSMP Dashboard Widget Data Caching** stores the data behind the widgets. - **CSMP Resource Handler Data Caching** stores each resource handler's default currency. Both jobs are listed in the **Recurring Jobs** section of the extension's page and under **Admin** > **Recurring Jobs**, where you can run either on demand. ### Widget currency Cloud providers bill in different currencies, so the widgets need a configured currency. This preference is stored in CMP and applies only to widgets. 1. Under **Dashboard Widget's Currency**, enable **Currency Conversion Status**. 1. Choose a **Preferred Currency** and select **Save**. 1. On the **Resource Handlers** tab, add a conversion rate from each handler's **Provider Currency** to your target currency. Conversion rates are held in your CSMP account. 1. Run **CSMP Dashboard Widget Data Caching** so the widgets pick up the new rates. ## Troubleshooting | Issue | Solution | | --- | --- | | A "404 not found" error appears when you validate the API key. | The extension's URL paths are not registered yet, which happens when the web server has not been restarted since the import. Switch to the root account with `sudo su -`, then run `systemctl restart httpd`. | | The Getting Started tab is blank or unstyled after you import or update the extension. | The extension's CSS and JavaScript have not reached the web server. On the extensions admin page, select **Sync Static Assets**. If that does not help, switch to the root account with `sudo su -` and run `/opt/cloudbolt/manage.py collectstatic --no-input`. | | A dashboard widget is empty. | Its caching job has not run yet. Run **CSMP Dashboard Widget Data Caching** from **Admin** > **Recurring Jobs**. | ## Related - [UI extensions](/docs/cmp/developer-resources/ui-extensions/): Importing an extension from the Content Library. - [Content Library](/docs/cmp/use/catalog/content-library/): Download and update extensions. - Collecting an API Access Key: Get the CSMP API key. --- Section pages: - [VMware data collector configuration](/docs/cmp/configure/integrations/cost-and-security-management/vmware-data-collector/): The VMware data collector is a component of the Cloud Management Platform (CMP) appliance that collects inventory of assets for your on-premises infrastructure and pushes them to the CloudBolt CSMP