|   Trend Micro Cloud One™
Open menu

Access AWS Cost Billing Bucket

Last updated: 13 January 2020

Last edited Jan 13, 2020

Cloud Conformity requires access to your S3 billing bucket in order to set up Cost Optimisation. On successful integration, your Cloud Conformity Dashboard will display data in the Cost monitoring section.

User Access

Administrator
Power User
Custom - Full Access
Read Only
Custom - Read Only

Give Cloud Conformity access to Cost Billing Bucket


Step 1: Enable billing reports and, create and attach IAM policy on your AWS Console

Location

AWS Console

  1. Enable Cost & Usage Reports
    Note: The “Enable Reports” button will be unavailable if you’ve already enabled Cost & Usage Reports in the past. You can move to the next step.
  2. Activate Cost allocation tags if you want to receive reports on particular resources
  3. Under Billing preferences
    1. enable Detailed Billing Reports [Legacy]
    2. Click on Configure to create a new S3 bucket
      1. Input S3 bucket name and Region
      2. Verify policy and Save
  4. Once verified, enable Monthy report, Cost allocation report, and Detailed billing report with resources and tags and Save preferences
    Note: Wait for 24 hours before proceeding with the next steps. This will allow AWS to upload your bills to the S3 bucket.

Step 2: Set up Cost Optimisation in AWS

Location

AWS Console

You must update the policy above with your S3 billing bucket name. This can be Found in the AWS Console via My Billing → Preferences

  1. Ensure Consolidated billing is enabled, for more information, see: Paying Bills for Multiple Accounts Using Consolidated Billing.
  2. Create Your Own Policy (IAM Service in AWS Console) Policy Name: CloudConformityBillingReports

  3. Copy and paste the following policy:

        {
   
        "Version": "2012-10-17",
   
        "Statement":  [
   
            {
   
                "Effect": "Allow",
   
                "Action":  [
   
                    "s3:List*"
   
                 ],
   
                "Resource": "arn:aws:s3:::YOUR_BILLING_BUCKET"
   
            },
   
            {
   
                "Effect": "Allow",
   
                "Action":  [
   
                    "s3:GetObject"
   
                 ],
   
                "Resource":  [
   
                    "arn:aws:s3:::YOUR_BILLING_BUCKET/*"
   
                 ]
   
            }
   
         ]
   
    }

  4. Navigate to the IAM Role screen.

    https://console.aws.amazon.com/iam/home?region=us-east-1#/roles

  5. Search for the role that is attached to your Cloud Conformity account.
  6. Select the role and then click on the Attach Policy button.
  7. Search for the custom policy created in Step 1 (CloudConformityBIllingReports) and select Attach Policy button.

Step 3: Update Cost Optimisation settings

Location

Main Dashboard > Select {Account} with Cost Optimisation package enabled > Settings > Cost Optimisation settings > Update cost settings

  1. Input Billing S3 Bucket
  2. Select Tax line item

Still need help? Login to Cloud Conformity and submit a ticket to our support team