Access AWS Cost Billing Bucket
Last updated: 13 January 2020
Trend Micro Cloud One™ – Conformity requires access to your S3 billing bucket in order to set up Cost Optimisation. On successful integration, your Conformity Dashboard will display data in the Cost monitoring section.
User Access
Give Conformity access to Cost Billing Bucket
Step 1: Enable billing reports and, create and attach IAM policy on your AWS Console
Location
AWS Console
- Enable Cost & Usage Reports
Note: The “Enable Reports” button will be unavailable if you’ve already enabled Cost & Usage Reports in the past. You can move to the next step.
- Activate Cost allocation tags if you want to receive reports on particular resources
- Under Billing preferences
- enable Detailed Billing Reports [Legacy]
- Click on Configure to create a new S3 bucket
- Input S3 bucket name and Region
- Verify policy and Save
- Input S3 bucket name and Region
- enable Detailed Billing Reports [Legacy]
- Once verified, enable Monthy report, Cost allocation report, and Detailed billing report with resources and tags and Save preferences
Note: Wait for 24 hours before proceeding with the next steps. This will allow AWS to upload your bills to the S3 bucket.
Step 2: Set up Cost Optimisation in AWS
Location
AWS Console
You must update the policy above with your S3 billing bucket name. This can be Found in the AWS Console via My Billing → Preferences
- Ensure Consolidated billing is enabled, for more information, see: Paying Bills for Multiple Accounts Using Consolidated Billing.
- Create Your Own Policy (IAM Service in AWS Console) Policy Name: CloudConformityBillingReports
-
Copy and paste the following policy:
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:List*" ], "Resource": "arn:aws:s3:::YOUR_BILLING_BUCKET" }, { "Effect": "Allow", "Action": [ "s3:GetObject" ], "Resource": [ "arn:aws:s3:::YOUR_BILLING_BUCKET/*" ] } ] } -
Navigate to the IAM Role screen.
https://console.aws.amazon.com/iam/home?region=us-east-1#/roles
- Search for the role that is attached to your Conformity account.
- Select the role and then click on the Attach Policy button.
- Search for the custom policy created in Step 1 (CloudConformityBIllingReports) and select Attach Policy button.
Step 3: Update Cost Optimisation settings
Location
Main Dashboard > Select {Account} with Cost Optimisation package enabled > Settings > Cost Optimisation settings > Update cost settings
- Input Billing S3 Bucket
- Select Tax line item
