Table of contents

Access Aws Cost Billing Bucket

The Cost Optimization Add-on has been deprecated for new Conformity users with effect from April 2020.

Trend Micro Cloud One™ – Conformity requires access to your S3 billing bucket in order to set up Cost Optimisation. On successful integration, your Conformity Dashboard will display data in the Cost monitoring section.

User Access

User Role Can Access
Administrator
Power User
Custom - Full Access
Read Only
Custom - Read Only

Give Conformity access to Cost Billing Bucket


Step 1: Enable billing reports and, create and attach IAM policy on your

Location

AWS Console

  1. Enable Cost & Usage Reports

    The "Enable Reports" button will be unavailable if you've already enabled Cost & Usage Reports in the past. You can move to the next step.


  2. Activate Cost allocation tags

if you want to receive reports on particular resources

3. Under Billing preferences

  1. enable Detailed Billing Reports [Legacy]

  2. Click on Configure to create a new S3 bucket

    1. Input S3 bucket name and Region

    2. Verify policy and Save

  3. Once verified, enable Monthy report, Cost allocation report, and Detailed billing report with resources and tags and Save preferences

Wait for 24 hours before proceeding with the next steps. This will allow AWS to upload your bills to the S3 bucket.



Step 2: Set up Cost Optimisation in AWS

Location

AWS Console

You must update the policy above with your S3 billing bucket name. This can be Found in the via My BillingPreferences

  1. Ensure Consolidated billing is enabled, for more information, see: Paying Bills for Multiple Accounts Using Consolidated Billing.


  2. Create Your Own Policy (IAM Service in ) Policy Name: CloudConformityBillingReports

  3. Copy and paste the following policy:

    {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Effect": "Allow",
                "Action": [
                    "s3:List*"
                ],
                "Resource": "arn:aws:s3:::YOUR_BILLING_BUCKET"
            },
            {
                "Effect": "Allow",
                "Action": [
                    "s3:GetObject"
                ],
                "Resource": [
                    "arn:aws:s3:::YOUR_BILLING_BUCKET/*"
                ]
            }
        ]
    }

  4. Navigate to the IAM Role screen. https://console.aws.amazon.com/iam/home?region=us-east-1#/roles
  5. Search for the role that is attached to your Conformity account.
  6. Select the role and then click on the Attach Policy button.


  7. Search for the custom policy created in Step 1 (CloudConformityBIllingReports) and select Attach Policy button.


Step 3: Update Cost Optimisation settings

Location

Main Dashboard > Select {Account} with Cost Optimisation > Settings > Cost Optimisation settings > Update cost settings

  1. Input Billing S3 Bucket
  2. Select Tax line item