Access Aws Cost Billing Bucket

The Cost Optimization Add-on has been deprecated for new Conformity users with effect from April 2020.

Trend Micro Cloud One™ – Conformity requires access to your S3 billing bucket in order to set up Cost Optimisation. On successful integration, your Conformity Dashboard will display data in the Cost monitoring section.

User Access

User Role	Can Access
Administrator
Power User
Custom - Full Access
Read Only
Custom - Read Only

Give Conformity access to Cost Billing Bucket

Step 1: Enable billing reports and, create and attach IAM policy on your

1. Enable Cost & Usage Reports

   The "Enable Reports" button will be unavailable if you've already enabled Cost & Usage Reports in the past. You can move to the next step.

   
   

2. Activate Cost allocation tags

if you want to receive reports on particular resources

3. Under Billing preferences

1. enable Detailed Billing Reports [Legacy]
   
   

2. Click on Configure to create a new S3 bucket

   1. Input S3 bucket name and Region
      
      
   2. Verify policy and Save
      
      

3. Once verified, enable Monthy report, Cost allocation report, and Detailed billing report with resources and tags and Save preferences
   

Wait for 24 hours before proceeding with the next steps. This will allow AWS to upload your bills to the S3 bucket.

Step 2: Set up Cost Optimisation in AWS

You must update the policy above with your S3 billing bucket name. This can be Found in the ** ** via My Billing → Preferences

1. Ensure Consolidated billing is enabled, for more information, see: Paying Bills for Multiple Accounts Using Consolidated Billing.
   
   
   

2. Create Your Own Policy (IAM Service in ) Policy Name: CloudConformityBillingReports

3. Copy and paste the following policy:

   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Effect": "Allow",
               "Action": [
                   "s3:List*"
               ],
               "Resource": "arn:aws:s3:::YOUR_BILLING_BUCKET"
           },
           {
               "Effect": "Allow",
               "Action": [
                   "s3:GetObject"
               ],
               "Resource": [
                   "arn:aws:s3:::YOUR_BILLING_BUCKET/*"
               ]
           }
       ]
   }

4. Navigate to the IAM Role screen. https://console.aws.amazon.com/iam/home?region=us-east-1#/roles
   
5. Search for the role that is attached to your Conformity account.
   
6. Select the role and then click on the Attach Policy button.
   
   
   
7. Search for the custom policy created in Step 1 (CloudConformityBIllingReports) and select Attach Policy button.
   
   
   

Step 3: Update Cost Optimisation settings

1. Input Billing S3 Bucket
2. Select Tax line item