Customer Setup (from platform management console)

This section describes how you set up a depository for usage and billing data in an S3 bucket in the AWS account owned by the customer.  If a client has more than one AWS account in the platform, you set up the S3 bucket in one of the AWS accounts.  The platform will populate the S3 bucket with all data from all AWS accounts linked to the Client.

Before you can complete these steps, an S3 bucket must be created.  From the AWS console, setup the bucket policy and attach it to the ARN role for the platform (see item #5 in the instructions below).

To configure an S3 bucket for your customer, follow these steps:

1. In the platform, select the Customer module

2. Select the Customer from the list, then click Edit

3. Select Detailed Billing Exports menu option

4. Toggle 'on' the Export billing reports feature

5. Mark the Cloud providers you want to export data to

6. Select an export destination from the listed cloud providers.  For this instruction, you pick AWS S3 (CSV).  The window expands, displaying additional fields

7. Select the AWS account associated with the S3 bucket from the drop-down list

8. Enter the name of the S3 bucket you created in the AWS console

9. Click the Verify link to confirm communication between the platform and the AWS S3 bucket

Note: Detailed steps for steps 8 and 9 above are provided below.

IMPORTANT INFORMATION: If the customer is using the programmatic billing function inside their AWS account, best practice is to create a new billing bucket. This eliminates the possibility of file overwriting between the platform and AWS. 

Creating a Custom Policy from AWS Management Console

1. Log into the AWS console, then go to the IAM Management Console

2. Select Policies

3. Click Create Policy

4. From the Create policy screen, click the JSON tab

5.  Enter the policy script shown below, replacing the text with the actual name of the S3 bucket you created.  

Replace my_corporate_bucket with the name of the bucket created

6. Name your policy (example: S3-writepolicy-SIE). 

7. Describe the policy

8. From Roles, select the ARN Role created for the account

9. Attach the bucket policy to the ARN role

8. in ION, click Verify to confirm 

7. Click Save

8. From the AWS 'IAM Management Console', select Roles

9. Select the platform 'Read Only Role' (this is the role created during the linking setup process)

10. Use the Add permission to attach the S3 policy to the platform ARN role

(1) Use the Add permission feature to locate the policy created

(2) Example of the S3 bucket policy

(3) Example of the platform Role ARN

The next time the platform runs the import job, it copies the fully processed, detailed bill to the bucket you specified. If you are exporting AWS data, the file will have the same format and file name as the detailed bills from AWS.  If you are exporting Azure data to an S3 bucket, it will be similar to the Microsoft native recon file. 

Important!  Once the billing cycle closes, you cannot make any adjustments to the billing reports, including Pricebooks, Support Plans, custom Global Discounts/Uplifts or customer Credits.

To submit a support request, in StreamOne Ion, click the "?" icon in the upper right menu bar or click the Support button in the menu. Alternatively, you can click Submit a ticket in the Knowledge Base. Fill out all mandatory fields, or read How to Use StreamOne Freshdesk to Submit and View Support Tickets for more information.