TD SYNNEX StreamOne Ion

Navigation Menu: Customers

TIP: For best results, use Google Chrome when working in the platform portals and the AWS Management Console.

Overview

This article explains in detail how to add (or link) an existing AWS account to a customer profile in the platform. Linked accounts may also be referred to as "member" accounts.  

You need to obtain the following information from your customer:

1. 12-digit AWS Account number (Required)
2. The Root email address (Optional)
3. AWS Support Type:

• Business Level Support (BLS)
• Developer
• Basic/No Support (Free)

Linking existing AWS accounts requires the Root AWS account owner or a user with IAM Full Administrator access.

Definitions:

Root User: When you first create an Amazon Web Services (AWS) account, you begin with a single sign-in identity that has complete access to all AWS services and resources in the account. This identity is called the AWS account Root User and is accessed by signing in with the email address and password used to create the account.   When you create a new account, you are required to set up a payment method.  Typically, it is a credit card.

Standalone Account: An AWS standalone account means a single AWS account that is not attached (linked) as a member account under a Management Account.  

Member Account: A standard AWS account that is part of the organization. Member accounts are not the management accounts but are part of the consolidated structure. Important: A member account must leave the current organization in order to join the TDS organization. Please open a support ticket if assistance is needed before removing your account from the current organization. 

Management Account: Also referred to as the master payer account (MPA), this is where the AWS Organization features for consolidated billing are configured and controlled. The management account holds the payment method for all member (or linked) accounts.  The StreamOne Ion Ops team sends linking requests via the AWS Organization feature within our Management Account via the 12-digit AWS account number. AWS sends an alert email to the root account owner. AWS Organizations is an account management service that enables the consolidation of multiple AWS accounts into an organization for central management purposes. Important! We cannot link management accounts in StreamOne Ion without a CTA (Consent to Assign). Please contact your Cloud Sales Rep for more information about CTAs. 

The table below represents a list of activities between the cloud platform and the AWS console:

Important!  
This article assumes you have read the Discovery Questions for Customers with Existing AWS Accounts to address any possible account link issues prior to adding the account in the platform.  To ensure a positive customer experience, do not link AWS accounts prior to reviewing the pre-qualifying questions with your customers.  

For accounts under a shared consolidated management account, be sure to read, understand and communicate with your customers, The Explanation of AWS Shared Consolidation and Blended Rates. 

When AWS accounts join or new accounts are created, the AWS billing console will no longer be the source of billing information.  We strongly encourage our AWS resellers to provide your customers with access to your Customer Portal to view accurate customer pricing. Please read the Knowledge Base article, How Do I Find the End-Customer Portal URL?

Part 1: Add existing AWS account (Reseller's actions)

To add an existing AWS account, follow these steps:

5. Click Cloud Accounts

6. Click Add. The Cloud Account dialog box displays. Complete the fields below:

(1) Select Amazon Web Services from the drop-down list

(2) Pick New Account and enter the 12-digit AWS account number (required)

(3) Optional: add the root email address for the AWS account.  If you do not know the email address, you can skip this step

(4) Setting should remain as Resale

(5) (optional) This option is used to set custom pricing by cloud account.  You can select the default pricebook, pick a custom pricebook, or leave blank (which assumes the default pricebook) The default pricebook is set under the Cloud Provider menu option

(6) Click Save

(7) Once saved, the Create IAM Role window displays. To continue, follow the instructions on the screen. To complete this step at later time, click Later.

Part 2: Create IAM Role (ReadOnlyAccess)

Tip:  We recommend you use two browsers to toggle between the AWS Console and the platform.  When you complete the setup of the read-only access role in the AWS console, you paste the role ARN name in a specific field in the platform.

The Create IAM Role instruction window displays at the time you add the account.  The instructions in this window are completed in the AWS console.  

(1) If you have access to the AWS account, please log into AWS console IAM screen to complete the next steps.  

(2) If you do not have access, click Later

When you return to add the role (after the account was initially added), you can see the instructions by selecting the account from the list and double-clicking to open the Cloud Account dialog box. Scroll to the bottom to view the options. Click ROLE ARN

Note: Root access is not a requirement for a user to create a read-only role; it depends on the IAM user's access rights.