TD SYNNEX StreamOne Ion

Navigation Menu: Customer > Cloud Billing > Cloud Accounts

TIP: For best results, use Google Chrome when working in the platform portals and the AWS Management Console.

Overview

This article explains in detail how to add (or link) an existing AWS account to a customer profile in the platform. Linked accounts may also be referred to as "member" accounts.  

You will learn how to...

• Add account(s) in the platform, 
• Configure the read-role (Role ARN) credentials (used by the platform for advanced reporting functionality). 

You need to obtain the following information from your customer:

1. 12-digit AWS Account number (Required)
2. (Optional) The Root email address 
3. AWS Support Type:

• Business Level Support – BLS
• Developer
• Basic/No Support (Free)

Linking existing AWS accounts requires the Root AWS account owner or a user with IAM Full Administrator access.

There are three separate steps to adding an existing AWS account. They include:

1. Adding the AWS account information in ION
   
2. Accepting the invitation to link (completed by the AWS account owner or admin) from the AWS account console
3. Creating a cross-account read only role to support advanced reporting features in ION, in the AWS account console

Definitions:

Root User: When you first create an Amazon Web Services (AWS) account, you begin with a single sign-in identity that has complete access to all AWS services and resources in the account. This identity is called the AWS account Root User and is accessed by signing in with the email address and password used to create the account.   When you create a new account, you are required to set up a payment method.  Typically, it is a credit card.

Standalone Account: An AWS standalone account means a single AWS account that is not attached (linked) as a member account under a Management Account.  

Management Account: Also referred to as the payer or master account where the AWS Organization features for consolidated billing are configured and controlled. The management account holds the payment method for all member (or linked) accounts.  The StreamOne Ion Ops team sends linking requests via the AWS Organization feature within our Management Account via the 12-digit AWS account number. AWS sends an alert email to the Root account owner.  

AWS Organization: AWS Organizations is an account management service that enables consolidation of multiple AWS accounts into an organization for central management purposes.  AWS Organizations has two available features sets: (1) Consolidated Billing Features, and (2) All Features which include a subset of advanced account management for central service control policies. TD SYNNEX operates our shared payers under the Consolidated billing feature only. Dedicated p

ayers can leverage the 'All Features."

The table below represents a list of activities between the cloud platform and the AWS console:

Important!  
This article assumes you have read the Discovery Questions for Customers with Existing AWS Accounts to address any possible account link issues prior to adding the account in the platform.  To ensure a positive customer experience, do not link AWS accounts prior to reviewing the pre-qualifying questions with your customers.  

For accounts under a shared consolidated management account, be sure to read, understand and communicate with your customers, The Explanation of AWS Shared Consolidation and Blended Rates. 

When AWS accounts join or a new accounts are created, the AWS billing console will no longer be the source of Truth for billing information.  We strongly encourage our AWS resellers to provide your customers with access to your Customer Portal, to view accurate customer pricing. Please read the Knowledge Base article, How Do I Find the End-Customer Portal URL?

Part 1 - Add existing AWS account (Reseller's actions)

To add an existing AWS account, follow these steps:

3. Click Cloud Billing

4. Click Cloud Provider - If the AWS Pricebook is listed, go to the next step. If the AWS Pricebook is blank, click ADD to select the AWS Pricebook. Amazon Web Services Master Pricebook = MSRP for Customer Cost. 

5. Click Cloud Accounts

6. Click Add. The Cloud Account dialog box displays. Complete the fields below:

(1) Select Amazon Web Services from the drop-down list

(2) Pick New Account and enter the 12-digit AWS account number (required)

(3) Optional - add the root email address for the AWS account.  If you do not know the email address, you can skip this step

(4) Setting should remain as Resale

(5) (optional) This option is used to set custom pricing by cloud account.  You can select the default pricebook, pick a custom pricebook, or leave blank (which assumes the default pricebook) The default pricebook is set under the Cloud Provider menu option

(6) Click Save

(7) Once saved, the Create IAM Role window displays. To continue, follow the instructions on the screen. To complete this step at later time, click Later.

Part 2 - Create IAM Role (ReadOnlyAccess)

Tip:  We recommend you use two browsers to toggle between the AWS Console and the platform.  When you complete the setup of the read only access role in the AWS console, you paste the role ARN name in a specific field in the platform.

The Create IAM Role instruction window displays at the time you add the account.  The instructions in this window are completed in the AWS console.  

(1) If you have access to the AWS account, please log into AWS console IAM screen to complete the next steps.  

(2) If you do not have access, click Later

When you return to add the role (after the account was initially added), you can see the instructions by selecting the account from the list and double-clicking to open the Cloud Account dialog box. Scroll to the bottom to view the options. Click ROLE ARN

Note: Root access is not a requirement for a user to create a read-only role but depends on the IAM user's access rights.