Integrate your AWS account without data filtering

Create an unfiltered AWS cloud integration and configure your AWS account to give cost management access to your AWS Cost and Usage Reports.

Note
The service account used to upload data must be a member of a user group that has the cost management:settings:write permission. When configuring this in the Red Hat Hybrid Cloud Console, ensure that the group’s assigned role includes the cost-management application and the settings resource type with write operations enabled. This is required to access the Ingress Reports API for data uploads.

You must have a Red Hat account with Cloud Administrator permissions.

Note
  • If you want to create a filtered AWS integration, do not complete the following steps. Instead, go to Integrate your AWS account with data filtering for privacy.
  • AWS is a third-party product and its UI and documentation can change. The instructions for configuring third-party integrations are correct at the time of publishing. For the most up-to-date information, see the AWS Documentation.

You must have a Red Hat account with Cloud Administrator permissions to complete the integration.

Initiate the AWS integration process
Copy link

Add an AWS integration to enable cost management to process your AWS Cost and Usage Reports and provide visibility into your cloud spending patterns.

Before you begin
Copy link

  • You must have a Red Hat Hybrid Cloud Console service account.
  • To add data integrations to cost management, you must have a Red Hat account with Cloud Administrator permissions.

Procedure
Copy link

  1. From Red Hat Hybrid Cloud Console, click SettingsSettings icon > Integrations.
  2. On the Settings page, click Create Integration > Cloud to enter the Add a cloud integration wizard.
  3. On the Select cloud provider step, select Amazon Web Services. Click Next.
  4. Enter a name for the integration and click Next.
  5. On the Select configuration step, select Manual configuration. Do not select the recommended configuration mode when you configure cost management integrations. The recommendation is for other workflows.
  6. In the Select application step, select Cost management. Click Next.

Configure AWS storage for cost data exports
Copy link

Create a data export and configure an Amazon S3 bucket with permissions enabled to store your AWS billing data for cost management analysis.

Procedure
Copy link

  1. Log in to your AWS account.
  2. In the AWS S3 console, create a new S3 bucket or use an existing bucket. If you are configuring a new S3 bucket, accept the default settings.
  3. In the cost management Add an integration wizard, enter the name of your S3 bucket and select the region that it was created in. Click Next.
  4. In the AWS Billing Console, create a data export to deliver to your S3 bucket. Enter the following values and accept the defaults for any other values:
    • Export type: Legacy CUR export
    • Report name: koku
    • Include: resource IDs
    • Time unit: Hourly
    • Enable report data integration for: Amazon Redshift and Amazon QuickSight. Disable report data integration for Amazon Athena.
    • Compression type: GZIP
    • S3 bucket: <the S3 bucket that you configured previously>
    • Report path prefix: cost
  5. In the Add a cloud integration wizard, on the Create cost and usage report step, click Next.
    Note

    For more details on configuration, see the AWS Billing and Cost Management documentation.

Import tags to organize cost data
Copy link

Activate your tags in AWS and then give cost management permissions to import them automatically. Tags can help you organize your AWS resources in cost management.

About this task
Copy link

For more information about tagging, see Add tags to an AWS resource.

Procedure
Copy link

  1. In the AWS Billing console, click Cost Allocation Tags.
  2. Select the tags that you want to use in cost management. Click Activate.
    • If your organization is converting systems from CentOS 7 to RHEL and using hourly billing, activate the com_redhat_rhel tag for your systems.

Grant secure access to AWS Cost and Usage Reports
Copy link

Create an IAM policy and role in AWS to grant cost management secure, read-only access to your AWS Cost and Usage Reports for billing analysis.

Procedure
Copy link

  1. In the cost management Add a cloud integration wizard, on the Tags, aliases, and organizational units step, select any additional data points that you want to include, then click Next:
    • Select Include AWS account aliases to display an AWS account alias rather than an account number. In the next step of the wizard, this selection populates iam:ListAccountAliases in your IAM JSON policy.
    • Select Include AWS organization units if you are using consolidated billing rather than the account ID. In the next step of the wizard, this selection populates organization:List* and organizations:Describe* in your IAM JSON policy.
  2. Copy the IAM JSON policy that is generated based on your selections.
  3. In the AWS Identity and Access Management console, create a new IAM policy:
    1. Select the JSON tab and enter the IAM JSON policy that you copied from the Red Hat Hybrid Cloud Console Add a cloud integration wizard.

      Example IAM JSON policy 

      {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetObject"
            ],
            "Resource": [
                "arn:aws:s3:::<your_bucket_name>",
                "arn:aws:s3:::<your_bucket_name>/*"
            ]
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "cur:DescribeReportDefinitions",
            ],
            "Resource": "*"
        }
    ]
}
    2. Enter a name and create your policy.
  4. Create a new IAM role:
    1. Select Another AWS account as the type of trusted entity.
    2. Enter 589173575009 for the Account ID to give Red Hat Hybrid Cloud Console read access to the AWS account’s cost data.
  5. In the cost management Add a cloud integration wizard, click Next, then copy your External ID from the Create IAM role step.
  6. In the AWS Identity and Access Management console, complete the IAM role configuration:
    1. Enter your External ID.
    2. Attach the IAM policy that you configured.
    3. Enter a name and description to finish creating your role.
  7. In Roles, open the summary screen for the role that you created, then copy the Role ARN (starts with arn:aws:).
  8. In the cost management Add a cloud integration wizard, click Next, enter your Role ARN, then click Next again.
  9. Review the details of your cloud integration and click Add.

Results
Copy link

  • Verify that Cost management can access Cost and Usage data from your AWS account and linked AWS accounts. Note

    The data can take a few days to populate before it shows on the cost management dashboard.