#amazon iam

[teevity]

How-to : Step 1 - Enabling access to the Billing page

This post describes the first step needed to configure an Amazon IAM account for use with Teevity cloud costs analytics solutions.

Step 1 - Enable access to the Billing page

Step 2 - Create the IAM group

Step 3 - Create a new IAM user and add it to the group

A/ Go to the Manage Account page on the AWS console

Here is the link to this page on the AWS Portal https://console.aws.amazon.com/billing/home#/account

B/ Scroll down to the “IAM User Access to Billing Information” section

When you reach this section you simply have to

check "Activate IAM Access"

click the “Update” button

You’re done for this part.

C/ Next step : Create an IAM group with read-only rights

Here is how you can do it in two easy steps.

[teevity]

How-to : Step 3 - Create the Amazon IAM user dedicated to Teevity

This post describes the third and last step need to configure an Amazon IAM account for use with Teevity Cloud costs analytics solutions.

Step 1 - Enable access to the Billing page 

Step 2 - Create the IAM group

Step 3 - Create a new IAM user and add it to the group

A - Create the IAM user

This can be done using the IAM tab in the Amazon AWS Console.  

B - Let's call the IAM user "teevity.cloudcostanalytics"

Keep the "Generate an access key for each User" option selected. These credentials will also be needed by Teevity to analyze the way you use resources in order to provide you with cost optimizations.  

C - Save the user's AccessKey and SecretKey

They are only provided once by Amazon. So you need to store them somewhere secure. If you don't know where, may be you can have a look at solutions like KeePassX.  

D - Assign a password to this new user

The user you just created doesn't have a password.  

You can assign one using the "Manage Password".

E - Assign the user to the CloudCostMonitoringTools group  

Choose the CloudCostMonitoringTools group   

That's it. Your IAM user has been created. Just one last step and your are done !

[teevity]

How-to : Step 2 - Create a dedicated IAM group

This post describes the second step needed to configure an Amazon IAM account for use with Teevity AWS Cloud costs monitoring solution.

Step 1 - Enable access to the Billing page 

Step 2 - Create the IAM group with the appropriate rights

Step 3 - Create a new IAM user and add it to the group

A/ Create the IAM group

You can do that using the IAM tab in the Amazon AWS Console.  

B/ Give the group a name like "CloudCostMonitoringTools".

C/ Give the group the "read-only rights" needed by Teevity

The easiest way to add the required authorizations is to use the Custom Policy wizard and to copy and paste the following policy.

Call the policy something like "CloudCostMonitoringToolsPolicy"

And copy and paste into the "Policy Document field" the content of this read-only Access Policy you can find in this gist :

       https://gist.github.com/nfonrose/6038928

Take your time and feel free to review it. It is a subset of the "Read-only" Access Policy provided by AWS to which we have added the ViewBilling and UsageReports rights.

You can see here, all the elements that we have removed from the default Read-only access policy provided by AWS (because they are not needed to provide the Teevity service to you) to create our describe-only policy.

D/ And you're done with the creation of the IAM Group

E/ Now the last step : creating the IAM User and place it in the group you've just created

You can see here how to do that last step.