Before onboarding an AWS account into CoreStack for Governance, the following permissions must be provided in your AWS account.
EC2 – Full Access
ECS – Full Access
CloudTrail – Full Access
To generate Cost Usage Report in CoreStack for your AWS account, the following permissions must be provided in the AWS account.
- Root User should be provided.
- Reports should have enabled (by navigating to Services > Billing > Enable Reports ) and Time Unit option should be set as Hourly.
- Cost allocation tags should be Active.
- S3 bucket name should be provided.
To activate cost allocations tags for CoreStack, perform the following steps in your AWS account.
- Select Cost Allocation Tags.
- Click Activate button.
To enable Reports for CoreStack, perform the following steps in your AWS account.
- Select Reports.
- Click Create report button.
- Provide a name for the report in the Step 1: Select Content screen.
- Ensure to select Hourly option in the Time Unit field.
- Enable Resource IDs checkbox in the Include field.
- Ensure to select the checkbox in the Data Refresh Settings field.
- Click Next button.
- Provide necessary S3 bucket name in the Step 2: Select Delivery Options screen.
- Provide necessary prefix in the Report Path Prefix field.
- Ensure to select the ZIP option in the Compression dropdown list.
- Click Next button.
- Review the report details in the Step 3: Review screen.
- Click Review and Complete button.
- S3 Bucket for Cost and Usage Reports (CUR) Reports: CoreStack requires the name of the S3 Bucket in which the CUR are placed. It is required for fetching the usage information from your AWS Account and provide Cost Analytics and Governance. It is required only for Master (Payer) Accounts.
- CloudTrail in all Regions: While onboarding the account, CoreStack automatically creates cloud trails for all AWS regions that is required to track even any inadvertent usage in all regions. CoreStack does not overwrite or reuse any existing trails. It will create a new trail with webhook configured to push the activities to CoreStack. These trails will be automatically removed if you decide to remove the account from CoreStack later.
- S3 Bucket in all Regions: As part of the CloudTrail configuration, S3 buckets are also created in all AWS regions for collecting the logs. These buckets will also be automatically removed if you decide to remove the account from CoreStack later.
Updated about 1 month ago