Create a role with necessary permissions to write AWS Partner Generated Billing statements to an S3 bucket

Products

• CloudHealth

Issue/Introduction

In order for CloudHealth to write Partner Generated Billing statements to an S3 bucket in AWS, you'll need to grant additional permissions that are not captured when you generate an IAM policy from the UI of the platform.

Resolution

For CloudHealth to write these files, you'll need to provide the following permissions to the S3 bucket:

 

{

        "Effect": "Allow",

        "Action": [

            "s3:PutObject",

            "s3:PutObjectAcl"

      ],

         "Resource":[

           "arn:aws:s3:::<insert_s3_bucket>",

           "arn:aws:s3:::<insert_s3_bucket>"/*"

     ]

}