could not validate role and external ID about trackit2-home HOT 5 OPEN

Hello,

I see an Access Denied, it could be due to several reasons:

• Are you first able to get your own identity?
  You can test it by typing aws sts get-caller-identity.

• Then, are you able to assume the role you just created for TrackIt?
  You can test it by typing aws sts assume-role --role-arn "role_arn" --external-id "external" --role-session-name "role_name"

Thanks!

from trackit2-home.

It worked only when I gave admin access the the default CLI user. Is there any way to get it work with out providing Admin access ?

Thank You

from trackit2-home.

I was able to login in to the portal but cannot see anything on AWS reports page. I see this error instead. Can you please help me here

Also how to see individual account details, we have a masterpay account and we use a consolidated billing sent to S3 which is on Masterapay account.

No reports available (Reports bucket not configured)
Error while getting data (Data not available yet. Please check again in few hours.)

Thank You

from trackit2-home.

Hello,

You will be able to see individual account details with TrackIt.
I strongly recommend that you use our free SaaS solution. You can find it here.

However, you need to create a report if you don't already have one: Usage Reports.

• Click on Create report
• Type for example AllHourlyToS3 as report name
• Check Include resource IDs
• Check Automatically refresh your Cost & Usage Report when charges are detected for previous months with closed bills.
• Configure an S3 Bucket to host all reports, example [company]-billing
• Click Next
• Click Review and Complete

You should create this report on your masterpay account.

We don't need admin access, you can find our minimal policy here. Use this policy for your account you want to monitor.
You also need another account to run TrackIt server (not needed in SaaS version). This account only needs sts:AssumeRole permission. TrackIt use your default account in ~/.aws/credentials.

Thanks.

from trackit2-home.

Hello, thanks for your help. I was able to import the data successfully but one thing what I have noticed was the bill's are not matching in trackit portal with AWS. Is there any way to filter and see just the account usage resources so I we can drill it down to see what are we missing ?

Thank You

from trackit2-home.