AWS Cost and Usage Reports can't verify the bucket
In my account, I can't generate the reports using as delivery options a bucket S3. Even with proper permissions, the delivery options cannot verify. I think this is a bug. I have others account in AWS, and it works well. How could I report this problem? This account that has a problem is my personal account as a sandbox.
This is the message
When I click on Verify its happen. I configured the right permissions for this bucket, and no success yet.
{
"Version": "2008-10-17",
"Id": "Policy1335892530063",
"Statement": [
{
"Sid": "Stmt1335892150622",
"Effect": "Allow",
"Principal": {
"Service": "billingreports.amazonaws.com"
},
"Action": [
"s3:GetBucketAcl",
"s3:GetBucketPolicy"
],
"Resource": "arn:aws:s3:::new-report-test-oct18",
"Condition": {
"StringEquals": {
"aws:SourceArn": "arn:aws:cur:us-east-1:7823XXX4529:definition/*",
"aws:SourceAccount": "XXXXXXXXXX"
}
}
},
{
"Sid": "Stmt1335892526596",
"Effect": "Allow",
"Principal": {
"Service": "billingreports.amazonaws.com"
},
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::new-report-test-oct18/*",
"Condition": {
"StringEquals": {
"aws:SourceArn": "arn:aws:cur:us-east-1:7823XXX4529:definition/*",
"aws:SourceAccount": "XXXXXXXXX"
}
}
}
]
}
Edit: Removed Account # — Sage A.
- 최신
- 최다 투표
- 가장 많은 댓글
Using the web page to create the bucket automatically used to work fine until a few days ago.
I just tried again, and no success yet. :-(
Yes. It's not working. It stopped working a few days ago.
Hi There
Thanks for the screenshot. In your bucket policy, can you confirm that the Account Number for both SourceArn and SourceAccount is correct? The bucket policy needs to reference the account where you are setting up Cost and Usage Reports.
Also, are you using the Cost and Usage Reports console to create the bucket, or is this an existing bucket?
I tried to create a new bucket with another policy (softer) for the test also, had no success yet. { "Version": "2008-10-17", "Id": "Policy1335892530063", "Statement": [ { "Sid": "Stmt1335892150622", "Effect": "Allow", "Principal": { "Service": "billingreports.amazonaws.com" }, "Action": "s3:", "Resource": "arn:aws:s3:::openbucketforall" }, { "Sid": "Stmt1335892526596", "Effect": "Allow", "Principal": { "Service": "billingreports.amazonaws.com" }, "Action": "s3:", "Resource": "arn:aws:s3:::openbucketforall/*" } ] }
Hi Matt. Both SourceArn and SourceAccount are correct in the bucket. I tried using Cost and Usage Reports with a new and existing bucket. Both ways, when I configure the bucket, it shows the policy. Case a new bucket, the Cost and Usage Reports create a new bucket and insert this policy there. Case of an existing bucket, I copy the policy and paste it to the bucket policy field on S3. I tried many ways, even using Terraform. I create a terraform for creating these reports for a project. I can't create these reports in this specific account (XXXXXXXXXX), but I can create them using the other accounts.
Edit: Removed Account # — Sage A.
Hi There
Can you provide an exact error message or screenshot of your issue?
@Matt-B, I updated this question for include screenshots.
I am having the same issue. It started a few days ago.