Trusted Advisor dashboard permission issue with management account.

Question

Hi Team,

I'm trying to integrate Trusted advisor dashboard via this [documentation](https://wellarchitectedlabs.com/cost/200_labs/200_cloud_intelligence/trusted-advisor-dashboards/dashboards/1_prerequistes/). I'm collecting data into an account(not management account) as mentioned [here](https://wellarchitectedlabs.com/cost/300_labs/300_optimization_data_collection/) . But issue is I can't access management/payer account due to limited access in organization. Can i apply changes which needs to be done on payer account on individual account manually or any other alternate. 
![Enter image description here](/media/postImages/original/IMDSS64Rw0TG2z4w_9BWvcRg)

I'm looking to get Trusted Advisor Organizational View reports for each account into S3 and pass into data collection account by script.

Thanks!

Vikram · Answer

For the two solutions referenced in the links you shared, you need to have access to the management account of the organization. Another option, if you have Business, or Enterprise On-Ramp, or an Enterprise Support plan, you can also leverage AWS Support APIs in individual accounts to refresh and push Trusted Advisor check results to a S3 bucket, and replicate the data from all individual account buckets into a common bucket.

vtjean · Answer

You cannot do changes on the management account from the child account, unless that child account was assigned as a delegated administrator.

Since your goal is to reach S3 data, In my opinion is best to request access to the s3 bucket.

You would need from the payer account modify the s3 bucket policy to allow access 
https://repost.aws/knowledge-center/cross-account-access-s3

Another option could be cross account s3 replication: https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-walkthrough-2.html

Trusted Advisor dashboard permission issue with management account.

Relevant content