Chapter 1. Creating your Amazon Web Services integration: Basic

Procedure

1. From Red Hat Hybrid Cloud Console, click Settings Menu > Integrations.
2. On the Settings page, in the Cloud tab, click Add integration.
3. On the Select integration type step, in the Add a cloud integration wizard, select Amazon Web Services. Click Next.
4. Enter a name for the integration and click Next.

5. On the Select configuration step, select how you want to connect to your AWS integration.

   • Select Account authorization to provide your AWS account credentials and let Red Hat configure and manage your integration for you. Click Next.
   • Select Manual configuration to customize your integration. If you are using cost management to meter your RHEL subscription, you must select Manual Configuration.
6. In the Select application step, select Cost management. Click Next.
7. If you selected the account authorization method, on the Review details step, review the details and click Add. If you selected the manual configuration method, continue to the next step in the wizard and configure your S3 bucket.

1. In the AWS S3 console, create a new S3 bucket or use an existing bucket. If you are configuring a new S3 bucket, accept the default settings.
2. On the Create storage step, in the Add a cloud source wizard, paste the name of your S3 bucket and select the region that it was created in. Click Next.

3. In the AWS Billing console, create a data export that will be delivered to your S3 bucket. Enter the following values and accept the defaults for any other values:

   • Export type: Legacy CUR export
   • Report name: koku
   • Include: resource IDs
   • Time unit: Hourly
   • Enable report data integration for: Amazon Redshift, Amazon QuickSight. Disable report data integration for Amazon Athena
   • Compression type: GZIP
   • S3 bucket: <the S3 bucket that you configured before>

   • Report path prefix: cost

     Note

     For more details on configuration, see the AWS Billing and Cost Management documentation.

4. In the Add a cloud integration wizard, on the Create cost and usage report step, click Next.

Procedure

1. In the AWS Billing console:

   1. Open the Cost Allocation Tags section.
   2. Select the tags you want to use in the cost management application, and click Activate.

2. If your organization is converting systems from CentOS 7 to RHEL and using hourly billing, activate the com_redhat_rhel tag for your systems in the Cost Allocation Tags section of the AWS console.

   1. After tagging the instances of RHEL you want to meter in AWS, select Include RHEL usage.
3. In the Red Hat Hybrid Cloud Console Integrations wizard, select Include RHEL usage.

In cost management:

1. In the Add a cloud integration wizard, select the additional data points you want to be included.
2. Click Next.
3. Copy the JSON output that is generated based on your selections.

In the AWS Identity and Access Management console:

3. From the AWS Identity and Access Management (IAM) console, create a new IAM policy for the S3 bucket that you configured before.

   1. Select the JSON tab and paste the JSON policy which you copied from the Red Hat Hybrid Cloud Console Add a cloud integration wizard:

      {
        "Version": "2012-10-17",
        "Statement": [
          {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
              "s3:Get*",
              "s3:List*"
            ],
              "Resource": [
              "arn:aws:s3:::<your_bucket_name>", 1
              "arn:aws:s3:::<your_bucket_name>/*"
            ]
          },
      
          {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
              "s3:ListBucket",
              "cur:DescribeReportDefinitions"
            ],
            "Resource": "*"
          }
        ]
      }

   2. Enter a name for the policy and create the policy. Do not close the AWS IAM console. You will use it in the following steps.

In cost management:

4. In the Red Hat Hybrid Cloud Console Add a cloud integration wizard, click Next.

In the AWS Identity and Access Management console:

5. In the AWS IAM console, create a new IAM role:

   1. Select Another AWS account as the type of trusted entity.
   2. Enter 589173575009 as the Account ID to give Red Hat Hybrid Cloud Console read access to the AWS account cost data.

In cost management:

1. Copy your external ID from the Create IAM role step in the wizard.

In the AWS Identity and Access Management console:

1. Enter your external ID in the External ID field.
2. Attach the IAM policy you just configured.
3. Enter a role name and description.

In cost management:

6. In the Red Hat Hybrid Cloud Console Add a cloud integration wizard, click Next.

In the AWS Identity and Access Management console:

7. In the AWS IAM console, in the Roles section, open the summary screen for the role you just created.

   1. Copy the Role ARN, which is a string beginning with arn:aws:.

In cost management:

8. In the Red Hat Hybrid Cloud Console Add a cloud integration wizard, paste your Role ARN and click Next.
9. Review the details of your cloud integration and click Add.