Cannot setup account despite being a root user with permissions

0

To setup new billing, I tried to follow the steps described at https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_billing.html#tutorial-billing-prereqs:

  1. Sign in to the AWS Management Console with your root user credentials (specifically, the email address and password that you used to create your AWS account).
  2. On the navigation bar, choose your account name, and then choose Account.
  3. Next to IAM User and Role Access to Billing Information, choose Edit.
  4. Select the Activate IAM Access check box to activate access to the Billing and Cost Management console pages.
  5. Choose Update.

Unfortunately, the step 2 is the last half-successful step. The whole page is of red messages like "Ihnen fehlt die Berechtigung zum account:GetContactInformation. Bitten Sie Ihren Administrator, die Berechtigung hinzuzufügen." (en: you don't have permission account:GetContactInformation). Correspondingly, I cannot activate "IAM Access".

Here is the policy I've attached to the root user:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ThesePermissionsWillHaveNoEffectTillEndOfMigration",
            "Effect": "Allow",
            "Action": [
                "ce:Get*",
                "ce:Describe*",
                "ce:List*",
                "account:GetAccountInformation",
                "billing:Get*",
                "payments:List*",
                "payments:Get*",
                "tax:List*",
                "tax:Get*",
                "consolidatedbilling:Get*",
                "consolidatedbilling:List*",
                "invoicing:List*",
                "invoicing:Get*",
                "cur:Get*",
                "cur:Validate*",
                "freetier:Get*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "ThisPermissionWillContinueProvidingAccessAsNormal",
            "Effect": "Allow",
            "Action": "aws-portal:ViewBilling",
            "Resource": "*"
        }
    ]
}

What I'm doing wrong?

olpa
preguntada hace un año433 visualizaciones
2 Respuestas
1

You may not be logged in as the root user of your AWS account.
The root user of the AWS account will be the one for which no IAM policies need to be set.
To log in as the root user, follow the instructions in the following document.
https://docs.aws.amazon.com/signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.html

profile picture
EXPERTO
respondido hace un año
0

Shame on me! I indeed was not the account root user. The name "root" was an iam user, what confused me.

olpa
respondido hace un año

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas