Cannot setup account despite being a root user with permissions

0

To setup new billing, I tried to follow the steps described at https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_billing.html#tutorial-billing-prereqs:

  1. Sign in to the AWS Management Console with your root user credentials (specifically, the email address and password that you used to create your AWS account).
  2. On the navigation bar, choose your account name, and then choose Account.
  3. Next to IAM User and Role Access to Billing Information, choose Edit.
  4. Select the Activate IAM Access check box to activate access to the Billing and Cost Management console pages.
  5. Choose Update.

Unfortunately, the step 2 is the last half-successful step. The whole page is of red messages like "Ihnen fehlt die Berechtigung zum account:GetContactInformation. Bitten Sie Ihren Administrator, die Berechtigung hinzuzufügen." (en: you don't have permission account:GetContactInformation). Correspondingly, I cannot activate "IAM Access".

Here is the policy I've attached to the root user:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ThesePermissionsWillHaveNoEffectTillEndOfMigration",
            "Effect": "Allow",
            "Action": [
                "ce:Get*",
                "ce:Describe*",
                "ce:List*",
                "account:GetAccountInformation",
                "billing:Get*",
                "payments:List*",
                "payments:Get*",
                "tax:List*",
                "tax:Get*",
                "consolidatedbilling:Get*",
                "consolidatedbilling:List*",
                "invoicing:List*",
                "invoicing:Get*",
                "cur:Get*",
                "cur:Validate*",
                "freetier:Get*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "ThisPermissionWillContinueProvidingAccessAsNormal",
            "Effect": "Allow",
            "Action": "aws-portal:ViewBilling",
            "Resource": "*"
        }
    ]
}

What I'm doing wrong?

olpa
asked 10 months ago404 views
2 Answers
1

You may not be logged in as the root user of your AWS account.
The root user of the AWS account will be the one for which no IAM policies need to be set.
To log in as the root user, follow the instructions in the following document.
https://docs.aws.amazon.com/signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.html

profile picture
EXPERT
answered 10 months ago
0

Shame on me! I indeed was not the account root user. The name "root" was an iam user, what confused me.

olpa
answered 10 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions