Cannot setup account despite being a root user with permissions

0

To setup new billing, I tried to follow the steps described at https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_billing.html#tutorial-billing-prereqs:

  1. Sign in to the AWS Management Console with your root user credentials (specifically, the email address and password that you used to create your AWS account).
  2. On the navigation bar, choose your account name, and then choose Account.
  3. Next to IAM User and Role Access to Billing Information, choose Edit.
  4. Select the Activate IAM Access check box to activate access to the Billing and Cost Management console pages.
  5. Choose Update.

Unfortunately, the step 2 is the last half-successful step. The whole page is of red messages like "Ihnen fehlt die Berechtigung zum account:GetContactInformation. Bitten Sie Ihren Administrator, die Berechtigung hinzuzufügen." (en: you don't have permission account:GetContactInformation). Correspondingly, I cannot activate "IAM Access".

Here is the policy I've attached to the root user:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ThesePermissionsWillHaveNoEffectTillEndOfMigration",
            "Effect": "Allow",
            "Action": [
                "ce:Get*",
                "ce:Describe*",
                "ce:List*",
                "account:GetAccountInformation",
                "billing:Get*",
                "payments:List*",
                "payments:Get*",
                "tax:List*",
                "tax:Get*",
                "consolidatedbilling:Get*",
                "consolidatedbilling:List*",
                "invoicing:List*",
                "invoicing:Get*",
                "cur:Get*",
                "cur:Validate*",
                "freetier:Get*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "ThisPermissionWillContinueProvidingAccessAsNormal",
            "Effect": "Allow",
            "Action": "aws-portal:ViewBilling",
            "Resource": "*"
        }
    ]
}

What I'm doing wrong?

olpa
已提問 1 年前檢視次數 433 次
2 個答案
1

You may not be logged in as the root user of your AWS account.
The root user of the AWS account will be the one for which no IAM policies need to be set.
To log in as the root user, follow the instructions in the following document.
https://docs.aws.amazon.com/signin/latest/userguide/introduction-to-root-user-sign-in-tutorial.html

profile picture
專家
已回答 1 年前
0

Shame on me! I indeed was not the account root user. The name "root" was an iam user, what confused me.

olpa
已回答 1 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南