Manually integrate your AWS account

Create S3 bucket for Cost and Usage reports

Create an S3 bucket to store AWS Cost and Usage Reports (CUR). We recommend using the us-east-2 region.

1. Navigate to S3 service and click Create bucket.

2. Enter a unique bucket name (for example, <your-company-name>-billing).

3. Configure bucket settings:

   • Enable versioning
   • Disable public access (recommended)
   • Enable default encryption (recommended)

4. Tags (Optional): Add any tags if needed for your organization's resource management and click Create bucket.

   重要

   Remember the bucket name for the following steps.

Configure AWS Cost and Usage Reports

Create a Cost and Usage Report to be delivered to your S3 bucket:

1. Navigate to Billing Dashboard > Cost & Usage Analysis > Data Exports, then click Create.

2. Configure report settings:

   Setting	Value	Description
   Export Type	Standard Data Export	Detailed usage and cost information for billing and cost analysis.
   Export Name	Name	Name for the CUR report (e.g., <company-name>-billing-cci).
   Data Table	CUR 2.0	Supports the latest FOCUS format table structure.
   Include Resource IDs	ON	Enables detailed tracking of costs by individual AWS resources.
   Split Cost Allocation Data	OFF	Simplifies data structure. Leave off unless detailed cost allocation splits are required.
   Time granularity	Hourly	Required for detailed cost and usage analysis.
   Compression type	Parquet	Columnar storage format that enhances query performance and reduces storage space.
   File Versioning	Create New Report Version	Creates a new version with each update, retaining historical reports for auditing.
   Data Refresh Settings	AUTOMATIC	Keeps CUR data up-to-date automatically.
   Data Export Setting S3 Bucket	Select the bucket you created in Create S3 bucket for Cost and Usage reports	CUR files are saved in the S3 bucket. Agree to overwrite the policy.
   S3 path prefix	cost-and-usage-reports	Organizes Cost and Usage Reports within the S3 bucket.

3. Click Next and then Create report.

   重要

   Remember the export name for CCI integration. Ensure the S3 path prefix is cost-and-usage-reports. First report delivers within 24 hours; subsequent reports deliver periodically.

Create IAM policy for CCI access

Create an Identity and Access Management (IAM) policy that grants CCI permissions to access your CUR data:

1. Navigate to IAM service > Policies and click Create policy.

2. Switch to the JSON editor and paste the following policy:

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Action": ["s3:Get*", "s3:List*"],
         "Effect": "Allow",
         "Resource": [
           "arn:aws:s3:::<bucket-name>/*",
           "arn:aws:s3:::<bucket-name>"
         ],
         "Sid": "AccessMasterPayerBillingBucket"
       },
       {
         "Effect": "Allow",
         "Action": [
           "pricing:DescribeServices",
           "pricing:GetAttributeValues",
           "pricing:GetProducts",
           "pricing:GetPriceListFileUrl",
           "pricing:ListPriceLists"
         ],
         "Resource": ["*"]
       }
     ]
   }

   コピー

   重要

   Replace bucket-name with your S3 bucket name from Create S3 bucket for Cost and Usage reports.

3. Click Next.

4. Name the policy CCI-Access-Policy (or your preferred name), add a description, and click Create policy.

Create IAM role for CCI to assume

Create an IAM role that CCI will assume to access your CUR data:

1. Navigate to IAM service > Roles and click Create role.

2. Select Custom Trust Policy in the trusted entity type section and paste the following role definition:

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Effect": "Allow",
         "Principal": {
           "AWS": "arn:aws:iam::207192125115:user/cci_global_user"
         },
         "Action": "sts:AssumeRole",
         "Condition": {
           "StringEquals": {
             "sts:ExternalId": "<externalID>"
           }
         }
       }
     ]
   }

   コピー

   Note

   The externalId is generated when you start the CCI integration.

3. Click Next.

4. Attach the policy created in Create IAM policy for CCI access and click Next.

5. Name the role CCI-Access-Role (or your preferred name), add a description (optional), and click Create role.

6. Note the Role ARN (Amazon Resource Name) from the role summary page.

   重要

   You'll need the Role ARN during the CCI integration.

Manually integrate your AWS account

1. Navigate to one.newrelic.com > Integrations & Agents > Cloud Cost Intelligence - AWS.
2. Select Manually integrate your AWS account and click Continue.

Provide connection details

Enter the required details:

• Connection name: Default name provided. Edit for custom name.
• Cross-account IAM role ARN: Enter the IAM role ARN (Amazon Resource Name) to allow Cloud Cost Intelligence to access your S3 bucket (format: arn:aws:iam::<account-id>:role/<role-name>).
• External ID: Copy the external ID and add it to your IAM role trust policy in AWS.
• Data export name: Enter the name of the data export file. For report cci-ingestion-test, the path is cost-and-usage-reports/cci-ingestion-test/data.
• S3 bucket name: Enter the exact bucket name. Use us-east-2 region for optimal performance.

Configure trust policy

Add the New Relic global user (arn:aws:iam::207192125115:user/cci_global_user) to your IAM role trust policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::207192125115:user/cci_global_user"
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "StringEquals": {
          "sts:ExternalId": "<externalID>"
        }
      }
    }
  ]
}

Test connection

Click Test connection to verify the connection to your AWS environment.