How to update your permissions to 'managed' for activation

Overview

A step by step guide for updating the permissions attached to your Master Payer account from 'read-only' (as required for the POC) to 'managed'.

This will enable Zesty to activate Commitment Manager and begin covering your workloads with RIs.

Prerequisites

• Access to your AWS Management Console with permissions to create and attach IAM roles.
• User access for your organization in the Zesty dashboard.

Procedure

1. Log in to the AWS Management Console.

2. In a separate tab, login to the Zesty dashboard. Go to the top right-hand corner and click on your name, then select My organization from the drop down menu.

3. Select Accounts from the left-hand menu. Click on the three dots to the right of your Master Payer account (it will be marked with a blue badge). A drop-down will appear, select Update permissions. This will open a page showing the currently enabled permission set.

4. Make the following selections on the permissions page:

• Step 1: Change preset from Read-only to Managed (this will automatically select the minimum required permissions), and add the necessary permissions for any other features you want to use.
• Step 2: Select I have a CUR report already enabled and enter the S3 bucket name in the field provided. If you have not set this up yet, you can do this by following the steps outlined here.
• Step 3: Select the correct AWS region to match your account (Virginia us-east-1 is selected by default).
• Step 4: Review security content and acknowledge.
• Click Create IAM Role.

5.  A new tab will open in your AWS Management Console showing a new CloudFormation template created with the specified permissions. Check that the details are correct and scroll to the bottom of the page.

Mark the acknowledgement checkbox and then click Create Stack.

6. You will be taken to a new page in the console showing the creation of the new role in progress under Events. This will take a few seconds to complete, after which you will be able to refresh the page and see the role marked with a CREATE_COMPLETE status.

Click on the Outputs tab and copy the ARN shown.

7. Go back to your Zesty dashboard tab and copy the ARN into the ROLE ARN field, then click Connect.

8. The permissions are now set up properly for full activation of Commitment Manager.

   If you receive an error message or require any other assistance, contact support.