aws成本和使用率报告引发s3权限错误

Question

我试图通过JavaSDK生成AWS成本和使用报告。下面是我相同的代码块。

        credentials = new ProfileCredentialsProvider("default").getCredentials();
   AWSCostAndUsageReportClientBuilder reportBuilder = AWSCostAndUsageReportClientBuilder.standard();

   AWSCostAndUsageReportClient costAndUsageReport =  (AWSCostAndUsageReportClient) reportBuilder
           .withCredentials(new AWSStaticCredentialsProvider(credentials))
           .withRegion("us-east-1")
           .build();

   ReportDefinition reptDefinition = new ReportDefinition();

   reptDefinition.setReportName("ChandraReport123");
   reptDefinition.setTimeUnit("DAILY");
   reptDefinition.setCompression("ZIP");
   ArrayList addidtionSchemaElements = new ArrayList();
   addidtionSchemaElements.add("RESOURCES");
   reptDefinition.setAdditionalSchemaElements(addidtionSchemaElements);
   reptDefinition.setS3Bucket("etho-onnu22");
   reptDefinition.setS3Prefix("someprefix");
   reptDefinition.setS3Region("us-east-1");
   reptDefinition.setFormat("textORcsv");
   request.setReportDefinition(reptDefinition);

   PutReportDefinitionResult reportResult = costAndUsageReport.putReportDefinition(request);

我在执行代码时遇到以下异常-

线程“main”com.amazonaws.services.costandusagereport.model.ValidationException中出现异常：无法验证客户存储桶权限。accountId=xxxxxxx 72184，bucket名称：etho-onnu22，bucket区域：us-east-1（服务：AWSCostAndUsageReport；状态代码：400；错误代码：ValidationException；请求ID:xxxxxxx）位于com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleErrorResponse（AmazonHttpClient.java:1630）在com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeOneRequest（AmazonHttpClient.java:1302）在com.amazonaws.http.AmazonHttpClient$RequestExecutor.executehelp（AmazonHttpClient.java:1056）在com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute（AmazonHttpClient.java:743）上在com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer（AmazonHttpClient.java:717）在com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute（AmazonHttpClient.java:699）在com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$500（AmazonHttpClient.java:667）在com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute（AmazonHttpClient.java:649）在com.amazonaws.http.AmazonHttpClient.execute（AmazonHttpClient.java:513）上

可以通过s3 api将对象上传到同一个s3文件夹。任何帮助或指针都非常感谢。谢啦

Answer 1

AWS帐户386209384616（这是一个静态常量，AWS总是使用该帐户号来传递这些报告）必须具有通过存储桶策略写入存储桶的权限。

请参阅AWS计费和成本管理用户指南（2.0版）中的入门步骤2。其中提供了一个桶策略示例。您应该将该策略中的桶名称更改为您的桶，但不要更改帐户号码。它总是386209384616。