Connect your GCP account

This article describes the steps required to connect your GCP (Google Cloud Platform).

  1. Create a Billing report (as described here: https://cloud.google.com/billing/docs/how-to/export-data-bigquery-setup).
    Note that the Billing table could be one of the following :

    gcp_billing_export_resource_v1_<BILLING_ACCOUNT_ID>  (preferred option with resource table enablement)  -OR-
    gcp_billing_export_v1_<BILLING_ACCOUNT_ID> (might result with missing usage info but consume less size so less expensive)

Note to use the exact naming convention for the billing table name, we will need this at a later stage during the account connection process.
 

2. Enable the Recommender API + Cloud Resource Manager API 

3. Create a Role and Key, as per the following steps:

  1. Create a Role with the following permissions:
      • Specific permission bigquery.jobs.create permission (for creating jobs to run queries)
      • Compute Viewer
      • Monitoring Viewer
      • Compute Recommender Viewer

    2. Click CREATE ROLE.
      undefined
    3. Fill in the Title and ID fields and then click ADD PERMISSIONS.
    4. Add permissions according to the list above. Note that you should go through all of the pages and add all permissions.

      ** Keep in mind that you will have to mark it per page
      undefined

       
      ** The best way to verify that you have all the permissions after adding them is to see that under the role you will have ~287 permissions




    5. Click CREATE to create the role, as shown below.

      undefined

      Click Create Service Account to create a service account and attach the created role to it.

      undefined

      For the new service account, click the More options icon and select Create key.

      undefined

  2. Add the Big Query Data Viewer to the dataset, as described in the following steps:

    1. Navigate to the BigQuery service and find the dataset you created in the billing export (step 1), and open it: 

      undefined

    2. Click SHARE DATASET. 

      undefined

    3. In the Dataset Permissions tab, under members, search for the service account you created in the previous step: 

      undefined

    4. Select the BigQuery Data Viewer role, click Add, and then Done.

      undefined

  3. Navigate on the Anodot Cost platform to the Cloud Accounts tab under the Account menu (accessed from your profile avatar, in the top right corner):

    1. Click the Google Cloud icon to add a new GCP account:

      undefined

    2. Add the parameters you defined in the steps above, choose the service account key, and click Save.

      undefined

  4. (Optional) Connect an additional project. Note that connecting an additional project enables Anodot Cost to analyze multiple projects in one single authorized service account.

    1. Navigate to IAM & Admin > Service accounts in the project you created the service account in initially and make a note of the email address, as it will be needed later on.

      undefined

    2. Go to the destination project, i.e. the one that you want to add in the service account, and navigate to IAM & Admin > IAM. Then click ADD.

      undefined
    3. Set the email you noted above and grant the the required roles (i.e. Compute Viewer, Monitoring Viewer, Compute Recommender Viewer, etc.). You can use the Currently used quick filter to find the required roles.

      undefined

    4. Click Save to save the changes.