Connect your GCP account

This article describes the steps required to connect your GCP (Google Cloud Platform) account to Anodot Cost.

1. Create a Billing report (as described here: https://cloud.google.com/billing/docs/how-to/export-data-bigquery-setup). Note that the Billing table includes the following:
   
   
   • gcp_billing_export_v1_<BILLING_ACCOUNT_ID>
     OR
   • If the resource table was enabled: gcp_billing_export_resource_v1_<BILLING_ACCOUNT_ID>
   • Take note of the billing table name, we will need this at a later stage during the account connection process.
     
     
2. Enable the Recommender API (as described here: https://cloud.google.com/recommender/docs/enabling#console)
3. Create a Role and Key, as per the following steps:
   1. Create a Role with the following permissions:
      • Specific permission bigquery.jobs.create permission
      • Compute Viewer
      • Monitoring Viewer
      • Compute Recommender Viewer
      • Storage Object Viewer
   2. Click CREATE ROLE.
      
   3. Fill in the Title and ID fields and then click ADD PERMISSIONS.
   4. Add permissions according to the list above. Note that you should go through all of the pages and add all permissions.
      
      
   5. Click CREATE to create the role, as show below.
      
      
4. Click Create Service Account to create a service account and attach the created role to it.
   
   
   
   
5. For the new service account, click the More options icon and select Create key.
   
   
   
   
6. Add the Big Query Data Viewer to the dataset, as described in the following steps:
   
   
   1. Navigate to the BigQuery service and find the dataset you created in the billing export (step 1), and open it: 
      
      
      
      
   2. Click SHARE DATASET. 
      
      
      
      
   3. In the Dataset Permissions tab, under members, search for the service account you created in the previous step: 
      
      
      
      
   4. Select the BigQuery Data Viewer role, click Add, and then Done.
      
      
      
      
7. Navigate on the Anodot Cost platform to the Cloud Accounts tab under the Account menu (accessed from your profile avatar, in the top right corner):
   
   
   1. Click the Google Cloud icon to add a new GCP account:
      
      
      
      
   2. Add the parameters you defined in the steps above, choose the service account key, and click Save.
      
      
      
      
8. (Optional) Connect an additional project. Note that connecting an additional project enables Anodot Cost to analyze multiple projects in one single authorized service account.
   
   
   1. Navigate to IAM & Admin > Service accounts in the project you created the service account in initially and make a note of the email address, as it will be needed later on.
      
      
      
      
   2. Go to the destination project, i.e. the one that you want to add in the service account, and navigate to IAM & Admin > IAM. Then click ADD.
      
      
   3. Set the email you noted above and grant the the required roles (i.e. Compute Viewer, Monitoring Viewer, Storage Object Viewer, Compute Recommender Viewer, etc.). You can use the Currently used quick filter to find the required roles.
      
      
      
      
   4. Click Save to save the changes.