S3 RO credentials with Amazon Web Services Billing Connector is giving a "Failed to authenticate"?

We are attempting to use the pre-built Amazon Web Services Billing Connector to connect to the S3 bucket containing our cost and usage reports. 

 

The access key/secret key credentials have read-only and list permissions to the bucket:

 

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ListObjectsInBucket",
            "Effect": "Allow",
            "Action": [
                 "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::<bucket>"
            ]
        },
    {
        "Sid": "GetObject",
        "Effect": "Allow",
        "Action": "s3:GetObject",
        "Resource": [
            "arn:aws:s3:::<bucket>/*"
            ]
        }
    ]
}

 

The pre-built Amazon S3 connector successfully imports the data from the bucket using the same credentials.  The pre-build Amazon Web Services Billing Connector fails with "Failed to authenticate.  Verify the credentials and try again. Domo is ready, but the credentials you entered are invalid. Verify your account credentials and try again."

 

What additional permissions or what other settings are needed by this connector?

 

 

Comments

  • you need this too:

     

    ```

    {
    "Action": [
    "s3:ListAllMyBuckets"
    ],
    "Resource": "*",
    "Effect": "Allow"
    }

    ```