This module automates creation of the GCP resources required to deploy the Billing Dashboard. Billing Dashboard is a Looker Studio report, which uses Billing Export of the Standard Usage Cost into a BigQuery dataset, and offers drill down and slice and dice capabilities to analyze GCP spend using charts, tables and filters.

This terraform module supports creating:

1. BigQuery View for the Standard Usage Cost export BigQuery table.
2. If the Looker Studio Service Agent name is provided, then this module will create the following components:
   • GCP Service Account to be impersonated by the Looker Studio Service Agent
   • roles/iam.serviceAccountTokenCreator, roles/bigquery.jobUser and roles/bigquery.dataViewer roles binding for the GCP service account

Due to the Looker Studio API limitations, the output of this script will generate a Looker Studio Linking API link. You need to click the link from terraform output to accept and save the report.

1. To deploy this blueprint you must have an active billing account and billing permissions.
2. Verify or enable GCP Billing Exports - standard or detailed usage costs export (if enabling for first time, await export tables to be created before proceeding to next step)
3. If you plan to share the report in your organization and use a Service Account instead of your own credentials to access the BigQuery View, copy the Service Agent name from the Looker Studio Service Agent page and pass it to the script via the looker-studio-service-agent-name parameter.

Basic usage of this module is as follows:

module "billing_dashboard" {
  source  = "terraform-google-modules/billing-dashboard/google"
  version = "~> 0.1"

  project_id                        = "<PROJECT ID>"
  bq-billing-export-table-id        = "<BILLING EXPORT TABLE ID>"
  bq-dashboard-dataset-name         = "<BIGQUERY DATASET>"
  looker-studio-service-agent-name  = "<LOOKER STUDIO SERVICE AGENT>"
}

Functional examples are included in the examples directory.

No modules.

In order to execute this module you must have a Service Account with the following roles on the project:

• roles/bigquery.dataEditor
• roles/iam.serviceAccountAdmin
• roles/iam.projectIamAdmin

The Project Factory module and the IAM module may be used in combination to provision a service account with the necessary roles applied.

Org policies that could block the deployment of this solution

• constraints/iam.disableServiceAccountCreation

A project with the following APIs enabled must be used to host the resources of this module:

• BigQuery API bigquery.googleapis.com
• Identity and Access Management (IAM) API iam.googleapis.com

The Project Factory module can be used to provision a project with the necessary APIs enabled.

The following dependencies must be available:

• Terraform v0.13
• Terraform Provider for GCP plugin v3.0

Refer to the contribution guidelines for information on contributing to this module.

Please see our security disclosure process.