Posted On: Aug 23, 2023
We announce the retirement of the old IAM actions for Amazon Billing, Cost Management, and Account consoles. We are replacing them with fine-grained service specific actions. This launch gives customers more control over access to Billing, Cost Management, and Account services. These new permissions will also provide a single set of IAM actions that govern console and programmatic access to these services.
The fine-grained actions enable customers to provide individuals in their organization access to specific billing, cost management, account console pages that are necessary for their job. For example, with these new permissions a customer can provide a developer access to Budgets and Cost Explorer, while denying access to Bills or Tax Settings services. This allows customers to put engineers and business unit leaders in charge of cost and usage optimization and control and implement decentralized cloud cost management.
Starting today, the fine-grained actions are available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. The old IAM actions for Amazon Billing, Cost Management, and Account consoles will no longer be available after December 11, 2023.
To understand how and which policies you need to update, please visit our blog post. To know more about the fine-grained actions, please visit our Cost Management and Billing console user guides. You can also use the allow listing feature to test and enable the new fine-grained IAM permissions for Amazon Billing, Cost Management, and Account services prior to the retirement date. You can also use the Policy Migrator scripts to update the affected policies in your Organizations to include new fine grained actions.