Cost & Billing: Switch between the hub and domains
Cost & Billing policies
Billing, cost analysis, budgets, pricing and tax.
25 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review. 6 are service-linked role policies, shown with permission data only.
Loading map…
Loading map
User access (12)
- AWSAccountUsageReportAccessReader
Allows users to access the Account Usage Report page.
- AWSBillingConductorFullAccessAdmin
Use the AWSBillingConductorFullAccess managed policy to allow complete access to AWS Billing Conductor (ABC) console and APIs. This policy allows users to list, create and delete ABC resources.
- AWSBillingConductorReadOnlyAccessReader
Use the AWSBillingConductorReadOnlyAccess managed policy to allow read only access to AWS Billing Conductor (ABC) console and APIs. This policy grants permission to view and list all ABC resources. It does not include the ability to create …
- AWSBillingReadOnlyAccessReader
Allows users to view bills on the Billing Console.
- AWSBudgetsActionsWithAWSResourceControlAccessAdmin
Provides full access to AWS Budgets Actions including using Budgets Actions to control states of running AWS resources via AWS Management Console
- AWSBudgetsReadOnlyAccessReader
Provides read only access to AWS Budgets Console via the AWS Management Console.
- AWSPriceListServiceFullAccessReader
Provides full access to AWS Price List Service.
- AWSPurchaseOrdersServiceRolePolicyAdmin
Grants permissions to view and modify purchase orders on billing console
- AWSSavingsPlansReadOnlyAccessReader
Provides read only access to Savings Plans service
- CostOptimizationHubReadOnlyAccessReader
This managed policy provides read-only access to Cost Optimization Hub.
- PricingPlanManagerFullAccessAdmin
Provides full access to AWS Pricing Plan Manager
- PricingPlanManagerReadonlyAccessReader
Provides read only access to AWS Pricing Plan Manager
Operator and limited (6)
- AWSAccountSettingsManagementRoleOperator
Provides required permissions to manage an account for AWS applications.
- AWSSavingsPlansFullAccessOperator
Provides full access to Savings Plans service
- CostOptimizationHubAdminAccessOperator
This managed policy provides admin access to Cost Optimization Hub.
- FinOpsAgentAgentPolicyOperator
Provides permissions required by the AWS FinOps Agent to perform cost analysis and spot cost saving opportunity on customer AWS resources.
- FinOpsAgentOperatorPolicyOperator
Provides access to use the AWS FinOps Agent web app for an Agent.
- ReInventTicketApprovalAccessOperator
Grants an IAM role or user full access to view re:Invent pass charge details and approve billing to their AWS accounts
Service roles (1)
- AWSManagedSignUpAdminAccessOperator
Grants AWS permission to complete signup for AWS managed accounts.
Service-linked roles (6)
- AWSBCMDataExportsServiceRolePolicyReader
A service linked role to provide Billing and Cost Management Data Exports access to AWS service data for exporting the data to a target location, such as Amazon S3, on behalf of a customer.
- AWSBillingConductorRolePolicyOperator
Provides AWS Billing Conductor access to manage billing groups and related resources
- AWSBillingServiceRolePolicyReader
Allows billing service to validate access to billing view data for derived billing views
- AWSFinOpsAgentServiceRolePolicyOperator
Provides AWS FinOps Agent access to billing, cost management, usage, optimization, and resource configuration capabilities to generate cost and savings insights, and allows it to manage its own Amazon EventBridge rules for configured workfl…
- AWSMarketplacePurchaseOrdersServiceRolePolicyOperator
Enables access for AWS Marketplace services to purchase order management.
- BudgetsServiceRolePolicyReader
Allows Budgets to verify access to Billing Views shared across account boundaries.
Also relevant to Cost & Billing (7)
- AccountManagementFromVercelOperator
For use with accounts created through the Vercel Marketplace integration with AWS. Provides access to account management, notification, cost and usage analysis, and identity provider management.
- AWSAccountActivityAccessReader
Allows users to access the Account Activity page.
- AWSCostAndUsageReportAutomationPolicyOperator
Grants permissions to to describe the organization of the account, create S3 buckets for the MAP program and apply tags to it, create a Cost and Usage Report, and describe Cost and Usage Report definitions.
- AWSManagedSettingsAdminAccessAdmin
Grants full administrative access to AWS account settings management. This policy allows owners to view and modify account information, billing, payments, tax registration, identity management, organization policies, budgets, cost analysis,…
- AWSMarketplaceSellerFullAccessAdmin
Provides full access to all seller operations on the AWS Marketplace and other AWS services such as AMI management.
- BillingAdmin
Grants permissions for billing and cost management. This includes viewing account usage and viewing and modifying budgets and payment methods.
- CostOptimizationHubServiceRolePolicyReader
Allows Cost Optimization Hub to retrieve organization information and collect optimization-related data and metadata.