AWS cost-management documentation change

Service: cost-management · 2025-07-25 · Documentation low

File: cost-management/latest/userguide/billing-permissions-ref.md

Summary

Replaced inline IAM policy JSON with reference to managed policy and added changelog entry for new 'ce:GetDimensionValues' permission

Security assessment

Documents updates to managed policies including new Cost Explorer permission. While not fixing vulnerabilities, it adds documentation about security-relevant IAM permissions.

Diff

diff --git a/cost-management/latest/userguide/billing-permissions-ref.md b/cost-management/latest/userguide/billing-permissions-ref.md
index 11ea1f572..12b482eb4 100644
--- a//cost-management/latest/userguide/billing-permissions-ref.md
+++ b//cost-management/latest/userguide/billing-permissions-ref.md
@@ -312,53 +312 @@ Allows Cost Optimization Hub to retrieve organization information and collect op
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "AwsOrgsAccess",
-                "Effect": "Allow",
-                "Action":  [
-                    "organizations:DescribeOrganization",
-                    "organizations:ListAccounts",
-                    "organizations:ListAWSServiceAccessForOrganization",
-                    "organizations:ListParents",
-                    "organizations:DescribeOrganizationalUnit"
-                ],
-                "Resource":  [
-                    "*" 
-                ]
-            },
-            {
-                "Sid": "AwsOrgsScopedAccess",
-                "Effect": "Allow",
-                "Action":  [
-                    "organizations:ListDelegatedAdministrators"
-                ],
-                "Resource": "*",
-                "Condition": { 
-                    "StringLikeIfExists": {
-                        "organizations:ServicePrincipal": [ "cost-optimization-hub.bcm.amazonaws.com" ]
-                    }
-                }
-            },
-            {
-                "Sid": "CostExplorerAccess",
-                "Effect": "Allow",
-                "Action": [
-                    "ce:ListCostAllocationTags",
-                    "ce:GetCostAndUsage"
-                ],
-                "Resource":  [
-                    "*" 
-                ]
-            }
-        ]
-    }
-    
-    
-    
+To view the permissions for this policy, see [CostOptimizationHubServiceRolePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/CostOptimizationHubServiceRolePolicy.html) in the _AWS Managed Policy Reference Guide_.
@@ -548,0 +497 @@ Change | Description | Date
+Update to existing policy [CostOptimizationHubServiceRolePolicy](https://docs.aws.amazon.com/cost-management/latest/userguide/billing-permissions-ref.html#cost-optimization-hub-managedIAM) | We updated the policy to add the `ce:GetDimensionValues` action. | 07/23/2025