AWS awsaccountbilling documentation change
Summary
Replaced inline JSON policy examples with links to AWS Managed Policy Reference documentation
Security assessment
This is a documentation simplification to reference centralized policy definitions. While IAM policies are security-related, the change itself does not introduce new security features or address vulnerabilities.
Diff
diff --git a/awsaccountbilling/latest/aboutv2/managed-policies.md b/awsaccountbilling/latest/aboutv2/managed-policies.md index 0182481f2..7f867e811 100644 --- a//awsaccountbilling/latest/aboutv2/managed-policies.md +++ b//awsaccountbilling/latest/aboutv2/managed-policies.md @@ -38,40 +38 @@ This managed policy grants full access to the Billing and Cost Management consol -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement":[ - { - "Effect":"Allow", - "Action":[ - "account:GetAccountInformation", - "account:GetContactInformation", - "aws-portal:*Billing", - "consolidatedbilling:GetAccountBillingRole", - "invoicing:GetInvoicePDF", - "invoicing:ListInvoiceUnits", - "payments:GetPaymentInstrument", - "payments:ListPaymentPreferences", - "purchase-orders:AddPurchaseOrder", - "purchase-orders:DeletePurchaseOrder", - "purchase-orders:GetPurchaseOrder", - "purchase-orders:ListPurchaseOrderInvoices", - "purchase-orders:ListPurchaseOrders", - "purchase-orders:ListTagsForResource", - "purchase-orders:ModifyPurchaseOrders", - "purchase-orders:TagResource", - "purchase-orders:UntagResource", - "purchase-orders:UpdatePurchaseOrder", - "purchase-orders:UpdatePurchaseOrderStatus", - "purchase-orders:ViewPurchaseOrders", - "tax:ListTaxRegistrations" - ], - "Resource":"*" - } - ] - } - +To view the permissions for this policy, see [AWSPurchaseOrdersServiceRolePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSPurchaseOrdersServiceRolePolicy.html) in the _AWS Managed Policy Reference_. @@ -118,89 +79 @@ This policy includes the following permissions: -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "VisualEditor0", - "Effect": "Allow", - "Action": [ - "account:GetAccountInformation", - "aws-portal:ViewBilling", - "billing:GetBillingData", - "billing:GetBillingDetails", - "billing:GetBillingNotifications", - "billing:GetBillingPreferences", - "billing:GetContractInformation", - "billing:GetCredits", - "billing:GetIAMAccessPreference", - "billing:GetSellerOfRecord", - "billing:ListBillingViews", - "budgets:DescribeBudgetActionsForBudget", - "budgets:DescribeBudgetAction", - "budgets:DescribeBudgetActionsForAccount", - "budgets:DescribeBudgetActionHistories", - "budgets:ViewBudget", - "ce:DescribeCostCategoryDefinition", - "ce:GetCostAndUsage", - "ce:GetDimensionValues", - "ce:GetTags", - "ce:ListCostCategoryDefinitions", - "ce:ListCostAllocationTags", - "ce:ListCostAllocationTagBackfillHistory", - "ce:ListTagsForResource", - "consolidatedbilling:GetAccountBillingRole", - "consolidatedbilling:ListLinkedAccounts", - "cur:DescribeReportDefinitions", - "cur:GetClassicReport", - "cur:GetClassicReportPreferences", - "cur:GetUsageReport", - "freetier:GetFreeTierAlertPreference", - "freetier:GetFreeTierUsage", - "freetier:GetAccountPlanState", - "freetier:GetAccountActivity", - "freetier:ListAccountActivities", - "invoicing:BatchGetInvoiceProfile", - "invoicing:GetInvoiceEmailDeliveryPreferences", - "invoicing:GetInvoicePDF", - "invoicing:GetInvoiceUnit", - "invoicing:ListInvoiceSummaries", - "invoicing:ListInvoiceUnits", - "invoicing:ListTagsForResource", - "mapcredits:ListAssociatedPrograms", - "mapcredits:ListQuarterCredits", - "mapcredits:ListQuarterSpend", - "mapcredits:GetUniqueQuarterSpendSum", - "payments:GetFinancingApplication", - "payments:GetFinancingLine", - "payments:GetFinancingLineWithdrawal", - "payments:GetFinancingOption", - "payments:GetPaymentInstrument", - "payments:GetPaymentStatus", - "payments:ListFinancingApplications", - "payments:ListFinancingLines", - "payments:ListFinancingLineWithdrawals", - "payments:ListPaymentInstruments", - "payments:ListPaymentPreferences", - "payments:ListPaymentProgramOptions", - "payments:ListPaymentProgramStatus", - "payments:ListTagsForResource", - "purchase-orders:GetPurchaseOrder", - "purchase-orders:ListPurchaseOrderInvoices", - "purchase-orders:ListPurchaseOrders", - "purchase-orders:ListTagsForResource", - "purchase-orders:ViewPurchaseOrders", - "sustainability:GetCarbonFootprintSummary", - "tax:GetTaxInheritance", - "tax:GetTaxRegistrationDocument", - "tax:ListTaxRegistrations" - ], - "Resource": "*" - } - ] - } - +To view the permissions for this policy, see [AWSBillingReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSBillingReadOnlyAccess.html) in the _AWS Managed Policy Reference_. @@ -212,160 +85 @@ This managed policy grants users permission to view and edit the AWS Billing and -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "VisualEditor0", - "Effect": "Allow", - "Action": [ - "account:GetAccountInformation", - "aws-portal:*Billing", - "aws-portal:*PaymentMethods", - "aws-portal:*Usage", - "billing:CreateBillingView", - "billing:DeleteBillingView", - "billing:GetBillingData", - "billing:GetBillingDetails", - "billing:GetBillingNotifications", - "billing:GetBillingPreferences", - "billing:GetBillingView", - "billing:GetContractInformation", - "billing:GetCredits", - "billing:GetIAMAccessPreference", - "billing:GetSellerOfRecord", - "billing:ListBillingViews", - "billing:PutContractInformation", - "billing:RedeemCredits", - "billing:GetResourcePolicy", - "billing:ListSourceViewsForBillingView", - "billing:ListTagsForResource", - "billing:TagResource", - "billing:UntagResource", - "billing:UpdateBillingPreferences", - "billing:UpdateBillingView", - "billing:UpdateIAMAccessPreference", - "budgets:CreateBudgetAction", - "budgets:DeleteBudgetAction", - "budgets:DescribeBudgetActionsForBudget", - "budgets:DescribeBudgetAction", - "budgets:DescribeBudgetActionsForAccount", - "budgets:DescribeBudgetActionHistories", - "budgets:ExecuteBudgetAction", - "budgets:ModifyBudget", - "budgets:UpdateBudgetAction", - "budgets:ViewBudget", - "ce:CreateNotificationSubscription", - "ce:CreateReport", - "ce:CreateCostCategoryDefinition", - "ce:DeleteNotificationSubscription", - "ce:DeleteCostCategoryDefinition", - "ce:DescribeCostCategoryDefinition", - "ce:DeleteReport", - "ce:GetCostAndUsage", - "ce:GetDimensionValues", - "ce:GetTags", - "ce:ListCostAllocationTags", - "ce:ListCostAllocationTagBackfillHistory",