AWS awsaccountbilling documentation change
Summary
Updated documentation for billing dashboard recommendations widget with prioritization details, dismissal behavior changes, and added IAM permission requirements
Security assessment
The changes emphasize IAM permission requirements (including new bcm-recommended-actions:ListRecommendedActions) to view recommendations, which relates to access control security practices. However, there is no evidence this addresses an existing security vulnerability.
Diff
diff --git a/awsaccountbilling/latest/aboutv2/view-billing-dashboard.md b/awsaccountbilling/latest/aboutv2/view-billing-dashboard.md index 6b3675226..35ae09891 100644 --- a//awsaccountbilling/latest/aboutv2/view-billing-dashboard.md +++ b//awsaccountbilling/latest/aboutv2/view-billing-dashboard.md @@ -139 +139,3 @@ For more information about Cost Explorer, see [Exploring your data using Cost Ex -This widget helps you implement AWS cloud financial management best practices and optimize your costs. +This widget helps you implement AWS cloud financial management best practices and optimize your costs. It displays your recommended actions, ranked by priority. Critical alerts appear at the top, followed by advisory warnings and informational recommended actions. + +As a best practice, we recommend that you monitor any critical alerts daily, focusing on immediate actions like payment issues or budget overruns. Review any advisory warnings on a weekly basis. @@ -143 +145 @@ This widget helps you implement AWS cloud financial management best practices an - 1. For each recommendation, follow the link to take action on your account. By default, the widget shows up to seven recommended actions. + 1. For each recommendation, follow the link to take action on your account. By default, the widget shows up to four recommended actions. @@ -147 +149 @@ This widget helps you implement AWS cloud financial management best practices an - 3. To dismiss a specific recommendation, choose the **X** icon on the top right corner. + 3. To dismiss a non-critical recommended action, choose the **X** icon on the top right corner. Critical alerts remain visible until addressed. Dismissed non-critical recommended actions will reappear after 7 days. @@ -154,79 +156 @@ This widget helps you implement AWS cloud financial management best practices an -If you don’t have permission to access the AWS service that shows each recommendation, you will see an access denied error. For example, if you have access to all Billing and Cost Management actions _except_ `budgets:DescribeBudgets`, you can view all recommendations on the page except for budgets. See the error message about adding the missing IAM action to your policy. - -This widget provides the following recommendations: - -**Budgets** - -This widget shows recommendations if any budgets require your attention, such as the following examples: - - * Cost and usage budgets have been exceeded or are forecasted to be exceeded - - * Savings Plan, reservation coverage, or utilization has dropped below the defined budget thresholds - - * Your custom budget alert thresholds have been exceeded - - - - -Unlike the cost monitor widget, this widget shows information related to: - - * Budgets that are forecasted to be exceeded but haven’t yet - - * Budgets that are in alarm but haven't been exceeded - - * Utilization and coverage budgets for your Savings Plans or reservations - - - - -**Cost anomaly detection** - -This widget shows recommendations if any anomalies have been detected that require your attention. Unlike the cost monitor widget, this widget shows cost anomalies that were detected in the last 90 days with a total cost impact greater than $100 and an impact percentage greater than 40%. - -**Cost optimization** - -This widget shows recommendations for the following reasons: - - * To help you improve cost efficiency and lower your AWS bill. You will see recommendations from AWS Cost Optimization Hub when the total estimated savings amount is at least 5% of last month’s costs. - - * To review under-utilized Savings Plans or reservations - - * To renew any Savings Plans or reservations that will expire within the next 30 days - - - - -**AWS Free Tier** - -This widget shows recommendations if your usage exceeded 85% of any service's free tier usage limits. - -**Getting started** - -This widget shows recommendations to implement AWS cloud financial management best practices, such as: - - * Create budgets to track and govern spending - - * You have active Savings Plans but haven't created a Savings Plan budget - - * You have Reserved Instance commitments but haven't created a Reserved Instance budget - - * Add an alternate billing contact so that the correct people receive communications from AWS - - * You haven't set up a cost anomaly monitor - - - - -### Related resources - -For more information, see the following topics: - - * [Managing your costs with AWS Budgets](https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-managing-costs.html) - - * [Detecting unusual spend with AWS Cost Anomaly Detection](https://docs.aws.amazon.com/cost-management/latest/userguide/manage-ad.html) - - * [Cost Optimization Hub](https://docs.aws.amazon.com/cost-management/latest/userguide/cost-optimization-hub.html) - - * [Using the AWS Free Tier](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-free-tier.html) - - * [Adding additional billing contact email addresses](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-payment-method.html#manage-billing-contact-emails) +You will need IAM permissions to the AWS service in order to see the recommended actions. For example, if you have access to all Billing and Cost Management actions except `budgets:DescribeBudgets`, you can view all recommendations on the page except for budgets. See the error message about adding the missing IAM action to your policy. @@ -233,0 +158 @@ For more information, see the following topics: +You will need the new IAM permission `bcm-recommended-actions:ListRecommendedActions` to view all recommended actions. For more information, see [Understanding recommended action types](https://docs.aws.amazon.com/cost-management/latest/userguide/recommended-action-types.html). @@ -234,0 +160 @@ For more information, see the following topics: +For a full list of the different recommended action types and the corresponding IAM policy permissions needed in order to see the recommended actions, refer to [Billing and Cost Management recommended actions policies](https://docs.aws.amazon.com/cost-management/latest/userguide/billing-permissions-ref.html#allows-recommended-actions-access). @@ -235,0 +162 @@ For more information, see the following topics: +For full details on the categorization of recommended actions, see [Understanding recommended action types](https://docs.aws.amazon.com/cost-management/latest/userguide/recommended-action-types.html).