AWS awsaccountbilling documentation change

Service: awsaccountbilling · 2025-08-28 · Documentation low

File: awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md

Summary

Removed a comprehensive JSON policy example for billing permissions migration

Security assessment

Deleted content was an example IAM policy with MFA requirements and permission boundaries. Removal seems like documentation streamlining rather than security fix. No indication of vulnerability being addressed.

Diff

diff --git a/awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md b/awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md
index 72e201cb0..0566953be 100644
--- a//awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md
+++ b//awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md
@@ -615,68 +614,0 @@ See the appended `Sid` blocks in the `BillingConsolePolicyMigrator1` and `Billin
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [{
-                "Effect": "Allow",
-                "Action": [
-                    "ce:*",
-                    "aws-portal:ViewAccount"
-                ],
-                "Resource": "*",
-                "Principal": {
-                    "AWS": "arn:aws:iam::123456789012:role/BillingRole"
-                },
-                "Condition": {
-                    "BoolIfExists": {
-                        "aws:MultiFactorAuthPresent": "true"
-                    }
-                }
-            },
-            {
-                "Sid": "BillingConsolePolicyMigrator1",
-                "Effect": "Allow",
-                "Action": [
-                    "account:GetAccountInformation",
-                    "account:GetAlternateContact",
-                    "account:GetChallengeQuestions",
-                    "account:GetContactInformation",
-                    "billing:GetContractInformation",
-                    "billing:GetIAMAccessPreference",
-                    "billing:GetSellerOfRecord",
-                    "payments:ListPaymentPreferences"
-                ],
-                "Resource": "*",
-                "Principal": {
-                    "AWS": "arn:aws:iam::123456789012:role/BillingRole"
-                },
-                "Condition": {
-                    "BoolIfExists": {
-                        "aws:MultiFactorAuthPresent": "true"
-                    }
-                }
-            },
-            {
-                "Sid": "BillingConsolePolicyMigrator2",
-                "Effect": "Deny",
-                "Action": [
-                    "account:CloseAccount",
-                    "account:DeleteAlternateContact",
-                    "account:PutAlternateContact",
-                    "account:PutChallengeQuestions",
-                    "account:PutContactInformation",
-                    "billing:PutContractInformation",
-                    "billing:UpdateIAMAccessPreference",
-                    "payments:UpdatePaymentPreferences"
-                ],
-                "Resource": "*", 
-                "Principal": "*"
-            }
-        ]
-    } 
-    
-