AWS cost-management documentation change
Summary
Added support for sharing billing views with external accounts and detailed sharing workflow steps
Security assessment
Introduces new security considerations for cross-account sharing including manual account ID entry and invitation acceptance requirements. Enhances security documentation around access controls but doesn't fix an existing vulnerability.
Diff
diff --git a/cost-management/latest/userguide/share-custom-billing-views.md b/cost-management/latest/userguide/share-custom-billing-views.md index 2da6bc7a6..c5d64a699 100644 --- a//cost-management/latest/userguide/share-custom-billing-views.md +++ b//cost-management/latest/userguide/share-custom-billing-views.md @@ -7 +7 @@ -You can share custom billing views with accounts within your AWS Organization. Sharing is not supported for billing views of type “Primary” or “Billing group”. +You can share custom billing views with accounts within and outside your organization. Sharing is not supported for billing views of type “Primary” or “Billing group”. @@ -29 +29 @@ For member accounts within an organization to access a shared custom billing vie - 6. Select a managed permission for the custom billing view. Managed permissions define how recipient accounts can interact with the shared resource. For more information about managed permissions, see [Managing permissions in AWS RAM](https://docs.aws.amazon.com/ram/latest/userguide/security-ram-permissions.html). + 6. You can share custom billing views with accounts within and outside of your organization. From **Select** : @@ -31 +31 @@ For member accounts within an organization to access a shared custom billing vie - 7. Select the member accounts in your organization that you want to share the custom billing view with. + * Choose **Within AWS organization** to share with accounts within your organization. @@ -33 +33,13 @@ For member accounts within an organization to access a shared custom billing vie - 8. Choose **Share**. + * Choose **With any account** to manually enter an account ID to share with. + + 7. Select a managed permission for the custom billing view. Managed permissions define how recipient accounts can interact with the shared resource. For more information about managed permissions, see [Managing permissions in AWS RAM](https://docs.aws.amazon.com/ram/latest/userguide/security-ram-permissions.html). + + 8. Select which accounts you want to share the custom billing view. + + * If sharing **Within AWS organization** , select member accounts to share with. + + * If sharing **With any account** , manually enter the 12-digit AWS account ID you want to share with. If sharing with an account outside your organization, the recipient must accept the invitation to access the view. + + 9. Select the member accounts in your organization that you want to share the custom billing view with. + + 10. Choose **Share**.