AWS awsaccountbilling medium security documentation change
Summary
Added note about billing transfer account control over source account billing data
Security assessment
Highlights security implications of billing transfer including loss of IAM policy control and data access limitations, which could prevent unauthorized access if misunderstood
Diff
diff --git a/awsaccountbilling/latest/aboutv2/security.md b/awsaccountbilling/latest/aboutv2/security.md index e88059bd4..431640283 100644 --- a//awsaccountbilling/latest/aboutv2/security.md +++ b//awsaccountbilling/latest/aboutv2/security.md @@ -38,0 +39,4 @@ This documentation helps you understand how to apply the shared responsibility m +###### Note + +When you use billing transfer as a bill source account, your billing and cost management data transfers to an external management account (bill transfer account). The bill transfer account controls your billing and cost management experience. The bill source account can't override billing transfer effects using IAM policies. To regain control of your billing and cost management data, you must withdraw from billing transfer. For more information, see [Transfer billing management to external accounts](./orgs_transfer_billing.html). +