AWS awsaccountbilling medium security documentation change
Summary
Expanded documentation on credit visibility and management in billing transfer scenarios
Security assessment
Details access control limitations and credential management boundaries critical for maintaining financial security in multi-account environments
Diff
diff --git a/awsaccountbilling/latest/aboutv2/useconsolidatedbilling-credits.md b/awsaccountbilling/latest/aboutv2/useconsolidatedbilling-credits.md index 6b46a0188..89de93093 100644 --- a//awsaccountbilling/latest/aboutv2/useconsolidatedbilling-credits.md +++ b//awsaccountbilling/latest/aboutv2/useconsolidatedbilling-credits.md @@ -13 +13 @@ For any questions about AWS credits in general or any credits that have already -###### Viewing AWS credits +Viewing AWS credits @@ -21,0 +22,9 @@ For any questions about AWS credits in general or any credits that have already +Viewing AWS credits for billing transfer users + + * When you sign in as a bill source account, your credits apply to the standard AWS bill sent to your bill transfer account. These credits don't appear in your pro forma billing artifacts (Bills page, Cost Explorer, or AWS Cost and Usage Report) unless the bill transfer account enables credits in the pro forma domain. Your **Credits** page no longer displays your credit balance. The page shows the total amount of credit redeemed as a static value until all credits are redeemed. + + * When you sign in as a bill transfer account, you can view credit applications for each AWS Organizations that transfers bills to you by using billing view functionality in chargeable billing views in Cost Explorer, AWS Cost and Usage Report, and the **Bills** page. The **Credits** page doesn't support billing view functionality. You can only view credits redeemed in your own AWS Organizations and credits from bill source organizations when you have an IAM role in those organizations. + + + + @@ -85,0 +95,4 @@ For example, Jorge has two credits available to him. Credit one is for 10 dollar +###### Note + +When you sign in as a bill source account, you are responsible for managing credit sharing for accounts in your AWS Organizations. The bill transfer account can't control credit sharing unless you provide them with a cross-organization role to modify these preferences. + @@ -133,0 +147,2 @@ This section is only available for the management account (payer account) as par +When you use billing transfer and sign in as a bill transfer account, you can control sharing preferences only for accounts in your AWS Organizations. Each bill source account controls sharing preferences for accounts in their own AWS Organizations. +