AWS billingconductor documentation change
Summary
Added documentation for billing transfer functionality including manual billing group creation procedures, billing transfer types (one-level/two-level), and pro forma data access requirements
Security assessment
Changes focus on operational processes for billing transfers and data visibility. While there's a mention of IAM policy examples for organizational unit access (pre-existing link), the new content doesn't directly address vulnerabilities or introduce security controls. The warning about pro forma data access issues relates to configuration correctness rather than security flaws.
Diff
diff --git a/billingconductor/latest/userguide/create-billing-group.md b/billingconductor/latest/userguide/create-billing-group.md index 2dfcc8b3a..abe1c0fea 100644 --- a//billingconductor/latest/userguide/create-billing-group.md +++ b//billingconductor/latest/userguide/create-billing-group.md @@ -4,0 +5,2 @@ +Using Billing Conductor as a standalone serviceUsing Billing Conductor with billing transfer + @@ -6,0 +9,2 @@ +## Using Billing Conductor as a standalone service + @@ -25 +29,3 @@ Moving accounts across billing groups in the middle of the month will initiate t - 6. For **Pricing plan** , choose a pricing plan to associate with the billing group. To create a pricing plan, see [Creating pricing plans](./create-pricingplan.html). + 6. Choose `Standard` as the **billing group type**. + + 7. For **Pricing plan** , choose a pricing plan to associate with the billing group. To create a pricing plan, see [Creating pricing plans](./create-pricingplan.html). @@ -29 +35 @@ Moving accounts across billing groups in the middle of the month will initiate t - 7. (Optional) For **Additional settings** , you can enable automatic account association for the billing group. + 8. (Optional) For **Additional settings** , you can enable automatic account association for the billing group. @@ -39 +45 @@ Moving accounts across billing groups in the middle of the month will initiate t - 8. Under **Accounts** , choose one or more accounts to add to the billing group _or_ choose **Import organizational unit** to automatically select the accounts that are within an organizational unit. For a policy example to grant access to the import OU feature, see [Granting Billing Conductor access to the import organizational unit feature](./security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-ABCaccessOU). + 9. Under **Accounts** , choose one or more accounts to add to the billing group _or_ choose **Import organizational unit** to automatically select the accounts that are within an organizational unit. For a policy example to grant access to the import OU feature, see [Granting Billing Conductor access to the import organizational unit feature](./security_iam_id-based-policy-examples.html#security_iam_id-based-policy-examples-ABCaccessOU). @@ -43 +49 @@ You can use the table filter to sort by account names, account IDs, or the root - 9. The primary account inherits the ability to see pro forma cost and usage across the billing group, and can generate a pro forma Cost and Usage Reports (AWS CUR) for the billing group. + 10. The primary account inherits the ability to see pro forma cost and usage across the billing group, and can generate a pro forma Cost and Usage Reports (AWS CUR) for the billing group. @@ -47 +53 @@ If you choose a primary account that joined your organization during the current - 10. Choose **Create billing group**. + 11. Choose **Create billing group**. @@ -57,0 +64,47 @@ If you choose a primary account that joined your organization during the current +## Using Billing Conductor with billing transfer + +In one-level transfers, the console will create a new billing group with selected pricing configuration and assign it to the AWS organization of the bill source account, when the transfer begins. The billing group status appears as 'pending' until the billing transfer date begins. + +###### Note + +If you set up billing transfers programmatically using the billing transfer APIs through the AWS SDK and AWS CLI, you must also call Billing Conductor APIs to create billing groups and associate pricing plans. This ensures that bill source accounts can view pro forma billing data in their billing and cost management console. + +In two-level transfers, the bill transfer (bill receiver) account must configure a billing group manually on the bill source accounts' AWS Organizations through Billing Conductor. This step enables the bill transfer account to view the costs of their bill source accounts as allocated by the bill transfer (bill receiver) account. For users in the APN Distribution programs, this enables downstream sellers to see how much they owe their distributor for their end-customers' usage. + +For support with automating this action, contact Support. + +###### Important + +If a billing group is not assigned to the AWS organization of the bill source account, all the accounts in that AWS organization may not have access to the pro forma cost data when accessing Billing and Cost Management tools. + +Usage data will always remain available to the bill source account and the accounts in its AWS organizations via CloudWatch. + +###### To create a billing group manually for billing transfer recovery or two-level transfers + +Use this procedure when automatic billing group creation fails during billing transfer setup or when using two-level transfers. + + 1. Sign in to the AWS Management Console and open AWS Billing Conductor at [https://console.aws.amazon.com/billingconductor/](https://console.aws.amazon.com/billingconductor/). + + 2. In the navigation pane, choose **Billing groups**. + + 3. Choose **Create billing group**. + + 4. For **Billing group details** , enter the name of the billing group. For naming restrictions, see [Quotas and restrictions](./limits.html). + + 5. (Optional) For **Description** , enter a description for the billing group. + + 6. Choose `Standard` as the **billing group type**. + + 7. Choose an individual AWS Organizations that's transferring its bills for which you want to create a billing group. + + 1. If you're using billing transfer with two-level transfers, expand the transfer name to view the organizations available for billing group creation. + + 2. The list displays only organizations that aren't associated with a billing group. Organizations that already have an associated billing group don't appear in this list. + + 8. For **Pricing plan** , choose a pricing plan to associate with the billing group. To create a pricing plan, see [Creating pricing plans](./create-pricingplan.html). + + 9. Choose **Create billing group**. + + + +