AWS cost-management documentation change
Summary
Added documentation about billing transfer functionality, clarified Billing Conductor use cases, and updated management account references.
Security assessment
The changes describe billing transfer capabilities and access control implications (e.g., centralized billing management across organizations). While this relates to financial governance, there's no evidence of addressing a specific security vulnerability. The documentation adds information about security boundaries between billing and governance management.
Diff
diff --git a/cost-management/latest/userguide/what-is-costmanagement.md b/cost-management/latest/userguide/what-is-costmanagement.md index bedc2ebc6..50b46dd6b 100644 --- a//cost-management/latest/userguide/what-is-costmanagement.md +++ b//cost-management/latest/userguide/what-is-costmanagement.md @@ -16,0 +17,2 @@ For larger organizations, you can use AWS Organizations to consolidate your char +If you have multiple AWS Organizations, use billing transfer to centrally manage and pay for all your organizations from a single account. + @@ -53,0 +56,2 @@ Understand your monthly charges, view and pay invoices, and manage preferences f + * **Billing transfer** – Separates billing and financial management from security and governance management. This enables a single AWS organization to get centralized access to cost data and AWS invoices across multiple AWS organizations. + @@ -117 +121 @@ Optimize resource usage and use flexible pricing models to lower your bill. -Billing Conductor is a custom billing service that supports the showback and chargeback workflows of AWS Solution Providers and AWS Enterprise customers. You can customize a second, alternative version of your monthly billing data. The service models the billing relationship between you and your customers or business units. +Billing Conductor is a custom billing service that supports the showback and chargeback workflows of AWS Partners reselling AWS services, solutions, and AWS customers purchasing cloud services directly through AWS. You can customize a second, alternative version of your monthly billing data. The service models the billing relationship between you and your customers or business units. @@ -121 +125 @@ Billing Conductor doesn't change the way that you're billed by AWS each month. I -As a result of your Billing Conductor configuration, the payer account (management account) can also see the custom rate that's applied on the billing details page of the [AWS Billing and Cost Management console](https://console.aws.amazon.com/billing/home#/bills). The payer account can also configure AWS Cost and Usage Reports per billing group. +As a result of your Billing Conductor configuration, the management account can also see the custom rate that's applied on the billing details page of the [AWS Billing and Cost Management console](https://console.aws.amazon.com/billing/home#/bills). The management account can also configure AWS Cost and Usage Reports per billing group. @@ -123 +127,3 @@ As a result of your Billing Conductor configuration, the payer account (manageme -For more information about Billing Conductor, see the [AWS Billing Conductor User Guide](https://docs.aws.amazon.com/billingconductor/latest/userguide/what-is-billingconductor.html). +When billing transfer users sign in to the bill transfer account, Billing Conductor enables the management account of the AWS organization that transfers their bills (bill source account) to view only their usage priced with the rates from the bill transfer account. + +For more information about Billing Conductor, see the [AWS Billing Conductor User Guide](https://docs.aws.amazon.com/billingconductor/latest/userguide/what-is-billingconductor.html). For more information about billing transfer, see [Transfer billing management to external accounts](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/orgs_transfer_billing.html). @@ -157,0 +164,8 @@ For more information about Organizations, see the [AWS Organizations User Guide] +### Billing transfer + +You can use billing transfer to centrally manage and pay for multiple AWS Organizations from a single account. + +Billing transfer allows a management account to designate an external management account to manage and pay for its consolidated bill. This centralizes billing while maintaining security management autonomy. To set up billing transfer, an external account (bill transfer account) sends a billing transfer invitation to a management account (bill source account). If the invitation is accepted, the external account becomes the bill transfer account. The bill transfer account then manages and pays for the bill source account's consolidated bill, starting on the date specified in the invitation. + +For more information, see [Transfer billing management to external accounts](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/orgs_transfer_billing.html). +