AWS cost-management documentation change
Summary
Added 'budgets data' to widget capabilities and included new permissions (budgets:ViewBudget, budgets:DescribeBudgetActionsForAccount, billing:ListBillingViews) for execution roles
Security assessment
The change expands functionality to include budgets data in dashboards and adds required permissions for new features. No security vulnerability or weakness is addressed.
Diff
diff --git a/cost-management/latest/userguide/dashboards-getting-started.md b/cost-management/latest/userguide/dashboards-getting-started.md index 9aa47a794..7e819c510 100644 --- a//cost-management/latest/userguide/dashboards-getting-started.md +++ b//cost-management/latest/userguide/dashboards-getting-started.md @@ -11 +11 @@ PrerequisitesAccessing DashboardsUnderstanding dashboard permissions -AWS Billing and Cost Management Dashboards are collections of widgets that visualize your cost and usage data. Each dashboard can contain up to 20 widgets, which can show costs, usage, and savings plans and reserved instances coverage and utilization. One of the powerful features of dashboards is that they can be shared within or outside your organization, allowing for collaborative cost management. +AWS Billing and Cost Management Dashboards are collections of widgets that visualize your cost and usage data. Each dashboard can contain up to 20 widgets, which can show costs, usage, and savings plans and reserved instances coverage and utilization, and budgets data. One of the powerful features of dashboards is that they can be shared within or outside your organization, allowing for collaborative cost management. @@ -113 +113 @@ To schedule email delivery of dashboard reports, you also need the following per - * `bcm-dashboards:GetDashboard`, `ce:GetDimensionValues`, `ce:GetCostAndUsageWithResources`, `ce:GetCostAndUsage`, `ce:GetCostForecast`, `ce:GetTags`, `ce:GetUsageForecast`, `ce:GetCostCategories`, `ce:GetSavingsPlansCoverage`, `ce:GetReservationUtilization`, `ce:GetReservationCoverage`, `ce:GetSavingsPlansUtilization`, `ce:GetSavingsPlansUtilizationDetails` – Required for the execution role to retrieve dashboard and cost data. For more information, see [Execution role permissions for scheduled reports](https://docs.aws.amazon.com/cost-management/latest/userguide/schedule-dashboard-reports.html#schedule-dashboard-reports-permissions). + * `bcm-dashboards:GetDashboard`, `ce:GetDimensionValues`, `ce:GetCostAndUsageWithResources`, `ce:GetCostAndUsage`, `ce:GetCostForecast`, `ce:GetTags`, `ce:GetUsageForecast`, `ce:GetCostCategories`, `ce:GetSavingsPlansCoverage`, `ce:GetReservationUtilization`, `ce:GetReservationCoverage`, `ce:GetSavingsPlansUtilization`, `ce:GetSavingsPlansUtilizationDetails`, `budgets:ViewBudget`, `budgets:DescribeBudgetActionsForAccount`, `billing:ListBillingViews` – Required for the execution role to retrieve dashboard and cost data. For more information, see [Execution role permissions for scheduled reports](https://docs.aws.amazon.com/cost-management/latest/userguide/schedule-dashboard-reports.html#schedule-dashboard-reports-permissions).