AWS awsaccountbilling documentation change
Summary
Removed all references and policy examples related to carbon footprint reporting functionality
Security assessment
The changes remove documentation about carbon footprint reporting policies without indicating any security vulnerability or incident. The removal appears to be a feature deprecation or documentation cleanup, as there's no mention of security flaws, vulnerabilities, or incident response in the diff.
Diff
diff --git a/awsaccountbilling/latest/aboutv2/billing-example-policies.md b/awsaccountbilling/latest/aboutv2/billing-example-policies.md index 42e1a3125..95ce7ac7e 100644 --- a//awsaccountbilling/latest/aboutv2/billing-example-policies.md +++ b//awsaccountbilling/latest/aboutv2/billing-example-policies.md @@ -7 +7 @@ -Allow IAM users to view your billing informationAllow IAM users to view your billing information and carbon footprint reportAllow IAM users to access the reports console pageDeny IAM users access to the Billing and Cost Management consolesDeny AWS Console cost and usage widget access for member accountsDeny AWS Console cost and usage widget access for specific IAM users and rolesAllow IAM users to view your billing information, but deny access to carbon footprint reportAllow IAM users to access carbon footprint reporting, but deny access to billing informationAllow full access to AWS services but deny IAM users access to the Billing and Cost Management consolesAllow IAM users to view the Billing and Cost Management consoles except for account settingsAllow IAM users to modify billing informationDeny access to account settings, but allow full access to all other billing and usage informationDeposit reports into an Amazon S3 bucketFind products and pricesView costs and usageEnable and disable AWS RegionsView and manage cost categoriesCreate, view, edit, or delete AWS Cost and Usage ReportsView and manage purchase ordersView and update the Cost Explorer preferences pageView, create, update, and delete using the Cost Explorer reports pageView, create, update, and delete reservation and Savings Plans alertsAllow read-only access to AWS Cost Anomaly DetectionAllow AWS Budgets to apply IAM policies and SCPsAllow AWS Budgets to apply IAM policies and SCPs and target EC2 and RDS instancesAllow IAM users to view US tax exemptions and create Support cases(For customers with a billing or contact address in India) Allow read-only access to customer verification information(For customers with a billing or contact address in India) View, create, and update customer verification informationView AWS Migration Acceleration Program information in the Billing consoleAllow access to AWS invoice configuration in the Billing console +Allow IAM users to view your billing informationAllow IAM users to access the reports console pageDeny IAM users access to the Billing and Cost Management consolesDeny AWS Console cost and usage widget access for member accountsDeny AWS Console cost and usage widget access for specific IAM users and rolesAllow full access to AWS services but deny IAM users access to the Billing and Cost Management consolesAllow IAM users to view the Billing and Cost Management consoles except for account settingsAllow IAM users to modify billing informationDeny access to account settings, but allow full access to all other billing and usage informationDeposit reports into an Amazon S3 bucketFind products and pricesView costs and usageEnable and disable AWS RegionsView and manage cost categoriesCreate, view, edit, or delete AWS Cost and Usage ReportsView and manage purchase ordersView and update the Cost Explorer preferences pageView, create, update, and delete using the Cost Explorer reports pageView, create, update, and delete reservation and Savings Plans alertsAllow read-only access to AWS Cost Anomaly DetectionAllow AWS Budgets to apply IAM policies and SCPsAllow AWS Budgets to apply IAM policies and SCPs and target EC2 and RDS instancesAllow IAM users to view US tax exemptions and create Support cases(For customers with a billing or contact address in India) Allow read-only access to customer verification information(For customers with a billing or contact address in India) View, create, and update customer verification informationView AWS Migration Acceleration Program information in the Billing consoleAllow access to AWS invoice configuration in the Billing console @@ -62,2 +61,0 @@ For a list of actions policies for the AWS Cost Management console, see [AWS Cos - * Allow IAM users to view your billing information and carbon footprint report - @@ -72,4 +69,0 @@ For a list of actions policies for the AWS Cost Management console, see [AWS Cos - * Allow IAM users to view your billing information, but deny access to carbon footprint report - - * Allow IAM users to access carbon footprint reporting, but deny access to billing information - @@ -165,47 +158,0 @@ JSON -## Allow IAM users to view your billing information and carbon footprint report - -To allow an IAM user to view both billing information and carbon footprint reporting, use a policy similar to the following example. This policy prevents users from accessing your password and account activity reports. This policy allows IAM users to view the following Billing and Cost Management console pages, without giving them access to the **Account Settings** or **Reports** console pages: - - * **Dashboard** - - * **Cost Explorer** - - * **Bills** - - * **Orders and invoices** - - * **Consolidated Billing** - - * **Preferences** - - * **Credits** - - * **Advance Payment** - - * **The AWS Customer Carbon Footprint Tool section of the AWS Cost and Usage Reports page** - - - - -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - {"Effect": "Allow", - "Action": "aws-portal:ViewBilling", - "Resource": "*" - }, - {"Effect": "Allow", - "Action": "sustainability:GetCarbonFootprintSummary", - "Resource": "*" - } - ] - } - - @@ -298,52 +244,0 @@ JSON -## Allow IAM users to view your billing information, but deny access to carbon footprint report - -To allow an IAM user to both billing information in the Billing and Cost Management consoles, but doesn't allow access to the AWS Customer Carbon Footprint Tool. This tool is located in the AWS Cost and Usage Reports page. - -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - {"Effect": "Allow", - "Action": "aws-portal:ViewBilling", - "Resource": "*" - }, - {"Effect": "Deny", - "Action": "sustainability:GetCarbonFootprintSummary", - "Resource": "*" - } - ] - } - - -## Allow IAM users to access carbon footprint reporting, but deny access to billing information - -To allow an IAM users to access the AWS Customer Carbon Footprint Tool in the AWS Cost and Usage Reports page, but denies access to view billing information in the Billing and Cost Management consoles. - -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - {"Effect": "Deny", - "Action": "aws-portal:ViewBilling", - "Resource": "*" - }, - {"Effect": "Allow", - "Action": "sustainability:GetCarbonFootprintSummary", - "Resource": "*" - } - ] - } - -