Create IAM Policies That Grant Permissions to Billing Data

Create custom policies that grant both view and full access permissions to the pages within the Billing and Cost Management console. For general information about IAM permission policies, see Managed Policies and Inline Policies.

To create IAM policies that grant permissions to billing data

1. Sign in to the AWS Management Console as a user with administrator credentials. To adhere to IAM best practices, don’t sign in with your root user credentials. For more information, see Create individual IAM users.
2. Open the IAM console at https://console.aws.amazon.com/iam/.
3. In the navigation pane, choose Policies, and then choose Create policy.
4. On the Visual editor tab, choose Choose a service to get started. Then choose Billing.
5. Follow these steps to create two policies:Full access
   1. Choose Select actions and then select the check box next to All Actions (*). You do not need to select a resource or condition for this policy.
   2. Choose Review policy.
   3. On the Review page, next to Name, type BillingFullAccess, and then choose Create policy to save it.

   Read-only access

   1. Repeat steps 3 and 4.
   2. Choose Select actions and then select the check box next to Read. You do not need to select a resource or condition for this policy.
   3. Choose Review policy.
   4. On the Review page, for Name, type BillingViewAccess. Then choose Create policy to save it.

   To review descriptions for each of the permissions available in IAM policies that grant users access to the Billing and Cost Management console, see Billing Permissions Descriptions.