Posted On: Mar 23, 2022

AWS Cost Categories now supports resource and tag-based access controls for easy management and access to cost categories. You can define AWS Identity and Access Management (IAM) policies to specify fine-grained permissions for AWS Cost Categories based on resource names and tags, improving governance and information security through these two granular access control features.

With resource-level access controls, you can configure IAM policies that reference AWS Cost Categories using Amazon Resource Names (ARNs) or wildcards, and specify the users, roles and actions that are permitted on the resources. Using tag-based permissions, you can define IAM policies that specify permissions for tagged AWS Cost Categories. For example, you can tag a cost category based on a business unit and limit control over those resources to the members of that business unit.

Resource and tag based access controls for AWS Cost Category is available in all AWS commercial regions. You can get started with these new features using the AWS Cost Categories console or programmatically via the public APIs at no additional cost. To learn more visit: AWS Cost Categories page and Using Resource and Tag based access control for Cost Categories guide.