Posted On: Jan 11, 2023
AWS announces the retirement of IAM actions for AWS Billing, Cost Management, and Account consoles under aws-portal service prefix, purchase-orders:ViewPurchaseOrders, and purchase-orders:ModifyPurchaseOrders and is replacing them with fine-grained service specific actions. This launch gives AWS customers more control over access to Billing, Cost Management, and Account services. These new permissions will also provide a single set of IAM actions that govern console and programmatic access to these services.
The fine-grained actions launch enables customers to provide individuals in their organization access to only services that are necessary for their job. For example, with these new permissions a customer can provide a developer access to Budgets and Cost Explorer, while denying access to Bills or Tax Settings services. This allows customers to put engineers and business unit leaders in charge of cost and usage optimization and control and implement decentralized cloud cost management.
Starting today, the fine-grained actions are available in all commercial regions, except China regions. The IAM actions for AWS Billing, Cost Management, and Account consoles under aws-portal service prefix, purchase-orders:ViewPurchaseOrders, and purchase-
orders:ModifyPurchaseOrders will no longer be available after July 6, 2023, and we encourage customers to update their policies.
To understand when the fine-grained actions will be effective for your accounts, how and which policies you need to update, and to know more about the newly launched Affected Policies identification tool, please visit our blog post . To know more about the fine-grained actions, please visit our Cost Management and Billing console user guides.