AWS Cloud Financial Management
Changes to AWS Billing, Cost Management, and Account Consoles Permissions
AWS will be retiring AWS Identity and Access Management (IAM) actions for the Billing, Cost Management, and Account Consoles under the service prefix aws-portal and two actions under purchase order namespace, purchase-orders:ViewPurchaseOrders, and purchase-orders:ModifyPurchaseOrders. We are replacing them with new fine-grained service specific permissions that give you more control. Read this blog and understand how you can perform updates to your permissions so you can maintain intentional access control to Billing, Cost Management, and Account services.