How do I allow an IAM user to view my account's billing information?

Last updated: 2020-08-27

I want to grant an AWS Identity and Access Management (IAM) user or group the permissions needed to access my account's billing information.

Resolution

You can allow an IAM user to view your billing information by completing the following steps:

  1. Activate access to billing information for IAM users by following the instructions at Activating access to the Billing and Cost Management console.
    Note: Until this step is completed, only the root user of an account can access the Billing and Cost Management console.
  2. Update the IAM policy for the user or group to allow access to billing information. For example policies, see Using identity-based policies (IAM policies) for Billing and Cost Management. If you've created a new policy, attach the policy to the user or group. For more information, see Managing IAM policies.

Note: The AWS Policy Generator can help you generate a policy that fits your use case, but be sure that you understand the fundamentals of IAM. For more information on billing permissions, see Billing actions. For a general explanation of how IAM works, see What is IAM?