Hide "access denied" from AWS Services Account

Question

I have an AWS account under the AWS organization. I want to share this account with a third party, but I want to hide the cost and billing completely from the account. When I did that, I found "access denied" from the first-login dashboard for widgets for cost and reports (this is normal status).

My Question: If there is any way to hide "access denied" sentences from the AWS account, to avoid 3rd see it? 
I tried to hide the cost and report service from AWS organization (Service control policies), but the same status still I see " access denied"

Anyone can help me figure out this?

Hennie Francis · Answer

You cannot completely "hide" the "access denied" message from AWS services on the console, unfortunately, I also fiddled with it a while ago, you can only disable or control access using IAM policies to restrict interaction. I tried to physically "Hide" the service so the 3rd party can't see that service from their role.

You can disable the AWS Billing and Cost management as a trusted service using the console, under organizations.
Alternative use the CLI or API

CLI: aws organizations disable-aws-service-access \ --service-principal billing-cost-management.amazonaws.com.
API: Use the DisableAWSServiceAccess method.

Hide "access denied" from AWS Services Account

回答を追加する

関連するコンテンツ