Skip to content

How do I grant access to Cost Explorer for an IAM user with a member account of an AWS Organizations?

1 minute read
0

I want to let an AWS Identity and Access Management (IAM) user who belongs to an AWS Organizations member account access the AWS Cost Explorer.

Resolution

When you activate your account at the management account level, all member accounts in your organization are granted access. However, you can't grant access to individual member accounts. Member account owners can't view Cost Explorer information for other accounts in your organization.

To grant IAM users for an Organizations member account to access Cost Explorer, complete the following steps:

  1. Open the Billing and Cost Management console with your AWS Organizations management account.
  2. In the navigation pane, choose Cost Management preferences.
  3. Control member account access to Cost Explorer data.
  4. Activate access to the Billing and Cost Management console.
  5. Attach an IAM policy to the IAM user to allow access to Cost Explorer information.

For example policies, see AWS Billing policy examples.

Related information

Best practices for the management account

Accessing member accounts in an organization with AWS Organizations

Managing accounts in an organization with AWS Organizations