By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Cannot change access billing details or change permissions

0

I'm trying to access the billing information for my company and every part of the Billing section is showing an "Access Denied" message. I've tried (several times) to follow the instructions for granting permissions, but the first step appears to be to activate IAM for controlling those permissions and the relevant section within Billing I'm supposed to edit (IAM user and role access to Billing information) is showing that I don't have permission to edit that either, and I can't find the specific permission policy mentioned (billing:GetIAMAccessPreference permission). I'm going round and round in circles here, so any help is appreciated.

If it makes any difference, our users are Workforce Users with a single permission set.

Topics
Security, Identity, & ComplianceCloud Financial Management
Tags
AWS Identity and Access ManagementAWS BillingIAM Policies
Language
English
Jon Gritton
asked 2 months ago135 views
1 Answer
2

By default, IAM roles within an AWS account can't access the Billing and Cost Management console. This is true even if the IAM user or role has IAM policies that grant access to specific Billing features. The root user can allow IAM users and roles access to Billing and Cost Management console by using the Activate IAM access setting.

https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-account-payment.html#activating-iam-access-to-billing-console

profile picture
EXPERT
Oleksii Bebych
answered 2 months ago
profile picture
EXPERT
Artem
reviewed a month ago
  • Jon Gritton
    2 months ago

    Hi Oleksii, thanks for the prompt reply. Unfortunately, I cannot change the IAM access setting as that part of the account settings is also showing the message "You don't have the billing:GetIAMAccessPreference permission required to view your account's IAM access preference. Ask your administrator to add permission." As I said, I'm going around in circles here.

  • Oleksii Bebych EXPERT
    2 months ago

    Hi Jon You need to login as "Root" user to your AWS account and change the mentioned configuration

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content