Skip to content

I get an error Access denied when I access New cost and usage report with date range of past 7 days, granularity daily, and group by dimension resource

0

I get an error Access denied when I access New cost and usage report with date range of past 7 days, granularity daily, and group by dimension resource. I have admin access. I have the IAM policies attached, such as "AWSBudgetsActionsWithAWSResourceControlAccess" and a custom policy with "ce:" (Cost Explorer) and "cur." permissions. There are no restrictions in SCPs. I am able to see information when I choose other options in the dimension apart from resource.

Following is a screenshot

Error

2 Answers
0

The "Access denied" error you're encountering when trying to access the New cost and usage report could be due to a few reasons:

  1. Insufficient permissions: Your IAM user or role may not have the necessary permissions to access Cost Explorer or billing information. Even if you have AdministratorAccess, billing access needs to be explicitly enabled for IAM users.

  2. Root user access required: Some billing and cost management features initially require root user access to enable IAM user access.

  3. Account setup: If your account is new or part of an AWS Organizations structure, there might be restrictions in place.

To resolve this issue, try the following steps:

  1. Log in as the root user and enable IAM access to billing information:

    • Sign in to the AWS Management Console with your root user credentials.
    • Navigate to your account name, then select "Account".
    • Scroll to "IAM User and Role Access to Billing Information" and select "Edit".
    • Check the box to "Activate IAM Access" and update the settings.
  2. Verify that your IAM user or role has the correct permissions:

    • Ensure you have the necessary IAM policies attached, such as "AWSBudgetsActionsWithAWSResourceControlAccess" or a custom policy with "ce:*" (Cost Explorer) permissions.
  3. If you're using an IAM user, make sure it has explicit permissions for billing and Cost Explorer access.

  4. If the issue persists, check if your account is part of AWS Organizations and if there are any Service Control Policies (SCPs) that might be restricting access.

  5. Be aware that it can take up to 24 hours for cost and usage data to be prepared when you first access the Billing and Cost Management console.

If you continue to experience issues after trying these steps, you may need to contact AWS Support for further assistance.
Sources
Access to AWS Cost Explorer is denied | AWS re:Post
Bill and cost management - access denied. | AWS re:Post
Access denied even though ive set permissions | AWS re:Post

answered 10 months ago
EXPERT
reviewed 10 months ago
0

Hello.

You may not be able to access any information relating to billing and costs in an account unless you log into the account with a root account.

answered 10 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.