By using AWS re:Post, you agree to the AWS re:Post Terms of Use

How can I grant access to Cost Explorer for an IAM user with a member account of an AWS Organizations?

2 minute read
0

I want to allow an AWS Identity and Access Management (IAM) user that belongs to an AWS Organizations member account access to AWS Cost Explorer.

Resolution

Follow these instructions to allow IAM users for an Organizations member account to access Cost Explorer.

Note: You can't grant access to individual member accounts. All member accounts in your organization are granted access. Member account owners can't view Cost Explorer information for other accounts in your organization.

  1. Open the Billing and Cost Management console with your AWS Organizations management account.
  2. In the navigation pane, choose Cost Management preferences.
  3. Follow the instructions to control member account access to Cost Explorer data.
  4. Follow the instructions to activate access to the Billing and Cost Management console.
    Note: Only the AWS account root user can access the Billing and Cost Management console until this step is completed.
  5. Attach an IAM policy to the IAM user to allow access to Cost Explorer information.

For example policies, see AWS Billing policy examples.

Related information

Controlling member accounts' access using Cost Explorer preferences

Best practices for the management account

Best practices for member accounts

Managing the AWS accounts in your organization

AWS OFFICIAL
AWS OFFICIALUpdated 4 months ago