AWS Billing and Cost Management Conductor (billingconductor)

2022-03-18

30 new actions, 4 new resources, 3 new conditions

Additions

    Actions
  • AssociateAccounts
    • Description:  Grants permission to associate between one and 30 accounts to a billing group
    • Access:  Write
    • Resources: 

      Name: billingGroup

      Required: Yes

  • AssociatePricingRules
    • Description:  Grants permission to associate pricing rules
    • Access:  Write
    • Resources: 

      Name: pricingPlan

      Required: Yes

      Name: pricingRule

      Required: Yes

  • BatchAssociateResourcesToCustomLineItem
    • Description:  Grants permission to batch associate resources to a percentage custom line item
    • Access:  Write
    • Resources: 

      Name: customLineItem

      Required: Yes

  • BatchDisassociateResourcesFromCustomLineItem
    • Description:  Grants permission to batch disassociate resources from a percentage custom line item
    • Access:  Write
    • Resources: 

      Name: customLineItem

      Required: Yes

  • CreateBillingGroup
    • Description:  Grants permission to create a billing group
    • Access:  Write
    • Resources: 

      Name: pricingPlan

      Required: Yes

    • Conditions: 

      aws:TagKeys

      aws:RequestTag/${TagKey}

  • CreateCustomLineItem
    • Description:  Grants permission to create a custom line item
    • Access:  Write
    • Conditions: 

      aws:TagKeys

      aws:RequestTag/${TagKey}

  • CreatePricingPlan
    • Description:  Grants permission to create a pricing plan
    • Access:  Write
    • Conditions: 

      aws:TagKeys

      aws:RequestTag/${TagKey}

  • CreatePricingRule
    • Description:  Grants permission to create a pricing rule
    • Access:  Write
    • Conditions: 

      aws:TagKeys

      aws:RequestTag/${TagKey}

  • DeleteBillingGroup
    • Description:  Grants permission to delete a billing group
    • Access:  Write
    • Resources: 

      Name: billingGroup

      Required: Yes

  • DeleteCustomLineItem
    • Description:  Grants permission to delete a custom line item
    • Access:  Write
    • Resources: 

      Name: customLineItem

      Required: Yes

  • DeletePricingPlan
    • Description:  Grants permission to delete a pricing plan
    • Access:  Write
    • Resources: 

      Name: pricingPlan

      Required: Yes

  • DeletePricingRule
    • Description:  Grants permission to delete a pricing rule
    • Access:  Write
    • Resources: 

      Name: pricingRule

      Required: Yes

  • DisassociateAccounts
    • Description:  Grants permission to detach between one and 30 accounts from a billing group
    • Access:  Write
    • Resources: 

      Name: billingGroup

      Required: Yes

  • DisassociatePricingRules
    • Description:  Grants permission to disassociate pricing rules
    • Access:  Write
    • Resources: 

      Name: pricingPlan

      Required: Yes

      Name: pricingRule

      Required: Yes

  • ListAccountAssociations
    • Description:  Grants permission to list the linked accounts of the payer account for the given billing period while also providing the billing group the linked accounts belong to
    • Access:  List
  • ListBillingGroupCostReports
    • Description:  Grants permission to view the billing group cost report
    • Access:  Read
  • ListBillingGroups
    • Description:  Grants permission to view the details of billing groups
    • Access:  Read
  • ListCustomLineItems
    • Description:  Grants permission to view custom line item details
    • Access:  Read
  • ListPricingPlans
    • Description:  Grants permission to view the pricing plans details
    • Access:  Read
  • ListPricingPlansAssociatedWithPricingRule
    • Description:  Grants permission to list pricing plans associated with a pricing rule
    • Access:  List
    • Resources: 

      Name: pricingPlan

      Required: Yes

      Name: pricingRule

      Required: Yes

  • ListPricingRules
    • Description:  Grants permission to view pricing rules details
    • Access:  Read
  • ListPricingRulesAssociatedToPricingPlan
    • Description:  Grants permission to list pricing rules associated to a pricing plan
    • Access:  List
    • Resources: 

      Name: pricingPlan

      Required: Yes

      Name: pricingRule

      Required: Yes

  • ListResourcesAssociatedToCustomLineItem
    • Description:  Grants permission to list resources associated to a percentage custom line item
    • Access:  List
    • Resources: 

      Name: customLineItem

      Required: Yes

  • ListTagsResource
    • Description:  Grants permission to list tags of a resource
    • Access:  Read
    • Conditions: 

      aws:TagKeys

      aws:RequestTag/${TagKey}

  • TagResource
    • Description:  Grants permission to tag a resource
    • Access:  Tagging
    • Conditions: 

      aws:TagKeys

      aws:RequestTag/${TagKey}

  • UntagResource
    • Description:  Grants permission to untag a resource
    • Access:  Tagging
    • Conditions: 

      aws:TagKeys

      aws:RequestTag/${TagKey}

  • UpdateBillingGroup
    • Description:  Grants permission to update a billing group
    • Access:  Write
    • Resources: 

      Name: billingGroup

      Required: Yes

  • UpdateCustomLineItem
    • Description:  Grants permission to update a custom line item
    • Access:  Write
    • Resources: 

      Name: customLineItem

      Required: Yes

  • UpdatePricingPlan
    • Description:  Grants permission to update a pricing plan
    • Access:  Write
    • Resources: 

      Name: pricingPlan

      Required: Yes

  • UpdatePricingRule
    • Description:  Grants permission to update a pricing rule
    • Access:  Write
    • Resources: 

      Name: pricingRule

      Required: Yes

    Resources
  • billingGroup
    • Arn:  arn:${Partition}:billingconductor::${Account}:billinggroup/${ResourceId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • pricingPlan
    • Arn:  arn:${Partition}:billingconductor::${Account}:pricingplan/${ResourceId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • pricingRule
    • Arn:  arn:${Partition}:billingconductor::${Account}:pricingrule/${ResourceId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • customLineItem
    • Arn:  arn:${Partition}:billingconductor::${Account}:customlineitem/${ResourceId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

    Conditions
  • aws:RequestTag/${TagKey}
    • Description:  Filters access by the tags that are passed in the request
    • Type:  String
  • aws:ResourceTag/${TagKey}
    • Description:  Filters access by the tags associated with the resource
    • Type:  String
  • aws:TagKeys
    • Description:  Filters access by the tag keys that are passed in the request
    • Type:  String