AWS Invoicing Service (invoicing)

Additions

Actions

• BatchGetInvoiceProfile
  
  • Description:  Grants permission to get invoice profile details for an account in your organization
  • Access:  Read
• CreateInvoiceUnit
  
  • Description:  Grants permission to create an invoice unit for your organization
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteInvoiceUnit
  
  • Description:  Grants permission to update an invoice unit for your organization
  • Access:  Write
  • Resources: 

    Name: invoice-unit

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetInvoiceUnit
  
  • Description:  Grants permission to get invoice units for your organization
  • Access:  Read
  • Resources: 

    Name: invoice-unit

    Required: Yes

• ListInvoiceUnits
  
  • Description:  Grants permission to list invoice units for your organization
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list tags for a resource
  • Access:  Read
  • Resources: 

    Name: invoice-unit

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• TagResource
  
  • Description:  Grants permission to tag a resource
  • Access:  Tagging
  • Resources: 

    Name: invoice-unit

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

• UntagResource
  
  • Description:  Grants permission to untag a resource
  • Access:  Tagging
  • Resources: 

    Name: invoice-unit

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:ResourceTag/${TagKey}

• UpdateInvoiceUnit
  
  • Description:  Grants permission to update an invoice unit for your organization
  • Access:  Write
  • Resources: 

    Name: invoice-unit

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

Resources

• invoice-unit
  
  • Arn:  arn:${Partition}:invoicing::${Account}:invoice-unit/${Identifier}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by allowed set of values for each of the tags
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by tag-value associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by presence of mandatory tags in the request
  • Type:  ArrayOfString