Granting AWS billing access to IAM (non-root account) users

By default, IAM users will not be allowed to access the Billing dashboard. This is true even if the user has AdministratorAccess permission. If you use AWS as a non-root/owner account user, but require access to billing and payment, here’s how you can do it.

Create billing IAM policies

1. Go to IAM: https://console.aws.amazon.com/iam/
2. Select Policies > Create policy
   1. Choose a service > Enter “Billing”
   2. Check All billing actions
3. Review > name it “BillingFullAccess” > Create policy

Attach billing policy

You can attach billing policy to users or user groups. For simplicity, let’s assume we are applying it a user.

1. Go to IAM: https://console.aws.amazon.com/iam/
2. Select users > choose the user that you want to apply
3. Select Add permissions > Attach existing policies directly
4. Check BillingFullAccess
5. Review > Add permission

Activating access to the AWS billing console

From AWS documentation,

By default, IAM users and roles within an AWS account can’t access the Billing console pages. This is true even if the IAM user or role has IAM policies that grant access to certain Billing features.

The last step is to enable this permission. To do so,

1. Sign in as root/account owner
2. Click on your username on the top right and select Account
3. Scroll down to IAM User and Role Access to Billing Information
4. Click Edit, check Activate IAM Access
5. Update

And it’s done. You can now login as the IAM user and access the billing dashboard.