{"id":1856,"date":"2022-08-23T17:02:56","date_gmt":"2022-08-23T09:02:56","guid":{"rendered":"https:\/\/tongwing.woon.sg\/blog\/?p=1856"},"modified":"2022-08-23T17:02:56","modified_gmt":"2022-08-23T09:02:56","slug":"granting-aws-billing-access-to-iam-non-root-account-users","status":"publish","type":"post","link":"https:\/\/tongwing.woon.sg\/blog\/granting-aws-billing-access-to-iam-non-root-account-users\/","title":{"rendered":"Granting AWS billing access to IAM (non-root account) users"},"content":{"rendered":"\n<p>By default, IAM users will not be allowed to access the Billing dashboard. This is true even if the user has AdministratorAccess permission. If you use AWS as a non-root\/owner account user, but require access to billing and payment, here&#8217;s how you can do it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Create billing IAM policies<\/h2>\n\n\n\n<ol><li>Go to IAM: <a rel=\"noreferrer noopener\" href=\"https:\/\/console.aws.amazon.com\/iam\/\" target=\"_blank\">https:\/\/console.aws.amazon.com\/iam\/<\/a><\/li><li>Select Policies > Create policy<ol><li>Choose a service > Enter &#8220;Billing&#8221;<\/li><li>Check <code>All billing actions<\/code><\/li><\/ol><\/li><li>Review > name it &#8220;BillingFullAccess&#8221; > Create policy<\/li><\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/3.png\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"370\" src=\"https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/3-1024x370.png\" alt=\"\" class=\"wp-image-1857\" srcset=\"https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/3-1024x370.png 1024w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/3-300x108.png 300w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/3-768x277.png 768w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/3-1200x433.png 1200w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/3.png 1210w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Attach billing policy<\/h2>\n\n\n\n<p>You can attach billing policy to users or user groups. For simplicity, let&#8217;s assume we are applying it a user.<\/p>\n\n\n\n<ol><li>Go to IAM: <a rel=\"noreferrer noopener\" href=\"https:\/\/console.aws.amazon.com\/iam\/\" target=\"_blank\">https:\/\/console.aws.amazon.com\/iam\/<\/a><\/li><li>Select users > choose the user that you want to apply<\/li><li>Select Add permissions > Attach existing policies directly<\/li><li>Check <code>BillingFullAccess<\/code><\/li><li>Review > Add permission<\/li><\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/4.png\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"459\" src=\"https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/4-1024x459.png\" alt=\"\" class=\"wp-image-1858\" srcset=\"https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/4-1024x459.png 1024w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/4-300x135.png 300w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/4-768x344.png 768w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/4-1200x538.png 1200w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/4.png 1425w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Activating access to the AWS billing console<\/h2>\n\n\n\n<p>From <a href=\"https:\/\/docs.aws.amazon.com\/awsaccountbilling\/latest\/aboutv2\/control-access-billing.html#ControllingAccessWebsite-Activate\" target=\"_blank\" rel=\"noreferrer noopener\">AWS documentation<\/a>, <\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-style-default\"><p>By default, IAM users and roles within an AWS account can&#8217;t access the Billing console pages. This is true even if the IAM user or role has IAM policies that grant access to certain Billing features.<\/p><\/blockquote>\n\n\n\n<p>The last step is to enable this permission. To do so,<\/p>\n\n\n\n<ol><li>Sign in as root\/account owner<\/li><li>Click on your username on the top right and select Account<\/li><li>Scroll down to IAM User and Role Access to Billing Information<\/li><li>Click Edit, check <code>Activate IAM Access<\/code><\/li><li>Update<\/li><\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/5.png\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"622\" src=\"https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/5-1024x622.png\" alt=\"\" class=\"wp-image-1859\" srcset=\"https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/5-1024x622.png 1024w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/5-300x182.png 300w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/5-768x466.png 768w, https:\/\/tongwing.woon.sg\/blog\/wp-content\/uploads\/2022\/08\/5.png 1038w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p>And it&#8217;s done. You can now login as the IAM user and access the billing dashboard.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By default, IAM users will not be allowed to access the Billing dashboard. This is true even if the user has AdministratorAccess permission. If you use AWS as a non-root\/owner account user, but require access to billing and payment, here&#8217;s how you can do it. Create billing IAM policies Go to IAM: https:\/\/console.aws.amazon.com\/iam\/ Select Policies [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24,2],"tags":[],"_links":{"self":[{"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/posts\/1856"}],"collection":[{"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/comments?post=1856"}],"version-history":[{"count":2,"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/posts\/1856\/revisions"}],"predecessor-version":[{"id":1861,"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/posts\/1856\/revisions\/1861"}],"wp:attachment":[{"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/media?parent=1856"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/categories?post=1856"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tongwing.woon.sg\/blog\/wp-json\/wp\/v2\/tags?post=1856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}