Menu
AWS Billing and Cost Management
User Guide (Version 2.0)

Controlling Access for Cost Explorer

How you manage access to the information in Cost Explorer depends on how your AWS account is set up. Your account might be set up to use the AWS Identity and Access Management service to grant different levels of access to different IAM users. Your account might be part of a Consolidated Billing family, in which case it is either a paying account or a linked account. For information about managing access to Billing and Cost Management pages, see Controlling Access For more information about Consolidated Billing, see Paying Bills for Multiple Accounts Using Consolidated Billing.

Granting Cost Explorer Access

You can enable Cost Explorer only if you are the owner of the AWS account and you signed in to the account with your root credentials. If you are a paying account owner, enabling Cost Explorer enables Cost Explorer for the entire Consolidated Billing family. In other words, all linked accounts in the family are also granted access. You cannot grant or deny access individually.

Cost Explorer And IAM Users

An AWS account owner who is not using Consolidated Billing has full access to all Billing and Cost Management information, including Cost Explorer. After you enable Cost Explorer, you should interact with Cost Explorer as an IAM user. If you have permission to view the Billing and Cost Management console, you can use Cost Explorer.

An IAM user must be granted explicit permission to view pages in the Billing and Cost Management console. With the appropriate permissions, the IAM user can view costs for the AWS account that owns the IAM user. For the policy that grants the necessary permissions to an IAM user, see Controlling Access.

Consolidated Billing Considerations

A Consolidated Billing paying account owner has full access to all Billing and Cost Management information for costs incurred under the paying account and under linked accounts, and can view their costs in Cost Explorer.

The owner of a linked account can see costs for that linked account, but cannot see costs for any other account in the Consolidated Billing family.