billing-portal-user-policy-grants-read-access-to-billing-console-but-deny-access-to-account-settings.json
This IAM identity-based permission policy demonstrates how to grant individual read access to the Billing console but deny access to Account Settings.
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "aws-portal:View*", "Resource": "*" }, { "Effect": "Deny", "Action": "aws-portal:*Account", "Resource": "*" } ] }
Sample Details
Service: billing
Author: AWS
Type: full-example