AWS Documentation » Catalog » Examples of IAM Permission Policies » IAM Permission Policies - Samples for AWS Billing and Cost Management » billing-portal-user-policy-grants-read-access-to-billing-console-but-deny-access-to-account-settings.json

billing-portal-user-policy-grants-read-access-to-billing-console-but-deny-access-to-account-settings.json

This IAM identity-based permission policy demonstrates how to grant individual read access to the Billing console but deny access to Account Settings.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "aws-portal:View*",
            "Resource": "*"
        },
        {
            "Effect": "Deny",
            "Action": "aws-portal:*Account",
            "Resource": "*"
        }
    ]
}

Sample Details

Service: billing

Author: AWS

Type: full-example