AWS kebijakan terkelola

Kebijakan terkelola adalah kebijakan berbasis identitas mandiri yang dapat Anda lampirkan ke beberapa pengguna, grup, dan peran di akun Anda. AWS Anda dapat menggunakan kebijakan AWS terkelola untuk mengontrol akses di Penagihan.

Kebijakan AWS terkelola adalah kebijakan mandiri yang dibuat dan dikelola oleh AWS. AWS kebijakan terkelola dirancang untuk memberikan izin untuk banyak kasus penggunaan umum. AWS Kebijakan terkelola memudahkan Anda untuk menetapkan izin yang sesuai untuk pengguna, grup, dan peran daripada jika Anda harus menulis kebijakan sendiri.

Anda tidak dapat mengubah izin yang ditentukan dalam kebijakan AWS terkelola. AWS sesekali memperbarui izin yang ditentukan dalam kebijakan AWS terkelola. Ketika ini terjadi, pembaruan memengaruhi semua entitas pengguna utama (pengguna, grup, dan peran) yang terkait dengan kebijakan tersebut.

Penagihan menyediakan beberapa kebijakan AWS terkelola untuk kasus penggunaan umum.

AWSPurchaseOrdersServiceRolePolicy

Kebijakan terkelola ini memberikan akses penuh ke konsol Billing and Cost Management dan ke konsol pesanan pembelian. Kebijakan ini memungkinkan pengguna untuk melihat, membuat, memperbarui, dan menghapus pesanan pembelian akun.

{
   "Version":"2012-10-17",
   "Statement":[
      {
         "Effect":"Allow",
         "Action":[
            "account:GetAccountInformation",
            "account:GetContactInformation",
            "aws-portal:*Billing",
            "consolidatedbilling:GetAccountBillingRole",
            "invoicing:GetInvoicePDF",
            "payments:GetPaymentInstrument",
            "payments:ListPaymentPreferences",
            "purchase-orders:AddPurchaseOrder",
            "purchase-orders:DeletePurchaseOrder",
            "purchase-orders:GetPurchaseOrder",
            "purchase-orders:ListPurchaseOrderInvoices",
            "purchase-orders:ListPurchaseOrders",
            "purchase-orders:ListTagsForResource",
            "purchase-orders:ModifyPurchaseOrders",
            "purchase-orders:TagResource",
            "purchase-orders:UntagResource",
            "purchase-orders:UpdatePurchaseOrder",
            "purchase-orders:UpdatePurchaseOrderStatus",
            "purchase-orders:ViewPurchaseOrders",
            "tax:ListTaxRegistrations"
         ],
         "Resource":"*"
      }
   ]
}

AWSBillingReadOnlyAccess

Kebijakan terkelola ini memberi pengguna akses untuk melihat AWS Billing and Cost Management konsol.

{
      "Version": "2012-10-17",
      "Statement": [
            {
                "Sid": "VisualEditor0",
                "Effect": "Allow",
                "Action": [
                    "account:GetAccountInformation",
                    "aws-portal:ViewBilling",
                    "billing:GetBillingData",
                    "billing:GetBillingDetails",
                    "billing:GetBillingNotifications",
                    "billing:GetBillingPreferences",
                    "billing:GetContractInformation",
                    "billing:GetCredits",
                    "billing:GetIAMAccessPreference",
                    "billing:GetSellerOfRecord", 
                    "billing:ListBillingViews",
                    "budgets:DescribeBudgetActionsForBudget",
                    "budgets:DescribeBudgetAction",
                    "budgets:DescribeBudgetActionsForAccount",
                    "budgets:DescribeBudgetActionHistories",
                    "budgets:ViewBudget",
                    "ce:DescribeCostCategoryDefinition",
                    "ce:GetCostAndUsage",
                    "ce:GetDimensionValues",
                    "ce:GetTags",
                    "ce:ListCostCategoryDefinitions",
                    "ce:ListCostAllocationTags",
                    "ce:ListCostAllocationTagBackfillHistory",
                    "ce:ListTagsForResource",
                    "consolidatedbilling:GetAccountBillingRole",
                    "consolidatedbilling:ListLinkedAccounts",
                    "cur:DescribeReportDefinitions",
                    "cur:GetClassicReport",
                    "cur:GetClassicReportPreferences", 
                    "cur:GetUsageReport",
                    "freetier:GetFreeTierAlertPreference",
                    "freetier:GetFreeTierUsage",
                    "invoicing:GetInvoiceEmailDeliveryPreferences",
                    "invoicing:GetInvoicePDF",
                    "invoicing:ListInvoiceSummaries",
                    "mapcredit:ListAssociatedPrograms",
                    "mapcredit:ListQuarterCredits",    
                    "mapcredit:ListQuarterSpend",
                    "payments:GetPaymentInstrument", 
                    "payments:GetPaymentStatus",
                    "payments:ListPaymentInstruments",
                    "payments:ListPaymentPreferences",
                    "payments:ListTagsForResource",
                    "purchase-orders:GetPurchaseOrder",
                    "purchase-orders:ListPurchaseOrderInvoices",
                    "purchase-orders:ListPurchaseOrders",
                    "purchase-orders:ListTagsForResource",
                    "purchase-orders:ViewPurchaseOrders",
                    "sustainability:GetCarbonFootprintSummary",
                    "tax:GetTaxInheritance",
                    "tax:GetTaxRegistrationDocument",
                    "tax:ListTaxRegistrations"
            ],
        "Resource": "*"
      }
   ]
}

Billing

Kebijakan terkelola ini memberi pengguna izin untuk melihat dan mengedit AWS Billing and Cost Management konsol. Ini termasuk melihat penggunaan akun, memodifikasi anggaran dan metode pembayaran.

{
    "Version": "2012-10-17",
    "Statement": [
      {
        "Sid": "VisualEditor0",
        "Effect": "Allow",
        "Action": [            
            "account:GetAccountInformation",
            "aws-portal:*Billing",
            "aws-portal:*PaymentMethods",
            "aws-portal:*Usage",
            "billing:GetBillingData",
            "billing:GetBillingDetails",
            "billing:GetBillingNotifications",
            "billing:GetBillingPreferences",
            "billing:GetContractInformation",
            "billing:GetCredits",
            "billing:GetIAMAccessPreference",
            "billing:GetSellerOfRecord",
            "billing:ListBillingViews",
            "billing:PutContractInformation",
            "billing:RedeemCredits",
            "billing:UpdateBillingPreferences",
            "billing:UpdateIAMAccessPreference",
            "budgets:CreateBudgetAction",
            "budgets:DeleteBudgetAction",
            "budgets:DescribeBudgetActionsForBudget",
            "budgets:DescribeBudgetAction",
            "budgets:DescribeBudgetActionsForAccount",
            "budgets:DescribeBudgetActionHistories",
            "budgets:ExecuteBudgetAction",
            "budgets:ModifyBudget", 
            "budgets:UpdateBudgetAction",
            "budgets:ViewBudget", 
            "ce:CreateNotificationSubscription", 
            "ce:CreateReport", 
            "ce:CreateCostCategoryDefinition",
            "ce:DeleteNotificationSubscription",
            "ce:DeleteCostCategoryDefinition",
            "ce:DescribeCostCategoryDefinition",
            "ce:DeleteReport", 
            "ce:GetCostAndUsage",
            "ce:GetDimensionValues",
            "ce:GetTags",
            "ce:ListCostAllocationTags",
            "ce:ListCostAllocationTagBackfillHistory",
            "ce:ListCostCategoryDefinitions",
            "ce:ListTagsForResource",
            "ce:StartCostAllocationTagBackfill",
            "ce:UpdateCostAllocationTagsStatus",
            "ce:UpdateNotificationSubscription",
            "ce:TagResource",
            "ce:UpdatePreferences", 
            "ce:UpdateReport",
            "ce:UntagResource",
            "ce:UpdateCostCategoryDefinition",
            "consolidatedbilling:GetAccountBillingRole",
            "consolidatedbilling:ListLinkedAccounts",
            "cur:DeleteReportDefinition", 
            "cur:DescribeReportDefinitions", 
            "cur:GetClassicReport",
            "cur:GetClassicReportPreferences",
            "cur:GetUsageReport",
            "cur:ModifyReportDefinition", 
            "cur:PutClassicReportPreferences",
            "cur:PutReportDefinition", 
            "cur:ValidateReportDestination",
            "freetier:GetFreeTierAlertPreference",
            "freetier:GetFreeTierUsage",
            "freetier:PutFreeTierAlertPreference",
            "invoicing:GetInvoiceEmailDeliveryPreferences",
            "invoicing:GetInvoicePDF",
            "invoicing:ListInvoiceSummaries",
            "invoicing:PutInvoiceEmailDeliveryPreferences",
            "mapcredit:ListAssociatedPrograms",
            "mapcredit:ListQuarterCredits",    
            "mapcredit:ListQuarterSpend",
            "payments:CreatePaymentInstrument",
            "payments:DeletePaymentInstrument",
            "payments:GetPaymentInstrument",
            "payments:GetPaymentStatus",
            "payments:ListPaymentInstruments",
            "payments:ListPaymentPreferences",
            "payments:ListTagsForResource",
            "payments:MakePayment",
            "payments:TagResource",
            "payments:UntagResource",
            "payments:UpdatePaymentInstrument",
            "payments:ListPaymentInstruments",
            "payments:UpdatePaymentPreferences",
            "pricing:DescribeServices",
            "purchase-orders:AddPurchaseOrder",
            "purchase-orders:DeletePurchaseOrder",
            "purchase-orders:GetPurchaseOrder",
            "purchase-orders:ListPurchaseOrderInvoices",
            "purchase-orders:ListPurchaseOrders",
            "purchase-orders:ListTagsForResource",
            "purchase-orders:ModifyPurchaseOrders",
            "purchase-orders:TagResource",
            "purchase-orders:UntagResource",
            "purchase-orders:UpdatePurchaseOrder",
            "purchase-orders:UpdatePurchaseOrderStatus",
            "purchase-orders:ViewPurchaseOrders",
            "support:AddAttachmentsToSet",
            "support:CreateCase",
            "sustainability:GetCarbonFootprintSummary",
            "tax:BatchPutTaxRegistration",
            "tax:DeleteTaxRegistration",
            "tax:GetExemptions",
            "tax:GetTaxInheritance",
            "tax:GetTaxInterview",
            "tax:GetTaxRegistration",
            "tax:GetTaxRegistrationDocument",
            "tax:ListTaxRegistrations",
            "tax:PutTaxInheritance",
            "tax:PutTaxInterview",
            "tax:PutTaxRegistration",
            "tax:UpdateExemptions"
        ],
       "Resource": "*"
      }
   ]
}

AWSAccountActivityAccess

Kebijakan terkelola ini memberikan izin kepada pengguna untuk melihat halaman aktivitas Akun.

{
      "Version": "2012-10-17",
      "Statement": [
            {
              "Sid": "VisualEditor0",
              "Effect": "Allow",
              "Action": [
                "account:GetRegionOptStatus",
                "account:GetAccountInformation",
                "account:GetAlternateContact",
                "account:GetChallengeQuestions",
                "account:GetContactInformation",
                "account:ListRegions",
                "aws-portal:ViewBilling",
                "billing:GetIAMAccessPreference",
                "billing:GetSellerOfRecord",
                "payments:ListPaymentPreferences"
        ],
        "Resource": "*"
      }
   ]
}

AWSPriceListServiceFullAccess

Kebijakan terkelola ini memberi pengguna akses penuh ke Layanan Daftar AWS Harga.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AWSPriceListServiceFullAccess",
            "Effect": "Allow",
            "Action": [
                "pricing:*"
            ],
            "Resource": "*"
        }
    ]
}

Pembaruan kebijakan AWS terkelola untuk AWS Penagihan

Lihat detail tentang pembaruan kebijakan AWS terkelola untuk AWS Penagihan sejak layanan ini mulai melacak perubahan ini. Untuk peringatan otomatis tentang perubahan pada halaman ini, berlangganan umpan RSS di halaman riwayat Dokumen AWS Penagihan.

Perubahan	Deskripsi	Tanggal
AWSPriceListServiceFullAccess — Kebijakan yang diperbarui	Kami menambahkan dokumentasi untuk AWSPriceListServiceFullAccess kebijakan untuk Layanan Daftar AWS Harga. Kebijakan ini awalnya diluncurkan pada 2017. Kami Sid": "AWSPriceListServiceFullAccess memperbarui kebijakan yang ada.	Juni 24,2024
Penagihan dan AWSBillingReadOnlyAccess— Perbarui ke kebijakan yang ada	Kami menambahkan izin terkait tag alokasi biaya berikut ke: Billing payments:ListTagsForResource payments:TagResource payments:UntagResource payments:ListPaymentInstruments payments:ListPaymentInstruments payments:UpdatePaymentInstrument Kami menambahkan izin terkait tag berikut ke: AWSBillingReadOnlyAccess payments:ListTagsForResource payments:ListPaymentInstruments	31 Mei 2024
Penagihan dan AWSBillingReadOnlyAccess— Perbarui ke kebijakan yang ada	Kami menambahkan izin terkait tag alokasi biaya berikut ke: Billing ce:ListCostAllocationTagBackfillHistory ce:StartCostAllocationTagBackfill ce:GetTags ce:GetDimensionValues Kami menambahkan izin terkait tag alokasi biaya berikut ke: AWSBillingReadOnlyAccess ce:ListCostAllocationTagBackfillHistory ce:GetTags ce:GetDimensionValues	Maret 25, 2024
Penagihan dan AWSBillingReadOnlyAccess— Perbarui ke kebijakan yang ada	Kami menambahkan izin terkait tag alokasi biaya berikut ke: Billing ce:ListCostAllocationTags ce:UpdateCostAllocationTagsStatus Kami menambahkan izin terkait tag alokasi biaya berikut ke: AWSBillingReadOnlyAccess ce:ListCostAllocationTags	26 Juli 2023
AWSPurchaseOrdersServiceRolePolicy, Penagihan, dan AWSBillingReadOnlyAccess— Perbarui ke kebijakan yang ada	Kami menambahkan izin terkait tag pesanan pembelian berikut ke dan: Billing AWSPurchaseOrdersServiceRolePolicy purchase-orders:ListTagsForResource purchase-orders:TagResource purchase-orders:UntagResource Kami menambahkan izin terkait tag berikut ke: AWSBillingReadOnlyAccess purchase-orders:ListTagsForResource	Juli 17, 2023
AWSPurchaseOrdersServiceRolePolicy, Penagihan, dan AWSBillingReadOnlyAccess— Perbarui ke kebijakan yang ada AWSAccountActivityAccess— Kebijakan AWS terkelola baru yang didokumentasikan untuk AWS Penagihan	Ditambahkan tindakan diperbarui ditetapkan di semua kebijakan.	Maret 06, 2023
AWSPurchaseOrdersServiceRolePolicy – Pembaruan ke kebijakan yang ada	AWS Penagihan menghapus izin yang tidak perlu.	18 November 2021
AWS Penagihan mulai melacak perubahan	AWS Penagihan mulai melacak perubahan untuk kebijakan yang AWS dikelola.	18 November 2021