0

In my AWS account I created a user and gave it full permissions using the AdministratorAccess policy. That's the document for the policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "*",
      "Resource": "*"
    }
  ]
}

Still, when I login using this user, I can't see my billing information. It says I don't have the permissions.

Avi
  • 123
  • 1
  • 4

1 Answers1

6

By default the AWS billing data is only accessible to the root account and not subject to IAM. In order to share access the root account has to go to the "Account Stettings" and enable "IAM User Access to Billing Information".

mschuett
  • 3,146
  • 21
  • 21
  • Yep. There are several instances of IAM permissions that must be *explicitly* granted because they are not included in `*`. – ceejayoz Jul 17 '16 at 14:42
  • @ceejayoz - Could you mention other such cases? So I would avoid them beforehand. – Avi Jul 17 '16 at 14:46