@turbot/aws-billing
The aws-billing mod contains resource, control and policy definitions for AWS Billing service.
Resource Types
Resource types covered by this mod:
Permissions
Taking a look at permissions and associated grant levels for each permission for Billing:
Permission | Grant Level | Help |
---|---|---|
account:CloseAccount | None | |
account:DeleteAlternateContact | None | |
account:DisableRegion | Owner | |
account:EnableRegion | Owner | |
account:GetAccountInformation | Metadata | |
account:GetAlternateContact | Metadata | |
account:GetChallengeQuestions | Metadata | |
account:GetContactInformation | Metadata | |
account:GetRegionOptStatus | Metadata | |
account:PutAlternateContact | Owner | |
account:PutChallengeQuestions | Owner | |
account:PutContactInformation | Owner | |
billing:GetBillingData | Metadata | |
billing:GetBillingDetails | Metadata | |
billing:GetBillingNotifications | Metadata | |
billing:GetBillingPreferences | Metadata | |
billing:GetContractInformation | Metadata | |
billing:GetCredits | Metadata | |
billing:GetIAMAccessPreference | Metadata | |
billing:GetSellerOfRecord | Metadata | |
billing:ListBillingViews | Metadata | |
billing:PutContractInformation | Owner | |
billing:RedeemCredits | Owner | |
billing:UpdateBillingPreferences | Owner | |
billing:UpdateIAMAccessPreference | Owner | |
budgets:CreateBudget | Owner | |
budgets:CreateNotification | Admin | |
budgets:CreateSubscriber | Admin | |
budgets:DeleteBudget | Owner | |
budgets:DeleteNotification | Admin | |
budgets:DeleteSubscriber | Admin | |
budgets:DescribeBudget | Metadata | |
budgets:DescribeBudgetPerformanceHistory | Metadata | |
budgets:DescribeBudgets | Metadata | |
budgets:DescribeNotificationsForBudget | Metadata | |
budgets:DescribeSubscribersForNotification | Metadata | |
budgets:ModifyBudget | Owner | |
budgets:UpdateBudget | Owner | |
budgets:UpdateNotification | Admin | |
budgets:UpdateSubscriber | Admin | |
budgets:ViewBudget | Metadata | |
consolidatedbilling:GetAccountBillingRole | Metadata | |
consolidatedbilling:ListLinkedAccounts | Metadata | |
cur:DeleteReportDefinition | Admin | |
cur:DescribeReportDefinitions | Metadata | |
cur:GetUsageReport | Metadata | |
cur:ModifyReportDefinition | Admin | |
cur:PutReportDefinition | Admin | |
freetier:GetFreeTierAlertPreference | Metadata | |
freetier:GetFreeTierUsage | Metadata | |
freetier:PutFreeTierAlertPreference | Owner | |
invoicing:GetInvoiceEmailDeliveryPreferences | Metadata | |
invoicing:GetInvoicePDF | Metadata | |
invoicing:ListInvoiceSummaries | Metadata | |
invoicing:PutInvoiceEmailDeliveryPreferences | Owner | |
payments:CreatePaymentInstrument | Owner | |
payments:DeletePaymentInstrument | Owner | |
payments:GetPaymentInstrument | Metadata | |
payments:GetPaymentStatus | Metadata | |
payments:ListPaymentPreferences | Metadata | |
payments:MakePayment | None | |
payments:UpdatePaymentPreferences | None | |
sustainability:GetCarbonFootprintSummary | Metadata | |
tax:BatchPutTaxRegistration | None | |
tax:DeleteTaxRegistration | None | |
tax:GetExemptions | Metadata | |
tax:GetTaxInheritance | Metadata | |
tax:GetTaxInterview | Metadata | |
tax:GetTaxRegistration | Metadata | |
tax:GetTaxRegistrationDocument | Metadata | |
tax:ListTaxRegistrations | Metadata | |
tax:PutTaxInheritance | Metadata | |
tax:PutTaxInterview | Metadata | |
tax:PutTaxRegistration | Metadata | |
tax:UpdateExemptions | None |
Learn More About Guardrails
- Setting Policies Tutorial
- Mods Overview
- Policies Overview
- Resources Overview
- Common Policies and Controls
Recommended Version
Version
5.3.0
Released On
Aug 11, 2023
Depends On
Resource Types
Policy Types
- AWS > Billing > API Enabled
- AWS > Billing > Enabled
- AWS > Billing > Permissions
- AWS > Billing > Permissions > Levels
- AWS > Billing > Permissions > Levels > Modifiers
- AWS > Billing > Permissions > Lockdown
- AWS > Billing > Permissions > Lockdown > API Boundary
- AWS > Turbot > Permissions > Compiled > API Boundary > @turbot/aws-billing
- AWS > Turbot > Permissions > Compiled > Levels > @turbot/aws-billing
- AWS > Turbot > Permissions > Compiled > Service Permissions > @turbot/aws-billing
Release Notes
5.3.0 (2023-08-11)
What's new?
- Rebranded to a Turbot Guardrails Mod. To maintain compatibility, none of the existing resource types, control types or policy types have changed, your existing configurations and settings will continue to work as before.
Bug fixes
- We've removed support for the now retired
aws-portal:*
permissions. Things will continue to work smoothly as before.
5.2.0 (2023-06-30)
What's new?
- We've added the new fine-grained
account:*
,consolidatedbilling:*
,billing:*
,freetier:*
,invoicing:*
,payments:*
, andtax:*
permissions which are replacing the existingaws-portal:*
permissions soon. Things will continue to work smoothly as before. - README.md file is now available for users to check details about the resource types and service permissions that the mod covers.
5.1.0 (2022-05-06)
What's new?
AWS/Billing/Metadata
now includes sustainability permissions for Carbon Footprint Tool.
5.0.1 (2021-06-03)
Bug fixes
AWS/Billing/Owner
now includes budget permissions, which allows you to set custom budgets to track your cost and usage and setup alerts.
5.0.0 (2021-04-19)
Resource Types
Added
- AWS > Billing
Policy Types
Added
- AWS > Billing > API Enabled
- AWS > Billing > Enabled
- AWS > Billing > Permissions
- AWS > Billing > Permissions > Levels
- AWS > Billing > Permissions > Levels > Modifiers
- AWS > Billing > Permissions > Lockdown
- AWS > Billing > Permissions > Lockdown > API Boundary
- AWS > Turbot > Permissions > Compiled > API Boundary > @turbot/aws-billing
- AWS > Turbot > Permissions > Compiled > Levels > @turbot/aws-billing
- AWS > Turbot > Permissions > Compiled > Service Permissions > @turbot/aws-billing