This is an English translation of a Japanese blog. Some content may not be fully translated.
AWS

"You are not authorized to perform this action" Displayed on AWS Cost Management Page

Screen

image-20220826224935408

About This Page

It appears that even if an IAM user has AdministratorAccess permissions, they cannot view the cost management page.

Overview of Managing Access - AWS Billing

Simply activating IAM access does not grant IAM users and roles the permissions required for these Billing Console pages. In addition to activating IAM access, you must attach the required IAM policies to these users or roles. For more information, see “Using Identity-Based Policies (IAM Policies) with AWS Billing.”

To activate the [Activate IAM Access] setting, you must sign in to your AWS account using root user credentials, then select the setting on the My Account page. Activate this setting for each account where you want to allow IAM users and roles access to Billing Console pages. If you use AWS Organizations, activate this setting for each management account or member account where you want to allow IAM users and roles to access console pages.

Procedure

Overview of Managing Access - AWS Billing

To activate IAM user and role access to the Billing and Cost Management console:

  1. Sign in to the AWS Management Console using root account credentials (specifically, the email address and password used to create the AWS account).
  2. In the navigation bar, choose your account name, then choose [My Account ].
  3. Next to [IAM User and Role Access to Billing Information], choose [Edit].
  4. Select the [Activate IAM Access] checkbox to activate access to the Billing and Cost Management pages.
  5. Choose [Update].

image-20220826225245468

image-20220826225311829

The cost management screen is now accessible to non-root users as well.

image-20220826225407147

Suggest an edit on GitHub