amazon-web-services - AWS IAM Polciy 允许修改账单联系人

Question

我已将以下策略分配给 IAM 用户，该用户授予计费的完全权限。

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "aws-portal:*Billing",
                "awsbillingconsole:*Billing",
                "aws-portal:*Usage",
                "awsbillingconsole:*Usage",
                "aws-portal:*PaymentMethods",
                "awsbillingconsole:*PaymentMethods",
                "budgets:ViewBudget",
                "budgets:ModifyBudget",
                "cur:*",
                "purchase-orders:*PurchaseOrders"
            ],
            "Resource": "*"
        }
    ]
}

此策略不允许用户修改备用计费联系人。替代计费联系人设置位于 下https://console.aws.amazon.com/billing/home?#/account。无论如何都可以在不授予管理员权限的情况下实现这一目标。

标签： amazon-web-servicesamazon-iam

Answer 1

尝试授予所有aws-portal操作

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "aws-portal:*",
            "Resource": "*"
        }
    ]
}