View a markdown version of this page

Actions, resources, and condition keys for AWS Budget Service - Service Authorization Reference

Actions, resources, and condition keys for AWS Budget Service

AWS Budget Service (service prefix: budgets) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS Budget Service

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

CreateBudget

budgets:ModifyBudget

Write

budgets:TagResource

Tagging, Write

aws-portal:ModifyBilling

Write

CreateBudgetAction

budgets:CreateBudgetAction

Write

budgets:TagResource

Tagging, Write

aws-portal:ModifyBilling

Write

iam:PassRole

iam:PassedToService

budgets.amazonaws.com

Write

CreateNotification

budgets:ModifyBudget

Write

aws-portal:ModifyBilling

Write

CreateSubscriber

budgets:ModifyBudget

Write

aws-portal:ModifyBilling

Write

DeleteBudget

budgets:ModifyBudget

Write

aws-portal:ModifyBilling

Write

DeleteBudgetAction

budgets:DeleteBudgetAction

Write

aws-portal:ModifyBilling

Write

DeleteNotification

budgets:ModifyBudget

Write

aws-portal:ModifyBilling

Write

DeleteSubscriber

budgets:ModifyBudget

Write

aws-portal:ModifyBilling

Write

DescribeBudget

budgets:ViewBudget

Read

aws-portal:ViewBilling

Read

DescribeBudgetAction

budgets:DescribeBudgetAction

Read

aws-portal:ViewBilling

Read

DescribeBudgetActionHistories

budgets:DescribeBudgetActionHistories

Read

aws-portal:ViewBilling

Read

DescribeBudgetActionsForAccount

budgets:DescribeBudgetActionsForAccount

Read

aws-portal:ViewBilling

Read

DescribeBudgetActionsForBudget

budgets:DescribeBudgetActionsForBudget

Read

aws-portal:ViewBilling

Read

DescribeBudgetNotificationsForAccount

budgets:ViewBudget

Read

aws-portal:ViewBilling

Read

DescribeBudgetPerformanceHistory

budgets:ViewBudget

Read

aws-portal:ViewBilling

Read

DescribeBudgets

budgets:ViewBudget

Read

aws-portal:ViewBilling

Read

DescribeNotificationsForBudget

budgets:ViewBudget

Read

aws-portal:ViewBilling

Read

DescribeSubscribersForNotification

budgets:ViewBudget

Read

aws-portal:ViewBilling

Read

ExecuteBudgetAction

budgets:ExecuteBudgetAction

Write

aws-portal:ModifyBilling

Write

ListTagsForResource

budgets:ListTagsForResource

Read

aws-portal:ViewBilling

Read

TagResource

budgets:TagResource

Tagging, Write

aws-portal:ModifyBilling

Write

UntagResource

budgets:UntagResource

Tagging, Write

aws-portal:ModifyBilling

Write

UpdateBudget

budgets:ModifyBudget

Write

aws-portal:ModifyBilling

Write

UpdateBudgetAction

budgets:UpdateBudgetAction

Write

aws-portal:ModifyBilling

Write

iam:PassRole

iam:PassedToService

budgets.amazonaws.com

Write

UpdateNotification

budgets:ModifyBudget

Write

aws-portal:ModifyBilling

Write

UpdateSubscriber

budgets:ModifyBudget

Write

aws-portal:ModifyBilling