View a markdown version of this page

Actions, resources, and condition keys for AWS Cost Explorer Service - Service Authorization Reference

Actions, resources, and condition keys for AWS Cost Explorer Service

AWS Cost Explorer Service (service prefix: ce) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS Cost Explorer Service

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

CreateAnomalyMonitor

ce:CreateAnomalyMonitor

Write

ce:TagResource

Tagging, Write

CreateAnomalySubscription

ce:CreateAnomalySubscription

Write

ce:TagResource

Tagging, Write

CreateCostCategoryDefinition

ce:CreateCostCategoryDefinition

Write

ce:TagResource

Tagging, Write

DeleteAnomalyMonitor

ce:DeleteAnomalyMonitor

Write

DeleteAnomalySubscription

ce:DeleteAnomalySubscription

Write

DeleteCostCategoryDefinition

ce:DeleteCostCategoryDefinition

Write

DescribeCostCategoryDefinition

ce:DescribeCostCategoryDefinition

Read

GetAnomalies

ce:GetAnomalies

Read

GetAnomalyMonitors

ce:GetAnomalyMonitors

Read

GetAnomalySubscriptions

ce:GetAnomalySubscriptions

Read

GetApproximateUsageRecords

ce:GetApproximateUsageRecords

Read

GetCommitmentPurchaseAnalysis

ce:GetCommitmentPurchaseAnalysis

Read

GetCostAndUsage

ce:GetCostAndUsage

Read

aws-portal:ViewBilling

Read

GetCostAndUsageComparisons

ce:GetCostAndUsageComparisons

Read

GetCostAndUsageWithResources

ce:GetCostAndUsageWithResources

Read

aws-portal:ViewBilling

Read

GetCostCategories

ce:GetCostCategories

Read

aws-portal:ViewBilling

Read

GetCostComparisonDrivers

ce:GetCostComparisonDrivers

Read

GetCostForecast

ce:GetCostForecast

Read

aws-portal:ViewBilling

Read

GetDimensionValues

ce:GetDimensionValues

Read

aws-portal:ViewBilling

Read

GetReservationCoverage

ce:GetReservationCoverage

Read

aws-portal:ViewBilling

Read

GetReservationPurchaseRecommendation

ce:GetReservationPurchaseRecommendation

Read

aws-portal:ViewBilling

Read

GetReservationUtilization

ce:GetReservationUtilization

Read

aws-portal:ViewBilling

Read

GetRightsizingRecommendation

ce:GetRightsizingRecommendation

Read

aws-portal:ViewBilling

Read

GetSavingsPlanPurchaseRecommendationDetails

ce:GetSavingsPlanPurchaseRecommendationDetails

Read

aws-portal:ViewBilling

Read

GetSavingsPlansCoverage

ce:GetSavingsPlansCoverage

Read

aws-portal:ViewBilling

Read

GetSavingsPlansPurchaseRecommendation

ce:GetSavingsPlansPurchaseRecommendation