View a markdown version of this page

Actions, resources, and condition keys for AWS Billing And Cost Management Pricing Calculator - Service Authorization Reference

Actions, resources, and condition keys for AWS Billing And Cost Management Pricing Calculator

AWS Billing And Cost Management Pricing Calculator (service prefix: bcm-pricing-calculator) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS Billing And Cost Management Pricing Calculator

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation IAM action Condition key Possible value(s) Access level

BatchCreateBillScenarioCommitmentModification

bcm-pricing-calculator:CreateBillScenarioCommitmentModification

Write

BatchCreateBillScenarioUsageModification

bcm-pricing-calculator:CreateBillScenarioUsageModification

Write

BatchCreateWorkloadEstimateUsage

bcm-pricing-calculator:CreateWorkloadEstimateUsage

Write

BatchDeleteBillScenarioCommitmentModification

bcm-pricing-calculator:DeleteBillScenarioCommitmentModification

Write

BatchDeleteBillScenarioUsageModification

bcm-pricing-calculator:DeleteBillScenarioUsageModification

Write

BatchDeleteWorkloadEstimateUsage

bcm-pricing-calculator:DeleteWorkloadEstimateUsage

Write

BatchUpdateBillScenarioCommitmentModification

bcm-pricing-calculator:UpdateBillScenarioCommitmentModification

Write

BatchUpdateBillScenarioUsageModification

bcm-pricing-calculator:UpdateBillScenarioUsageModification

Write

BatchUpdateWorkloadEstimateUsage

bcm-pricing-calculator:UpdateWorkloadEstimateUsage

Write

CreateBillEstimate

bcm-pricing-calculator:CreateBillEstimate

Write

bcm-pricing-calculator:TagResource

Tagging, Write

CreateBillScenario

bcm-pricing-calculator:CreateBillScenario

Write

bcm-pricing-calculator:TagResource

Tagging, Write

CreateWorkloadEstimate

bcm-pricing-calculator:CreateWorkloadEstimate

Write

bcm-pricing-calculator:TagResource

Tagging, Write

DeleteBillEstimate

bcm-pricing-calculator:DeleteBillEstimate

Write

DeleteBillScenario

bcm-pricing-calculator:DeleteBillScenario

Write

DeleteWorkloadEstimate

bcm-pricing-calculator:DeleteWorkloadEstimate

Write

GetBillEstimate

bcm-pricing-calculator:GetBillEstimate

Read

GetBillScenario

bcm-pricing-calculator:GetBillScenario

Read

GetPreferences

bcm-pricing-calculator:GetPreferences

Read

GetWorkloadEstimate

bcm-pricing-calculator:GetWorkloadEstimate

Read

ListBillEstimateCommitments

bcm-pricing-calculator:ListBillEstimateCommitments

List

ListBillEstimateInputCommitmentModifications

bcm-pricing-calculator:ListBillEstimateInputCommitmentModifications

List

ListBillEstimateInputUsageModifications

bcm-pricing-calculator:ListBillEstimateInputUsageModifications

List

ListBillEstimateLineItems

bcm-pricing-calculator:ListBillEstimateLineItems

List

ListBillEstimates

bcm-pricing-calculator:ListBillEstimates

List

ListBillScenarioCommitmentModifications

bcm-pricing-calculator:ListBillScenarioCommitmentModifications

List

ListBillScenarioUsageModifications

bcm-pricing-calculator:ListBillScenarioUsageModifications

List

ListBillScenarios

bcm-pricing-calculator:ListBillScenarios

List

ListTagsForResource

bcm-pricing-calculator:ListTagsForResource

Tagging, Write

ListWorkloadEstimateUsage

bcm-pricing-calculator:ListWorkloadEstimateUsage

List

ListWorkloadEstimates

bcm-pricing-calculator:ListWorkloadEstimates

List

TagResource

bcm-pricing-calculator:TagResource

Tagging, Write

UntagResource

bcm-pricing-calculator:UntagResource

Tagging, Write

UpdateBillEstimate

bcm-pricing-calculator:UpdateBillEstimate

Write

UpdateBillScenario

bcm-pricing-calculator:UpdateBillScenario

Write

UpdatePreferences

bcm-pricing-calculator:UpdatePreferences

Write

UpdateWorkloadEstimate

bcm-pricing-calculator:UpdateWorkloadEstimate

Write

Actions defined by AWS Billing And Cost Management Pricing Calculator

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

CreateBillEstimate

Grants permission to create a new bill estimate. Charge is incurred for successful bill estimates

bill-scenario

aws:ResourceTag/${TagKey}

Write

CreateBillScenario

Grants permission to create a new bill scenario

aws:RequestTag/${TagKey}

aws:TagKeys

Write

CreateBillScenarioCommitmentModification

Grants permission to create new commitments or remove existing commitment from a specified bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

Write

CreateBillScenarioUsageModification

Grants permission to create usage in the specified bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

Write

CreateWorkloadEstimate

Grants permission to create a new Workload estimate

aws:RequestTag/${TagKey}

aws:TagKeys

Write

CreateWorkloadEstimateUsage

Grants permission to create usage in the specified workload estimate

workload-estimate*

aws:ResourceTag/${TagKey}

Write

DeleteBillEstimate

Grants permission to delete bill estimate

bill-estimate*

Write

DeleteBillScenario

Grants permission to delete a bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

Write

DeleteBillScenarioCommitmentModification

Grants permission to delete newly added commitments from the specified bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

Write

DeleteBillScenarioUsageModification

Grants permission to delete newly added usage from the specified bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

Write

DeleteWorkloadEstimate

Grants permission to delete the specified workload estimate

workload-estimate*

aws:ResourceTag/${TagKey}

Write

DeleteWorkloadEstimateUsage

Grants permission to delete newly added usage from the specified workload estimate

workload-estimate*

aws:ResourceTag/${TagKey}

Write

GetBillEstimate

Grants permission to retrieve details of a bill estimate including estimated cost

bill-estimate*

Read

GetBillScenario

Grants permission to retrieve information associated with a bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

Read

GetPreferences

Grants permission to retrieve applicable rate type preferences for the account

Read

GetWorkloadEstimate

Grants permission to retrieve information associated with a workload estimate

workload-estimate*

aws:ResourceTag/${TagKey}

Read

ListBillEstimateCommitments

Grants permission to list commitments associated with the specified bill estimate

bill-estimate*

List

ListBillEstimateInputCommitmentModifications

Grants permission to list added or removed commitments for a specified bill estimate

bill-estimate*

List

ListBillEstimateInputUsageModifications

Grants permission to list added or modified usage for a specified bill estimate

bill-estimate*

List

ListBillEstimateLineItems

Grants permission to list result line items for a specified bill estimate

bill-estimate*

List

ListBillEstimates

Grants permission to list bill estimates

List

ListBillScenarioCommitmentModifications

Grants permission to list commitments included in a bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

List

ListBillScenarioUsageModifications

Grants permission to list usage lines of a specified bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

List

ListBillScenarios

Grants permission to list bill scenarios

List

ListTagsForResource

Grants permission to return a list of tags for a resource

Tagging, Write

ListWorkloadEstimateUsage

Grants permission to list usage lines for the specified workload estimate

workload-estimate*

aws:ResourceTag/${TagKey}

List

ListWorkloadEstimates

Grants permission to list workload estimates

List

TagResource

Grants permission to add a tag to a resource

bill-scenario

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

workload-estimate

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

UntagResource

Grants permission to remove a tag from a resource

bill-scenario

aws:ResourceTag/${TagKey}

aws:TagKeys

Tagging, Write

workload-estimate

aws:ResourceTag/${TagKey}

aws:TagKeys

UpdateBillEstimate

Grants permission to update bill estimate name and expiration date time

bill-estimate*

Write

UpdateBillScenario

Grants permission to update name and expiration date time of the specified bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

Write

UpdateBillScenarioCommitmentModification

Grants permission to update commitment group of commitments in the specified bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

Write

UpdateBillScenarioUsageModification

Grants permission to update usage amount, usage hour, and usage group in the specified bill scenario

bill-scenario*

aws:ResourceTag/${TagKey}

Write

UpdatePreferences

Grants permission to update rate type preferences for the account

Write

UpdateWorkloadEstimate

Grants permission to update name and expiration date time of the specified workload estimate

workload-estimate*

aws:ResourceTag/${TagKey}

Write

UpdateWorkloadEstimateUsage

Grants permission to update usage amount and usage group in the specified workload estimate based on the usage id

workload-estimate*

aws:ResourceTag/${TagKey}

Write

Resource types defined by AWS Billing And Cost Management Pricing Calculator

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types ARN Condition keys

bill-estimate

arn:${Partition}:bcm-pricing-calculator::${Account}:bill-estimate/${BillEstimateId}

bill-scenario

arn:${Partition}:bcm-pricing-calculator::${Account}:bill-scenario/${BillScenarioId}

aws:ResourceTag/${TagKey}

workload-estimate

arn:${Partition}:bcm-pricing-calculator::${Account}:workload-estimate/${WorkloadEstimateId}

aws:ResourceTag/${TagKey}

Condition keys for AWS Billing And Cost Management Pricing Calculator

AWS Billing And Cost Management Pricing Calculator defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys Description Type

aws:RequestTag/${TagKey}

Filters access by the tags that are passed in the request

String

aws:ResourceTag/${TagKey}

Filters access by the tags associated with the resource

String

aws:TagKeys

Filters access by the tag keys that are passed in the request

ArrayOfString