Operations Actions Resource types Condition keys

Actions, resources, and condition keys for AWS Billing and Cost Management Dashboards

AWS Billing and Cost Management Dashboards (service prefix: bcm-dashboards) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by AWS Billing and Cost Management Dashboards
Actions defined by AWS Billing and Cost Management Dashboards
Resource types defined by AWS Billing and Cost Management Dashboards
Condition keys for AWS Billing and Cost Management Dashboards

API operations defined by AWS Billing and Cost Management Dashboards

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
CreateDashboard	bcm-dashboards:CreateDashboard			Write
CreateDashboard	bcm-dashboards:TagResource			Tagging, Write
CreateScheduledReport	bcm-dashboards:CreateScheduledReport			Write
	bcm-dashboards:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	bcm-dashboards.amazonaws.com	Write
DeleteDashboard	bcm-dashboards:DeleteDashboard			Write
DeleteScheduledReport	bcm-dashboards:DeleteScheduledReport			Write
ExecuteScheduledReport	bcm-dashboards:ExecuteScheduledReport			Write
GetDashboard	bcm-dashboards:GetDashboard			Read
GetResourcePolicy	bcm-dashboards:GetResourcePolicy			Read
GetScheduledReport	bcm-dashboards:GetScheduledReport			Read
ListDashboards	bcm-dashboards:ListDashboards			Read
ListScheduledReports	bcm-dashboards:ListScheduledReports			List
ListTagsForResource	bcm-dashboards:ListTagsForResource			Read
TagResource	bcm-dashboards:TagResource			Tagging, Write
UntagResource	bcm-dashboards:UntagResource			Tagging, Write
UpdateDashboard	bcm-dashboards:UpdateDashboard			Write
UpdateScheduledReport	bcm-dashboards:UpdateScheduledReport			Write
UpdateScheduledReport	iam:PassRole	iam:PassedToService	bcm-dashboards.amazonaws.com	Write

Actions defined by AWS Billing and Cost Management Dashboards

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Condition keys	Access level
CreateDashboard	Grants permission to create a dashboard		Write
CreateScheduledReport	Grants permission to create a scheduled report	aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteDashboard	Grants permission to delete a dashboard		Write
DeleteScheduledReport	Grants permission to delete a scheduled report		Write
ExecuteScheduledReport	Grants permission to execute a scheduled report		Write
GetDashboard	Grants permission to get dashboard information		Read
GetResourcePolicy	Grants permission to get the resource policy for a dashboard		Read
GetScheduledReport	Grants permission to get scheduled report information		Read
ListDashboards	Grants permission to list information about all of the dashboards for a user		Read
ListScheduledReports	Grants permission to list information about all of the scheduled reports for a user		List
ListTagsForResource	Grants permission to list all of the tags for a resource		Read
TagResource	Grants permission to create a tag for a resource	aws:RequestTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove a tag for a resource	aws:TagKeys	Tagging, Write
UpdateDashboard	Grants permission to update an existing dashboard		Write
UpdateScheduledReport	Grants permission to update an existing scheduled report		Write

Resource types defined by AWS Billing and Cost Management Dashboards

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
dashboard	arn:${Partition}:bcm-dashboards::${Account}:dashboard/${DashboardName}	aws:ResourceTag/${TagKey} aws:TagKeys
scheduled-report	arn:${Partition}:bcm-dashboards::${Account}:scheduled-report/${ScheduledReportName}	aws:ResourceTag/${TagKey} aws:TagKeys

Resource types

ARN

Condition keys

dashboard

arn:${Partition}:bcm-dashboards::${Account}:dashboard/${DashboardName}

aws:ResourceTag/${TagKey}

aws:TagKeys

scheduled-report

arn:${Partition}:bcm-dashboards::${Account}:scheduled-report/${ScheduledReportName}

aws:ResourceTag/${TagKey}

aws:TagKeys

Condition keys for AWS Billing and Cost Management Dashboards

AWS Billing and Cost Management Dashboards defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by tag key-value pairs attached to the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Billing (billing)

AWS Billing And Cost Management Data Exports (bcm-data-exports)