billing-policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AllowS3CURBucketAccess",
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetObject"
            ],
            "Resource": [
                "arn:aws:s3:::CUR_BUCKET_NAME/*",
                "arn:aws:s3:::CUR_BUCKET_NAME"
            ]
        },
        {
            "Sid": "BillingDataAccess",
            "Effect": "Allow",
            "Action": [
                "account:Get*",
                "account:List*",
                "billing:Get*",
                "billing:List*",
                "aws-portal:ViewUsage",
                "aws-portal:ViewBilling",
                "aws-portal:ViewAccount",
                "aws-portal:ViewPaymentMethods",
                "aws-portal:GetConsoleActionSetEnforced",
                "budgets:View*",
                "budgets:Describe*",
                "bcm-data-exports:CreateExport",
                "bcm-data-exports:Get*",
                "bcm-data-exports:List*",
                "bcm-data-exports:UpdateExport",
                "billingconductor:Get*",
                "billingconductor:List*",
                "consolidatedbilling:GetAccountBillingRole",
                "consolidatedbilling:ListLinkedAccounts",
                "organizations:DescribeAccount",
                "organizations:DescribeOrganization",
                "organizations:DescribeOrganizationalUnit",
                "organizations:ListAccounts",
                "organizations:ListAccountsForParent",
                "organizations:ListChildren",
                "organizations:ListOrganizationalUnitsForParent",
                "organizations:ListParents",
                "cur:Describe*",
                "cur:Get*",
                "cur:ValidateReportDestination",
                "cur:Put*",
                "ce:*",
                "invoicing:Get*",
                "invoicing:List*",
                "freetier:Get*",
                "mapcredits:List*",
                "payments:List*",
                "payments:Get*",
                "payments:GetPaymentInstrument",
                "purchase-orders:Get*",
                "purchase-orders:List*",
                "purchase-orders:View*",
                "pricing:*",
                "tax:List*",
                "tax:Get*",
                "savingsplans:Describe*",
                "savingsplans:List*",
                "ec2:DescribeReservedInstance*",
                "rds:DescribeReservedDBInstance*",
                "elasticache:DescribeReservedCacheNode*",
                "es:DescribeReservedInstance*",
                "redshift:DescribeReservedNodes*",
                "compute-optimizer:Export*",
                "compute-optimizer:Get*",
                "compute-optimizer:Describe*",
                "cost-optimization-hub:Get*",
                "cost-optimization-hub:List*",
                "cost-optimization-hub:Update*"
            ],
            "Resource": "*"
        }
    ]
}