Our records indicate that you are still using retired actions to access the AWS Billing, Cost Management, and Account consoles. AWS announced the retirement of IAM actions under the aws-portal service prefix, the purchase-orders:ViewPurchaseOrders and purchase-orders:ModifyPurchaseOrders actions on January 10, 2023, in favor of new fine-grained IAM actions. These new IAM actions provide you more control over access to the AWS Billing, Cost Management, and Account consoles.
To ensure you have continued access to our consoles, we are granting you a final extension until December 11, 2023, to migrate your policies to new actions. To help you with the migration, we have published a mapping between old and new actions in our user guide [1]. If you need to update policies across multiple member accounts in your organization, we have built bulk policy migration scripts to help you update all policies quickly and securely from your management account. See the bulk policy migration scripts user guide [2] for more information. You can find a detailed guide on how and which policies you need to update on our blog [3] and definitions of new IAM actions in Cost Management [4] and Billing [5] user guides.
Please update your policies before December 11, 2023, to ensure your users' access to the AWS Billing, Cost Management, and Account consoles is not affected. If you have more questions or need help making updates to your policies, please contact AWS support [6].
Amazon Web Services, Inc. is a subsidiary of Amazon.com, Inc. Amazon.com is a registered trademark of Amazon.com, Inc. This message was produced and distributed by Amazon Web Services Inc., 410 Terry Ave. North, Seattle, WA 98109-5210
With Burt's help I have determined that we have made all the changes necessary in our accounting policies.
This ticket can be closed. No code modifications are required.
The following E-mail came from AWS
Hello,
Our records indicate that you are still using retired actions to access the AWS Billing, Cost Management, and Account consoles. AWS announced the retirement of IAM actions under the aws-portal service prefix, the purchase-orders:ViewPurchaseOrders and purchase-orders:ModifyPurchaseOrders actions on January 10, 2023, in favor of new fine-grained IAM actions. These new IAM actions provide you more control over access to the AWS Billing, Cost Management, and Account consoles.
To ensure you have continued access to our consoles, we are granting you a final extension until December 11, 2023, to migrate your policies to new actions. To help you with the migration, we have published a mapping between old and new actions in our user guide [1]. If you need to update policies across multiple member accounts in your organization, we have built bulk policy migration scripts to help you update all policies quickly and securely from your management account. See the bulk policy migration scripts user guide [2] for more information. You can find a detailed guide on how and which policies you need to update on our blog [3] and definitions of new IAM actions in Cost Management [4] and Billing [5] user guides.
Please update your policies before December 11, 2023, to ensure your users' access to the AWS Billing, Cost Management, and Account consoles is not affected. If you have more questions or need help making updates to your policies, please contact AWS support [6].
[1] https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.aws.amazon.com_awsaccountbilling_latest_aboutv2_migrate-2Dgranularaccess-2Diam-2Dmapping-2Dreference.html&d=DwICaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=WYeMKV7EtR_yqFDM3nPeJ-2P2cX2VRFz0rm6FFpBgaCms4QfMBXYtYE7X9CiZIiF&m=aaKdnGYuhyx7BkUXz38FvOEFTwgWsuf953QID1s9oJGQtT-zwmIAbsEHQhfhOBJj&s=hCbGPLbm8ZQ37g5duJqIVVCi6YSP3g4EPZIVQ0PozF0&e= [2] https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.aws.amazon.com_awsaccountbilling_latest_aboutv2_migrate-2Diam-2Dpermissions.html&d=DwICaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=WYeMKV7EtR_yqFDM3nPeJ-2P2cX2VRFz0rm6FFpBgaCms4QfMBXYtYE7X9CiZIiF&m=aaKdnGYuhyx7BkUXz38FvOEFTwgWsuf953QID1s9oJGQtT-zwmIAbsEHQhfhOBJj&s=ftsMhf6UXbAi9MnC-2KG-UttvQcT5p-ZvucsbTUVmnk&e= [3] https://urldefense.proofpoint.com/v2/url?u=https-3A__aws.amazon.com_blogs_aws-2Dcloud-2Dfinancial-2Dmanagement_changes-2Dto-2Daws-2Dbilling-2Dcost-2Dmanagement-2Dand-2Daccount-2Dconsoles-2Dpermissions_&d=DwICaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=WYeMKV7EtR_yqFDM3nPeJ-2P2cX2VRFz0rm6FFpBgaCms4QfMBXYtYE7X9CiZIiF&m=aaKdnGYuhyx7BkUXz38FvOEFTwgWsuf953QID1s9oJGQtT-zwmIAbsEHQhfhOBJj&s=ij02iISOV6hAtXq780DZTAiaexZoo6rzA04MjHB7OgM&e= [4] https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.aws.amazon.com_cost-2Dmanagement_latest_userguide_migrate-2Dgranularaccess-2Dwhatis.html-23migrate-2Duser-2Dpermissions&d=DwICaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=WYeMKV7EtR_yqFDM3nPeJ-2P2cX2VRFz0rm6FFpBgaCms4QfMBXYtYE7X9CiZIiF&m=aaKdnGYuhyx7BkUXz38FvOEFTwgWsuf953QID1s9oJGQtT-zwmIAbsEHQhfhOBJj&s=8jNNvqnjrIvpiBw9yEvTopGEn6SnLdYKaRm0AXCyeXI&e= [5] https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.aws.amazon.com_awsaccountbilling_latest_aboutv2_migrate-2Dgranularaccess-2Dwhatis.html&d=DwICaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=WYeMKV7EtR_yqFDM3nPeJ-2P2cX2VRFz0rm6FFpBgaCms4QfMBXYtYE7X9CiZIiF&m=aaKdnGYuhyx7BkUXz38FvOEFTwgWsuf953QID1s9oJGQtT-zwmIAbsEHQhfhOBJj&s=hkEyjBC7TcUXXfKJWxujW9I_G1nkRNDK0Q7Jqn4wi0k&e= [6] https://urldefense.proofpoint.com/v2/url?u=https-3A__support.console.aws.amazon.com_support_home-3F-23_&d=DwICaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=WYeMKV7EtR_yqFDM3nPeJ-2P2cX2VRFz0rm6FFpBgaCms4QfMBXYtYE7X9CiZIiF&m=aaKdnGYuhyx7BkUXz38FvOEFTwgWsuf953QID1s9oJGQtT-zwmIAbsEHQhfhOBJj&s=uo0E4ZwoazPZ22o3AqbY_w72NwymFyl5O-7EmHozeC8&e=
Sincerely, Amazon Web Services
Amazon Web Services, Inc. is a subsidiary of Amazon.com, Inc. Amazon.com is a registered trademark of Amazon.com, Inc. This message was produced and distributed by Amazon Web Services Inc., 410 Terry Ave. North, Seattle, WA 98109-5210
Reference: https://urldefense.proofpoint.com/v2/url?u=https-3A__phd.aws.amazon.com_phd_home-3Fregion-3Dus-2Deast-2D1-23_event-2Dlog-3FeventID-3Darn-3Aaws-3Ahealth-3Aglobal-3A-3Aevent_IAM_AWS-5FIAM-5FSECURITY-5FNOTIFICATION_AWS-5FIAM-5FSECURITY-5FNOTIFICATION-5F306b79dc3bc566c1832892e06f6a651b5fa44e6049bd47e80f16e08a666ff739-26amp-3BeventTab-3Ddetails&d=DwICaQ&c=gRgGjJ3BkIsb5y6s49QqsA&r=WYeMKV7EtR_yqFDM3nPeJ-2P2cX2VRFz0rm6FFpBgaCms4QfMBXYtYE7X9CiZIiF&m=aaKdnGYuhyx7BkUXz38FvOEFTwgWsuf953QID1s9oJGQtT-zwmIAbsEHQhfhOBJj&s=niMs1PqiZGnYA9DOR4gIRssBqDth-y2yUcw51zxoo44&e=
Apologies for all the proof point urls
Anyway we need to investigate all of this.