os-climate / os_c_data_commons

Repository for Data Commons platform architecture overview, as well as developer and user documentation
Apache License 2.0
20 stars 10 forks source link

Update access controls #267

Open HeatherAck opened 1 year ago

HeatherAck commented 1 year ago

Update policies in AWS account

HeatherAck commented 1 year ago

To enhance access control experience, AWS launched new fine-grained AWS Identity and Access Management (IAM) actions for AWS Billing, Cost Management, and Account services. We will be retiring the existing IAM actions that control access to the Billing, Cost Management, and Account Consoles on July 6, 2023. We recommend you update your policies [1] to include fine-grained actions before July 6, 2023 so that your users’ access does not change after the retirement of these existing actions. Since existing actions will continue to protect access to our consoles until July 6, 2023, please wait to remove existing actions from your policies until then.

These new fine-grained actions give AWS customers more control over access to these services. With these actions, you will have a single set of actions that govern console and programmatic access to AWS Billing, Cost Management, and Account services.

The existing IAM actions that currently control access to services on AWS Billing, Cost Management, and Account consoles under the aws-portal service prefix, and the purchase-orders:ViewPurchaseOrders, and purchase-orders:ModifyPurchaseOrders actions will no longer be available after July 6, 2023.

Please review our blog [1] for the existing action retirement timeline and a detailed guide on how and which policies you need to update. Please review our Billing Console [2] and Cost Management [3] user guides to learn more about the new fine-grained IAM actions.

See also: https://jira.linuxfoundation.org/plugins/servlet/desk/portal/2/IT-25215