允许修改账单联系人的 AWS IAM 政策

Question

我已将以下策略分配给 IAM 用户，该用户授予对计费的完全权限。

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "aws-portal:*Billing",
                "awsbillingconsole:*Billing",
                "aws-portal:*Usage",
                "awsbillingconsole:*Usage",
                "aws-portal:*PaymentMethods",
                "awsbillingconsole:*PaymentMethods",
                "budgets:ViewBudget",
                "budgets:ModifyBudget",
                "cur:*",
                "purchase-orders:*PurchaseOrders"
            ],
            "Resource": "*"
        }
    ]
}

此政策不允许用户修改备用结算联系人。可在https://console.aws.amazon.com/billing/home?#/account 下找到替代计费联系人设置。有没有办法在不授予管理员权限的情况下实现这一点。

Answer 1

尝试授予所有aws-portal 操作

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "aws-portal:*",
            "Resource": "*"
        }
    ]
}