기계 번역으로 제공되는 번역입니다. 제공된 번역과 원본 영어의 내용이 상충하는 경우에는 영어 버전이 우선합니다. # AWSManagedSettingsAdminAccess **설명**: AWS 계정 설정 관리에 대한 전체 관리 액세스 권한을 부여합니다. 이 정책을 통해 소유자는 계정 정보, 결제, 결제, 세금 등록, 자격 증명 관리, 조직 정책, 예산, 비용 분석 및 워크스페이스 알림을 보고 수정할 수 있습니다. 계정 구성 및 멤버 관리에 대한 완전한 관리 액세스가 필요한 워크스페이스 소유자를 위한 것입니다. 이 정책은 계정 설정과 관련이 없는 컴퓨팅, 스토리지, 네트워킹 또는 기타 인프라 서비스에 대한 액세스 권한을 부여하지 않습니다. `AWSManagedSettingsAdminAccess`은(는) [AWS 관리형 정책](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)입니다. ## 이 정책 사용 사용자, 그룹 및 역할에 `AWSManagedSettingsAdminAccess`를 연결할 수 있습니다. ## 정책 세부 정보 + **Type**: AWS managed 정책 + **생성 시간**: 2026년 7월 22일, 01:27 UTC + **편집된 시간:** 2026년 7월 23일, 00:42 UTC + **ARN**: `arn:aws:iam::aws:policy/AWSManagedSettingsAdminAccess` ## 정책 버전 **정책 버전:** v2(기본값) 정책의 기본 버전은 정책에 대한 권한을 정의하는 버전입니다. 정책이 있는 사용자 또는 역할이 AWS 리소스에 대한 액세스를 요청하면는 정책의 기본 버전을 AWS 확인하여 요청을 허용할지 여부를 결정합니다. ## JSON 정책 문서 ``` { "Version" : "2012-10-17", "Statement" : [ { "Sid" : "ActivateAdvancedUpdateAccountName", "Effect" : "Allow", "Action" : [ "account:PutAccountName" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:CalledViaLast" : "account.amazonaws.com" } } }, { "Sid" : "AWSSettingsAccountAccess", "Effect" : "Allow", "Action" : [ "account:GetAccountInformation", "account:GetContactInformation", "account:CloseAccount", "account:PutAccountName", "account:PutContactInformation", "account:StartPrimaryEmailUpdate", "account:AcceptPrimaryEmailUpdate", "account:GetPrimaryEmailUpdateStatus" ], "Resource" : "*" }, { "Sid" : "AWSSettingsBillingAccess", "Effect" : "Allow", "Action" : [ "billing:GetCredits", "billing:GetSellerOfRecord", "billing:RedeemCredits" ], "Resource" : "*" }, { "Sid" : "AWSSettingsCostExplorerAccess", "Effect" : "Allow", "Action" : [ "ce:GetCostAndUsage", "ce:GetCostForecast" ], "Resource" : "*" }, { "Sid" : "AWSSettingsBudgetsAccess", "Effect" : "Allow", "Action" : [ "budgets:CreateBudgetAction", "budgets:DeleteBudgetAction", "budgets:DescribeBudgetActionsForAccount", "budgets:DescribeBudgetActionsForBudget", "budgets:ModifyBudget", "budgets:ViewBudget", "budgets:UpdateBudget", "budgets:CreateBudget", "budgets:DeleteBudget", "budgets:DescribeBudgets", "budgets:DescribeBudget", "budgets:DescribeBudgetActionHistories" ], "Resource" : "*" }, { "Sid" : "AWSSettingsIAMPassRole", "Effect" : "Allow", "Action" : "iam:PassRole", "Resource" : "arn:aws:iam::*:role/managed/AWSManagedBudgetsSpendLimitManagementRole", "Condition" : { "StringEquals" : { "iam:PassedToService" : "budgets.amazonaws.com" } } }, { "Sid" : "AWSSettingsCustomerVerificationAccess", "Effect" : "Allow", "Action" : [ "customer-verification:CreateCustomerVerificationDetails", "customer-verification:CreateUploadUrls", "customer-verification:GetCustomerVerificationDetails", "customer-verification:GetCustomerVerificationEligibility", "customer-verification:UpdateCustomerVerificationDetails" ], "Resource" : "*" }, { "Sid" : "AWSSettingsFreeTierAccess", "Effect" : "Allow", "Action" : [ "freetier:GetAccountPlanState", "freetier:UpgradeAccountPlan" ], "Resource" : "*" }, { "Sid" : "AWSSettingsIdentityStoreAccess", "Effect" : "Allow", "Action" : [ "identitystore:CreateGroup", "identitystore:CreateGroupMembership", "identitystore:CreateUser", "identitystore:DeleteGroup", "identitystore:DeleteGroupMembership", "identitystore:DeleteUser", "identitystore:DescribeGroup", "identitystore:DescribeUser", "identitystore:GetGroupId", "identitystore:GetUserId", "identitystore:ListGroupMemberships", "identitystore:UpdateIdentityStore", "identitystore:ListGroupMembershipsForMember", "identitystore:ListGroups", "identitystore:ListUsers", "identitystore:ReserveUser", "identitystore:UpdateGroup", "identitystore:UpdateUser", "sso-directory:DescribeUsers", "sso-directory:SearchGroups", "sso-directory:SearchUsers", "builderid:CreateInvitation", "builderid:DeleteInvitation", "builderid:DisassociateCollaborator", "builderid:ListInvitations" ], "Resource" : "*" }, { "Sid" : "AWSSettingsInvoicingAccess", "Effect" : "Allow", "Action" : [ "invoicing:GetInvoicePDF" ], "Resource" : "*" }, { "Sid" : "AWSSettingsOrganizationsAccess", "Effect" : "Allow", "Action" : [ "organizations:CloseAccount", "organizations:CreatePolicy", "organizations:DescribeEffectivePolicy", "organizations:DescribeOrganization", "organizations:ListAccounts", "organizations:ListPolicies", "organizations:ListPoliciesForTarget", "organizations:ListRoots", "organizations:CreateBuilderIdOwnedAccount", "organizations:DescribeCreateAccountStatus", "organizations:DescribeAccount", "organizations:InviteAccountToOrganization" ], "Resource" : "*" }, { "Sid" : "AWSSettingsOrganizationsAiOptOutPolicyManagement", "Effect" : "Allow", "Action" : [ "organizations:AttachPolicy", "organizations:DetachPolicy", "organizations:EnablePolicyType", "organizations:DisablePolicyType" ], "Resource" : "*", "Condition" : { "StringEquals" : { "organizations:PolicyType" : "AISERVICES_OPT_OUT_POLICY" } } }, { "Sid" : "AWSSettingsPaymentsAccess", "Effect" : "Allow", "Action" : [ "payments:CreatePaymentInstrument", "payments:GetPaymentInstrument", "payments:GetPaymentStatus", "payments:ListPaymentPreferences", "payments:MakePayment", "payments:UpdatePaymentInstrument", "payments:UpdatePaymentPreferences", "payments:TagResource", "payments:UntagResource", "payments:ListTagsForResource", "payments:BatchGetPaymentProfiles", "payments:AcceptTermsAndConditionsForProgramByAccountId", "payments:CreatePaymentAttempt", "payments:CreatePaymentProfile", "payments:Get", "payments:GetAcceptedTermsAndConditionsForProgramByAccountId", "payments:GetEligibleCurrencies", "payments:GetPaymentAttempt", "payments:GetPaymentPreferences", "payments:GetPreferredCurrency", "payments:GetRecommendedTermsAndConditionsForProgram", "payments:ListPaymentProfiles", "payments:SearchFinancialRecords", "payments:SetPreferredCurrency", "payments:UpdatePaymentProfile", "payments:GetAccountBalance" ], "Resource" : "*" }, { "Sid" : "AWSSettingsSESAccess", "Effect" : "Allow", "Action" : [ "ses:SendEmail" ], "Resource" : "*" }, { "Sid" : "AWSSettingsSSOAccess", "Effect" : "Allow", "Action" : [ "sso:DeleteApplicationAssignment", "sso:DescribeInstance", "sso:GetApplicationAssignmentConfiguration", "sso:ListApplicationAssignments", "sso:CreateApplicationAssignment", "sso:DescribeApplication", "sso:ListApplications", "sso:UpdateInstance" ], "Resource" : "*" }, { "Sid" : "AWSSettingsTaxAccess", "Effect" : "Allow", "Action" : [ "tax:BatchPutTaxRegistration", "tax:DeleteTaxRegistration", "tax:GetTaxRegistration", "tax:GetTaxRegistrationDocument", "tax:ListTaxRegistrations", "tax:PutTaxRegistration" ], "Resource" : "*" }, { "Sid" : "AWSSettingsSupportAccess", "Effect" : "Allow", "Action" : [ "support:CreateCase", "support:DescribeServices", "support:DescribeSeverityLevels", "support:DescribeCases", "support:AddCommunicationToCase", "support:ResolveCase" ], "Resource" : "*" }, { "Sid" : "ActivateAdvancedProvisioningAccess", "Effect" : "Allow", "Action" : [ "organizations:CreateBuilderIdOwnedAccount", "organizations:DescribeCreateAccountStatus", "organizations:ListAccounts", "sso:ListInstances", "identitystore:GetUserId", "sso-directory:ListProvisioningTenants", "account-access:ListApplications", "account-access:CreateApplication", "account-access:CreateEntitlement", "signin:DeleteConsoleAuthorizationConfiguration" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:CalledViaLast" : "account.amazonaws.com" } } }, { "Sid" : "ActivateAdvancedDelegatedAdminAccess", "Effect" : "Allow", "Action" : [ "organizations:RegisterDelegatedAdministrator", "organizations:ListDelegatedAdministrators" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:CalledViaLast" : "account.amazonaws.com", "organizations:ServicePrincipal" : "sso.amazonaws.com" } } }, { "Sid" : "ActivateAdvancedManagedRoleAccess", "Effect" : "Allow", "Action" : [ "iam:GetRole", "iam:CreateRole", "iam:AttachRolePolicy", "iam:DeleteRole", "iam:ListAttachedRolePolicies", "iam:DetachRolePolicy", "iam:ListRolePolicies", "iam:DeleteRolePolicy" ], "Resource" : [ "arn:aws:iam::*:role/managed/*", "arn:aws:iam::*:role/ManagedAccountAdmin", "arn:aws:iam::*:role/AccountFullAccessRole" ], "Condition" : { "StringEquals" : { "aws:CalledViaLast" : "account.amazonaws.com" } } }, { "Sid" : "ActivateAdvancedMemberAccountAssume", "Effect" : "Allow", "Action" : "sts:AssumeRole", "Resource" : "arn:aws:iam::*:role/managed/AWSManagedAdvancedFeaturesActivationRole", "Condition" : { "StringEquals" : { "aws:CalledViaLast" : "account.amazonaws.com" } } }, { "Sid" : "ActivateAdvancedBudgetsAccess", "Effect" : "Allow", "Action" : "budgets:ModifyBudget", "Resource" : "arn:aws:budgets::*:budget/sla-*", "Condition" : { "StringEquals" : { "aws:CalledViaLast" : "account.amazonaws.com" } } }, { "Sid" : "ActivateAdvancedSCPCleanupAccess", "Effect" : "Allow", "Action" : [ "organizations:DeletePolicy", "organizations:DetachPolicy", "organizations:ListPolicies", "organizations:ListRoots" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:CalledViaLast" : "account.amazonaws.com" } } } ] } ``` ## 자세히 알아보기 + [IAM Identity Center에서 AWS 관리형 정책을 사용하여 권한 세트 생성](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html) + [IAM 자격 증명 권한 추가 및 제거](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html) + [IAM 정책의 버전 관리 이해](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html) + [AWS 관리형 정책을 시작하고 최소 권한으로 전환](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)