本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
Cost Optimization Hub 和 AWS Organizations 受信任存取
當您選擇使用組織的管理帳戶並包含組織中的所有成員帳戶時,您的組織帳戶中會自動啟用 Cost Optimization Hub 的受信任存取。每次您存取成員帳戶的建議時,Cost Optimization Hub 都會驗證您的組織帳戶中是否已啟用受信任存取。如果您在選擇加入後停用 Cost Optimization Hub 受信任存取,Cost Optimization Hub 會拒絕存取您組織成員帳戶的建議。此外,組織內的成員帳戶不會選擇加入 Cost Optimization Hub。若要重新啟用受信任存取,請使用組織的管理帳戶再次選擇加入 Cost Optimization Hub,並包含組織內的所有成員帳戶。如需詳細資訊,請參閱選擇加入您的帳戶。如需 Organizations 受信任存取的詳細資訊 AWS ,請參閱AWS 《 Organizations 使用者指南》中的將 Organizations 與其他 AWS 服務搭配使用。 AWS
管理帳戶政策
此政策提供管理帳戶選擇加入 Cost Optimization Hub 並擁有服務完整存取權所需的所有許可。
- JSON
-
-
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "CostOptimizationHubAdminAccess",
"Effect": "Allow",
"Action": [
"cost-optimization-hub:ListEnrollmentStatuses",
"cost-optimization-hub:UpdateEnrollmentStatus",
"cost-optimization-hub:GetPreferences",
"cost-optimization-hub:UpdatePreferences",
"cost-optimization-hub:GetRecommendation",
"cost-optimization-hub:ListRecommendations",
"cost-optimization-hub:ListRecommendationSummaries",
"organizations:EnableAWSServiceAccess"
],
"Resource": "*"
},
{
"Sid": "AllowCreationOfServiceLinkedRoleForCostOptimizationHub",
"Effect": "Allow",
"Action": [
"iam:CreateServiceLinkedRole"
],
"Resource": [
"arn:aws:iam::*:role/aws-service-role/cost-optimization-hub.bcm.amazonaws.com/AWSServiceRoleForCostOptimizationHub"
],
"Condition": {
"StringLike": {
"iam:AWSServiceName": "cost-optimization-hub.bcm.amazonaws.com"
}
}
},
{
"Sid": "AllowAWSServiceAccessForCostOptimizationHub",
"Effect": "Allow",
"Action": [
"organizations:EnableAWSServiceAccess"
],
"Resource": "*",
"Condition": {
"StringLike": {
"organizations:ServicePrincipal": [
"cost-optimization-hub.bcm.amazonaws.com"
]
}
}
}
]
}
成員帳戶政策
此政策提供成員帳戶擁有 Cost Optimization Hub 完整存取權所需的許可。
- JSON
-
-
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "CostOptimizationHubAdminAccess",
"Effect": "Allow",
"Action": [
"cost-optimization-hub:ListEnrollmentStatuses",
"cost-optimization-hub:UpdateEnrollmentStatus",
"cost-optimization-hub:GetPreferences",
"cost-optimization-hub:UpdatePreferences",
"cost-optimization-hub:GetRecommendation",
"cost-optimization-hub:ListRecommendations",
"cost-optimization-hub:ListRecommendationSummaries"
],
"Resource": "*"
}
]
}