AWS Budgets (IAM)

aws management

AWS Budgets allows you to set custom budgets to track your cost and usage and receive alerts when thresholds are exceeded.

Common permissions

budgets:DescribeBudgetActionbudgets:DescribeBudgetActionHistoriesbudgets:DescribeBudgetActionsForBudgetbudgets:DescribeBudgetActionsForAccountbudgets:ListTagsForResourcebudgets:TagResourcebudgets:UntagResource

Least-privilege example

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "budgets:DescribeBudgetAction",
        "budgets:DescribeBudgetActionHistories",
        "budgets:DescribeBudgetActionsForBudget",
        "budgets:DescribeBudgetActionsForAccount",
        "budgets:ListTagsForResource",
        "budgets:TagResource",
        "budgets:UntagResource"
      ],
      "Resource": "*"
    }
  ]
}

Warnings

Avoid budgets:* — grants full control including creating, updating, and deleting budget actions
Avoid budgets:CreateBudgetAction and budgets:DeleteBudgetAction — can create or remove automated budget responses

Resources

AWS referenceservicereference.us-east-1.amazonaws.com/v1/budgets/budgets.json ↗

API

full doc /v1/iam/budgets