About Amazon Web Services API permissions

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 1 minute de lecture

    • Cloud Account Management interacts with Amazon Web Services to create and manage subscription accounts.

    Remarque :
    You must establish an AWS service account for Cloud Account Management that is separate from the account for Cloud Discovery.

    The following API permissions are required to start a new subscription account in AWS:

    • budgets: CreateBudgetAction
    • budgets: DescribeBudgetAction
    • budgets: ModifyBudget
    • budgets: ViewBudget
    • organizations: AttachPolicy
    • organizations: CreateAccount
    • organizations: CloseAccount
    • organizations: DescribeAccount
    • organizations: DescribePolicy
    • organizations: DescribeOrganization
    • organizations: DescribeOrganizationalUnit
    • organizations: DescribeCreateAccountStatus
    • organizations: ListRoots
    • organizations: ListAccounts
    • organizations: ListTagsForResource
    • organizations: ListAWSServiceAccessForOrganization",
    • organizations: ListAccounts
    • organizations: ListParents
    • organizations: ListOrganizationalUnitsForParent
    • organizations: MoveAccount
    • organizations: TagResource
    • iam: GetAccountSummary
    • sts: AssumeRole
    Remarque :

    For more details on API permissions, download the Cloud Discovery REST API permissions spreadsheet so you can research and grant the user permissions required for running the discovery process.