About Amazon Web Services API permissions

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 2분

    • Cloud Account Management interacts with Amazon Web Services to create and manage subscription accounts.

    주:
    You must establish an AWS service account for Cloud Account Management that is separate from the account for Cloud Discovery.

    The following API permissions are required to start a new subscription account in AWS:

    • budgets: CreateBudgetAction
    • budgets: DescribeBudgetAction
    • budgets: ModifyBudget
    • budgets: ViewBudget
    • organizations: AttachPolicy
    • organizations: CreateAccount
    • organizations: CloseAccount
    • organizations: DescribeAccount
    • organizations: DescribePolicy
    • organizations: DescribeOrganization
    • organizations: DescribeOrganizationalUnit
    • organizations: DescribeCreateAccountStatus
    • organizations: ListRoots
    • organizations: ListAccounts
    • organizations: ListTagsForResource
    • organizations: ListAWSServiceAccessForOrganization",
    • organizations: ListAccounts
    • organizations: ListParents
    • organizations: ListOrganizationalUnitsForParent
    • organizations: MoveAccount
    • organizations: TagResource
    • iam: GetAccountSummary
    • sts: AssumeRole
    주:

    For more details on API permissions, download the Cloud Discovery REST API permissions spreadsheet so you can research and grant the user permissions required for running the discovery process.