AWS Required Roles/Permissions

Overview

The following roles should be attached to a group to which user accounts representing CB service accounts are added.

Considerations

A key and secret can then be generated for each user account.

Predefined Roles required:

AmazonEC2FullAccess
Billing

Procedure

Step 1: Below are lines that need to be added for example:

{
    "Version": "2012-10-17",
    "Statement": [{
        "Effect": "Allow",
        "Action": [
                        "ce:*"
        ],
        "Resource": "*"
    }]
}