Work with the account and use of the account do not work

Question

I have an IAM user that has admin access. This user cannot access the Account Activity or Account Usage page. They see the message "Permission denied" with "You do not have the required permissions to view the contents of this page." These are the steps I followed to give them access:

• Logged in as root.
• Configured my security issues.
• Enable IAM user access to the AWS website.
• The user added the following policies:

a) To access your account

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "aws-portal:ViewBilling" ], "Resource": "*" } ] } 

b) Access to account use

 { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "aws-portal:ViewUsage" ], "Resource": "*" } ] } 

However, the user cannot access the account and the account usage pages.

Can someone tell me what's wrong here?

Answer 1

I had the same problem, it seems that IAM users are not allowed to see account activity, even if they have permissions set.

Found a mention of this problem on the amazon forum, see https://forums.aws.amazon.com/thread.jspa?threadID=86391

Update: I have since discovered that this can be done. In addition to setting the necessary permissions for the user in IAM, you also need to enable this option in the AWS master account. Log in using your basic AWS credentials and go to the Account Management section. On this page there is a section on allowing access to account activity, make sure that both fields are checked and click the button to enable / activate these permissions.

Once this is done, IAM users will be able to see account activity.

Answer 2

user2506397 the answer is correct. I had the same problem that I activated the activity of the account, because the checkboxes are checked next to the activity account page and the usage report page, but even if you still need to click "Activate". I do not think this is a very intuitive user interface design.