如何查看由IAM用户创建的资源的AWS Billing费用? [英] How to view AWS Billing cost for resources created by an IAM user?

问题描述

简介

我们需要通过 aws:createdBy 标签查看特定IAM用户创建的资源的AWS成本.

完整

我的

解决方案

IAM用户不产生费用.拥有资源的AWS账户会产生费用.

当IAM用户向AWS请求时，将验证其凭证以确保他们是授权人，并检查其权限以确认他们具有执行操作的权限.但是，发出请求的人与创建的资源之间没有进一步的关系.

最接近的连接是由AWS CloudTrail创建的审核日志，该日志可以显示哪个用户发出了每个请求.但这与帐单信息无关.

如果您希望跟踪成本，则应将标签与资源相关联.这些标签可能基于部门，成本中心，人员等.然后，您可以配置详细帐单报告"以按标签提供费用明细.

In brief

We need to view AWS cost for resources created by a specific IAM user via aws:createdBy tag.

In full

My google search is not helpful - it gives me one idea to use Consolidated Billing for Organizations to have the view of cost-by-user billing but that requires to create separate AWS users, which again requires credit card.

Another solution I found is that we can view AWS cost by tag grouping via Cost Explorer report though we cannot find the mentioned tag createdBy as stated in that AWS guide?

The ideal solution should let us create as many IAM users as the number of projects may grow i.e. one IAM user per project; and then, give us the report of AWS cost for each of those users.

So, how can we get to it?

解决方案

Costs are not incurred by IAM Users. The AWS Account owning the resource incurs the charge.

When an IAM User makes a request to AWS, their credentials are verified to ensure that they are the authorized person and their permissions are checked to confirm that they have permission to perform the operation. However, there is no further relationship between the person making the request and the resource that is created.

The closest connection is the audit log created by AWS CloudTrail that can show which user made each request. But this is not related to billing information.

If you wish to track costs, you should associate tags with resources. These tags could be based on department, cost center, person, etc. You can then configure your Detailed Billing Report to provide cost breakdowns by tag.

这篇关于如何查看由IAM用户创建的资源的AWS Billing费用?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！