AWS Cost Optimization Hub and AWS Organizations
AWS Cost Optimization Hub is an AWS Billing and Cost Management feature that helps you consolidate and prioritize cost optimization recommendations across your AWS accounts and AWS Regions, so that you can get the most out of your AWS spend. When you use Cost Optimization Hub with AWS Organizations you can easily identify, filter, and aggregate AWS cost optimization recommendations across your Organizations member accounts and AWS Regions.
For more information, see Cost Optimization Hub in the AWS Cost Management User Guide.
Use the following information to help you integrate AWS Cost Optimization Hub with AWS Organizations.
Service-linked roles created when you enable integration
The following service-linked role is automatically created in your organization's management account when you enable trusted access. This role allows Cost Optimization Hub to perform supported operations within your organization's accounts in your organization.
You can delete or modify this role only if you disable trusted access between Cost Optimization Hub and Organizations, or if you remove the member account from the organization.
For more information, see Service-linked role permissions for Cost Optimization Hub in the AWS Cost Management User Guide.
-
AWSServiceRoleForCostOptimizationHub
Service principals used by Cost Optimization Hub
Cost Optimization Hub uses the cost-optimization-hub.bcm.amazonaws.com service principal.
Enabling trusted access with Cost Optimization Hub
For information about the permissions needed to enable trusted access, see Permissions required to enable trusted access.
When you opt in using your organization's management account and include all member accounts within the organization, trusted access for Cost Optimization Hub is automatically enabled in your organization account.
You can enable trusted access by using either the AWS Organizations console, by running a AWS CLI command, or by calling an API operation in one of the AWS SDKs.
Disabling trusted access
For information about the permissions needed to disable trusted access, see Permissions required to disable trusted access.
You can only disable trusted access using the Organizations tools.
Important
If you disable Cost Optimization Hub trusted access after you opt in, Cost Optimization Hub denies access to recommendations for your organization's member accounts. Moreover, the member accounts within the organization aren't opted in to Cost Optimization Hub. Learn more in Cost Optimization Hub and Organizations trusted access in the AWS Cost Management User Guide.
You can disable trusted access by running a Organizations AWS CLI command, or by calling an Organizations API operation in one of the AWS SDKs.
Enabling a delegated administrator account for Cost Optimization Hub
When you designate a member account to be a delegated administrator for the organization, the designated account can retrieve Cost Optimization Hub recommendations for all accounts under your organization and manage Cost Optimization Hub preferences, giving you greater flexibility to centrally identify resource optimization opportunities.
Minimum permissions
Only a user or role in the Organizations management account with the following permission can configure a member account as a delegated administrator for Cost Optimization Hub in the organization:
For instructions about enabling a delegated administrator account for Cost Optimization Hub, see Delegate an administrator account in the AWS Cost Management User Guide.
Disabling a delegated administrator for Cost Optimization Hub
Only an administrator in the Organizations management account can remove a delegated administrator for Cost Optimization Hub.
To disable the delegated admin Cost Optimization Hub account using the Cost Optimization Hub console, see Delegate an administrator account in the AWS Cost Management User Guide.
To remove a delegated administrator using the AWS CLI, see deregister-delegated-administrator in the AWS Config CLI Reference.
