Amazon Cost Optimization Hub and Amazon Organizations
Amazon Cost Optimization Hub is an Amazon Billing and Cost Management feature that helps you consolidate and prioritize cost optimization recommendations across your Amazon accounts and Amazon Regions, so that you can get the most out of your Amazon spend. When you use Cost Optimization Hub with Amazon Organizations you can easily identify, filter, and aggregate Amazon cost optimization recommendations across your Organizations member accounts and Amazon Regions.
For more information, see Cost Optimization Hub in the Amazon Cost Management User Guide.
Use the following information to help you integrate Amazon Cost Optimization Hub with Amazon Organizations.
Service-linked roles created when you enable integration
The following service-linked role is automatically created in your organization's management account when you enable trusted access. This role allows Cost Optimization Hub to perform supported operations within your organization's accounts in your organization.
You can delete or modify this role only if you disable trusted access between Cost Optimization Hub and Organizations, or if you remove the member account from the organization.
For more information, see Service-linked role permissions for Cost Optimization Hub in the Amazon Cost Management User Guide.
-
AWSServiceRoleForCostOptimizationHub
Service principals used by Cost Optimization Hub
Cost Optimization Hub uses the cost-optimization-hub.bcm.amazonaws.com service principal.
Enabling trusted access with Cost Optimization Hub
For information about the permissions needed to enable trusted access, see Permissions required to enable trusted access.
When you opt in using your organization's management account and include all member accounts within the organization, trusted access for Cost Optimization Hub is automatically enabled in your organization account.
You can enable trusted access by using either the Amazon Organizations console, by running a Amazon CLI command, or by calling an API operation in one of the Amazon SDKs.
Disabling trusted access
For information about the permissions needed to disable trusted access, see Permissions required to disable trusted access.
You can only disable trusted access using the Organizations tools.
Important
If you disable Cost Optimization Hub trusted access after you opt in, Cost Optimization Hub denies access to recommendations for your organization's member accounts. Moreover, the member accounts within the organization aren't opted in to Cost Optimization Hub. Learn more in Cost Optimization Hub and Organizations trusted access in the Amazon Cost Management User Guide.
You can disable trusted access by running a Organizations Amazon CLI command, or by calling an Organizations API operation in one of the Amazon SDKs.
Enabling a delegated administrator account for Cost Optimization Hub
When you designate a member account to be a delegated administrator for the organization, the designated account can retrieve Cost Optimization Hub recommendations for all accounts under your organization and manage Cost Optimization Hub preferences, giving you greater flexibility to centrally identify resource optimization opportunities.
Minimum permissions
Only a user or role in the Organizations management account with the following permission can configure a member account as a delegated administrator for Cost Optimization Hub in the organization:
For instructions about enabling a delegated administrator account for Cost Optimization Hub, see Delegate an administrator account in the Amazon Cost Management User Guide.
Disabling a delegated administrator for Cost Optimization Hub
Only an administrator in the Organizations management account can remove a delegated administrator for Cost Optimization Hub.
To disable the delegated admin Cost Optimization Hub account using the Cost Optimization Hub console, see Delegate an administrator account in the Amazon Cost Management User Guide.
To remove a delegated administrator using the Amazon CLI, see deregister-delegated-administrator in the Amazon Config CLI Reference.