- Create a budget
- root user → profile dropdown → billing dashboard → left panel → Budgets →
- use template
- zero-spend or monthly cost budget
- Enable the following in Billing preferences:
- PDF invoices delivered by email
- AWS Free Tier alerts
- Receive CloudWatch billing alerts
- Add contacts
- Search → Billing → Account → Alternate contacts
- IAM admin
- Create an IAM user with AdministratorAccess policy. This user will be referred to as IAM admin from now on.
- Allow IAM admin (or another user with permissions) to edit budget:
- Search → Billing → Account → IAM user and role access to Billing information
- Alternatively:
- Create an IAM Identity Center instance.
- Add a user with your company/personal email.
- Add AdministratorAccess to your own IAM IC user.
- Enable MFA on both account root user and your newly created user.
- e.g. IAM → Security credentials → Assign MFA device → choose appropriate authenticate type → …
- Vow to not use the root user in production unless you absolutely need to.