My idea was to use an IAM role with readonly access to the cost explorer only. The end user has control of the permission on the IAM role. I can assume this rol

My idea was to use an IAM role with readonly access to the cost explorer only. The end user has control of the permission on the IAM role. I can assume this role using the operator account and using an external id. This is what AWS recommends: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_common-scenarios_third-party.html https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_co... I thought about sms but included in the roadmap telegram and slack.