An open API service indexing awesome lists of open source software.

https://github.com/zaydiscold/aws-pp-cli

AWS CLI for Quotas + Support + Cost Explorer — a free $0 substitute for AWS Business Support. printing-press-generated, agent-native flags, paired MCP server.
https://github.com/zaydiscold/aws-pp-cli

Last synced: 12 days ago
JSON representation

AWS CLI for Quotas + Support + Cost Explorer — a free $0 substitute for AWS Business Support. printing-press-generated, agent-native flags, paired MCP server.

Awesome Lists containing this project

README

          

# Aws Pp CLI

Combined CLI for multiple API services

Printed by [@zaydiscold](https://github.com/zaydiscold) (zayd).

## Install

The recommended path installs both the `aws-pp-pp-cli` binary and the `pp-aws-pp` agent skill in one shot:

```bash
npx -y @mvanhorn/printing-press install aws-pp
```

For CLI only (no skill):

```bash
npx -y @mvanhorn/printing-press install aws-pp --cli-only
```

### Without Node

The generated install path is category-agnostic until this CLI is published. If `npx` is not available before publish, install Node or use the category-specific Go fallback from the public-library entry after publish.

### Pre-built binary

Download a pre-built binary for your platform from the [latest release](https://github.com/mvanhorn/printing-press-library/releases/tag/aws-pp-current). On macOS, clear the Gatekeeper quarantine: `xattr -d com.apple.quarantine `. On Unix, mark it executable: `chmod +x `.

## Install for Hermes

From the Hermes CLI:

```bash
hermes skills install mvanhorn/printing-press-library/cli-skills/pp-aws-pp --force
```

Inside a Hermes chat session:

```bash
/skills install mvanhorn/printing-press-library/cli-skills/pp-aws-pp --force
```

## Install for OpenClaw

Tell your OpenClaw agent (copy this):

```
Install the pp-aws-pp skill from https://github.com/mvanhorn/printing-press-library/tree/main/cli-skills/pp-aws-pp. The skill defines how its required CLI can be installed.
```

## Quick Start

### 1. Install

See [Install](#install) above.

### 2. Set Up Credentials

Get your API key from your API provider's developer portal. The key typically looks like a long alphanumeric string.

```bash
export SERVICE_QUOTAS_HMAC=""
```

You can also persist this in your config file at `~/.config/aws-pp-pp-cli/config.toml`.

### 3. Verify Setup

```bash
aws-pp-pp-cli doctor
```

This checks your configuration and credentials.

### 4. Try Your First Command

```bash
aws-pp-pp-cli finding-aggregator list
```

## Usage

Run `aws-pp-pp-cli --help` for the full command reference and flag list.

## Commands

### accounts

Manage accounts

- **`aws-pp-pp-cli accounts describe-hub`** - Returns details about the Hub resource in your account, including the HubArn and the time when you enabled Security Hub.
- **`aws-pp-pp-cli accounts disable-security-hub`** -

Disables Security Hub in your account only in the current Region. To disable Security Hub in all Regions, you must submit one request per Region where you have enabled Security Hub.

When you disable Security Hub for an administrator account, it doesn't disable Security Hub for any associated member accounts.

When you disable Security Hub, your existing findings and insights and any Security Hub configuration settings are deleted after 90 days and cannot be recovered. Any standards that were enabled are disabled, and your administrator and member account associations are removed.

If you want to save your existing findings, you must export them before you disable Security Hub.


- **`aws-pp-pp-cli accounts enable-security-hub`** -

Enables Security Hub for your account in the current Region or the Region you specify in the request.

When you enable Security Hub, you grant to Security Hub the permissions necessary to gather findings from other services that are integrated with Security Hub.

When you use the EnableSecurityHub operation to enable Security Hub, you also automatically enable the following standards:

  • Center for Internet Security (CIS) Amazon Web Services Foundations Benchmark v1.2.0

  • Amazon Web Services Foundational Security Best Practices

Other standards are not automatically enabled.

To opt out of automatically enabled standards, set EnableDefaultStandards to false.

After you enable Security Hub, to enable a standard, use the BatchEnableStandards operation. To disable a standard, use the BatchDisableStandards operation.

To learn more, see the setup information in the Security Hub User Guide.


- **`aws-pp-pp-cli accounts update-security-hub-configuration`** - Updates configuration options for Security Hub.

### action-targets

Manage action targets

- **`aws-pp-pp-cli action-targets create`** -

Creates a custom action target in Security Hub.

You can use custom actions on findings and insights in Security Hub to trigger target actions in Amazon CloudWatch Events.


- **`aws-pp-pp-cli action-targets delete`** -

Deletes a custom action target from Security Hub.

Deleting a custom action target does not affect any findings or insights that were already sent to Amazon CloudWatch Events using the custom action.


- **`aws-pp-pp-cli action-targets describe`** - Returns a list of the custom action targets in Security Hub in your account.
- **`aws-pp-pp-cli action-targets update`** - Updates the name and description of a custom action target in Security Hub.

### administrator

Manage administrator

- **`aws-pp-pp-cli administrator accept-invitation`** -

Accepts the invitation to be a member account and be monitored by the Security Hub administrator account that the invitation was sent from.

This operation is only used by member accounts that are not added through Organizations.

When the member account accepts the invitation, permission is granted to the administrator account to view findings generated in the member account.


- **`aws-pp-pp-cli administrator disassociate-from-account`** -

Disassociates the current Security Hub member account from the associated administrator account.

This operation is only used by accounts that are not part of an organization. For organization accounts, only the administrator account can disassociate a member account.


- **`aws-pp-pp-cli administrator get-account`** -

Provides the details for the Security Hub administrator account for the current member account.

Can be used by both member accounts that are managed using Organizations and accounts that were invited manually.

### associations

Manage associations

- **`aws-pp-pp-cli associations batch-get-standards-control`** - For a batch of security controls and standards, identifies whether each control is currently enabled or disabled in a standard.
- **`aws-pp-pp-cli associations batch-update-standards-control`** - For a batch of security controls and standards, this operation updates the enablement status of a control in a standard.

### associations-security-control-id

Manage associations security control id

- **`aws-pp-pp-cli associations-security-control-id list-standards-control-associations`** - Specifies whether a control is currently enabled or disabled in each enabled standard in the calling account.

### finding-aggregator

Manage finding aggregator

- **`aws-pp-pp-cli finding-aggregator create`** -

Used to enable finding aggregation. Must be called from the aggregation Region.

For more details about cross-Region replication, see Configuring finding aggregation in the Security Hub User Guide.


- **`aws-pp-pp-cli finding-aggregator delete`** -

Deletes a finding aggregator. When you delete the finding aggregator, you stop finding aggregation.

When you stop finding aggregation, findings that were already aggregated to the aggregation Region are still visible from the aggregation Region. New findings and finding updates are not aggregated.


- **`aws-pp-pp-cli finding-aggregator get`** - Returns the current finding aggregation configuration.
- **`aws-pp-pp-cli finding-aggregator list`** - If finding aggregation is enabled, then ListFindingAggregators returns the ARN of the finding aggregator. You can run this operation from any Region.
- **`aws-pp-pp-cli finding-aggregator update`** -

Updates the finding aggregation configuration. Used to update the Region linking mode and the list of included or excluded Regions. You cannot use UpdateFindingAggregator to change the aggregation Region.

You must run UpdateFindingAggregator from the current aggregation Region.

### findings

Manage findings

- **`aws-pp-pp-cli findings batch-import`** -

Imports security findings generated by a finding provider into Security Hub. This action is requested by the finding provider to import its findings into Security Hub.

BatchImportFindings must be called by one of the following:

  • The Amazon Web Services account that is associated with a finding if you are using the default product ARN or are a partner sending findings from within a customer's Amazon Web Services account. In these cases, the identifier of the account that you are calling BatchImportFindings from needs to be the same as the AwsAccountId attribute for the finding.

  • An Amazon Web Services account that Security Hub has allow-listed for an official partner integration. In this case, you can call BatchImportFindings from the allow-listed account and send findings from different customer accounts in the same batch.

The maximum allowed size for a finding is 240 Kb. An error is returned for any finding larger than 240 Kb.

After a finding is created, BatchImportFindings cannot be used to update the following finding fields and objects, which Security Hub customers use to manage their investigation workflow.

  • Note

  • UserDefinedFields

  • VerificationState

  • Workflow

Finding providers also should not use BatchImportFindings to update the following attributes.

  • Confidence

  • Criticality

  • RelatedFindings

  • Severity

  • Types

Instead, finding providers use FindingProviderFields to provide values for these attributes.


- **`aws-pp-pp-cli findings batch-update`** -

Used by Security Hub customers to update information about their investigation into a finding. Requested by administrator accounts or member accounts. Administrator accounts can update findings for their account and their member accounts. Member accounts can update findings for their account.

Updates from BatchUpdateFindings do not affect the value of UpdatedAt for a finding.

Administrator and member accounts can use BatchUpdateFindings to update the following finding fields and objects.

  • Confidence

  • Criticality

  • Note

  • RelatedFindings

  • Severity

  • Types

  • UserDefinedFields

  • VerificationState

  • Workflow

You can configure IAM policies to restrict access to fields and field values. For example, you might not want member accounts to be able to suppress findings or change the finding severity. See Configuring access to BatchUpdateFindings in the Security Hub User Guide.


- **`aws-pp-pp-cli findings get`** -

Returns a list of findings that match the specified criteria.

If finding aggregation is enabled, then when you call GetFindings from the aggregation Region, the results include all of the matching findings from both the aggregation Region and the linked Regions.


- **`aws-pp-pp-cli findings update`** -

UpdateFindings is deprecated. Instead of UpdateFindings, use BatchUpdateFindings.

Updates the Note and RecordState of the Security Hub-aggregated findings that the filter attributes specify. Any member account that can view the finding also sees the update to the finding.

### import-application-usage

Manage import application usage

- **`aws-pp-pp-cli import-application-usage import_application_usage`** -

Ingests application usage data from Amazon Simple Storage Service (Amazon S3).

The data must already exist in the S3 location. As part of the action, AWS Application Cost Profiler copies the object from your S3 bucket to an S3 bucket owned by Amazon for processing asynchronously.

### insights

Manage insights

- **`aws-pp-pp-cli insights create`** -

Creates a custom insight in Security Hub. An insight is a consolidation of findings that relate to a security issue that requires attention or remediation.

To group the related findings in the insight, use the GroupByAttribute.


- **`aws-pp-pp-cli insights delete`** - Deletes the insight specified by the InsightArn.
- **`aws-pp-pp-cli insights get`** - Lists and describes insights for the specified insight ARNs.
- **`aws-pp-pp-cli insights get-results`** - Lists the results of the Security Hub insight specified by the insight ARN.
- **`aws-pp-pp-cli insights update`** - Updates the Security Hub insight identified by the specified insight ARN.

### invitations

Manage invitations

- **`aws-pp-pp-cli invitations decline`** -

Declines invitations to become a member account.

A prospective member account uses this operation to decline an invitation to become a member.

This operation is only called by member accounts that aren't part of an organization. Organization accounts don't receive invitations.


- **`aws-pp-pp-cli invitations delete`** -

Deletes invitations received by the Amazon Web Services account to become a member account.

A Security Hub administrator account can use this operation to delete invitations sent to one or more member accounts.

This operation is only used to delete invitations that are sent to member accounts that aren't part of an organization. Organization accounts don't receive invitations.


- **`aws-pp-pp-cli invitations get-count`** - Returns the count of all Security Hub membership invitations that were sent to the current member account, not including the currently accepted invitation.
- **`aws-pp-pp-cli invitations list`** -

Lists all Security Hub membership invitations that were sent to the current Amazon Web Services account.

This operation is only used by accounts that are managed by invitation. Accounts that are managed using the integration with Organizations do not receive invitations.

### master

Manage master

- **`aws-pp-pp-cli master accept-invitation`** -

This method is deprecated. Instead, use AcceptAdministratorInvitation.

The Security Hub console continues to use AcceptInvitation. It will eventually change to use AcceptAdministratorInvitation. Any IAM policies that specifically control access to this function must continue to use AcceptInvitation. You should also add AcceptAdministratorInvitation to your policies to ensure that the correct permissions are in place after the console begins to use AcceptAdministratorInvitation.

Accepts the invitation to be a member account and be monitored by the Security Hub administrator account that the invitation was sent from.

This operation is only used by member accounts that are not added through Organizations.

When the member account accepts the invitation, permission is granted to the administrator account to view findings generated in the member account.


- **`aws-pp-pp-cli master disassociate-from-account`** -

This method is deprecated. Instead, use DisassociateFromAdministratorAccount.

The Security Hub console continues to use DisassociateFromMasterAccount. It will eventually change to use DisassociateFromAdministratorAccount. Any IAM policies that specifically control access to this function must continue to use DisassociateFromMasterAccount. You should also add DisassociateFromAdministratorAccount to your policies to ensure that the correct permissions are in place after the console begins to use DisassociateFromAdministratorAccount.

Disassociates the current Security Hub member account from the associated administrator account.

This operation is only used by accounts that are not part of an organization. For organization accounts, only the administrator account can disassociate a member account.


- **`aws-pp-pp-cli master get-account`** -

This method is deprecated. Instead, use GetAdministratorAccount.

The Security Hub console continues to use GetMasterAccount. It will eventually change to use GetAdministratorAccount. Any IAM policies that specifically control access to this function must continue to use GetMasterAccount. You should also add GetAdministratorAccount to your policies to ensure that the correct permissions are in place after the console begins to use GetAdministratorAccount.

Provides the details for the Security Hub administrator account for the current member account.

Can be used by both member accounts that are managed using Organizations and accounts that were invited manually.

### members

Manage members

- **`aws-pp-pp-cli members create`** -

Creates a member association in Security Hub between the specified accounts and the account used to make the request, which is the administrator account. If you are integrated with Organizations, then the administrator account is designated by the organization management account.

CreateMembers is always used to add accounts that are not organization members.

For accounts that are managed using Organizations, CreateMembers is only used in the following cases:

  • Security Hub is not configured to automatically add new organization accounts.

  • The account was disassociated or deleted in Security Hub.

This action can only be used by an account that has Security Hub enabled. To enable Security Hub, you can use the EnableSecurityHub operation.

For accounts that are not organization members, you create the account association and then send an invitation to the member account. To send the invitation, you use the InviteMembers operation. If the account owner accepts the invitation, the account becomes a member account in Security Hub.

Accounts that are managed using Organizations do not receive an invitation. They automatically become a member account in Security Hub.

  • If the organization account does not have Security Hub enabled, then Security Hub and the default standards are automatically enabled. Note that Security Hub cannot be enabled automatically for the organization management account. The organization management account must enable Security Hub before the administrator account enables it as a member account.

  • For organization accounts that already have Security Hub enabled, Security Hub does not make any other changes to those accounts. It does not change their enabled standards or controls.

A permissions policy is added that permits the administrator account to view the findings generated in the member account.

To remove the association between the administrator and member accounts, use the DisassociateFromMasterAccount or DisassociateMembers operation.


- **`aws-pp-pp-cli members delete`** -

Deletes the specified member accounts from Security Hub.

Can be used to delete member accounts that belong to an organization as well as member accounts that were invited manually.


- **`aws-pp-pp-cli members disassociate`** -

Disassociates the specified member accounts from the associated administrator account.

Can be used to disassociate both accounts that are managed using Organizations and accounts that were invited manually.


- **`aws-pp-pp-cli members get`** -

Returns the details for the Security Hub member accounts for the specified account IDs.

An administrator account can be either the delegated Security Hub administrator account for an organization or an administrator account that enabled Security Hub manually.

The results include both member accounts that are managed using Organizations and accounts that were invited manually.


- **`aws-pp-pp-cli members invite`** -

Invites other Amazon Web Services accounts to become member accounts for the Security Hub administrator account that the invitation is sent from.

This operation is only used to invite accounts that do not belong to an organization. Organization accounts do not receive invitations.

Before you can use this action to invite a member, you must first use the CreateMembers action to create the member account in Security Hub.

When the account owner enables Security Hub and accepts the invitation to become a member account, the administrator account can view the findings generated from the member account.


- **`aws-pp-pp-cli members list`** -

Lists details about all member accounts for the current Security Hub administrator account.

The results include both member accounts that belong to an organization and member accounts that were invited manually.

### organization

Manage organization

- **`aws-pp-pp-cli organization describe-configuration`** - Returns information about the Organizations configuration for Security Hub. Can only be called from a Security Hub administrator account.
- **`aws-pp-pp-cli organization disable-admin-account`** - Disables a Security Hub administrator account. Can only be called by the organization management account.
- **`aws-pp-pp-cli organization enable-admin-account`** - Designates the Security Hub administrator account for an organization. Can only be called by the organization management account.
- **`aws-pp-pp-cli organization list-admin-accounts`** - Lists the Security Hub administrator accounts. Can only be called by the organization management account.
- **`aws-pp-pp-cli organization update-configuration`** - Used to update the configuration related to Organizations. Can only be called from a Security Hub administrator account.

### product-subscriptions

Manage product subscriptions

- **`aws-pp-pp-cli product-subscriptions disable-import-findings-for-product`** - Disables the integration of the specified product with Security Hub. After the integration is disabled, findings from that product are no longer sent to Security Hub.
- **`aws-pp-pp-cli product-subscriptions enable-import-findings-for-product`** -

Enables the integration of a partner product with Security Hub. Integrated products send findings to Security Hub.

When you enable a product integration, a permissions policy that grants permission for the product to send findings to Security Hub is applied.


- **`aws-pp-pp-cli product-subscriptions list-enabled-products-for-import`** - Lists all findings-generating solutions (products) that you are subscribed to receive findings from in Security Hub.

### products

Manage products

- **`aws-pp-pp-cli products describe`** -

Returns information about product integrations in Security Hub.

You can optionally provide an integration ARN. If you provide an integration ARN, then the results only include that integration.

If you do not provide an integration ARN, then the results include all of the available product integrations.

### report-definition

Manage report definition

- **`aws-pp-pp-cli report-definition delete`** - Deletes the specified report definition in AWS Application Cost Profiler. This stops the report from being generated.
- **`aws-pp-pp-cli report-definition get`** - Retrieves the definition of a report already configured in AWS Application Cost Profiler.
- **`aws-pp-pp-cli report-definition list`** -

Retrieves a list of all reports and their configurations for your AWS account.

The maximum number of reports is one.


- **`aws-pp-pp-cli report-definition put`** - Creates the report definition for a report in Application Cost Profiler.
- **`aws-pp-pp-cli report-definition update`** - Updates existing report in AWS Application Cost Profiler.

### security-controls

Manage security controls

- **`aws-pp-pp-cli security-controls batch-get`** - Provides details about a batch of security controls for the current Amazon Web Services account and Amazon Web Services Region.
- **`aws-pp-pp-cli security-controls list-definitions`** - Lists all of the security controls that apply to a specified standard.

### standards

Manage standards

- **`aws-pp-pp-cli standards batch-disable`** -

Disables the standards specified by the provided StandardsSubscriptionArns.

For more information, see Security Standards section of the Security Hub User Guide.


- **`aws-pp-pp-cli standards batch-enable`** -

Enables the standards specified by the provided StandardsArn. To obtain the ARN for a standard, use the DescribeStandards operation.

For more information, see the Security Standards section of the Security Hub User Guide.


- **`aws-pp-pp-cli standards describe`** -

Returns a list of the available standards in Security Hub.

For each standard, the results include the standard ARN, the name, and a description.


- **`aws-pp-pp-cli standards describe-controls`** -

Returns a list of security standards controls.

For each control, the results include information about whether it is currently enabled, the severity, and a link to remediation information.


- **`aws-pp-pp-cli standards get-enabled`** - Returns a list of the standards that are currently enabled.
- **`aws-pp-pp-cli standards update-control`** - Used to control whether an individual security standard control is enabled or disabled.

### tags

Manage tags

- **`aws-pp-pp-cli tags list-for-resource`** - Returns a list of tags associated with a resource.
- **`aws-pp-pp-cli tags resource`** - Adds one or more tags to a resource.
- **`aws-pp-pp-cli tags untag-resource`** - Removes one or more tags from a resource.

### x-amz-target-awsbudget-service-gateway-create-budget

Manage x amz target awsbudget service gateway create budget

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-create-budget create-budget`** -

Creates a budget and, if included, notifications and subscribers.

Only one of BudgetLimit or PlannedBudgetLimits can be present in the syntax at one time. Use the syntax that matches your case. The Request Syntax section shows the BudgetLimit syntax. For PlannedBudgetLimits, see the Examples section.

### x-amz-target-awsbudget-service-gateway-create-budget-action

Manage x amz target awsbudget service gateway create budget action

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-create-budget-action create-budget-action`** - Creates a budget action.

### x-amz-target-awsbudget-service-gateway-create-notification

Manage x amz target awsbudget service gateway create notification

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-create-notification create-notification`** - Creates a notification. You must create the budget before you create the associated notification.

### x-amz-target-awsbudget-service-gateway-create-subscriber

Manage x amz target awsbudget service gateway create subscriber

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-create-subscriber create-subscriber`** - Creates a subscriber. You must create the associated budget and notification before you create the subscriber.

### x-amz-target-awsbudget-service-gateway-delete-budget

Manage x amz target awsbudget service gateway delete budget

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-delete-budget delete-budget`** -

Deletes a budget. You can delete your budget at any time.

Deleting a budget also deletes the notifications and subscribers that are associated with that budget.

### x-amz-target-awsbudget-service-gateway-delete-budget-action

Manage x amz target awsbudget service gateway delete budget action

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-delete-budget-action delete-budget-action`** - Deletes a budget action.

### x-amz-target-awsbudget-service-gateway-delete-notification

Manage x amz target awsbudget service gateway delete notification

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-delete-notification delete-notification`** -

Deletes a notification.

Deleting a notification also deletes the subscribers that are associated with the notification.

### x-amz-target-awsbudget-service-gateway-delete-subscriber

Manage x amz target awsbudget service gateway delete subscriber

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-delete-subscriber delete-subscriber`** -

Deletes a subscriber.

Deleting the last subscriber to a notification also deletes the notification.

### x-amz-target-awsbudget-service-gateway-describe-budget

Manage x amz target awsbudget service gateway describe budget

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-budget describe-budget`** -

Describes a budget.

The Request Syntax section shows the BudgetLimit syntax. For PlannedBudgetLimits, see the Examples section.

### x-amz-target-awsbudget-service-gateway-describe-budget-action

Manage x amz target awsbudget service gateway describe budget action

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-budget-action describe-budget-action`** - Describes a budget action detail.

### x-amz-target-awsbudget-service-gateway-describe-budget-action-histories

Manage x amz target awsbudget service gateway describe budget action histories

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-budget-action-histories describe-budget-action-histories`** - Describes a budget action history detail.

### x-amz-target-awsbudget-service-gateway-describe-budget-actions-for-account

Manage x amz target awsbudget service gateway describe budget actions for account

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-budget-actions-for-account describe-budget-actions-for-account`** - Describes all of the budget actions for an account.

### x-amz-target-awsbudget-service-gateway-describe-budget-actions-for-budget

Manage x amz target awsbudget service gateway describe budget actions for budget

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-budget-actions-for-budget describe-budget-actions-for-budget`** - Describes all of the budget actions for a budget.

### x-amz-target-awsbudget-service-gateway-describe-budget-notifications-for-account

Manage x amz target awsbudget service gateway describe budget notifications for account

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-budget-notifications-for-account describe-budget-notifications-for-account`** - Lists the budget names and notifications that are associated with an account.

### x-amz-target-awsbudget-service-gateway-describe-budget-performance-history

Manage x amz target awsbudget service gateway describe budget performance history

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-budget-performance-history describe-budget-performance-history`** - Describes the history for DAILY, MONTHLY, and QUARTERLY budgets. Budget history isn't available for ANNUAL budgets.

### x-amz-target-awsbudget-service-gateway-describe-budgets

Manage x amz target awsbudget service gateway describe budgets

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-budgets describe-budgets`** -

Lists the budgets that are associated with an account.

The Request Syntax section shows the BudgetLimit syntax. For PlannedBudgetLimits, see the Examples section.

### x-amz-target-awsbudget-service-gateway-describe-notifications-for-budget

Manage x amz target awsbudget service gateway describe notifications for budget

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-notifications-for-budget describe-notifications-for-budget`** - Lists the notifications that are associated with a budget.

### x-amz-target-awsbudget-service-gateway-describe-subscribers-for-notification

Manage x amz target awsbudget service gateway describe subscribers for notification

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-describe-subscribers-for-notification describe-subscribers-for-notification`** - Lists the subscribers that are associated with a notification.

### x-amz-target-awsbudget-service-gateway-execute-budget-action

Manage x amz target awsbudget service gateway execute budget action

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-execute-budget-action execute-budget-action`** - Executes a budget action.

### x-amz-target-awsbudget-service-gateway-update-budget

Manage x amz target awsbudget service gateway update budget

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-update-budget update-budget`** -

Updates a budget. You can change every part of a budget except for the budgetName and the calculatedSpend. When you modify a budget, the calculatedSpend drops to zero until Amazon Web Services has new usage data to use for forecasting.

Only one of BudgetLimit or PlannedBudgetLimits can be present in the syntax at one time. Use the syntax that matches your case. The Request Syntax section shows the BudgetLimit syntax. For PlannedBudgetLimits, see the Examples section.

### x-amz-target-awsbudget-service-gateway-update-budget-action

Manage x amz target awsbudget service gateway update budget action

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-update-budget-action update-budget-action`** - Updates a budget action.

### x-amz-target-awsbudget-service-gateway-update-notification

Manage x amz target awsbudget service gateway update notification

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-update-notification update-notification`** - Updates a notification.

### x-amz-target-awsbudget-service-gateway-update-subscriber

Manage x amz target awsbudget service gateway update subscriber

- **`aws-pp-pp-cli x-amz-target-awsbudget-service-gateway-update-subscriber update-subscriber`** - Updates a subscriber.

### x-amz-target-awshealth-20160804-describe-affected-accounts-for-organization

Manage x amz target awshealth 20160804 describe affected accounts for organization

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-affected-accounts-for-organization describe-affected-accounts-for-organization`** -

Returns a list of accounts in the organization from Organizations that are affected by the provided event. For more information about the different types of Health events, see Event.

Before you can call this operation, you must first enable Health to work with Organizations. To do this, call the EnableHealthServiceAccessForOrganization operation from your organization's management account.

This API operation uses pagination. Specify the nextToken parameter in the next request to return more results.

### x-amz-target-awshealth-20160804-describe-affected-entities

Manage x amz target awshealth 20160804 describe affected entities

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-affected-entities describe-affected-entities`** -

Returns a list of entities that have been affected by the specified events, based on the specified filter criteria. Entities can refer to individual customer resources, groups of customer resources, or any other construct, depending on the Amazon Web Services service. Events that have impact beyond that of the affected entities, or where the extent of impact is unknown, include at least one entity indicating this.

At least one event ARN is required.

  • This API operation uses pagination. Specify the nextToken parameter in the next request to return more results.

  • This operation supports resource-level permissions. You can use this operation to allow or deny access to specific Health events. For more information, see Resource- and action-based conditions in the Health User Guide.

### x-amz-target-awshealth-20160804-describe-affected-entities-for-organization

Manage x amz target awshealth 20160804 describe affected entities for organization

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-affected-entities-for-organization describe-affected-entities-for-organization`** -

Returns a list of entities that have been affected by one or more events for one or more accounts in your organization in Organizations, based on the filter criteria. Entities can refer to individual customer resources, groups of customer resources, or any other construct, depending on the Amazon Web Services service.

At least one event Amazon Resource Name (ARN) and account ID are required.

Before you can call this operation, you must first enable Health to work with Organizations. To do this, call the EnableHealthServiceAccessForOrganization operation from your organization's management account.

  • This API operation uses pagination. Specify the nextToken parameter in the next request to return more results.

  • This operation doesn't support resource-level permissions. You can't use this operation to allow or deny access to specific Health events. For more information, see Resource- and action-based conditions in the Health User Guide.

### x-amz-target-awshealth-20160804-describe-entity-aggregates

Manage x amz target awshealth 20160804 describe entity aggregates

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-entity-aggregates describe-entity-aggregates`** - Returns the number of entities that are affected by each of the specified events.

### x-amz-target-awshealth-20160804-describe-event-aggregates

Manage x amz target awshealth 20160804 describe event aggregates

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-event-aggregates describe-event-aggregates`** -

Returns the number of events of each event type (issue, scheduled change, and account notification). If no filter is specified, the counts of all events in each category are returned.

This API operation uses pagination. Specify the nextToken parameter in the next request to return more results.

### x-amz-target-awshealth-20160804-describe-event-details

Manage x amz target awshealth 20160804 describe event details

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-event-details describe-event-details`** -

Returns detailed information about one or more specified events. Information includes standard event data (Amazon Web Services Region, service, and so on, as returned by DescribeEvents), a detailed event description, and possible additional metadata that depends upon the nature of the event. Affected entities are not included. To retrieve the entities, use the DescribeAffectedEntities operation.

If a specified event can't be retrieved, an error message is returned for that event.

This operation supports resource-level permissions. You can use this operation to allow or deny access to specific Health events. For more information, see Resource- and action-based conditions in the Health User Guide.

### x-amz-target-awshealth-20160804-describe-event-details-for-organization

Manage x amz target awshealth 20160804 describe event details for organization

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-event-details-for-organization describe-event-details-for-organization`** -

Returns detailed information about one or more specified events for one or more Amazon Web Services accounts in your organization. This information includes standard event data (such as the Amazon Web Services Region and service), an event description, and (depending on the event) possible metadata. This operation doesn't return affected entities, such as the resources related to the event. To return affected entities, use the DescribeAffectedEntitiesForOrganization operation.

Before you can call this operation, you must first enable Health to work with Organizations. To do this, call the EnableHealthServiceAccessForOrganization operation from your organization's management account.

When you call the DescribeEventDetailsForOrganization operation, specify the organizationEventDetailFilters object in the request. Depending on the Health event type, note the following differences:

  • To return event details for a public event, you must specify a null value for the awsAccountId parameter. If you specify an account ID for a public event, Health returns an error message because public events aren't specific to an account.

  • To return event details for an event that is specific to an account in your organization, you must specify the awsAccountId parameter in the request. If you don't specify an account ID, Health returns an error message because the event is specific to an account in your organization.

For more information, see Event.

This operation doesn't support resource-level permissions. You can't use this operation to allow or deny access to specific Health events. For more information, see Resource- and action-based conditions in the Health User Guide.

### x-amz-target-awshealth-20160804-describe-event-types

Manage x amz target awshealth 20160804 describe event types

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-event-types describe-event-types`** -

Returns the event types that meet the specified filter criteria. You can use this API operation to find information about the Health event, such as the category, Amazon Web Services service, and event code. The metadata for each event appears in the EventType object.

If you don't specify a filter criteria, the API operation returns all event types, in no particular order.

This API operation uses pagination. Specify the nextToken parameter in the next request to return more results.

### x-amz-target-awshealth-20160804-describe-events

Manage x amz target awshealth 20160804 describe events

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-events describe-events`** -

Returns information about events that meet the specified filter criteria. Events are returned in a summary form and do not include the detailed description, any additional metadata that depends on the event type, or any affected resources. To retrieve that information, use the DescribeEventDetails and DescribeAffectedEntities operations.

If no filter criteria are specified, all events are returned. Results are sorted by lastModifiedTime, starting with the most recent event.

  • When you call the DescribeEvents operation and specify an entity for the entityValues parameter, Health might return public events that aren't specific to that resource. For example, if you call DescribeEvents and specify an ID for an Amazon Elastic Compute Cloud (Amazon EC2) instance, Health might return events that aren't specific to that resource or service. To get events that are specific to a service, use the services parameter in the filter object. For more information, see Event.

  • This API operation uses pagination. Specify the nextToken parameter in the next request to return more results.

### x-amz-target-awshealth-20160804-describe-events-for-organization

Manage x amz target awshealth 20160804 describe events for organization

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-events-for-organization describe-events-for-organization`** -

Returns information about events across your organization in Organizations. You can use thefilters parameter to specify the events that you want to return. Events are returned in a summary form and don't include the affected accounts, detailed description, any additional metadata that depends on the event type, or any affected resources. To retrieve that information, use the following operations:

If you don't specify a filter, the DescribeEventsForOrganizations returns all events across your organization. Results are sorted by lastModifiedTime, starting with the most recent event.

For more information about the different types of Health events, see Event.

Before you can call this operation, you must first enable Health to work with Organizations. To do this, call the EnableHealthServiceAccessForOrganization operation from your organization's management account.

This API operation uses pagination. Specify the nextToken parameter in the next request to return more results.

### x-amz-target-awshealth-20160804-describe-health-service-status-for-organization

Manage x amz target awshealth 20160804 describe health service status for organization

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-describe-health-service-status-for-organization describe-health-service-status-for-organization`** - This operation provides status information on enabling or disabling Health to work with your organization. To call this operation, you must sign in as an IAM user, assume an IAM role, or sign in as the root user (not recommended) in the organization's management account.

### x-amz-target-awshealth-20160804-disable-health-service-access-for-organization

Manage x amz target awshealth 20160804 disable health service access for organization

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-disable-health-service-access-for-organization disable-health-service-access-for-organization`** -

Disables Health from working with Organizations. To call this operation, you must sign in as an Identity and Access Management (IAM) user, assume an IAM role, or sign in as the root user (not recommended) in the organization's management account. For more information, see Aggregating Health events in the Health User Guide.

This operation doesn't remove the service-linked role from the management account in your organization. You must use the IAM console, API, or Command Line Interface (CLI) to remove the service-linked role. For more information, see Deleting a Service-Linked Role in the IAM User Guide.

You can also disable the organizational feature by using the Organizations DisableAWSServiceAccess API operation. After you call this operation, Health stops aggregating events for all other Amazon Web Services accounts in your organization. If you call the Health API operations for organizational view, Health returns an error. Health continues to aggregate health events for your Amazon Web Services account.

### x-amz-target-awshealth-20160804-enable-health-service-access-for-organization

Manage x amz target awshealth 20160804 enable health service access for organization

- **`aws-pp-pp-cli x-amz-target-awshealth-20160804-enable-health-service-access-for-organization enable-health-service-access-for-organization`** -

Enables Health to work with Organizations. You can use the organizational view feature to aggregate events from all Amazon Web Services accounts in your organization in a centralized location.

This operation also creates a service-linked role for the management account in the organization.

To call this operation, you must meet the following requirements:

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan from Amazon Web Services Support to use the Health API. If you call the Health API from an Amazon Web Services account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, you receive a SubscriptionRequiredException error.

  • You must have permission to call this operation from the organization's management account. For example IAM policies, see Health identity-based policy examples.

If you don't have the required support plan, you can instead use the Health console to enable the organizational view feature. For more information, see Aggregating Health events in the Health User Guide.

### x-amz-target-awsinsights-index-service-create-anomaly-monitor

Manage x amz target awsinsights index service create anomaly monitor

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-create-anomaly-monitor create-anomaly-monitor`** - Creates a new cost anomaly detection monitor with the requested type and monitor specification.

### x-amz-target-awsinsights-index-service-create-anomaly-subscription

Manage x amz target awsinsights index service create anomaly subscription

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-create-anomaly-subscription create-anomaly-subscription`** - Adds an alert subscription to a cost anomaly detection monitor. You can use each subscription to define subscribers with email or SNS notifications. Email subscribers can set an absolute or percentage threshold and a time frequency for receiving notifications.

### x-amz-target-awsinsights-index-service-create-cost-category-definition

Manage x amz target awsinsights index service create cost category definition

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-create-cost-category-definition create-cost-category-definition`** - Creates a new Cost Category with the requested name and rules.

### x-amz-target-awsinsights-index-service-delete-anomaly-monitor

Manage x amz target awsinsights index service delete anomaly monitor

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-delete-anomaly-monitor delete-anomaly-monitor`** - Deletes a cost anomaly monitor.

### x-amz-target-awsinsights-index-service-delete-anomaly-subscription

Manage x amz target awsinsights index service delete anomaly subscription

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-delete-anomaly-subscription delete-anomaly-subscription`** - Deletes a cost anomaly subscription.

### x-amz-target-awsinsights-index-service-delete-cost-category-definition

Manage x amz target awsinsights index service delete cost category definition

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-delete-cost-category-definition delete-cost-category-definition`** - Deletes a Cost Category. Expenses from this month going forward will no longer be categorized with this Cost Category.

### x-amz-target-awsinsights-index-service-describe-cost-category-definition

Manage x amz target awsinsights index service describe cost category definition

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-describe-cost-category-definition describe-cost-category-definition`** -

Returns the name, Amazon Resource Name (ARN), rules, definition, and effective dates of a Cost Category that's defined in the account.

You have the option to use EffectiveOn to return a Cost Category that's active on a specific date. If there's no EffectiveOn specified, you see a Cost Category that's effective on the current date. If Cost Category is still effective, EffectiveEnd is omitted in the response.

### x-amz-target-awsinsights-index-service-get-anomalies

Manage x amz target awsinsights index service get anomalies

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-anomalies get-anomalies`** - Retrieves all of the cost anomalies detected on your account during the time period that's specified by the DateInterval object. Anomalies are available for up to 90 days.

### x-amz-target-awsinsights-index-service-get-anomaly-monitors

Manage x amz target awsinsights index service get anomaly monitors

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-anomaly-monitors get-anomaly-monitors`** - Retrieves the cost anomaly monitor definitions for your account. You can filter using a list of cost anomaly monitor Amazon Resource Names (ARNs).

### x-amz-target-awsinsights-index-service-get-anomaly-subscriptions

Manage x amz target awsinsights index service get anomaly subscriptions

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-anomaly-subscriptions get-anomaly-subscriptions`** - Retrieves the cost anomaly subscription objects for your account. You can filter using a list of cost anomaly monitor Amazon Resource Names (ARNs).

### x-amz-target-awsinsights-index-service-get-cost-and-usage

Manage x amz target awsinsights index service get cost and usage

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-cost-and-usage get-cost-and-usage`** -

Retrieves cost and usage metrics for your account. You can specify which cost and usage-related metric that you want the request to return. For example, you can specify BlendedCosts or UsageQuantity. You can also filter and group your data by various dimensions, such as SERVICE or AZ, in a specific time range. For a complete list of valid dimensions, see the GetDimensionValues operation. Management account in an organization in Organizations have access to all member accounts.

For information about filter limitations, see Quotas and restrictions in the Billing and Cost Management User Guide.

### x-amz-target-awsinsights-index-service-get-cost-and-usage-with-resources

Manage x amz target awsinsights index service get cost and usage with resources

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-cost-and-usage-with-resources get-cost-and-usage-with-resources`** -

Retrieves cost and usage metrics with resources for your account. You can specify which cost and usage-related metric, such as BlendedCosts or UsageQuantity, that you want the request to return. You can also filter and group your data by various dimensions, such as SERVICE or AZ, in a specific time range. For a complete list of valid dimensions, see the GetDimensionValues operation. Management account in an organization in Organizations have access to all member accounts. This API is currently available for the Amazon Elastic Compute Cloud – Compute service only.

This is an opt-in only feature. You can enable this feature from the Cost Explorer Settings page. For information about how to access the Settings page, see Controlling Access for Cost Explorer in the Billing and Cost Management User Guide.

### x-amz-target-awsinsights-index-service-get-cost-categories

Manage x amz target awsinsights index service get cost categories

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-cost-categories get-cost-categories`** -

Retrieves an array of Cost Category names and values incurred cost.

If some Cost Category names and values are not associated with any cost, they will not be returned by this API.

### x-amz-target-awsinsights-index-service-get-cost-forecast

Manage x amz target awsinsights index service get cost forecast

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-cost-forecast get-cost-forecast`** - Retrieves a forecast for how much Amazon Web Services predicts that you will spend over the forecast time period that you select, based on your past costs.

### x-amz-target-awsinsights-index-service-get-dimension-values

Manage x amz target awsinsights index service get dimension values

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-dimension-values get-dimension-values`** - Retrieves all available filter values for a specified filter over a period of time. You can search the dimension values for an arbitrary string.

### x-amz-target-awsinsights-index-service-get-reservation-coverage

Manage x amz target awsinsights index service get reservation coverage

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-reservation-coverage get-reservation-coverage`** -

Retrieves the reservation coverage for your account, which you can use to see how much of your Amazon Elastic Compute Cloud, Amazon ElastiCache, Amazon Relational Database Service, or Amazon Redshift usage is covered by a reservation. An organization's management account can see the coverage of the associated member accounts. This supports dimensions, Cost Categories, and nested expressions. For any time period, you can filter data about reservation usage by the following dimensions:

  • AZ

  • CACHE_ENGINE

  • DATABASE_ENGINE

  • DEPLOYMENT_OPTION

  • INSTANCE_TYPE

  • LINKED_ACCOUNT

  • OPERATING_SYSTEM

  • PLATFORM

  • REGION

  • SERVICE

  • TAG

  • TENANCY

To determine valid values for a dimension, use the GetDimensionValues operation.

### x-amz-target-awsinsights-index-service-get-reservation-purchase-recommendation

Manage x amz target awsinsights index service get reservation purchase recommendation

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-reservation-purchase-recommendation get-reservation-purchase-recommendation`** -

Gets recommendations for reservation purchases. These recommendations might help you to reduce your costs. Reservations provide a discounted hourly rate (up to 75%) compared to On-Demand pricing.

Amazon Web Services generates your recommendations by identifying your On-Demand usage during a specific time period and collecting your usage into categories that are eligible for a reservation. After Amazon Web Services has these categories, it simulates every combination of reservations in each category of usage to identify the best number of each type of Reserved Instance (RI) to purchase to maximize your estimated savings.

For example, Amazon Web Services automatically aggregates your Amazon EC2 Linux, shared tenancy, and c4 family usage in the US West (Oregon) Region and recommends that you buy size-flexible regional reservations to apply to the c4 family usage. Amazon Web Services recommends the smallest size instance in an instance family. This makes it easier to purchase a size-flexible Reserved Instance (RI). Amazon Web Services also shows the equal number of normalized units. This way, you can purchase any instance size that you want. For this example, your RI recommendation is for c4.large because that is the smallest size instance in the c4 instance family.

### x-amz-target-awsinsights-index-service-get-reservation-utilization

Manage x amz target awsinsights index service get reservation utilization

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-reservation-utilization get-reservation-utilization`** - Retrieves the reservation utilization for your account. Management account in an organization have access to member accounts. You can filter data by dimensions in a time period. You can use GetDimensionValues to determine the possible dimension values. Currently, you can group only by SUBSCRIPTION_ID.

### x-amz-target-awsinsights-index-service-get-rightsizing-recommendation

Manage x amz target awsinsights index service get rightsizing recommendation

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-rightsizing-recommendation get-rightsizing-recommendation`** -

Creates recommendations that help you save cost by identifying idle and underutilized Amazon EC2 instances.

Recommendations are generated to either downsize or terminate instances, along with providing savings detail and metrics. For more information about calculation and function, see Optimizing Your Cost with Rightsizing Recommendations in the Billing and Cost Management User Guide.

### x-amz-target-awsinsights-index-service-get-savings-plans-coverage

Manage x amz target awsinsights index service get savings plans coverage

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-savings-plans-coverage get-savings-plans-coverage`** -

Retrieves the Savings Plans covered for your account. This enables you to see how much of your cost is covered by a Savings Plan. An organization’s management account can see the coverage of the associated member accounts. This supports dimensions, Cost Categories, and nested expressions. For any time period, you can filter data for Savings Plans usage with the following dimensions:

  • LINKED_ACCOUNT

  • REGION

  • SERVICE

  • INSTANCE_FAMILY

To determine valid values for a dimension, use the GetDimensionValues operation.

### x-amz-target-awsinsights-index-service-get-savings-plans-purchase-recommendation

Manage x amz target awsinsights index service get savings plans purchase recommendation

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-savings-plans-purchase-recommendation get-savings-plans-purchase-recommendation`** - Retrieves the Savings Plans recommendations for your account. First use StartSavingsPlansPurchaseRecommendationGeneration to generate a new set of recommendations, and then use GetSavingsPlansPurchaseRecommendation to retrieve them.

### x-amz-target-awsinsights-index-service-get-savings-plans-utilization

Manage x amz target awsinsights index service get savings plans utilization

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-savings-plans-utilization get-savings-plans-utilization`** -

Retrieves the Savings Plans utilization for your account across date ranges with daily or monthly granularity. Management account in an organization have access to member accounts. You can use GetDimensionValues in SAVINGS_PLANS to determine the possible dimension values.

You can't group by any dimension values for GetSavingsPlansUtilization.

### x-amz-target-awsinsights-index-service-get-savings-plans-utilization-details

Manage x amz target awsinsights index service get savings plans utilization details

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-savings-plans-utilization-details get-savings-plans-utilization-details`** -

Retrieves attribute data along with aggregate utilization and savings data for a given time period. This doesn't support granular or grouped data (daily/monthly) in response. You can't retrieve data by dates in a single response similar to GetSavingsPlanUtilization, but you have the option to make multiple calls to GetSavingsPlanUtilizationDetails by providing individual dates. You can use GetDimensionValues in SAVINGS_PLANS to determine the possible dimension values.

GetSavingsPlanUtilizationDetails internally groups data by SavingsPlansArn.

### x-amz-target-awsinsights-index-service-get-tags

Manage x amz target awsinsights index service get tags

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-tags get-tags`** - Queries for available tag keys and tag values for a specified period. You can search the tag values for an arbitrary string.

### x-amz-target-awsinsights-index-service-get-usage-forecast

Manage x amz target awsinsights index service get usage forecast

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-get-usage-forecast get-usage-forecast`** - Retrieves a forecast for how much Amazon Web Services predicts that you will use over the forecast time period that you select, based on your past usage.

### x-amz-target-awsinsights-index-service-list-cost-allocation-tags

Manage x amz target awsinsights index service list cost allocation tags

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-list-cost-allocation-tags list-cost-allocation-tags`** - Get a list of cost allocation tags. All inputs in the API are optional and serve as filters. By default, all cost allocation tags are returned.

### x-amz-target-awsinsights-index-service-list-cost-category-definitions

Manage x amz target awsinsights index service list cost category definitions

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-list-cost-category-definitions list-cost-category-definitions`** - Returns the name, Amazon Resource Name (ARN), NumberOfRules and effective dates of all Cost Categories defined in the account. You have the option to use EffectiveOn to return a list of Cost Categories that were active on a specific date. If there is no EffectiveOn specified, you’ll see Cost Categories that are effective on the current date. If Cost Category is still effective, EffectiveEnd is omitted in the response. ListCostCategoryDefinitions supports pagination. The request can have a MaxResults range up to 100.

### x-amz-target-awsinsights-index-service-list-savings-plans-purchase-recommendation-generation

Manage x amz target awsinsights index service list savings plans purchase recommendation generation

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-list-savings-plans-purchase-recommendation-generation list-savings-plans-purchase-recommendation-generation`** - Retrieves a list of your historical recommendation generations within the past 30 days.

### x-amz-target-awsinsights-index-service-list-tags-for-resource

Manage x amz target awsinsights index service list tags for resource

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-list-tags-for-resource list-tags-for-resource`** - Returns a list of resource tags associated with the resource specified by the Amazon Resource Name (ARN).

### x-amz-target-awsinsights-index-service-provide-anomaly-feedback

Manage x amz target awsinsights index service provide anomaly feedback

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-provide-anomaly-feedback provide-anomaly-feedback`** - Modifies the feedback property of a given cost anomaly.

### x-amz-target-awsinsights-index-service-start-savings-plans-purchase-recommendation-generation

Manage x amz target awsinsights index service start savings plans purchase recommendation generation

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-start-savings-plans-purchase-recommendation-generation start-savings-plans-purchase-recommendation-generation`** -

Requests a Savings Plans recommendation generation. This enables you to calculate a fresh set of Savings Plans recommendations that takes your latest usage data and current Savings Plans inventory into account. You can refresh Savings Plans recommendations up to three times daily for a consolidated billing family.

StartSavingsPlansPurchaseRecommendationGeneration has no request syntax because no input parameters are needed to support this operation.

### x-amz-target-awsinsights-index-service-tag-resource

Manage x amz target awsinsights index service tag resource

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-tag-resource tag-resource`** -

An API operation for adding one or more tags (key-value pairs) to a resource.

You can use the TagResource operation with a resource that already has tags. If you specify a new tag key for the resource, this tag is appended to the list of tags associated with the resource. If you specify a tag key that is already associated with the resource, the new tag value you specify replaces the previous value for that tag.

Although the maximum number of array members is 200, user-tag maximum is 50. The remaining are reserved for Amazon Web Services use.

### x-amz-target-awsinsights-index-service-untag-resource

Manage x amz target awsinsights index service untag resource

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-untag-resource untag-resource`** - Removes one or more tags from a resource. Specify only tag keys in your request. Don't specify the value.

### x-amz-target-awsinsights-index-service-update-anomaly-monitor

Manage x amz target awsinsights index service update anomaly monitor

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-update-anomaly-monitor update-anomaly-monitor`** - Updates an existing cost anomaly monitor. The changes made are applied going forward, and doesn't change anomalies detected in the past.

### x-amz-target-awsinsights-index-service-update-anomaly-subscription

Manage x amz target awsinsights index service update anomaly subscription

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-update-anomaly-subscription update-anomaly-subscription`** - Updates an existing cost anomaly monitor subscription.

### x-amz-target-awsinsights-index-service-update-cost-allocation-tags-status

Manage x amz target awsinsights index service update cost allocation tags status

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-update-cost-allocation-tags-status update-cost-allocation-tags-status`** - Updates status for cost allocation tags in bulk, with maximum batch size of 20. If the tag status that's updated is the same as the existing tag status, the request doesn't fail. Instead, it doesn't have any effect on the tag status (for example, activating the active tag).

### x-amz-target-awsinsights-index-service-update-cost-category-definition

Manage x amz target awsinsights index service update cost category definition

- **`aws-pp-pp-cli x-amz-target-awsinsights-index-service-update-cost-category-definition update-cost-category-definition`** - Updates an existing Cost Category. Changes made to the Cost Category rules will be used to categorize the current month’s expenses and future expenses. This won’t change categorization for the previous months.

### x-amz-target-awsorigami-service-gateway-service-delete-report-definition

Manage x amz target awsorigami service gateway service delete report definition

- **`aws-pp-pp-cli x-amz-target-awsorigami-service-gateway-service-delete-report-definition delete-report-definition`** - Deletes the specified report.

### x-amz-target-awsorigami-service-gateway-service-describe-report-definitions

Manage x amz target awsorigami service gateway service describe report definitions

- **`aws-pp-pp-cli x-amz-target-awsorigami-service-gateway-service-describe-report-definitions describe-report-definitions`** - Lists the AWS Cost and Usage reports available to this account.

### x-amz-target-awsorigami-service-gateway-service-modify-report-definition

Manage x amz target awsorigami service gateway service modify report definition

- **`aws-pp-pp-cli x-amz-target-awsorigami-service-gateway-service-modify-report-definition modify-report-definition`** - Allows you to programatically update your report preferences.

### x-amz-target-awsorigami-service-gateway-service-put-report-definition

Manage x amz target awsorigami service gateway service put report definition

- **`aws-pp-pp-cli x-amz-target-awsorigami-service-gateway-service-put-report-definition put-report-definition`** - Creates a new report using the description that you provide.

### x-amz-target-awsprice-list-service-describe-services

Manage x amz target awsprice list service describe services

- **`aws-pp-pp-cli x-amz-target-awsprice-list-service-describe-services describe-services`** - Returns the metadata for one service or a list of the metadata for all services. Use this without a service code to get the service codes for all services. Use it with a service code, such as AmazonEC2, to get information specific to that service, such as the attribute names available for that service. For example, some of the attribute names available for EC2 are volumeType, maxIopsVolume, operation, locationType, and instanceCapacity10xlarge.

### x-amz-target-awsprice-list-service-get-attribute-values

Manage x amz target awsprice list service get attribute values

- **`aws-pp-pp-cli x-amz-target-awsprice-list-service-get-attribute-values get-attribute-values`** - Returns a list of attribute values. Attributes are similar to the details in a Price List API offer file. For a list of available attributes, see Offer File Definitions in the Billing and Cost Management User Guide.

### x-amz-target-awsprice-list-service-get-price-list-file-url

Manage x amz target awsprice list service get price list file url

- **`aws-pp-pp-cli x-amz-target-awsprice-list-service-get-price-list-file-url get-price-list-file-url`** -

This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).

This returns the URL that you can retrieve your Price List file from. This URL is based on the PriceListArn and FileFormat that you retrieve from the ListPriceLists response.

### x-amz-target-awsprice-list-service-get-products

Manage x amz target awsprice list service get products

- **`aws-pp-pp-cli x-amz-target-awsprice-list-service-get-products get-products`** - Returns a list of all products that match the filter criteria.

### x-amz-target-awsprice-list-service-list-price-lists

Manage x amz target awsprice list service list price lists

- **`aws-pp-pp-cli x-amz-target-awsprice-list-service-list-price-lists list-price-lists`** -

This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).

This returns a list of Price List references that the requester if authorized to view, given a ServiceCode, CurrencyCode, and an EffectiveDate. Use without a RegionCode filter to list Price List references from all available Amazon Web Services Regions. Use with a RegionCode filter to get the Price List reference that's specific to a specific Amazon Web Services Region. You can use the PriceListArn from the response to get your preferred Price List files through the GetPriceListFileUrl API.

### x-amz-target-awssupport-20130415-add-attachments-to-set

Manage x amz target awssupport 20130415 add attachments to set

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-add-attachments-to-set add-attachments-to-set`** -

Adds one or more attachments to an attachment set.

An attachment set is a temporary container for attachments that you add to a case or case communication. The set is available for 1 hour after it's created. The expiryTime returned in the response is when the set expires.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

### x-amz-target-awssupport-20130415-add-communication-to-case

Manage x amz target awssupport 20130415 add communication to case

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-add-communication-to-case add-communication-to-case`** -

Adds additional customer communication to an Amazon Web Services Support case. Use the caseId parameter to identify the case to which to add communication. You can list a set of email addresses to copy on the communication by using the ccEmailAddresses parameter. The communicationBody value contains the text of the communication.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

### x-amz-target-awssupport-20130415-create-case

Manage x amz target awssupport 20130415 create case

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-create-case create-case`** -

Creates a case in the Amazon Web Services Support Center. This operation is similar to how you create a case in the Amazon Web Services Support Center Create Case page.

The Amazon Web Services Support API doesn't support requesting service limit increases. You can submit a service limit increase in the following ways:

A successful CreateCase request returns an Amazon Web Services Support case number. You can use the DescribeCases operation and specify the case number to get existing Amazon Web Services Support cases. After you create a case, use the AddCommunicationToCase operation to add additional communication or attachments to an existing case.

The caseId is separate from the displayId that appears in the Amazon Web Services Support Center. Use the DescribeCases operation to get the displayId.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

### x-amz-target-awssupport-20130415-describe-attachment

Manage x amz target awssupport 20130415 describe attachment

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-describe-attachment describe-attachment`** -

Returns the attachment that has the specified ID. Attachments can include screenshots, error logs, or other files that describe your issue. Attachment IDs are generated by the case management system when you add an attachment to a case or case communication. Attachment IDs are returned in the AttachmentDetails objects that are returned by the DescribeCommunications operation.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

### x-amz-target-awssupport-20130415-describe-cases

Manage x amz target awssupport 20130415 describe cases

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-describe-cases describe-cases`** -

Returns a list of cases that you specify by passing one or more case IDs. You can use the afterTime and beforeTime parameters to filter the cases by date. You can set values for the includeResolvedCases and includeCommunications parameters to specify how much information to return.

The response returns the following in JSON format:

  • One or more CaseDetails data types.

  • One or more nextToken values, which specify where to paginate the returned records represented by the CaseDetails objects.

Case data is available for 12 months after creation. If a case was created more than 12 months ago, a request might return an error.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

### x-amz-target-awssupport-20130415-describe-communications

Manage x amz target awssupport 20130415 describe communications

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-describe-communications describe-communications`** -

Returns communications and attachments for one or more support cases. Use the afterTime and beforeTime parameters to filter by date. You can use the caseId parameter to restrict the results to a specific case.

Case data is available for 12 months after creation. If a case was created more than 12 months ago, a request for data might cause an error.

You can use the maxResults and nextToken parameters to control the pagination of the results. Set maxResults to the number of cases that you want to display on each page, and use nextToken to specify the resumption of pagination.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

### x-amz-target-awssupport-20130415-describe-services

Manage x amz target awssupport 20130415 describe services

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-describe-services describe-services`** -

Returns the current list of Amazon Web Services services and a list of service categories for each service. You then use service names and categories in your CreateCase requests. Each Amazon Web Services service has its own set of categories.

The service codes and category codes correspond to the values that appear in the Service and Category lists on the Amazon Web Services Support Center Create Case page. The values in those fields don't necessarily match the service codes and categories returned by the DescribeServices operation. Always use the service codes and categories that the DescribeServices operation returns, so that you have the most recent set of service and category codes.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

### x-amz-target-awssupport-20130415-describe-severity-levels

Manage x amz target awssupport 20130415 describe severity levels

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-describe-severity-levels describe-severity-levels`** -

Returns the list of severity levels that you can assign to a support case. The severity level for a case is also a field in the CaseDetails data type that you include for a CreateCase request.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

### x-amz-target-awssupport-20130415-describe-trusted-advisor-check-refresh-statuses

Manage x amz target awssupport 20130415 describe trusted advisor check refresh statuses

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-describe-trusted-advisor-check-refresh-statuses describe-trusted-advisor-check-refresh-statuses`** -

Returns the refresh status of the Trusted Advisor checks that have the specified check IDs. You can get the check IDs by calling the DescribeTrustedAdvisorChecks operation.

Some checks are refreshed automatically, and you can't return their refresh statuses by using the DescribeTrustedAdvisorCheckRefreshStatuses operation. If you call this operation for these checks, you might see an InvalidParameterValue error.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

To call the Trusted Advisor operations in the Amazon Web Services Support API, you must use the US East (N. Virginia) endpoint. Currently, the US West (Oregon) and Europe (Ireland) endpoints don't support the Trusted Advisor operations. For more information, see About the Amazon Web Services Support API in the Amazon Web Services Support User Guide.

### x-amz-target-awssupport-20130415-describe-trusted-advisor-check-result

Manage x amz target awssupport 20130415 describe trusted advisor check result

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-describe-trusted-advisor-check-result describe-trusted-advisor-check-result`** -

Returns the results of the Trusted Advisor check that has the specified check ID. You can get the check IDs by calling the DescribeTrustedAdvisorChecks operation.

The response contains a TrustedAdvisorCheckResult object, which contains these three objects:

In addition, the response contains these fields:

  • status - The alert status of the check can be ok (green), warning (yellow), error (red), or not_available.

  • timestamp - The time of the last refresh of the check.

  • checkId - The unique identifier for the check.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

To call the Trusted Advisor operations in the Amazon Web Services Support API, you must use the US East (N. Virginia) endpoint. Currently, the US West (Oregon) and Europe (Ireland) endpoints don't support the Trusted Advisor operations. For more information, see About the Amazon Web Services Support API in the Amazon Web Services Support User Guide.

### x-amz-target-awssupport-20130415-describe-trusted-advisor-check-summaries

Manage x amz target awssupport 20130415 describe trusted advisor check summaries

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-describe-trusted-advisor-check-summaries describe-trusted-advisor-check-summaries`** -

Returns the results for the Trusted Advisor check summaries for the check IDs that you specified. You can get the check IDs by calling the DescribeTrustedAdvisorChecks operation.

The response contains an array of TrustedAdvisorCheckSummary objects.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

To call the Trusted Advisor operations in the Amazon Web Services Support API, you must use the US East (N. Virginia) endpoint. Currently, the US West (Oregon) and Europe (Ireland) endpoints don't support the Trusted Advisor operations. For more information, see About the Amazon Web Services Support API in the Amazon Web Services Support User Guide.

### x-amz-target-awssupport-20130415-describe-trusted-advisor-checks

Manage x amz target awssupport 20130415 describe trusted advisor checks

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-describe-trusted-advisor-checks describe-trusted-advisor-checks`** -

Returns information about all available Trusted Advisor checks, including the name, ID, category, description, and metadata. You must specify a language code.

The response contains a TrustedAdvisorCheckDescription object for each check. You must set the Amazon Web Services Region to us-east-1.

  • You must have a Business, Enterprise On-Ramp, or Enterprise Support plan to use the Amazon Web Services Support API.

  • If you call the Amazon Web Services Support API from an account that doesn't have a Business, Enterprise On-Ramp, or Enterprise Support plan, the SubscriptionRequiredException error message appears. For information about changing your support plan, see Amazon Web Services Support.

  • The names and descriptions for Trusted Advisor checks are subject to change. We recommend that you specify the check ID in your code to uniquely identify a check.

To call the Trusted Advisor operations in the Amazon Web Services Support API, you must use the US East (N. Virginia) endpoint. Currently, the US West (Oregon) and Europe (Ireland) endpoints don't support the Trusted Advisor operations. For more information, see About the Amazon Web Services Support API in the Amazon Web Services Support User Guide.

### x-amz-target-awssupport-20130415-refresh-trusted-advisor-check

Manage x amz target awssupport 20130415 refresh trusted advisor check

- **`aws-pp-pp-cli x-amz-target-awssupport-20130415-refresh-trusted-advisor-check refresh-trusted-advisor-check`** -

Refreshes the Trusted Advisor check that you specify using the check ID. You can get the check IDs by calling the DescribeTrustedAdvisorChecks operation.

Some checks are refresh