This documentation discusses using IAM in the context of AWS Private CA. It doesn't provide detailed information about the IAM service. For complete IAM documentation, see the IAM User Guide. For information about IAM policy syntax and descriptions, see AWS IAM Policy Reference.
Charges associated with a certificate issued in a cross-account scenario are billed to the AWS account that issues the certificate.