AWS Marketplace (aws-marketplace)

Additions

Actions

• AssociateProductsWithPrivateMarketplace
  
  • Description:  Grants permission to approve a request for a product to be associated with the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it
  • Access:  Write
• BatchMeterUsage
  
  • Description:  Grants permission to post metering records for a set of customers for SaaS applications
  • Access:  Write
• CancelChangeSet
  
  • Description:  Grants permission to cancel a running change set
  • Access:  Write
  • Resources: 

    Name: ChangeSet

    Required: Yes

• CreatePrivateMarketplaceRequests
  
  • Description:  Grants permission to create a new request for a product or products to be associated with the Private Marketplace. This action can be performed by any account in an in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it
  • Access:  Write
• CreateVerificationEvidence
  
  • Description:  Grants permission to create a new verification evidence resource for BusinessVerification
  • Access:  Write
  • Resources: 

    Name: VerificationEvidence

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteResourcePolicy
  
  • Description:  Grants permission to delete the resource policy of an existing entity
  • Access:  Permissions management
  • Resources: 

    Name: Entity

    Required: Yes

• DescribeAssessment
  
  • Description:  Grants permission to return the details of an existing assessment
  • Access:  Read
  • Resources: 

    Name: Assessment

    Required: No

• DescribeBuilds
  
  • Description:  Describes Image Builds identified by a build Id
  • Access:  Read
• DescribeChangeSet
  
  • Description:  Grants permission to return the details of an existing change set
  • Access:  Read
  • Resources: 

    Name: ChangeSet

    Required: Yes

• DescribeEntity
  
  • Description:  Grants permission to return the details of an existing entity
  • Access:  Read
  • Resources: 

    Name: Entity

    Required: Yes

• DescribePrivateMarketplaceRequests
  
  • Description:  Grants permission to describe requests and associated products in the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it
  • Access:  List
• DescribeProcurementSystemConfiguration
  
  • Description:  Grants permission to describe the Procurement System integration configuration (e.g. Coupa) for the individual account, or for the entire AWS Organization if one exists. This action can only be performed by the master account if using an AWS Organization
  • Access:  Read
• DisassociateProductsFromPrivateMarketplace
  
  • Description:  Grants permission to decline a request for a product to be associated with the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it
  • Access:  Write
• GetBuyerDashboard
  
  • Description:  Grants permission to view a dashboard that shows a buyer's AWS Marketplace purchase data
  • Access:  Read
  • Resources: 

    Name: Dashboard

    Required: Yes

• GetEntitlements
  
  • Description:  Grants permission to retrieve entitlement values for a given product. The results can be filtered based on customer identifier or product dimensions
  • Access:  Read
• GetInvoiceSubmissionTask
  
  • Description:  Grants permission to retrieve details of an existing invoice submission task
  • Access:  Read
  • Resources: 

    Name: InvoiceSubmissionTask

    Required: Yes

• GetIssuedTaxInvoice
  
  • Description:  Grants permission to retrieve details of a specific tax invoice issued by AWS on behalf of a seller
  • Access:  Read
  • Resources: 

    Name: IssuedTaxInvoice

    Required: Yes

• GetListing
  
  • Description:  Grants permission to retrieve information about a listing
  • Access:  Read
  • Resources: 

    Name: Listing

    Required: Yes

• GetOffer
  
  • Description:  Grants permission to retrieve information about an offer
  • Access:  Read
  • Resources: 

    Name: Offer

    Required: Yes

• GetOfferSet
  
  • Description:  Grants permission to retrieve information about an offer set
  • Access:  Read
  • Resources: 

    Name: OfferSet

    Required: Yes

• GetOfferTerms
  
  • Description:  Grants permission to retrieve terms for an offer
  • Access:  Read
  • Resources: 

    Name: Offer

    Required: Yes

• GetProduct
  
  • Description:  Grants permission to retrieve information about a product
  • Access:  Read
  • Resources: 

    Name: Product

    Required: Yes

• GetResourcePolicy
  
  • Description:  Grants permission to get the resource policy of an existing entity
  • Access:  Read
  • Resources: 

    Name: Entity

    Required: Yes

• GetSellerDashboard
  
  • Description:  Grants permission to view a seller dashboard
  • Access:  Read
  • Resources: 

    Name: SellerDashboard

    Required: Yes

• GetVerification
  
  • Description:  Grants permission to retrieve the detailed status of a specific verification process, including PSP validation results
  • Access:  Read
  • Conditions: 

    aws-marketplace:VerificationType

• GetVerificationEvidence
  
  • Description:  Grants permission to retrieve the complete content of a specific verification evidence resource
  • Access:  Read
  • Resources: 

    Name: VerificationEvidence

    Required: Yes

• ListAssessments
  
  • Description:  Grants permission to list existing assessments
  • Access:  List
• ListBuilds
  
  • Description:  Lists Image Builds.
  • Access:  Read
• ListChangeSets
  
  • Description:  Grants permission to list existing change sets
  • Access:  List
• ListEntities
  
  • Description:  Grants permission to list existing entities
  • Access:  List
• ListFulfillmentOptions
  
  • Description:  Grants permission to list fulfillment options for a product
  • Access:  List
  • Resources: 

    Name: Product

    Required: Yes

• ListInvoiceSubmissionTasks
  
  • Description:  Grants permission to list existing invoice submission tasks
  • Access:  List
• ListIssuedTaxInvoices
  
  • Description:  Grants permission to list tax invoices issued by AWS on behalf of a seller
  • Access:  List
• ListPayables
  
  • Description:  Grants permission to list payables of the specified payable provenance
  • Access:  List
• ListPrivateListings
  
  • Description:  Grants permission to list private offers
  • Access:  List
• ListPrivateMarketplaceRequests
  
  • Description:  Grants permission to get a queryable list for requests and associated products in the Private Marketplace. This action can be performed by any account in an AWS Organization, provided the user has permissions to do so, and the Organization's Service Control Policies allow it
  • Access:  List
• ListPurchaseOptions
  
  • Description:  Grants permission to list purchase options available to the buyer
  • Access:  List
  • Resources: 

    Name: AllPurchaseOptions

    Required: Yes

• ListTagsForResource
  
  • Description:  Grants permission to list tags on an existing entity, change set, invoice submission task, or issued tax invoice
  • Access:  Read
  • Resources: 

    Name: ChangeSet

    Required: No

    Name: DeploymentParameter

    Required: No

    Name: Entity

    Required: No

    Name: InvoiceSubmissionTask

    Required: No

    Name: IssuedTaxInvoice

    Required: No

    Name: VerificationEvidence

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListVerificationEvidence
  
  • Description:  Grants permission to list verification evidence resources with summary metadata
  • Access:  List
• ListVerifications
  
  • Description:  Grants permission to list all verification statuses across jurisdictions and verification types
  • Access:  List
  • Conditions: 

    aws-marketplace:VerificationType

• MeterUsage
  
  • Description:  Grants permission to emit metering records
  • Access:  Write
• PutDeploymentParameter
  
  • Description:  Grants permission to create or update a deployment parameter resource
  • Access:  Write
  • Resources: 

    Name: DeploymentParameter

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• PutProcurementSystemConfiguration
  
  • Description:  Grants permission to create or update the Procurement System integration configuration (e.g. Coupa) for the individual account, or for the entire AWS Organization if one exists. This action can only be performed by the master account if using an AWS Organization
  • Access:  Write
• PutResourcePolicy
  
  • Description:  Grants permission to attach a resource policy to an existing entity
  • Access:  Permissions management
  • Resources: 

    Name: Entity

    Required: Yes

• RegisterUsage
  
  • Description:  Grants permission to to verify that the customer running your paid software is subscribed to your product on AWS Marketplace, enabling you to guard against unauthorized use. Meters software use per ECS task, per hour, with usage prorated to the second
  • Access:  Write
• ResolveCustomer
  
  • Description:  Grants permission to resolve a registration token to obtain a CustomerIdentifier and product code
  • Access:  Write
• SearchFacets
  
  • Description:  Grants permission to search for facet values to filter listings
  • Access:  List
  • Resources: 

    Name: AllListings

    Required: Yes

• SearchListings
  
  • Description:  Grants permission to search for product listings
  • Access:  List
  • Resources: 

    Name: AllListings

    Required: Yes

• StartBuild
  
  • Description:  Starts an Image Build
  • Access:  Write
• StartChangeSet
  
  • Description:  Grants permission to request a new change set (Note: resource-level permissions for this action and condition context keys for this action are only supported when used with Catalog API and are not supported when used with AWS Marketplace Management Portal)
  • Access:  Write
  • Resources: 

    Name: Entity

    Required: Yes

  • Conditions: 

    aws-marketplace:Intent

    aws:RequestTag/${TagKey}

    aws:TagKeys

    catalog:ChangeType

• StartInvoiceSubmissionTask
  
  • Description:  Grants permission to initiate tasks that submit invoices for processing in AWS Marketplace
  • Access:  Write
  • Resources: 

    Name: InvoiceSubmissionTask

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• StartVerification
  
  • Description:  Grants permission to submit verification evidence to a Payment Service Provider and enable data sharing for a specified jurisdiction
  • Access:  Write
  • Resources: 

    Name: VerificationEvidence

    Required: Yes

  • Conditions: 

    aws-marketplace:VerificationType

• TagResource
  
  • Description:  Grants permission to add new tags to a resource. Supported resource: Entity, ChangeSet, InvoiceSubmissionTask, IssuedTaxInvoice
  • Access:  Tagging
  • Resources: 

    Name: ChangeSet

    Required: No

    Name: DeploymentParameter

    Required: Yes

    Name: Entity

    Required: No

    Name: InvoiceSubmissionTask

    Required: No

    Name: IssuedTaxInvoice

    Required: No

    Name: VerificationEvidence

    Required: No

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to remove tags from a resource. Supported resource: Entity, ChangeSet, InvoiceSubmissionTask, IssuedTaxInvoice
  • Access:  Tagging
  • Resources: 

    Name: ChangeSet

    Required: No

    Name: DeploymentParameter

    Required: Yes

    Name: Entity

    Required: No

    Name: InvoiceSubmissionTask

    Required: No

    Name: IssuedTaxInvoice

    Required: No

    Name: VerificationEvidence

    Required: No

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• UpdateVerificationEvidence
  
  • Description:  Grants permission to update an existing verification evidence resource using full replacement semantics
  • Access:  Write
  • Resources: 

    Name: VerificationEvidence

    Required: Yes

Resources

• AllListings
  
  • Arn:  arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/listing/*
• AllPurchaseOptions
  
  • Arn:  arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/purchaseOption/*
• Assessment
  
  • Arn:  arn:${Partition}:aws-marketplace:${Region}::${Catalog}/Assessment/${ResourceId}
• ChangeSet
  
  • Arn:  arn:${Partition}:aws-marketplace:${Region}:${Account}:${Catalog}/ChangeSet/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    catalog:ChangeType

• Dashboard
  
  • Arn:  arn:${Partition}:aws-marketplace::${Account}:${Catalog}/ReportingData/${FactTable}/Dashboard/${DashboardName}
• DeploymentParameter
  
  • Arn:  arn:${Partition}:aws-marketplace:${Region}:${Account}:DeploymentParameter:catalogs/${CatalogName}/products/${ProductId}/${ResourceId}
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

• Entity
  
  • Arn:  arn:${Partition}:aws-marketplace:${Region}:${Account}:${Catalog}/${EntityType}/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    catalog:ChangeType

• InvoiceSubmissionTask
  
  • Arn:  arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/${Catalog}/invoice-submission-task/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• IssuedTaxInvoice
  
  • Arn:  arn:${Partition}:aws-marketplace:${Region}:${Account}:catalog/${Catalog}/issued-tax-invoice/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• Listing
  
  • Arn:  arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/listing/${ListingId}
• Offer
  
  • Arn:  arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/offer/${OfferId}
• OfferSet
  
  • Arn:  arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/offerSet/${OfferSetId}
• Product
  
  • Arn:  arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/product/${ProductId}
• PurchaseOption
  
  • Arn:  arn:${Partition}:aws-marketplace:::catalog/${CatalogName}/purchaseOption/${PurchaseOptionId}
• SellerDashboard
  
  • Arn:  arn:${Partition}:aws-marketplace::${Account}:${Catalog}/ReportingData/${FactTable}/Dashboard/${DashboardName}
• VerificationEvidence
  
  • Arn:  arn:${Partition}:aws-marketplace:${Region}:${Account}:verification-type/${VerificationType}/verification-evidence/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws-marketplace:Intent
  
  • Description:  Filters access by the Intent parameter in the StartChangeSet request
  • Type:  String
• aws-marketplace:VerificationType
  
  • Description:  Filters access by the verification type for verification process operations (StartVerification, GetVerification, ListVerifications). Valid values: BusinessVerification
  • Type:  String
• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  ArrayOfString
• catalog:ChangeType
  
  • Description:  Filters access by the change type in the StartChangeSet request
  • Type:  String