AWS marketplace documentation change
Summary
Updated prerequisites for Procurement Insights dashboard with clearer role setup instructions, reorganized permissions requirements, and added documentation links
Security assessment
Changes focus on IAM permissions and service-linked role configuration, which are security-related controls, but there's no evidence of addressing a specific vulnerability
Diff
diff --git a/marketplace/latest/buyerguide/enabling-procurement-insights.md b/marketplace/latest/buyerguide/enabling-procurement-insights.md index 2fb86fb8d..e742b7744 100644 --- a//marketplace/latest/buyerguide/enabling-procurement-insights.md +++ b//marketplace/latest/buyerguide/enabling-procurement-insights.md @@ -30 +30 @@ To set up and enable the **Procurement insights** dashboard, you must have the f - * A service-linked role that integrates the dashboard with your organization. + * Create the service-linked role and enable **Trusted access** in AWS Marketplace settings. @@ -32,3 +32 @@ To set up and enable the **Procurement insights** dashboard, you must have the f - * The following permissions: - - * `aws-marketplace:GetBuyerDashboard` + * The following enablement permissions are required to enable the dashboards: @@ -38,2 +35,0 @@ To set up and enable the **Procurement insights** dashboard, you must have the f - * `organizations:EnableAWSServiceAccess` - @@ -42 +38 @@ To set up and enable the **Procurement insights** dashboard, you must have the f - * `organizations:DeregisterDelegatedAdministrator` + * `organizations:EnableAWSServiceAccess` @@ -46 +42 @@ To set up and enable the **Procurement insights** dashboard, you must have the f - * `organizations:ListDelegatedAdministrators` + * `organizations:DeregisterDelegatedAdministrator`(Required to manage delegated admins) @@ -48 +44 @@ To set up and enable the **Procurement insights** dashboard, you must have the f - * `organizations:RegisterDelegatedAdministrator` + * `organizations:ListDelegatedAdministrators`(Required to manage delegated admins) @@ -50 +46 @@ To set up and enable the **Procurement insights** dashboard, you must have the f -###### Note + * `organizations:RegisterDelegatedAdministrator`(Required to manage delegated admins) @@ -52 +48 @@ To set up and enable the **Procurement insights** dashboard, you must have the f -If you need help creating these permissions, contact your AWS administrator. + * The following permissions are required to view and interact with the dashboards: @@ -53,0 +50 @@ If you need help creating these permissions, contact your AWS administrator. + * `aws-marketplace:GetBuyerDashboard` @@ -54,0 +52,6 @@ If you need help creating these permissions, contact your AWS administrator. + * `organizations:DescribeOrganization` + + + + +###### Note @@ -55,0 +59 @@ If you need help creating these permissions, contact your AWS administrator. +If you need help getting these permissions, contact your AWS administrator. @@ -59 +63 @@ If you need help creating these permissions, contact your AWS administrator. -You or your AWS administrator use the AWS Marketplace console to activate the dashboard. +To activate dashboards, you must sign in to the AWS organization's management account with all features enabled. Your IAM user or role must have the permissions specified in [Dashboard prerequisites](https://docs.aws.amazon.com/marketplace/latest/buyerguide/enabling-procurement-insights.html#dashboard-prereqs).