AWS partner-central documentation change
Summary
Restructured account linking documentation to focus on benefits and program requirements rather than technical implementation details. Removed step-by-step IAM policy creation instructions and AWS Marketplace linking/unlinking procedures, replacing them with high-level advantages and references to external guides.
Security assessment
The changes remove granular IAM policy configuration details but do not address any specific security vulnerability or weakness. The removal of technical security controls appears to be part of documentation reorganization rather than a response to a security issue. No new security features are documented.
Diff
diff --git a/partner-central/latest/getting-started/account-linking.md b/partner-central/latest/getting-started/account-linking.md index 9f3ba48fc..9023e8dda 100644 --- a//partner-central/latest/getting-started/account-linking.md +++ b//partner-central/latest/getting-started/account-linking.md @@ -5 +5 @@ -PrerequisitesLinking your accountUnlinking your account +# Linking AWS Partner Central and AWS accounts @@ -7,9 +7 @@ PrerequisitesLinking your accountUnlinking your account -# Linking AWS Partner Central accounts with AWS Marketplace seller accounts - -AWS Partners with AWS Marketplace seller accounts can connect their accounts using the Account Linking feature in AWS Partner Central. Connecting the AWS Partner Central account to an AWS Marketplace account and mapping user permissions across portals allows users to seamlessly access both accounts through single sign-on access, enables product-to-solution linking, ACE opportunities to marketplace private offers linking, and access to AWS Marketplace seller insights dashboards within Partner analytics in AWS Partner Central. - -To enable account linking, assign[ user roles](./user-roles.html) in AWS Partner Central, including the cloud admin role. If a cloud admin role is not assigned, the alliance lead user can link AWS Partner Central and AWS Marketplace accounts. For more information about AWS Marketplace, refer to the [AWS Marketplace Seller Guide](https://docs.aws.amazon.com/marketplace/latest/userguide/what-is-marketplace.html). - -###### Important - -To enable ACE opportunity connections to Marketplace private offers, users must be mapped to an IAM role in the connected AWS marketplace seller account. For more information, refer to Linking your AWS Partner Central account to an AWS Marketplace account. +You can streamline your operations by linking AWS Partner Central to the AWS account dedicated to AWS Partner Network engagements. If you sell on AWS Marketplace, you can also link AWS Partner Central to your AWS Marketplace seller account. @@ -19,129 +11 @@ To enable ACE opportunity connections to Marketplace private offers, users must -Browser compatibility requirements: Firefox Extended Support Release (Firefox ESR) isn't supported. If you have UI issues related to Firefox ESR while using AWS Partner Central, use a standard version of Firefox or switch to a Chromium-based browser. - -###### Topics - - * Prerequisites - - * Linking your AWS Partner Central account to an AWS Marketplace account - - * Unlinking your AWS Partner Central account from an AWS Marketplace account - - - - -## Prerequisites - -To link your AWS Marketplace seller account with an AWS Partner Central account, you must have access to an AWS account with IAM permissions. Follow these steps to create a custom permissions policy and assign the policy to an existing IAM user or role. If you already have an IAM user or role with AWS administrator permissions, you may skip these steps and start with Linking your AWS Partner Central account to an AWS Marketplace account. - -###### To create the custom permissions policy: - - 1. Sign in to the [IAM console](https://console.aws.amazon.com/iam/). - - 2. Under **Access management** , choose **Policies**. - - 3. Choose **Create policy**. - - 4. Specify permissions in the policy editor by choosing **JSON** , and then add the following policy: - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "CreatePartnerCentralRoles", - "Effect": "Allow", - "Action": [ - "iam:CreateRole" - ], - "Resource": [ - "arn:aws:iam::*:role/PartnerCentralRoleForCloudAdmin*", - "arn:aws:iam::*:role/PartnerCentralRoleForAce*", - "arn:aws:iam::*:role/PartnerCentralRoleForAlliance*" - ] - }, - { - "Sid": "AttachPolicyToPartnerCentralCloudAdminRole", - "Effect": "Allow", - "Action": "iam:AttachRolePolicy", - "Resource": "arn:aws:iam::*:role/PartnerCentralRoleForCloudAdmin*", - "Condition": { - "ArnLike": { - "iam:PolicyARN": [ - "arn:aws:iam::*:policy/PartnerCentralAccountManagementUserRoleAssociation", - "arn:aws:iam::*:policy/AWSPartnerCentralFullAccess", - "arn:aws:iam::*:policy/AWSMarketplaceSellerFullAccess" - ] - } - } - }, - { - "Sid": "AttachPolicyToPartnerCentralAceRole", - "Effect": "Allow", - "Action": [ - "iam:AttachRolePolicy" - ], - "Resource": "arn:aws:iam::*:role/PartnerCentralRoleForAce*", - "Condition": { - "ArnLike": { - "iam:PolicyARN": [ - "arn:aws:iam::*:policy/AWSPartnerCentralOpportunityManagement", - "arn:aws:iam::*:policy/AWSMarketplaceSellerOfferManagement" - ] - } - } - }, - { - "Sid": "AttachPolicyToPartnerCentralAllianceRole", - "Effect": "Allow", - "Action": [ - "iam:AttachRolePolicy" - ], - "Resource": "arn:aws:iam::*:role/PartnerCentralRoleForAlliance*", - "Condition": { - "ArnLike": { - "iam:PolicyARN": [ - "arn:aws:iam::*:policy/AWSPartnerCentralFullAccess", - "arn:aws:iam::*:policy/AWSMarketplaceSellerFullAccess" - ] - } - } - }, - { - "Sid": "AssociatePartnerAccount", - "Effect": "Allow", - "Action": [ - "partnercentral-account-management:AssociatePartnerAccount" - ], - "Resource": "*" - }, - { - "Sid": "SellerRegistration", - "Effect": "Allow", - "Action": [ - "aws-marketplace:ListChangeSets", - "aws-marketplace:DescribeChangeSet", - "aws-marketplace:StartChangeSet", - "aws-marketplace:ListEntities", - "aws-marketplace:DescribeEntity" - ], - "Resource": "*" - } - ] - } - - - 5. Choose **Next**. - - 6. Under **Policy details** , enter `PartnerAccountManagement`(suggested name) for **Policy name** and add an optional description. - - 7. Review the policy permissions. - - 8. (Optional) Add tags as needed. - - 9. Choose **Create policy**. - - - - -Next, assign this custom inline policy to your existing IAM user or role using the steps from [Adding IAM identity permissions (console).](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html#add-policies-console) - -## Linking your AWS Partner Central account to an AWS Marketplace account + * As of January 2025, new partners who want to join the ISV Accelerate program must link accounts to do so. @@ -149 +13 @@ Next, assign this custom inline policy to your existing IAM user or role using t -**Recommendation:** Upon completion of the prerequisites above, follow the instructions below or reference the latest [Account Linking User Guide](https://partnercentral.awspartner.com/partnercentral2/s/article?article=AWS-Partner-Central&category=Introductory_resources) from AWS Partner Central to link your accounts. + * The Small Business Acceleration Initiative, a partner-led channel sales motion to drive small business digital customer transformation, requires new and existing partners to link accounts to support partner and program goals. @@ -151 +14,0 @@ Next, assign this custom inline policy to your existing IAM user or role using t - 1. Sign in to [AWS Partner Central](https://partnercentral.awspartner.com/APNLogin) as a user with an Alliance lead or cloud admin role. @@ -153 +15,0 @@ Next, assign this custom inline policy to your existing IAM user or role using t - 2. In the **AWS Marketplace** section of the AWS Partner Central home page, choose **Link Account**. @@ -155 +16,0 @@ Next, assign this custom inline policy to your existing IAM user or role using t - 3. On the **AWS Marketplace Account linking** page, choose **Link Account**. @@ -157 +18 @@ Next, assign this custom inline policy to your existing IAM user or role using t - 4. On the AWS account sign-in page, choose **IAM user**. +Account linking provides several advantages. @@ -159 +20 @@ Next, assign this custom inline policy to your existing IAM user or role using t - 5. Enter the AWS account ID for the AWS account associated with your AWS Marketplace seller profile and sign in. + * You can use **Partner Connections** in AWS Partner Central to work on coselling deals with with other partners. Doing so can help deals progress faster and expand your reach. For more information, refer to [Partner connections](https://docs.aws.amazon.com/partner-central/latest/sales-guide/partner-connections.html) in the _AWS Partner Central Sales Guide_. @@ -161 +22 @@ Next, assign this custom inline policy to your existing IAM user or role using t - 6. Navigate through the three step self-service linking experience: + * You can integrate Partner Central with your customer relationship management (CRM) system to synchronize engagements, opportunities, solutions, and event notifications. You no longer need to maintain identical data across systems, and integrations use real-time data from AWS Partner Central. For more information about customer relationship management (CRM) integration, refer to [AWS Partner CRM integration](https://docs.aws.amazon.com/partner-central/latest/crm/aws-partner-crm-integration.html) in the _AWS Partner CRM Integration Guide_. @@ -163 +24 @@ Next, assign this custom inline policy to your existing IAM user or role using t - * **Step 1:** Review the AWS account ID and the associated AWS Marketplace Seller profile legal name and click **Next**. + * If you sell on AWS Marketplace, you can attach offers to sales opportunities. You can also integrate your AWS Marketplace data into the Partners Analytics dashboard in Partner Central. @@ -165 +25,0 @@ Next, assign this custom inline policy to your existing IAM user or role using t - * If your AWS account is not registered as a seller, provide your legal business name to be registered on AWS Marketplace. @@ -167,30 +26,0 @@ Next, assign this custom inline policy to your existing IAM user or role using t - * **Step 2:** Review the IAM roles (CloudAdmin, Alliance, and ACE) that will be created in your AWS account, including the managed policies attached to them, and click **Next**. - - * (Optional) If you want to bulk map the IAM roles to the Partner users with Alliance team and ACE partner roles, you can select the checkbox under each role section to map to the partner user - - * A partner user cannot access AWS Marketplace features such as linking private offers to ACE opportunities without an IAM role mapped to their partner user account. If you choose not to bulk assign, you will need to manually map an IAM role to a partner user after linking the accounts. - - * **Step 3:** Review the information and proceed by clicking **Submit**. - - 7. You are directed to to AWS Partner Central with your account successfully linked and the default IAM roles created in your account. - - 8. To provide access to AWS Marketplace features within AWS Partner Central, proceed to [Mapping AWS Partner Central users to AWS Marketplace IAM roles.](https://docs.aws.amazon.com/partner-central/latest/getting-started/user-role-mapping.html) - - - - -## Unlinking your AWS Partner Central account from an AWS Marketplace account - -###### To request unlinking: - - 1. From an alliance lead or cloud administrator account, log in to Partner Central. - - 2. Under **Account linking** , choose **Manage linked account**. - - 3. Choose **Unlink account**. - - 4. Review the warning message and select the reason you are unlinking your account. -