AWS partner-central medium security documentation change
Summary
Reorganized content, added role mapping prerequisites section, updated IAM role naming requirements, and clarified account linking process
Security assessment
Changes focus on IAM role configuration, permissions management, and access control requirements. Specific security-related updates include enforcing role name prefixes and detailing required permissions for ACE users.
Diff
diff --git a/partner-central/latest/getting-started/user-role-mapping.md b/partner-central/latest/getting-started/user-role-mapping.md index 957dd7824..88131509c 100644 --- a//partner-central/latest/getting-started/user-role-mapping.md +++ b//partner-central/latest/getting-started/user-role-mapping.md @@ -5 +5 @@ -Connecting ACE opportunities with AWS Marketplace private offers +Role mapping prerequisitesConnecting ACE opportunities with AWS Marketplace private offers @@ -7 +7 @@ Connecting ACE opportunities with AWS Marketplace private offers -# Mapping AWS Partner Central users to AWS Marketplace IAM roles +# Using custom policies to map users @@ -9 +9 @@ Connecting ACE opportunities with AWS Marketplace private offers -This section explains how to map AWS Partner Central users to AWS Marketplace AWS Identity and Access Management (IAM) roles. Mapping enables single sign-on access for users across AWS Partner Central and AWS Marketplace and other features such as product linking and offer linking. +This section explains how to map AWS Partner Central users to AWS Marketplace AWS IAM roles. Mapping enables single sign-on access for users across AWS Partner Central and AWS Marketplace, plus other features such as product and offer linking. @@ -11 +11 @@ This section explains how to map AWS Partner Central users to AWS Marketplace AW -Before mapping, you must first complete the following: +###### Topics @@ -13 +13,12 @@ Before mapping, you must first complete the following: - * [Create IAM roles in the AWS Marketplace account.](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-custom.html) + * Role mapping prerequisites + + * Connecting ACE opportunities with AWS Marketplace private offers + + + + +## Role mapping prerequisites + +Before mapping, you must complete the following: + + * Create IAM roles in the AWS Marketplace account. For more ionformation, refer to [Create a role using custom trust policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-custom.html) in the _AWS Identity and Access Management User Guide_. @@ -30 +41,3 @@ Before mapping, you must first complete the following: - * For AWS Partner Central users with the ACE user role, grant permissions to perform the `ListEntities` and `SearchAgreements` actions. For more information, refer to [Controlling access to AWS Marketplace Management Portal.](https://docs.aws.amazon.com/marketplace/latest/userguide/marketplace-management-portal-user-access.html) + * For AWS Partner Central users with the ACE user role, grant permissions to perform the `ListEntities` and `SearchAgreements` actions. For more information, refer to [Controlling access to AWS Marketplace Management Portal](https://docs.aws.amazon.com/marketplace/latest/userguide/marketplace-management-portal-user-access.html) in the _AWS Marketplace Seller Guide_. + + * [Link your AWS Partner Central account to an AWS Marketplace account](./linking-apc-aws-marketplace.html). @@ -32 +44,0 @@ Before mapping, you must first complete the following: - * [Link your AWS Partner Central account to an AWS Marketplace account.](./account-linking.html#linking-apc-aws-marketplace) @@ -35,0 +48 @@ Before mapping, you must first complete the following: +To map IAM roles to your AWS Partner Central users, you must create IAM roles with the permissions you want to provide to your users. For cloud admin users, you can only map the cloud admin IAM role created in your account during the account linking process. @@ -37 +50 @@ Before mapping, you must first complete the following: -To map IAM roles to your AWS Partner Central users, you must create IAM roles with the permissions you want to provide to your users. For cloud admin users, you can only map the cloud admin IAM role created in your account during the account linking process. You can create one or multiple IAM roles to be associated with your AWS Partner Central users. The IAM roles must be configured with names starting with `PartnerCentralRoleFor`. When mapping IAM roles to AWS Partner Central users, you cannot choose an IAM role that does not start with `PartnerCentralRoleFor` to map. +You can create one or multiple IAM roles to associate with your AWS Partner Central users. The role names must start with `PartnerCentralRoleFor`. You can't choose a role unless the name begins with that text. @@ -39 +52 @@ To map IAM roles to your AWS Partner Central users, you must create IAM roles wi -You can attach custom or managed policies to the IAM role. You can attach the AWS Marketplace managed policies such as `AWSMarketplaceSellerFullAccess` to the IAM roles and provide access to your AWS Partner Central users. For more information about creating roles, refer to [Creating an IAM role (console)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html#roles-creatingrole-user-console). +You can attach custom or managed policies to the IAM role. You can attach the AWS Marketplace managed policies such as `AWSMarketplaceSellerFullAccess` to the IAM roles and provide access to your AWS Partner Central users. For more information about creating roles, refer to [ Creating an IAM role (console)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html#roles-creatingrole-user-console) in the _IAM User Guide_. @@ -124 +137 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Linking AWS Partner Central accounts with AWS Marketplace seller accounts +Linking accounts @@ -126 +139 @@ Linking AWS Partner Central accounts with AWS Marketplace seller accounts -Mapping AWS Marketplace roles to a CRM integration user +Unlinking accounts