AWS partner-central documentation change
Summary
Removed IAM policy statements for Partner Central role creation
Security assessment
Policy removal lacks context about security implications
Diff
diff --git a/partner-central/latest/getting-started/linking-prerequisites.md b/partner-central/latest/getting-started/linking-prerequisites.md index 104ba8ee2..cd861e5c1 100644 --- a//partner-central/latest/getting-started/linking-prerequisites.md +++ b//partner-central/latest/getting-started/linking-prerequisites.md @@ -88,63 +87,0 @@ For more information about AWS Partner Central roles, refer to [AWS Partner Cent - "Statement": [ - { - "Sid": "CreatePartnerCentralRoles", - "Effect": "Allow", - "Action": [ - "iam:CreateRole" - ], - "Resource": [ - "arn:aws:iam::*:role/PartnerCentralRoleForCloudAdmin*", - "arn:aws:iam::*:role/PartnerCentralRoleForAce*", - "arn:aws:iam::*:role/PartnerCentralRoleForAlliance*" - ] - }, - { - "Sid": "AttachPolicyToPartnerCentralCloudAdminRole", - "Effect": "Allow", - "Action": "iam:AttachRolePolicy", - "Resource": "arn:aws:iam::*:role/PartnerCentralRoleForCloudAdmin*", - "Condition": { - "ArnLike": { - "iam:PolicyARN": [ - "arn:aws:iam::*:policy/PartnerCentralAccountManagementUserRoleAssociation", - "arn:aws:iam::*:policy/AWSPartnerCentralFullAccess", - "arn:aws:iam::*:policy/AWSMarketplaceSellerFullAccess" - ] - } - } - }, - { - "Sid": "AttachPolicyToPartnerCentralAceRole", - "Effect": "Allow", - "Action": [ - "iam:AttachRolePolicy" - ], - "Resource": "arn:aws:iam::*:role/PartnerCentralRoleForAce*", - "Condition": { - "ArnLike": { - "iam:PolicyARN": [ - "arn:aws:iam::*:policy/AWSPartnerCentralOpportunityManagement", - "arn:aws:iam::*:policy/AWSMarketplaceSellerOfferManagement" - ] - } - } - }, - { - "Sid": "AttachPolicyToPartnerCentralAllianceRole", - "Effect": "Allow", - "Action": [ - "iam:AttachRolePolicy" - ], - "Resource": "arn:aws:iam::*:role/PartnerCentralRoleForAlliance*", - "Condition": { - "ArnLike": { - "iam:PolicyARN": [ - "arn:aws:iam::*:policy/AWSPartnerCentralFullAccess", - "arn:aws:iam::*:policy/AWSMarketplaceSellerFullAccess" - ] - } - } - }, - { - "Sid": "AssociatePartnerAccount",{ - "Version": "2012-10-17", @@ -232,20 +168,0 @@ For more information about AWS Partner Central roles, refer to [AWS Partner Cent - } - "Effect": "Allow", - "Action": [ - "partnercentral-account-management:AssociatePartnerAccount" - ], - "Resource": "*" - }, - { - "Sid": "SellerRegistration", - "Effect": "Allow", - "Action": [ - "aws-marketplace:ListChangeSets", - "aws-marketplace:DescribeChangeSet", - "aws-marketplace:StartChangeSet", - "aws-marketplace:ListEntities", - "aws-marketplace:DescribeEntity" - ], - "Resource": "*" - } - ]