AWS marketplace medium security documentation change
Summary
Marked AWSMarketplaceImageBuildFullAccess as deprecated and updated policy documentation
Security assessment
Deprecates a policy tied to a discontinued feature (Private Image Build), reducing attack surface by removing outdated permissions. Explicitly warns users to stop using deprecated policies, which is a security hygiene improvement.
Diff
diff --git a/marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md b/marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md index ac12dfd23..8fc675921 100644 --- a//marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md +++ b//marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md @@ -5 +5 @@ -AWSMarketplaceDeploymentServiceRolePolicyAWSMarketplaceFullAccessAWSMarketplaceLicenseManagementServiceRolePolicyAWSMarketplaceManageSubscriptionsAWSMarketplaceProcurementSystemAdminFullAccessAWSMarketplaceRead-onlyAWSPrivateMarketplaceAdminFullAccessAWSPrivateMarketplaceRequestsAWS managed policy: AWSServiceRoleForPrivateMarketplaceAdminPolicyAWSVendorInsightsAssessorFullAccessAWSVendorInsightsAssessorReadOnlyAWS managed policy: AWSServiceRoleForProcurementInsightsPolicyAWS Marketplace updates to AWS managed policies +AWSMarketplaceDeploymentServiceRolePolicyAWSMarketplaceFullAccessAWSMarketplaceImageBuildFullAccess (Deprecated)AWSMarketplaceLicenseManagementServiceRolePolicyAWSMarketplaceManageSubscriptionsAWSMarketplaceProcurementSystemAdminFullAccessAWSMarketplaceRead-onlyAWSPrivateMarketplaceAdminFullAccessAWSPrivateMarketplaceRequestsAWS managed policy: AWSServiceRoleForPrivateMarketplaceAdminPolicyAWSVendorInsightsAssessorFullAccessAWSVendorInsightsAssessorReadOnlyAWS managed policy: AWSServiceRoleForProcurementInsightsPolicyAWS Marketplace updates to AWS managed policies @@ -24,0 +25,2 @@ This section lists each of the policies used to manage buyer access to AWS Marke + * AWS managed policy: AWSMarketplaceImageBuildFullAccess (Deprecated) + @@ -65,0 +68,6 @@ To view the permissions for this policy, see [AWSMarketplaceFullAccess](https:// +## AWS managed policy: AWSMarketplaceImageBuildFullAccess (Deprecated) + +This policy granted contributor permissions that allow full access to the AWS Marketplace private image build feature. In addition to creating private images, it also provided permissions to add tags to images, and to launch and terminate Amazon EC2 instances. + +For more information, see [Deprecated AWS managed policies](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/about-managed-policy-reference.html#deprecated-managed-policies) in the _AWS Managed Policy Reference Guide_. + @@ -161,0 +170 @@ Change | Description | Date +AWSMarketplaceRead-only and AWSMarketplaceFullAccess — updates to existing policies | AWS Marketplace updated existing policies to remove policies related to the discontinued Private Image Build delivery method. | February 28, 2025 @@ -164 +173 @@ Added the [AWSServiceRoleForProcurementInsightsPolicy](https://docs.aws.amazon.c -Removed the legacy `AWSMarketplaceImageBuildFullAccess` AWS Marketplace policy | AWS Marketplace discontinued the Private Image Build delivery method, so the `AWSMarketplaceImageBuildFullAcces` policy was also discontinued. | May 30, 2024 +Deprecated the legacy `AWSMarketplaceImageBuildFullAccess` AWS Marketplace policy | AWS Marketplace discontinued the Private Image Build delivery method, so the `AWSMarketplaceImageBuildFullAcces` policy was also discontinued. | May 30, 2024