AWS marketplace medium security documentation change
Summary
Updated architecture diagram requirements, added restrictions on making diagrams public, clarified AWS deployment requirements
Security assessment
Added explicit instruction that architecture diagrams can't be made public, which helps prevent exposure of sensitive architectural details. Also clarified data ownership definitions which impacts security controls.
Diff
diff --git a/marketplace/latest/userguide/saas-guidelines.md b/marketplace/latest/userguide/saas-guidelines.md index a9f17af5d..09e9d99f7 100644 --- a//marketplace/latest/userguide/saas-guidelines.md +++ b//marketplace/latest/userguide/saas-guidelines.md @@ -81 +81 @@ The following topics list and describe the architecture guidelines for SaaS prod - * Architecture diagram + * Creating architecture diagrams @@ -96 +96,3 @@ The following guidelines go into effect on May 1, 2025. - * Products that are deployed on AWS receive a special designation in the AWS Marketplace search results and their product details pages. For AWS Marketplace to consider your product as deployed on AWS, your product must run entirely on AWS. This includes the application and control planes. The _application plane_ can run in the seller's AWS account, the buyer's AWS account, or both. For more information, refer to the [Control plane vs. application plane](https://docs.aws.amazon.com/whitepapers/latest/saas-architecture-fundamentals/control-plane-vs.-application-plane.html) whitepaper. + * Products that are deployed on AWS receive a special designation in the AWS Marketplace search results and their product details pages. For AWS Marketplace to consider your product as "deployed on AWS," your product must run entirely on AWS. This includes the application and control planes. + +The _application plane_ can run in the seller's AWS account, the buyer's AWS account, or both. For more information, refer to the [Control plane vs. application plane](https://docs.aws.amazon.com/whitepapers/latest/saas-architecture-fundamentals/control-plane-vs.-application-plane.html) whitepaper. @@ -102 +104 @@ Third-party services used by the product to transmit, store, or process applicat -Application data is data that belongs to or is generated for the buyer. + _Application data_ is data that belongs to or is generated for the buyer. @@ -106 +108,3 @@ Agents or gateways used by the product for security, monitoring, data replicatio -You must include an architecture diagram for review. For more information, refer to Architecture diagram in the next section. +You must include an architecture diagram for review. You can't make the diagrams public. For more information, refer to Creating architecture diagrams in the next section. + + * Sellers can publish products that do not entirely run on AWS. @@ -143 +147 @@ For more information on SaaS architectures, refer to the [SaaS Architecture Fund -### Architecture diagram +### Creating architecture diagrams @@ -146,0 +151,9 @@ To receive the special designation that your product is deployed on AWS, [update +###### Note + + * You can't make your diagrams public. + + * You can publish products that don't run entirely on AWS. + + + + @@ -176 +189 @@ The following is an example of a high-level diagram. - + @@ -180 +193 @@ The following is an example of a low-level, detailed diagram. - +