AWS marketplace documentation change
Summary
Multiple updates including IAM policy recommendations, configuration instructions, and billing integration clarification
Security assessment
Added emphasis on using IAM managed policies to reduce human error in permissions configuration. While not fixing a specific vulnerability, this promotes security best practices by encouraging safer permission management.
Diff
diff --git a/marketplace/latest/buyerguide/procurement-system-integration-ariba.md b/marketplace/latest/buyerguide/procurement-system-integration-ariba.md index 8fbe2a54d..f08380ecf 100644 --- a//marketplace/latest/buyerguide/procurement-system-integration-ariba.md +++ b//marketplace/latest/buyerguide/procurement-system-integration-ariba.md @@ -5 +5 @@ -Step 1. Setting up IAM permissionsStep 2. Configure AWS Marketplace to integrate with SAP Ariba +Setting up IAM permissionsStep 2. Configure AWS Marketplace to integrate with SAP Ariba @@ -9 +9 @@ Step 1. Setting up IAM permissionsStep 2. Configure AWS Marketplace to integrate -You can configure the integration of AWS Marketplace and your SAP Ariba procurement software. After you complete the configuration, users in your organization can use your procurement software to search and request a subscription to AWS Marketplace products. After the subscription request is approved, the transaction is completed, and the user is notified that the software subscription is available. When the user signs in to AWS Marketplace, the software product is listed as a purchased subscription and is available for use. Integration with your procurement system can also integrate your AWS Marketplace invoices with your purchase order system. +The following topics explain how to configure AWS Marketplace to work with the SAP Ariba procurement system. Configuratiuon enables users to search for and purchase AWS Marketplace software without having to leave SAP Ariba. @@ -11 +11 @@ You can configure the integration of AWS Marketplace and your SAP Ariba procurem -## Step 1. Setting up IAM permissions +## Setting up IAM permissions @@ -13 +13 @@ You can configure the integration of AWS Marketplace and your SAP Ariba procurem -To configure the integration between AWS Marketplace and your procurement system, you start the process in AWS Marketplace and complete it in the procurement system. You use the information generated in AWS Marketplace to configure the procurement system punchout. To complete the configuration, the accounts that you use must meet the following requirements: +The configuration process starts in AWS Marketplace WS Marketplace and finishes in the SAP Ariba. You use the information generated in AWS Marketplace to configure the procurement system punchout. To complete the configuration, the accounts you use must meet the following requirements: @@ -15 +15 @@ To configure the integration between AWS Marketplace and your procurement system - * The AWS account used to complete the AWS Marketplace configuration must be the management account and have the AWS Identity and Access Management (IAM) permissions defined in the `[AWS managed policy: AWSMarketplaceProcurementSystemAdminFullAccess](./buyer-security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplaceprocurementsystemadminfullaccess)` managed policy. + * The AWS account used to complete the AWS Marketplace configuration must be the management account and have the IAM permissions defined in the `[AWS managed policy: AWSMarketplaceProcurementSystemAdminFullAccess](./buyer-security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplaceprocurementsystemadminfullaccess)` managed policy. @@ -17 +17 @@ To configure the integration between AWS Marketplace and your procurement system -We recommend that you use IAM managed permissions rather than manually configuring permissions. Using this approach is less prone to human error, and if the permissions change, the managed policy is updated. For more information about configuring and using IAM in AWS Marketplace, see [Security on AWS Marketplace](./buyer-security.html). +We recommend that you use IAM managed permissions rather than manually configuring permissions. This approach is less prone to human error, and if the permissions change, the managed policy is updated. For more information about configuring and using IAM in AWS Marketplace, refer to [ Security on AWS Marketplace](https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-security.html) later in this guide. @@ -45 +45 @@ Gather the following information in preparation for configuring the setup: -You might want your invoices in the AWS Billing console to reference the cXML purchase order used to subscribe to your SaaS contract product. If so, you can enable the Billing integration using a service-linked role in AWS Marketplace settings. +You might want your invoices in the AWS Billing console to reference the cXML purchase order used to subscribe to your SaaS contract product. If so, you can enable the AWS Billing integration using a service-linked role in AWS Marketplace settings. @@ -70 +70 @@ For more information about configuring SAP Ariba, see [Introduction to SAP Ariba -For information about UNSPSC codes used by AWS Marketplace, see [UNSPSC codes used by AWS Marketplace](./procurement-system-integration.html#procurement-integration-setup-unspsc-codes) . +For information about UNSPSC codes, refer to [UNSPSC codes used by AWS Marketplace](./procurement-system-integration.html#procurement-integration-setup-unspsc-codes) .