AWS marketplace medium security documentation change
Summary
Restructured troubleshooting guide to focus on seller registration error messages, replacing technical service configuration details with compliance/verification requirements and error resolution tables.
Security assessment
Added documentation about KYC verification requirements, tax compliance checks, and jurisdiction restrictions for paid products. These changes enforce seller identity validation and regulatory adherence, which are security-adjacent controls to prevent fraud. However, there's no explicit mention of patching vulnerabilities.
Diff
diff --git a/marketplace/latest/userguide/troubleshooting.md b/marketplace/latest/userguide/troubleshooting.md index 016f729cb..6a6512b29 100644 --- a//marketplace/latest/userguide/troubleshooting.md +++ b//marketplace/latest/userguide/troubleshooting.md @@ -5 +5 @@ -# Troubleshooting the AWS Marketplace Commerce Analytics Service +Common seller registration error messages @@ -7 +7 @@ -You can troubleshoot issues with the AWS Marketplace Commerce Analytics Service, which programmatically provides product and customers data from AWS Marketplace. You might need to troubleshoot the Commerce Analytics Service when you encounter errors or other configuration issues. The following sections guide you through the troubleshooting process, covering steps to diagnose and resolve common problems with the Commerce Analytics Service. +# Troubleshooting @@ -9 +9 @@ You can troubleshoot issues with the AWS Marketplace Commerce Analytics Service, -**I can't access the service because of an allow list issue.** +## Common seller registration error messages @@ -11 +11 @@ You can troubleshoot issues with the AWS Marketplace Commerce Analytics Service, -If you're not yet registered as a seller on the AWS Marketplace, visit [AWS Marketplace Management Portal](https://aws.amazon.com/marketplace/management) to register. If you have already registered as a seller on AWS Marketplace, contact the [**AWS Marketplace Seller Operations**](https://aws.amazon.com/marketplace/management/contact-us/) team. +The following table describes common seller registration error messages and their solutions. @@ -13 +13,7 @@ If you're not yet registered as a seller on the AWS Marketplace, visit [AWS Mark -**I can't request datasets for a date in the past, even though the SDK documentation says it should be available for this date.** +Error message | Solution +---|--- +Your compliance requirements are not complete | For all Japanese sellers, we're required to collect additional information for regulatory purposes before they can publish paid products. If you're a Japan-based seller and interested in listing on AWS Marketplace, contact the Japanese seller onboarding team at `<[[email protected]](mailto:[email protected])>` for additional details. For more information, see [JP SOR FAQ](https://aws.amazon.com/jp/legal/awsjp/). +AWS Marketplace can't process your request right now because of an internal issue. Try again later. If the problem persists, contact us for assistance. | Clear your browser's cache and try again. If the issue persists, contact the [AWS Marketplace Seller Operations team](https://aws.amazon.com/marketplace/management/contact-us/). +Before you can update your product to public, you need to add a public profile to your seller account. | Add a public profile to your seller account before updating the product to public. In [AWS Marketplace Management Portal](https://aws.amazon.com/marketplace/management/seller-settings/account), go to **Settings** , then **Public profile**. +Update your payment settings to be compatible with the CurrencyCode. | Update your payment settings to be compatible with the currency code. Make sure to add USD, as local currency isn't supported for consumption pricing. For more information, see [Available currencies](./disbursement.html#currency). +VAT/GST information is required to remain a paid seller. | You have two options: @@ -15 +21,2 @@ If you're not yet registered as a seller on the AWS Marketplace, visit [AWS Mark -Even though datasets are listed as being available for certain dates in the past, we have data only since the time that you joined AWS Marketplace. If you believe that this is in error, contact the [**AWS Marketplace Seller Operations**](https://aws.amazon.com/marketplace/management/contact-us/) team. + 1. Update the tax settings in the main account. Review the [tax inheritance documentation](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-account-payment.html#manage-account-tax-linked-accounts) to understand the effect this will have on all linked accounts. + 2. Remove this account from the organization and have it as a standalone account. This means that you'll need to manually add the VAT/GST settings in the [tax settings](https://console.aws.amazon.com/billing/home?#/tax-settings) page in Billing. @@ -17 +23,0 @@ Even though datasets are listed as being available for certain dates in the past -**When I call the service, I receive the error message "Could not connect to the endpoint URL: https://marketplacecommerceanalytics.eu-central-1.amazonaws.com/”** @@ -19 +25 @@ Even though datasets are listed as being available for certain dates in the past -The AWS Marketplace Commerce Analytics Service is available only in the US East (N. Virginia) Region. You must make all calls to the Commerce Analytics Service to the `us-east-1` endpoint. +Tax interview location does not match the business location | To check current location settings: @@ -21 +27,6 @@ The AWS Marketplace Commerce Analytics Service is available only in the US East -If you're using the AWS CLI, add the "`--region` flag to each call and specify the AWS Region as `us-east-1`, as shown in the following example. + 1. Tax interview location: + * In AWS Marketplace Management Portal, go to **Settings** , then **Tax information**. + * Choose **Update tax information** , followed by **Retake**. + * Once you choose **Update tax profile** , scroll down and check the country you have provided. + 2. Business location: + * In [AWS Marketplace Management Portal](https://aws.amazon.com/marketplace/management/seller-settings/account), check the **Business location** provided in **Account summary** on the **Settings** tab. @@ -22,0 +34 @@ If you're using the AWS CLI, add the "`--region` flag to each call and specify t +If locations don't match: @@ -24,8 +36,2 @@ If you're using the AWS CLI, add the "`--region` flag to each call and specify t - aws marketplacecommerceanalytics generate-data-set \ - --data-set-type "customer_subscriber_hourly_monthly_subscriptions" \ - --data-set-publication-date "2016-04-21T00:00:00Z" \ - --role-name-arn "arn:aws:iam::138136086619:role/MarketplaceCommerceAnalyticsRole" \ - --destination-s3-bucket-name "marketplace-analytics-service" \ - --destination-s3-prefix "test-prefix" \ - --sns-topic-arn "arn:aws:sns:eu-central-1:138136086619:Marketplace_Analytics_Service_Notice" \ - **--region us-east-1** + * Update tax information in [Billing](https://console.aws.amazon.com/billing/home?#/tax): For more information, see [Account location](https://aws.amazon.com/tax-help/location/) + * Update tax interview in [AMMP settings](https://aws.amazon.com/marketplace/management/seller-settings/account): Retake tax interview from **Tax information** @@ -33,86 +39,6 @@ If you're using the AWS CLI, add the "`--region` flag to each call and specify t - -**I want to use a different Amazon S3 bucket or Amazon SNS topic than the ones I selected when I went through the on-boarding process.** - -When enrolling in the AWS Marketplace Commerce Analytics Service, you specified an Amazon S3 bucket and Amazon SNS topic. The onboarding process configures your IAM permissions to allow the service access to only these specific resources. To use different resources, you need to modify your IAM policy: - - 1. Sign in to the AWS Management Console and open the IAM console at [https://console.aws.amazon.com/iam/](https://console.aws.amazon.com/iam/). - - 2. Choose **Roles** on the left side of the IAM console. - - 3. Choose **MarketplaceCommerceAnalyticsRole**. - - 4. Expand the **Inline Roles** section, if not already expanded. - - 5. Locate the policy with a name that starts with _oneClick_MarketplaceCommerceAnalyticsRole_ and choose **Edit Policy**. - - 6. In the policy document, locate the section that specifies actions related to the service that you want to modify. For example, to change your Amazon S3 bucket, locate the section that includes the actions that start with **s3:** and change their respective **Resource** selection to specify your new Amazon S3 bucket. - - - - -For additional information about IAM policies, see the following guide: <https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html> - -**I get an`AccessDeniedException` error when I call the `GenerateDataSet` action** - -This can happen if your user doesn't have the permissions necessary to call `GenerateDataSet`. The following procedure outlines the steps needed to create an IAM policy with those permissions using the IAM console and add the permissions to your users, groups, or roles. - -###### To use the JSON policy editor to create a policy - - 1. Sign in to the AWS Management Console and open the IAM console at [https://console.aws.amazon.com/iam/](https://console.aws.amazon.com/iam/). - - 2. In the navigation pane on the left, choose **Policies**. - -If this is your first time choosing **Policies** , the **Welcome to Managed Policies** page appears. Choose **Get Started**. - - 3. At the top of the page, choose **Create policy**. - - 4. In the **Policy editor** section, choose the **JSON** option. - - 5. Enter the following JSON policy document: - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": "marketplacecommerceanalytics:GenerateDataSet", - "Resource": "*" - } - ] - } - - 6. Choose **Next**. - -###### Note - -You can switch between the **Visual** and **JSON** editor options anytime. However, if you make changes or choose **Next** in the **Visual** editor, IAM might restructure your policy to optimize it for the visual editor. For more information, see [Policy restructuring](https://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_policies.html#troubleshoot_viseditor-restructure) in the _IAM User Guide_. - - 7. On the **Review and create** page, enter a **Policy name** and a **Description** (optional) for the policy that you are creating. Review **Permissions defined in this policy** to see the permissions that are granted by your policy. - - 8. Choose **Create policy** to save your new policy. - - - - -To provide access, add permissions to your users, groups, or roles: - - * Users and groups in AWS IAM Identity Center: - -Create a permission set. Follow the instructions in [Create a permission set](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html) in the _AWS IAM Identity Center User Guide_. - - * Users managed in IAM through an identity provider: - -Create a role for identity federation. Follow the instructions in [Create a role for a third-party identity provider (federation)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp.html) in the _IAM User Guide_. - - * IAM users: - - * Create a role that your user can assume. Follow the instructions in [Create a role for an IAM user](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user.html) in the _IAM User Guide_. - - * (Not recommended) Attach a policy directly to a user or add a user to a user group. Follow the instructions in [Adding permissions to a user (console)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_change-permissions.html#users_change_permissions-add-console) in the _IAM User Guide_. - - - - -**My problem isn't listed here.** - -Contact the [**AWS Marketplace Seller Operations**](https://aws.amazon.com/marketplace/management/contact-us/) team. +Ensure both locations are identical to avoid payment processing issues. +To start using AWS Marketplace, complete AWS Account Registration | Complete your [AWS Account Registration](https://portal.aws.amazon.com/billing/signup/incomplete#/account/). For more information on seller registration, see [Registering as an AWS Marketplace seller](./seller-registration-process.html). +Your public profile is being reviewed. You cannot add a disbursement method until your public profile is verified. Check again in 2 business days. You can currently publish only free products. | Your public profile is being reviewed. You can't add a disbursement method and complete KYC until your public profile is verified. It will take two to three business days to approve. You can currently publish only free products. Once your profile is approved, you'll receive an email to your root email address. If you still can't add payment information after three business days, contact the [AWS Marketplace Seller Operations team](https://aws.amazon.com/marketplace/management/contact-us/). +Your business location is in a non-supported jurisdiction. You are not eligible to publish paid products. | Your business location is in a non-supported jurisdiction. You aren't eligible to publish paid products. For more information on eligible jurisdictions, see [Eligible jurisdictions for paid products](./user-guide-for-sellers.html#eligible-jurisdictions). +AWS account is not registered as a seller in AWS Marketplace. | You aren't registered as a seller in AWS Marketplace. Complete registration from [AWS Marketplace Management Portal](https://aws.amazon.com/marketplace/management/seller-settings/register). +Seller must have a public profile to be able to become a paid seller. | Your seller public profile must be completed and approved. Complete it and check your account status in [AWS Marketplace Management Portal](https://aws.amazon.com/marketplace/management/seller-settings). @@ -126 +52 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Generating datasets +Logging AWS Marketplace API calls with AWS CloudTrail @@ -128 +54 @@ Generating datasets -AWS Marketplace Field Demonstration Program +Document history