AWS marketplace medium security documentation change
Summary
Updated refund documentation with expanded sections on bulk refund processes, KYC verification requirements, and policy clarifications
Security assessment
The change explicitly emphasizes KYC (Know Your Customer) verification requirements for users modifying financial information, which is a security control to prevent unauthorized account changes. The clarification about root user requirements for bulk refund requests (Step 3) introduces an access control measure. However, there's no evidence this addresses a specific recent vulnerability.
Diff
diff --git a/marketplace/latest/userguide/refunds.md b/marketplace/latest/userguide/refunds.md index 85de3b3f0..d76e92c52 100644 --- a//marketplace/latest/userguide/refunds.md +++ b//marketplace/latest/userguide/refunds.md @@ -5 +5 @@ -Refund request types for AWS Marketplace productsAWS Marketplace product refund policy and approvalsAWS Marketplace product refund process +Refund request types for AWS Marketplace productsAWS Marketplace product refund policy and approvalsRequesting a product refundRequesting a bulk refund @@ -11 +11 @@ Refund request types for AWS Marketplace productsAWS Marketplace product refund -If you transact through Amazon Web Services EMEA operator, only verified users can process refunds, amend KYC information, and change financial information such as bank account details. Verified users are KYC verified users and secondary users who completed verification. For more information on the KYC process, refer to [ Complete the Know Your Customer process](https://docs.aws.amazon.com/marketplace/latest/userguide/seller-registration-process.html#completing-the-know-your-customer-process). +If you transact through an Amazon Web Services EMEA operator, only verified users can process refunds, amend Know Your Customer (KYC) information, and change financial information such as bank account details. Verified users are KYC verified users and secondary users who complete verification. For more information on the KYC process, refer to [ Complete the Know Your Customer process](https://docs.aws.amazon.com/marketplace/latest/userguide/seller-registration-process.html#completing-the-know-your-customer-process). @@ -13 +13,3 @@ If you transact through Amazon Web Services EMEA operator, only verified users c -All paid products in AWS Marketplace, regardless of pricing model, must have a stated refund policy for software charges. The refund policy must include the terms of the refund as well as a method of contacting the seller to request a refund. As a seller, the details of the refund policy are up to you. However, we encourage you to offer buyers some manner of refund for usage of the product. You must comply with your posted refund policies. This topic provides information about the types of AWS Marketplace product refund requests, the related policy and approvals process, and how you can submit a refund request for a buyer. +All paid products in AWS Marketplace, regardless of pricing model, must have a stated refund policy for software charges. The refund policy must include the terms of the refund, and a method of contacting the seller to request a refund. + +As a seller, the details of the refund policy are up to you. However, we encourage you to offer buyers some manner of refund for usage of the product. You must comply with your posted refund policies. This topic provides information about the types of AWS Marketplace product refund requests, the related policy and approvals process, and how you can submit a refund request for a buyer. @@ -21 +23,3 @@ All paid products in AWS Marketplace, regardless of pricing model, must have a s - * AWS Marketplace product refund process + * Requesting a product refund + + * Requesting a bulk refund @@ -30 +34 @@ Buyers can request different types of refunds for AWS Marketplace products. For -If the product is sold by a third-party, buyers will be instructed to view refund policies on the product detail page. Software charges for AWS Marketplace subscriptions are paid to the seller of the product, and refunds must be requested from the seller directly. Each AWS Marketplace seller is required to include a refund policy on their AWS Marketplace page. +For products sold by a third-party, buyers must view refund policies on the product detail page. Software charges for AWS Marketplace subscriptions are paid to the seller of the product, and refunds must be requested from the seller directly. Each AWS Marketplace seller is required to include a refund policy on their AWS Marketplace page. @@ -34 +38 @@ If the product is sold by a third-party, buyers will be instructed to view refun -The following list outlines the AWS Marketplace refund policy and whether your approval is needed: +The following list describes the AWS Marketplace refund policy and whether your approval is needed: @@ -38 +42 @@ The following list outlines the AWS Marketplace refund policy and whether your a -If you list your software as a free trial product, AWS can issue refunds on your behalf for software charges accruing within seven days of a conversion from a free trial to a paid subscription. Refunds issued in connection with free trial conversions require no action on your part. By enabling a free trial on a product, you are agreeing to this policy. +If you list your software as a free trial product, AWS can issue refunds on your behalf for software charges accruing within seven days of a conversion from a free trial to a paid subscription. Refunds issued in connection with free trial conversions require no action on your part. By enabling a free trial on a product, you agree to this policy. @@ -46 +50 @@ All refunds for private offers must be authorized by you before AWS can process -If you meter the usage of your software by using the AWS Marketplace Metering Service, AWS can issue refunds on your behalf for software charges resulting from software metering errors. If these errors are common across multiple buyers, AWS reserves the right to determine an appropriate refund for each buyer and apply it directly to each buyer. Refunds issued in connection with the AWS Marketplace Metering Service must be confirmed with the seller one time, but does not require the seller to confirm each individual refund. By using the AWS Marketplace Metering Service with a product, you are agreeing to this policy. +If you use the AWS Marketplace Metering Service to meter the usage of your software, AWS can issue refunds on your behalf for software charges resulting from software metering errors. If these errors are common across multiple buyers, AWS reserves the right to determine an appropriate refund for each buyer and apply it directly to each buyer. Refunds issued in connection with the AWS Marketplace Metering Service must be confirmed with the seller one time, but does not require the seller to confirm each individual refund. By using the AWS Marketplace Metering Service with a product, you are agreeing to this policy. @@ -50 +54 @@ If you meter the usage of your software by using the AWS Marketplace Metering Se -If a buyer cancels their subscription within 48 hours of a non-private offer purchase, AWS will issue a full refund (cancel with 100 percent refund). Refunds issued in connection with cancellation within 48 hours of purchase require no action on your part. After 48 hours, such buyer request is at your discretion. By listing your product on AWS Marketplace, you are agreeing to this policy. +If a buyer cancels their subscription within 48 hours of a non-private offer purchase, AWS issues a full refund (cancel with 100 percent refund). Refunds issued in connection with cancellation within 48 hours of purchase require no action on your part. After 48 hours, such buyer request is at your discretion. By listing your product on AWS Marketplace, you agree to this policy. @@ -65 +69 @@ All AWS authorized refunds are processed automatically and require no action on -## AWS Marketplace product refund process +## Requesting a product refund @@ -121,0 +126,67 @@ A refund will appear in the buyer’s account within 24–48 hours. However, it +## Requesting a bulk refund + +The following steps explain how to create refund requests involving 20+ invoices or 20+ accounts, This process streamlines large-scale refund requests and ensures that you provide the necessary information. + +###### To request a bulk refund + + 1. Gather the following required information: + + * The seller's AWS account ID (12 digits) + + * A list of all buyer AWS account IDs (12 digits each). You can enter multiple buyers, or single buyers for multiple billing periods. + + * All product IDs + + * Offer IDs where applicable + + * All invoice IDs + + * The billing periods for each invoice + + * The AWS Marketplace Refund Ticket Reference ID + + 2. Compile the required information into a CSV spreadsheet with the following columns: + + * `Seller Account ID` + + * `Subscriber Account ID` + + * `Payer Account ID` + + * `Billing Period` + + * `Invoice ID` + + * `Targeted Amount` + + * `Product ID` + + 3. Sign in to the [Support Center Console](https://console.aws.amazon.com/support/home?) as the root user. + +###### Note + +You can't complete these steps unless you sign in as the root user. + + 4. Create a support case to **Account and billing** and select **AWS Marketplace**. + + 5. In the subject line, enter `Request Bulk Refund`. + + 6. Under **Additional Comments** , enter the following: + + * Total number of accounts affected + + * Total number of invoices + + * Total refund amount + + * Business justification for the refund + + * AWS Marketplace Refund Ticket Reference ID + + 7. Attach the CSV file and create the support case. + + 8. The support case is routed to the next available agent for assistance. + + + +