AWS marketplace documentation change
Summary
Added requirement for service-linked roles (SLRs) to manage selling authorizations between ISVs and channel partners
Security assessment
Introduction of service-linked roles implements AWS security best practices for delegated access management. While not addressing a specific vulnerability, this adds documentation about authorization controls - a security feature. SLRs help enforce least privilege for resale transactions.
Diff
diff --git a/marketplace/latest/userguide/channel-partner-offers.md b/marketplace/latest/userguide/channel-partner-offers.md index cabda3f81..1f67c54b2 100644 --- a//marketplace/latest/userguide/channel-partner-offers.md +++ b//marketplace/latest/userguide/channel-partner-offers.md @@ -9 +9,5 @@ Additional information -AWS Marketplace Channel Partner private offers give channel partners the opportunity to resell independent software vendors' (ISVs) products in AWS Marketplace. The AWS Marketplace Channel Partner and ISV establish an agreement to resell one or more of the ISV's products, and then the Channel Partner extends a private offer to the buyer for that product. +AWS Marketplace Channel partner private offers give channel partners the opportunity to resell independent software vendors' (ISVs) products in AWS Marketplace. The AWS Marketplace channel partner and ISV establish an agreement called a _selling authorization_ to resell one or more of the ISV's products. The channel partner then extends a private offer to the buyer for that product. + +###### Important + +To create, share, and accept selling authorizations, you must create a service-linked role (SLR) that allows ISVs to create and share the authorizations, and allows channel partners to accept them. For more information about creating the SLR, refer to [Creating a service-linked role for AWS Marketplace](./using-roles-for-resale-authorization.html#create-slr) later in this guide. @@ -13 +17 @@ The following diagram shows this relationship between an ISV, a channel partner, - + @@ -19 +23 @@ For more information about creating a selling authorization for a channel partne -Each AWS Marketplace Channel Partner private offer is visible only to a single buyer, with customized pricing and unique commercial terms to meet that buyer's needs. When creating a private offer, you start from a wholesale cost set by the ISV. Then you mark up that price to create the buyer's offer price. +Each AWS Marketplace channel partner private offer is visible only to a single buyer, with customized pricing and unique commercial terms to meet that buyer's needs. When creating a private offer, you start from a wholesale cost set by the ISV. Then you mark up that price to create the buyer's offer price. @@ -23 +27 @@ Each AWS Marketplace Channel Partner private offer is visible only to a single b -When creating private offers, Channel Partners must use the currency that the ISV defines in the selling authorization. +When creating private offers, channel partners must use the currency that the ISV defines in the selling authorization.