AWS marketplace documentation change
Summary
Removed JSON policy examples for AWSManagedPolicy SellerAdministrator, Contributor, and ReadOnly roles
Security assessment
The change removes detailed IAM policy examples but does not indicate any specific security vulnerability being addressed. This appears to be documentation cleanup rather than a security-related update. While IAM policies impact security posture, there's no evidence this change fixes a vulnerability.
Diff
diff --git a/marketplace/latest/userguide/security-iam-awsmanpol.md b/marketplace/latest/userguide/security-iam-awsmanpol.md index 78eb9dc5e..889002a21 100644 --- a//marketplace/latest/userguide/security-iam-awsmanpol.md +++ b//marketplace/latest/userguide/security-iam-awsmanpol.md @@ -107,154 +106,0 @@ This policy grants administrative permissions that allow full access to all sell -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - { - "Sid": "MarketplaceManagement", - "Effect": "Allow", - "Action": [ - "aws-marketplace-management:uploadFiles", - "aws-marketplace-management:viewReports", - "aws-marketplace-management:viewSupport", - "aws-marketplace:ListChangeSets", - "aws-marketplace:DescribeChangeSet", - "aws-marketplace:StartChangeSet", - "aws-marketplace:CancelChangeSet", - "aws-marketplace:ListEntities", - "aws-marketplace:DescribeEntity", - "aws-marketplace:GetSellerDashboard", - "aws-marketplace:ListAssessments", - "aws-marketplace:DescribeAssessment", - "ec2:DescribeImages", - "ec2:DescribeSnapshots", - "ec2:ModifyImageAttribute", - "ec2:ModifySnapshotAttribute" - ], - "Resource": "*" - }, - { - "Sid": "AgreementAccess", - "Effect": "Allow", - "Action": [ - "aws-marketplace:SearchAgreements", - "aws-marketplace:DescribeAgreement", - "aws-marketplace:GetAgreementTerms" - ], - "Resource": "*", - "Condition": { - "StringEquals": { - "aws-marketplace:PartyType": "Proposer" - }, - "ForAllValues:StringEquals": { - "aws-marketplace:AgreementType": [ - "PurchaseAgreement" - ] - } - } - }, - { - "Sid": "IAMGetRole", - "Effect": "Allow", - "Action": [ - "iam:GetRole" - ], - "Resource": "arn:aws:iam::*:role/*" - }, - { - "Sid": "AssetScanning", - "Effect": "Allow", - "Action": [ - "iam:PassRole" - ], - "Resource": "arn:aws:iam::*:role/*", - "Condition": { - "StringEquals": { - "iam:PassedToService": "assets.marketplace.amazonaws.com" - } - } - }, - { - "Sid": "VendorInsights", - "Effect": "Allow", - "Action": [ - "vendor-insights:GetDataSource", - "vendor-insights:ListDataSources", - "vendor-insights:ListSecurityProfiles", - "vendor-insights:GetSecurityProfile", - "vendor-insights:GetSecurityProfileSnapshot", - "vendor-insights:ListSecurityProfileSnapshots" - ], - "Resource": "*" - }, - { - "Sid": "TagManagement", - "Effect": "Allow", - "Action": [ - "aws-marketplace:TagResource", - "aws-marketplace:UntagResource", - "aws-marketplace:ListTagsForResource" - ], - "Resource": "arn:aws:aws-marketplace:*:*:AWSMarketplace/*" - }, - { - "Sid": "SellerSettings", - "Effect": "Allow", - "Action": [ - "aws-marketplace-management:GetSellerVerificationDetails", - "aws-marketplace-management:PutSellerVerificationDetails", - "aws-marketplace-management:GetBankAccountVerificationDetails", - "aws-marketplace-management:PutBankAccountVerificationDetails", - "aws-marketplace-management:GetSecondaryUserVerificationDetails", - "aws-marketplace-management:PutSecondaryUserVerificationDetails", - "aws-marketplace-management:GetAdditionalSellerNotificationRecipients", - "aws-marketplace-management:PutAdditionalSellerNotificationRecipients", - "payments:GetPaymentInstrument", - "payments:CreatePaymentInstrument", - "tax:GetTaxInterview", - "tax:PutTaxInterview", - "tax:GetTaxInfoReportingDocument", - "tax:ListSupplementalTaxRegistrations", - "tax:PutSupplementalTaxRegistration", - "tax:DeleteSupplementalTaxRegistration", - "tax:GetTaxRegistration" - ], - "Resource": "*" - }, - { - "Sid": "Support", - "Effect": "Allow", - "Action": [ - "support:CreateCase" - ], - "Resource": "*" - }, - { - "Sid": "ResourcePolicyManagement", - "Effect": "Allow", - "Action": [ - "aws-marketplace:GetResourcePolicy", - "aws-marketplace:PutResourcePolicy", - "aws-marketplace:DeleteResourcePolicy" - ], - "Resource": "arn:aws:aws-marketplace:*:*:AWSMarketplace/*" - }, - { - "Sid": "CreateServiceLinkedRole", - "Effect": "Allow", - "Action": "iam:CreateServiceLinkedRole", - "Resource": "*", - "Condition": { - "StringEquals": { - "iam:AWSServiceName": "resale-authorization.marketplace.amazonaws.com" - } - } - } - ] - } - - @@ -271,81 +116,0 @@ This policy grants contributor permissions that allow full access to manage prod -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "aws-marketplace:ListChangeSets", - "aws-marketplace:DescribeChangeSet", - "aws-marketplace:StartChangeSet", - "aws-marketplace:CancelChangeSet", - "aws-marketplace:ListEntities", - "aws-marketplace:DescribeEntity", - "aws-marketplace:ListAssessments", - "aws-marketplace:DescribeAssessment", - "ec2:DescribeImages", - "ec2:DescribeSnapshots", - "ec2:ModifyImageAttribute", - "ec2:ModifySnapshotAttribute" - ], - "Resource": "*" - }, - { - "Effect": "Allow", - "Action": [ - "iam:GetRole" - ], - "Resource": "arn:aws:iam::*:role/*" - }, - { - "Effect": "Allow", - "Action": [ - "iam:PassRole" - ],