AWS partner-central documentation change
Summary
Added new section 'AWS ProServe Tools Access' detailing three managed policies for accessing AWS Assessment Tools (MPA and A2T) with persona-based access control mappings
Security assessment
This change documents security features (IAM managed policies) for controlling access to AWS ProServe assessment tools. It establishes role-based access control with three distinct permission levels (Individual Contributor, Organization Reader and Individual Contributor, Organization Contributor) but does not indicate any security vulnerability being fixed. The documentation helps partners implement proper access controls for sensitive assessment tools.
Diff
diff --git a/partner-central/latest/getting-started/managed-policy-mappings.md b/partner-central/latest/getting-started/managed-policy-mappings.md index e480603a9..7d6fb9210 100644 --- a//partner-central/latest/getting-started/managed-policy-mappings.md +++ b//partner-central/latest/getting-started/managed-policy-mappings.md @@ -5 +5 @@ -Understanding Partner Central Personas and Policy MappingCommon AWS Partner Central User Personas +Understanding Partner Central Personas and Policy MappingCommon AWS Partner Central User PersonasAWS ProServe Tools Access @@ -102,0 +103,33 @@ Funding Program Manager | The Funding Program Manager owns financial operations +## AWS ProServe Tools Access + +For services partners supporting customer migrations and who want access to the AWS Assessment Tools (outside of AWS Partner Central), users must be assigned one of three managed policies to be provisioned access. These tools include: + + * **Migration Portfolio Assessment (MPA)** : A tool that helps partners and customers evaluate, plan, and prioritize workloads for migration to AWS. MPA enables partners to build a business case for migration, analyze the current application portfolio, estimate costs, and identify the right migration strategy for each workload. It provides data-driven insights to accelerate migration planning and reduce risk. + + * **Assessment Tools (A2T)** : A suite of customer-facing survey and assessment tools, including the Migration Readiness Assessment (MRA) — a structured evaluation that measures a customer's readiness to migrate to AWS across six dimensions of the AWS Cloud Adoption Framework. A2T assessments help partners identify gaps, build remediation plans, and demonstrate migration readiness to AWS and the customer. + + + + +Access is controlled through three AWS managed policies, each mapped to a specific user persona. Use the table below to determine the level of access each individual requires: + +User persona | Persona Description | Recommended Partner Central Managed policies | AWS Assessment Tools functionality +---|---|---|--- +Individual Contributor | This individual creates and manages their own assessments in A2T and MPA. This is the base-level role required for all assessment activity. | `AWSPartnerProServeToolsIndividualContributor` | + + * Create, read, update, and share only their own assessments/portfolios in both A2T and MPA + + +Organization Reader and Individual Contributor | This individual requires visibility into all assessments across the organization, while also managing their own. This persona is common for team leads or senior practitioners who need to review historical or peer assessments without editing them. | `AWSPartnerProServeToolsOrganizationReaderIndividualContributor` | + + * Read all organizational assessments in A2T (read-only for others' work) + * Create, read, update, and share only their own assessments/portfolios in both A2T and MPA + + +Organization Contributor (Full Assessment Access) | This individual requires full read/write access to all assessments in the organization. This persona is suited for senior practitioners or delivery leads who need to edit, delete, or share assessments created by any user in the organization, including historical assessments. | `AWSPartnerProServeToolsFullAccess` | + + * Create, edit, delete, and share any A2T assessments/MPA portfolios in the organization + * Access to all historical A2T assessments/MPA portfolios created prior to partner migration to AWS Console + + +