AWS marketplace documentation change
Summary
Updated documentation for AWSMarketplaceManageSubscriptions and AWSMarketplaceRead-only managed policies to add detailed permission breakdowns and document new agreement cancellation request management capabilities
Security assessment
This change documents IAM policy updates that add new permissions for managing agreement cancellation requests. While this is security documentation (IAM policies), there's no evidence of addressing a specific security vulnerability or incident. The change appears to be routine documentation of new feature capabilities added to existing managed policies.
Diff
diff --git a/marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md b/marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md index 60c3ff67a..48fe6dd8a 100644 --- a//marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md +++ b//marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md @@ -86 +86,20 @@ You can attach the `AWSMarketplaceManageSubscriptions` policy to your IAM identi -This policy grants contributor permissions that allow subscribing and unsubscribing to AWS Marketplace products. It also allows buys to access Express Private Offers. +This policy grants contributor permissions that allow subscribing and unsubscribing to AWS Marketplace products. It also allows buyers to access Express Private Offers and manage agreement cancellation requests. + +The permissions are organized into the following groups: + + * `aws-marketplace` – Allows principals to view, subscribe to, and unsubscribe from AWS Marketplace products. + + * `aws-marketplace` – Allows principals to create and manage private marketplace requests and view private product listings. + + * `aws-marketplace` – Allows principals to manage purchase orders and handle payment requests for purchase agreements, including accepting or rejecting payment requests and viewing agreement charges. These permissions are restricted to agreements of type PurchaseAgreement. + + * `aws-marketplace` – Allows principals to view and describe changesets in the AWS Marketplace catalog. + + * `aws-marketplace` – Allows principals to create and manage agent token containers and express private offers through the changeset mechanism. These permissions are limited to specific change types: CreateAgentTokenContainer, RequestExpressPrivateOffer, and ExpireToken. + + * `aws-marketplace` – Allows principals to list and describe entities in the AWS Marketplace catalog, such as products, offers, and agreements. + + * `aws-marketplace` – Allows principals to manage agreement cancellation requests as the accepting party, including listing, retrieving, accepting, rejecting cancellation requests, and directly canceling agreements. These permissions are restricted to PurchaseAgreement type and Acceptor party type. + + + @@ -103,0 +123,19 @@ This policy grants read-only permissions that allows viewing products, private o +The permissions are organized into the following groups: + + * `aws-marketplace` – Allows principals to view subscriptions and list agreement charges. + + * `ec2` – Allows principals to describe account attributes, addresses, images, instances, key pairs, security groups, subnets, and VPCs. + + * `iam` – Allows principals to list roles and instance profiles. + + * `sns` – Allows principals to get topic attributes and list topics. + + * `aws-marketplace` – Allows principals to list and describe private marketplace requests, and view agreement payment requests. + + * `aws-marketplace` – Allows principals to list private product listings. + + * `aws-marketplace` – Allows principals to list and view agreement cancellation requests. + + + + @@ -221,0 +260,2 @@ Change | Description | Date +AWSMarketplaceRead-only — updates to existing policy | AWS Marketplace added permissions for listing and viewing agreement cancellation requests. | March 31, 2026 +AWSMarketplaceManageSubscriptions — updates to existing policy | AWS Marketplace added permissions for managing agreement cancellation requests, including listing, retrieving, accepting, rejecting cancellation requests, and directly canceling agreements. | March 31, 2026