AWS marketplace documentation change
Summary
Added detailed permissions breakdown for AWSMarketplaceSellerFullAccess and AWSMarketplaceSellerOfferManagement policies, including new actions for managing agreement cancellations and billing adjustments. Updated change history with March 31, 2026 entries.
Security assessment
This change documents IAM policy permissions in detail, which is security documentation about access controls. However, there is no evidence of addressing a specific security vulnerability or incident - it appears to be routine documentation enhancement and addition of new API actions for billing and agreement management features.
Diff
diff --git a/marketplace/latest/userguide/security-iam-awsmanpol.md b/marketplace/latest/userguide/security-iam-awsmanpol.md index ddcf9dc38..c34a68305 100644 --- a//marketplace/latest/userguide/security-iam-awsmanpol.md +++ b//marketplace/latest/userguide/security-iam-awsmanpol.md @@ -106,0 +107,37 @@ This policy grants administrative permissions that allow full access to all sell +**Permissions details** + +This policy includes the following permissions: + + * `aws-marketplace` – Allows principals to manage change sets, entities, agreements, and seller dashboards. + + * `aws-marketplace` – Allows principals to search and view purchase agreements and their terms where the user is the seller. + + * `aws-marketplace` – Allows principals to send, retrieve, list, and cancel agreement payment requests for purchase agreements. + + * `aws-marketplace` – Allows principals to list invoice line items, manage billing adjustment requests, and handle agreement cancellation requests for purchase agreements. + + * `aws-marketplace` – Allows principals to manage resource policies and tag resources. + + * `aws-marketplace-management` – Allows principals to upload files, view reports and support information. + + * `ec2` – Allows principals to describe and modify AMI images and snapshots. + + * `iam` – Allows principals to retrieve role information and pass roles to the assets marketplace service. + + * `iam` – Allows principals to create service-linked roles for resale authorization. + + * `vendor-insights` – Allows principals to retrieve and list data sources, security profiles, and snapshots. + + * `payments` – Allows principals to retrieve and create payment instruments. + + * `tax` – Allows principals to manage tax interviews, registrations, and retrieve tax documents. + + * `support` – Allows principals to create support cases. + + * `q` – Allows principals to use Amazon Q Partner Assistant for conversations and requests. + + * `partnercentral` – Allows principals to start and retrieve seller verification status. + + + + @@ -133 +170,18 @@ You can attach the `AWSMarketplaceSellerOfferManagement` policy to your IAM iden -This policy grants sellers access to Offers and Agreements management activities. +This policy grants sellers access to manage offers and view purchase agreements. Sellers can create and modify offers, track change sets, and monitor agreement lifecycle events including invoice line items, billing adjustments, and cancellation requests. + +**Permissions details** + +This policy includes the following permissions: + + * `aws-marketplace` – Allows principals to view and track the status of change sets submitted to AWS Marketplace. + + * `aws-marketplace` – Allows principals to initiate changes to existing offers and change sets, or create new offers on products. + + * `aws-marketplace` – Allows principals to list and retrieve details about marketplace entities including offers, products, and resale authorizations. + + * `aws-marketplace` – Allows principals to search and view purchase agreements and their terms where the user is the seller (proposer). + + * `aws-marketplace` – Allows principals to track invoice line items, billing adjustments, and cancellation requests for purchase agreements. + + + @@ -168,0 +223,2 @@ Change | Description | Date +AWSMarketplaceSellerFullAccess – Update to an existing policy | AWS Marketplace added 8 new actions for managing agreement cancellations and billing adjustments: `aws-marketplace:ListAgreementInvoiceLineItems`, `aws-marketplace:ListBillingAdjustmentRequests`, `aws-marketplace:GetBillingAdjustmentRequest`, `aws-marketplace:BatchCreateBillingAdjustmentRequest`, `aws-marketplace:ListAgreementCancellationRequests`, `aws-marketplace:GetAgreementCancellationRequest`, `aws-marketplace:SendAgreementCancellationRequest`, and `aws-marketplace:CancelAgreementCancellationRequest`. | March 31, 2026 +AWSMarketplaceSellerOfferManagement – Update to an existing policy | AWS Marketplace added 5 new read-only actions to track invoice line items, billing adjustments, and cancellation requests for purchase agreements: `aws-marketplace:ListAgreementInvoiceLineItems`, `aws-marketplace:ListBillingAdjustmentRequests`, `aws-marketplace:GetBillingAdjustmentRequest`, `aws-marketplace:ListAgreementCancellationRequests`, and `aws-marketplace:GetAgreementCancellationRequest`. | March 31, 2026