AWS marketplace documentation change
Summary
Updated document history with two policy change entries: 1) Added 'MarketplaceEphemeralWriteS3Access' permission and 'aws-marketplace:ListInvoiceSubmissionTasks' to AWSMarketplaceSellerFullAccess policy (April 29, 2026) 2) Re-added original April 21, 2026 policy changes including new InvoiceSubmissionManagement statement
Security assessment
The changes document IAM policy updates which are security features, but there's no evidence of vulnerability remediation. The added permissions ('MarketplaceEphemeralWriteS3Access' and ListInvoiceSubmissionTasks) expand access capabilities without indicating they address specific security flaws. Policy documentation updates are routine maintenance for new features.
Diff
diff --git a/marketplace/latest/userguide/document-history.md b/marketplace/latest/userguide/document-history.md index cd481f8e1..a3202db1f 100644 --- a//marketplace/latest/userguide/document-history.md +++ b//marketplace/latest/userguide/document-history.md @@ -15 +15,2 @@ Change| Description| Date -Updated managed policies| The [AWSMarketplaceSellerFullAccess](https://docs.aws.amazon.com/marketplace/latest/userguide/seller-security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplacesellerfullaccess) policy was updated with the following changes: added `aws-marketplace:ListPayables` to the `SellerSettings` statement, added a new `InvoiceSubmissionManagement` statement with `StartInvoiceSubmissionTask`, `GetInvoiceSubmissionTask`, and `ListInvoiceSubmissionTasks`, and updated resource ARNs for the `TagManagement` and `ResourcePolicyManagement` statements.| April 21, 2026 +Updated managed policy| The following permissions were added to the [AWSMarketplaceSellerFullAccess](https://docs.aws.amazon.com/marketplace/latest/userguide/seller-security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplacesellerfullaccess) policy: `MarketplaceEphemeralWriteS3Access`. Added `aws-marketplace:ListInvoiceSubmissionTasks` to the `SellerSettings` statement.| April 29, 2026 +Updated managed policy| The [AWSMarketplaceSellerFullAccess](https://docs.aws.amazon.com/marketplace/latest/userguide/seller-security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplacesellerfullaccess) policy was updated with the following changes: added `aws-marketplace:ListPayables` to the `SellerSettings` statement, added a new `InvoiceSubmissionManagement` statement with `StartInvoiceSubmissionTask`, `GetInvoiceSubmissionTask`, and `ListInvoiceSubmissionTasks`, and updated resource ARNs for the `TagManagement` and `ResourcePolicyManagement` statements.| April 21, 2026