AWS marketplace documentation change
Summary
Added new AWSMarketplaceDiscoveryFullAccess policy and updated existing policies with Discovery API permissions
Security assessment
Documents new IAM permissions for Discovery API access but doesn't address vulnerabilities. Adds security feature documentation for access control.
Diff
diff --git a/marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md b/marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md index b1ab139ef..f969f0cf5 100644 --- a//marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md +++ b//marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.md @@ -7 +7 @@ -AWSMarketplaceDeploymentServiceRolePolicyAWSMarketplaceFullAccessAWSMarketplaceImageBuildFullAccess (Deprecated)AWSMarketplaceLicenseManagementServiceRolePolicyAWSMarketplaceManageSubscriptionsAWSMarketplaceProcurementSystemAdminFullAccessAWSMarketplaceRead-onlyAWSPrivateMarketplaceAdminFullAccessAWSPrivateMarketplaceRequestsAWS managed policy: AWSServiceRoleForPrivateMarketplaceAdminPolicyAWSVendorInsightsAssessorFullAccessAWSVendorInsightsAssessorReadOnlyAWS managed policy: AWSServiceRoleForProcurementInsightsPolicyAWS Marketplace updates to AWS managed policies +AWSMarketplaceDeploymentServiceRolePolicyAWSMarketplaceDiscoveryFullAccessAWSMarketplaceFullAccessAWSMarketplaceImageBuildFullAccess (Deprecated)AWSMarketplaceLicenseManagementServiceRolePolicyAWSMarketplaceManageSubscriptionsAWSMarketplaceProcurementSystemAdminFullAccessAWSMarketplaceRead-onlyAWSPrivateMarketplaceAdminFullAccessAWSPrivateMarketplaceRequestsAWS managed policy: AWSServiceRoleForPrivateMarketplaceAdminPolicyAWSVendorInsightsAssessorFullAccessAWSVendorInsightsAssessorReadOnlyAWS managed policy: AWSServiceRoleForProcurementInsightsPolicyAWS Marketplace updates to AWS managed policies @@ -24,0 +25,2 @@ This section lists each of the policies used to manage buyer access to AWS Marke + * AWS managed policy: AWSMarketplaceDiscoveryFullAccess + @@ -61,0 +64,8 @@ To view the permissions for this policy, see [AWSMarketplaceDeploymentServiceRol +## AWS managed policy: AWSMarketplaceDiscoveryFullAccess + +You can attach the `AWSMarketplaceDiscoveryFullAccess` policy to your IAM identities. + +Provides full access to the AWS Marketplace Discovery API for searching and retrieving product and pricing information. + +To view the permissions for this policy, see [AWSMarketplaceDiscoveryFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSMarketplaceDiscoveryFullAccess.html) in the _AWS Managed Policy Reference_. + @@ -105,0 +116,2 @@ The permissions are organized into the following groups: + * `aws-marketplace` – Allows principals to search listings, retrieve product and offer details, and list purchase and fulfillment options using the Discovery API. + @@ -151,0 +164,2 @@ The permissions are organized into the following groups: + * `aws-marketplace` – Allows principals to search listings, retrieve product and offer details, and list purchase and fulfillment options using the Discovery API. + @@ -272,0 +287,3 @@ Change | Description | Date +AWSMarketplaceManageSubscriptions — updates to existing policy | AWS Marketplace added Discovery API permissions for searching listings, retrieving product and offer details, and listing purchase and fulfillment options. | May 7, 2026 +AWSMarketplaceDiscoveryFullAccess — new policy | AWS Marketplace added a new policy that provides full access to the AWS Marketplace Discovery API for searching and retrieving product and pricing information. | May 7, 2026 +AWSMarketplaceRead-only — updates to existing policy | AWS Marketplace added read-only permissions for Discovery API operations including searching listings, retrieving product and offer details, and listing purchase and fulfillment options. | May 7, 2026