AWS marketplace documentation change
Summary
Added tax invoice permissions to AWSMarketplaceSellerFullAccess policy
Security assessment
Expands documented IAM permissions for financial operations but shows no evidence of patching vulnerabilities. Adds security documentation for new access controls.
Diff
diff --git a/marketplace/latest/userguide/security-iam-awsmanpol.md b/marketplace/latest/userguide/security-iam-awsmanpol.md index 30b660392..83e1046eb 100644 --- a//marketplace/latest/userguide/security-iam-awsmanpol.md +++ b//marketplace/latest/userguide/security-iam-awsmanpol.md @@ -124,0 +125,4 @@ This policy includes the following permissions: + * `aws-marketplace` – Allows principals to list and retrieve customer tax invoices generated by AWS on behalf of sellers. + + * `invoicing` – Allows principals to list invoice summaries and retrieve invoice PDFs for listing fee invoices. + @@ -230,0 +235 @@ Change | Description | Date +AWSMarketplaceSellerFullAccess – Update to an existing policy | AWS Marketplace added `aws-marketplace:ListIssuedTaxInvoices` and `invoicing:ListInvoiceSummaries` to the `SellerSettings` statement. Added `invoicing:GetInvoicePDF` to the `SellerSettings` statement. Added a new `SellerSettingsGetIssuedTaxInvoice` statement with `aws-marketplace:GetIssuedTaxInvoice` scoped to issued tax invoice resources. | May 7, 2026