AWS marketplace documentation change
Summary
Updated refund request instructions to allow IAM users with AWSMarketplaceSellerFullAccess or AWSMarketplaceSellerProductFullAccess permissions (previously required root user access).
Security assessment
Documentation now promotes security best practices by reducing root user dependency through IAM permissions. While not fixing a specific vulnerability, it enhances security documentation by describing granular access controls.
Diff
diff --git a/marketplace/latest/userguide/refunds.md b/marketplace/latest/userguide/refunds.md index b4dee3d0c..dc532ce7a 100644 --- a//marketplace/latest/userguide/refunds.md +++ b//marketplace/latest/userguide/refunds.md @@ -356 +356 @@ The following steps explain how to create refund requests involving 20+ invoices - 3. Sign in to the [Support Center Console](https://console.aws.amazon.com/support/home?) as the root user. + 3. Sign in to the [Support Center Console](https://console.aws.amazon.com/support/home?) as the root user or as an IAM user with either AWSMarketplaceSellerFullAccess or AWSMarketplaceSellerProductFullAccess permissions. @@ -360 +360 @@ The following steps explain how to create refund requests involving 20+ invoices -You can't complete these steps unless you sign in as the root user. +You can't complete these steps unless you sign in as the root user or as an IAM user with either AWSMarketplaceSellerFullAccess or AWSMarketplaceSellerProductFullAccess permissions.