AWS marketplace: Marketplace changelog: new/updated IAM managed policies for subsidiary auth
Summary
Added three changelog entries to the AWS Marketplace document history: an update to AWSMarketplaceSellerOfferManagement adding the SubsidiaryAuthorization resource type to the AWSMarketplaceEntitiesReadAccess statement, a new AWSMarketplaceSubsidiaryAuthorizationServiceRolePolicy service role policy letting AWS Marketplace share SubsidiaryAuthorization entities between parent and subsidiary seller accounts via AWS RAM, and updates to AWSMarketplaceSellerFullAccess and AWSMarketplaceSellerProductsFullAccess adding partnercentral:ListConnections and partnercentral:GetConnection.
Security assessment
The added lines are changelog entries documenting IAM managed policy changes: a new service role policy granting AWS Marketplace cross-account (parent/subsidiary) sharing via AWS RAM, an expanded resource type in AWSMarketplaceEntitiesReadAccess, and two new partnercentral read permissions. These describe permission/trust changes with security impact, but there is no evidence of a specific vulnerability, CVE, or incident being fixed, so security_issue_related is false.
Evidence
+New managed policy| Added the [AWSMarketplaceSubsidiaryAuthorizationServiceRolePolicy](https://docs.aws.amazon.com/marketplace/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplacesubsidiaryauthorizationservicerolepolicy) service role policy that allows AWS Marketplace to share SubsidiaryAuthorization entities between Parent and Subsidiary seller accounts using AWS Resource Access Manager.| October 26, 2026
Diff
diff --git a/marketplace/latest/userguide/document-history.md b/marketplace/latest/userguide/document-history.md index 19c103b..fb3544c 100644 --- a//marketplace/latest/userguide/document-history.md +++ b//marketplace/latest/userguide/document-history.md @@ -14,0 +15,3 @@ Change| Description| Date +Updated managed policy| AWS Marketplace updated the [AWSMarketplaceSellerOfferManagement](https://docs.aws.amazon.com/marketplace/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplaceselleroffermanagement) policy. The `SubsidiaryAuthorization` resource type was added to the `AWSMarketplaceEntitiesReadAccess` statement.| October 26, 2026 +New managed policy| Added the [AWSMarketplaceSubsidiaryAuthorizationServiceRolePolicy](https://docs.aws.amazon.com/marketplace/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplacesubsidiaryauthorizationservicerolepolicy) service role policy that allows AWS Marketplace to share SubsidiaryAuthorization entities between Parent and Subsidiary seller accounts using AWS Resource Access Manager.| October 26, 2026 +Updated managed policies| Updated the [AWSMarketplaceSellerFullAccess](https://docs.aws.amazon.com/marketplace/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplacesellerfullaccess) and [AWSMarketplaceSellerProductsFullAccess](https://docs.aws.amazon.com/marketplace/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-awsmarketplacesellerproductsfullaccess) policies to add `partnercentral:ListConnections` and `partnercentral:GetConnection`, so that you can view your account's partner account connections and select a subsidiary when creating a Subsidiary Authorization.| October 22, 2026