Políticas administradas disponibles
1. AWSPartnerCentralFullAccess
2. AWSPartnerCentralOpportunityManagement
3. AWSPartnerCentralMarketingManagement
4. AWSPartnerCentralChannelManagement
5. AWSPartnerCentralChannelHandshakeManagement
6. AWSMarketplaceSellerProductsFullAccess
AWSPartnerCentralFullAccess
Descripción: Proporciona acceso completo a AWS Partner Central y a los servicios
relacionados de AWS.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "PassAWSPartnerCentralRole",
"Effect": "Allow",
"Action": [
"iam:PassRole"
],
"Resource": "arn:aws:iam::*:role/PartnerCentralRoleFor*",
"Condition": {
"StringEquals": {
"iam:PassedToService": "partnercentral-account-management.amazonaws.com"
}
}
},
{
"Sid": "PartnerUserRoleAssociation",
"Effect": "Allow",
"Action": [
"iam:ListRoles",
"Partnercentral-account-management:AssociatePartnerUser",
"Partnercentral-account-management:DisassociatePartnerUser"
],
"Resource": "*"
},
{
"Sid": "AWSPartnerCentralAccess",
"Effect": "Allow",
"Action": [
"partnercentral:*"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "VerificationAccess",
"Effect": "Allow",
"Action": [
"partnercentral:StartVerification",
"partnercentral:GetVerification"
],
"Resource": "*"
},
{
"Sid": "PassAWSPartnerCentralSnapshotJobRole",
"Effect": "Allow",
"Action": [
"iam:PassRole"
],
"Resource": [
"arn:aws:iam::*:role/*"
],
"Condition": {
"StringEquals": {
"iam:PassedToService": "resource-snapshot-job.partnercentral-selling.amazonaws.com"
}
}
},
{
"Sid": "LegacyPartnerCentralAccess",
"Effect": "Allow",
"Action": [
"partnercentral-account-management:AccessLegacyPartnerCentral"
],
"Resource": "*"
},
{
"Sid": "PartnerCentralMarketingAccess",
"Effect": "Allow",
"Action": [
"partnercentral-account-management:AccessMarketingCentral"
],
"Resource": "*"
},
{
"Sid": "ChannelBillingTransferRoleAccess",
"Effect": "Allow",
"Action": [
"sts:AssumeRole"
],
"Resource": [
"arn:aws:iam::*:role/PartnerCentralChannelBillingTransferManagement",
"arn:aws:iam::*:role/PartnerCentralChannelBillingTransferReadOnly"
]
},
{
"Sid": "PartnerCentralEphemeralWriteS3Access",
"Effect": "Allow",
"Action": [
"s3:PutObject"
],
"Resource": "arn:aws:s3:::aws-partner-central-marketplace-ephemeral-writeonly-files/${aws:PrincipalAccount}/*"
},
{
"Sid": "SupportAccess",
"Effect": "Allow",
"Action": [
"support:CreateCase",
"support:DescribeCases",
"support:AddCommunicationToCase",
"support:ResolveCase",
"support:AddAttachmentsToSet",
"support:DescribeCommunications"
],
"Resource": "*"
},
{
"Sid": "ListEntitiesAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:ListEntities"
],
"Resource": "*"
},
{
"Sid": "DescribeEntityAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:DescribeEntity"
],
"Resource": [
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/Solution/*",
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/OfferSet/*",
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/Offer/*"
]
}
]
}
AWSPartnerCentralOpportunityManagement
Descripción: Proporciona el acceso necesario para actividades de gestión de oportunidades.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "OpportunityManagement",
"Effect": "Allow",
"Action": [
"partnercentral:AcceptEngagementInvitation",
"partnercentral:AssignOpportunity",
"partnercentral:AssociateOpportunity",
"partnercentral:CreateEngagement",
"partnercentral:CreateEngagementContext",
"partnercentral:CreateEngagementInvitation",
"partnercentral:CreateOpportunity",
"partnercentral:CreateResourceSnapshot",
"partnercentral:CreateResourceSnapshotJob",
"partnercentral:DeleteResourceSnapshotJob",
"partnercentral:DisassociateOpportunity",
"partnercentral:GetAwsOpportunitySummary",
"partnercentral:GetEngagement",
"partnercentral:GetEngagementInvitation",
"partnercentral:GetOpportunity",
"partnercentral:GetResourceSnapshot",
"partnercentral:GetResourceSnapshotJob",
"partnercentral:ListEngagementByAcceptingInvitationTasks",
"partnercentral:ListEngagementFromOpportunityTasks",
"partnercentral:ListEngagementInvitations",
"partnercentral:ListEngagementMembers",
"partnercentral:ListEngagementResourceAssociations",
"partnercentral:ListEngagements",
"partnercentral:ListOpportunities",
"partnercentral:ListOpportunityFromEngagementTasks",
"partnercentral:ListResourceSnapshotJobs",
"partnercentral:ListResourceSnapshots",
"partnercentral:ListSolutions",
"partnercentral:RejectEngagementInvitation",
"partnercentral:StartEngagementByAcceptingInvitationTask",
"partnercentral:StartEngagementFromOpportunityTask",
"partnercentral:StartOpportunityFromEngagementTask",
"partnercentral:StartResourceSnapshotJob",
"partnercentral:StopResourceSnapshotJob",
"partnercentral:SubmitOpportunity",
"partnercentral:UpdateEngagementContext",
"partnercentral:UpdateOpportunity"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "ListingAWSMarketplaceEntities",
"Effect": "Allow",
"Action": [
"aws-marketplace:ListEntities"
],
"Resource": "*"
},
{
"Sid": "AWSMarketplaceEntityAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:DescribeEntity"
],
"Resource": [
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/Solution/*",
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/OfferSet/*",
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/Offer/*"
]
},
{
"Sid": "LegacyPartnerCentralAccess",
"Effect": "Allow",
"Action": [
"partnercentral-account-management:AccessLegacyPartnerCentral"
],
"Resource": "*",
"Condition": {
"ForAnyValue:StringEquals": {
"partnercentral-account-management:LegacyPartnerCentralRole": "AceManager"
}
}
},
{
"Sid": "PartnerDashboardAccess",
"Effect": "Allow",
"Action": [
"partnercentral:GetPartnerDashboard"
],
"Resource": [
"arn:aws:partnercentral::*:catalog/AWS/ReportingData/Opportunity_V1/Dashboard/*",
"arn:aws:partnercentral::*:catalog/AWS/ReportingData/Engagement_V1/Dashboard/*"
]
},
{
"Sid": "CollaborationChannelAccess",
"Effect": "Allow",
"Action": [
"partnercentral:CreateCollaborationChannelRequest",
"partnercentral:ListCollaborationChannels",
"partnercentral:GetCollaborationChannel",
"partnercentral:CreateCollaborationChannelMembers"
],
"Resource": "*"
},
{
"Sid": "PartnerResourceAccess",
"Effect": "Allow",
"Action": [
"partnercentral:ListPartners",
"partnercentral:GetPartner"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "TaggingAccess",
"Effect": "Allow",
"Action": [
"partnercentral:TagResource",
"partnercentral:UntagResource",
"partnercentral:ListTagsForResource"
],
"Resource": [
"arn:aws:partnercentral:*:*:catalog/*/opportunity/*",
"arn:aws:partnercentral:*:*:catalog/*/resource-snapshot-job/*"
],
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
}
]
}
AWSPartnerCentralMarketingManagement
Descripción: Proporciona el acceso necesario para actividades de marketing.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "PartnerCentralMarketingAccess",
"Effect": "Allow",
"Action": [
"partnercentral-account-management:AccessMarketingCentral"
],
"Resource": "*"
},
{
"Sid": "LegacyPartnerCentralAccess",
"Effect": "Allow",
"Action": [
"partnercentral-account-management:AccessLegacyPartnerCentral"
],
"Resource": "*",
"Condition": {
"ForAnyValue:StringEquals": {
"partnercentral-account-management:LegacyPartnerCentralRole": "MarketingStaff"
}
}
},
{
"Sid": "PartnerDiscoveryAccess",
"Effect": "Allow",
"Action": [
"partnercentral:SearchPartnerProfiles",
"partnercentral:GetPartnerProfile"
],
"Resource": "*"
},
{
"Sid": "PartnerProfileAccess",
"Effect": "Allow",
"Action": [
"partnercentral:StartProfileUpdateTask",
"partnercentral:GetProfileUpdateTask",
"partnercentral:CancelProfileUpdateTask",
"partnercentral:PutProfileVisibility",
"partnercentral:GetProfileVisibility"
],
"Resource": "arn:aws:partnercentral:*:*:catalog/*/partner/*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "PartnerResourceAccess",
"Effect": "Allow",
"Action": [
"partnercentral:ListPartners",
"partnercentral:GetPartner"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "PartnerCentralEphemeralWriteS3Access",
"Effect": "Allow",
"Action": [
"s3:PutObject"
],
"Resource": "arn:aws:s3:::aws-partner-central-marketplace-ephemeral-writeonly-files/${aws:PrincipalAccount}/*"
},
{
"Sid": "PartnerDashboardAccess",
"Effect": "Allow",
"Action": [
"partnercentral:GetPartnerDashboard"
],
"Resource": [
"arn:aws:partnercentral::*:catalog/AWS/ReportingData/MarketingCampaign_V1/Dashboard/*"
]
}
]
}
AWSPartnerCentralChannelManagement
Descripción: Proporciona el acceso necesario para actividades de gestión de canales.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ChannelManagement",
"Effect": "Allow",
"Action": [
"partnercentral:CreateProgramManagementAccount",
"partnercentral:UpdateProgramManagementAccount",
"partnercentral:DeleteProgramManagementAccount",
"partnercentral:ListProgramManagementAccounts",
"partnercentral:GetProgramManagementAccount",
"partnercentral:CreateRelationship",
"partnercentral:UpdateRelationship",
"partnercentral:DeleteRelationship",
"partnercentral:GetRelationship",
"partnercentral:ListRelationships",
"partnercentral:CreateChannelHandshake",
"partnercentral:AcceptChannelHandshake",
"partnercentral:RejectChannelHandshake",
"partnercentral:CancelChannelHandshake",
"partnercentral:ListChannelHandshakes"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "ChannelBillingTransferRoleAccess",
"Effect": "Allow",
"Action": [
"sts:AssumeRole"
],
"Resource": [
"arn:aws:iam::*:role/PartnerCentralChannelBillingTransferManagement",
"arn:aws:iam::*:role/PartnerCentralChannelBillingTransferReadOnly"
]
},
{
"Sid": "TaggingAccess",
"Effect": "Allow",
"Action": [
"partnercentral:TagResource",
"partnercentral:UntagResource",
"partnercentral:ListTagsForResource"
],
"Resource": [
"arn:aws:partnercentral:*:*:catalog/*/program-management-account/*",
"arn:aws:partnercentral:*:*:catalog/*/channel-handshake/*"
],
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "LegacyPartnerCentralAccess",
"Effect": "Allow",
"Action": [
"partnercentral-account-management:AccessLegacyPartnerCentral"
],
"Resource": "*",
"Condition": {
"ForAnyValue:StringEquals": {
"partnercentral-account-management:LegacyPartnerCentralRole": "ChannelUser"
}
}
},
{
"Sid": "PartnerDashboardAccess",
"Effect": "Allow",
"Action": [
"partnercentral:GetPartnerDashboard"
],
"Resource": [
"arn:aws:partnercentral::*:catalog/AWS/ReportingData/Resell_V1/Dashboard/*"
]
},
{
"Sid": "PartnerResourceAccess",
"Effect": "Allow",
"Action": [
"partnercentral:ListPartners",
"partnercentral:GetPartner"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
}
]
}
AWSPartnerCentralChannelHandshakeApprovalManagement
Descripción: Proporciona el acceso necesario para la aprobación de handshakes de canal.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "ChannelHandshakeManagement",
"Effect": "Allow",
"Action": [
"partnercentral:ListChannelHandshakes",
"partnercentral:AcceptChannelHandshake",
"partnercentral:RejectChannelHandshake"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
}
]
}
AWSMarketplaceSellerProductsFullAccess
Descripción: Proporciona a los vendedores acceso completo a la página de productos de AWS Marketplace Management y otros servicios de AWS, como la gestión de AMIs.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "MarketplaceListAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:ListChangeSets",
"aws-marketplace:ListEntities",
"aws-marketplace:ListAssessments"
],
"Resource": "*"
},
{
"Sid": "MarketplaceResourceAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:DescribeChangeSet",
"aws-marketplace:StartChangeSet",
"aws-marketplace:CancelChangeSet",
"aws-marketplace:DescribeEntity"
],
"Resource": "arn:aws:aws-marketplace:*:*:AWSMarketplace*/*"
},
{
"Sid": "MarketplaceAssessmentAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:DescribeAssessment"
],
"Resource": "*"
},
{
"Sid": "EC2ResourceAccess",
"Effect": "Allow",
"Action": [
"ec2:DescribeImages",
"ec2:DescribeSnapshots",
"ec2:ModifyImageAttribute",
"ec2:ModifySnapshotAttribute"
],
"Resource": "*"
},
{
"Sid": "GetIAMRoleAccess",
"Effect": "Allow",
"Action": [
"iam:GetRole"
],
"Resource": "arn:aws:iam::*:role/*"
},
{
"Sid": "IAMPassRoleAccess",
"Effect": "Allow",
"Action": [
"iam:PassRole"
],
"Resource": "arn:aws:iam::*:role/*",
"Condition": {
"StringEquals": {
"iam:PassedToService": "assets.marketplace.amazonaws.com"
}
}
},
{
"Sid": "VendorInsightsAccess",
"Effect": "Allow",
"Action": [
"vendor-insights:GetDataSource",
"vendor-insights:ListDataSources",
"vendor-insights:ListSecurityProfiles",
"vendor-insights:GetSecurityProfile",
"vendor-insights:GetSecurityProfileSnapshot",
"vendor-insights:ListSecurityProfileSnapshots"
],
"Resource": "*"
},
{
"Sid": "TagAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:TagResource",
"aws-marketplace:UntagResource",
"aws-marketplace:ListTagsForResource"
],
"Resource": "arn:aws:aws-marketplace:*:*:AWSMarketplace*/*"
},
{
"Sid": "ResourceSharingAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:GetResourcePolicy",
"aws-marketplace:PutResourcePolicy",
"aws-marketplace:DeleteResourcePolicy"
],
"Resource": "arn:aws:aws-marketplace:*:*:AWSMarketplace*/*"
},
{
"Sid": "MarketplaceEphemeralWriteS3Access",
"Effect": "Allow",
"Action": [
"s3:PutObject"
],
"Resource": [
"arn:aws:s3:::aws-partner-central-marketplace-ephemeral-writeonly-files/${aws:PrincipalAccount}/*"
]
},
{
"Sid": "LegacyPartnerCentralAccess",
"Effect": "Allow",
"Action": [
"partnercentral-account-management:AccessLegacyPartnerCentral"
],
"Resource": "*",
"Condition": {
"ForAnyValue:StringEquals": {
"partnercentral-account-management:LegacyPartnerCentralRole": "TechnicalStaff"
}
}
}
]
}