View a markdown version of this page

Actions, resources, and condition keys for AWS Partner Central - Service Authorization Reference

Actions, resources, and condition keys for AWS Partner Central

AWS Partner Central (service prefix: partnercentral) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

API operations defined by AWS Partner Central

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation SDK client IAM action Condition key Possible value(s) Access level

AcceptConnectionInvitation

partnercentral-account

partnercentral:AcceptConnectionInvitation

Write

AssociateAwsTrainingCertificationEmailDomain

partnercentral-account

partnercentral:AssociateAwsTrainingCertificationEmailDomain

Write

CancelConnection

partnercentral-account

partnercentral:CancelConnection

Write

CancelConnectionInvitation

partnercentral-account

partnercentral:CancelConnectionInvitation

Write

CancelProfileUpdateTask

partnercentral-account

partnercentral:CancelProfileUpdateTask

Write

CreateConnectionInvitation

partnercentral-account

partnercentral:CreateConnectionInvitation

Write

CreatePartner

partnercentral-account

partnercentral:CreatePartner

Write

partnercentral:TagResource

Tagging, Write

DisassociateAwsTrainingCertificationEmailDomain

partnercentral-account

partnercentral:DisassociateAwsTrainingCertificationEmailDomain

Write

GetAllianceLeadContact

partnercentral-account

partnercentral:GetAllianceLeadContact

Read

GetConnection

partnercentral-account

partnercentral:GetConnection

Read

GetConnectionInvitation

partnercentral-account

partnercentral:GetConnectionInvitation

Read

GetConnectionPreferences

partnercentral-account

partnercentral:GetConnectionPreferences

Read

GetPartner

partnercentral-account

partnercentral:GetPartner

Read

GetProfileUpdateTask

partnercentral-account

partnercentral:GetProfileUpdateTask

Read

GetProfileVisibility

partnercentral-account

partnercentral:GetProfileVisibility

Read

GetVerification

partnercentral-account

partnercentral:GetVerification

Read

ListConnectionInvitations

partnercentral-account

partnercentral:ListConnectionInvitations

List

ListConnections

partnercentral-account

partnercentral:ListConnections

List

ListPartners

partnercentral-account

partnercentral:ListPartners

List

ListTagsForResource

partnercentral-account

partnercentral:ListTagsForResource

Read

PutAllianceLeadContact

partnercentral-account

partnercentral:PutAllianceLeadContact

Write

PutProfileVisibility

partnercentral-account

partnercentral:PutProfileVisibility

Write

RejectConnectionInvitation

partnercentral-account

partnercentral:RejectConnectionInvitation

Write

SendEmailVerificationCode

partnercentral-account

partnercentral:SendEmailVerificationCode

Write

StartProfileUpdateTask

partnercentral-account

partnercentral:StartProfileUpdateTask

Write

StartVerification

partnercentral-account

partnercentral:StartVerification

Write

TagResource

partnercentral-account

partnercentral:TagResource

Tagging, Write

UntagResource

partnercentral-account

partnercentral:UntagResource

Tagging, Write

UpdateConnectionPreferences

partnercentral-account

partnercentral:UpdateConnectionPreferences

Write

AmendBenefitApplication

partnercentral-benefits

partnercentral:AmendBenefitApplication

Write

AssociateBenefitApplicationResource

partnercentral-benefits

partnercentral:AssociateBenefitApplicationResource

Write

CancelBenefitApplication

partnercentral-benefits

partnercentral:CancelBenefitApplication

Write

CreateBenefitApplication

partnercentral-benefits

partnercentral:CreateBenefitApplication

Write

partnercentral:TagResource

Tagging, Write

DisassociateBenefitApplicationResource

partnercentral-benefits

partnercentral:DisassociateBenefitApplicationResource

Write

GetBenefit

partnercentral-benefits

partnercentral:GetBenefit

Read

GetBenefitAllocation

partnercentral-benefits

partnercentral:GetBenefitAllocation

Read

GetBenefitApplication

partnercentral-benefits

partnercentral:GetBenefitApplication

Read

ListBenefitAllocations

partnercentral-benefits

partnercentral:ListBenefitAllocations

List

ListBenefitApplications

partnercentral-benefits

partnercentral:ListBenefitApplications

List

ListBenefits

partnercentral-benefits

partnercentral:ListBenefits

List

ListTagsForResource

partnercentral-benefits

partnercentral:ListTagsForResource

Read

RecallBenefitApplication

partnercentral-benefits

partnercentral:RecallBenefitApplication

Write

SubmitBenefitApplication

partnercentral-benefits

partnercentral:SubmitBenefitApplication

Write

TagResource

partnercentral-benefits

partnercentral:TagResource

Tagging, Write

UntagResource

partnercentral-benefits

partnercentral:UntagResource

Tagging, Write

UpdateBenefitApplication

partnercentral-benefits

partnercentral:UpdateBenefitApplication

Write

AcceptChannelHandshake

partnercentral-channel

partnercentral:AcceptChannelHandshake

Write

CancelChannelHandshake

partnercentral-channel

partnercentral:CancelChannelHandshake

Write

CreateChannelHandshake

partnercentral-channel

partnercentral:CreateChannelHandshake

Write

partnercentral:GetProgramManagementAccount

Read

partnercentral:GetRelationship

Read

CreateProgramManagementAccount

partnercentral-channel

partnercentral:CreateProgramManagementAccount

Write

partnercentral:TagResource

Tagging, Write

CreateRelationship

partnercentral-channel

partnercentral:CreateRelationship

Write

partnercentral:GetProgramManagementAccount

Read

partnercentral:TagResource

Tagging, Write

DeleteProgramManagementAccount

partnercentral-channel

partnercentral:DeleteProgramManagementAccount

Write

DeleteRelationship

partnercentral-channel

partnercentral:DeleteRelationship

Write

GetRelationship

partnercentral-channel

partnercentral:GetRelationship

Read

ListChannelHandshakes

partnercentral-channel

partnercentral:ListChannelHandshakes

List

ListProgramManagementAccounts

partnercentral-channel

partnercentral:ListProgramManagementAccounts

List

ListRelationships

partnercentral-channel

partnercentral:ListRelationships

List

ListTagsForResource

partnercentral-channel

partnercentral:ListTagsForResource

Read

RejectChannelHandshake

partnercentral-channel

partnercentral:RejectChannelHandshake

Write

TagResource

partnercentral-channel

partnercentral:TagResource

Tagging, Write

UntagResource

partnercentral-channel

partnercentral:UntagResource

Tagging, Write

UpdateProgramManagementAccount

partnercentral-channel

partnercentral:UpdateProgramManagementAccount

Write

UpdateRelationship

partnercentral-channel

partnercentral:UpdateRelationship

Write

CreateMarketplaceRevenueShare

partnercentral-revenue-measurement

partnercentral:CreateMarketplaceRevenueShare

Write

partnercentral:TagResource

Tagging, Write

CreateMarketplaceRevenueShareAllocation

partnercentral-revenue-measurement

partnercentral:CreateMarketplaceRevenueShareAllocation

Write

CreateRevenueAttribution

partnercentral-revenue-measurement

partnercentral:CreateRevenueAttribution

Write

partnercentral:TagResource

Tagging, Write

GetMarketplaceRevenueShare

partnercentral-revenue-measurement

partnercentral:GetMarketplaceRevenueShare

Read

GetMarketplaceRevenueShareAllocation

partnercentral-revenue-measurement

partnercentral:GetMarketplaceRevenueShareAllocation

Read

GetRevenueAttribution

partnercentral-revenue-measurement

partnercentral:GetRevenueAttribution

Read

GetRevenueAttributionAllocation

partnercentral-revenue-measurement

partnercentral:GetRevenueAttributionAllocation

Read

GetRevenueAttributionAllocationsTask

partnercentral-revenue-measurement

partnercentral:GetRevenueAttributionAllocationsTask

Read

ListMarketplaceRevenueShareAllocations

partnercentral-revenue-measurement

partnercentral:ListMarketplaceRevenueShareAllocations

List

ListMarketplaceRevenueShares

partnercentral-revenue-measurement

partnercentral:ListMarketplaceRevenueShares

List

ListRevenueAttributionAllocations

partnercentral-revenue-measurement

partnercentral:ListRevenueAttributionAllocations

List

ListRevenueAttributions

partnercentral-revenue-measurement

partnercentral:ListRevenueAttributions

List

ListTagsForResource

partnercentral-revenue-measurement

partnercentral:ListTagsForResource

Read

StartRevenueAttributionAllocationsTask

partnercentral-revenue-measurement

partnercentral:StartRevenueAttributionAllocationsTask

Write

TagResource

partnercentral-revenue-measurement

partnercentral:TagResource

Tagging, Write

UntagResource

partnercentral-revenue-measurement

partnercentral:UntagResource

Tagging, Write

UpdateMarketplaceRevenueShareAllocation

partnercentral-revenue-measurement

partnercentral:UpdateMarketplaceRevenueShareAllocation

Write

UpdateRevenueAttribution

partnercentral-revenue-measurement

partnercentral:UpdateRevenueAttribution

Write

AcceptEngagementInvitation

partnercentral-selling

partnercentral:AcceptEngagementInvitation

Write

AssignOpportunity

partnercentral-selling

partnercentral:AssignOpportunity

Write

AssociateOpportunity

partnercentral-selling

partnercentral:AssociateOpportunity

Write

CreateEngagement

partnercentral-selling

partnercentral:CreateEngagement

Write

CreateEngagementContext

partnercentral-selling

partnercentral:CreateEngagementContext

Write

partnercentral:GetEngagement

Read

CreateEngagementInvitation

partnercentral-selling

partnercentral:CreateEngagementInvitation

Write

partnercentral:GetEngagement

Read

CreateOpportunity

partnercentral-selling

partnercentral:CreateOpportunity

Write

partnercentral:TagResource

Tagging, Write

CreateResourceSnapshot

partnercentral-selling

partnercentral:CreateResourceSnapshot

Write

partnercentral:GetAwsOpportunitySummary

Read

partnercentral:GetOpportunity

Read

CreateResourceSnapshotJob

partnercentral-selling

partnercentral:CreateResourceSnapshot

Write

partnercentral:CreateResourceSnapshotJob

Write

partnercentral:GetOpportunity

Read

partnercentral:TagResource

Tagging, Write

DeleteResourceSnapshotJob

partnercentral-selling

partnercentral:DeleteResourceSnapshotJob

Write

DisassociateOpportunity

partnercentral-selling

partnercentral:DisassociateOpportunity

Write

GetAwsOpportunitySummary

partnercentral-selling

partnercentral:GetAwsOpportunitySummary

Read

GetEngagement

partnercentral-selling

partnercentral:GetEngagement

Read

GetEngagementInvitation

partnercentral-selling

partnercentral:GetEngagementInvitation

Read

GetOpportunity

partnercentral-selling

partnercentral:GetOpportunity

Read

GetProspectingFromEngagementTask

partnercentral-selling

partnercentral:GetProspectingFromEngagementTask

Read

GetResourceSnapshot

partnercentral-selling

partnercentral:GetResourceSnapshot

Read

GetResourceSnapshotJob

partnercentral-selling

partnercentral:GetResourceSnapshotJob

Read

GetSellingSystemSettings

partnercentral-selling

partnercentral:GetSellingSystemSettings

Read

ListEngagementByAcceptingInvitationTasks

partnercentral-selling

partnercentral:ListEngagementByAcceptingInvitationTasks

List

ListEngagementFromOpportunityTasks

partnercentral-selling

partnercentral:ListEngagementFromOpportunityTasks

List

ListEngagementInvitations

partnercentral-selling

partnercentral:ListEngagementInvitations

List

ListEngagementMembers

partnercentral-selling

partnercentral:ListEngagementMembers

Read

ListEngagementResourceAssociations

partnercentral-selling

partnercentral:ListEngagementResourceAssociations

Read

ListEngagements

partnercentral-selling

partnercentral:ListEngagements

List

ListOpportunities

partnercentral-selling

partnercentral:ListOpportunities

List

ListProspectingFromEngagementTasks

partnercentral-selling

partnercentral:ListProspectingFromEngagementTasks

List

ListResourceSnapshotJobs

partnercentral-selling

partnercentral:ListResourceSnapshotJobs

List

ListResourceSnapshots

partnercentral-selling

partnercentral:ListResourceSnapshots

List

ListSolutions

partnercentral-selling

partnercentral:ListSolutions

List

ListTagsForResource

partnercentral-selling

partnercentral:ListTagsForResource

Read

PutSellingSystemSettings

partnercentral-selling

partnercentral:PutSellingSystemSettings

Write

iam:PassRole

iam:PassedToService

resource-snapshot-job.partnercentral-selling.amazonaws.com

Write

RejectEngagementInvitation

partnercentral-selling

partnercentral:RejectEngagementInvitation

Write

StartEngagementByAcceptingInvitationTask

partnercentral-selling

partnercentral:AcceptEngagementInvitation

Write

partnercentral:CreateOpportunity

Write

partnercentral:CreateResourceSnapshot

Write

partnercentral:CreateResourceSnapshotJob

Write

partnercentral:GetEngagementInvitation

Read

partnercentral:GetOpportunity

Read

partnercentral:StartEngagementByAcceptingInvitationTask

Write

partnercentral:StartResourceSnapshotJob

Write

partnercentral:SubmitOpportunity

Write

StartEngagementFromOpportunityTask

partnercentral-selling

partnercentral:CreateEngagement

Write

partnercentral:CreateResourceSnapshot

Write

partnercentral:CreateResourceSnapshotJob

Write

partnercentral:GetOpportunity

Read

partnercentral:StartEngagementFromOpportunityTask

Write

partnercentral:StartResourceSnapshotJob

Write

partnercentral:SubmitOpportunity

Write

partnercentral:TagResource

Tagging, Write

StartProspectingFromEngagementTask

partnercentral-selling

partnercentral:StartProspectingFromEngagementTask

Write

StartResourceSnapshotJob

partnercentral-selling

partnercentral:StartResourceSnapshotJob

Write

StopResourceSnapshotJob

partnercentral-selling

partnercentral:StopResourceSnapshotJob

Write

SubmitOpportunity

partnercentral-selling

partnercentral:SubmitOpportunity

Write

TagResource

partnercentral-selling

partnercentral:TagResource

Tagging, Write

UntagResource

partnercentral-selling

partnercentral:UntagResource

Tagging, Write

UpdateEngagementContext

partnercentral-selling

partnercentral:GetEngagement

Read

partnercentral:UpdateEngagementContext

Write

UpdateOpportunity

partnercentral-selling

partnercentral:UpdateOpportunity

Write

Actions defined by AWS Partner Central

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

AcceptChannelHandshake

Grants permission to accept channel handshakes in AWS Partner Central

ChannelHandshake*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:ChannelHandshakeType

Write

AcceptConnectionInvitation

Grants permission to accept connection invitations in AWS Partner Central

ConnectionInvitation*

partnercentral:Catalog

Write

AcceptEngagementInvitation

Grants permission to accept Engagement Invitations on AWS Partner Central

engagement-invitation*

partnercentral:Catalog

Write

AmendBenefitApplication

Grants permission to amend benefit applications in AWS Partner Central

BenefitApplication*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Write

AssignOpportunity

Grants permission to assign Opportunities on AWS Partner Central

Opportunity*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

AssociateAwsTrainingCertificationEmailDomain

Grants permission to associate AWS Training and Certification email domains in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

AssociateBenefitApplicationResource

Grants permission to associate benefit application resources in AWS Partner Central

BenefitAllocation*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Write

BenefitApplication*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Opportunity*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

AssociateOpportunity

Grants permission to associate Opportunities on AWS Partner Central with other entities

Opportunity*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:RelatedEntityType

Write

CancelBenefitApplication

Grants permission to cancel benefit applications in AWS Partner Central

BenefitApplication*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Write

CancelChannelHandshake

Grants permission to cancel channel handshakes in AWS Partner Central

ChannelHandshake*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:ChannelHandshakeType

Write

CancelConnection

Grants permission to cancel connections in AWS Partner Central

Connection*

partnercentral:Catalog

Write

CancelConnectionInvitation

Grants permission to cancel connection invitations in AWS Partner Central

ConnectionInvitation*

partnercentral:Catalog

Write

CancelProfileUpdateTask

Grants permission to cancel profile update tasks in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

CreateBenefitApplication

Grants permission to create benefit applications in AWS Partner Central

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Write

CreateChannelHandshake

Grants permission to create channel handshakes in AWS Partner Central

ProgramManagementAccount

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:ChannelHandshakeType

Write

Relationship

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:ChannelHandshakeType

CreateConnectionInvitation

Grants permission to create connection invitations in AWS Partner Central

partnercentral:Catalog

Write

CreateEngagement

Grants permission to creating engagements in AWS Partner Central

Engagement*

partnercentral:Catalog

Write

CreateEngagementContext

Grants permission to create engagement contexts in AWS Partner Central

Engagement*

partnercentral:Catalog

Write

CreateEngagementInvitation

Grants permission to creating engagement invitations in AWS Partner Central

engagement-invitation*

partnercentral:Catalog

Write

CreateMarketplaceRevenueShare

Grants permission to create marketplace revenue shares in AWS Partner Central

aws:RequestTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

CreateMarketplaceRevenueShareAllocation

Grants permission to create marketplace revenue share allocations in AWS Partner Central

MarketplaceRevenueShare*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

CreateOpportunity

Grants permission to create new Opportunities on AWS Partner Central

Opportunity*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

CreatePartner

Grants permission to create partners in AWS Partner Central

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

CreateProgramManagementAccount

Grants permission to create program management accounts in AWS Partner Central

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

CreateRelationship

Grants permission to create relationships in AWS Partner Central

ProgramManagementAccount*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

CreateResourceSnapshot

Grants permission to creating resource snapshots in AWS Partner Central

ResourceSnapshot*

partnercentral:Catalog

Write

CreateResourceSnapshotJob

Grants permission to creating resource snapshot jobs in AWS Partner Central

resource-snapshot-job*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

CreateRevenueAttribution

Grants permission to create revenue attributions in AWS Partner Central

aws:RequestTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

DeleteProgramManagementAccount

Grants permission to delete program management accounts in AWS Partner Central

ProgramManagementAccount*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

DeleteRelationship

Grants permission to delete relationships in AWS Partner Central

Relationship*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

DeleteResourceSnapshotJob

Grants permission to deleting resource snapshot jobs on AWS Partner Central

resource-snapshot-job*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

DisassociateAwsTrainingCertificationEmailDomain

Grants permission to disassociate AWS Training and Certification email domains in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

DisassociateBenefitApplicationResource

Grants permission to disassociate benefit application resources in AWS Partner Central

BenefitAllocation*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Write

BenefitApplication*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Opportunity*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

DisassociateOpportunity

Grants permission to disassociate Opportunities on AWS Partner Central from other entities

Opportunity*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:RelatedEntityType

Write

GetAllianceLeadContact

Grants permission to retrieve alliance lead contact information in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetAwsOpportunitySummary

Grants permission to retrieve AWS Opportunity Summaries for Opportunities on AWS Partner Central

Opportunity*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetBenefit

Grants permission to retrieve benefit details in AWS Partner Central

Benefit*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Read

GetBenefitAllocation

Grants permission to retrieve benefit allocation details in AWS Partner Central

BenefitAllocation*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

Read

GetBenefitApplication

Grants permission to retrieve benefit application details in AWS Partner Central

BenefitApplication*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Read

GetConnection

Grants permission to retrieve connection details in AWS Partner Central

Connection*

partnercentral:Catalog

Read

GetConnectionInvitation

Grants permission to retrieve connection invitation details in AWS Partner Central

ConnectionInvitation*

partnercentral:Catalog

Read

GetConnectionPreferences

Grants permission to retrieve connection preferences in AWS Partner Central

partnercentral:Catalog

Read

GetEngagement

Grants permission to retrieval of engagement details in AWS Partner Central

Engagement*

partnercentral:Catalog

Read

GetEngagementInvitation

Grants permission to retrieve details of Engagement Invitations on AWS Partner Central

engagement-invitation*

partnercentral:Catalog

Read

GetMarketplaceRevenueShare

Grants permission to retrieve marketplace revenue share details in AWS Partner Central

MarketplaceRevenueShare*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetMarketplaceRevenueShareAllocation

Grants permission to retrieve marketplace revenue share allocation details in AWS Partner Central

MarketplaceRevenueShare*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetOpportunity

Grants permission to retrieve details of Opportunities on AWS Partner Central

Opportunity*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetPartner

Grants permission to retrieve partner details in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetPartnerDashboard

Grants permission to retrieve partner dashboard information in AWS Partner Central

Dashboard*

partnercentral:Catalog

Read

GetProfileUpdateTask

Grants permission to retrieve profile update task details in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetProfileVisibility

Grants permission to retrieve profile visibility settings in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetProspectingFromEngagementTask

Grants permission to retrieve prospecting from engagement task details in AWS Partner Central

ProspectingFromEngagementTask*

partnercentral:Catalog

Read

GetQualificationsAssociationDetails

Grants permission to retrieve qualifications association details in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetQualificationsAssociationTask

Grants permission to retrieve qualifications association task details in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetQualificationsDisassociationTask

Grants permission to retrieve qualifications disassociation task details in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetRelationship

Grants permission to retrieve relationship details in AWS Partner Central

Relationship*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetResourceSnapshot

Grants permission to retrieving resource snapshot details in AWS Partner Central

ResourceSnapshot*

partnercentral:Catalog

Read

GetResourceSnapshotJob

Grants permission to retrieving resource snapshot job details in AWS Partner Central

resource-snapshot-job*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetRevenueAttribution

Grants permission to retrieve revenue attribution details in AWS Partner Central

RevenueAttribution*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetRevenueAttributionAllocation

Grants permission to retrieve revenue attribution allocation details in AWS Partner Central

RevenueAttribution*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetRevenueAttributionAllocationsTask

Grants permission to retrieve revenue attribution allocations task details in AWS Partner Central

RevenueAttribution*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Read

GetSellingSystemSettings

Grants permission to retrieving selling system settings in AWS Partner Central

partnercentral:Catalog

Read

GetVerification

Grants permission to retrieve verification details in AWS Partner Central

partnercentral:Catalog

partnercentral:VerificationType

Read

ListBenefitAllocations

Grants permission to list benefit allocations in AWS Partner Central

BenefitAllocation*

partnercentral:Catalog

partnercentral:FulfillmentTypes

List

ListBenefitApplications

Grants permission to list benefit applications in AWS Partner Central

BenefitApplication*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

List

ListBenefits

Grants permission to list benefits in AWS Partner Central

Benefit*

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

List

ListChannelHandshakes

Grants permission to list channel handshakes in AWS Partner Central

ChannelHandshake*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:ChannelHandshakeType

List

ListConnectionInvitations

Grants permission to list connection invitations in AWS Partner Central

partnercentral:Catalog

List

ListConnections

Grants permission to list connections in AWS Partner Central

partnercentral:Catalog

List

ListEngagementByAcceptingInvitationTasks

Grants permission to listing engagements by accepting invitation tasks in AWS Partner Central

partnercentral:Catalog

List

ListEngagementFromOpportunityTasks

Grants permission to listing engagements from opportunity tasks in AWS Partner Central

partnercentral:Catalog

List

ListEngagementInvitations

Grants permission to list Engagement Invitations on AWS Partner Central

partnercentral:Catalog

List

ListEngagementMembers

Grants permission to listing engagement members in AWS Partner Central

Engagement*

partnercentral:Catalog

Read

ListEngagementResourceAssociations

Grants permission to listing engagement resource associations in AWS Partner Central

ResourceSnapshot*

partnercentral:Catalog

Read

ListEngagements

Grants permission to listing engagements in AWS Partner Central

partnercentral:Catalog

List

ListMarketplaceRevenueShareAllocations

Grants permission to list marketplace revenue share allocations in AWS Partner Central

MarketplaceRevenueShare*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

List

ListMarketplaceRevenueShares

Grants permission to list marketplace revenue shares in AWS Partner Central

partnercentral:Catalog

List

ListOpportunities

Grants permission to list Opportunities on AWS Partner Central

partnercentral:Catalog

List

ListOpportunityFromEngagementTasks

Grants permission to list opportunity from engagement tasks in AWS Partner Central

partnercentral:Catalog

List

ListPartners

Grants permission to list partners in AWS Partner Central

partnercentral:Catalog

List

ListProgramManagementAccounts

Grants permission to list program management accounts in AWS Partner Central

ProgramManagementAccount*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

List

ListProspectingFromEngagementTasks

Grants permission to list prospecting from engagement tasks in AWS Partner Central

partnercentral:Catalog

List

ListRelationships

Grants permission to list relationships in AWS Partner Central

Relationship*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

List

ListResourceSnapshotJobs

Grants permission to listing resource snapshot jobs in AWS Partner Central

partnercentral:Catalog

List

ListResourceSnapshots

Grants permission to listing resource snapshots in AWS Partner Central

ResourceSnapshot*

partnercentral:Catalog

List

ListRevenueAttributionAllocations

Grants permission to list revenue attribution allocations in AWS Partner Central

RevenueAttribution*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

List

ListRevenueAttributions

Grants permission to list revenue attributions in AWS Partner Central

partnercentral:Catalog

List

ListSolutions

Grants permission to list Solutions on AWS Partner Central

partnercentral:Catalog

List

ListTagsForResource

Grants permission to list tags for a resource in AWS Partner Central

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Read

PutAllianceLeadContact

Grants permission to set alliance lead contact information in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

PutProfileVisibility

Grants permission to set profile visibility in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

PutSellingSystemSettings

Grants permission to put selling system settings in AWS Partner Central

partnercentral:Catalog

Write

RecallBenefitApplication

Grants permission to recall benefit applications in AWS Partner Central

BenefitApplication*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Write

RejectChannelHandshake

Grants permission to reject channel handshakes in AWS Partner Central

ChannelHandshake*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:ChannelHandshakeType

Write

RejectConnectionInvitation

Grants permission to reject connection invitations in AWS Partner Central

ConnectionInvitation*

partnercentral:Catalog

Write

RejectEngagementInvitation

Grants permission to reject Engagement Invitations on AWS Partner Central

engagement-invitation*

partnercentral:Catalog

Write

SendEmailVerificationCode

Grants permission to send email verification codes in AWS Partner Central

partnercentral:Catalog

Write

StartEngagementByAcceptingInvitationTask

Grants permission to initiate tasks that start Engagements on AWS Partner Central by accepting an Engagement Invitation

engagement-by-accepting-invitation-task*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

StartEngagementFromOpportunityTask

Grants permission to initiate tasks that start Engagements from Opportunities on AWS Partner Central

engagement-from-opportunity-task*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

StartOpportunityFromEngagementTask

Grants permission to initiate tasks that start Opportunities from Engagements on AWS Partner Central

OpportunityFromEngagementTask*

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

Write

StartProfileUpdateTask

Grants permission to start profile update tasks in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

StartProspectingFromEngagementTask

Grants permission to initiate tasks that start prospecting from an engagement in AWS Partner Central

Engagement*

partnercentral:Catalog

Write

StartQualificationsAssociationTask

Grants permission to initiate tasks that start qualifications association in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

StartQualificationsDisassociationTask

Grants permission to initiate tasks that start qualifications disassociation in AWS Partner Central

Partner*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

StartResourceSnapshotJob

Grants permission to starting resource snapshot jobs in AWS Partner Central

resource-snapshot-job*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

StartRevenueAttributionAllocationsTask

Grants permission to initiate tasks that manage revenue attribution allocations in AWS Partner Central

RevenueAttribution*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

StartVerification

Grants permission to start verification processes in AWS Partner Central

partnercentral:Catalog

partnercentral:VerificationType

Write

StopResourceSnapshotJob

Grants permission to stopping resource snapshot jobs in AWS Partner Central

resource-snapshot-job*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

SubmitBenefitApplication

Grants permission to submit benefit applications in AWS Partner Central

BenefitApplication*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Write

SubmitOpportunity

Grants permission to submit Opportunities on AWS Partner Central

Opportunity*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

TagResource

Grants permission to add new tags to a resource. Supported resource: ResourceSnapshotJob

BenefitApplication

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Tagging, Write

ChannelHandshake

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

MarketplaceRevenueShare

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Opportunity

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Partner

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

ProgramManagementAccount

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Relationship

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

RevenueAttribution

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

resource-snapshot-job

aws:RequestTag/${TagKey}

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

UntagResource

Grants permission to remove tags from a resource. Supported resource: ResourceSnapshotJob

BenefitApplication

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Tagging, Write

ChannelHandshake

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

MarketplaceRevenueShare

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Opportunity

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Partner

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

ProgramManagementAccount

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Relationship

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

RevenueAttribution

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

resource-snapshot-job

aws:ResourceTag/${TagKey}

aws:TagKeys

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

UpdateBenefitApplication

Grants permission to update benefit applications in AWS Partner Central

BenefitApplication*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

partnercentral:FulfillmentTypes

partnercentral:Programs

Write

UpdateConnectionPreferences

Grants permission to update connection preferences in AWS Partner Central

partnercentral:Catalog

Write

UpdateEngagementContext

Grants permission to update engagement contexts in AWS Partner Central

Engagement*

partnercentral:Catalog

Write

UpdateMarketplaceRevenueShareAllocation

Grants permission to update marketplace revenue share allocations in AWS Partner Central

MarketplaceRevenueShare*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

UpdateOpportunity

Grants permission to update Opportunities on AWS Partner Central

Opportunity*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

UpdateProgramManagementAccount

Grants permission to update program management accounts in AWS Partner Central

ProgramManagementAccount*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

UpdateRelationship

Grants permission to update relationships in AWS Partner Central

Relationship*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

UpdateRevenueAttribution

Grants permission to update revenue attributions in AWS Partner Central

RevenueAttribution*

aws:ResourceTag/${TagKey}

partnercentral:Catalog

Write

Permission-only actions for AWS Partner Central

The following actions are defined by AWS Partner Central but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions Description Resource types (*required) Condition keys Access level

CreateBusinessPlan

Grants permission to create business plans in AWS Partner Central

Write

CreateCollaborationChannelMembers

Grants permission to create collaboration channel members in AWS Partner Central

Write

CreateCollaborationChannelRequest

Grants permission to create collaboration channel requests in AWS Partner Central

Write

EnrollInPartnerPath

Grants permission to enroll in partner paths in AWS Partner Central

Write

GetBusinessPlan

Grants permission to retrieve business plan details in AWS Partner Central

Read

GetCollaborationChannel

Grants permission to retrieve collaboration channel details in AWS Partner Central

Read

GetPartnerProfile

Grants permission to retrieve public partner profile details in AWS Partner Central

Read

GetProgramManagementAccount

Grants permission to retrieve program management account details in AWS Partner Central

partnercentral:Catalog

Read

ListBusinessPlans

Grants permission to list business plans in AWS Partner Central

List

ListCollaborationChannels

Grants permission to list collaboration channels in AWS Partner Central

List

ListPartnerPaths

Grants permission to list partner paths in AWS Partner Central

List

PutBusinessPlan

Grants permission to update business plans in AWS Partner Central

Write

SearchPartnerProfiles

Grants permission to search public partner profiles in AWS Partner Central

List

UseSession

Grants permission to use Partner Central Agents sessions in AWS Partner Central

partnercentral:Catalog

Write

Resource types defined by AWS Partner Central

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types ARN Condition keys

Benefit

arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/benefit/${Identifier}

BenefitAllocation

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/benefit-allocation/${Identifier}

BenefitApplication

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/benefit-application/${Identifier}

aws:ResourceTag/${TagKey}

ChannelHandshake

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/channel-handshake/${Identifier}

aws:ResourceTag/${TagKey}

Connection

arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/connection/${Identifier}

ConnectionInvitation

arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/connection-invitation/${Identifier}

ConnectionPreferences

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/connection-preferences

Dashboard

arn:${Partition}:partnercentral::${Account}:catalog/${Catalog}/ReportingData/${TableId}/Dashboard/${DashboardId}

Engagement

arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement/${Identifier}

MarketplaceRevenueShare

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/marketplace-revenue-share/${MarketplaceProductId}

aws:ResourceTag/${TagKey}

Opportunity

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/opportunity/${Identifier}

aws:ResourceTag/${TagKey}

OpportunityFromEngagementTask

arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/opportunity-from-engagement-task/${TaskId}

Partner

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/partner/${Identifier}

aws:ResourceTag/${TagKey}

ProgramManagementAccount

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/program-management-account/${Identifier}

aws:ResourceTag/${TagKey}

ProspectingFromEngagementTask

arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/prospecting-from-engagement-task/${TaskIdentifier}

Relationship

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/program-management-account/${ProgramManagementAccountId}/relationship/${RelationshipId}

aws:ResourceTag/${TagKey}

ResourceSnapshot

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/engagement/${EngagementIdentifier}/resource/${ResourceType}/${ResourceIdentifier}/template/${TemplateIdentifier}/resource-snapshot/${SnapshotRevision}

RevenueAttribution

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/revenue-attribution/${RevenueAttributionId}

aws:ResourceTag/${TagKey}

Solution

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/solution/${Identifier}

engagement-by-accepting-invitation-task

arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement-by-accepting-invitation-task/${TaskId}

engagement-from-opportunity-task

arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement-from-opportunity-task/${TaskId}

engagement-invitation

arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement-invitation/${Identifier}

resource-snapshot-job

arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/resource-snapshot-job/${Identifier}

aws:ResourceTag/${TagKey}

Condition keys for AWS Partner Central

AWS Partner Central defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys Description Type

aws:RequestTag/${TagKey}

Filters access by the tags that are passed in the request

String

aws:ResourceTag/${TagKey}

Filters access by the tags associated with the resource

String

aws:TagKeys

Filters access by the tag keys that are passed in the request

ArrayOfString

partnercentral:Catalog

Filters access by a specific Catalog

String

partnercentral:ChannelHandshakeType

Filters access by channel handshake types

String

partnercentral:FulfillmentTypes

Filters access by benefit fulfillment types

ArrayOfString

partnercentral:Programs

Filters access by program

ArrayOfString

partnercentral:RelatedEntityType

Filters access by entity types for Opportunity association

String

partnercentral:VerificationType

Filters access by the type of verification being performed

String