# Private marketplaces in AWS Marketplace (legacy version)
**Important**
This documentation is for legacy version of Private Marketplace, which will be deprecated on March 17, 2026. For documentation of the current version, see [Private Marketplace](private-marketplace-current.md). To use the current version, an administrator in the management account of your AWS Organizations must create an integration for Private Marketplace. To check integration status, see [Viewing Private Marketplace settings](view-private-marketplace-settings.md).
A private marketplace controls which products users in your AWS account, such as business users and engineering teams, can procure from AWS Marketplace. It is built on top of AWS Marketplace, and enables your administrators to create and customize curated digital catalogs of approved independent software vendors (ISVs) and products that conform to their in-house policies. Users in your AWS account can find, buy, and deploy approved products from your private marketplace, and ensure that all available products comply with your organization’s policies and standards.
With [AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/), you can centralize management of all of your accounts, group your accounts into organizational units (OUs), and attach different access policies to each OU. You can create multiple private marketplace experiences that are associated with your entire organization, one or more OUs, or one or more accounts in your organization, each with its own set of approved products. Your AWS administrators can also apply company branding to each private marketplace experience with your company or team’s logo, messaging, and color scheme.
**Notes**
You can add private products that have been shared with you (through a [ private offer](https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-private-offers.html)) to a private marketplace. For more information, see [Subscribing to a private product in a private marketplace](subscribing-to-a-private-product-in-a-private-marketplace.md).
In a private marketplace, customers are automatically entitled to any products whose EULAs are governed by the AWS Customer Agreement or other agreement with AWS governing use of AWS services. Customers are already entitled to these products by default; therefore, they are not included in the list of products that you approved within your private marketplace.
**Topics**
+ [Viewing product detail pages](#product-detail-page-visit)
+ [Configuring notifications](#pmp-notifications)
+ [Private marketplaces for users](subscribing-to-a-product-in-a-private-marketplace.md)
+ [Private marketplaces for administrators](private-catalog-administration.md)
## Viewing product detail pages
Users can only subscribe to products that you allow in the private marketplace that governs the account. They can browse and see the detail page for any product, but subscription is enabled only for products you have added to your private marketplace. If a product is not currently in your private marketplace, the user sees a red banner at the top of the page, noting that the product is not approved for procurement in AWS Marketplace.
If software requests are enabled, users can choose **Create request** on the product details page. When users choose **Create request**, they submit a request to the administrator to make the product available on your private marketplace. For more information about this feature, see [Managing user requests for products in a private marketplace](manage-user-requests-private-marketplace.md).
## Configuring notifications
Private Marketplace administrators and buyers receive notification events from AWS Marketplace when a buyer requests a product, and when a request is approved or denied. Administrators receive notifications for requests from any account in their AWS organization. Buyers only receive notifications for requests from their accounts. The notification events include product details and the seller's name.
For information about the Private Marketplace notification events, see [Amazon EventBridge notifications for AWS Marketplace events](buyer-notifications-eventbridge.md), later in this guide.
You can create EventBridge rules with different target types by following the steps in [Amazon EventBridge rules](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-rules.html), in the *Amazon EventBridge User Guide*.
### Creating email notification configurations
You can use the AWS User Notifications service to receive notifications for events through multiple channels, including email. The following steps explain how to create an email notification configuration. Notification configurations act as containers for the services and event rules that you want to be notified about. An event rule specifies the events that generate a notification in the AWS console, and which delivery channels to use.
**To create a notification configuration**
1. Sign in to the AWS Management Console and navigate to AWS User Notifications.
1. Choose **Notification configurations**, then choose **Create notification configuration**.
1. In the **Name** box, enter a name for the configuration.
1. In the **Event rules** section of the page, enter the following values:
+ For **AWS service name**, choose **AWS Marketplace Private Marketplace**.
+ For **Event type**, choose one of the following:
+ **Product Request Created**
+ **Product Request Approved**
+ **Product Request Declined**
**Note**
As needed, you can create notification configurations for each event type.
+ For **Regions**, select **us-east-1**. Private marketplace only operates in that Region.
1. Under **Aggregation settings**, we recommend choosing **Receive within 5 minutes**.
1. Under **Delivery channels**, select the **email** checkbox, then do the following:
1. In the **Recipient** box, enter the email address of the notification recipient.
1. As needed, choose **Add another recipient**, the enter another email address in the **Recipient** box. You can enter a maximum of 99 recipients.
1. (Optional) Under **Manage tags**, choose **Add new tag**, enter values in the **Key** and **Value** boxes.
**Note**
For more information about using the **AWS Console Mobile App** and **Chat channels** delivery options, see the links below.
1. When finished, choose **Create notification configuration**.
In addition to using an email delivery channel, you can also use the AWS Console Mobile App and Chat delivery channels. The following links take you to more information about those channels and about User Notifications.
+ [What is the AWS Console Mobile Application](https://docs.aws.amazon.com/consolemobileapp/latest/userguide/what-is-consolemobileapp.html), in the *AWS Console Mobile Application User Guide*.
+ [What is AWS Chatbot](https://docs.aws.amazon.com/chatbot/latest/adminguide/what-is.html), in the *Amazon Q Developer in chat applications Administrator Guide*.
+ [ Creating a notification configuration](https://docs.aws.amazon.com/notifications/latest/userguide/getting-started.html#getting-started-step1), in the *User Notifications User Guide*.
# Private marketplaces for users
To subscribe to a product in your private marketplace as a user, navigate to the product's details page and choose **Continue**. This redirects you to the product's subscription page. On the subscription page, you can make your configuration selections, and then choose **Subscribe**.
If the product is not approved in your private marketplace, **Subscribe** isn't available. A red banner at the top of the page indicates that the product is not currently approved for procurement. If software requests are enabled, you can choose **Create request** to submit a request to your administrator requesting that the product be added to your private marketplace.
# Subscribing to a private product in a private marketplace
Some products are not publicly available to browse in AWS Marketplace. These products can only be seen when you are given a private offer from the seller. However, you can only subscribe if your private marketplace administrator first adds the product to your private marketplace. Because of this, the private offer must be extended to both your AWS account and the account that includes your organization's private marketplace administrator. After the private offer has been extended to both the user and the administrator, the private marketplace administrator can add the product to your private marketplace. After the product has been approved, you can subscribe to the product like any other private offer.
# Requesting a product for your private marketplace
As a user, you can request that your administrator add a product that is not in your private marketplace. To make a request, navigate to the product's details page, choose **Create request**, enter a request to your administrator that the product be added to your private marketplace, and then submit your request. To track your request status, on the left dropdown menu, choose **Your Private Marketplace Requests**.
# Private marketplaces for administrators
To create and manage a private marketplace, you must be signed into the management account or the delegated administrator account for private marketplace. You must also have the AWS Identity and Access Management (IAM) permissions in the AWSPrivateMarketplaceAdminFullAccess IAM policy. For more information about applying this policy to users, groups, and roles, see [Creating a private marketplace administrator](it-administrator.md).
**Note**
If you're a current private marketplace customer without the AWS Organizations integration for private marketplace, you can create and manage a private marketplace from any account in your organization that has the AWSPrivateMarketplaceAdminFullAccess IAM policy.
This section includes tasks that you can complete as a private marketplace administrator through the AWS Marketplace website. You can also manage private marketplaces using the AWS Marketplace Catalog API. For more information, see [Working with a private marketplace](https://docs.aws.amazon.com/marketplace-catalog/latest/api-reference/private-marketplace.html) in the *AWS Marketplace Catalog API Reference*.
## Getting started with private marketplace
To get started with private marketplace, ensure you're signed into your AWS management account, navigate to [Private Marketplace](https://aws.amazon.com/marketplace/pmp/getstarted), and then enable the following prerequisites:
+ **Trusted access** – You must enable trusted access for AWS Organizations, which allows the management account of an organization to provide or revoke access for their AWS Organizations data for an AWS service. Enabling trusted access is critical for private marketplace to integrate with AWS Organizations and designate private marketplace as a trusted service in your organization.
+ **Service-linked role** – You must enable the private marketplace service-linked role, which resides in the management account and includes all the permissions that private marketplace requires to describe AWS Organizations and update private marketplace resources on your behalf. For more information on the service-linked role, see [Using roles to configure Private Marketplace in AWS Marketplace](https://docs.aws.amazon.com/marketplace/latest/buyerguide/using-service-linked-roles-private-marketplace.html).
**Note**
Current private marketplace customers can enable settings for your private marketplace by navigating to the **Private Marketplace** administrator's page and choosing **Settings**. By enabling trusted access for AWS Organizations and creating a service-linked role, you can utilize features, such as associating OUs to private marketplace experiences and registering a delegated administrator. When enabled, only the management account and delegated administrator account can create and manage marketplace experiences, with existing resources transferred to the management account and shared only with the delegated administrator. Disabling trusted access will remove private marketplace governance for your organization. There are no account groups displayed in your private marketplace. To view your organization’s governance at different levels, use the **Organization structure** page. For questions or support, [contact us](https://aws.amazon.com/contact-us/).
# Managing a private marketplace
You can manage your private marketplace from the **Private Marketplace** administrator's page under **Settings** in the left pane. The management account administrator and delegated administrators can use this page to view private marketplace details, including the default private marketplace and number of live experiences.
Management account administrators can also use this page to manage the following settings.
## Delegated administrators
The management account administrator can delegate private marketplace administrative permissions to a designated member account known as delegated administrator. To register an account as a delegated administrator for the private marketplace, the management account administrator must ensure trusted access and the service-linked role are enabled, choose **Register a new administrator**, provide the 12-digit AWS account number, and choose **Submit**.
Management accounts and delegated administrator accounts can perform private marketplace administrative tasks, such as creating experiences, updating branding settings, associating or disassociating audiences, adding or removing products, and approving or declining pending requests.
## Trusted access and service-linked role
The management account administrator can enable the following features for your private marketplace.
**Note**
Current private marketplace customers can enable settings for your private marketplace by navigating to the **Private Marketplace** administrator's page and choosing **Settings**. By enabling trusted access for AWS Organizations and creating a service-linked role, you can utilize features, such as associating OUs to private marketplace experiences and registering a delegated administrator. When enabled, only the management account and delegated administrator account can create and manage marketplace experiences, with existing resources transferred to the management account and shared only with the delegated administrator. Disabling trusted access will remove private marketplace governance for your organization. There are no account groups displayed in your private marketplace. To view your organization’s governance at different levels, use the **Organization structure** page. For questions or support, [contact us](https://aws.amazon.com/contact-us/).
+ **Trusted access** – You must enable trusted access for AWS Organizations, which allows the management account of an organization to provide or revoke access for their AWS Organizations data for an AWS service. Enabling trusted access is critical for private marketplace to integrate with AWS Organizations and designate private marketplace as a trusted service in your organization.
+ **Service-linked role** – You must enable the private marketplace service-linked role, which resides in the management account and includes all the permissions that private marketplace requires to describe AWS Organizations and update private marketplace resources on your behalf. For more information on the service-linked role, see [Using roles to configure Private Marketplace in AWS Marketplace](https://docs.aws.amazon.com/marketplace/latest/buyerguide/using-service-linked-roles-private-marketplace.html).
# Creating a private marketplace experience
Your private marketplace is made up of one or more private marketplace experiences. Experiences are subsets of products and associated branding that can have one or more associated audiences. An experience can be associated with your entire organization, one or more OUs, or one or more accounts in your organization. If your AWS account is not a member of an organization, then you have one private marketplace experience associated with one account. To create your private marketplace, navigate to [Private Marketplace](https://aws.amazon.com/marketplace/pmp/getstarted), select the **Experiences** page on the left, and choose **Create experience**. For each experience, you can add a logo, add a title, and customize the user interface to use your organization’s color scheme.
**Note**
To use private marketplace with AWS Organizations, you need to enable all features for the organization. For more information, see [Enabling all features in your organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html) in the *AWS Organizations User Guide*.
If your AWS account is not a member of an organization, you do not need any prerequisite steps to use private marketplace.
**To create a private marketplace experience**
1. Navigate to [Private Marketplace](https://aws.amazon.com/marketplace/pmp/getstarted).
1. From the navigation pane on the left, select **Experiences**, and then choose **Create experience**.
1. Specify a name for the experience, and then choose **Create experience**.
Your private marketplace experience is created with no approved products, no branding elements, and is associated with no accounts in your organization. It's not live by default. The next steps for your marketplace experience are:
1. [Manage the audience for your private marketplace](private-marketplace-audiences.md)
1. [Add products](add-products-to-your-private-marketplace.md)
1. [Change your private marketplace status to Live](configure-your-private-marketplace.md)
# Managing audiences for private marketplace experiences
An audience is an organization or a group of organizational units (OUs) or accounts that you can associate with a private marketplace experience. You can create an audience from the **Private Marketplace** administrator's page under **Experiences** in the left pane.
You can associate one or more audiences to an experience. When you associate or disassociate an audience, it may change the governing experience of child OUs and accounts. Use the **Organization structure** page to see the accounts and OUs affected by the association. If you disable trusted access, your audiences will be disassociated and all governance will be removed.
**Note**
You can view your AWS Organizations hierarchy and manage governance for your organization from private marketplace. To govern your private marketplace at an organizational unit level and register delegated administrators, enable trusted access and the service-linked role from the **Settings** page. For questions or support, [contact us](https://aws.amazon.com/contact-us/).
# Adding products to a private marketplace
A private marketplace provides you with a broad catalog of products available in AWS Marketplace, along with fine-grained control of those products.
**Note**
In a private marketplace, customers are automatically entitled to any products whose EULAs are governed by the AWS Customer Agreement or other agreement with AWS governing use of AWS services. Customers are already entitled to these products by default; therefore, they are not included in the list of products that you approved within your private marketplace.
**To add products to a private marketplace experience**
1. From the **Private Marketplace** administrator's page, select **Experiences** in the left navigation pane. Then, on the **Products** tab, choose **All AWS Marketplace products**. You can search by product name or seller name.
1. Select the check box next to each product to add to your private marketplace and then choose **Add to Private Marketplace**.
**Note**
You can also add a product directly from the product details page by choosing the **Add to Private Marketplace** button on the red banner. If the red banner is not on the product's detail page, the product is already in your private marketplace.
You can also add multiple products to multiple experiences at one time by choosing **Bulk add/remove products** from the left navigation pane.
## Verifying products in your private marketplace experience
**To verify a product is approved in your private marketplace experience**
1. From the **Private Marketplace** administrator's page, select **Experiences** in the left navigation pane.
1. Choose **Approved products**. All approved products display in the approved list.
**Note**
If you are using an account that has been associated with the experience you are editing, and the experience is enabled, then you can also view the products directly in the AWS Marketplace console ([https://console.aws.amazon.com/marketplace](https://console.aws.amazon.com/marketplace)). All products in any search results show an *approved for procurement* badge if they are part of your private marketplace.
## Working with private products
Some products are not publicly available to browse in AWS Marketplace. These products can only be seen when you are given a private offer from the seller. The private offer from the seller includes a link to the product. You can add the product to the private marketplace from the banner at the top of the page.
**Note**
If you want to subscribe to a private product from a different account in your organization, the seller must include both your AWS account (to add the product to the private marketplace) and the user's account (to subscribe to the product) in the private offer.
To remove a private product from your private marketplace, you must [contact AWS Marketplace Support](https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-support.html).
# Changing your private marketplace status
After you are satisfied with the experience's product list, the marketplace's branding settings, and the associated account groups, then you can make your private marketplace live. From the **AWS Private Marketplace** administrator's page, select **Experience** in the left navigation pane, then select the experience you want to enable. On the **Settings** tab, you can change the private marketplace status between **Live** (enabled) and **Not live** (disabled).
When your private marketplace is live, end users can buy only the products that you have approved. When your private marketplace is disabled, you retain the list of products. However, disabling a private marketplace removes the restriction from users in your AWS Organizations organization. As a result, they can subscribe to any products in the public AWS Marketplace.
Making a private marketplace live does not disrupt active Amazon Machine Images (AMIs) running on Amazon Elastic Compute Cloud (Amazon EC2) instances. As a best practice, ensure that all AWS Marketplace products currently in use across your organization are included in your private marketplace. It's also a best practice to have a plan in place to discontinue use of unapproved products before making the private marketplace live. After the private marketplace is live, all new subscriptions or renewals are governed by the products approved in the private marketplace catalog.
# Managing user requests for products in a private marketplace
You can allow users to submit requests for products to be added to their private marketplace catalog with the software request feature. Software requests are enabled by default, and the setting can only be modified while the private marketplace is enabled.
You can add any number of requested products from this page by first selecting the check box next to the name of each requested product, and then choosing **Add to Private Marketplace**. Similarly, you can also decline one or more selected requests by choosing **Decline**. To view more information about a product (or its software request), choose **View details** in the **Details** column for that request.
When you decline a product request, you can add a reason and prevent future requests (block) for this product. Blocking a product won't prevent you from adding the product to your private marketplace, but it does prevent your users from requesting the product.
**To manage user requests**
1. From the **Private Marketplace** administrator's page, select **Experiences** in the left navigation pane.
1. Choose the experience you want to manage.
1. To enable or disable user requests, choose the **Settings** tab.
1. To view product requests, choose the **Products** tab. From here you can review requests your users have made for products to be added to their private marketplace catalog.
**Note**
Private Marketplace supports two user experiences: AWS Console and the legacy website.
To view and manage Private Marketplace in the AWS Marketplace Console, an administrator in the management account of your AWS Organizations must create an integration for Private Marketplace. See [Enabling Private Marketplace](https://docs.aws.amazon.com/marketplace/latest/buyerguide/private-marketplace-current.html#enable-private-marketplace) for details. For end users, administrators must also grant the new permissions listed in [AWSPrivateMarketplaceRequests](https://docs.aws.amazon.com/marketplace/latest/buyerguide/buyer-security-iam-awsmanpol.html#security-iam-awsmanpol-awsprivatemarketplacerequests).
Product requests created using the legacy website will be available at [Private Marketplace](https://aws.amazon.com/marketplace/privatemarketplace). **Important:** The legacy website will be deprecated on March 17, 2026.
# Archiving a private marketplace experience
You can remove a private marketplace experience by archiving it. Archived experiences can’t be updated or used to govern accounts in your organization. If you have audiences associated with an archived experience, you can associate them with a different experience. If you decide to use the experience at a later time, you can always [reactivate it](reactivating-a-private-marketplace-experience.md). Management account administrators or delegated administrators have permissions to archive experiences.
**Note**
Before archiving an experience, you must disable it. For information about disabling an experience, see [Changing your private marketplace status](https://docs.aws.amazon.com/marketplace/latest/buyerguide/private-catalog-administration.html#configure-your-private-marketplace).
If you're a current private marketplace customer without the AWS Organizations integration for private marketplace, administrators from the account that created the experience have permissions to archive experiences.
**To archive one or more private marketplace experiences**
1. From the **Private Marketplace** administrator's page, select **Experiences** in the left navigation pane.
1. On the **Active experiences** tab, select one or more experiences.
1. Choose **Archive experience**.
**Note**
If one or more of the experiences has a Live status, you must take them offline by choosing **Take experience(s) offline**.
1. To verify that you want to archive the experience, type **confirm** (all lowercase) in the text box.
1. Choose **Archive**.
**Note**
You can also archive an experience by selecting the experience, choosing **Archive experience** under **Admin** mode on the **Settings** tab, and then choosing **Save**.
# Reactivating a private marketplace experience
If you decide you want to use an [archived](archiving-a-private-marketplace-experience.md) marketplace experience, you can always reactivate it. Management account administrators or delegated administrators have permissions to reactivate experiences.
**Note**
If you're a current private marketplace customer without the AWS Organizations integration for private marketplace, administrators from the account that created the experience have permissions to reactivate experiences.
**To reactivate one or more private marketplace experiences**
1. From the Private Marketplace administrator's page, select **Experiences** in the left navigation pane.
1. On the **Archived experiences** tab, select one or more experiences.
1. Choose **Reactivate**.
1. To verify that you want to reactivate the experience, type **confirm** in the text box.
1. Choose **Reactivate**.
**Note**
You can also reactive an experience by selecting the experience, choosing **Reactivate experience** under **Admin** mode in the **Settings** tab, and then choosing **Save**.