Actions, resources, and condition keys for AWS Marketplace
AWS Marketplace (service prefix: aws-marketplace) provides the following
service-specific operations, resources, actions, and condition keys for use in IAM permission
policies.
References:
-
Learn how to configure this service.
-
View a list of the API operations available for this service.
-
Learn how to secure this service and its resources by using IAM permission policies.
-
View the programmatic service authorization reference
for this service.
Topics
API operations defined by AWS Marketplace
The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.
| Operation | IAM action | Condition key | Possible value(s) | Access level |
|---|---|---|---|---|
|
AcceptAgreementCancellationRequest |
Write |
|||
Write |
||||
|
AcceptAgreementPaymentRequest |
Write |
|||
Write |
||||
|
AcceptAgreementRequest |
Write |
|||
Write |
||||
Write |
||||
|
BatchCreateBillingAdjustmentRequest |
Write |
|||
|
CancelAgreement |
Write |
|||
Write |
||||
|
CancelAgreementCancellationRequest |
Write |
|||
|
CancelAgreementPaymentRequest |
Write |
|||
|
CreateAgreementRequest |
Write |
|||
Write |
||||
|
DescribeAgreement |
Read |
|||
List |
||||
|
GetAgreementCancellationRequest |
Read |
|||
|
GetAgreementEntitlements |
Read |
|||
List |
||||
|
GetAgreementPaymentRequest |
Read |
|||
|
GetAgreementTerms |
List |
|||
List |
||||
|
GetBillingAdjustmentRequest |
Read |
|||
|
ListAgreementCancellationRequests |
List |
|||
|
ListAgreementCharges |
List |
|||
|
ListAgreementInvoiceLineItems |
List |
|||
|
ListAgreementPaymentRequests |
List |
|||
|
ListBillingAdjustmentRequests |
List |
|||
|
RejectAgreementCancellationRequest |
Write |
|||
|
RejectAgreementPaymentRequest |
Write |
|||
|
SearchAgreements |
List |
|||
List |
||||
|
SendAgreementCancellationRequest |
Write |
|||
|
SendAgreementPaymentRequest |
Write |
|||
|
UpdatePurchaseOrders |
Write |
Actions defined by AWS Marketplace
You can specify the following actions in the Action element of an IAM
policy statement. Use policies to grant permissions to perform an operation in AWS. When
you use an action in a policy, you usually allow or deny access to the API operation or CLI
command with the same name. However, in some cases, a single action controls access to more
than one operation. Alternatively, some operations require several different actions.
| Actions | Description | Resource types (*required) | Condition keys | Access level |
|---|---|---|---|---|
Grants permission to approve an incoming subscription request (for providers who provide products that require subscription verification) |
Write |
|||
Grants permission to accept an agreement cancellation request |
Write |
|||
Grants permission to accept a payment request |
Write |
|||
Grants permission to accept an agreement request |
Write |
|||
Grants permission to create a billing adjustment request against an agreement |
Write |
|||
Grants permission to cancel agreements |
Write |
|||
Grants permission to cancel a pending agreement cancellation request |
Write |
|||
Grants permission to cancel a payment request |
Write |
|||
Grants permission to cancel pending subscription requests for products that require subscription verification |
Write |
|||
Grants permission to create an agreement request |
Write |
|||
Grants permission to describe the metadata about the agreement |
Read |
|||
Grants permission to view the details of incoming subscription requests (for providers who provide products that require subscription verification) |
Read |
|||
Grants permission to view the details of an agreement cancellation request |
Read |
|||
Grants permission to get the entitlements associated with an agreement |
Read |
|||
Grants permission to view details for a payment request |
Read |
|||
Grants permission to view the details of subscription requests for data products that require subscription verification |
Read |
|||
Grants permission to get a list of terms for an agreement |
List |
|||
Grants permission to view the details of a billing adjustment request |
Read |
|||
Grants permission to list incoming subscription requests (for providers who provide products that require subscription verification) |
List |
|||
Grants permission to list agreement cancellation requests |
List |
|||
Grants permission to list charges associated with an agreement |
List |
|||
Grants permission to list invoice line items for an agreement |
List |
|||
Grants permission to list payment requests for an agreement |
List |
|||
Grants permission to list subscription requests for products that require subscription verification |
List |
|||
Grants permission to list billing adjustment requests |
List |
|||
Grants permission to list details of the entitlements associated with an agreement. Note that this action is not applicable to Marketplace purchases |
Read |
|||
Grants permission to decline an incoming subscription requests (for providers who provide products that require subscription verification) |
Write |
|||
Grants permission to reject an agreement cancellation request |
Write |
|||
Grants permission to reject a payment request |
Write |
|||
Grants permission to search agreements |
List |
|||
Grants permission to send an agreement cancellation request |
Write |
|||
Grants permission to send a payment request |
Write |
|||
Grants permission to subscribe to AWS Marketplace products. Includes the ability to send a subscription request for products that require subscription verification. Includes the ability to enable auto-renewal for an existing subscription |
Write |
|||
Grants permission to unsubscribe from AWS Marketplace products. Includes the ability to disable auto-renewal for an existing subscription |
Write |
|||
Grants permission to make changes to an incoming subscription request, including the ability to delete the prospective subscriber's information (for providers who provide products that require subscription verification) |
Write |
|||
Grants permission to update purchase orders for charges associated with an agreement |
Write |
|||
Grants permission to view account's subscriptions |
List |
Resource types defined by AWS Marketplace
AWS Marketplace does not support specifying a resource ARN in the
Resource element of an IAM policy statement.
Condition keys for AWS Marketplace
AWS Marketplace defines the following condition keys that can be used in the
Condition element of an IAM policy.
| Condition keys | Description | Type |
|---|---|---|
Filters access by the type of the agreement |
ArrayOfString |
|
Filters access by the party type of the agreement |
String |
|
Filters access by product id for AWS Marketplace purchases |
ArrayOfString |
