View a markdown version of this page

Actions, resources, and condition keys for AWS Partner central account management - Service Authorization Reference

Actions, resources, and condition keys for AWS Partner central account management

AWS Partner central account management (service prefix: partnercentral-account-management) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Actions defined by AWS Partner central account management

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions Description Resource types (*required) Condition keys Access level

AssociatePartnerUser

Grants permission to associate Partner user to IAM role

Write

DisassociatePartnerUser

Grants permission to disassociate Partner user to IAM role

Write

Permission-only actions for AWS Partner central account management

The following actions are defined by AWS Partner central account management but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions Description Resource types (*required) Condition keys Access level

AccessLegacyPartnerCentral

Grants permission to Single Sign-On from AWS Partner Central into Legacy Partner Central

partnercentral-account-management:LegacyPartnerCentralRole

Write

AccessMarketingCentral

Grants permission to Single Sign-On from AWS Partner Central into Marketing Central

partnercentral-account-management:MarketingCentralRole

Write

AccessProServeTools

Grants permission to Single Sign-On from AWS Partner Central into ProServe Tools

partnercentral-account-management:ProServeRole

Write

AssociatePartnerAccount

Grants permission to associate Partner account to AWS account

Write

Resource types defined by AWS Partner central account management

AWS Partner central account management does not support specifying a resource ARN in the Resource element of an IAM policy statement.

Condition keys for AWS Partner central account management

AWS Partner central account management defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys Description Type

partnercentral-account-management:LegacyPartnerCentralRole

Filters access by the Legacy Partner Central role

ArrayOfString

partnercentral-account-management:MarketingCentralRole

Filters access by Marketing Central role

ArrayOfString

partnercentral-account-management:ProServeRole

Filters access by ProServe Tools role

ArrayOfString