AWS managed policies for AWS Partner Central users

An AWS managed policy is a standalone policy created and administered by AWS. AWS managed policies provide permissions for many common use cases so that you can start assigning permissions to users, groups, and roles.

Keep in mind that AWS managed policies might not grant least-privilege permissions for your specific use cases because they're available for all AWS customers to use. We recommend that you reduce permissions further by defining customer managed policies specific to your use cases. For more information, refer to AWS managed policies.

The AWS managed policies described in this section manage AWS Partner Central users' access to AWS Marketplace. For more information about AWS Marketplace seller policies, refer to AWS managed policies for AWS Marketplace sellers.

AWS managed policy: AWSPartnerCentralFullAccess

You can attach the AWSPartnerCentralFullAccess policy to your IAM identities.

This policy grants full access to AWS Partner Central and related AWS services.

To view the permissions for this policy, see AWSPartnerCentralFullAccess in the AWS Managed Policy Reference.

AWS managed policy: PartnerCentralAccountManagementUserRoleAssociation

You can attach the PartnerCentralAccountManagementUserRoleAssociation policy to your IAM identities. This policy is used by a partner cloud admin to manage IAM roles linked to partner users.

This policy allows the following operations:

To view the permissions for this policy, see PartnerCentralAccountManagementUserRoleAssociation in the AWS Managed Policy Reference.

AWS managed policy: AWSPartnerCentralOpportunityManagement

You can attach the AWSPartnerCentralOpportunityManagement policy to your IAM identities.

This policy grants full access to manage opportunities in AWS Partner Central.

To view the permissions for this policy, see AWSPartnerCentralOpportunityManagement in the AWS Managed Policy Reference.

AWS managed policy: AWSPartnerCentralSandboxFullAccess

You can attach the AWSPartnerCentralSandboxFullAccess policy to your IAM identities.

This policy grants access for developer testing in the Sandbox catalog.

To view the permissions for this policy, see AWSPartnerCentralSandboxFullAccess in the AWS Managed Policy Reference.

AWS managed policy: AWSPartnerCentralSellingResourceSnapshotJobExecutionRolePolicy

You can attach the AWSPartnerCentralSellingResourceSnapshotJobExecutionRolePolicy policy to your IAM identities.

This policy provides the ResourceSnapshotJob with permission to read a resource and snapshot it in the target environment. For more information on how to use this policy, see Working with multi-partner opportunities in the AWS Partner Central API Reference.

To view the permissions for this policy, see AWSPartnerCentralSellingResourceSnapshotJobExecutionRolePolicy in the AWS Managed Policy Reference.

AWS Partner Central updates to AWS managed policies

View details about updates to AWS managed policies for AWS Partner Central since this service began tracking these changes. For automatic alerts about changes to this page, subscribe to the RSS feed on the AWS Partner Central Document history for the AWS Partner Central Getting Started Guide page.