AWS managed policies for AWS Marketplace buyers

An AWS managed policy is a standalone policy that is created and administered by AWS. AWS managed policies are designed to provide permissions for many common use cases so that you can start assigning permissions to users, groups, and roles.

Keep in mind that AWS managed policies might not grant least-privilege permissions for your specific use cases because they're available for all AWS customers to use. We recommend that you reduce permissions further by defining customer managed policies that are specific to your use cases.

You cannot change the permissions defined in AWS managed policies. If AWS updates the permissions defined in an AWS managed policy, the update affects all principal identities (users, groups, and roles) that the policy is attached to. AWS is most likely to update an AWS managed policy when a new AWS service is launched or new API operations become available for existing services.

For more information, see AWS managed policies in the IAM User Guide.

This section lists each of the policies used to manage buyer access to AWS Marketplace. For information about seller policies, see AWS managed policies for AWS Marketplace sellers in the AWS Marketplace Seller Guide.

AWS managed policy: AWSMarketplaceDeploymentServiceRolePolicy

You can't attach the AWSMarketplaceDeploymentServiceRolePolicy to your IAM entities. This policy is attached to a service-linked role that allows AWS Marketplace to perform actions on your behalf. For more information, see Using service-linked roles for AWS Marketplace.

This policy grants contributor permissions that allow AWS Marketplace to manage deployment-related parameters, which are stored as secrets in AWS Secrets Manager, on your behalf.

To view the permissions for this policy, see AWSMarketplaceDeploymentServiceRolePolicy in the AWS Managed Policy Reference.

AWS managed policy: AWSMarketplaceFullAccess

You can attach the AWSMarketplaceFullAccess policy to your IAM identities.

This policy grants administrative permissions that allow full access to AWS Marketplace and related services, both as a buyer and a seller. These permissions include the ability to subscribe and unsubscribe to AWS Marketplace software, manage AWS Marketplace software instances from the AWS Marketplace, creating and managing private marketplace in your account, as well as access to Amazon EC2, AWS CloudFormation, and Amazon EC2 Systems Manager.

To view the permissions for this policy, see AWSMarketplaceFullAccess in the AWS Managed Policy Reference.

AWS managed policy: AWSMarketplaceLicenseManagementServiceRolePolicy

You can't attach the AWSMarketplaceLicenseManagementServiceRolePolicy to your IAM entities. This policy is attached to a service-linked role that allows AWS Marketplace to perform actions on your behalf. For more information, see Using service-linked roles for AWS Marketplace.

This policy grants contributor permissions that allow AWS Marketplace to manage licenses on your behalf.

To view the permissions for this policy, see AWSMarketplaceLicenseManagementServiceRolePolicy in the AWS Managed Policy Reference.

AWS managed policy: AWSMarketplaceManageSubscriptions

You can attach the AWSMarketplaceManageSubscriptions policy to your IAM identities.

This policy grants contributor permissions that allow subscribing and unsubscribing to AWS Marketplace products.

To view the permissions for this policy, see AWSMarketplaceManageSubscriptions in the AWS Managed Policy Reference.

AWS managed policy: AWSMarketplaceProcurementSystemAdminFullAccess

You can attach the AWSMarketplaceProcurementSystemAdminFullAccess policy to your IAM identities.

This policy grants admin permissions that allow managing all aspects of an AWS Marketplace eProcurement integration, including listing the accounts in your organization. For more information about eProcurement integrations, see Integrating AWS Marketplace with procurement systems .

To view the permissions for this policy, see AWSMarketplaceProcurementSystemAdminFullAccess in the AWS Managed Policy Reference.

AWS managed policy: AWSMarketplaceRead-only

You can attach the AWSMarketplaceRead-only policy to your IAM identities.

This policy grants read-only permissions that allows viewing products, private offers, and subscriptions for your account on AWS Marketplace, as well as viewing the Amazon EC2, AWS Identity and Access Management, and Amazon SNS resources in the account.

To view the permissions for this policy, see AWSMarketplaceRead-only in the AWS Managed Policy Reference.

AWS managed policy: AWSPrivateMarketplaceAdminFullAccess

You can attach the AWSPrivateMarketplaceAdminFullAccess policy to your IAM identities.

This policy grants administrator permissions that allow full access to manage private marketplaces in your account (or organization). For more information about using multiple administrators, see Example policies for private marketplace administrators.

To view the permissions for this policy, see AWSPrivateMarketplaceAdminFullAccess in the AWS Managed Policy Reference.

AWS managed policy: AWSPrivateMarketplaceRequests

You can attach the AWSPrivateMarketplaceRequests policy to your IAM identities.

This policy grants contributor permissions that allow access to request products be added to your private marketplace, and to view those requests. These requests must be approved or denied by a private marketplace administrator.

To view the permissions for this policy, see AWSPrivateMarketplaceRequests in the AWS Managed Policy Reference.

AWS managed policy: AWSServiceRoleForPrivateMarketplaceAdminPolicy

You can't attach the AWSServiceRoleForPrivateMarketplaceAdminPolicy to your IAM entities. This policy is attached to a service-linked role that allows AWS Marketplace to perform actions on your behalf. For more information, see Using service-linked roles for AWS Marketplace.

This policy grants contributor permissions that allow AWS Marketplace to describe and update Private Marketplace resources and describe AWS Organizations.

To view the permissions for this policy, see AWSServiceRoleForPrivateMarketplaceAdminPolicy in the AWS Managed Policy Reference.

AWS managed policy: AWSVendorInsightsAssessorFullAccess

You can attach the AWSVendorInsightsAssessorFullAccess policy to your IAM identities.

This policy grants full access for viewing entitled AWS Marketplace Vendor Insights resources and managing AWS Marketplace Vendor Insights subscriptions. These requests must be approved or denied by an administrator. It allows read-only access to AWS Artifact third-party reports.

AWS Marketplace Vendor Insights identifies assessor is equal to buyer and vendor is equal to seller.

To view the permissions for this policy, see AWSVendorInsightsAssessorFullAccess in the AWS Managed Policy Reference.

AWS managed policy: AWSVendorInsightsAssessorReadOnly

You can attach the AWSVendorInsightsAssessorReadOnly policy to your IAM identities.

This policy grants read-only access for viewing entitled AWS Marketplace Vendor Insights resources. These requests must be approved or denied by an administrator. It allows read-only access to reports in AWS Artifact.

requests must be approved or denied by an administrator. It allows read-only access to AWS Artifact third-party reports.

AWS Marketplace Vendor Insights identifies assessor as the buyer and vendor is equal to the seller for the purposes of this guide.

To view the permissions for this policy, see AWSVendorInsightsAssessorReadOnly in the AWS Managed Policy Reference.

AWS managed policy: AWSServiceRoleForProcurementInsightsPolicy

You can attach the AWSServiceRoleForProcurementInsightsPolicy policy to your IAM identities.

This policy grants the AWSServiceRoleForProcurementInsightsPolicy access to the resource data in your AWS organization.. AWS Marketplace uses the data to populate the Procurement insights dashboard. The dashboard enables buyers with management accounts to view all the agreements across all the accounts in an organization.

To view the permissions for this policy, see AWSServiceRoleForProcurementInsightsPolicy in the AWS Managed Policy Reference.

AWS Marketplace updates to AWS managed policies

View details about updates to AWS managed policies for AWS Marketplace since this service began tracking these changes. For automatic alerts about changes to this page, subscribe to the RSS feed on the AWS Marketplace Document history for AWS Marketplace Buyer Guide