本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
用於設定私人 Marketplace 的服務連結角色 AWS Marketplace
AWS Marketplace 使用名為的服務連結角色AWSServiceRoleForPrivateMarketplaceAdmin來描述和更新私人 Marketplace 資源並說明 AWS Organizations。
服AWSServiceRoleForPrivateMarketplaceAdmin務連結角色會信任下列服務擔任該角色:
-
private-marketplace.marketplace.amazonaws.com
使用名為的角色權限原則,AWSServiceRoleForPrivateMarketplaceAdminPolicy允許 AWS Marketplace 對指定的資源執行下列動作。
注意
如需有關 AWS Marketplace 管理政策的詳細資訊,請參閱AWS Marketplace 買家適用的AWS受管政策
{ "Version": "2012-10-17", "Statement": [ { "Sid": "PrivateMarketplaceCatalogDescribePermissions", "Effect": "Allow", "Action": [ "aws-marketplace:DescribeEntity" ], "Resource": [ "arn:aws:aws-marketplace:*:*:AWSMarketplace/Experience/*", "arn:aws:aws-marketplace:*:*:AWSMarketplace/Audience/*", "arn:aws:aws-marketplace:*:*:AWSMarketplace/ProcurementPolicy/*", "arn:aws:aws-marketplace:*:*:AWSMarketplace/BrandingSettings/*" ] }, { "Sid": "PrivateMarketplaceCatalogDescribeChangeSetPermissions", "Effect": "Allow", "Action": [ "aws-marketplace:DescribeChangeSet" ], "Resource": "*" }, { "Sid": "PrivateMarketplaceCatalogListPermissions", "Effect": "Allow", "Action": [ "aws-marketplace:ListEntities", "aws-marketplace:ListChangeSets" ], "Resource": "*" }, { "Sid": "PrivateMarketplaceStartChangeSetPermissions", "Effect": "Allow", "Action": [ "aws-marketplace:StartChangeSet" ], "Condition": { "StringEquals": { "catalog:ChangeType": [ "AssociateAudience", "DisassociateAudience" ] } }, "Resource": [ "arn:aws:aws-marketplace:*:*:AWSMarketplace/Experience/*", "arn:aws:aws-marketplace:*:*:AWSMarketplace/ChangeSet/*" ] }, { "Sid": "PrivateMarketplaceOrganizationPermissions", "Effect": "Allow", "Action": [ "organizations:DescribeAccount", "organizations:DescribeOrganizationalUnit", "organizations:ListDelegatedAdministrators", "organizations:ListChildren" ], "Resource": [ "*" ] } ] }
您必須設定許可,以允許您的使用者、群組或角色建立、編輯或刪除服務連結角色。如需詳細資訊,請參閱IAM使用指南中的服務連結角色權限。