AWS 合作夥伴中心 API 參考已重組。如需支援的 API 操作的詳細資訊，請參閱 [AWS 合作夥伴中心 API 參考](https://docs.aws.amazon.com/partner-central/latest/APIReference/Welcome.html)。

本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

# 營收測量 API 的存取權
<a name="prm-access-control"></a>

存取控制和許可由AWS Identity and Access Management(IAM) 管理。本節提供設定必要許可以與營收衡量 API 互動的指引，包括列出AWS Marketplace實體所需的許可。

## 先決條件
<a name="prm-prerequisites"></a>

在設定許可之前，請確定您的AWS 帳戶已連結至 Partner Central，而且您已建立必要的 IAM 角色和使用者。如需詳細資訊，請參閱[設定和身分驗證](https://docs.aws.amazon.com/partner-central/latest/APIReference/setup-authentication.html)。

## 使用AWS受管政策
<a name="prm-using-aws-managed-policies"></a>

AWS提供受管政策，授予與營收測量 API 互動所需的許可。根據您的角色，有兩個 受管政策可用：
+ **合作夥伴** — 將`AWSPartnerCentralRevenueAttributionManagement`政策連接到您的 IAM 身分。
+ **客戶** — 將`AWSRevenueAttributionManagement`政策連接到您的 IAM 身分。

如需詳細資訊，請參閱 [AWSAWS Partner Central 使用者的 受管政策](https://docs.aws.amazon.com/partner-central/latest/getting-started/managed-policies.html)。

### AWSPartnerCentralRevenueAttributionManagement 政策
<a name="prm-partner-facing-policy"></a>

此政策為向AWS Partner Central 註冊AWS的帳戶提供收入歸因管理活動的必要存取權。

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "RevenueMeasurementCreation",
            "Effect": "Allow",
            "Action": [
                "partnercentral:CreateRevenueAttribution",
                "partnercentral:CreateMarketplaceRevenueShare",
                "partnercentral:CreateMarketplaceRevenueShareAllocation"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "RevenueMeasurementListing",
            "Effect": "Allow",
            "Action": [
                "partnercentral:ListRevenueAttributions",
                "partnercentral:ListRevenueAttributionAllocations",
                "partnercentral:ListMarketplaceRevenueShares",
                "partnercentral:ListMarketplaceRevenueShareAllocations"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "RevenueAttributionManagement",
            "Effect": "Allow",
            "Action": [
                "partnercentral:GetRevenueAttribution",
                "partnercentral:UpdateRevenueAttribution",
                "partnercentral:GetRevenueAttributionAllocation",
                "partnercentral:StartRevenueAttributionAllocationsTask",
                "partnercentral:GetRevenueAttributionAllocationsTask"
            ],
            "Resource": "arn:aws:partnercentral:*:*:catalog/*/revenue-attribution/*",
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "MarketplaceRevenueShareManagement",
            "Effect": "Allow",
            "Action": [
                "partnercentral:GetMarketplaceRevenueShare",
                "partnercentral:GetMarketplaceRevenueShareAllocation",
                "partnercentral:UpdateMarketplaceRevenueShareAllocation"
            ],
            "Resource": "arn:aws:partnercentral:*:*:catalog/*/marketplace-revenue-share/*",
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "TaggingAccess",
            "Effect": "Allow",
            "Action": [
                "partnercentral:TagResource",
                "partnercentral:UntagResource",
                "partnercentral:ListTagsForResource"
            ],
            "Resource": [
                "arn:aws:partnercentral:*:*:catalog/*/revenue-attribution/*",
                "arn:aws:partnercentral:*:*:catalog/*/marketplace-revenue-share/*"
            ],
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "OpportunityAccess",
            "Effect": "Allow",
            "Action": [
                "partnercentral:ListOpportunities",
                "partnercentral:GetOpportunity"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "PartnerResourceAccess",
            "Effect": "Allow",
            "Action": [
                "partnercentral:ListPartners",
                "partnercentral:GetPartner"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "ListingAWSMarketplaceEntities",
            "Effect": "Allow",
            "Action": [
                "aws-marketplace:ListEntities"
            ],
            "Resource": "*"
        },
        {
            "Sid": "AWSMarketplaceEntityAccess",
            "Effect": "Allow",
            "Action": [
                "aws-marketplace:DescribeEntity"
            ],
            "Resource": [
                "arn:aws:aws-marketplace:*:*:AWSMarketplace*/Offer/*"
            ]
        },
        {
            "Sid": "AmazonQPartnerAssistantAccess",
            "Effect": "Allow",
            "Action": [
                "q:StartConversation",
                "q:SendMessage",
                "q:GetConversation",
                "q:ListConversations",
                "q:PassRequest"
            ],
            "Resource": "*"
        }
    ]
}
```

### AWSRevenueAttributionManagement 政策
<a name="prm-customer-facing-policy"></a>

此政策為未向AWS Partner Central 註冊AWS的帳戶提供收入歸因管理活動的必要存取權。

```
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "RevenueAttributionCreation",
            "Effect": "Allow",
            "Action": [
                "partnercentral:CreateRevenueAttribution"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "RevenueAttributionListing",
            "Effect": "Allow",
            "Action": [
                "partnercentral:ListRevenueAttributions"
            ],
            "Resource": "*",
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "RevenueAttributionManagement",
            "Effect": "Allow",
            "Action": [
                "partnercentral:GetRevenueAttribution",
                "partnercentral:UpdateRevenueAttribution"
            ],
            "Resource": "arn:aws:partnercentral:*:*:catalog/*/revenue-attribution/*",
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        },
        {
            "Sid": "TaggingAccess",
            "Effect": "Allow",
            "Action": [
                "partnercentral:TagResource",
                "partnercentral:UntagResource",
                "partnercentral:ListTagsForResource"
            ],
            "Resource": [
                "arn:aws:partnercentral:*:*:catalog/*/revenue-attribution/*"
            ],
            "Condition": {
                "StringEquals": {
                    "partnercentral:Catalog": [
                        "AWS",
                        "Sandbox"
                    ]
                }
            }
        }
    ]
}
```

## 將政策指派給 IAM 角色和使用者
<a name="prm-assigning-policies"></a>

請依照下列步驟將政策指派給 IAM 角色和使用者：

1. 登入AWS Management Console。

1. 導覽至 IAM 服務。

1. 選取角色或使用者，然後選擇您要連接政策的 IAM 角色或使用者。

1. 將`AWSPartnerCentralRevenueAttributionManagement`政策 （適用於合作夥伴） 或`AWSRevenueAttributionManagement`政策 （適用於客戶） 連接至選取的 IAM 角色或使用者。

如需更多資訊，請參閱《[新增和移除 IAM 身分許可](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html)》。

## 使用條件索引鍵管理許可
<a name="prm-managing-permissions-with-condition-keys"></a>

IAM 政策中的條件索引鍵可為何時強制執行陳述式政策提供資源層級許可。您可以使用條件金鑰來指定允許或拒絕特定許可的條件。

如需詳細資訊，請參閱 [IAM JSON 政策元素：Condition 運算子](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html)。


**條件索引鍵概觀**  

| 條件金鑰 | 說明 | 適用的動作 | 有效值 | 
| --- | --- | --- | --- | 
| partnercentral：Catalog | 依相關聯的目錄實體類型篩選存取權 | 所有動作 | AWS、沙盒 | 

## 所需許可的摘要
<a name="prm-summary-of-required-permissions"></a>


**所需許可的摘要**  

| Action | 說明 | 
| --- | --- | 
| partnercentral：CreateRevenueAttribution | 允許建立新的收入歸因記錄 | 
| partnercentral：UpdateRevenueAttribution | 允許更新現有的營收歸因記錄 | 
| partnercentral：GetRevenueAttribution | 允許擷取特定收入歸因的詳細資訊 | 
| partnercentral：ListRevenueAttributions | 允許列出具有選用篩選條件的營收屬性 | 
| partnercentral：GetRevenueAttributionAllocation | 允許依其 ID 擷取單一配置 | 
| partnercentral：ListRevenueAttributionAllocations | 允許列出具有篩選支援的遞交配置 | 
| partnercentral：StartRevenueAttributionAllocationsTask | 允許提交最多 250 個分配變更批次以進行非同步處理 | 
| partnercentral：GetRevenueAttributionAllocationsTask | 允許擷取先前提交的配置任務狀態 | 
| partnercentral：CreateMarketplaceRevenueShare | 允許建立新的市場收入共享資源 | 
| partnercentral：GetMarketplaceRevenueShare | 允許擷取特定市場收入份額的詳細資訊 | 
| partnercentral：ListMarketplaceRevenueShares | 允許列出具有選用篩選條件的市場收入共享 | 
| partnercentral：CreateMarketplaceRevenueShareAllocation | 允許建立新的市場收入共享分配 | 
| partnercentral：GetMarketplaceRevenueShareAllocation | 允許擷取特定市場收入分配的詳細資訊 | 
| partnercentral：UpdateMarketplaceRevenueShareAllocation | 允許更新現有的市場收入分配 | 
| partnercentral：ListMarketplaceRevenueShareAllocations | 允許列出市場收入份額下的配置 | 
| partnercentral：TagResource | 允許新增或覆寫資源的標籤 | 
| partnercentral：UntagResource | 允許從資源移除標籤 | 
| partnercentral：ListTagsForResource | 允許列出與資源相關聯的標籤 |