AWS Marketplace Catalog (aws-marketplace-catalog)

Additions

Actions

• CancelChangeSet
  
  • Description:  Grants permission to cancel a running change set
  • Access:  Write
  • Resources: 

    Name: ChangeSet

    Required: Yes

• CompleteTask
  
  • Description:  Grants permission to complete an existing task and submit the content to the associated change
  • Access:  Write
• DeleteResourcePolicy
  
  • Description:  Grants permission to delete the resource policy of an existing entity
  • Access:  Permissions management
  • Resources: 

    Name: Entity

    Required: Yes

• DescribeChangeSet
  
  • Description:  Grants permission to return the details of an existing change set
  • Access:  Read
  • Resources: 

    Name: ChangeSet

    Required: Yes

• DescribeEntity
  
  • Description:  Grants permission to return the details of an existing entity
  • Access:  Read
  • Resources: 

    Name: Entity

    Required: Yes

• DescribeTask
  
  • Description:  Grants permission to return the details of an existing task
  • Access:  Read
• GetResourcePolicy
  
  • Description:  Grants permission to get the resource policy of an existing entity
  • Access:  Read
  • Resources: 

    Name: Entity

    Required: Yes

• ListChangeSets
  
  • Description:  Grants permission to list existing change sets
  • Access:  List
• ListEntities
  
  • Description:  Grants permission to list existing entities
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list tags on an existing entity or a change set
  • Access:  Read
  • Resources: 

    Name: ChangeSet

    Required: No

    Name: Entity

    Required: No

• ListTasks
  
  • Description:  Grants permission to list existing tasks
  • Access:  List
• PutResourcePolicy
  
  • Description:  Grants permission to attach a resource policy to an existing entity
  • Access:  Permissions management
  • Resources: 

    Name: Entity

    Required: Yes

• StartChangeSet
  
  • Description:  Grants permission to request a new change set (Note: resource-level permissions for this action and condition context keys for this action are only supported when used with Catalog API and are not supported when used with AWS Marketplace Management Portal)
  • Access:  Write
  • Resources: 

    Name: Entity

    Required: Yes

  • Conditions: 

    catalog:ChangeType

    aws:RequestTag/${TagKey}

    aws:TagKeys

• TagResource
  
  • Description:  Grants permission to tag an existing entity or a change set
  • Access:  Tagging
  • Resources: 

    Name: ChangeSet

    Required: No

    Name: Entity

    Required: No

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• UntagResource
  
  • Description:  Grants permission to untag an existing entity or a change set
  • Access:  Tagging
  • Resources: 

    Name: ChangeSet

    Required: No

    Name: Entity

    Required: No

  • Conditions: 

    aws:TagKeys

• UpdateTask
  
  • Description:  Grants permission to update the contents of an existing task
  • Access:  Write

Resources

• Entity
  
  • Arn:  arn:${Partition}:aws-marketplace:${Region}:${Account}:${Catalog}/${EntityType}/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    catalog:ChangeType

• ChangeSet
  
  • Arn:  arn:${Partition}:aws-marketplace:${Region}:${Account}:${Catalog}/ChangeSet/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

    catalog:ChangeType

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  ArrayOfString
• catalog:ChangeType
  
  • Description:  Filters access by the change type in the StartChangeSet request
  • Type:  String