AWSPartnerCentralChannelManagement

OperatorAWS managedActivePermissions reviewedShow on map Compare

Summary

Provides necessary access for channel management activities.

Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.

Identity

ARN: arn:aws:iam::aws:policy/AWSPartnerCentralChannelManagement
Default version: v7
Created: 2025-11-19
Last edited: 2026-02-14
Services: partnercentral, partnercentral-account-management, q, sts

Control-plane actions (28)

By access level: 4 List, 7 Read, 2 Tagging, 15 Write.

Control-plane actions by service
Service	Granted	Access levels and limits	Granted by
Partner Central	21 of 164	4 List, 5 Read, 2 Tagging, 10 Write; 21 restricted, 20 conditional	partnercentral:AcceptChannelHandshake, partnercentral:CancelChannelHandshake, partnercentral:CreateChannelHandshake, partnercentral:CreateProgramManagementAccount, partnercentral:CreateRelationship, partnercentral:DeleteProgramManagementAccount, partnercentral:DeleteRelationship, partnercentral:GetPartner, partnercentral:GetPartnerDashboard, partnercentral:GetProgramManagementAccount, partnercentral:GetRelationship, partnercentral:ListChannelHandshakes and 9 more
Partner central account management	1 of 6	1 Write; 1 restricted, 1 conditional	partnercentral-account-management:AccessLegacyPartnerCentral
Q	5 of 54	2 Read, 3 Write; 0 restricted, 0 conditional	q:GetConversation, q:ListConversations, q:PassRequest, q:SendMessage, q:StartConversation
STS	1 of 16	1 Write; 1 restricted, 0 conditional	sts:AssumeRole

Partner Central: 21 actions

partnercentral:AcceptChannelHandshake (Write)
partnercentral:CancelChannelHandshake (Write)
partnercentral:CreateChannelHandshake (Write)
partnercentral:CreateProgramManagementAccount (Write)
partnercentral:CreateRelationship (Write)
partnercentral:DeleteProgramManagementAccount (Write)
partnercentral:DeleteRelationship (Write)
partnercentral:GetPartner (Read)
partnercentral:GetPartnerDashboard (Read)
partnercentral:GetProgramManagementAccount (Read)
partnercentral:GetRelationship (Read)
partnercentral:ListChannelHandshakes (List)
partnercentral:ListPartners (List)
partnercentral:ListProgramManagementAccounts (List)
partnercentral:ListRelationships (List)
partnercentral:ListTagsForResource (Read)
partnercentral:RejectChannelHandshake (Write)
partnercentral:TagResource (Tagging)
partnercentral:UntagResource (Tagging)
partnercentral:UpdateProgramManagementAccount (Write)
partnercentral:UpdateRelationship (Write)

Partner central account management: 1 actions

partnercentral-account-management:AccessLegacyPartnerCentral (Write)

Q: 5 actions

q:GetConversation (Read)
q:ListConversations (Read)
q:PassRequest (Write)
q:SendMessage (Write)
q:StartConversation (Write)

STS: 1 actions

sts:AssumeRole (Write)

Data-plane actions (0)

By access level: none.

This policy grants no actions in this plane.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: mixed.

Can be attached: Yes, to users, groups and roles.

Why this tier

Grants 17 write, tagging or permissions-management actions, short of full control of any service.

Guidance

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Same service

Same domain

Frequently asked questions

Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.

Policy JSON

Download policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "ChannelManagement",
      "Effect": "Allow",
      "Action": [
        "partnercentral:CreateProgramManagementAccount",
        "partnercentral:UpdateProgramManagementAccount",
        "partnercentral:DeleteProgramManagementAccount",
        "partnercentral:ListProgramManagementAccounts",
        "partnercentral:GetProgramManagementAccount",
        "partnercentral:CreateRelationship",
        "partnercentral:UpdateRelationship",
        "partnercentral:DeleteRelationship",
        "partnercentral:GetRelationship",
        "partnercentral:ListRelationships",
        "partnercentral:CreateChannelHandshake",
        "partnercentral:AcceptChannelHandshake",
        "partnercentral:RejectChannelHandshake",
        "partnercentral:CancelChannelHandshake",
        "partnercentral:ListChannelHandshakes"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "partnercentral:Catalog": [
            "AWS",
            "Sandbox"
          ]
        }
      }
    },
    {
      "Sid": "ChannelBillingTransferRoleAccess",
      "Effect": "Allow",
      "Action": [
        "sts:AssumeRole"
      ],
      "Resource": [
        "arn:aws:iam::*:role/PartnerCentralChannelBillingTransferManagement",
        "arn:aws:iam::*:role/PartnerCentralChannelBillingTransferReadOnly"
      ]
    },
    {
      "Sid": "TaggingAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral:TagResource",
        "partnercentral:UntagResource",
        "partnercentral:ListTagsForResource"
      ],
      "Resource": [
        "arn:aws:partnercentral:*:*:catalog/*/program-management-account/*",
        "arn:aws:partnercentral:*:*:catalog/*/channel-handshake/*"
      ],
      "Condition": {
        "StringEquals": {
          "partnercentral:Catalog": [
            "AWS",
            "Sandbox"
          ]
        }
      }
    },
    {
      "Sid": "LegacyPartnerCentralAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral-account-management:AccessLegacyPartnerCentral"
      ],
      "Resource": "*",
      "Condition": {
        "ForAnyValue:StringEquals": {
          "partnercentral-account-management:LegacyPartnerCentralRole": "ChannelUser"
        }
      }
    },
    {
      "Sid": "PartnerDashboardAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral:GetPartnerDashboard"
      ],
      "Resource": [
        "arn:aws:partnercentral::*:catalog/AWS/ReportingData/Resell_V1/Dashboard/*"
      ]
    },
    {
      "Sid": "PartnerResourceAccess",
      "Effect": "Allow",
      "Action": [
        "partnercentral:ListPartners",
        "partnercentral:GetPartner"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "partnercentral:Catalog": [
            "AWS",
            "Sandbox"
          ]
        }
      }
    },
    {
      "Sid": "AmazonQPartnerAssistantAccess",
      "Effect": "Allow",
      "Action": [
        "q:StartConversation",
        "q:SendMessage",
        "q:GetConversation",
        "q:ListConversations",
        "q:PassRequest"
      ],
      "Resource": "*"
    }
  ]
}

Version history

Current version v7, edited by AWS on 2026-02-14. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

AWS CLI

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/AWSPartnerCentralChannelManagement
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/AWSPartnerCentralChannelManagement
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/AWSPartnerCentralChannelManagement

CloudFormation

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AWSPartnerCentralChannelManagement

Terraform

resource "aws_iam_role_policy_attachment" "awspartnercentralchannelmanagement" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/AWSPartnerCentralChannelManagement"
}

CDK (TypeScript)

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("AWSPartnerCentralChannelManagement"),
);

Sources

Pending editorial review. No editorial sources are listed yet.