AWSPartnerCentralMarketingManagement
Summary
Provides necessary access for marketing activities.
Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.
Identity
- ARN
arn:aws:iam::aws:policy/AWSPartnerCentralMarketingManagement- Default version
- v6
- Created
- Last edited
- Services
- aws-marketplace, partnercentral, partnercentral-account-management, q, s3
Control-plane actions (30)
By access level: 6 List, 12 Read, 2 Tagging, 10 Write.
| Service | Granted | Access levels and limits | Granted by |
|---|---|---|---|
| Marketplace | 8 of 97 | 2 List, 3 Read, 2 Tagging, 1 Write; 6 restricted, 1 conditional | aws-marketplace:DescribeChangeSet, aws-marketplace:DescribeEntity, aws-marketplace:ListChangeSets, aws-marketplace:ListEntities, aws-marketplace:ListTagsForResource, aws-marketplace:StartChangeSet, aws-marketplace:TagResource, aws-marketplace:UntagResource |
| Partner Central | 15 of 164 | 4 List, 7 Read, 4 Write; 13 restricted, 12 conditional | partnercentral:CancelProfileUpdateTask, partnercentral:GetPartner, partnercentral:GetPartnerCentralContentDocument, partnercentral:GetPartnerCentralContentMetadata, partnercentral:GetPartnerDashboard, partnercentral:GetPartnerProfile, partnercentral:GetProfileUpdateTask, partnercentral:GetProfileVisibility, partnercentral:ListPartnerCentralContent, partnercentral:ListPartners, partnercentral:PutProfileVisibility, partnercentral:SearchPartnerCentralContent and 3 more |
| Partner central account management | 2 of 6 | 2 Write; 1 restricted, 1 conditional | partnercentral-account-management:AccessLegacyPartnerCentral, partnercentral-account-management:AccessMarketingCentral |
| Q | 5 of 54 | 2 Read, 3 Write; 0 restricted, 0 conditional | q:GetConversation, q:ListConversations, q:PassRequest, q:SendMessage, q:StartConversation |
Marketplace: 8 actions
- aws-marketplace:DescribeChangeSet (Read)
- aws-marketplace:DescribeEntity (Read)
- aws-marketplace:ListChangeSets (List)
- aws-marketplace:ListEntities (List)
- aws-marketplace:ListTagsForResource (Read)
- aws-marketplace:StartChangeSet (Write)
- aws-marketplace:TagResource (Tagging)
- aws-marketplace:UntagResource (Tagging)
Partner Central: 15 actions
- partnercentral:CancelProfileUpdateTask (Write)
- partnercentral:GetPartner (Read)
- partnercentral:GetPartnerCentralContentDocument (Read)
- partnercentral:GetPartnerCentralContentMetadata (Read)
- partnercentral:GetPartnerDashboard (Read)
- partnercentral:GetPartnerProfile (Read)
- partnercentral:GetProfileUpdateTask (Read)
- partnercentral:GetProfileVisibility (Read)
- partnercentral:ListPartnerCentralContent (List)
- partnercentral:ListPartners (List)
- partnercentral:PutProfileVisibility (Write)
- partnercentral:SearchPartnerCentralContent (List)
- partnercentral:SearchPartnerProfiles (List)
- partnercentral:StartProfileUpdateTask (Write)
- partnercentral:UseSession (Write)
Partner central account management: 2 actions
- partnercentral-account-management:AccessLegacyPartnerCentral (Write)
- partnercentral-account-management:AccessMarketingCentral (Write)
Q: 5 actions
- q:GetConversation (Read)
- q:ListConversations (Read)
- q:PassRequest (Write)
- q:SendMessage (Write)
- q:StartConversation (Write)
Data-plane actions (1)
By access level: 1 Write.
| Service | Granted | Access levels and limits | Granted by |
|---|---|---|---|
| S3 | 1 of 25 | 1 Write; 1 restricted, 0 conditional | s3:PutObject |
S3: 1 actions
- s3:PutObject (Write)
Excluded and conditional actions
No patterns are excluded by NotAction or Deny statements.
Resource scope and attachment
Resource scope across granted actions: mixed.
Can be attached: Yes, to users, groups and roles.
Why this tier
- Grants 13 write, tagging or permissions-management actions, short of full control of any service.
- Grants data-plane write actions on a data store, but only for scoped resources or under conditions.
Guidance
Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.
Related policies
Same service
- AIOpsOperatorAccess
- AmazonQDeveloperAccess
- AmazonQFullAccess
- AmazonSageMakerCanvasSMDataScienceAssistantAccess
- AmazonTimestreamConsoleFullAccess
- AWSDataExchangeFullAccess
- AWSDataExchangeProviderFullAccess
- AWSDataExchangeReadOnly
Same domain
Frequently asked questions
Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.
Policy JSON
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "PartnerCentralMarketingAccess",
"Effect": "Allow",
"Action": [
"partnercentral-account-management:AccessMarketingCentral"
],
"Resource": "*"
},
{
"Sid": "LegacyPartnerCentralAccess",
"Effect": "Allow",
"Action": [
"partnercentral-account-management:AccessLegacyPartnerCentral"
],
"Resource": "*",
"Condition": {
"ForAnyValue:StringEquals": {
"partnercentral-account-management:LegacyPartnerCentralRole": "MarketingStaff"
}
}
},
{
"Sid": "PartnerDiscoveryAccess",
"Effect": "Allow",
"Action": [
"partnercentral:SearchPartnerProfiles",
"partnercentral:GetPartnerProfile"
],
"Resource": "*"
},
{
"Sid": "PartnerProfileAccess",
"Effect": "Allow",
"Action": [
"partnercentral:StartProfileUpdateTask",
"partnercentral:GetProfileUpdateTask",
"partnercentral:CancelProfileUpdateTask",
"partnercentral:PutProfileVisibility",
"partnercentral:GetProfileVisibility"
],
"Resource": "arn:aws:partnercentral:*:*:catalog/*/partner/*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "PartnerResourceAccess",
"Effect": "Allow",
"Action": [
"partnercentral:ListPartners",
"partnercentral:GetPartner"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "PartnerCentralContentAccess",
"Effect": "Allow",
"Action": [
"partnercentral:GetPartnerCentralContentDocument",
"partnercentral:GetPartnerCentralContentMetadata",
"partnercentral:ListPartnerCentralContent",
"partnercentral:SearchPartnerCentralContent"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "PartnerCentralEphemeralWriteS3Access",
"Effect": "Allow",
"Action": [
"s3:PutObject"
],
"Resource": "arn:aws:s3:::aws-partner-central-marketplace-ephemeral-writeonly-files/${aws:PrincipalAccount}/*"
},
{
"Sid": "PartnerDashboardAccess",
"Effect": "Allow",
"Action": [
"partnercentral:GetPartnerDashboard"
],
"Resource": [
"arn:aws:partnercentral::*:catalog/AWS/ReportingData/MarketingCampaign_V1/Dashboard/*"
]
},
{
"Sid": "AmazonQPartnerAssistantAccess",
"Effect": "Allow",
"Action": [
"q:StartConversation",
"q:SendMessage",
"q:GetConversation",
"q:ListConversations",
"q:PassRequest"
],
"Resource": "*"
},
{
"Sid": "CaseStudyStartChangeSet",
"Effect": "Allow",
"Action": [
"aws-marketplace:StartChangeSet"
],
"Resource": [
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/CaseStudy/*",
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/ChangeSet/*"
],
"Condition": {
"StringEquals": {
"catalog:ChangeType": [
"CreateCaseStudy",
"UpdateInformation",
"ReleaseCaseStudy",
"RestrictCaseStudy",
"UpdateVisibility"
]
}
}
},
{
"Sid": "CaseStudyDescribeChangeSet",
"Effect": "Allow",
"Action": [
"aws-marketplace:DescribeChangeSet"
],
"Resource": "arn:aws:aws-marketplace:*:*:AWSMarketplace*/ChangeSet/*"
},
{
"Sid": "CaseStudyListChangeSets",
"Effect": "Allow",
"Action": [
"aws-marketplace:ListChangeSets"
],
"Resource": "*"
},
{
"Sid": "CaseStudyEntityTagAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:ListTagsForResource",
"aws-marketplace:TagResource",
"aws-marketplace:UntagResource"
],
"Resource": "arn:aws:aws-marketplace:*:*:AWSMarketplace*/CaseStudy/*"
},
{
"Sid": "CaseStudyEntityReadAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:ListEntities"
],
"Resource": "*"
},
{
"Sid": "DescribeEntityAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:DescribeEntity"
],
"Resource": "arn:aws:aws-marketplace:*:*:AWSMarketplace*/CaseStudy/*"
},
{
"Sid": "PartnerCentralAgentsSessionAccess",
"Effect": "Allow",
"Action": [
"partnercentral:UseSession"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
},
"Bool": {
"aws:IsMcpServiceAction": "true"
}
}
}
]
}
Version history
Current version v6, edited by AWS on 2026-10-28. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.
Attach snippets
AWS CLI
aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/AWSPartnerCentralMarketingManagement
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/AWSPartnerCentralMarketingManagement
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/AWSPartnerCentralMarketingManagementCloudFormation
Resources:
ExampleRole:
Type: AWS::IAM::Role
Properties:
AssumeRolePolicyDocument: {} # replace with your trust policy
ManagedPolicyArns:
- arn:aws:iam::aws:policy/AWSPartnerCentralMarketingManagementTerraform
resource "aws_iam_role_policy_attachment" "awspartnercentralmarketingmanagement" {
role = aws_iam_role.example.name
policy_arn = "arn:aws:iam::aws:policy/AWSPartnerCentralMarketingManagement"
}CDK (TypeScript)
role.addManagedPolicy(
iam.ManagedPolicy.fromAwsManagedPolicyName("AWSPartnerCentralMarketingManagement"),
);Sources
Pending editorial review. No editorial sources are listed yet.