PartnerCentralIncentiveBenefitManagement
Summary
Policy provides access to manage all the incentive benefits in AWS Partner Central.
Permissions imported from the AWS Managed Policy Reference Guide; other sections pending editorial review.
Identity
- ARN
arn:aws:iam::aws:policy/PartnerCentralIncentiveBenefitManagement- Default version
- v5
- Created
- Last edited
- Services
- aws-marketplace, partnercentral, s3
Control-plane actions (31)
By access level: 9 List, 11 Read, 2 Tagging, 9 Write.
| Service | Granted | Access levels and limits | Granted by |
|---|---|---|---|
| Marketplace | 4 of 97 | 2 List, 2 Read; 3 restricted, 2 conditional | aws-marketplace:DescribeAgreement, aws-marketplace:DescribeEntity, aws-marketplace:ListEntities, aws-marketplace:SearchAgreements |
| Partner Central | 27 of 164 | 7 List, 9 Read, 2 Tagging, 9 Write; 27 restricted, 27 conditional | partnercentral:AmendBenefitApplication, partnercentral:AssociateBenefitApplicationResource, partnercentral:CancelBenefitApplication, partnercentral:CreateBenefitApplication, partnercentral:DisassociateBenefitApplicationResource, partnercentral:GetAwsOpportunitySummary, partnercentral:GetBenefit, partnercentral:GetBenefitAllocation, partnercentral:GetBenefitApplication, partnercentral:GetOpportunity, partnercentral:GetPartner, partnercentral:GetPartnerCentralContentDocument and 15 more |
Marketplace: 4 actions
- aws-marketplace:DescribeAgreement (Read)
- aws-marketplace:DescribeEntity (Read)
- aws-marketplace:ListEntities (List)
- aws-marketplace:SearchAgreements (List)
Partner Central: 27 actions
- partnercentral:AmendBenefitApplication (Write)
- partnercentral:AssociateBenefitApplicationResource (Write)
- partnercentral:CancelBenefitApplication (Write)
- partnercentral:CreateBenefitApplication (Write)
- partnercentral:DisassociateBenefitApplicationResource (Write)
- partnercentral:GetAwsOpportunitySummary (Read)
- partnercentral:GetBenefit (Read)
- partnercentral:GetBenefitAllocation (Read)
- partnercentral:GetBenefitApplication (Read)
- partnercentral:GetOpportunity (Read)
- partnercentral:GetPartner (Read)
- partnercentral:GetPartnerCentralContentDocument (Read)
- partnercentral:GetPartnerCentralContentMetadata (Read)
- partnercentral:ListBenefitAllocations (List)
- partnercentral:ListBenefitApplications (List)
- partnercentral:ListBenefits (List)
- partnercentral:ListOpportunities (List)
- partnercentral:ListPartnerCentralContent (List)
- partnercentral:ListPartners (List)
- partnercentral:ListTagsForResource (Read)
- partnercentral:RecallBenefitApplication (Write)
- partnercentral:SearchPartnerCentralContent (List)
- partnercentral:SubmitBenefitApplication (Write)
- partnercentral:TagResource (Tagging)
- partnercentral:UntagResource (Tagging)
- partnercentral:UpdateBenefitApplication (Write)
- partnercentral:UseSession (Write)
Data-plane actions (1)
By access level: 1 Write.
| Service | Granted | Access levels and limits | Granted by |
|---|---|---|---|
| S3 | 1 of 25 | 1 Write; 1 restricted, 0 conditional | s3:PutObject |
S3: 1 actions
- s3:PutObject (Write)
Excluded and conditional actions
No patterns are excluded by NotAction or Deny statements.
Resource scope and attachment
Resource scope across granted actions: mixed.
Can be attached: Yes, to users, groups and roles.
Why this tier
- Grants 12 write, tagging or permissions-management actions, short of full control of any service.
- Grants data-plane write actions on a data store, but only for scoped resources or under conditions.
Guidance
Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.
Related policies
Same service
- AmazonTimestreamConsoleFullAccess
- AWSDataExchangeFullAccess
- AWSDataExchangeProviderFullAccess
- AWSDataExchangeReadOnly
- AWSDataExchangeSubscriberFullAccess
- AWSElasticBeanstalkMulticontainerDocker
- AWSIQContractServiceRolePolicy
- AWSMarketplaceDiscoveryFullAccess
Same domain
Frequently asked questions
Pending editorial review. The permission data on this page comes straight from AWS; this section will be filled in once a reviewed guide exists.
Policy JSON
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "BenefitsManagement",
"Effect": "Allow",
"Action": [
"partnercentral:ListBenefits",
"partnercentral:GetBenefit",
"partnercentral:CreateBenefitApplication",
"partnercentral:AmendBenefitApplication",
"partnercentral:UpdateBenefitApplication",
"partnercentral:SubmitBenefitApplication",
"partnercentral:GetBenefitApplication",
"partnercentral:CancelBenefitApplication",
"partnercentral:RecallBenefitApplication",
"partnercentral:ListBenefitApplications",
"partnercentral:AssociateBenefitApplicationResource",
"partnercentral:DisassociateBenefitApplicationResource",
"partnercentral:ListBenefitAllocations",
"partnercentral:GetBenefitAllocation"
],
"Resource": [
"arn:aws:partnercentral:*:*:catalog/*/benefit-application/*",
"arn:aws:partnercentral:*:*:catalog/*/benefit-allocation/*",
"arn:aws:partnercentral:*:*:catalog/*/benefit/*"
],
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "PartnerCentralBenefitsTaggingAccess",
"Effect": "Allow",
"Action": [
"partnercentral:TagResource",
"partnercentral:UntagResource",
"partnercentral:ListTagsForResource"
],
"Resource": [
"arn:aws:partnercentral:*:*:catalog/*/benefit-application/*",
"arn:aws:partnercentral:*:*:catalog/*/benefit-allocation/*"
],
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "PartnerResourceAccess",
"Effect": "Allow",
"Action": [
"partnercentral:ListPartners",
"partnercentral:GetPartner"
],
"Resource": "arn:aws:partnercentral:*:*:catalog/*/partner/*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "AWSPartnerOpportunityAccess",
"Effect": "Allow",
"Action": [
"partnercentral:GetAwsOpportunitySummary",
"partnercentral:GetOpportunity",
"partnercentral:ListOpportunities"
],
"Resource": "arn:aws:partnercentral:*:*:catalog/*/opportunity/*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "PartnerCentralContentAccess",
"Effect": "Allow",
"Action": [
"partnercentral:GetPartnerCentralContentDocument",
"partnercentral:GetPartnerCentralContentMetadata",
"partnercentral:ListPartnerCentralContent",
"partnercentral:SearchPartnerCentralContent"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
}
}
},
{
"Sid": "ListingAWSMarketplaceEntities",
"Effect": "Allow",
"Action": [
"aws-marketplace:ListEntities"
],
"Resource": "*"
},
{
"Sid": "AWSMarketplaceOffersAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:DescribeEntity"
],
"Resource": [
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/Solution/*",
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/OfferSet/*",
"arn:aws:aws-marketplace:*:*:AWSMarketplace*/Offer/*"
]
},
{
"Sid": "AWSMarketplaceAgreementsReadAccess",
"Effect": "Allow",
"Action": [
"aws-marketplace:SearchAgreements",
"aws-marketplace:DescribeAgreement"
],
"Resource": "*",
"Condition": {
"ForAllValues:StringEquals": {
"aws-marketplace:AgreementType": [
"PurchaseAgreement"
]
}
}
},
{
"Sid": "PartnerCentralEphemeralWriteS3Access",
"Effect": "Allow",
"Action": [
"s3:PutObject"
],
"Resource": "arn:aws:s3:::aws-partner-central-marketplace-ephemeral-writeonly-files/${aws:PrincipalAccount}/*"
},
{
"Sid": "PartnerCentralAgentsSessionAccess",
"Effect": "Allow",
"Action": [
"partnercentral:UseSession"
],
"Resource": "*",
"Condition": {
"StringEquals": {
"partnercentral:Catalog": [
"AWS",
"Sandbox"
]
},
"Bool": {
"aws:IsMcpServiceAction": "true"
}
}
}
]
}
Version history
Current version v5, edited by AWS on 2026-10-28. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.
Attach snippets
AWS CLI
aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/PartnerCentralIncentiveBenefitManagement
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/PartnerCentralIncentiveBenefitManagement
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/PartnerCentralIncentiveBenefitManagementCloudFormation
Resources:
ExampleRole:
Type: AWS::IAM::Role
Properties:
AssumeRolePolicyDocument: {} # replace with your trust policy
ManagedPolicyArns:
- arn:aws:iam::aws:policy/PartnerCentralIncentiveBenefitManagementTerraform
resource "aws_iam_role_policy_attachment" "partnercentralincentivebenefitmanagement" {
role = aws_iam_role.example.name
policy_arn = "arn:aws:iam::aws:policy/PartnerCentralIncentiveBenefitManagement"
}CDK (TypeScript)
role.addManagedPolicy(
iam.ManagedPolicy.fromAwsManagedPolicyName("PartnerCentralIncentiveBenefitManagement"),
);Sources
Pending editorial review. No editorial sources are listed yet.