Linking AWS Partner Central accounts with AWS Marketplace seller accounts

AWS Partners with AWS Marketplace seller accounts can connect their accounts using the Account Linking feature in AWS Partner Central. Connecting the AWS Partner Central account to an AWS Marketplace account and mapping user permissions across portals allows users to seamlessly access both accounts through single sign-on access, and enables product-to-offering linking across platforms.

To enable account linking, assign user roles in AWS Partner Central, including the cloud admin role. If a cloud admin role is not assigned, the alliance lead user can assign themselves the cloud admin role to link AWS Partner Central and AWS Marketplace accounts. For more information about AWS Marketplace, refer to the AWS Marketplace Seller Guide.

Important

To enable ACE opportunity connections to Marketplace private offers, users must be mapped to an IAM role in the connected AWS marketplace seller account. For more information, refer to Linking your AWS Partner Central account to an AWS Marketplace account.

Note

Browser compatibility requirements: Firefox Extended Support Release (Firefox ESR) isn't supported. If you have UI issues related to Firefox ESR while using AWS Partner Central, use a standard version of Firefox or switch to a Chromium-based browser.

Prerequisites

To link your AWS Marketplace seller account with an AWS Partner Central account, you must have access to an AWS account with cloud admin permissions. Follow these steps to create an access policy and assign the policy to an existing IAM user. If you already have a user with cloud admin permissions, you may skip these steps and start with Linking your AWS Partner Central account to an AWS Marketplace account.

To create the trust policy:

1. Sign in to the IAM console.

2. Under Access management, choose Policies.

3. Choose Create policy.

4. Specify permissions in the policy editor by choosing JSON, and then add the following policy:

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Sid": "CreatePartnerCentralCloudAdminRole",
         "Effect": "Allow",
         "Action": [
           "iam:CreateRole"
         ],
         "Resource": "arn:aws:iam::*:role/PartnerCentralRoleForCloudAdmin*"
       },
       {
         "Sid": "AttachPolicyToPartnerCentralCloudAdminRole",
         "Effect": "Allow",
         "Action": [
           "iam:AttachRolePolicy"
         ],
         "Resource": "arn:aws:iam::*:role/PartnerCentralRoleForCloudAdmin*",
         "Condition": {
           "ArnLike": {
             "iam:PolicyARN": "arn:aws:iam::*:policy/PartnerCentralAccountManagementUserRoleAssociation"
           }
         }
       },
       {
         "Sid": "AssociatePartnerAccount",
         "Effect": "Allow",
         "Action": [
           "partnercentral-account-management:AssociatePartnerAccount"
         ],
         "Resource": "*"
       }
     ]
   }
      

5. Choose Next.

6. Under Policy details, enter PartnerAccountManagement for Policy name and add an optional description.

7. Review the policy permissions.

8. (Optional) Add tags as needed.

9. Choose Create policy.

Custom trust policy

If you add the policy to an existing IAM role, add the following custom trust policy to the role.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "partnercentral-account-management.amazonaws.com"
            },
            "Action": "sts:AssumeRole"
        }
    ]
}   

To add a custom trust policy to an existing IAM role, refer to Creating an IAM role using a custom trust policy (console).

Linking your AWS Partner Central account to an AWS Marketplace account

1. Sign in to AWS Partner Central as a user with an alliance lead or cloud admin role.

2. In the AWS Marketplace section of the AWS Partner Central home page, choose Link Account.

3. On the AWS Marketplace page, choose Link Account.

4. Choose IAM user.

5. Enter the AWS account ID for the AWS Marketplace account.

6. Choose Next.

7. Sign in to AWS Marketplace.

8. Choose Allow to acknowledge that you authorize the connection between AWS Partner Central and AWS Marketplace accounts and users.

9. Map users to AWS Marketplace IAM roles.