aws-marketplace:StartChangeSet is a Write access-level action in the aws-marketplace service. Grants permission to request a new change set (Note: resource-level permissions for this action and condition context keys for this action are only supported when used with Catalog API and are not supported when used with AWS Marketplace Management Portal)
ARNs that aws-marketplace:StartChangeSet can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants aws-marketplace:StartChangeSet.
Filters access by the Intent parameter in the StartChangeSet request
Filters access by tags that are passed in the request
Filters access by tag keys that are passed in the request
Filters access by the change type in the StartChangeSet request
Filters access by tags associated with the resource
A minimal policy that allows aws-marketplace:StartChangeSet. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowAwsmarketplaceStartChangeSet",
"Effect": "Allow",
"Action": "aws-marketplace:StartChangeSet",
"Resource": "*"
}
]
}