aws-marketplace:StartChangeSet is a Write access-level action in the aws-marketplace service. Grants permission to request a new change set (Note: resource-level permissions for this action and condition context keys for this action are only supported when used with Catalog API and are not supported when used with AWS Marketplace Management Portal)
ARNs that aws-marketplace:StartChangeSet can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants aws-marketplace:StartChangeSet.
Filters access by the tags associated with the resource
Filters access by the change type in the StartChangeSet request
A minimal policy that allows aws-marketplace:StartChangeSet. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowAwsmarketplaceStartChangeSet",
"Effect": "Allow",
"Action": "aws-marketplace:StartChangeSet",
"Resource": "*"
}
]
}