Actions, resources, and condition keys for AWS Partner Central

AWS Partner Central (service prefix: partnercentral) provides the following service-specific resources, actions, and condition context keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.

Topics

Actions defined by AWS Partner Central
Resource types defined by AWS Partner Central
Condition keys for AWS Partner Central

Actions defined by AWS Partner Central

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

The Access level column of the Actions table describes how the action is classified (List, Read, Permissions management, or Tagging). This classification can help you understand the level of access that an action grants when you use it in a policy. For more information about access levels, see Access levels in policy summaries.

The Resource types column of the Actions table indicates whether each action supports resource-level permissions. If there is no value for this column, you must specify all resources ("*") to which the policy applies in the Resource element of your policy statement. If the column includes a resource type, then you can specify an ARN of that type in a statement with that action. If the action has one or more required resources, the caller must have permission to use the action with those resources. Required resources are indicated in the table with an asterisk (*). If you limit resource access with the Resource element in an IAM policy, you must include an ARN or pattern for each required resource type. Some actions support multiple resource types. If the resource type is optional (not indicated as required), then you can choose to use one of the optional resource types.

The Condition keys column of the Actions table includes keys that you can specify in a policy statement's Condition element. For more information on the condition keys that are associated with resources for the service, see the Condition keys column of the Resource types table.

The Dependent actions column of the Actions table shows additional permissions that may be required to successfully call an action. These permissions may be needed in addition to the permission for the action itself. When an action specifies dependent actions, those dependencies may apply to additional resources defined for that action, not only the first resource listed in the table.

Note

Resource condition keys are listed in the Resource types table. You can find a link to the resource type that applies to an action in the Resource types (*required) column of the Actions table. The resource type in the Resource types table includes the Condition keys column, which are the resource condition keys that apply to an action in the Actions table.

For details about the columns in the following table, see Actions table.

Actions	Description	Access level	Resource types (*required)	Condition keys	Dependent actions
AcceptChannelHandshake	Grants permission to accept channel handshakes in AWS Partner Central	Write	ChannelHandshake*
AcceptChannelHandshake		Write		partnercentral:Catalog partnercentral:ChannelHandshakeType
AcceptConnectionInvitation	Grants permission to accept connection invitations in AWS Partner Central	Write	ConnectionInvitation*
AcceptConnectionInvitation		Write		partnercentral:Catalog
AcceptEngagementInvitation	Grants permission to accept Engagement Invitations on AWS Partner Central	Write	engagement-invitation*
AcceptEngagementInvitation		Write		partnercentral:Catalog
AmendBenefitApplication	Grants permission to amend benefit applications in AWS Partner Central	Write	BenefitApplication*
AmendBenefitApplication		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
AssignOpportunity	Grants permission to assign Opportunities on AWS Partner Central	Write	Opportunity*
AssignOpportunity		Write		partnercentral:Catalog
AssociateAwsTrainingCertificationEmailDomain	Grants permission to associate AWS Training and Certification email domains in AWS Partner Central	Write	Partner*
AssociateAwsTrainingCertificationEmailDomain		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
AssociateBenefitApplicationResource	Grants permission to associate benefit application resources in AWS Partner Central	Write	BenefitAllocation*
			BenefitApplication*
			Opportunity*
				aws:ResourceTag/${TagKey} partnercentral:Catalog
AssociateOpportunity	Grants permission to associate Opportunities on AWS Partner Central with other entities	Write	Opportunity*
AssociateOpportunity		Write		partnercentral:Catalog partnercentral:RelatedEntityType
CancelBenefitApplication	Grants permission to cancel benefit applications in AWS Partner Central	Write	BenefitApplication*
CancelBenefitApplication		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
CancelChannelHandshake	Grants permission to cancel channel handshakes in AWS Partner Central	Write	ChannelHandshake*
CancelChannelHandshake		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog partnercentral:ChannelHandshakeType
CancelConnection	Grants permission to cancel connections in AWS Partner Central	Write	Connection*
CancelConnection		Write		partnercentral:Catalog
CancelConnectionInvitation	Grants permission to cancel connection invitations in AWS Partner Central	Write	ConnectionInvitation*
CancelConnectionInvitation		Write		partnercentral:Catalog
CancelProfileUpdateTask	Grants permission to cancel profile update tasks in AWS Partner Central	Write	Partner*
CancelProfileUpdateTask		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
CreateBenefitApplication	Grants permission to create benefit applications in AWS Partner Central	Write		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog partnercentral:FulfillmentTypes
CreateBusinessPlan [permission only]	Grants permission to create business plans in AWS Partner Central	Write
CreateChannelHandshake	Grants permission to create channel handshakes in AWS Partner Central	Write	ProgramManagementAccount
			Relationship
				aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog partnercentral:ChannelHandshakeType
CreateCollaborationChannelMembers [permission only]	Grants permission to create collaboration channel members in AWS Partner Central	Write
CreateCollaborationChannelRequest [permission only]	Grants permission to create collaboration channel requests in AWS Partner Central	Write
CreateConnectionInvitation	Grants permission to create connection invitations in AWS Partner Central	Write		partnercentral:Catalog
CreateEngagement	Grants permission to creating engagements in AWS Partner Central	Write	Engagement*
CreateEngagement		Write		partnercentral:Catalog
CreateEngagementContext	Grants permission to create engagement contexts in AWS Partner Central	Write	Engagement*
CreateEngagementContext		Write		partnercentral:Catalog
CreateEngagementInvitation	Grants permission to creating engagement invitations in AWS Partner Central	Write	engagement-invitation*
CreateEngagementInvitation		Write		partnercentral:Catalog
CreateOpportunity	Grants permission to create new Opportunities on AWS Partner Central	Write	Opportunity*
CreateOpportunity		Write		aws:RequestTag/${TagKey} aws:TagKeys partnercentral:Catalog
CreatePartner	Grants permission to create partners in AWS Partner Central	Write		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog
CreateProgramManagementAccount	Grants permission to create program management accounts in AWS Partner Central	Write		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog
CreateRelationship	Grants permission to create relationships in AWS Partner Central	Write	ProgramManagementAccount*
CreateRelationship		Write		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog
CreateResourceSnapshot	Grants permission to creating resource snapshots in AWS Partner Central	Write	ResourceSnapshot*
CreateResourceSnapshot		Write		partnercentral:Catalog
CreateResourceSnapshotJob	Grants permission to creating resource snapshot jobs in AWS Partner Central	Write	resource-snapshot-job*
CreateResourceSnapshotJob		Write		aws:RequestTag/${TagKey} aws:TagKeys partnercentral:Catalog
DeleteProgramManagementAccount	Grants permission to delete program management accounts in AWS Partner Central	Write	ProgramManagementAccount*
DeleteProgramManagementAccount		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
DeleteRelationship	Grants permission to delete relationships in AWS Partner Central	Write	Relationship*
DeleteRelationship		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
DeleteResourceSnapshotJob	Grants permission to deleting resource snapshot jobs on AWS Partner Central	Write	resource-snapshot-job*
DeleteResourceSnapshotJob		Write		partnercentral:Catalog
DisassociateAwsTrainingCertificationEmailDomain	Grants permission to disassociate AWS Training and Certification email domains in AWS Partner Central	Write	Partner*
DisassociateAwsTrainingCertificationEmailDomain		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
DisassociateBenefitApplicationResource	Grants permission to disassociate benefit application resources in AWS Partner Central	Write	BenefitAllocation*
			BenefitApplication*
			Opportunity*
				aws:ResourceTag/${TagKey} partnercentral:Catalog
DisassociateOpportunity	Grants permission to disassociate Opportunities on AWS Partner Central from other entities	Write	Opportunity*
DisassociateOpportunity		Write		partnercentral:Catalog partnercentral:RelatedEntityType
EnrollInPartnerPath [permission only]	Grants permission to enroll in partner paths in AWS Partner Central	Write
GetAllianceLeadContact	Grants permission to retrieve alliance lead contact information in AWS Partner Central	Read	Partner*
GetAllianceLeadContact		Read		aws:ResourceTag/${TagKey} partnercentral:Catalog
GetAwsOpportunitySummary	Grants permission to retrieve AWS Opportunity Summaries for Opportunities on AWS Partner Central	Read	Opportunity*
GetAwsOpportunitySummary		Read		partnercentral:Catalog
GetBenefit	Grants permission to retrieve benefit details in AWS Partner Central	Read	Benefit*
GetBenefit		Read		aws:ResourceTag/${TagKey} partnercentral:Catalog
GetBenefitAllocation	Grants permission to retrieve benefit allocation details in AWS Partner Central	Read	BenefitAllocation*
GetBenefitAllocation		Read		aws:ResourceTag/${TagKey} partnercentral:Catalog
GetBenefitApplication	Grants permission to retrieve benefit application details in AWS Partner Central	Read	BenefitApplication*
GetBenefitApplication		Read		aws:ResourceTag/${TagKey} partnercentral:Catalog
GetBusinessPlan [permission only]	Grants permission to retrieve business plan details in AWS Partner Central	Read
GetCollaborationChannel [permission only]	Grants permission to retrieve collaboration channel details in AWS Partner Central	Read
GetConnection	Grants permission to retrieve connection details in AWS Partner Central	Read	Connection*
GetConnection		Read		partnercentral:Catalog
GetConnectionInvitation	Grants permission to retrieve connection invitation details in AWS Partner Central	Read	ConnectionInvitation*
GetConnectionInvitation		Read		partnercentral:Catalog
GetConnectionPreferences	Grants permission to retrieve connection preferences in AWS Partner Central	Read		partnercentral:Catalog
GetEngagement	Grants permission to retrieval of engagement details in AWS Partner Central	Read	Engagement*
GetEngagement		Read		partnercentral:Catalog
GetEngagementInvitation	Grants permission to retrieve details of Engagement Invitations on AWS Partner Central	Read	engagement-invitation*
GetEngagementInvitation		Read		partnercentral:Catalog
GetOpportunity	Grants permission to retrieve details of Opportunities on AWS Partner Central	Read	Opportunity*
GetOpportunity		Read		partnercentral:Catalog
GetPartner	Grants permission to retrieve partner details in AWS Partner Central	Read	Partner*
GetPartner		Read		aws:ResourceTag/${TagKey} partnercentral:Catalog
GetPartnerDashboard	Grants permission to retrieve partner dashboard information in AWS Partner Central	Read	Dashboard*
GetPartnerDashboard		Read		partnercentral:Catalog
GetPartnerProfile [permission only]	Grants permission to retrieve public partner profile details in AWS Partner Central	Read
GetProfileUpdateTask	Grants permission to retrieve profile update task details in AWS Partner Central	Read	Partner*
GetProfileUpdateTask		Read		aws:ResourceTag/${TagKey} partnercentral:Catalog
GetProfileVisibility	Grants permission to retrieve profile visibility settings in AWS Partner Central	Read	Partner*
GetProfileVisibility		Read		aws:ResourceTag/${TagKey} partnercentral:Catalog
GetProgramManagementAccount [permission only]	Grants permission to retrieve program management account details in AWS Partner Central	Read		partnercentral:Catalog
GetRelationship	Grants permission to retrieve relationship details in AWS Partner Central	Read	Relationship*
GetRelationship		Read		aws:ResourceTag/${TagKey} partnercentral:Catalog
GetResourceSnapshot	Grants permission to retrieving resource snapshot details in AWS Partner Central	Read	ResourceSnapshot*
GetResourceSnapshot		Read		partnercentral:Catalog
GetResourceSnapshotJob	Grants permission to retrieving resource snapshot job details in AWS Partner Central	Read	resource-snapshot-job*
GetResourceSnapshotJob		Read		partnercentral:Catalog
GetSellingSystemSettings	Grants permission to retrieving selling system settings in AWS Partner Central	Read		partnercentral:Catalog
GetVerification	Grants permission to retrieve verification details in AWS Partner Central	Read		partnercentral:Catalog partnercentral:VerificationType
ListBenefitAllocations	Grants permission to list benefit allocations in AWS Partner Central	List	BenefitAllocation*
ListBenefitAllocations		List		partnercentral:Catalog partnercentral:FulfillmentTypes
ListBenefitApplications	Grants permission to list benefit applications in AWS Partner Central	List	BenefitApplication*
ListBenefitApplications		List		partnercentral:Catalog partnercentral:FulfillmentTypes partnercentral:Programs
ListBenefits	Grants permission to list benefits in AWS Partner Central	List	Benefit*
ListBenefits	Grants permission to list benefits in AWS Partner Central	List		partnercentral:Catalog partnercentral:FulfillmentTypes partnercentral:Programs
ListBusinessPlans [permission only]	Grants permission to list business plans in AWS Partner Central	List
ListChannelHandshakes	Grants permission to list channel handshakes in AWS Partner Central	List	ChannelHandshake*
ListChannelHandshakes		List		partnercentral:Catalog partnercentral:ChannelHandshakeType
ListCollaborationChannels [permission only]	Grants permission to list collaboration channels in AWS Partner Central	List
ListConnectionInvitations	Grants permission to list connection invitations in AWS Partner Central	List		partnercentral:Catalog
ListConnections	Grants permission to list connections in AWS Partner Central	List		partnercentral:Catalog
ListEngagementByAcceptingInvitationTasks	Grants permission to listing engagements by accepting invitation tasks in AWS Partner Central	List		partnercentral:Catalog
ListEngagementFromOpportunityTasks	Grants permission to listing engagements from opportunity tasks in AWS Partner Central	List		partnercentral:Catalog
ListEngagementInvitations	Grants permission to list Engagement Invitations on AWS Partner Central	List		partnercentral:Catalog
ListEngagementMembers	Grants permission to listing engagement members in AWS Partner Central	Read	Engagement*
ListEngagementMembers		Read		partnercentral:Catalog
ListEngagementResourceAssociations	Grants permission to listing engagement resource associations in AWS Partner Central	Read	ResourceSnapshot*
ListEngagementResourceAssociations		Read		partnercentral:Catalog
ListEngagements	Grants permission to listing engagements in AWS Partner Central	List		partnercentral:Catalog
ListOpportunities	Grants permission to list Opportunities on AWS Partner Central	List		partnercentral:Catalog
ListOpportunityFromEngagementTasks	Grants permission to list opportunity from engagement tasks in AWS Partner Central	List		partnercentral:Catalog
ListPartnerPaths [permission only]	Grants permission to list partner paths in AWS Partner Central	List
ListPartners	Grants permission to list partners in AWS Partner Central	List		partnercentral:Catalog
ListProgramManagementAccounts	Grants permission to list program management accounts in AWS Partner Central	List	ProgramManagementAccount*
ListProgramManagementAccounts		List		partnercentral:Catalog
ListRelationships	Grants permission to list relationships in AWS Partner Central	List	Relationship*
ListRelationships		List		partnercentral:Catalog
ListResourceSnapshotJobs	Grants permission to listing resource snapshot jobs in AWS Partner Central	List		partnercentral:Catalog
ListResourceSnapshots	Grants permission to listing resource snapshots in AWS Partner Central	List	ResourceSnapshot*
ListResourceSnapshots		List		partnercentral:Catalog
ListSolutions	Grants permission to list Solutions on AWS Partner Central	List		partnercentral:Catalog
ListTagsForResource	Grants permission to add lists tags to a resource. Supported resource: ResourceSnapshotJob	Read		aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog
PutAllianceLeadContact	Grants permission to set alliance lead contact information in AWS Partner Central	Write	Partner*
PutAllianceLeadContact		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
PutBusinessPlan [permission only]	Grants permission to update business plans in AWS Partner Central	Write
PutProfileVisibility	Grants permission to set profile visibility in AWS Partner Central	Write	Partner*
PutProfileVisibility		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
PutSellingSystemSettings	Grants permission to put selling system settings in AWS Partner Central	Write
RecallBenefitApplication	Grants permission to recall benefit applications in AWS Partner Central	Write	BenefitApplication*
RecallBenefitApplication		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
RejectChannelHandshake	Grants permission to reject channel handshakes in AWS Partner Central	Write	ChannelHandshake*
RejectChannelHandshake		Write		partnercentral:Catalog partnercentral:ChannelHandshakeType
RejectConnectionInvitation	Grants permission to reject connection invitations in AWS Partner Central	Write	ConnectionInvitation*
RejectConnectionInvitation		Write		partnercentral:Catalog
RejectEngagementInvitation	Grants permission to reject Engagement Invitations on AWS Partner Central	Write	engagement-invitation*
RejectEngagementInvitation		Write		partnercentral:Catalog
SearchPartnerProfiles [permission only]	Grants permission to search public partner profiles in AWS Partner Central	List
SendEmailVerificationCode	Grants permission to send email verification codes in AWS Partner Central	Write		partnercentral:Catalog
StartEngagementByAcceptingInvitationTask	Grants permission to initiate tasks that start Engagements on AWS Partner Central by accepting an Engagement Invitation	Write	engagement-by-accepting-invitation-task*		partnercentral:AcceptEngagementInvitation partnercentral:CreateOpportunity partnercentral:CreateResourceSnapshotJob partnercentral:GetEngagementInvitation partnercentral:StartResourceSnapshotJob partnercentral:SubmitOpportunity
StartEngagementByAcceptingInvitationTask		Write		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog
StartEngagementFromOpportunityTask	Grants permission to initiate tasks that start Engagements from Opportunities on AWS Partner Central	Write	engagement-from-opportunity-task*		partnercentral:CreateEngagement partnercentral:CreateEngagementInvitation partnercentral:CreateResourceSnapshotJob partnercentral:GetOpportunity partnercentral:StartResourceSnapshotJob partnercentral:SubmitOpportunity
StartEngagementFromOpportunityTask		Write		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog
StartOpportunityFromEngagementTask	Grants permission to initiate tasks that start Opportunities from Engagements on AWS Partner Central	Write	OpportunityFromEngagementTask*		partnercentral:CreateEngagementContext partnercentral:CreateOpportunity partnercentral:CreateResourceSnapshot partnercentral:CreateResourceSnapshotJob partnercentral:GetEngagement partnercentral:StartResourceSnapshotJob
StartOpportunityFromEngagementTask		Write		aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog
StartProfileUpdateTask	Grants permission to start profile update tasks in AWS Partner Central	Write	Partner*
StartProfileUpdateTask		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
StartResourceSnapshotJob	Grants permission to starting resource snapshot jobs in AWS Partner Central	Write	resource-snapshot-job*
StartResourceSnapshotJob		Write		partnercentral:Catalog
StartVerification	Grants permission to start verification processes in AWS Partner Central	Write		partnercentral:Catalog partnercentral:VerificationType
StopResourceSnapshotJob	Grants permission to stopping resource snapshot jobs in AWS Partner Central	Write	resource-snapshot-job*
StopResourceSnapshotJob		Write		partnercentral:Catalog
SubmitBenefitApplication	Grants permission to submit benefit applications in AWS Partner Central	Write	BenefitApplication*
SubmitBenefitApplication		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
SubmitOpportunity	Grants permission to submit Opportunities on AWS Partner Central	Write	Opportunity*
SubmitOpportunity		Write		partnercentral:Catalog
TagResource	Grants permission to add new tags to a resource. Supported resource: ResourceSnapshotJob	Tagging	BenefitApplication
			ChannelHandshake
			Opportunity
			Partner
			ProgramManagementAccount
			Relationship
			resource-snapshot-job
				aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog
UntagResource	Grants permission to remove tags from a resource. Supported resource: ResourceSnapshotJob	Tagging	BenefitApplication
			ChannelHandshake
			Opportunity
			Partner
			ProgramManagementAccount
			Relationship
			resource-snapshot-job
				aws:ResourceTag/${TagKey} aws:TagKeys partnercentral:Catalog
UpdateBenefitApplication	Grants permission to update benefit applications in AWS Partner Central	Write	BenefitApplication*
UpdateBenefitApplication		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
UpdateConnectionPreferences	Grants permission to update connection preferences in AWS Partner Central	Write		partnercentral:Catalog
UpdateEngagementContext	Grants permission to update engagement contexts in AWS Partner Central	Write	Engagement*
UpdateEngagementContext		Write		partnercentral:Catalog
UpdateOpportunity	Grants permission to update Opportunities on AWS Partner Central	Write	Opportunity*
UpdateOpportunity		Write		partnercentral:Catalog
UpdateProgramManagementAccount	Grants permission to update program management accounts in AWS Partner Central	Write	ProgramManagementAccount*
UpdateProgramManagementAccount		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog
UpdateRelationship	Grants permission to update relationships in AWS Partner Central	Write	Relationship*
UpdateRelationship		Write		aws:ResourceTag/${TagKey} partnercentral:Catalog

Resource types defined by AWS Partner Central

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements. Each action in the Actions table identifies the resource types that can be specified with that action. A resource type can also define which condition keys you can include in a policy. These keys are displayed in the last column of the Resource types table. For details about the columns in the following table, see Resource types table.

Resource types	ARN	Condition keys
Engagement	`arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement/${Identifier}`
engagement-by-accepting-invitation-task	`arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement-by-accepting-invitation-task/${TaskId}`
engagement-from-opportunity-task	`arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement-from-opportunity-task/${TaskId}`
engagement-invitation	`arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/engagement-invitation/${Identifier}`
Opportunity	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/opportunity/${Identifier}`	aws:ResourceTag/${TagKey}
resource-snapshot-job	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/resource-snapshot-job/${Identifier}`	aws:ResourceTag/${TagKey}
ResourceSnapshot	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/engagement/${EngagementIdentifier}/resource/${ResourceType}/${ResourceIdentifier}/template/${TemplateIdentifier}/resource-snapshot/${SnapshotRevision}`
Solution	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/solution/${Identifier}`
Partner	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/partner/${Identifier}`	aws:ResourceTag/${TagKey}
Connection	`arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/connection/${Identifier}`
ConnectionInvitation	`arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/connection-invitation/${Identifier}`
ConnectionPreferences	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/connection-preferences`
OpportunityFromEngagementTask	`arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/opportunity-from-engagement-task/${TaskId}`
Benefit	`arn:${Partition}:partnercentral:${Region}::catalog/${Catalog}/benefit/${Identifier}`
BenefitAllocation	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/benefit-allocation/${Identifier}`
BenefitApplication	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/benefit-application/${Identifier}`	aws:ResourceTag/${TagKey}
ProgramManagementAccount	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/program-management-account/${Identifier}`	aws:ResourceTag/${TagKey}
Relationship	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/program-management-account/${ProgramManagementAccountId}/relationship/${RelationshipId}`	aws:ResourceTag/${TagKey}
ChannelHandshake	`arn:${Partition}:partnercentral:${Region}:${Account}:catalog/${Catalog}/channel-handshake/${Identifier}`	aws:ResourceTag/${TagKey}
Dashboard	`arn:${Partition}:partnercentral::${Account}:catalog/${Catalog}/ReportingData/${TableId}/Dashboard/${DashboardId}`

Condition keys for AWS Partner Central

AWS Partner Central defines the following condition keys that can be used in the Condition element of an IAM policy. You can use these keys to further refine the conditions under which the policy statement applies. For details about the columns in the following table, see Condition keys table.

To view the global condition keys that are available to all services, see AWS global condition context keys.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags that are passed in the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString
partnercentral:Catalog	Filters access by a specific Catalog	String
partnercentral:ChannelHandshakeType	Filters access by channel handshake types	String
partnercentral:FulfillmentTypes	Filters access by benefit fulfillment types	ArrayOfString
partnercentral:Programs	Filters access by program	ArrayOfString
partnercentral:RelatedEntityType	Filters access by entity types for Opportunity association	String
partnercentral:VerificationType	Filters access by the type of verification being performed	String

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

AWS Parallel Computing Service

AWS Partner central account management