View a markdown version of this page

AWS Marketplace 報告 API 的存取控制 - AWS Marketplace

AWS Marketplace API 參考已重組。如需支援的 API 操作的詳細資訊，請參閱 AWS Marketplace API 參考。

本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

AWS Marketplace 報告 API 的存取控制

您可以使用 AWS Marketplace 報告 API 來取得採購洞察儀表板。API 支援 GetBuyerDashboard動作。

若要使用 API，您必須先建立AWSServiceRoleForProcurementInsightsPolicy服務連結角色。角色會執行下列動作：

  • AWS Marketplace 可讓 存取和描述買方組織中所有帳戶的資料。

  • 取得採購洞察儀表板

  • 可讓您註冊和取消註冊委派管理員

買方使用 AWS Marketplace 主控台啟用對採購洞察儀表板的信任存取時，會建立角色。如需該程序的詳細資訊，請參閱《 AWS Marketplace 買方指南》中的啟用儀表板。

重要

AWSServiceRoleForProcurementInsightsPolicy 必須有下列 IAM 許可，才能呼叫 GetBuyerDashboard動作，以及註冊和取消註冊委派管理員：

JSON
{
    "Version":"2012-10-17",
    "Statement": [{
            "Sid": "CreateServiceLinkedRoleForProcurementInsights",
            "Effect": "Allow",
            "Action": "iam:CreateServiceLinkedRole",
            "Resource": "arn:aws:iam::*:role/aws-service-role/procurement-insights.marketplace.amazonaws.com/AWSServiceRoleForProcurementInsights*",
            "Condition": {
                "StringLike": {
                    "iam:AWSServiceName": "procurement-insights.marketplace.amazonaws.com"
                }
            }
        },
        {
            "Sid": "EnableAWSServiceAccessForProcurementInsights",
            "Effect": "Allow",
            "Action": [
                "organizations:EnableAWSServiceAccess"
            ],
            "Resource": "*",
            "Condition": {
                "StringLike": {
                    "organizations:ServicePrincipal": "procurement-insights.marketplace.amazonaws.com"
                }
            }
        },
        {
            "Sid": "ManageDelegatedAdministrators",
            "Effect": "Allow",
            "Action": [
                "organizations:ListDelegatedAdministrators",
                "organizations:DeregisterDelegatedAdministrator",
                "organizations:RegisterDelegatedAdministrator"
            ],
            "Resource": "*",
            "Condition": {
                "StringLike": {
                    "organizations:ServicePrincipal": "procurement-insights.marketplace.amazonaws.com"
                }
            }
        },
        {
            "Sid": "GetBuyerDashboardStatement",
            "Effect": "Allow",
            "Action": "aws-marketplace:GetBuyerDashboard",
            "Resource": "*"
        },
        {
            "Sid": "ViewOrganizationDetails",
            "Effect": "Allow",
            "Action": [
                "organizations:DescribeOrganization",
                "organizations:ListAWSServiceAccessForOrganization"
            ],
            "Resource": "*"
        }
    ]
}

如需建立政策的詳細資訊，請參閱《IAM 使用者指南》中的 AWS Identity and Access Management 中的政策和許可。

如需政策使用之 AWS Organizations 動作的詳細資訊，請參閱 AWS Organizations API 參考。