• 沒有找到結果。

AWS Marketplace

N/A
N/A
Protected

Academic year: 2022

Share "AWS Marketplace"

Copied!
107
0
0

加載中.... (立即查看全文)

全文

(1)

AWS Marketplace

Buyer Guide

(2)

AWS Marketplace: Buyer Guide

Copyright © Amazon Web Services, Inc. and/or its affiliates. All rights reserved.

Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by Amazon.

(3)

Table of Contents

What is AWS Marketplace? ... 1

Using AWS Marketplace as a buyer ... 1

Software and services on AWS Marketplace ... 2

Differences between AWS Marketplace and Amazon DevPay ... 4

Getting started as a buyer ... 5

Buying products ... 5

Launching software ... 5

Tutorial: Buying an AMI-based software product ... 6

Step 1: Creating an AWS account ... 6

Step 2: Choosing your software  ... 6

Step 3: Configuring your software ... 7

Step 4: Launching your software on Amazon EC2 ... 8

Step 5: Managing your software ... 8

Step 6: Terminating your instance ... 9

For more information ... 9

Supported Regions ... 10

Product categories ... 11

Infrastructure Software ... 11

DevOps ... 12

Business Applications ... 12

Machine Learning ... 13

IoT ... 14

Professional Services ... 14

Desktop applications ... 15

Data Products ... 16

Industries ... 16

Product types ... 17

AMI-based server products ... 17

AWS CloudFormation template ... 17

AMI subscriptions ... 18

AMI products with contract pricing ... 18

Metering-enabled AMI products ... 21

Cost allocation tagging in AMI products ... 21

Private image build ... 23

Using AMI aliases ... 30

Container products ... 31

Pricing models for paid container products ... 32

Overview of containers and Kubernetes ... 32

Finding and subscribing to container products ... 32

Container products with contract pricing ... 35

Launching container software ... 37

Desktop products ... 40

Machine learning products ... 40

Find, subscribe, and deploy ... 41

Professional services products ... 41

Purchasing professional services ... 42

SaaS products ... 42

SaaS subscriptions ... 42

SaaS contracts ... 42

Data products ... 43

Paying for products ... 44

Specifying purchase order numbers for SaaS contract products ... 44

Troubleshooting purchase orders ... 45

Information about refunds ... 46

(4)

Changing your preferred currency ... 47

Updating remittance instructions ... 47

Cost allocation tagging ... 49

Vendor-metered tags ... 49

Related topics ... 23

Private marketplaces ... 51

Viewing product detail pages ... 51

Subscribing to a product in a private marketplace ... 51

Subscribing to a private product in a private marketplace ... 52

Requesting a product be added to your private marketplace ... 52

Creating and managing a private marketplace ... 52

Creating a private marketplace experience ... 52

Adding products to your private marketplace experience ... 53

Verifying products in your private marketplace experience ... 53

Customizing your private marketplace experience ... 53

Adding accounts to the private marketplace experience ... 54

Configuring your private marketplace ... 54

Working with private products ... 55

Managing user requests ... 55

Managing notifications for software requests ... 55

Opting out of end user notifications ... 55

Private offers ... 56

Product types eligible for private offers ... 57

Preparing to accept a private offer ... 58

Verifying your AWS Billing and Cost Management preferences ... 58

Verifying your payment method ... 58

Verifying your tax settings ... 58

Viewing and subscribing to a private offer ... 59

Subscribing to a SaaS private offer ... 59

Subscribing to an AMI private offer ... 62

Subscribing to an AMI private offer ... 63

Subscribing to an annual AMI private offer ... 64

Subscribing to a custom duration or multi-year AMI private offer ... 64

Modifying or unsubscribing from a private offer ... 65

Changing from public to private offer pricing ... 65

Changing SaaS dimensions or adding more users ... 65

Changing from a SaaS subscription to a SaaS contract ... 65

Changing from an existing SaaS or AMI contract to a new contract ... 66

Changing from AMI hourly to AMI annual ... 66

Changing from AMI annual to AMI hourly ... 66

Sharing subscriptions in an organization ... 67

Prerequisites for license sharing ... 67

Viewing and sharing your licenses ... 67

Procurement system integration ... 69

How procurement integration works ... 69

Setting up procurement system integration ... 71

Configuring IAM permissions ... 71

Configuring AWS Marketplace to integrate with Coupa ... 71

Configuring AWS Marketplace to integrate with SAP Ariba ... 72

UNSPSC codes used by AWS Marketplace ... 73

Disabling procurement system integration ... 74

Free trials ... 75

Using AWS free usage tier with AWS Marketplace ... 76

Adding AWS Marketplace subscriptions to AWS Service Catalog ... 77

Product reviews ... 78

Guidelines ... 78

Restrictions ... 78

(5)

Getting support ... 80

Security on AWS Marketplace ... 81

Subscriber information shared with sellers ... 81

Control access to subscriptions ... 81

Working with subscriptions ... 81

Controlling access to AWS Marketplace subscriptions ... 82

Creating users ... 82

Creating groups for AWS Marketplace access and adding users to the groups ... 82

AWS managed policies for AWS Marketplace ... 83

Permissions for working with License Manager ... 83

Additional resources ... 83

AWS managed policies ... 83

AWSMarketplaceFullAccess ... 84

AWSMarketplaceImageBuildFullAccess ... 86

AWSMarketplaceLicenseManagementServiceRolePolicy ... 89

AWSMarketplaceManageSubscriptions ... 90

AWSMarketplaceProcurementSystemAdminFullAccess ... 90

AWSMarketplaceRead-only ... 91

AWSPrivateMarketplaceAdminFullAccess ... 91

AWSPrivateMarketplaceRequests ... 92

Policy updates ... 93

Signing in as an IAM user ... 93

Finding the account number for customer support ... 94

Using service-linked roles ... 94

Roles to share entitlements ... 94

Roles for purchase orders ... 96

Creating a private marketplace administrator ... 98

Document history ... 99

AWS glossary ... 102

(6)

Using AWS Marketplace as a buyer

What is AWS Marketplace?

AWS Marketplace is a curated digital catalog that you can use to find, buy, deploy, and manage third-party software, data, and services that you need to build solutions and run your businesses.

AWS Marketplace includes thousands of software listings from popular categories such as security, networking, storage, machine learning, IoT, business intelligence, database, and DevOps. AWS Marketplace also simplifies software licensing and procurement with flexible pricing options and

multiple deployment methods. In addition, AWS Marketplace includes data products available from AWS Data Exchange.

You can quickly launch pre-configured software with just a few clicks, and choose software solutions in Amazon Machine Images (AMIs) and software as a service (SaaS) formats, as well as other formats.

Additionally, you can browse and subscribe to data products. Flexible pricing options include free trial, hourly, monthly, annual, multi-year, and a Bring Your Own License (BYOL) model. All of these pricing options are billed from one source. AWS handles billing and payments, and charges appear on your AWS bill.

You can use AWS Marketplace as a buyer (subscriber) or as a seller (provider), or both. Anyone with an AWS account can use AWS Marketplace as a consumer and can register to become a seller. A seller can be an independent software vendor (ISV), value-added reseller, or individual that has something to offer that works with AWS products and services.

NoteData product providers need to meet the AWS Data Exchange eligibility requirements. For more information, see Providing Data Products on AWS Data Exchange in the AWS Data Exchange User Guide.

Every software product in AWS Marketplace has been through a curation process. On the product page, there can be one or more offerings for the product. When the seller submits a product in AWS Marketplace, they define the price of the product, and the terms and conditions of use. Buyers agree to the pricing, and terms and conditions set for the offer.

The product can be free to use or can have an associated charge. The charge becomes part of your AWS bill, and after you pay, AWS Marketplace pays the seller.

NoteWhen buying from some non-US sellers, you may also receive a tax invoice from the seller. For more information, see AWS Marketplace Sellers on Amazon Web Service Tax Help.

Products can take many forms. For instance, a product can be offered as an Amazon Machine Image (AMI) that is instantiated using your AWS account. The product could also be configured to use AWS CloudFormation templates for delivery to the consumer. The product could also be software as a service (SaaS) offerings from an ISV, or a web ACL, set of rules, or conditions for AWS WAF.

You can purchase software products at the listed price using the ISV’s standard end user license

agreement (EULA) or from a private offer with custom pricing and EULA. You can also purchase products under a contract with specified time or usage boundaries. Once the product subscriptions are in place, you can copy the product to your AWS Service Catalog to manage how the product is accessed and used in your organization.

Using AWS Marketplace as a buyer

As a buyer, you go to AWS Marketplace to search, filter, and navigate to a product that runs on Amazon Web Services. You can also find AWS Marketplace products on Deloitte and DLT.

(7)

Software and services on AWS Marketplace

When you choose a software product, you are taken to the product’s page. The page has information about the product, pricing, usage, support, and product reviews. To subscribe to the software product, you sign in to your AWS account and are taken to a subscription page that has the EULA, terms and conditions of usage, and any options available for customizing your subscription.

AWS Marketplace purchases made by your accounts based in Europe, the Middle East, and Africa (excluding Turkey and South Africa) from EMEA-eligible sellers are facilitated by Amazon Web Services EMEA SARL.

For customers in certain countries, Amazon Web Services EMEA SARL charges local value-added tax (VAT) on your AWS Marketplace purchases. For more information about taxes, see the AWS Marketplace Buyers Tax help page.

For more information about Amazon Web Services EMEA SARL, see the Amazon Web Services EMEA SARL FAQs.

Customers who transact with EMEA-eligible sellers receive an invoice from Amazon Web Services EMEA SARL. All other transactions continue to go through AWS Inc.For more information, see Paying for products.

TipNote the following tips about license terms and contracts:

• Many sellers offer the same standardized license terms on their listings, the Standard Contract for AWS Marketplace (SCMP). Instead of reviewing custom EULAs for each purchase, you only need to review the SCMP once. The license terms are the same for all products that use the SCMP. To find product listings that offer standardized license terms, use the Standard Contract filter when searching for products.

• The Enterprise Contract for AWS Marketplace (ECMP) offers standardized license terms that address the unique requirements of large enterprise and regulated buyers.

To learn more, see Standardized License Terms.

After the subscription is processed, you can configure fulfillment options, software versions, and AWS Regions where you want to use the product, and then launch the software product. You can also find or launch your products by visiting Your Marketplace Software on the AWS Marketplace website, from your AWS Marketplace or Amazon Elastic Compute Cloud (Amazon EC2) console, or through the AWS Service Catalog.

For more information about product categories available using AWS Marketplace, see Product categories (p. 11).

For more information about delivery methods for software products on AWS Marketplace, see:

• AMI-based server products (p. 17)

• Container products (p. 31)

• Desktop products (p. 40)

• Machine learning products (p. 40)

• Professional services products (p. 41)

• SaaS products (p. 42)

• Data products – See What is AWS Data Exchange? in the AWS Data Exchange User Guide

Software and services on AWS Marketplace

AWS Marketplace features many software categories including databases, application servers, testing tools, monitoring tools, content management, and business intelligence. You can select commercial

(8)

Software and services on AWS Marketplace

software from well-known sellers, as well as many widely used open source offerings. When you find products you want, you can buy and deploy that software to your own Amazon EC2 instance with 1-Click.

You can also use AWS CloudFormation to deploy a topology of the product.

Any AWS customer can shop on AWS Marketplace. Software prices and estimated infrastructure prices are displayed on the website. You can purchase most software immediately, using payment instruments already on file with AWS. Software charges appear on the same monthly bill as AWS infrastructure charges.

Notes

• Many business products are available in the AWS Marketplace, including both software as a service (SaaS) and server-based products. The server-based products might require technical knowledge or IT support to set up and maintain.

• The information and tutorials in Tutorial: Get started with Amazon EC2 Linux instances can help you learn Amazon EC2 basics.

• If you plan to launch complex topologies of AWS Marketplace products through AWS CloudFormation, Getting started with AWS CloudFormation can help you learn useful AWS CloudFormation basics.

AWS Marketplace includes the following categories of software:

• Infrastructure software

• Developer tools

• Business software

• Machine learning

• IoT

• Professional services

• Desktop Applications

• Data products

For more information, see Product categories (p. 11).

Each major software category contains more specific subcategories. For example, the Infrastructure software category contains subcategories such as Application Development, Databases & Caching, and Operating Systems. Software is available as one of seven different product types, including Amazon Machine Images (AMIs) and software as a service (SaaS). For information about the different software types, see Product types (p. 17).

To aid you in choosing the software you need, AWS Marketplace provides the following information:

• Seller details

• Software version

• Type of software (AMI or SaaS), and information about the AMI if applicable

• Buyer rating

• Price

• Product information

(9)

Differences between AWS Marketplace and Amazon DevPay

Differences between AWS Marketplace and Amazon DevPay

There are substantial differences between AWS Marketplace and Amazon DevPay. Both help customers buy software that runs on AWS, but AWS Marketplace offers a more comprehensive experience than Amazon DevPay. For software buyers, the key differences are the following:

• AWS Marketplace offers a shopping experience more like Amazon.com, simplifying discovery of available software.

• AWS Marketplace products work with other AWS features such as virtual private cloud (VPC) and can be run on Amazon Elastic Compute Cloud (Amazon EC2) Reserved Instances and Spot Instances, in addition to On-Demand Instances.

• AWS Marketplace supports software backed by Amazon Elastic Block Store (Amazon EBS), and Amazon DevPay does not.

Additionally, software sellers benefit from the marketing outreach and ease of discovery of AWS Marketplace.

(10)

Buying products

Getting started as a buyer

The following topics outline the process of getting started with software products as an AWS Marketplace buyer.

Topics

• Buying products (p. 5)

• Launching software (p. 5)

• Tutorial: Buying an AMI-based software product (p. 6)

• For more information (p. 9)

For information about getting started with data products, see Subscribing to data products on AWS Data Exchange in the AWS Data Exchange User Guide.

Buying products

In AWS Marketplace, buying a product means that you have accepted the terms of the product as shown on the product’s listing page. This includes pricing terms and the seller’s end user license agreement (EULA), and that you agree to use such product in accordance with the AWS Customer Agreement.

If the product has a monthly fee or is purchased with a subscription contract, you are charged the fee upon subscription. The subscription is prorated based on the time remaining in the month. No other charges are assessed until you take one of the following actions:

• Launch an Amazon Elastic Compute Cloud (Amazon EC2) instance with the product Amazon Machine Image (AMI).

• Deploy the product using an AWS CloudFormation template.

• Register the product on the seller's website.

If the product has an annual subscription option, you are charged the full annual fee upon subscription.

This charge covers product usage base, with subscription renewal due on the anniversary of the original subscription date. If you don't renew at the end of the annual subscription period, the subscription converts to an hourly subscription at the current hourly rate.

For more information about data product subscriptions, see Subscribing to data products on AWS Data Exchange in the AWS Data Exchange User Guide.

Launching software

After buying software, you can launch Amazon Machine Images (AMIs) that contain it by using the 1- Click Launch view in AWS Marketplace. You can also launch it using other Amazon Web Services (AWS) management tools, including the AWS Management Console, the Amazon Elastic Compute Cloud (Amazon EC2) console, Amazon EC2 APIs, or the AWS CloudFormation console.

With the 1-Click Launch view, you can quickly review, modify, and then launch a single instance of the software with settings recommended by the software seller. The Launch with EC2 Console view provides

(11)

Tutorial: Buying an AMI-based software product

an easy way to find the AMI identification number and other pertinent information that is required to launch the AMI using the AWS Management Console, Amazon EC2 APIs, or other management tools.

For AWS Marketplace products with complex topologies, the Custom Launch view provides a Launch with CloudFormation Console option that loads the product in the AWS CloudFormation console with the appropriate AWS CloudFormation template. You can then follow the steps in the AWS CloudFormation console wizard to create the cluster of AMIs and associated AWS resources for that product.

Tutorial: Buying an AMI-based software product

The following tutorial describes how to buy an Amazon Machine Image (AMI) product with AWS Marketplace.

Steps

• Step 1: Creating an AWS account (p. 6)

• Step 2: Choosing your software  (p. 6)

• Step 3: Configuring your software (p. 7)

• Step 4: Launching your software on Amazon EC2 (p. 8)

• Step 5: Managing your software (p. 8)

• Step 6: Terminating your instance (p. 9)

Step 1: Creating an AWS account

You can browse the AWS Marketplace website (https://aws.amazon.com/marketplace) without being signed in to your AWS account. However, you must sign in to subscribe to or launch products.

You must be signed in to your AWS account to access the AWS Marketplace console.

To create an AWS account

1. Open https://portal.aws.amazon.com/billing/signup.

2. From the Sign In or Create an Account page, choose Create a New Account.

3. Follow the on-screen instructions. As part of the sign-in procedure, you will receive a phone call and you must enter a PIN using your phone keypad.

NoteWhen you create an account, AWS automatically signs up the account for all AWS services.

You are charged only for the services you use.

Step 2: Choosing your software 

To choose your software

1. Navigate to the AWS Marketplace website.

Note

You can shop, subscribe, and launch new instances from either the public AWS Marketplace website, at https://aws.amazon.com/marketplace, or through AWS Marketplace in the AWS Management Console, at https://console.aws.amazon.com/marketplace/home#/

subscriptions.

(12)

Step 3: Configuring your software

The experiences across the two locations are similar. This procedure uses the AWS Marketplace website but notes any major differences when using the console.

2. The Shop All Categories pane contains the list of categories you can choose from. You can also choose software featured in the middle pane. For this tutorial, in the Shop All Categories pane, choose Content Management.

3. From the Content Management list, choose WordPress Certified by Bitnami and Automattic.

4. On the product details page, review the product information. The product details page includes additional information such as:

• Buyer rating

• Support offering

• Highlights

• Detailed product description

• Pricing details for instance types in each AWS Region (for AMIs)

• Additional resources to help you get started 5. Choose Continue to Subscribe.

6. If you aren't already signed in, you are directed to sign in to AWS Marketplace. If you already have an AWS account, you can use that account to sign in. If you don't already have an AWS account, see Step 1: Creating an AWS account (p. 6).

7. Read the Bitnami offer terms, then choose Accept Terms to agree to the subscription offer.

8. It may take a moment for the subscription action to complete. When it does, you receive an email message about the subscription terms, and then you're able to continue. Choose Continue to Configuration to configure and launch your software.

Subscribing to a product means that you have accepted the terms of the product. If the product has a monthly fee, then upon subscription you are charged the fee, which is prorated based on the time remaining in the month. No other charges will be assessed until you launch an Amazon Elastic Compute Cloud (Amazon EC2) instance with the AMI you chose.

NoteAs a subscriber to a product, your account will receive email messages when a new version of the software you're subscribed to is published.

Step 3: Configuring your software

Because we chose software as an AMI, your next step is to configure the software, including selecting the delivery method, version, and AWS Region in which you want to use the software.

To configure your software

1. On the Configure this software page, select 64-bit (x86) Amazon Machine Image (AMI) for the Delivery Method.

2. Choose the latest version available for Software Version.

3. Choose the Region you want to launch the product in, for example, US East (N. Virginia).

NoteAs you make changes to your configuration, you might notice that the Ami Id at the bottom of the screen updates. The AMI ID has the form ami-<identifier>, for example, ami-123example456. Each version of each product in each Region has a different AMI.

This AMI ID allows you to specify the correct AMI to use when launching the product. The Ami Alias is a similar ID that is easier to use in automation.

For more information about the AMI alias, see Using AMI aliases (p. 30).

4. Select Continue to Launch.

(13)

Step 4: Launching your software on Amazon EC2

Step 4: Launching your software on Amazon EC2

Before you launch your Amazon EC2 instance, you need to decide if you want to launch with 1-Click launch or if you want to launch using the Amazon EC2 Console. 1-Click launch helps you launch quickly with recommended default options such as security groups and instance types. With 1-Click launch, you can also see your estimated monthly bill. If you prefer more options, such as launching in an Amazon Virtual Private Cloud (Amazon VPC) or using Spot Instances, then you should launch using the Amazon EC2 Console. The following procedures walk you through subscribing to the product and launching an EC2 instance using either 1-Click launch or the Amazon EC2 Console.

Launching on Amazon EC2 using 1-Click launch

To launch on Amazon EC2 using 1-Click launch

1. On the Launch this software page, choose Launch from website in the Choose Action dropdown, and review the default settings. If you want to change any of them, do the following:

• In the EC2 Instance Type dropdown list, choose an instance type.

• In the VPC Settings and Subnet Settings dropdown lists, select the network settings you want to use.

• In the Security Group Settings, choose an existing security group, or choose Create New Based On Seller Settings to accept the default settings. For more information about security groups, see Amazon EC2 security groups for Linux instances in the Amazon EC2 User Guide for Linux Instances.

• Expand Key Pair, and choose an existing key pair if you have one. If you don't have a key pair, you're prompted to create one. For more information about Amazon EC2 key pairs, see Amazon EC2 key pairs.

2. When you're satisfied with your settings, choose Launch.

Your new instance is launched with the WordPress Certified by Bitnami and Automattic software running on it. From here, you can view the instance details, create another instance, or view all instances of your software.

Launching on Amazon EC2 Using Launch with EC2 Console

To launch on Amazon EC2 Using Launch with EC2 Console

1. On the Launch on EC2 page, choose the Launch with EC2 Console view, and then select an AMI version from the Select a Version list.

2. Review the Firewall Settings, Installation Instructions, and Release Notes, and then choose Launch with EC2 Console.

3. In the EC2 console, launch your AMI using the Request Instance Wizard. Follow the instructions in Get started with Amazon EC2 Linux instances to navigate through the wizard.

Step 5: Managing your software

At any time, you can manage your software subscriptions in AWS Marketplace by using the Manage Subscriptions page of the AWS Marketplace console.

To manage your software

1. Navigate to the AWS Marketplace console, and choose Manage subscriptions.

2. On the Manage subscriptions page:

(14)

Step 6: Terminating your instance

• View your instance status by product

• View your current monthly charges

• Run a new instance

• View seller profiles for your instance

• Manage your instances

• Link directly to your Amazon EC2 instance so you can configure your software

Step 6: Terminating your instance

When you've decided that you no longer need the instance, you can terminate it.

NoteYou can't restart a terminated instance. However, you can launch additional instances of the same AMI.

To terminate your instance

1. Navigate to the AWS Marketplace console, and choose Manage subscriptions.

2. On the Manage subscriptions page, choose the software subscription that you want to terminate an instance of, and select Manage.

3. On the specific subscription page, choose View instances from the Actions dropdown list.

4. Select the Region that the instance you want to terminate is in. This opens the Amazon EC2 Console and shows the instances in that Region in a new tab. If necessary, you can return to this tab to see the Instance ID for the instance to close.

5. In the Amazon EC2 Console, choose the Instance ID to open the Instance details page.

6. From the Instance state dropdown list, choose Terminate instance.

7. Choose Terminate when prompted for confirmation.

Termination takes a few minutes to complete.

For more information

For more information about product categories and types, see Product categories (p. 11) and Product types (p. 17).

For more information about Amazon EC2, see the service documentation at Amazon Elastic Compute Cloud Documentation.

To learn more about AWS, see https://aws.amazon.com/.

(15)

Supported Regions

For software products, the seller chooses which AWS Regions to make their software available in, as well as the instance types. We encourage making products available in all available Regions and on all instance types that make sense. The AWS Marketplace website is available worldwide and supports the following Regions:

• North America

• US East (Ohio)

• US East (N. Virginia)

• US West (N. California)

• US West (Oregon)

• AWS GovCloud (US-East)

• AWS GovCloud (US-West)

• Canada (Central)

• Africa

• Africa (Cape Town)

• South America

• South America (São Paulo)

• EMEA

• Europe (Frankfurt)

• Europe (Ireland)

• Europe (London)

• Europe (Milan)

• Europe (Paris)

• Europe (Stockholm)

• APAC

• Asia Pacific (Singapore)

• Asia Pacific (Sydney)

• Asia Pacific (Mumbai)

• Asia Pacific (Tokyo)

• Asia Pacific (Seoul)

• Asia Pacific (Hong Kong)

• Asia Pacific (Osaka)

• Asia Pacific (Jakarta)

• Middle East

• Middle East (Bahrain)

For more information about supported Regions for data products, see AWS Data Exchange endpoints and quotas in the AWS General Reference.

(16)

Infrastructure Software

Product categories

The AWS Marketplace website is organized into primary categories, with subcategories under each. You can search and filter based on the categories and subcategories.

Topics

• Infrastructure Software (p. 11)

• DevOps (p. 12)

• Business Applications (p. 12)

• Machine Learning (p. 13)

• IoT (p. 14)

• Professional Services (p. 14)

• Desktop applications (p. 15)

• Data Products (p. 16)

• Industries (p. 16)

Infrastructure Software

The products in this category provide infrastructure-related solutions.

Backup and Recovery

Products used for storage and backup solutions.

Data Analytics

Products used for data analysis.

Security

Security products for your infrastructure.

High Performance Computing

High performance computing products.

Migration

Products used for migration projects.

Network Infrastructure

Products used to create networking solutions.

Operating Systems

Packaged Linux and Windows operating systems.

Security

Security products for your infrastructure.

Storage

Applications focused on job roles involved in storage.

(17)

DevOps

DevOps

The products in this category provide tools focused on developers and developer teams.

Application Development

Products used for application development.

Application Servers

Servers used for application development.

Application Stacks

Stacks used for application development.

Continuous Integration and Continuous Delivery Products used for CI/CD.

Infrastructure as Code

Products used for infrastructure.

Testing

Products used for testing.

Agile Lifecycle Management Products used for Agile SDLM.

Issues & Bug Tracking

Products used by developer teams to track and manage software bugs.

Monitoring

Products used for monitoring operating software.

Log Analysis

Products used for logging and log analysis.

Source Control

Tools used to manage and maintain source control.

Testing

Products used for automated testing of software products.

Business Applications

The products in this category help you run your business.

IT Business Management

Products used for enabling IT business management in your organization.

Contact Center

Products used for enabling Contact Centers in your organization.

Blockchain

Products used for blockchain.

(18)

Machine Learning

Human Resources

Products used for enabling Human Resources in your organization.

Business Intelligence

Products used for enabling business intelligence in your organization.

Collaboration & Productivity

Products used to enable collaboration in your business.

Content Management

Products focused on content management.

CRM

Tools focused on customer relationship management.

ecommerce

Products that provide ecommerce solutions.

eLearning

Products that provide eLearning solutions.

Project Management

Tools for project management.

Machine Learning

The products in this category provide machine learning algorithms and model packages that work with Amazon SageMaker.

ML Solutions

Machine learning solutions.

Data Labeling Services

Products that provide data labeling capability.

Computer Vision

Products that enable computer vision capability.

Natural Language Processing

Products that enable natural language processing capability.

Speech Recognition

Products that enable speech recognition capability.

Text

Products that enable text learning capability. Examples include classification, clustering, edit/

processing, embedding, generation, grammar/parsing, identification, names and entity recognition, sentiment analysis, summarization, text-to-speech, and translation.

Image

Products that enable image analysis capability. Examples include 3D, captioning, classification, edit/

processing, embedding/feature extraction, generation, grammar/parsing, handwriting recognition, human/faces, object detection, segmentation/pixel labeling, and text/OCR.

(19)

IoT

Video

Products that enable video analysis capability. Examples include classification, object detection, edit/processing, anomaly detection, speaker identification, motion, re-identification, summarization, text/captioning, and tracking.

Audio

Products that enable audio analysis capability. Examples include speaker identification, speech-to- text, classification, song identification, and segmentation.

Structured

Products that enable structured analysis capability. Examples include classification, clustering, dimensionality reduction, factorization models, feature engineering, ranking, regression, and time- series forecasting.

IoT

Products used to create IoT-related solutions.

Analytics

Analytical products for IoT solutions.

Applications

Application products for the IoT solutions space.

Device Connectivity

Products used to manage device connectivity.

Device Management

Products used to manage devices.

Device Security

Products used to manage security for your IoT devices.

Industrial IoT

Products focused on providing industrial-related IoT solutions.

Smart Home & City

Products used to enable smart home and smart city solutions.

Professional Services

The products in this category provide consulting services related to AWS Marketplace products.

Assessments

Evaluation of your current operating environment to find the right solutions for your organization.

Implementation

Help with configuration, setup, and deployment of third-party software.

(20)

Desktop applications

Managed Services

End-to-end environment management on your behalf.

Premium Support

Access to guidance and assistance from experts, designed for your needs.

Training

Tailored workshops, programs, and educational tools provided by experts to help your employees learn best practices.

Desktop applications

The products in this category provide infrastructure-related solutions.

Desktop Applications

Desktop applications and utilities for general productivity and specific job role enablement.

AP and Billing

Applications used for job roles focused on accounts payable and billing.

Application and the Web

General purpose and web environment applications.

Development

Applications used for development.

Business Intelligence

Applications used by job roles focused on managing business intelligence.

CAD and CAM

Applications used by job roles focused on computer-aided design and manufacture.

GIS and Mapping

Applications used by job roles focused on GIS and mapping.

Illustration and Design

Applications for job roles focused on illustration and design.

Media and Encoding

Application used for job roles involved in media and encoding.

Productivity and Collaboration

Applications focused on enabling productivity and enabling collaboration.

Project Management

Application for project manager job roles.

Security/Storage/Archiving

Applications focused on job roles involved in security, storage, and data archiving.

Utilities

Utility-focused applications for various job roles.

(21)

Data Products

Data Products

The products in this category are sets of file-based data. For more information, see the AWS Data Exchange User Guide.

Industries

Education & Research

Products aimed at providing education and research solutions.

Financial Services

Products that enable financial services in your organization.

Healthcare & Life Sciences

Products used in the healthcare and life sciences industries.

Media & Entertainment

Media-related products and solutions.

Industrial

Industry-related products and solutions.

Energy

Energy-related products and solutions.

(22)

AMI-based server products

Product types

AWS Marketplace includes popular open source and commercial software, as well as free and paid data products. These products are available in different ways: as individual Amazon Machine Images (AMIs), as a cluster of AMIs deployed through an AWS CloudFormation template, as software as a service (SaaS), as professional services, and as AWS Data Exchange data products.

For more details about these product types, see the following topics:

• AMI-based server products (p. 17) (including AMI and private image products)

• Container products (p. 31)

• Desktop products (p. 40)

• Machine learning products (p. 40)

• Professional services products (p. 41)

• SaaS products (p. 42)

• Data products (p. 43)

AMI-based server products

An Amazon Machine Image (AMI) is an image of a server, including an operating system and often additional software, which runs on AWS.

The software listed in AWS Marketplace is only available to run on Amazon Elastic Compute Cloud (Amazon EC2). It's not available for download.

On AWS Marketplace, you can search for AMIs (with search suggestions), view product reviews submitted by other customers, subscribe and launch AMIs, and manage your subscriptions. All AWS Marketplace products have been verified for quality and pre-configured for 1-Click launch capability on Amazon Web Services (AWS) infrastructure.

Both AMI and software as a service (SaaS) product listings are from trusted sellers. AMI products run within a customer's AWS account. You retain more control over software configuration and over the servers that run the software, but you also have additional responsibilities regarding server configuration and maintenance.

The AWS Marketplace catalog contains a curated selection of open source and commercial software from well-known sellers. Many products on AWS Marketplace can be purchased by the hour.

The AMI catalog is a community resource where people and development teams can list and exchange software or projects under development, without having to go through extensive vetting. Listings in the community AMI catalog may or may not be from well-known sellers and generally have not undergone additional investigations.

An AWS Marketplace product contains one AMI for each AWS Region in which the product is available.

These AMIs are identical except for their location. Additionally, when sellers update their product with the latest patches and updates, they may add another set of AMIs to the product.

Some AWS Marketplace products may launch multiple instances of an AMI because they're deployed as a cluster using AWS CloudFormation templates. This cluster of instances, along with additional AWS infrastructure services configured by the CloudFormation template, act as a single product deployment.

AWS CloudFormation template

AWS CloudFormation is a service that helps you model and set up your AWS resources so that you can spend less time managing those resources and more time focusing on your applications that run in AWS.

(23)

AMI subscriptions

A CloudFormation template describes the various AWS resources that you want, such as Amazon Elastic Compute Cloud (Amazon EC2) instances or Amazon Relational Database Service (Amazon RDS) database instances. CloudFormation takes care of provisioning and configuring those resources for you. For more information, see Getting started with AWS CloudFormation.

Using AWS CloudFormation templates

Software sellers may offer CloudFormation templates to define a preferred deployment topology consisting of multiple AMI instances and other AWS resources. If a CloudFormation template is available for a product, it will be listed as a deployment option on the product listing page.

You can use an AMI to deploy a single Amazon EC2 instance. You can use a CloudFormation template to deploy multiple instances of an AMI that act as a cluster—along with AWS resources such as Amazon RDS, Amazon Simple Storage Service (Amazon S3), or any other AWS service—as a single solution.

Topics

• AMI subscriptions (p. 18)

• AMI products with contract pricing (p. 18)

• Metering-enabled AMI products (p. 21)

• Cost allocation tagging in AMI products (p. 21)

• Private image build (p. 23)

• Using AMI aliases (p. 30)

AMI subscriptions

Some Amazon Machine Image (AMI)-based software products offer an annual subscription pricing model, in which you make a one-time upfront payment and then pay no hourly usage fee for the next 12 months. You can apply one annual subscription to an AWS Marketplace software product to one Amazon Elastic Compute Cloud (Amazon EC2) instance. You can also continue to launch and run AWS Marketplace software products using hourly pricing. Charges for using Amazon EC2 and other services from AWS are separate and in addition to what you pay to purchase AWS Marketplace software products.

AMI products with contract pricing

Some sellers offer public Amazon Machine Image (AMI)-based software products with a contract pricing model. In that model, you agree to make a one-time upfront payment for discrete quantities of licenses to access the software product for a duration of your choice. You're billed, in advance, through your AWS account. For example, you might purchase 10 user access licenses and 5 administrative licenses for a year.

You can choose to automatically renew the licenses.

In addition, some companies offer private AMI-based software products with a contract pricing model. A private offer typically has a fixed duration which you can't change.

You can purchase an AMI -based software product contract using the product’s detail page on AWS Marketplace. If this option is available, AMI with contract pricing appears for Delivery Method on the product’s detail page. When you make the purchase, you will be directed to the product’s website for account setup and configuration. The usage charges will then appear on your regular AWS account billing report.

Subscribing to an AMI product with contract pricing public offer

To subscribe to a public offer AMI-based product with a contract pricing model

1. Sign in to AWS Marketplace and find a container-based software product with a contract pricing model.

(24)

AMI products with contract pricing

2. On the Procurement page, view the Pricing Information.

You can see the Units and the rate for each duration (in months).

3. Choose Continue to Subscribe to start the subscription.

To save this product without subscribing, choose Save to List.

4. Create an agreement by reviewing the pricing information and configuring the terms for the software product.

a. Choose the duration of the contract: 1 month, 12 months, 24 months, or 36 months b. Under Renewal Settings, choose whether to automatically renew the contract.

c. Under Contract options, choose a quantity for each unit.

The total contract price is displayed under Pricing details.

5. After you have made your selections, choose Create Contract.

The Total contract price is charged to your AWS account. A license is generated in AWS License Manager.

NoteIt can take up to 10 minutes for the subscription to process and a license to be generated in your AWS License Manager account for the software product.

Subscribing to an AMI product with contract pricing private offer

To subscribe to a private offer AMI-based product with a contract pricing model 1. Sign in to AWS Marketplace with your Buyer account.

2. View the private offer.

3. On the Procurement page, view the Pricing Information.

You can see the Units and the rate for each duration (in months).

4. Choose Continue to Subscribe to start the subscription.

5. Create an agreement by reviewing the pricing information and configuring the terms for the software product.

The duration of the contract is already set by the Seller and can't be modified.

6. Under Contract options, choose a quantity for each unit.

7. View the total contract price under Pricing details.

You can also see the public offer by choosing View Offer under Other Available Offers.

8. After you have made your selections, choose Create Contract.

NoteIt can take up to 10 minutes for the subscription to process and a license to be generated in your AWS License Manager account for the software product.

Accessing the software

To access the AMI-based software product

1. On the AWS Marketplace console, navigate to View Subscription and view the license for the software product.

(25)

AMI products with contract pricing

2. On the Procurement page:

a. Choose Manage License to view, grant access, and track usage of your entitlements in AWS License Manager.

b. Choose Continue to Configuration.

3. On the Launch page, review your configuration and choose how you want to launch the software under Choose Action.

4. On the Choose an Instance Type, choose an Amazon Elastic Compute Cloud (Amazon EC2) instance, and then choose Next: Configure Instance Details.

5. On the Configure Instance Details page, for IAM role, choose an existing AWS Identity and Access Management (IAM) role from your AWS account.

If you don't have an IAM role, choose the Create new IAM role manually link and follow the instructions.

NoteWhen you purchase a product with contract pricing, a license is created by AWS Marketplace on the AWS account that your software can check using the License Manager API. You will need an IAM role to launch an instance of the AMI-based product.

The following IAM permissions are required in the IAM policy.

{

"Version":"2012-10-17", "Statement":[

{

"Sid":"VisualEditorO", "Effect":"Allow", "Action":[

"license-manager:CheckoutLicense", "license-manager:GetLicense", "license-manager:CheckInLicense",

"license-manager:ExtendLicenseConsumption", "license-manager:ListReceivedLicenses"

],

"Resource":"*"

} ] }

6. After the instance details are configured, choose Review and Launch.

7. On the Review Instance Launch page, select an existing key pair or create a new key pair, and then choose Launch Instances.

The Initiating Instance Launches progress window appears.

8. After the instance is initiated, go to the EC2 dashboard, and under Instances, see that the Instance state displays Running.

Viewing a generated license

To view a generated license

1. Sign in to to AWS License Manager with your AWS account.

2. Under Granted licenses, view all of your granted licenses.

3. Search licenses by entering a product SKU, recipient, or status in the Search bar.

4. Choose the License ID and view the License details.

5. You can view the Issuer (AWS/Marketplace)and the Entitlements (the units that the license grants the right to use, access, or consume an application or resource).

(26)

Metering-enabled AMI products

Metering-enabled AMI products

Some products listed on AWS Marketplace are billed on usage measured by the software application.

Examples of metered usage dimensions include Data usage, Host/Agent usage, or Bandwidth usage.

These products require extra configuration to function correctly. An IAM role with the permission to meter usage must be associated with your AWS Marketplace Amazon Elastic Compute Cloud (Amazon EC2) instance at the time of launch. For more information about IAM roles for Amazon EC2, see IAM Roles for Amazon EC2.

Cost allocation tagging in AMI products

AWS Marketplace supports cost allocation tagging for Amazon Machine Image (AMI)-based software products. New and existing Amazon Elastic Compute Cloud (Amazon EC2) instance tags automatically populate against corresponding AWS Marketplace AMI usage. You can use activated cost allocation tags to identify and track AMI usage through AWS Cost Explorer, the AWS Cost and Usage Reports, AWS Budgets, or other cloud spend analysis tools.

The vendor that provided the AMI may also record other custom tags in the metering for AMI- based products, based on information specific to the product. For more details, see Cost allocation tagging (p. 49).

You can use tags to organize your resources, and cost allocation tags to track your AWS costs on a detailed level. After you activate cost allocation tags, AWS uses the cost allocation tags to organize your resource costs on your cost allocation report, to make it easier for you to categorize and track your AWS costs.

Cost allocation tagging only tracks costs from the time when the tags were activated in the Billing and Cost Management console. Only AWS account owners, AWS Organizations management account owners, and AWS Identity and Access Management (IAM) users with the appropriate permissions can access the Billing and Cost Management console for an account. Regardless of whether you use cost allocation tagging, there's no change to how much you're billed. Whether you use cost allocation tags has no impact on the functionality of your AMI-based software products.

Tracking cost allocation tags for one AMI across multiple instances

Each launched Amazon EC2 instance for a AWS Marketplace AMI subscription has a corresponding AWS Marketplace software usage line item in the AWS Cost and Usage report. Your AWS Marketplace usage will always reflect the specific tags applied to the corresponding Amazon EC2 instance. This allows you to distinguish your AWS Marketplace usage costs based on the different tag values that were assigned, at an instance level.

You can also sum up your tag-based usage costs to equal the AMI software usage charge reflected in your bill with either the Cost Explorer or the AWS Cost and Usage report.

Finding budgets with cost allocated tagged instances

If you already have active budgets filtered on cost allocation tags over a number of Amazon EC2 instances in the Billing and Cost Management console, it might be difficult to find all of them. The following Python script returns a list of budgets which contain Amazon EC2 instances from the AWS Marketplace in your current AWS Region.

You can use this script to be aware of a potential impact to your budget, and where overruns might occur from this change. Note that the billed amount doesn't change, but the cost allocations will be reflected more accurately, which can impact budgets.

#! /usr/bin/python

(27)

Cost allocation tagging in AMI products

import boto3

session = boto3.Session()

b3account=boto3.client('sts').get_caller_identity()['Account']

print("using account {} in region {}".format(b3account,session.region_name))

def getBudgetFilters(filtertype):

'''

Returns budgets nested within the filter values [filter value][budeget name].

The filtertype is the CostFilter Key such as Region, Service, TagKeyValue.

'''

budget_client = session.client('budgets')

budgets_paginator = budget_client.get_paginator('describe_budgets') budget_result = budgets_paginator.paginate(

AccountId=b3account ).build_full_result() returnval = {}

if 'Budgets' in budget_result:

for budget in budget_result['Budgets']:

for cftype in budget['CostFilters']:

if filtertype == cftype:

for cfval in budget['CostFilters'][cftype]:

if cfval in returnval:

if not budget['BudgetName'] in returnval[cfval]:

returnval[cfval].append(budget['BudgetName']) else:

returnval[cfval] = [ budget['BudgetName'] ] return returnval

def getMarketplaceInstances():

'''

Get all the AWS EC2 instances which originated with AWS Marketplace.

'''

ec2_client = session.client('ec2')

paginator = ec2_client.get_paginator('describe_instances') returnval = paginator.paginate(

Filters=[{

'Name': 'product-code.type', 'Values': ['marketplace']

}]

).build_full_result() return returnval

def getInstances():

mp_instances = getMarketplaceInstances() budget_tags = getBudgetFilters("TagKeyValue") cost_instance_budgets = []

for instance in [inst for resrv in mp_instances['Reservations'] for inst in resrv['Instances'] if 'Tags' in inst.keys()]:

for tag in instance['Tags']:

# combine the tag and value to get the budget filter string str_full = "user:{}${}".format(tag['Key'], tag['Value']) if str_full in budget_tags:

for budget in budget_tags[str_full]:

if not budget in cost_instance_budgets:

cost_instance_budgets.append(budget) print("\r\nBudgets containing tagged Marketplace EC2 instances:")

print( '\r\n'.join([budgetname for budgetname in cost_instance_budgets]) )

if __name__ == "__main__":

getInstances()

(28)

Private image build

Example output

Using account 123456789012 in region us-east-2 Budgets containing tagged Marketplace EC2 instances:

EC2 simple MP-test-2

Related topics

For more information, see the following topics:

• Using Cost Allocation Tags in the AWS Billing and Cost Management User Guide.

• Activating the AWS-Generated Cost Allocation Tags in the AWS Billing and Cost Management User Guide.

• Tagging Your Amazon EC2 Resources in the Amazon EC2 User Guide for Linux Instances.

Private image build

AWS Marketplace Private Image Build enables you to purchase installable software products through AWS Marketplace and then install those products on a gold image or AMI that you choose from the images available to your AWS account. For the purposes of this content, a gold image is a server image that includes a base operating system (OS) with modifications applied so that each server launched from that image adheres to your IT standards you define. You choose the software from AWS Marketplace that you want to install and the base AMI for the build. Then you use the AWS Marketplace Image Build Service to build and deliver a new AMI as a private image available only to your AWS account.

This service helps you to better meet your internal security, compliance, and management requirements by enabling you to run AWS Marketplace products on a base operating system that meets your IT standards.

Sellers participating in AWS Marketplace Private Image Build create installable versions of their product for specific OS platforms, operating systems, and OS versions. When a seller submits a set of software packages for their product, the AWS Marketplace Image Build Service installs and scans the product on the specified OS before publishing the product in AWS Marketplace. When you purchase a product enabled for AWS Marketplace Private Image Build, you may choose an existing AMI to build a new private image on. Once you have used the AWS Marketplace Image Build Service to build a new image, it becomes available in your Amazon Elastic Compute Cloud (Amazon EC2) console as an image that you own. You can build an image using the AWS Marketplace website, or you can use the AWS Marketplace Image Build Service API.

(29)

Private image build

There is a software and infrastructure charge for the AWS services that you use to complete the build process, which may take 1-2 hours depending on the product. However, there is no additional charge for using the AWS Marketplace Image Build Service to create private images. Once the image is built, you don't incur charges for product or AWS resource usage until you use the product.

AWS Marketplace Private Image Build uses AWS Identity and Access Management (IAM) to create IAM roles and policies that grant limited permissions to end users to build and view private images.

Completing the prerequisite steps requires administrative-level privileges.

Completing prerequisite steps

The prerequisite steps described here require administrative-level permissions that configure IAM so that you can grant the ability to build private images to other users. Once the IAM policies and roles are created you can attach them to group (or user) accounts so the associated users can build private images.

IAM is a web service that helps you securely control access to AWS resources. You use IAM to control who is authenticated (signed in) and authorized (has permissions) to use resources. You create identities (users, groups, and roles) and add the users to the groups so you can then manage groups instead of individual users. An IAM role is similar to a user in that it's an identity with permission policies that determine what the identity can and can't do in AWS. However, a role doesn't have any credentials (password or access keys) associated with it. Instead of being uniquely associated with one person, a role is intended to be assumable by anyone who needs it. An IAM user can assume a role to temporarily take on different permissions for a specific task.

The access management portion of IAM helps you to define what a user or other entity is allowed to do in an account, often referred to as authorization. Permissions are granted through policies. A policy is an entity in AWS that, when attached to an identity or resource, defines their permissions. AWS evaluates these policies when a principal, such as a user, makes a request. Permissions in the policies determine whether the request is allowed or denied. Policies are stored in AWS as JSON documents attached to principals as identity-based policies or to resources as resource-based policies.You give permissions by defining permission policies and assigning the policy to a group.

Identity-based policies are permission policies that you can attach to a principal (or identity), such as an IAM user, role, or group. Resource-based policies are JSON policy documents that you attach to a resource such as an Amazon Simple Storage Service (Amazon S3) bucket. Identity-based policies control what actions that identity can perform, on which resources, and under what conditions. Identity-based policies can be categorized into AWS managed policies, customer managed policies, and inline policies.

Resource-based policies control what actions a specified principal can perform on that resource and under what conditions. Resource-based policies are inline policies, and there are no managed resource- based policies. Although IAM identities are technically AWS resources, you can't attach a resource-based policy to an IAM identity. You must use identity-based policies in IAM. Trust policies are resource-based policies that are attached to a role that define which principals can assume the role. When you create a role in IAM, the role must have two things: a trust policy that indicates who can assume the role and a permission policy that indicates what they can do with that role. Remember that adding an account to the trust policy of a role is only half of establishing the trust relationship. By default, no users in the trusted accounts can assume the role until the administrator for that account grants the users the permission to assume the role.

The AWS Marketplace Image Building Service uses two IAM roles, and each role has a permissions policy and a trust policy. If you have IAM users access the AWS Marketplace website to build private images, those users also need IAM permissions to list and assign the roles needed to create and view the private images they build.

As an administrator, you create the two roles that are required and their associated policies. The first role is an instance profile that is attached to the instance created during the image build process. An instance profile is a container for an IAM role that you can use to pass role information to an Amazon EC2 instance when the instance starts. The second is an IAM role that provides access to AWS Systems

(30)

Private image build

Manager and Amazon EC2. To configure the instance profile, attach a permissions policy that provides the required permissions. Then edit the trust policy for the role to grant permission for Amazon EC2 and AWS Systems Manager to assume the role.

Creating an instance profile role

To create the instance profile role through the IAM console:

1. Sign in to the AWS Management Console and open the IAM console at https://

console.aws.amazon.com/iam/.

2. In the navigation pane of the IAM console, choose Roles and then choose Create role.

3. For Select type of trusted entity, choose AWS service.

4. For Choose the service that will use this role, choose EC2 and then choose Next: Permissions.

5. For Create policy, choose Next: Review.

6. For Role name, type a role name or role name suffix to help you identify the purpose of this role, for example MyInstanceRole. Role names must be unique in your AWS account.

7. Review the role and then choose Create role.

8. On the Roles page, choose the role that you created.

9. For Permissions, choose Add inline policy.

10.Choose the JSON tab and replace all of the text with the following InstanceRolePermissionsPolicy text.

InstanceRolePermissionsPolicy:

{ "Version": "2012-10-17", "Statement": [

{

"Action": [

"ssm:DescribeAssociation", "ssm:GetDocument",

"ssm:GetManifest", "ssm:GetParameters", "ssm:ListAssociations",

"ssm:ListInstanceAssociations", "ssm:PutConfigurePackageResult", "ssm:UpdateAssociationStatus",

"ssm:UpdateInstanceAssociationStatus", "ssm:UpdateInstanceInformation"

],

"Resource": "*", "Effect": "Allow"

}, {

"Action": [

"ec2messages:AcknowledgeMessage", "ec2messages:DeleteMessage", "ec2messages:FailMessage", "ec2messages:GetEndpoint", "ec2messages:GetMessages", "ec2messages:SendReply"

],

"Resource": "*", "Effect": "Allow"

}, {

"Action": [

"ec2:DescribeInstanceStatus"

],

(31)

Private image build

"Resource": "*", "Effect": "Allow"

}, {

"Action": [

"s3:GetObject", "s3:PutObject"

],

"Resource": "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*", "Effect": "Allow"

} ] }

NoteYou'll need to create the bucket, DOC-EXAMPLE-BUCKET before you begin this process.

11.Choose Review policy.

12.For Policy name, type a name to help you identify the purpose of this policy, for example MyInstanceRolePolicy, and choose Create policy.

To edit the trust relationship for the role:

1. On the Roles page, choose the role that you created.

2. Choose the Trust relationships tab and then choose Edit trust relationship.

3. Select all of the text in the Policy Document text box and replace it with the following InstanceRoleTrustPolicy text.

InstanceRoleTrustPolicy:

{ "Version": "2012-10-17", "Statement": [

{

"Effect": "Allow", "Principal": { "Service": [

"ssm.amazonaws.com", "ec2.amazonaws.com"

] },

"Action": "sts:AssumeRole"

} ] }

4. Choose Update Trust Policy.

Creating an AWS Systems Manager automation role

To create the AWS Systems Automation role:

1. In the navigation pane of the IAM console, choose Roles and then choose Create role.

2. For Select type of trusted entity, choose AWS service.

3. For Choose the service that will use this role, choose EC2 and then choose Next: Permissions.

4. For Create policy, choose Next: Review.

5. For Role name, type a role name or role name suffix to help you identify the purpose of this role, for example MyAutomationRole. Role names must be unique in your AWS account.

(32)

Private image build

6. Review the role and then choose Create role.

7. On the Roles page, choose the role that you created.

8. For Permissions, choose Add inline policy.

9. Choose the JSON tab and replace all the text with the following AutomationRolePermissionsPolicy text.

AutomationRolePermissionsPolicy:

"Version": "2012-10-17", "Statement": [

{

"Action": [ "ssm:*"

],

"Resource": [ "*"

],

"Effect": "Allow"

}, {

"Action": [

"ec2:CreateImage", "ec2:DescribeImages", "ec2:StartInstances", "ec2:RunInstances", "ec2:StopInstances", "ec2:TerminateInstances", "ec2:DescribeInstanceStatus", "ec2:CreateTags",

"ec2:DescribeTags"

],

"Resource": [ "*"

],

"Effect": "Allow"

}, {

"Action": [

"iam:PassRole"

],

"Resource": [

"{{ Instance Profile }}"

],

"Effect": "Allow"

} ] }

NoteYou must replace {{ Instance Profile }} with the Amazon Resource Name (ARN) for the instance policy role that you created earlier. Locate the role in the IAM management console and choose it. On the summary page for the role, the Role ARN is the first item listed, for example, arn:aws:iam::123456789012:role/MyInstanceRole.

To edit the trust relationship for the role:

1. On the Roles page, choose the role that you created.

2. Choose the Trust relationships tab and then choose Edit trust relationship.

3. Replace all the text in the Policy Document text box with the following InstanceRoleTrustPolicy text.

參考文獻

相關文件

command line, he specifies an arbitrary (but specific; in this case, 9989) local port that ssh should forward through the secure tunnel to the remote Windows ma- chine’s port

command line, he specifies an arbitrary (but specific; in this case, 9989) local port that ssh should forward through the secure tunnel to the remote Windows ma- chine’s port

MR CLEAN: A Randomized Trial of Intra-arterial Treatment for Acute Ischemic Stroke. • Multicenter Randomized Clinical trial of Endovascular treatment for Acute ischemic stroke in

 Promote project learning, mathematical modeling, and problem-based learning to strengthen the ability to integrate and apply knowledge and skills, and make. calculated

The majority (4,075 units valued at MOP9.2 billion) of these transactions were residential units that accounted for 55.5% of the total number of building units; besides, there were

Among these units, 37.4% (749 units valued at MOP1.53 billion) were new units e that were within the property tax exemption period. b In the analysis, the term “Real Estate”

Instead of making faster elevator motors, he suggested they think about the passengers who ride the elevators?. His idea was that by having mirrors put inside elevators, people

“People should know what kinds of foods are good for health.” To live a healthier life, we should read what our foods are made of by reading the ingredient lists on food cans