From 0f8ef5d2525fb3d8111006f9da5c41c893810ba1 Mon Sep 17 00:00:00 2001 From: Rawat Date: Thu, 8 Apr 2021 12:34:03 -0400 Subject: [PATCH 1/2] added aws marketplace guardrail --- .../AWS-Marketplace-Unsubscribe.json | 40 +++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 guardrails/aws-marketplace/AWS-Marketplace-Unsubscribe.json diff --git a/guardrails/aws-marketplace/AWS-Marketplace-Unsubscribe.json b/guardrails/aws-marketplace/AWS-Marketplace-Unsubscribe.json new file mode 100644 index 0000000..1d2f925 --- /dev/null +++ b/guardrails/aws-marketplace/AWS-Marketplace-Unsubscribe.json @@ -0,0 +1,40 @@ +{ + "Identifier": "AWS-Marketplace-Unsubscribe", + "Guardrail": "Protect aganist canceling your products subscription in AWS Marketplace", + "Rationale": [ + "AWS Marketplace is a digital catalog with thousands of software listings from independent software vendors that make it easy to find, test, buy, and deploy software that runs on AWS.", + "Unauthorized modifications to your subscription could affect your workloads in AWS accounts." + ], + "References": [ + "https://aws.amazon.com/premiumsupport/knowledge-center/cancel-marketplace-subscription", + "https://aws.amazon.com/marketplace" + ], + "Test Scenarios": [ + { + "Test-Scenario": "Unsubscribe software products from AWS Marketplace", + "Steps": [ + "1.Prerequisite: Subscribed products", + "2.Login into AWS Account", + "3.Search for 'AWS Marketplace Subscriptions' service in console", + "4.On the Manage subscriptions page, choose Manage next to the software subscription that you want to cancel.", + "5.Choose Actions, and then choose Cancel subscription.", + "6.Select the check box to acknowledge that running instances are charged to your account, and then choose Yes, cancel subscription." + ], + "Expected-Result": "User is not authorized to perform: aws-marketplace:Unsubscribe on resource" + } + ], + "Policy": "DenyUnsubscribeAWSMarketPlace", + "Version":"2012-10-17", + "Statement":[ + { + "Sid": "DenyUnsubscribeAWSMarketPlace", + "Effect": "Deny", + "Action": [ + "aws-marketplace:Unsubscribe" + ], + "Resource": [ + "*" + ] + } + ] +} From c035aa496bde542ccb7cc03d13eaa09ba1920322 Mon Sep 17 00:00:00 2001 From: ajarawat1992 <48267323+ajarawat1992@users.noreply.github.com> Date: Sun, 25 Jul 2021 21:25:04 -0400 Subject: [PATCH 2/2] Updated Prerequisite Updated Prerequisite --- guardrails/aws-marketplace/AWS-Marketplace-Unsubscribe.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/guardrails/aws-marketplace/AWS-Marketplace-Unsubscribe.json b/guardrails/aws-marketplace/AWS-Marketplace-Unsubscribe.json index 1d2f925..0c815cf 100644 --- a/guardrails/aws-marketplace/AWS-Marketplace-Unsubscribe.json +++ b/guardrails/aws-marketplace/AWS-Marketplace-Unsubscribe.json @@ -13,7 +13,7 @@ { "Test-Scenario": "Unsubscribe software products from AWS Marketplace", "Steps": [ - "1.Prerequisite: Subscribed products", + "1.Prerequisite: Subscribed products.A software product from Marketplace must be subscribed", "2.Login into AWS Account", "3.Search for 'AWS Marketplace Subscriptions' service in console", "4.On the Manage subscriptions page, choose Manage next to the software subscription that you want to cancel.",