Skip to main content
This topic explains how to create Integration Credentials, which you can then use to connect your AWS Marketplace native integrations with your AWS Marketplace instance. See Configuring AWS Marketplace Integrations. To create AWS Marketplace integration Credentials:
  1. Select Integrations. The Integrations page opens.
  2. Select Marketplace. The Integrations page adjusts.
  3. Select AWS. The Integrations>AWS page opens.
  4. On the Credentials panel, select Configure new credentials. The Create pages opens at Stage 1: Select a system and name.
  5. Under Credential details enter:
  • External system. This will be prepopulated for AWS.
  • Name. Descriptive name for the Credential.
  1. Select Next. The page adjusts to show Stage 1 as checked-off and completed and shifts focus to Stage 2: Configure and create:
  1. On the AWS connection panel, enter:
  • Account id. The id of the AWS account that hosts the IAM role m3ter will assume when connecting with AWS Marketplace.
  • Role name. The name of the IAM role that m3ter will assume:
    • In AWS, the role requires the following permissions.
      • aws-marketplace:DescribeEntity
      • aws-marketplace:BatchMeterUsage
      • aws-marketplace:ListEntities
    • Since the role will be impersonated by m3ter, its trust policy should include an** AssumeRole** action with a filtering condition. See Creating AWS S3 Bucket Export Destinations for details on how to set up the required type of IAM role in your AWS account. Valid examples below:
Permission Policy 
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "aws-marketplace:BatchMeterUsage",
                "aws-marketplace:ListEntities",
                "aws-marketplace:DescribeEntity"
            ],
            "Effect": "Allow",
            "Resource": "*"
        }
    ]
}
Trust policy 
{
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::816069165829:role/m3terExternalRole"
            },
            "Action": "sts:AssumeRole",
            "Condition": {
                "StringEquals": {
                    "sts:ExternalId": "<m3ter Org Id>"
                }
            }
        },
  1. Select Create credential. You are returned to the Integrations>AWS page where the new Credential is listed on the Credentials panel: