Skip to Content
IntegrationsMarketplace OffersPrerequisites

Marketplace Offers — Prerequisites

Before you can enable Marketplace Offers in FlowState, the following must be in place.

1. An AWS Marketplace seller account

Your organization must have an AWS Marketplace seller account with at least one published SaaS product. Marketplace Offers only lists and manages SaaS products — other product types (AMI, container, data, etc.) are not read by this integration.

To verify: sign in to the AWS Marketplace Management Portal  with the AWS account associated with your seller registration and confirm you can see your product(s) under Products.

2. The marketplace_offers feature enabled for your tenant

This is a FlowState-side toggle, independent of the AWS connector below. A tenant owner or admin enables it from Settings → Features (or PATCH /tenants/{id}/features with tenant:features:write), setting marketplace_offers to true. Until it’s on, the connector’s status cannot even be read — every route in this integration is gated on the feature first.

3. An AWS account where you can create IAM roles

You need the ability to create IAM roles in the AWS account that holds your Marketplace seller registration — the same account from step 1. Specifically, you need:

  • iam:CreateRole
  • iam:PutRolePolicy (the permissions policy is inline, not a managed policy — see Trust policy)
  • Permission to create a trust policy that allows cross-account sts:AssumeRole

If you do not have these permissions, ask an IAM administrator in your organization to create the role using one of the three paths in Getting started (OpenTofu, CloudFormation, or Manual).

No managed policy

Unlike APN Sync, which attaches the AWS-managed AWSPartnerCentralOpportunityManagement policy, the Marketplace connector role’s permissions are an inline policy that FlowState’s CloudFormation template and OpenTofu module both define directly — there is no AWS-managed policy for the Marketplace Catalog API’s write actions. Nothing to look up or confirm exists in your account beforehand; the policy is created as part of the role itself.

Summary checklist

  • AWS Marketplace seller account with at least one published SaaS product.
  • marketplace_offers feature enabled for your FlowState tenant (Settings → Features).
  • IAM role creation capability in the AWS account tied to your seller registration (or an IAM admin available).
OverviewTrust policy