AWS Artifact enhances agreements with improved access control and tracking

We are excited to announce enhancements to the agreement functionality on AWS Artifact that will improve how you manage and track agreement execution.

You can now provide fine-grained access to agreements in AWS Artifact at the AWS Identity and Access Management (IAM) Action and Resource level. To make it easy for you to configure IAM permissions, we have introduced “AWSArtifactAgreementsReadOnlyAccess”and “AWSArtifactAgreementsFullAccess” managed policies for AWS Artifact agreements, which provide read-only permissions and full permissions respectively. We have also implemented CloudTrail logging for agreement activities on AWS Artifact. This enables you to easily track and audit user activity and API calls related to agreements. To take advantage of the new features through Artifact console, please update your IAM policies and opt in to use the new fine-grained permissions by selecting that option on the Artifact Agreements console.

We also introduced a new API called listCustomerAgreements that allows you to list active customer agreements for each AWS Account. This API enables automation and efficient tracking of active agreements for customers, especially for those managing a large number of accounts or complex compliance requirements.

These features are available in all AWS commercial regions. To learn more about AWS Artifact and how to manage agreements, refer to the documentation and AWS Artifact API reference.