--- title: AWS Marketplace Procurement Proxy | SecureDynamics description: A simple guide for customers and partners using SecureDynamics for AWS Marketplace private-offer execution through DSOR and CPPO-aligned paths. --- [Skip to content](https://securedynamics.net/trusted-procurement-proxy#main-content) [![SecureDynamics Logo Dark-1](https://securedynamics.net/hs-fs/hubfs/SecureDynamics%20Logo%20Dark-1.png?width=1250&height=296&name=SecureDynamics%20Logo%20Dark-1.png)](https://cm360.securedynamics.net?hsLang=en) - [Home](https://securedynamics.net) - Solutions Show submenu for Solutions - [Distribution](https://securedynamics.net/distribution) Show submenu for Distribution - [AWS Marketplace Sales](https://securedynamics.net/aws-marketplace-zscaler-partners) - [Procurement Cheat Sheet](https://securedynamics.net/trusted-procurement-proxy) - [MSSP](https://securedynamics.net/mssp) - [For VAR Executives](https://securedynamics.net/grow-your-services-business) - [Services](https://securedynamics.net/services) Show submenu for Services - [Zscaler Deployment Services](https://securedynamics.net/services) Show submenu for Zscaler Deployment Services - [Overview](https://securedynamics.net/deployment/overview) - [Qualification](https://securedynamics.net/deployment/qualification) - [Pre-Kickoff](https://securedynamics.net/deployment/pre-kickoff) - [Kickoff](https://securedynamics.net/deployment/kickoff) - [Phase 1: Planning & Design](https://securedynamics.net/deployment/planning-design) - [Phase 2: Pilot](https://securedynamics.net/deployment/pilot) - [Validation](https://securedynamics.net/deployment/validation) - [Phase 3: Full Rollout](https://securedynamics.net/deployment/full-rollout) - [Training While Deploying](https://securedynamics.net/deployment/training-while-deploying) - [Closeout Health Check](https://securedynamics.net/deployment/closeout-health-check) - [ZBoost Adoption](https://securedynamics.net/deployment/zboost-adoption) - [Reporting](https://securedynamics.net/deployment/reporting) - [ZBoost](https://securedynamics.net/zboost) - [Project Delivery Portal](https://securedynamics.net/projects) - Deployment Methodology Show submenu for Deployment Methodology - [Pre-Kickoff](https://securedynamics.net/deployment/pre-kickoff) - [Kickoff](https://securedynamics.net/deployment/kickoff) - [Phase 1: Planning & Design](https://securedynamics.net/deployment/planning-design) - [Phase 2: Pilot](https://securedynamics.net/deployment/pilot) - [Phase 3: Full Rollout](https://securedynamics.net/deployment/full-rollout) - [Closeout](https://securedynamics.net/deployment/closeout-health-check) - [Zscaler Health Check](https://securedynamics.net/zscaler-health-check) - [ZBoost Adoption](https://securedynamics.net/deployment/zboost-adoption) - [Enterprise Services Access](https://securedynamics.net/enterprise-services-access) - [Training](https://securedynamics.net/education) - Resources Show submenu for Resources - [Operations Guides](https://securedynamics.net/operations-guides) - [SSL Bypass Library](https://securedynamics.net/ssl-bypass-library) - [ZCC Log Explorer](https://securedynamics.net/zcc-log-explorer) - [Zero Trust Maturity Map](https://securedynamics.net/zero-trust-maturity) - [Customer Health and Readiness Portal](https://securedynamics.net/customer-health-readiness-portal) - [Project Delivery Portal](https://securedynamics.net/projects) - [Partner Onboarding](https://securedynamics.net/zscaler-partner-onboarding) - [Learning Workshop (invite only)](https://securedynamics.net/zscaler-learning-workshop) - [Compliance FAQs](https://securedynamics.net/enterprise-compliance-faq) - [Support](https://securedynamics.net/support) Show submenu for Support - [Knowledge Base](https://securedynamics.net/kb) - [Submit a Case](https://securedynamics.net/support) Open main navigation Close main navigation - [Home](https://securedynamics.net) - Solutions Show submenu for Solutions - [Distribution](https://securedynamics.net/distribution) Show submenu for Distribution - [AWS Marketplace Sales](https://securedynamics.net/aws-marketplace-zscaler-partners) - [Procurement Cheat Sheet](https://securedynamics.net/trusted-procurement-proxy) - [MSSP](https://securedynamics.net/mssp) - [For VAR Executives](https://securedynamics.net/grow-your-services-business) - [Services](https://securedynamics.net/services) Show submenu for Services - [Zscaler Deployment Services](https://securedynamics.net/services) Show submenu for Zscaler Deployment Services - [Overview](https://securedynamics.net/deployment/overview) - [Qualification](https://securedynamics.net/deployment/qualification) - [Pre-Kickoff](https://securedynamics.net/deployment/pre-kickoff) - [Kickoff](https://securedynamics.net/deployment/kickoff) - [Phase 1: Planning & Design](https://securedynamics.net/deployment/planning-design) - [Phase 2: Pilot](https://securedynamics.net/deployment/pilot) - [Validation](https://securedynamics.net/deployment/validation) - [Phase 3: Full Rollout](https://securedynamics.net/deployment/full-rollout) - [Training While Deploying](https://securedynamics.net/deployment/training-while-deploying) - [Closeout Health Check](https://securedynamics.net/deployment/closeout-health-check) - [ZBoost Adoption](https://securedynamics.net/deployment/zboost-adoption) - [Reporting](https://securedynamics.net/deployment/reporting) - [ZBoost](https://securedynamics.net/zboost) - [Project Delivery Portal](https://securedynamics.net/projects) - Deployment Methodology Show submenu for Deployment Methodology - [Pre-Kickoff](https://securedynamics.net/deployment/pre-kickoff) - [Kickoff](https://securedynamics.net/deployment/kickoff) - [Phase 1: Planning & Design](https://securedynamics.net/deployment/planning-design) - [Phase 2: Pilot](https://securedynamics.net/deployment/pilot) - [Phase 3: Full Rollout](https://securedynamics.net/deployment/full-rollout) - [Closeout](https://securedynamics.net/deployment/closeout-health-check) - [Zscaler Health Check](https://securedynamics.net/zscaler-health-check) - [ZBoost Adoption](https://securedynamics.net/deployment/zboost-adoption) - [Enterprise Services Access](https://securedynamics.net/enterprise-services-access) - [Training](https://securedynamics.net/education) - Resources Show submenu for Resources - [Operations Guides](https://securedynamics.net/operations-guides) - [SSL Bypass Library](https://securedynamics.net/ssl-bypass-library) - [ZCC Log Explorer](https://securedynamics.net/zcc-log-explorer) - [Zero Trust Maturity Map](https://securedynamics.net/zero-trust-maturity) - [Customer Health and Readiness Portal](https://securedynamics.net/customer-health-readiness-portal) - [Project Delivery Portal](https://securedynamics.net/projects) - [Partner Onboarding](https://securedynamics.net/zscaler-partner-onboarding) - [Learning Workshop (invite only)](https://securedynamics.net/zscaler-learning-workshop) - [Compliance FAQs](https://securedynamics.net/enterprise-compliance-faq) - [Support](https://securedynamics.net/support) Show submenu for Support - [Knowledge Base](https://securedynamics.net/kb) - [Submit a Case](https://securedynamics.net/support) AWS Marketplace private offer guide # Close the deal. Keep procurement simple. SecureDynamics helps partners select the right AWS Marketplace private-offer route, protect agreed partner economics, and keep the customer moving. Whether the partner is CPPO-ready or needs SecureDynamics to issue the offer, the customer gets a familiar AWS purchase path. [Customer steps](https://securedynamics.net/trusted-procurement-proxy#customer-steps) [Partner benefits](https://securedynamics.net/trusted-procurement-proxy#partner-benefits) [Request Marketplace help](https://securedynamics.net/trusted-procurement-proxy#marketplace-help) Marketplace route selector **Partner-safe by design** The animation shows two AWS Marketplace paths. Route 1 applies when the partner is an AWS Marketplace Channel Partner with the required authorization: SecureDynamics supports the DSOR/CPPO route, the partner extends the customer private offer, the customer accepts, and Marketplace proceeds move through the transaction path. Route 2 applies when the partner is not CPPO-ready: SecureDynamics issues the customer private offer through the applicable path, the customer accepts, Marketplace proceeds are disbursed to SecureDynamics, and SecureDynamics pays the partner its agreed portion. Start here **Is the partner CPPO-ready for this offer?** Yes **Route 1Authorized partner path** 1. **01****SecureDynamics**Supports DSOR / CPPO 2. **02****CPPO partner**Extends customer offer 3. **03****Customer**Accepts in AWS 4. **04****Marketplace**Processes transaction No **Route 2SecureDynamics offer path** 1. **01****Partner economics**Agreed in advance 2. **02****SecureDynamics**Issues private offer 3. **03****Customer**Accepts in AWS 4. **04****Partner paid**After proceeds arrive Shared outcome **Customer completes a private-offer purchase through AWS Marketplace.** Why this exists ## Sometimes the deal is ready before the paperwork is. Direct billing, partner credit limits, and new-partner onboarding can slow down an otherwise clean opportunity. AWS Marketplace gives the customer, partner, and SecureDynamics a structured transaction path that is familiar to procurement teams, auditable, and simple to execute. **This is about the transaction path, not moving the customer’s infrastructure to AWS.** The trusted proxy model ## One analogy, kept useful. Think of AWS Marketplace as the procurement checkpoint. The customer validates the offer, accepts the agreed terms, and the purchase is recorded through a recognized marketplace workflow. ### Security proxy Zscaler brokers and enforces secure access. ### Transaction proxy AWS Marketplace brokers the purchase workflow. ### SecureDynamics role SecureDynamics coordinates the offer, partner motion, and customer success. Two AWS Marketplace paths ## The right route depends on the partner’s AWS Marketplace authorization for the applicable offer. SecureDynamics can support both models because we work through DSOR and CPPO-aligned Marketplace paths. ### Route 1: Partner has the required AWS Marketplace Channel Partner authorization SecureDynamics supports the DSOR/CPPO path, the authorized partner extends the private offer to the end customer, the customer accepts through AWS Marketplace, and AWS Marketplace handles billing, collection, and disbursement through the transaction path. ### Route 2: Partner is not CPPO-ready SecureDynamics issues the customer offer through the applicable AWS Marketplace private-offer path, includes the agreed partner economics where appropriate, the customer accepts through AWS Marketplace, Marketplace proceeds are disbursed to SecureDynamics, and SecureDynamics pays the partner its agreed portion after payment is received. **The customer experience stays simple:** use or create an AWS account, review the private offer from the correct Marketplace route, and accept the agreed terms. For customers ## Benefits for the customer Primary benefit ### No AWS workload required Use AWS Marketplace as the purchase path without migrating applications or turning the transaction into an AWS cloud project. 01 ### Simple private-offer acceptance Review negotiated price, terms, and billing details in the targeted AWS account, then accept. 02 ### Cleaner governance Keep offer IDs, agreement details, billing information, and subscription records in a known purchase workflow. 03 ### Custom commercial terms Reflect negotiated pricing, term length, and the agreed commercial structure in the private offer. 04 ### Guided support SecureDynamics distribution and sales experts can help the customer and partner through the process. For reseller partners ## Benefits for the reseller partner → Primary benefit ### Keep the opportunity moving When direct credit or billing setup could delay the deal, the Marketplace path gives the partner another structured route to close. 01 ### Protect the customer relationship The partner stays involved whether it extends the offer or SecureDynamics issues it through the applicable path. 02 ### Cleaner transaction mechanics Run offer, acceptance, and subscription through AWS Marketplace instead of a one-off manual workaround. 03 ### Support larger opportunities Use private offers, DSOR listings, and CPPO motions for larger or more complex transactions with structured terms. 04 ### SecureDynamics backup Bring SecureDynamics into customer and procurement conversations whenever the process needs expert guidance. Before starting ## What the customer needs before accepting the offer - A business AWS account, or the ability to create one. - A secure corporate email or distribution list for the AWS root account owner. - Company legal name, business address, and billing contact. - Valid payment method or AWS billing arrangement. - Phone access for AWS account verification. - Tax exemption or tax registration details, if applicable. - The AWS Account ID that should receive the private offer. - A user or role with AWS Marketplace subscription permissions. - Purchase order number, if the customer requires one. - Agreement from finance/procurement on payment timing, currency, and invoice handling. **Use the AWS account that procurement wants tied to the purchase.** If the private offer is issued to the wrong AWS account ID, the customer may not see it. Customer instructions ## Step-by-step customer instructions 1 ### Create or identify the AWS account If the customer already has AWS, use the account procurement wants associated with the purchase. If not, create a new business AWS account. 1. [Go to AWS account sign-up, opens in a new tab](https://signin.aws.amazon.com/signup). 2. Enter a corporate email address and AWS account name. 3. Verify the email code. 4. Create the root-user password. 5. Choose Business account. 6. Enter company information. 7. Accept the AWS Customer Agreement. 8. Add payment method. 9. Complete phone verification. 10. Select the appropriate AWS Support plan. 11. Wait for activation confirmation. **Best practice:** For a business account, use a secure corporate distribution list instead of one employee’s personal mailbox. 2 ### Send SecureDynamics the AWS Account ID and route details SecureDynamics needs the AWS Account ID so the correct Marketplace route can be prepared for the buyer account. - AWS Account ID - Customer legal entity name - Whether the partner is Marketplace-authorized for the applicable CPPO route, if known - Procurement contact - Billing contact - Desired currency, if applicable - PO number, if required - Any special billing or tax notes 3 ### SecureDynamics confirms the route and prepares the offer path If the partner is an AWS Marketplace Channel Partner with the required resale/selling authorization, SecureDynamics supports the DSOR/CPPO path so the partner can extend the private offer to the end customer. If the partner is not CPPO-ready, SecureDynamics issues the customer offer through the applicable AWS Marketplace private-offer path with agreed partner economics where appropriate. The customer receives either a seller-provided link or sees the offer in the [AWS Marketplace Private Offers page, opens in a new tab](https://console.aws.amazon.com/marketplace/home#/private-offers). 4 ### Customer reviews the offer The customer signs into the correct AWS account, opens the private offer, and reviews product, seller of record, price, term, payment schedule, EULA/terms, tax estimate, and any PO details. 5 ### Customer accepts For SaaS-style offers, the customer usually chooses Subscribe after reviewing the offer. AWS Marketplace then shows a confirmation summary. If required, the customer completes the seller setup step after acceptance. 6 ### Fulfillment begins After acceptance and Marketplace transaction processing, SecureDynamics and the partner coordinate next steps for delivery, onboarding, service activation, and any agreed partner payment. Common blockers ## Common blockers and how to fix them I clicked the private offer link and got a 404. Sign out, sign back into the correct AWS account, and try again. Private offers are visible only to the AWS account that received the offer. I do not see the private offer. Confirm the AWS Account ID. Confirm the offer has not expired. Confirm the user has Marketplace permissions. Confirm whether the customer uses AWS Organizations, a payer account, linked account, or Private Marketplace controls. Procurement says they are not an AWS customer. They do not need to deploy workloads on AWS. They only need an AWS account to use AWS Marketplace as the procurement rail for this transaction. The wrong person owns the AWS account. Use a corporate distribution list and assign appropriate administrative and Marketplace subscription access. Avoid tying the account to one employee. The customer has a Private Marketplace. The product may need to be approved or allow-listed by the customer’s Private Marketplace administrator. Payment, currency, or tax is not ready. Have procurement verify billing setup, preferred currency, payment method, and tax settings before accepting the offer. One-page ultra-simple version ## The whole process in one minute Phase 1**Prepare** 1. **01****Use the right AWS buyer account**Create one only if the customer does not already have it. 2. **02****Send the AWS Account ID**SecureDynamics uses it to target the correct buyer. Phase 2**Choose the route** **03** **Is the partner CPPO-ready for this offer?**SecureDynamics and the partner confirm authorization once. Yes **Partner extends the private offer** SecureDynamics supports the DSOR / CPPO path. No **SecureDynamics issues the private offer** Agreed partner economics are included where appropriate. Phase 3**Complete** 1. **04****Review the offer**Confirm price, term, seller, legal terms, billing, and account. 2. **05****Accept in AWS Marketplace**The customer accepts or subscribes. 3. **06****Begin fulfillment**AWS processes the purchase; SD and the partner coordinate delivery and any agreed payment. Customer outcome A completed Marketplace purchase. No cloud migration side quest required. Need help? ## SecureDynamics can walk through it with you. Most customers can complete this without a call. If procurement, finance, or IT wants support, SecureDynamics distribution and sales experts can join the customer and partner to walk through account setup, account ID confirmation, private-offer access, and acceptance. **Email:** salesops@securedynamics.net ### Request Marketplace Transaction Help I am a Customer Partner SecureDynamics team member Company name Contact name Email Deal/opportunity name Do you already have an AWS account? Yes No Not sure AWS Account ID, if known Preferred meeting notes or questions Request Help FAQ ## Questions procurement, partners, and sales teams usually ask Do we have to move to AWS? No. For this use case, AWS Marketplace is being used as a procurement path. Why does SecureDynamics need our AWS Account ID? The private offer must be extended to the correct AWS buyer account. If the wrong account is used, procurement may not see the offer. Who should create the AWS account? The customer’s procurement, finance, IT, or cloud operations team should decide. For business continuity, use a secure corporate distribution list for the account owner email. Can a partner still be involved? Yes. If the partner is an AWS Marketplace Channel Partner with the required resale/selling authorization, SecureDynamics can support the DSOR/CPPO path so the partner can extend the private offer to the end customer. If the partner is not CPPO-ready, SecureDynamics can issue the customer offer through the applicable AWS Marketplace private-offer path and preserve agreed partner economics where appropriate. Which route applies if the partner has the required AWS Marketplace authorization? Route 1 usually applies. SecureDynamics supports the DSOR/CPPO path, and the authorized partner extends the private offer to the end customer. Which route applies if the partner is not CPPO-ready? Route 2 usually applies. SecureDynamics issues the customer offer through the applicable AWS Marketplace private-offer path, includes agreed partner economics where appropriate, receives Marketplace proceeds, and pays the partner its agreed portion after payment is received. What should we review before accepting? Product, seller of record, price, contract term, payment schedule, EULA/terms, tax estimate, PO details, and the AWS account receiving the offer. What permissions are needed? The AWS user or role must have permissions to view and subscribe to AWS Marketplace private offers. Common AWS managed policies include AWSMarketplaceRead-only for viewing and AWSMarketplaceManageSubscriptions or AWSMarketplaceFullAccess for subscription management. What if we use AWS Organizations? Confirm whether the offer should go to the payer/management account or a member account. The customer’s AWS admin should make that decision. What if the offer expires? SecureDynamics can coordinate a refreshed offer. Information on this page is provided to simplify the procurement workflow. AWS Marketplace routing, billing, taxes, offer visibility, private-offer terms, partner eligibility, AWS account creation, AWS Marketplace purchases, and support plans are subject to AWS Marketplace requirements, AWS terms, and the customer’s procurement policies. SecureDynamics coordinates the route, but the final offer structure depends on AWS Marketplace eligibility, required authorizations, and the approved commercial terms. Always review the private offer terms before accepting. [![SD logo transparent](https://securedynamics.net/hs-fs/hubfs/SD%20logo%20transparent.png?width=354&height=92&name=SD%20logo%20transparent.png "SD logo transparent")](https://cm360.securedynamics.net?hsLang=en)   [Join our Team](https://cm360.securedynamics.net/hiring?hsLang=en) [Blog](https://cm360.securedynamics.net/securedynamics-channel/?hsLang=en) [RSS Feed](https://cm360.securedynamics.net/securedynamics-channel/rss.xml?hsLang=en)     © SecureDynamics 2026. All rights reserved. ```json { "@context" : "https://schema.org", "@id" : "https://securedynamics.net/#organization", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "US", "addressLocality" : "Santa Clara", "addressRegion" : "CA", "postalCode" : "95054", "streetAddress" : "5201 Great America Pkwy, Suite 320" }, "logo" : { "@type" : "ImageObject", "url" : "https://securedynamics.net/hubfs/SecureDynamics%20Zscaler%20Logo-1.webp" }, "name" : "SecureDynamics", "sameAs" : [ "https://www.linkedin.com/company/3626024/" ], "url" : "https://securedynamics.net/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://securedynamics.net/#website", "@type" : "WebSite", "inLanguage" : "en-US", "name" : "SecureDynamics", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : { "@type" : "EntryPoint", "urlTemplate" : "https://securedynamics.net/hs-search-results?q={search_term_string}" } }, "publisher" : { "@id" : "https://securedynamics.net/#organization" }, "url" : "https://securedynamics.net/" } ```