ECZ-ID Plugin Passport AWS Marketplace Getting Started and Technical Guide

• CUSTOMER OUTCOME

  A working Plugin Passport linked to the relevant account/Parent and available for public Resolver verification.

• NOT THE OUTCOME

  A new AWS identity authority or a duplicate Plugin identity for every subscription.

• WHAT SUBSCRIBE DOES

  Creates the AWS Marketplace acquisition/subscription relationship for the free Plugin Passport listing.

• WHAT IT DOES NOT DO

  It does not by itself issue the Passport or turn AWS account identity into the canonical Plugin identity.

• USE INTENDED AWS ACCOUNT

  Subscribe from the AWS account intended for this acquisition context.

• NO FREE TRIAL

  The product is already free.

• NO PRIVATE OFFER REQUIRED

  This free Passport does not require a private offer.

• CONTINUE

  Choose Set up your account after subscription.

• REGISTRATION TOKEN

  A sensitive, short-lived acquisition handoff used by the AWS Marketplace integration.

• CUSTOMER SECRET?

  No. Do not store, share, paste into tickets, screenshots or documentation.

FULFILLMENT

https://trustops.ecocitizenz.com/aws/marketplace/fulfill

• BROWSER REDIRECT

  The user is redirected into the supported ECZ-ID acquisition path.

• DO NOT COPY TOKEN

  Let the integration process the registration token.

• EXISTING CUSTOMER

  Use the supported sign-in/reuse path when you already have an account.

• FAILURE

  Record the visible error and time - never the token.

• AWS-NATIVE ADAPTER

  Uses the appropriate Marketplace integration to resolve the AWS customer/acquisition context.

• TRUSTOPS

  Owns acquisition, entitlement/activation and lifecycle handoff - not canonical identity truth.

• ON SUCCESS

  Continue into supported account/Parent reuse or create and Plugin Passport issue or reuse.

• ON FAILURE

  Do not repeatedly retry by creating new accounts or package identities as a workaround.

• REUSE WHEN APPROPRIATE

  Existing supported account/Parent context should be preferred where it represents the same customer/organisation.

• CREATE WHEN REQUIRED

  A new supported account/Parent may be created only when the canonical acquisition flow genuinely requires one.

• SAME ORGANISATION

  Reuse supported organisation/Parent context.

• SAME PLUGIN OBJECT

  Issue or reuse the canonical Plugin Passport according to supported mapping.

• DIFFERENT OBJECT

  Use a distinct Passport only when the plugin/extension/integration component boundary genuinely differs.

• RECOVERY PROBLEM

  Recover access first; do not mint replacements to bypass sign-in issues.

• FAMILY MAPPING

  ProductCode → Plugin Passport family.

• IDENTITY RESULT

  Issue a new Plugin Passport where the object legitimately needs one, or reuse the canonical Passport where the intended plugin/extension identity already exists.

• OBJECT

  Plugin / extension / integration component.

• PARENT

  Relevant organisation/Parent where applicable.

• DASHBOARD

  Authenticated customer control after activation.

• RESOLVER

  Public, independent proof re-check after issuance/reuse.

• DASHBOARD IS

  Authenticated customer control: view/manage permitted Passport, binding, evidence and lifecycle actions.

• DASHBOARD IS NOT

  The public Resolver and not the canonical Core itself.

• CHECK IDENTITY

  Confirm the Plugin ECZ-ID / family.

• CHECK RELATIONSHIP

  Confirm organisation/Parent context.

• CHECK CURRENT STATE

  Confirm published lifecycle/version/capability context where supported.

• CONTINUE

  Open Resolver and independently re-check the same ECZ-ID.

• If required proof is present and fresh → evaluate local plugin/host policy / proceed

• If absent, stale or mismatched → challenge, deny, pin or re-resolve

MACHINE ROUTE

GET https://api.ecocitizenz.com/api/p/{ecz_id}.json

• VERIFY

  Family/object · organisation/Parent · state · store/repository/package/host/version bindings · evidence where present.

• DO NOT INFER

  Code safety, signature validity, vulnerability-free status, host approval or execution permission unless separately established.

• SUBSCRIBE UNAVAILABLE

  Confirm you can see the Limited/Public listing and are using the intended AWS account.

• SET UP ACCOUNT FAILS

  Record visible error/time; never expose the registration token.

• RESOLVECUSTOMER FAILS

  Contact support with AWS context and failed stage.

• WRONG/DUPLICATE IDENTITY

  Stop; recover or reuse the canonical account/Parent/Passport where supported.

• RESOLVER MISSING

  Confirm acquisition/issuance completed and the ECZ-ID is correct.

• PLUGIN RUNTIME / HOST ISSUE

  Diagnose store/package access, signature, vulnerability, permissions or host/runtime problems separately.

• SUBSCRIPTION

  AWS Marketplace subscription is active at $0.

• ACCOUNT

  Supported EcoCitizenz account/Parent was reused or created as appropriate.

• FAMILY MAPPING

  ProductCode mapped to Plugin Passport.

• PASSPORT

  The intended Plugin Passport was issued or reused without duplicate identity.

• DASHBOARD

  The Passport is visible under the correct customer context.

• RESOLVER

  The same ECZ-ID resolves publicly and can be re-checked.