Couple AFI to an AMI on the Marketplace

Hi there,

We released [an AMI](https://aws.amazon.com/marketplace/pp/prodview-imfiyzy7svjgu) on the public marketplace, that leverages a specific AFI. Within our organization, we always have access to the AFI if we launch this AMI.

If I launch it as an external user, the AFI isn't loaded due to permission issues. We don't want to make our AFI completely public, since users could bypass our marketplace product easily. Do you have an idea on how to tie the AFI to the given AMI that was purchased through the Marketplace?

Start by reviewing the linked AWS Marketplace AMI and the AFI-loading behavior for external users, focusing on the permission boundary described in the issue. Determine whether AWS Marketplace exposes a supported way to couple access to the purchased AMI; done means a confirmed implementation path or a documented limitation and recommended approach.

Written by the indexing model from the issue text.