servicecatalog

117 actions in the servicecatalog service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

servicecatalog:AcceptPortfolioShare

Write

Grants permission to accept a portfolio that has been shared with you

servicecatalog:AssociateAttributeGroup

Write

Grants permission to associate an attribute group with an application

servicecatalog:AssociateBudgetWithResource

Write

Grants permission to associate a budget with a resource

servicecatalog:AssociatePrincipalWithPortfolio

Write

Grants permission to associate an IAM principal with a portfolio, giving the specified principal access to any products associated with the specified portfolio

servicecatalog:AssociateProductWithPortfolio

Write

Grants permission to associate a product with a portfolio

servicecatalog:AssociateResource

Write

Grants permission to associate a resource with an application

servicecatalog:AssociateServiceActionWithProvisioningArtifact

Write

Grants permission to associate an action with a provisioning artifact

servicecatalog:AssociateTagOptionWithResource

Write

Grants permission to associate the specified TagOption with the specified portfolio or product

servicecatalog:BatchAssociateServiceActionWithProvisioningArtifact

Write

Grants permission to associate multiple self-service actions with provisioning artifacts

servicecatalog:BatchDisassociateServiceActionFromProvisioningArtifact

Write

Grants permission to disassociate a batch of self-service actions from the specified provisioning artifact

servicecatalog:CopyProduct

Write

Grants permission to copy the specified source product to the specified target product or a new product

servicecatalog:CreateApplication

Write

Grants permission to create an application

servicecatalog:CreateAttributeGroup

Write

Grants permission to create an attribute group

servicecatalog:CreateConstraint

Write

Grants permission to create a constraint on an associated product and portfolio

servicecatalog:CreatePortfolio

Write

Grants permission to create a portfolio

servicecatalog:CreatePortfolioShare

Permissions management

Grants permission to share a portfolio you own with another AWS account

servicecatalog:CreateProduct

Write

Grants permission to create a product and that product's first provisioning artifact

servicecatalog:CreateProvisionedProductPlan

Write

Grants permission to add a new provisioned product plan

servicecatalog:CreateProvisioningArtifact

Write

Grants permission to add a new provisioning artifact to an existing product

servicecatalog:CreateServiceAction

Write

Grants permission to create a self-service action

servicecatalog:CreateTagOption

Write

Grants permission to create a TagOption

servicecatalog:DeleteApplication

Write

Grants permission to delete an application if all associations have been removed from the application

servicecatalog:DeleteAttributeGroup

Write

Grants permission to delete an attribute group if all associations have been removed from the attribute group

servicecatalog:DeleteConstraint

Write

Grants permission to remove and delete an existing constraint from an associated product and portfolio

servicecatalog:DeletePortfolio

Write

Grants permission to delete a portfolio if all associations and shares have been removed from the portfolio

servicecatalog:DeletePortfolioShare

Permissions management

Grants permission to unshare a portfolio you own from an AWS account you previously shared the portfolio with

servicecatalog:DeleteProduct

Write

Grants permission to delete a product if all associations have been removed from the product

servicecatalog:DeleteProvisionedProductPlan

Write

Grants permission to delete a provisioned product plan

servicecatalog:DeleteProvisioningArtifact

Write

Grants permission to delete a provisioning artifact from a product

servicecatalog:DeleteResourcePolicy

Write

Grants permission to delete a resource-based policy for the specified resource

servicecatalog:DeleteServiceAction

Write

Grants permission to delete a self-service action

servicecatalog:DeleteTagOption

Write

Grants permission to delete the specified TagOption

servicecatalog:DescribeConstraint

Read

Grants permission to describe a constraint

servicecatalog:DescribeCopyProductStatus

Read

Grants permission to get the status of the specified copy product operation

servicecatalog:DescribePortfolio

Read

Grants permission to describe a portfolio

servicecatalog:DescribePortfolioShares

List

Grants permission to view a summary of each of the portfolio shares that were created for the specified portfolio

servicecatalog:DescribePortfolioShareStatus

Read

Grants permission to get the status of the specified portfolio share operation

servicecatalog:DescribeProduct

Read

Grants permission to describe a product as an end-user

servicecatalog:DescribeProductAsAdmin

Read

Grants permission to describe a product as an admin

servicecatalog:DescribeProductView

Read

Grants permission to describe a product as an end-user

servicecatalog:DescribeProvisionedProduct

Read

Grants permission to describe a provisioned product

servicecatalog:DescribeProvisionedProductPlan

Read

Grants permission to describe a provisioned product plan

servicecatalog:DescribeProvisioningArtifact

Read

Grants permission to describe a provisioning artifact

servicecatalog:DescribeProvisioningParameters

Read

Grants permission to describe the parameters that you need to specify to successfully provision a specified provisioning artifact

servicecatalog:DescribeRecord

Read

Grants permission to describe a record and lists any outputs

servicecatalog:DescribeServiceAction

Read

Grants permission to describe a self-service action

servicecatalog:DescribeServiceActionExecutionParameters

Read

Grants permission to get the default parameters if you executed the specified Service Action on the specified Provisioned Product

servicecatalog:DescribeTagOption

Read

Grants permission to get information about the specified TagOption

servicecatalog:DisableAWSOrganizationsAccess

Write

Grants permission to disable portfolio sharing through AWS Organizations feature

servicecatalog:DisassociateAttributeGroup

Write

Grants permission to disassociate an attribute group from an application

servicecatalog:DisassociateBudgetFromResource

Write

Grants permission to disassociate a budget from a resource

servicecatalog:DisassociatePrincipalFromPortfolio

Write

Grants permission to disassociate an IAM principal from a portfolio

servicecatalog:DisassociateProductFromPortfolio

Write

Grants permission to disassociate a product from a portfolio

servicecatalog:DisassociateResource

Write

Grants permission to disassociate a resource from an application

servicecatalog:DisassociateServiceActionFromProvisioningArtifact

Write

Grants permission to disassociate the specified self-service action association from the specified provisioning artifact

servicecatalog:DisassociateTagOptionFromResource

Write

Grants permission to disassociate the specified TagOption from the specified resource

servicecatalog:EnableAWSOrganizationsAccess

Write

Grants permission to enable portfolio sharing feature through AWS Organizations

servicecatalog:ExecuteProvisionedProductPlan

Write

Grants permission to execute a provisioned product plan

servicecatalog:ExecuteProvisionedProductServiceAction

Write

Grants permission to executes a provisioned product plan

servicecatalog:GetApplication

Read

Grants permission to get an application

servicecatalog:GetAssociatedResource

Read

Grants permission to get information about a resource associated to an application

servicecatalog:GetAttributeGroup

Read

Grants permission to get an attribute group

servicecatalog:GetAWSOrganizationsAccessStatus

Read

Grants permission to get the access status of AWS Organization portfolio share feature

servicecatalog:GetConfiguration

Read

Grants permission to read AppRegistry configurations

servicecatalog:GetProvisionedProductOutputs

Read

Grants permission to get the provisioned product output with either provisioned product id or name

servicecatalog:GetResourcePolicy

Read

Grants permission to get a resource-based policy for the specified resource

servicecatalog:ImportAsProvisionedProduct

Write

Grants permission to import a resource into a provisioned product

servicecatalog:ListAcceptedPortfolioShares

List

Grants permission to list the portfolios that have been shared with you and you have accepted

servicecatalog:ListApplications

List

Grants permission to list your applications

servicecatalog:ListAssociatedAttributeGroups

List

Grants permission to list the attribute groups associated with an application

servicecatalog:ListAssociatedResources

List

Grants permission to list the resources associated with an application

servicecatalog:ListAttributeGroups

List

Grants permission to list your attribute groups

servicecatalog:ListAttributeGroupsForApplication

List

Grants permission to list the associated attribute groups for a given application

servicecatalog:ListBudgetsForResource

List

Grants permission to list all the budgets associated to a resource

servicecatalog:ListConstraintsForPortfolio

List

Grants permission to list constraints associated with a given portfolio

servicecatalog:ListLaunchPaths

List

Grants permission to list the different ways to launch a given product as an end-user

servicecatalog:ListOrganizationPortfolioAccess

List

Grants permission to list the organization nodes that have access to the specified portfolio

servicecatalog:ListPortfolioAccess

List

Grants permission to list the AWS accounts you have shared a given portfolio with

servicecatalog:ListPortfolios

List

Grants permission to list the portfolios in your account

servicecatalog:ListPortfoliosForProduct

List

Grants permission to list the portfolios associated with a given product

servicecatalog:ListPrincipalsForPortfolio

List

Grants permission to list the IAM principals associated with a given portfolio

servicecatalog:ListProvisionedProductPlans

List

Grants permission to list the provisioned product plans

servicecatalog:ListProvisioningArtifacts

List

Grants permission to list the provisioning artifacts associated with a given product

servicecatalog:ListProvisioningArtifactsForServiceAction

List

Grants permission to list all provisioning artifacts for the specified self-service action

servicecatalog:ListRecordHistory

List

Grants permission to list all the records in your account or all the records related to a given provisioned product

servicecatalog:ListResourcesForTagOption

List

Grants permission to list the resources associated with the specified TagOption

servicecatalog:ListServiceActions

List

Grants permission to list all self-service actions

servicecatalog:ListServiceActionsForProvisioningArtifact

List

Grants permission to list all the service actions associated with the specified provisioning artifact in your account

servicecatalog:ListStackInstancesForProvisionedProduct

List

Grants permission to list account, region and status of each stack instances that are associated with a CFN_STACKSET type provisioned product

servicecatalog:ListTagOptions

List

Grants permission to list the specified TagOptions or all TagOptions

servicecatalog:ListTagsForResource

Read

Grants permission to list the tags for a service catalog appregistry resource

servicecatalog:NotifyProvisionProductEngineWorkflowResult

Write

Grants permission to notify the result of the provisioning engine execution

servicecatalog:NotifyTerminateProvisionedProductEngineWorkflowResult

Write

Grants permission to notify the result of the terminate engine execution

servicecatalog:NotifyUpdateProvisionedProductEngineWorkflowResult

Write

Grants permission to notify the result of the update engine execution

servicecatalog:ProvisionProduct

Write

Grants permission to provision a product with a specified provisioning artifact and launch parameters

servicecatalog:PutConfiguration

Write

Grants permission to assign AppRegistry configurations

servicecatalog:PutResourcePolicy

Write

Grants permission to add a resource-based policy for the specified resource

servicecatalog:RejectPortfolioShare

Write

Grants permission to reject a portfolio that has been shared with you that you previously accepted

servicecatalog:ScanProvisionedProducts

List

Grants permission to list all the provisioned products in your account

servicecatalog:SearchProducts

List

Grants permission to list the products available to you as an end-user

servicecatalog:SearchProductsAsAdmin

List

Grants permission to list all the products in your account or all the products associated with a given portfolio

servicecatalog:SearchProvisionedProducts

List

Grants permission to list all the provisioned products in your account

servicecatalog:SyncResource

Write

Grants permission to sync a resource with its current state in AppRegistry

servicecatalog:TagResource

Tagging

Grants permission to tag a service catalog appregistry resource

servicecatalog:TerminateProvisionedProduct

Write

Grants permission to terminate an existing provisioned product

servicecatalog:UntagResource

Tagging

Grants permission to remove a tag from a service catalog appregistry resource

servicecatalog:UpdateApplication

Write

Grants permission to update the attributes of an existing application

servicecatalog:UpdateAttributeGroup

Write

Grants permission to update the attributes of an existing attribute group

servicecatalog:UpdateConstraint

Write

Grants permission to update the metadata fields of an existing constraint

servicecatalog:UpdatePortfolio

Write

Grants permission to update the metadata fields and/or tags of an existing portfolio

servicecatalog:UpdatePortfolioShare

Permissions management

Grants permission to enable or disable resource sharing for an existing portfolio share

servicecatalog:UpdateProduct

Write

Grants permission to update the metadata fields and/or tags of an existing product

servicecatalog:UpdateProvisionedProduct

Write

Grants permission to update an existing provisioned product

servicecatalog:UpdateProvisionedProductProperties

Write

Grants permission to update the properties of an existing provisioned product

servicecatalog:UpdateProvisioningArtifact

Write

Grants permission to update the metadata fields of an existing provisioning artifact

servicecatalog:UpdateServiceAction

Write

Grants permission to update a self-service action

servicecatalog:UpdateTagOption

Write

Grants permission to update the specified TagOption