servicecatalog:ExecuteProvisionedProductServiceAction is a Write access-level action in the servicecatalog service. Grants permission to executes a provisioned product plan
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants servicecatalog:ExecuteProvisionedProductServiceAction.
Filters access by user to see and perform actions on resources created by anyone in the account
Filters access by user to see and perform actions on resources created either by them or by anyone federating into the same role as them
Filters access by user to see and perform actions on only resources that they created
A minimal policy that allows servicecatalog:ExecuteProvisionedProductServiceAction. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowServicecatalogExecuteProvisionedProductServiceAction",
"Effect": "Allow",
"Action": "servicecatalog:ExecuteProvisionedProductServiceAction",
"Resource": "*"
}
]
}