Service Catalog
Prefix servicecatalog, 117 actions · Domain Management & Governance
9 AWS managed policies. 2 have reviewed guidance; the rest have authoritative permission data pending editorial review. 3 are service-linked role policies, shown with permission data only.
User access (4)
Operator and limited (2)
Service-linked roles (3)
Also grants Service Catalog actions (26)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonLaunchWizard_Fullaccess
- AmazonLaunchWizardFullAccessV2
- AmazonSageMakerFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSControlTowerServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSTransformLandingZoneAgentPolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- SupportUser
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
acceptportfolioshare associateattributegroup associatebudgetwithresource associateprincipalwithportfolio associateproductwithportfolio associateresource associateserviceactionwithprovisioningartifact associatetagoptionwithresource batchassociateserviceactionwithprovisioningartifact batchdisassociateserviceactionfromprovisioningartifact copyproduct createapplication createattributegroup createconstraint createportfolio createportfolioshare createproduct createprovisionedproductplan createprovisioningartifact createserviceaction createtagoption deleteapplication deleteattributegroup deleteconstraint deleteportfolio deleteportfolioshare deleteproduct deleteprovisionedproductplan deleteprovisioningartifact deleteresourcepolicy deleteserviceaction deletetagoption describeconstraint describecopyproductstatus describeportfolio describeportfoliosharestatus describeportfolioshares describeproduct describeproductasadmin describeproductview describeprovisionedproduct describeprovisionedproductplan describeprovisioningartifact describeprovisioningparameters describerecord describeserviceaction describeserviceactionexecutionparameters describetagoption disableawsorganizationsaccess disassociateattributegroup disassociatebudgetfromresource disassociateprincipalfromportfolio disassociateproductfromportfolio disassociateresource disassociateserviceactionfromprovisioningartifact disassociatetagoptionfromresource enableawsorganizationsaccess executeprovisionedproductplan executeprovisionedproductserviceaction getawsorganizationsaccessstatus getapplication getassociatedresource getattributegroup getconfiguration getprovisionedproductoutputs getresourcepolicy importasprovisionedproduct listacceptedportfolioshares listapplications listassociatedattributegroups listassociatedresources listattributegroups listattributegroupsforapplication listbudgetsforresource listconstraintsforportfolio listlaunchpaths listorganizationportfolioaccess listportfolioaccess listportfolios listportfoliosforproduct listprincipalsforportfolio listprovisionedproductplans listprovisioningartifacts listprovisioningartifactsforserviceaction listrecordhistory listresourcesfortagoption listserviceactions listserviceactionsforprovisioningartifact liststackinstancesforprovisionedproduct listtagoptions listtagsforresource notifyprovisionproductengineworkflowresult notifyterminateprovisionedproductengineworkflowresult notifyupdateprovisionedproductengineworkflowresult provisionproduct putconfiguration putresourcepolicy rejectportfolioshare scanprovisionedproducts searchproducts searchproductsasadmin searchprovisionedproducts syncresource tagresource terminateprovisionedproduct untagresource updateapplication updateattributegroup updateconstraint updateportfolio updateportfolioshare updateproduct updateprovisionedproduct updateprovisionedproductproperties updateprovisioningartifact updateserviceaction updatetagoption
Actions (117)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| servicecatalog:AcceptPortfolioShare | Write | 5 | 1 |
| servicecatalog:AssociateAttributeGroup | Write | 6 | 3 |
| servicecatalog:AssociateBudgetWithResource | Write | 5 | 1 |
| servicecatalog:AssociatePrincipalWithPortfolio | Write | 6 | 3 |
| servicecatalog:AssociateProductWithPortfolio | Write | 5 | 3 |
| servicecatalog:AssociateResource | Write | 6 | 1 |
| servicecatalog:AssociateServiceActionWithProvisioningArtifact | Write | 5 | 1 |
| servicecatalog:AssociateTagOptionWithResource | Write | 5 | 1 |
| servicecatalog:BatchAssociateServiceActionWithProvisioningArtifact | Write | 5 | 1 |
| servicecatalog:BatchDisassociateServiceActionFromProvisioningArtifact | Write | 5 | 1 |
| servicecatalog:CopyProduct | Write | 5 | 1 |
| servicecatalog:CreateApplication | Write | 6 | 2 |
| servicecatalog:CreateAttributeGroup | Write | 7 | 2 |
| servicecatalog:CreateConstraint | Write | 5 | 3 |
| servicecatalog:CreatePortfolio | Write | 5 | 3 |
| servicecatalog:CreatePortfolioShare | Permissions management | 5 | 1 |
| servicecatalog:CreateProduct | Write | 5 | 3 |
| servicecatalog:CreateProvisionedProductPlan | Write | 5 | 2 |
| servicecatalog:CreateProvisioningArtifact | Write | 6 | 4 |
| servicecatalog:CreateServiceAction | Write | 5 | 1 |
| servicecatalog:CreateTagOption | Write | 5 | 1 |
| servicecatalog:DeleteApplication | Write | 6 | 2 |
| servicecatalog:DeleteAttributeGroup | Write | 6 | 3 |
| servicecatalog:DeleteConstraint | Write | 5 | 1 |
| servicecatalog:DeletePortfolio | Write | 5 | 1 |
| servicecatalog:DeletePortfolioShare | Permissions management | 5 | 1 |
| servicecatalog:DeleteProduct | Write | 5 | 1 |
| servicecatalog:DeleteProvisionedProductPlan | Write | 5 | 2 |
| servicecatalog:DeleteProvisioningArtifact | Write | 6 | 2 |
| servicecatalog:DeleteResourcePolicy | Write | 5 | 1 |
| servicecatalog:DeleteServiceAction | Write | 5 | 1 |
| servicecatalog:DeleteTagOption | Write | 5 | 1 |
| servicecatalog:DescribeConstraint | Read | 13 | 2 |
| servicecatalog:DescribeCopyProductStatus | Read | 12 | 1 |
| servicecatalog:DescribePortfolio | Read | 14 | 5 |
| servicecatalog:DescribePortfolioShareStatus | Read | 12 | 1 |
| servicecatalog:DescribePortfolioShares | List | 15 | 2 |
| servicecatalog:DescribeProduct | Read | 16 | 1 |
| servicecatalog:DescribeProductAsAdmin | Read | 15 | 2 |
| servicecatalog:DescribeProductView | Read | 16 | 1 |
| servicecatalog:DescribeProvisionedProduct | Read | 13 | 3 |
| servicecatalog:DescribeProvisionedProductPlan | Read | 12 | 3 |
| servicecatalog:DescribeProvisioningArtifact | Read | 15 | 2 |
| servicecatalog:DescribeProvisioningParameters | Read | 16 | 1 |
| servicecatalog:DescribeRecord | Read | 14 | 3 |
| servicecatalog:DescribeServiceAction | Read | 15 | 2 |
| servicecatalog:DescribeServiceActionExecutionParameters | Read | 12 | 3 |
| servicecatalog:DescribeTagOption | Read | 15 | 2 |
| servicecatalog:DisableAWSOrganizationsAccess | Write | 5 | 1 |
| servicecatalog:DisassociateAttributeGroup | Write | 6 | 3 |
| servicecatalog:DisassociateBudgetFromResource | Write | 5 | 1 |
| servicecatalog:DisassociatePrincipalFromPortfolio | Write | 5 | 1 |
| servicecatalog:DisassociateProductFromPortfolio | Write | 5 | 1 |
| servicecatalog:DisassociateResource | Write | 6 | 1 |
| servicecatalog:DisassociateServiceActionFromProvisioningArtifact | Write | 5 | 1 |
| servicecatalog:DisassociateTagOptionFromResource | Write | 5 | 1 |
| servicecatalog:EnableAWSOrganizationsAccess | Write | 5 | 1 |
| servicecatalog:ExecuteProvisionedProductPlan | Write | 5 | 2 |
| servicecatalog:ExecuteProvisionedProductServiceAction | Write | 5 | 2 |
| servicecatalog:GetAWSOrganizationsAccessStatus | Read | 7 | 1 |
| servicecatalog:GetApplication | Read | 19 | 3 |
| servicecatalog:GetAssociatedResource | Read | 9 | 1 |
| servicecatalog:GetAttributeGroup | Read | 16 | 3 |
| servicecatalog:GetConfiguration | Read | 9 | 1 |
| servicecatalog:GetProvisionedProductOutputs | Read | 7 | 1 |
| servicecatalog:GetResourcePolicy | Read | 7 | 1 |
| servicecatalog:ImportAsProvisionedProduct | Write | 5 | 1 |
| servicecatalog:ListAcceptedPortfolioShares | List | 15 | 1 |
| servicecatalog:ListApplications | List | 19 | 2 |
| servicecatalog:ListAssociatedAttributeGroups | List | 16 | 3 |
| servicecatalog:ListAssociatedResources | List | 22 | 2 |
| servicecatalog:ListAttributeGroups | List | 19 | 2 |
| servicecatalog:ListAttributeGroupsForApplication | List | 16 | 1 |
| servicecatalog:ListBudgetsForResource | List | 14 | 1 |
| servicecatalog:ListConstraintsForPortfolio | List | 15 | 2 |
| servicecatalog:ListLaunchPaths | List | 18 | 1 |
| servicecatalog:ListOrganizationPortfolioAccess | List | 14 | 1 |
| servicecatalog:ListPortfolioAccess | List | 15 | 1 |
| servicecatalog:ListPortfolios | List | 16 | 3 |
| servicecatalog:ListPortfoliosForProduct | List | 15 | 2 |
| servicecatalog:ListPrincipalsForPortfolio | List | 15 | 2 |
| servicecatalog:ListProvisionedProductPlans | List | 14 | 3 |
| servicecatalog:ListProvisioningArtifacts | List | 17 | 3 |
| servicecatalog:ListProvisioningArtifactsForServiceAction | List | 14 | 1 |
| servicecatalog:ListRecordHistory | List | 16 | 3 |
| servicecatalog:ListResourcesForTagOption | List | 14 | 2 |
| servicecatalog:ListServiceActions | List | 17 | 2 |
| servicecatalog:ListServiceActionsForProvisioningArtifact | List | 18 | 4 |
| servicecatalog:ListStackInstancesForProvisionedProduct | List | 14 | 3 |
| servicecatalog:ListTagOptions | List | 17 | 2 |
| servicecatalog:ListTagsForResource | Read | 15 | 4 |
| servicecatalog:NotifyProvisionProductEngineWorkflowResult | Write | 4 | 1 |
| servicecatalog:NotifyTerminateProvisionedProductEngineWorkflowResult | Write | 4 | 1 |
| servicecatalog:NotifyUpdateProvisionedProductEngineWorkflowResult | Write | 4 | 1 |
| servicecatalog:ProvisionProduct | Write | 8 | 1 |
| servicecatalog:PutConfiguration | Write | 6 | 1 |
| servicecatalog:PutResourcePolicy | Write | 5 | 1 |
| servicecatalog:RejectPortfolioShare | Write | 5 | 1 |
| servicecatalog:ScanProvisionedProducts | List | 11 | 3 |
| servicecatalog:SearchProducts | List | 13 | 1 |
| servicecatalog:SearchProductsAsAdmin | List | 8 | 2 |
| servicecatalog:SearchProvisionedProducts | List | 9 | 3 |
| servicecatalog:SyncResource | Write | 6 | 1 |
| servicecatalog:TagResource | Tagging | 5 | 5 |
| servicecatalog:TerminateProvisionedProduct | Write | 5 | 4 |
| servicecatalog:UntagResource | Tagging | 5 | 4 |
| servicecatalog:UpdateApplication | Write | 6 | 2 |
| servicecatalog:UpdateAttributeGroup | Write | 6 | 2 |
| servicecatalog:UpdateConstraint | Write | 5 | 1 |
| servicecatalog:UpdatePortfolio | Write | 5 | 1 |
| servicecatalog:UpdatePortfolioShare | Permissions management | 5 | 1 |
| servicecatalog:UpdateProduct | Write | 5 | 1 |
| servicecatalog:UpdateProvisionedProduct | Write | 5 | 4 |
| servicecatalog:UpdateProvisionedProductProperties | Write | 5 | 1 |
| servicecatalog:UpdateProvisioningArtifact | Write | 6 | 2 |
| servicecatalog:UpdateServiceAction | Write | 5 | 1 |
| servicecatalog:UpdateTagOption | Write | 5 | 1 |