AWS Managed Policies Explorer

Home About

AWS Managed Policies. A maze of twisty passages all alike. Explore them here. If it looks like a button, it's clickable. Always up to date.

Service: AWS Service Catalog

Short Name:

servicecatalog

ARN Format:arn:aws:(catalog|servicecatalog):${Region}:${Account}:${ResourceType}/${Id}

ARN Regex:^arn:aws:(catalog|servicecatalog):.+

ReadOnlyAccess

…

AmazonLaunchWizardFullAccessV2

Action	Reference	Description
servicecatalog:DescribePortfolioShares	Docs	Grants permission to view a summary of each of the portfolio shares that were created for the specified portfolio
servicecatalog:ListAcceptedPortfolioShares	Docs	Grants permission to list the portfolios that have been shared with you and you have accepted
servicecatalog:ListApplications	Docs	Grants permission to list your applications
servicecatalog:ListAssociatedAttributeGroups	Docs	Grants permission to list the attribute groups associated with an application
servicecatalog:ListAssociatedResources	Docs	Grants permission to list the resources associated with an application
servicecatalog:ListAttributeGroups	Docs	Grants permission to list your attribute groups
servicecatalog:ListAttributeGroupsForApplication	Docs	Grants permission to list the associated attribute groups for a given application
servicecatalog:ListBudgetsForResource	Docs	Grants permission to list all the budgets associated to a resource
servicecatalog:ListConstraintsForPortfolio	Docs	Grants permission to list constraints associated with a given portfolio
servicecatalog:ListLaunchPaths	Docs	Grants permission to list the different ways to launch a given product as an end-user
servicecatalog:ListOrganizationPortfolioAccess	Docs	Grants permission to list the organization nodes that have access to the specified portfolio
servicecatalog:ListPortfolioAccess	Docs	Grants permission to list the AWS accounts you have shared a given portfolio with
servicecatalog:ListPortfolios	Docs	Grants permission to list the portfolios in your account
servicecatalog:ListPortfoliosForProduct	Docs	Grants permission to list the portfolios associated with a given product
servicecatalog:ListPrincipalsForPortfolio	Docs	Grants permission to list the IAM principals associated with a given portfolio
servicecatalog:ListProvisionedProductPlans	Docs	Grants permission to list the provisioned product plans
servicecatalog:ListProvisioningArtifacts	Docs	Grants permission to list the provisioning artifacts associated with a given product
servicecatalog:ListProvisioningArtifactsForServiceAction	Docs	Grants permission to list all provisioning artifacts for the specified self-service action
servicecatalog:ListRecordHistory	Docs	Grants permission to list all the records in your account or all the records related to a given provisioned product
servicecatalog:ListResourcesForTagOption	Docs	Grants permission to list the resources associated with the specified TagOption
servicecatalog:ListServiceActions	Docs	Grants permission to list all self-service actions
servicecatalog:ListServiceActionsForProvisioningArtifact	Docs	Grants permission to list all the service actions associated with the specified provisioning artifact in your account
servicecatalog:ListStackInstancesForProvisionedProduct	Docs	Grants permission to list account, region and status of each stack instances that are associated with a CFN_STACKSET type provisioned product
servicecatalog:ListTagOptions	Docs	Grants permission to list the specified TagOptions or all TagOptions
servicecatalog:ScanProvisionedProducts	Docs	Grants permission to list all the provisioned products in your account
servicecatalog:SearchProducts	Docs	Grants permission to list the products available to you as an end-user
servicecatalog:SearchProductsAsAdmin	Docs	Grants permission to list all the products in your account or all the products associated with a given portfolio
servicecatalog:SearchProvisionedProducts	Docs	Grants permission to list all the provisioned products in your account
servicecatalog:CreatePortfolioShare	Docs	Grants permission to share a portfolio you own with another AWS account
servicecatalog:DeletePortfolioShare	Docs	Grants permission to unshare a portfolio you own from an AWS account you previously shared the portfolio with
servicecatalog:UpdatePortfolioShare	Docs	Grants permission to enable or disable resource sharing for an existing portfolio share
servicecatalog:DescribeConstraint	Docs	Grants permission to describe a constraint
servicecatalog:DescribeCopyProductStatus	Docs	Grants permission to get the status of the specified copy product operation
servicecatalog:DescribePortfolio	Docs	Grants permission to describe a portfolio
servicecatalog:DescribePortfolioShareStatus	Docs	Grants permission to get the status of the specified portfolio share operation
servicecatalog:DescribeProduct	Docs	Grants permission to describe a product as an end-user
servicecatalog:DescribeProductAsAdmin	Docs	Grants permission to describe a product as an admin
servicecatalog:DescribeProductView	Docs	Grants permission to describe a product as an end-user
servicecatalog:DescribeProvisionedProduct	Docs	Grants permission to describe a provisioned product
servicecatalog:DescribeProvisionedProductPlan	Docs	Grants permission to describe a provisioned product plan
servicecatalog:DescribeProvisioningArtifact	Docs	Grants permission to describe a provisioning artifact
servicecatalog:DescribeProvisioningParameters	Docs	Grants permission to describe the parameters that you need to specify to successfully provision a specified provisioning artifact
servicecatalog:DescribeRecord	Docs	Grants permission to describe a record and lists any outputs
servicecatalog:DescribeServiceAction	Docs	Grants permission to describe a self-service action
servicecatalog:DescribeServiceActionExecutionParameters	Docs	Grants permission to get the default parameters if you executed the specified Service Action on the specified Provisioned Product
servicecatalog:DescribeTagOption	Docs	Grants permission to get information about the specified TagOption
servicecatalog:GetApplication	Docs	Grants permission to get an application
servicecatalog:GetAssociatedResource	Docs	Grants permission to get information about a resource associated to an application
servicecatalog:GetAttributeGroup	Docs	Grants permission to get an attribute group
servicecatalog:GetAWSOrganizationsAccessStatus	Docs	Grants permission to get the access status of AWS Organization portfolio share feature
servicecatalog:GetConfiguration	Docs	Grants permission to read AppRegistry configurations
servicecatalog:GetProvisionedProductOutputs	Docs	Grants permission to get the provisioned product output with either provisioned product id or name
servicecatalog:ListTagsForResource	Docs	Grants permission to list the tags for a service catalog appregistry resource
servicecatalog:TagResource	Docs	Grants permission to tag a service catalog appregistry resource
servicecatalog:UntagResource	Docs	Grants permission to remove a tag from a service catalog appregistry resource
servicecatalog:AcceptPortfolioShare	Docs	Grants permission to accept a portfolio that has been shared with you
servicecatalog:AssociateAttributeGroup	Docs	Grants permission to associate an attribute group with an application
servicecatalog:AssociateBudgetWithResource	Docs	Grants permission to associate a budget with a resource
servicecatalog:AssociatePrincipalWithPortfolio	Docs	Grants permission to associate an IAM principal with a portfolio, giving the specified principal access to any products associated with the specified portfolio
servicecatalog:AssociateProductWithPortfolio	Docs	Grants permission to associate a product with a portfolio
servicecatalog:AssociateResource	Docs	Grants permission to associate a resource with an application
servicecatalog:AssociateServiceActionWithProvisioningArtifact	Docs	Grants permission to associate an action with a provisioning artifact
servicecatalog:AssociateTagOptionWithResource	Docs	Grants permission to associate the specified TagOption with the specified portfolio or product
servicecatalog:BatchAssociateServiceActionWithProvisioningArtifact	Docs	Grants permission to associate multiple self-service actions with provisioning artifacts
servicecatalog:BatchDisassociateServiceActionFromProvisioningArtifact	Docs	Grants permission to disassociate a batch of self-service actions from the specified provisioning artifact
servicecatalog:CopyProduct	Docs	Grants permission to copy the specified source product to the specified target product or a new product
servicecatalog:CreateApplication	Docs	Grants permission to create an application
servicecatalog:CreateAttributeGroup	Docs	Grants permission to create an attribute group
servicecatalog:CreateConstraint	Docs	Grants permission to create a constraint on an associated product and portfolio
servicecatalog:CreatePortfolio	Docs	Grants permission to create a portfolio
servicecatalog:CreateProduct	Docs	Grants permission to create a product and that product's first provisioning artifact
servicecatalog:CreateProvisionedProductPlan	Docs	Grants permission to add a new provisioned product plan
servicecatalog:CreateProvisioningArtifact	Docs	Grants permission to add a new provisioning artifact to an existing product
servicecatalog:CreateServiceAction	Docs	Grants permission to create a self-service action
servicecatalog:CreateTagOption	Docs	Grants permission to create a TagOption
servicecatalog:DeleteApplication	Docs	Grants permission to delete an application if all associations have been removed from the application
servicecatalog:DeleteAttributeGroup	Docs	Grants permission to delete an attribute group if all associations have been removed from the attribute group
servicecatalog:DeleteConstraint	Docs	Grants permission to remove and delete an existing constraint from an associated product and portfolio
servicecatalog:DeletePortfolio	Docs	Grants permission to delete a portfolio if all associations and shares have been removed from the portfolio
servicecatalog:DeleteProduct	Docs	Grants permission to delete a product if all associations have been removed from the product
servicecatalog:DeleteProvisionedProductPlan	Docs	Grants permission to delete a provisioned product plan
servicecatalog:DeleteProvisioningArtifact	Docs	Grants permission to delete a provisioning artifact from a product
servicecatalog:DeleteServiceAction	Docs	Grants permission to delete a self-service action
servicecatalog:DeleteTagOption	Docs	Grants permission to delete the specified TagOption
servicecatalog:DisableAWSOrganizationsAccess	Docs	Grants permission to disable portfolio sharing through AWS Organizations feature
servicecatalog:DisassociateAttributeGroup	Docs	Grants permission to disassociate an attribute group from an application
servicecatalog:DisassociateBudgetFromResource	Docs	Grants permission to disassociate a budget from a resource
servicecatalog:DisassociatePrincipalFromPortfolio	Docs	Grants permission to disassociate an IAM principal from a portfolio
servicecatalog:DisassociateProductFromPortfolio	Docs	Grants permission to disassociate a product from a portfolio
servicecatalog:DisassociateResource	Docs	Grants permission to disassociate a resource from an application
servicecatalog:DisassociateServiceActionFromProvisioningArtifact	Docs	Grants permission to disassociate the specified self-service action association from the specified provisioning artifact
servicecatalog:DisassociateTagOptionFromResource	Docs	Grants permission to disassociate the specified TagOption from the specified resource
servicecatalog:EnableAWSOrganizationsAccess	Docs	Grants permission to enable portfolio sharing feature through AWS Organizations
servicecatalog:ExecuteProvisionedProductPlan	Docs	Grants permission to execute a provisioned product plan
servicecatalog:ExecuteProvisionedProductServiceAction	Docs	Grants permission to executes a provisioned product plan
servicecatalog:ImportAsProvisionedProduct	Docs	Grants permission to import a resource into a provisioned product
servicecatalog:NotifyProvisionProductEngineWorkflowResult	Docs	Grants permission to notify the result of the provisioning engine execution
servicecatalog:NotifyTerminateProvisionedProductEngineWorkflowResult	Docs	Grants permission to notify the result of the terminate engine execution
servicecatalog:NotifyUpdateProvisionedProductEngineWorkflowResult	Docs	Grants permission to notify the result of the update engine execution
servicecatalog:ProvisionProduct	Docs	Grants permission to provision a product with a specified provisioning artifact and launch parameters
servicecatalog:PutConfiguration	Docs	Grants permission to assign AppRegistry configurations
servicecatalog:RejectPortfolioShare	Docs	Grants permission to reject a portfolio that has been shared with you that you previously accepted
servicecatalog:SyncResource	Docs	Grants permission to sync a resource with its current state in AppRegistry
servicecatalog:TerminateProvisionedProduct	Docs	Grants permission to terminate an existing provisioned product
servicecatalog:UpdateApplication	Docs	Grants permission to update the attributes of an existing application
servicecatalog:UpdateAttributeGroup	Docs	Grants permission to update the attributes of an existing attribute group
servicecatalog:UpdateConstraint	Docs	Grants permission to update the metadata fields of an existing constraint
servicecatalog:UpdatePortfolio	Docs	Grants permission to update the metadata fields and/or tags of an existing portfolio
servicecatalog:UpdateProduct	Docs	Grants permission to update the metadata fields and/or tags of an existing product
servicecatalog:UpdateProvisionedProduct	Docs	Grants permission to update an existing provisioned product
servicecatalog:UpdateProvisionedProductProperties	Docs	Grants permission to update the properties of an existing provisioned product
servicecatalog:UpdateProvisioningArtifact	Docs	Grants permission to update the metadata fields of an existing provisioning artifact
servicecatalog:UpdateServiceAction	Docs	Grants permission to update a self-service action
servicecatalog:UpdateTagOption	Docs	Grants permission to update the specified TagOption

aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeysservicecatalog:Resourceservicecatalog:ResourceTypeservicecatalog:accountLevelservicecatalog:roleLevelservicecatalog:userLevel