Module Awso_servicecatalog.ValuesSource

Sourceval service : Awso.Service.t
Sourceval apiVersion : string
Sourceval endpointPrefix : string
Sourceval serviceFullName : string
Sourceval signatureVersion : string
Sourceval protocol : string
Sourceval globalEndpoint : string
Sourceval targetPrefix : string
Sourceval simple_to_json : ('a -> Awso__Botodata.value) -> 'a -> Yojson.Safe.t
Sourceval composed_to_json : ('a -> Awso__Botodata.value) -> 'a -> Yojson.Safe.t
Sourceval to_query : ('a -> Awso.Client.Query.value) -> 'a -> Awso.Client.Query.t
Sourceval structure_to_value_aux : ('a * 'b option) list -> f:(('a * 'b) list -> 'c) -> [> `Structure of 'c ]
Sourceval structure_to_value : ('a * 'b option) list -> [> `Structure of ('a * 'b) list ]
Sourceval structure_to_wrapped_value : wrapper:'a -> response:'a -> ('b * 'c option) list -> [> `Structure of ('a * [> `Structure of ('b * 'c) list ]) list ]
Sourcemodule CodeStarConnectionArn : sig ... end
Sourcemodule Repository : sig ... end
Sourcemodule RepositoryArtifactPath : sig ... end
Sourcemodule RepositoryBranch : sig ... end
Sourcemodule PropertyName : sig ... end
Sourcemodule RequiresRecreation : sig ... end
Sourcemodule ResourceAttribute : sig ... end
Sourcemodule TagKey : sig ... end
Sourcemodule TagValue : sig ... end
Sourcemodule Id : sig ... end
Sourcemodule LastSuccessfulSyncTime : sig ... end
Sourcemodule LastSyncStatus : sig ... end
Sourcemodule LastSyncStatusMessage : sig ... end
Sourcemodule LastSyncTime : sig ... end
Sourcemodule CodeStarParameters : sig ... end

The subtype containing details about the Codestar connection Type.

Sourcemodule ErrorCode : sig ... end
Sourcemodule ErrorDescription : sig ... end
Sourcemodule RecordTagKey : sig ... end
Sourcemodule RecordTagValue : sig ... end
Sourcemodule ConstraintDescription : sig ... end
Sourcemodule ConstraintType : sig ... end
Sourcemodule String_ : sig ... end
Sourcemodule CausingEntity : sig ... end
Sourcemodule EvaluationType : sig ... end
Sourcemodule ResourceTargetDefinition : sig ... end

Information about a change to a resource attribute.

Sourcemodule AccountId : sig ... end
Sourcemodule Tag : sig ... end

Information about a tag. A tag is a key-value pair. Tags are propagated to the resources created when provisioning a product.

Sourcemodule ApproximateCount : sig ... end
Sourcemodule AttributeValue : sig ... end
Sourcemodule HasDefaultPath : sig ... end
Sourcemodule ProductType : sig ... end
Sourcemodule ProductViewDistributor : sig ... end
Sourcemodule ProductViewName : sig ... end
Sourcemodule ProductViewOwner : sig ... end
Sourcemodule SupportDescription : sig ... end
Sourcemodule SupportEmail : sig ... end
Sourcemodule SupportUrl : sig ... end
Sourcemodule LastSync : sig ... end

Provides details about the product's connection sync and contains the following sub-fields. LastSyncTime LastSyncStatus LastSyncStatusMessage LastSuccessfulSyncTime LastSuccessfulSyncProvisioningArtifactID

Provides connection details.

Sourcemodule SourceType : sig ... end
Sourcemodule RecordError : sig ... end

The error code and description resulting from an operation.

Sourcemodule RecordTag : sig ... end

Information about a tag, which is a key-value pair.

Sourcemodule ProvisioningArtifactName : sig ... end
Sourcemodule ConstraintSummary : sig ... end

Summary information about a constraint.

Sourcemodule ExecutionParameterValue : sig ... end
Sourcemodule AllowedValues : sig ... end
Sourcemodule TagOptionValue : sig ... end
Sourcemodule ParameterKey : sig ... end
Sourcemodule ParameterValue : sig ... end
Sourcemodule UsePreviousValue : sig ... end
Sourcemodule ResourceChangeDetail : sig ... end

Information about a change to a resource attribute.

Sourcemodule Error : sig ... end
Sourcemodule Message : sig ... end
Sourcemodule Namespaces : sig ... end
Sourcemodule ServiceActionDescription : sig ... end
Sourcemodule ServiceActionName : sig ... end
Sourcemodule Region : sig ... end
Sourcemodule CreatedTime : sig ... end
Sourcemodule IdempotencyToken : sig ... end
Sourcemodule PhysicalId : sig ... end
Sourcemodule ProvisionedProductStatus : sig ... end
Sourcemodule ProvisionedProductType : sig ... end
Sourcemodule Tags : sig ... end
Sourcemodule UserArn : sig ... end
Sourcemodule UserArnSession : sig ... end

A single product view aggregation value/count pair, containing metadata about each product to which the calling user has access.

Sourcemodule ProductViewFilterValue : sig ... end
Sourcemodule ProductViewSummary : sig ... end

Summary information about a product view.

Sourcemodule ResourceARN : sig ... end
Sourcemodule SourceConnectionDetail : sig ... end

Provides details about the configured SourceConnection.

Sourcemodule Status : sig ... end
Sourcemodule LastRequestId : sig ... end
Sourcemodule ProvisionedProductId : sig ... end
Sourcemodule RoleArn : sig ... end
Sourcemodule Description : sig ... end
Sourcemodule OutputKey : sig ... end
Sourcemodule OutputValue : sig ... end
Sourcemodule UniqueTagKey : sig ... end
Sourcemodule UniqueTagValue : sig ... end
Sourcemodule Owner : sig ... end
Sourcemodule TagOptionActive : sig ... end
Sourcemodule TagOptionId : sig ... end
Sourcemodule TagOptionKey : sig ... end
Sourcemodule StackInstanceStatus : sig ... end
Sourcemodule ResourceDetailARN : sig ... end
Sourcemodule ResourceDetailCreatedTime : sig ... end
Sourcemodule ResourceDetailDescription : sig ... end
Sourcemodule ResourceDetailId : sig ... end
Sourcemodule ResourceDetailName : sig ... end
Sourcemodule ProvisionedProductName : sig ... end
Sourcemodule RecordErrors : sig ... end
Sourcemodule RecordStatus : sig ... end
Sourcemodule RecordTags : sig ... end
Sourcemodule RecordType : sig ... end
Sourcemodule UpdatedTime : sig ... end
Sourcemodule CreationTime : sig ... end
Sourcemodule ProvisioningArtifactType : sig ... end
Sourcemodule SourceRevision : sig ... end
Sourcemodule ProvisioningArtifact : sig ... end

Information about a provisioning artifact. A provisioning artifact is also known as a product version.

Sourcemodule PrincipalARN : sig ... end
Sourcemodule PrincipalType : sig ... end
Sourcemodule PortfolioDescription : sig ... end
Sourcemodule PortfolioDisplayName : sig ... end
Sourcemodule ProviderName : sig ... end
Sourcemodule OrganizationNodeType : sig ... end
Sourcemodule OrganizationNodeValue : sig ... end
Sourcemodule ConstraintSummaries : sig ... end
Sourcemodule PortfolioName : sig ... end
Sourcemodule BudgetName : sig ... end
Sourcemodule ExecutionParameterKey : sig ... end
Sourcemodule ExecutionParameterType : sig ... end
Sourcemodule OutputDescription : sig ... end
Sourcemodule DefaultValue : sig ... end
Sourcemodule NoEcho : sig ... end
Sourcemodule ParameterConstraints : sig ... end

The constraints that the administrator has put on the parameter.

Sourcemodule ParameterType : sig ... end
Sourcemodule TagOptionValues : sig ... end
Sourcemodule InstructionType : sig ... end
Sourcemodule InstructionValue : sig ... end
Sourcemodule NotificationArn : sig ... end

The parameter key-value pair used to update a provisioned product.

Sourcemodule ChangeAction : sig ... end
Sourcemodule LogicalResourceId : sig ... end
Sourcemodule PhysicalResourceId : sig ... end
Sourcemodule PlanResourceType : sig ... end
Sourcemodule Replacement : sig ... end
Sourcemodule ResourceChangeDetails : sig ... end
Sourcemodule Scope : sig ... end
Sourcemodule CloudWatchDashboardName : sig ... end
Sourcemodule ProvisioningArtifactInfo : sig ... end
Sourcemodule Boolean : sig ... end
Sourcemodule ShareError : sig ... end

Errors that occurred during the portfolio share operation.

Sourcemodule ServiceActionSummary : sig ... end

Detailed information about the self-service action.

Sourcemodule PropertyKey : sig ... end
Sourcemodule PropertyValue : sig ... end
Sourcemodule StackSetAccounts : sig ... end
Sourcemodule StackSetOperationType : sig ... end
Sourcemodule StackSetRegions : sig ... end

Information about a provisioned product.

Sourcemodule AccessLevelFilterKey : sig ... end
Sourcemodule AccessLevelFilterValue : sig ... end
Sourcemodule ProductViewFilterBy : sig ... end
Sourcemodule ProductViewFilterValues : sig ... end
Sourcemodule ProductViewDetail : sig ... end

Information about a product view.

Sourcemodule ProvisionedProductDetail : sig ... end

Information about a provisioned product.

Sourcemodule ProvisioningParameter : sig ... end

Information about a parameter used to provision a product.

Sourcemodule RecordOutput : sig ... end

The output for the product created as the result of a request. For example, the output for a CloudFormation-backed product that creates an S3 bucket would include the S3 bucket URL.

The unique key-value pair for a tag that identifies provisioned product resources.

Sourcemodule TagOptionDetail : sig ... end

Information about a TagOption.

Sourcemodule StackInstance : sig ... end

An CloudFormation stack, in a specific account and Region, that's part of a stack set operation. A stack instance is a reference to an attempted or actual stack in a given account within a given Region. A stack instance can exist without a stack—for example, if the stack couldn't be created for some reason. A stack instance is associated with only one stack set. Each stack instance contains the ID of its associated stack set, as well as the ID of the actual stack and the stack status.

Sourcemodule ResourceDetail : sig ... end

Information about a resource.

Sourcemodule RecordDetail : sig ... end

Information about a request operation.

Sourcemodule SearchFilterKey : sig ... end
Sourcemodule SearchFilterValue : sig ... end

Information about a provisioning artifact (also known as a version) for a product.

Sourcemodule ProvisioningArtifactView : sig ... end

An object that contains summary information about a product view and a provisioning artifact.

Summary information about a plan.

Sourcemodule Principal : sig ... end

Information about a principal.

Sourcemodule PortfolioDetail : sig ... end

Information about a portfolio.

Sourcemodule OrganizationNode : sig ... end

Information about the organization node.

Sourcemodule LaunchPathSummary : sig ... end

Summary information about a product path for a user.

Sourcemodule ConstraintDetail : sig ... end

Information about a constraint.

Sourcemodule BudgetDetail : sig ... end

Information about a budget.

Sourcemodule ExecutionParameter : sig ... end

Details of an execution parameter value that is passed to a self-service action when executed on a provisioned product.

Provisioning artifact output.

Information about a parameter used to provision a product.

Sourcemodule TagOptionSummary : sig ... end

Summary information about a TagOption.

Sourcemodule UsageInstruction : sig ... end

Additional information provided by the administrator.

Sourcemodule NotificationArns : sig ... end
Sourcemodule StatusMessage : sig ... end
Sourcemodule ResourceChange : sig ... end

Information about a resource change that will occur when a plan is executed.

Sourcemodule CloudWatchDashboard : sig ... end

Information about a CloudWatch dashboard.

Sourcemodule LaunchPath : sig ... end

A launch path object.

Summary information about a provisioning artifact (also known as a version) for a product.

Sourcemodule PortfolioShareDetail : sig ... end

Information about the portfolio share.

Sourcemodule ShareErrors : sig ... end
Sourcemodule SuccessfulShares : sig ... end
Sourcemodule DisableTemplateValidation : sig ... end
Sourcemodule CopyOption : sig ... end

An object containing information about the error, along with identifying information about the self-service action and its associations.

Sourcemodule ServiceActionAssociation : sig ... end

A self-service action association consisting of the Action ID, the Product ID, and the Provisioning Artifact ID.

The specified resource is a duplicate.

One or more parameters provided to the operation are not valid.

Sourcemodule ResourceNotFoundException : sig ... end

The specified resource was not found.

An operation requiring TagOptions failed because the TagOptions migration process has not been performed for this account. Use the Amazon Web Services Management Console to perform the migration process before retrying the operation.

Sourcemodule ServiceActionDetail : sig ... end

An object containing detailed information about the self-service action.

Sourcemodule AcceptLanguage : sig ... end
Sourcemodule InvalidStateException : sig ... end

An attempt was made to modify a resource that is in a state that is not valid. Check your resources to ensure that they are in valid states before retrying the operation.

The user-defined preferences that will be applied when updating a provisioned product. Not all preferences are applicable to all provisioned product types.

Sourcemodule AddTags : sig ... end
Sourcemodule SourceConnection : sig ... end

A top level ProductViewDetail response containing details about the product’s connection. Service Catalog returns this field for the CreateProduct, UpdateProduct, DescribeProductAsAdmin, and SearchProductAsAdmin APIs. This response contains the same fields as the ConnectionParameters request, with the addition of the LastSync response.

Sourcemodule TagKeys : sig ... end

The operation is not supported.

Sourcemodule ShareStatus : sig ... end
Sourcemodule NullableBoolean : sig ... end
Sourcemodule LimitExceededException : sig ... end

The current limits of the service would have been exceeded by this operation. Decrease your resource use or increase your service limits and retry the operation.

Sourcemodule ConstraintParameters : sig ... end
Sourcemodule IgnoreErrors : sig ... end
Sourcemodule RetainPhysicalResources : sig ... end
Sourcemodule PageToken : sig ... end
Sourcemodule TotalResultsCount : sig ... end
Sourcemodule AccessLevelFilter : sig ... end

The access level to use to filter results.

Sourcemodule ProvisionedProductFilters : sig ... end
Sourcemodule SortField : sig ... end
Sourcemodule SortOrder : sig ... end
Sourcemodule ProductViewAggregations : sig ... end
Sourcemodule ProductViewSummaries : sig ... end
Sourcemodule PageSizeMax100 : sig ... end
Sourcemodule ProductViewFilters : sig ... end
Sourcemodule ProductViewSortBy : sig ... end
Sourcemodule ProductViewDetails : sig ... end
Sourcemodule PageSize : sig ... end
Sourcemodule ProductSource : sig ... end
Sourcemodule ProvisionedProductDetails : sig ... end
Sourcemodule PortfolioShareType : sig ... end
Sourcemodule ProvisioningParameters : sig ... end
Sourcemodule ProvisioningPreferences : sig ... end

The user-defined preferences that will be applied when updating a provisioned product. Not all preferences are applicable to all provisioned product type One or more Amazon Web Services accounts that will have access to the provisioned product. Applicable only to a CFN_STACKSET provisioned product type. The Amazon Web Services accounts specified should be within the list of accounts in the STACKSET constraint. To get the list of accounts in the STACKSET constraint, use the DescribeProvisioningParameters operation. If no values are specified, the default value is all accounts from the STACKSET constraint.

Sourcemodule EngineWorkflowStatus : sig ... end
Sourcemodule EngineWorkflowToken : sig ... end
Sourcemodule RecordOutputs : sig ... end

The ID for the provisioned product resources that are part of a resource group.

Sourcemodule TagOptionDetails : sig ... end
Sourcemodule ListTagOptionsFilters : sig ... end

Filters to use when listing TagOptions.

Sourcemodule StackInstances : sig ... end
Sourcemodule ServiceActionSummaries : sig ... end
Sourcemodule ResourceDetails : sig ... end
Sourcemodule ResourceType : sig ... end
Sourcemodule RecordDetails : sig ... end

The search filter to use when listing history records.

Sourcemodule ProvisioningArtifactViews : sig ... end
Sourcemodule ProvisionedProductPlans : sig ... end
Sourcemodule Principals : sig ... end
Sourcemodule PortfolioDetails : sig ... end
Sourcemodule AccountIds : sig ... end
Sourcemodule OrganizationNodes : sig ... end
Sourcemodule LaunchPathSummaries : sig ... end
Sourcemodule ConstraintDetails : sig ... end
Sourcemodule Budgets : sig ... end
Sourcemodule OutputKeys : sig ... end
Sourcemodule AccessStatus : sig ... end
Sourcemodule ExecutionParameterMap : sig ... end
Sourcemodule ResourceId : sig ... end
Sourcemodule ResourceInUseException : sig ... end

A resource that is currently in use. Ensure that the resource is not in use and retry the operation.

Sourcemodule ExecutionParameters : sig ... end

The user-defined preferences that will be applied during product provisioning, unless overridden by ProvisioningPreferences or UpdateProvisioningPreferences. For more information on maximum concurrent accounts and failure tolerance, see Stack set operation options in the CloudFormation User Guide.

Sourcemodule TagOptionSummaries : sig ... end
Sourcemodule UsageInstructions : sig ... end
Sourcemodule Verbose : sig ... end

Information about a plan.

Sourcemodule ResourceChanges : sig ... end
Sourcemodule CloudWatchDashboards : sig ... end
Sourcemodule ProvisioningArtifacts : sig ... end
Sourcemodule LaunchPaths : sig ... end
Sourcemodule PortfolioShareDetails : sig ... end
Sourcemodule ShareDetails : sig ... end

Information about the portfolio share operation.

Sourcemodule CopyProductStatus : sig ... end
Sourcemodule StatusDetail : sig ... end

Information about a provisioning artifact (also known as a version) for a product.

Sourcemodule CopyOptions : sig ... end
Sourcemodule ProductArn : sig ... end
Sourcemodule ServiceActionAssociations : sig ... end
Sourcemodule UpdateTagOptionOutput : sig ... end

Updates the specified TagOption.

Sourcemodule UpdateTagOptionInput : sig ... end

Updates the specified TagOption.

Sourcemodule UpdateServiceActionOutput : sig ... end

Updates a self-service action.

Sourcemodule UpdateServiceActionInput : sig ... end

Updates a self-service action.

Updates the specified provisioning artifact (also known as a version) for the specified product. You cannot update a provisioning artifact for a product that was shared with you.

Updates the specified provisioning artifact (also known as a version) for the specified product. You cannot update a provisioning artifact for a product that was shared with you.

Requests updates to the properties of the specified provisioned product.

Requests updates to the properties of the specified provisioned product.

Requests updates to the configuration of the specified provisioned product. If there are tags associated with the object, they cannot be updated or added. Depending on the specific updates requested, this operation can update with no interruption, with some interruption, or replace the provisioned product entirely. You can check the status of this request using DescribeRecord.

Requests updates to the configuration of the specified provisioned product. If there are tags associated with the object, they cannot be updated or added. Depending on the specific updates requested, this operation can update with no interruption, with some interruption, or replace the provisioned product entirely. You can check the status of this request using DescribeRecord.

Sourcemodule UpdateProductOutput : sig ... end

Updates the specified product.

Sourcemodule UpdateProductInput : sig ... end

Updates the specified product.

Updates the specified portfolio share. You can use this API to enable or disable TagOptions sharing or Principal sharing for an existing portfolio share. The portfolio share cannot be updated if the CreatePortfolioShare operation is IN_PROGRESS, as the share is not available to recipient entities. In this case, you must wait for the portfolio share to be completed. You must provide the accountId or organization node in the input, but not both. If the portfolio is shared to both an external account and an organization node, and both shares need to be updated, you must invoke UpdatePortfolioShare separately for each share type. This API cannot be used for removing the portfolio share. You must use DeletePortfolioShare API for that action. When you associate a principal with portfolio, a potential privilege escalation path may occur when that portfolio is then shared with other accounts. For a user in a recipient account who is not an Service Catalog Admin, but still has the ability to create Principals (Users/Groups/Roles), that user could create a role that matches a principal name association for the portfolio. Although this user may not know which principal names are associated through Service Catalog, they may be able to guess the user. If this potential escalation path is a concern, then Service Catalog recommends using PrincipalType as IAM. With this configuration, the PrincipalARN must already exist in the recipient account before it can be associated.

Sourcemodule UpdatePortfolioShareInput : sig ... end

Updates the specified portfolio share. You can use this API to enable or disable TagOptions sharing or Principal sharing for an existing portfolio share. The portfolio share cannot be updated if the CreatePortfolioShare operation is IN_PROGRESS, as the share is not available to recipient entities. In this case, you must wait for the portfolio share to be completed. You must provide the accountId or organization node in the input, but not both. If the portfolio is shared to both an external account and an organization node, and both shares need to be updated, you must invoke UpdatePortfolioShare separately for each share type. This API cannot be used for removing the portfolio share. You must use DeletePortfolioShare API for that action. When you associate a principal with portfolio, a potential privilege escalation path may occur when that portfolio is then shared with other accounts. For a user in a recipient account who is not an Service Catalog Admin, but still has the ability to create Principals (Users/Groups/Roles), that user could create a role that matches a principal name association for the portfolio. Although this user may not know which principal names are associated through Service Catalog, they may be able to guess the user. If this potential escalation path is a concern, then Service Catalog recommends using PrincipalType as IAM. With this configuration, the PrincipalARN must already exist in the recipient account before it can be associated.

Sourcemodule UpdatePortfolioOutput : sig ... end

Updates the specified portfolio. You cannot update a product that was shared with you.

Sourcemodule UpdatePortfolioInput : sig ... end

Updates the specified portfolio. You cannot update a product that was shared with you.

Sourcemodule UpdateConstraintOutput : sig ... end

Updates the specified constraint.

Sourcemodule UpdateConstraintInput : sig ... end

Updates the specified constraint.

Terminates the specified provisioned product. This operation does not delete any records associated with the provisioned product. You can check the status of this request using DescribeRecord.

Terminates the specified provisioned product. This operation does not delete any records associated with the provisioned product. You can check the status of this request using DescribeRecord.

Gets information about the provisioned products that meet the specified criteria.

Gets information about the provisioned products that meet the specified criteria.

Sourcemodule SearchProductsOutput : sig ... end

Gets information about the products to which the caller has access.

Sourcemodule SearchProductsInput : sig ... end

Gets information about the products to which the caller has access.

Gets information about the products for the specified portfolio or all products.

Gets information about the products for the specified portfolio or all products.

Lists the provisioned products that are available (not terminated). To use additional filtering, see SearchProvisionedProducts.

Lists the provisioned products that are available (not terminated). To use additional filtering, see SearchProvisionedProducts.

Rejects an offer to share the specified portfolio.

Sourcemodule RejectPortfolioShareInput : sig ... end

Rejects an offer to share the specified portfolio.

Sourcemodule ProvisionProductOutput : sig ... end

Provisions the specified product. A provisioned product is a resourced instance of a product. For example, provisioning a product that's based on an CloudFormation template launches an CloudFormation stack and its underlying resources. You can check the status of this request using DescribeRecord. If the request contains a tag key with an empty list of values, there's a tag conflict for that key. Don't include conflicted keys as tags, or this will cause the error "Parameter validation failed: Missing required parameter in Tags[N]:Value". When provisioning a product that's been added to a portfolio, you must grant your user, group, or role access to the portfolio. For more information, see Granting users access in the Service Catalog User Guide.

Sourcemodule ProvisionProductInput : sig ... end

Provisions the specified product. A provisioned product is a resourced instance of a product. For example, provisioning a product that's based on an CloudFormation template launches an CloudFormation stack and its underlying resources. You can check the status of this request using DescribeRecord. If the request contains a tag key with an empty list of values, there's a tag conflict for that key. Don't include conflicted keys as tags, or this will cause the error "Parameter validation failed: Missing required parameter in Tags[N]:Value". When provisioning a product that's been added to a portfolio, you must grant your user, group, or role access to the portfolio. For more information, see Granting users access in the Service Catalog User Guide.

Notifies the result of the update engine execution.

Notifies the result of the update engine execution.

Notifies the result of the terminate engine execution.

Notifies the result of the terminate engine execution.

Notifies the result of the provisioning engine execution.

Notifies the result of the provisioning engine execution.

Sourcemodule ListTagOptionsOutput : sig ... end

Lists the specified TagOptions or all TagOptions.

Sourcemodule ListTagOptionsInput : sig ... end

Lists the specified TagOptions or all TagOptions.

Returns summary information about stack instances that are associated with the specified CFN_STACKSET type provisioned product. You can filter for stack instances that are associated with a specific Amazon Web Services account name or Region.

Returns summary information about stack instances that are associated with the specified CFN_STACKSET type provisioned product. You can filter for stack instances that are associated with a specific Amazon Web Services account name or Region.

Sourcemodule ListServiceActionsOutput : sig ... end

Lists all self-service actions.

Sourcemodule ListServiceActionsInput : sig ... end

Lists all self-service actions.

Returns a paginated list of self-service actions associated with the specified Product ID and Provisioning Artifact ID.

Returns a paginated list of self-service actions associated with the specified Product ID and Provisioning Artifact ID.

Lists the resources associated with the specified TagOption.

Lists the resources associated with the specified TagOption.

Sourcemodule ListRecordHistoryOutput : sig ... end

Lists the specified requests or all performed requests.

Sourcemodule ListRecordHistoryInput : sig ... end

Lists the specified requests or all performed requests.

Lists all provisioning artifacts (also known as versions) for the specified product.

Lists all provisioning artifacts (also known as versions) for the specified product.

Lists all provisioning artifacts (also known as versions) for the specified self-service action.

Lists all provisioning artifacts (also known as versions) for the specified self-service action.

Lists the plans for the specified provisioned product or all plans to which the user has access.

Lists the plans for the specified provisioned product or all plans to which the user has access.

Lists all PrincipalARNs and corresponding PrincipalTypes associated with the specified portfolio.

Lists all PrincipalARNs and corresponding PrincipalTypes associated with the specified portfolio.

Sourcemodule ListPortfoliosOutput : sig ... end

Lists all portfolios in the catalog.

Sourcemodule ListPortfoliosInput : sig ... end

Lists all portfolios in the catalog.

Lists all portfolios that the specified product is associated with.

Lists all portfolios that the specified product is associated with.

Sourcemodule ListPortfolioAccessOutput : sig ... end

Lists the account IDs that have access to the specified portfolio. A delegated admin can list the accounts that have access to the shared portfolio. Note that if a delegated admin is de-registered, they can no longer perform this operation.

Sourcemodule ListPortfolioAccessInput : sig ... end

Lists the account IDs that have access to the specified portfolio. A delegated admin can list the accounts that have access to the shared portfolio. Note that if a delegated admin is de-registered, they can no longer perform this operation.

Lists the organization nodes that have access to the specified portfolio. This API can only be called by the management account in the organization or by a delegated admin. If a delegated admin is de-registered, they can no longer perform this operation.

Lists the organization nodes that have access to the specified portfolio. This API can only be called by the management account in the organization or by a delegated admin. If a delegated admin is de-registered, they can no longer perform this operation.

Sourcemodule ListLaunchPathsOutput : sig ... end

Lists the paths to the specified product. A path describes how the user gets access to a specified product and is necessary when provisioning a product. A path also determines the constraints that are put on a product. A path is dependent on a specific product, porfolio, and principal. When provisioning a product that's been added to a portfolio, you must grant your user, group, or role access to the portfolio. For more information, see Granting users access in the Service Catalog User Guide.

Sourcemodule ListLaunchPathsInput : sig ... end

Lists the paths to the specified product. A path describes how the user gets access to a specified product and is necessary when provisioning a product. A path also determines the constraints that are put on a product. A path is dependent on a specific product, porfolio, and principal. When provisioning a product that's been added to a portfolio, you must grant your user, group, or role access to the portfolio. For more information, see Granting users access in the Service Catalog User Guide.

Lists the constraints for the specified portfolio and product.

Lists the constraints for the specified portfolio and product.

Lists all the budgets associated to the specified resource.

Lists all the budgets associated to the specified resource.

Lists all imported portfolios for which account-to-account shares were accepted by this account. By specifying the PortfolioShareType, you can list portfolios for which organizational shares were accepted by this account.

Lists all imported portfolios for which account-to-account shares were accepted by this account. By specifying the PortfolioShareType, you can list portfolios for which organizational shares were accepted by this account.

Requests the import of a resource as an Service Catalog provisioned product that is associated to an Service Catalog product and provisioning artifact. Once imported, all supported governance actions are supported on the provisioned product. Resource import only supports CloudFormation stack ARNs. CloudFormation StackSets, and non-root nested stacks, are not supported. The CloudFormation stack must have one of the following statuses to be imported: CREATE_COMPLETE, UPDATE_COMPLETE, UPDATE_ROLLBACK_COMPLETE, IMPORT_COMPLETE, and IMPORT_ROLLBACK_COMPLETE. Import of the resource requires that the CloudFormation stack template matches the associated Service Catalog product provisioning artifact. When you import an existing CloudFormation stack into a portfolio, Service Catalog does not apply the product's associated constraints during the import process. Service Catalog applies the constraints after you call UpdateProvisionedProduct for the provisioned product. The user or role that performs this operation must have the cloudformation:GetTemplate and cloudformation:DescribeStacks IAM policy permissions. You can only import one provisioned product at a time. The product's CloudFormation stack must have the IMPORT_COMPLETE status before you import another.

Requests the import of a resource as an Service Catalog provisioned product that is associated to an Service Catalog product and provisioning artifact. Once imported, all supported governance actions are supported on the provisioned product. Resource import only supports CloudFormation stack ARNs. CloudFormation StackSets, and non-root nested stacks, are not supported. The CloudFormation stack must have one of the following statuses to be imported: CREATE_COMPLETE, UPDATE_COMPLETE, UPDATE_ROLLBACK_COMPLETE, IMPORT_COMPLETE, and IMPORT_ROLLBACK_COMPLETE. Import of the resource requires that the CloudFormation stack template matches the associated Service Catalog product provisioning artifact. When you import an existing CloudFormation stack into a portfolio, Service Catalog does not apply the product's associated constraints during the import process. Service Catalog applies the constraints after you call UpdateProvisionedProduct for the provisioned product. The user or role that performs this operation must have the cloudformation:GetTemplate and cloudformation:DescribeStacks IAM policy permissions. You can only import one provisioned product at a time. The product's CloudFormation stack must have the IMPORT_COMPLETE status before you import another.

This API takes either a ProvisonedProductId or a ProvisionedProductName, along with a list of one or more output keys, and responds with the key/value pairs of those outputs.

This API takes either a ProvisonedProductId or a ProvisionedProductName, along with a list of one or more output keys, and responds with the key/value pairs of those outputs.

Get the Access Status for Organizations portfolio share feature. This API can only be called by the management account in the organization or by a delegated admin.

Get the Access Status for Organizations portfolio share feature. This API can only be called by the management account in the organization or by a delegated admin.

Executes a self-service action against a provisioned product.

Executes a self-service action against a provisioned product.

Provisions or modifies a product based on the resource changes for the specified plan.

Provisions or modifies a product based on the resource changes for the specified plan.

Enable portfolio sharing feature through Organizations. This API will allow Service Catalog to receive updates on your organization in order to sync your shares with the current structure. This API can only be called by the management account in the organization. When you call this API, Service Catalog calls organizations:EnableAWSServiceAccess on your behalf so that your shares stay in sync with any changes in your Organizations structure. Note that a delegated administrator is not authorized to invoke EnableAWSOrganizationsAccess. If you have previously disabled Organizations access for Service Catalog, and then enable access again, the portfolio access permissions might not sync with the latest changes to the organization structure. Specifically, accounts that you removed from the organization after disabling Service Catalog access, and before you enabled access again, can retain access to the previously shared portfolio. As a result, an account that has been removed from the organization might still be able to create or manage Amazon Web Services resources when it is no longer authorized to do so. Amazon Web Services is working to resolve this issue.

Enable portfolio sharing feature through Organizations. This API will allow Service Catalog to receive updates on your organization in order to sync your shares with the current structure. This API can only be called by the management account in the organization. When you call this API, Service Catalog calls organizations:EnableAWSServiceAccess on your behalf so that your shares stay in sync with any changes in your Organizations structure. Note that a delegated administrator is not authorized to invoke EnableAWSOrganizationsAccess. If you have previously disabled Organizations access for Service Catalog, and then enable access again, the portfolio access permissions might not sync with the latest changes to the organization structure. Specifically, accounts that you removed from the organization after disabling Service Catalog access, and before you enabled access again, can retain access to the previously shared portfolio. As a result, an account that has been removed from the organization might still be able to create or manage Amazon Web Services resources when it is no longer authorized to do so. Amazon Web Services is working to resolve this issue.

Disassociates the specified TagOption from the specified resource.

Disassociates the specified TagOption from the specified resource.

Disassociates the specified self-service action association from the specified provisioning artifact.

Disassociates the specified self-service action association from the specified provisioning artifact.

Disassociates the specified product from the specified portfolio. A delegated admin is authorized to invoke this command.

Disassociates the specified product from the specified portfolio. A delegated admin is authorized to invoke this command.

Disassociates a previously associated principal ARN from a specified portfolio. The PrincipalType and PrincipalARN must match the AssociatePrincipalWithPortfolio call request details. For example, to disassociate an association created with a PrincipalARN of PrincipalType IAM you must use the PrincipalType IAM when calling DisassociatePrincipalFromPortfolio. For portfolios that have been shared with principal name sharing enabled: after disassociating a principal, share recipient accounts will no longer be able to provision products in this portfolio using a role matching the name of the associated principal. For more information, review associate-principal-with-portfolio in the Amazon Web Services CLI Command Reference. If you disassociate a principal from a portfolio, with PrincipalType as IAM, the same principal will still have access to the portfolio if it matches one of the associated principals of type IAM_PATTERN. To fully remove access for a principal, verify all the associated Principals of type IAM_PATTERN, and then ensure you disassociate any IAM_PATTERN principals that match the principal whose access you are removing.

Disassociates a previously associated principal ARN from a specified portfolio. The PrincipalType and PrincipalARN must match the AssociatePrincipalWithPortfolio call request details. For example, to disassociate an association created with a PrincipalARN of PrincipalType IAM you must use the PrincipalType IAM when calling DisassociatePrincipalFromPortfolio. For portfolios that have been shared with principal name sharing enabled: after disassociating a principal, share recipient accounts will no longer be able to provision products in this portfolio using a role matching the name of the associated principal. For more information, review associate-principal-with-portfolio in the Amazon Web Services CLI Command Reference. If you disassociate a principal from a portfolio, with PrincipalType as IAM, the same principal will still have access to the portfolio if it matches one of the associated principals of type IAM_PATTERN. To fully remove access for a principal, verify all the associated Principals of type IAM_PATTERN, and then ensure you disassociate any IAM_PATTERN principals that match the principal whose access you are removing.

Disassociates the specified budget from the specified resource.

Disassociates the specified budget from the specified resource.

Disable portfolio sharing through the Organizations service. This command will not delete your current shares, but prevents you from creating new shares throughout your organization. Current shares are not kept in sync with your organization structure if the structure changes after calling this API. Only the management account in the organization can call this API. You cannot call this API if there are active delegated administrators in the organization. Note that a delegated administrator is not authorized to invoke DisableAWSOrganizationsAccess. If you share an Service Catalog portfolio in an organization within Organizations, and then disable Organizations access for Service Catalog, the portfolio access permissions will not sync with the latest changes to the organization structure. Specifically, accounts that you removed from the organization after disabling Service Catalog access will retain access to the previously shared portfolio.

Disable portfolio sharing through the Organizations service. This command will not delete your current shares, but prevents you from creating new shares throughout your organization. Current shares are not kept in sync with your organization structure if the structure changes after calling this API. Only the management account in the organization can call this API. You cannot call this API if there are active delegated administrators in the organization. Note that a delegated administrator is not authorized to invoke DisableAWSOrganizationsAccess. If you share an Service Catalog portfolio in an organization within Organizations, and then disable Organizations access for Service Catalog, the portfolio access permissions will not sync with the latest changes to the organization structure. Specifically, accounts that you removed from the organization after disabling Service Catalog access will retain access to the previously shared portfolio.

Sourcemodule DescribeTagOptionOutput : sig ... end

Gets information about the specified TagOption.

Sourcemodule DescribeTagOptionInput : sig ... end

Gets information about the specified TagOption.

Describes a self-service action.

Describes a self-service action.

Finds the default parameters for a specific self-service action on a specific provisioned product and returns a map of the results to the user.

Finds the default parameters for a specific self-service action on a specific provisioned product and returns a map of the results to the user.

Sourcemodule DescribeRecordOutput : sig ... end

Gets information about the specified request operation. Use this operation after calling a request operation (for example, ProvisionProduct, TerminateProvisionedProduct, or UpdateProvisionedProduct). If a provisioned product was transferred to a new owner using UpdateProvisionedProductProperties, the new owner will be able to describe all past records for that product. The previous owner will no longer be able to describe the records, but will be able to use ListRecordHistory to see the product's history from when he was the owner.

Sourcemodule DescribeRecordInput : sig ... end

Gets information about the specified request operation. Use this operation after calling a request operation (for example, ProvisionProduct, TerminateProvisionedProduct, or UpdateProvisionedProduct). If a provisioned product was transferred to a new owner using UpdateProvisionedProductProperties, the new owner will be able to describe all past records for that product. The previous owner will no longer be able to describe the records, but will be able to use ListRecordHistory to see the product's history from when he was the owner.

Gets information about the configuration required to provision the specified product using the specified provisioning artifact. If the output contains a TagOption key with an empty list of values, there is a TagOption conflict for that key. The end user cannot take action to fix the conflict, and launch is not blocked. In subsequent calls to ProvisionProduct, do not include conflicted TagOption keys as tags, or this causes the error "Parameter validation failed: Missing required parameter in Tags[N]:Value". Tag the provisioned product with the value sc-tagoption-conflict-portfolioId-productId.

Gets information about the configuration required to provision the specified product using the specified provisioning artifact. If the output contains a TagOption key with an empty list of values, there is a TagOption conflict for that key. The end user cannot take action to fix the conflict, and launch is not blocked. In subsequent calls to ProvisionProduct, do not include conflicted TagOption keys as tags, or this causes the error "Parameter validation failed: Missing required parameter in Tags[N]:Value". Tag the provisioned product with the value sc-tagoption-conflict-portfolioId-productId.

Gets information about the specified provisioning artifact (also known as a version) for the specified product.

Gets information about the specified provisioning artifact (also known as a version) for the specified product.

Gets information about the resource changes for the specified plan.

Gets information about the resource changes for the specified plan.

Gets information about the specified provisioned product.

DescribeProvisionedProductAPI input structure. AcceptLanguage - [Optional] The language code for localization. Id - [Optional] The provisioned product identifier. Name - [Optional] Another provisioned product identifier. Customers must provide either Id or Name.

Sourcemodule DescribeProductViewOutput : sig ... end

Gets information about the specified product.

Sourcemodule DescribeProductViewInput : sig ... end

Gets information about the specified product.

Sourcemodule DescribeProductOutput : sig ... end

Gets information about the specified product. Running this operation with administrator access results in a failure. DescribeProductAsAdmin should be used instead.

Sourcemodule DescribeProductInput : sig ... end

Gets information about the specified product. Running this operation with administrator access results in a failure. DescribeProductAsAdmin should be used instead.

Gets information about the specified product. This operation is run with administrator access.

Gets information about the specified product. This operation is run with administrator access.

Returns a summary of each of the portfolio shares that were created for the specified portfolio. You can use this API to determine which accounts or organizational nodes this portfolio have been shared, whether the recipient entity has imported the share, and whether TagOptions are included with the share. The PortfolioId and Type parameters are both required.

Returns a summary of each of the portfolio shares that were created for the specified portfolio. You can use this API to determine which accounts or organizational nodes this portfolio have been shared, whether the recipient entity has imported the share, and whether TagOptions are included with the share. The PortfolioId and Type parameters are both required.

Gets the status of the specified portfolio share operation. This API can only be called by the management account in the organization or by a delegated admin.

Gets the status of the specified portfolio share operation. This API can only be called by the management account in the organization or by a delegated admin.

Sourcemodule DescribePortfolioOutput : sig ... end

Gets information about the specified portfolio. A delegated admin is authorized to invoke this command.

Sourcemodule DescribePortfolioInput : sig ... end

Gets information about the specified portfolio. A delegated admin is authorized to invoke this command.

Gets the status of the specified copy product operation.

Gets the status of the specified copy product operation.

Sourcemodule DescribeConstraintOutput : sig ... end

Gets information about the specified constraint.

Sourcemodule DescribeConstraintInput : sig ... end

Gets information about the specified constraint.

Sourcemodule DeleteTagOptionOutput : sig ... end

Deletes the specified TagOption. You cannot delete a TagOption if it is associated with a product or portfolio.

Sourcemodule DeleteTagOptionInput : sig ... end

Deletes the specified TagOption. You cannot delete a TagOption if it is associated with a product or portfolio.

Sourcemodule DeleteServiceActionOutput : sig ... end

Deletes a self-service action.

Sourcemodule DeleteServiceActionInput : sig ... end

Deletes a self-service action.

Deletes the specified provisioning artifact (also known as a version) for the specified product. You cannot delete a provisioning artifact associated with a product that was shared with you. You cannot delete the last provisioning artifact for a product, because a product must have at least one provisioning artifact.

Deletes the specified provisioning artifact (also known as a version) for the specified product. You cannot delete a provisioning artifact associated with a product that was shared with you. You cannot delete the last provisioning artifact for a product, because a product must have at least one provisioning artifact.

Deletes the specified plan.

Deletes the specified plan.

Sourcemodule DeleteProductOutput : sig ... end

Deletes the specified product. You cannot delete a product if it was shared with you or is associated with a portfolio. A delegated admin is authorized to invoke this command.

Sourcemodule DeleteProductInput : sig ... end

Deletes the specified product. You cannot delete a product if it was shared with you or is associated with a portfolio. A delegated admin is authorized to invoke this command.

Stops sharing the specified portfolio with the specified account or organization node. Shares to an organization node can only be deleted by the management account of an organization or by a delegated administrator. Note that if a delegated admin is de-registered, portfolio shares created from that account are removed.

Sourcemodule DeletePortfolioShareInput : sig ... end

Stops sharing the specified portfolio with the specified account or organization node. Shares to an organization node can only be deleted by the management account of an organization or by a delegated administrator. Note that if a delegated admin is de-registered, portfolio shares created from that account are removed.

Sourcemodule DeletePortfolioOutput : sig ... end

Deletes the specified portfolio. You cannot delete a portfolio if it was shared with you or if it has associated products, users, constraints, or shared accounts. A delegated admin is authorized to invoke this command.

Sourcemodule DeletePortfolioInput : sig ... end

Deletes the specified portfolio. You cannot delete a portfolio if it was shared with you or if it has associated products, users, constraints, or shared accounts. A delegated admin is authorized to invoke this command.

Sourcemodule DeleteConstraintOutput : sig ... end

Deletes the specified constraint. A delegated admin is authorized to invoke this command.

Sourcemodule DeleteConstraintInput : sig ... end

Deletes the specified constraint. A delegated admin is authorized to invoke this command.

Sourcemodule CreateTagOptionOutput : sig ... end

Creates a TagOption.

Sourcemodule CreateTagOptionInput : sig ... end

Creates a TagOption.

Sourcemodule CreateServiceActionOutput : sig ... end

Creates a self-service action.

Sourcemodule CreateServiceActionInput : sig ... end

Creates a self-service action.

Creates a provisioning artifact (also known as a version) for the specified product. You cannot create a provisioning artifact for a product that was shared with you. The user or role that performs this operation must have the cloudformation:GetTemplate IAM policy permission. This policy permission is required when using the ImportFromPhysicalId template source in the information data section.

Creates a provisioning artifact (also known as a version) for the specified product. You cannot create a provisioning artifact for a product that was shared with you. The user or role that performs this operation must have the cloudformation:GetTemplate IAM policy permission. This policy permission is required when using the ImportFromPhysicalId template source in the information data section.

Creates a plan. A plan includes the list of resources to be created (when provisioning a new product) or modified (when updating a provisioned product) when the plan is executed. You can create one plan for each provisioned product. To create a plan for an existing provisioned product, the product status must be AVAILABLE or TAINTED. To view the resource changes in the change set, use DescribeProvisionedProductPlan. To create or modify the provisioned product, use ExecuteProvisionedProductPlan.

Creates a plan. A plan includes the list of resources to be created (when provisioning a new product) or modified (when updating a provisioned product) when the plan is executed. You can create one plan for each provisioned product. To create a plan for an existing provisioned product, the product status must be AVAILABLE or TAINTED. To view the resource changes in the change set, use DescribeProvisionedProductPlan. To create or modify the provisioned product, use ExecuteProvisionedProductPlan.

Sourcemodule CreateProductOutput : sig ... end

Creates a product. A delegated admin is authorized to invoke this command. The user or role that performs this operation must have the cloudformation:GetTemplate IAM policy permission. This policy permission is required when using the ImportFromPhysicalId template source in the information data section.

Sourcemodule CreateProductInput : sig ... end

Creates a product. A delegated admin is authorized to invoke this command. The user or role that performs this operation must have the cloudformation:GetTemplate IAM policy permission. This policy permission is required when using the ImportFromPhysicalId template source in the information data section.

Shares the specified portfolio with the specified account or organization node. Shares to an organization node can only be created by the management account of an organization or by a delegated administrator. You can share portfolios to an organization, an organizational unit, or a specific account. Note that if a delegated admin is de-registered, they can no longer create portfolio shares. AWSOrganizationsAccess must be enabled in order to create a portfolio share to an organization node. You can't share a shared resource, including portfolios that contain a shared product. If the portfolio share with the specified account or organization node already exists, this action will have no effect and will not return an error. To update an existing share, you must use the UpdatePortfolioShare API instead. When you associate a principal with portfolio, a potential privilege escalation path may occur when that portfolio is then shared with other accounts. For a user in a recipient account who is not an Service Catalog Admin, but still has the ability to create Principals (Users/Groups/Roles), that user could create a role that matches a principal name association for the portfolio. Although this user may not know which principal names are associated through Service Catalog, they may be able to guess the user. If this potential escalation path is a concern, then Service Catalog recommends using PrincipalType as IAM. With this configuration, the PrincipalARN must already exist in the recipient account before it can be associated.

Sourcemodule CreatePortfolioShareInput : sig ... end

Shares the specified portfolio with the specified account or organization node. Shares to an organization node can only be created by the management account of an organization or by a delegated administrator. You can share portfolios to an organization, an organizational unit, or a specific account. Note that if a delegated admin is de-registered, they can no longer create portfolio shares. AWSOrganizationsAccess must be enabled in order to create a portfolio share to an organization node. You can't share a shared resource, including portfolios that contain a shared product. If the portfolio share with the specified account or organization node already exists, this action will have no effect and will not return an error. To update an existing share, you must use the UpdatePortfolioShare API instead. When you associate a principal with portfolio, a potential privilege escalation path may occur when that portfolio is then shared with other accounts. For a user in a recipient account who is not an Service Catalog Admin, but still has the ability to create Principals (Users/Groups/Roles), that user could create a role that matches a principal name association for the portfolio. Although this user may not know which principal names are associated through Service Catalog, they may be able to guess the user. If this potential escalation path is a concern, then Service Catalog recommends using PrincipalType as IAM. With this configuration, the PrincipalARN must already exist in the recipient account before it can be associated.

Sourcemodule CreatePortfolioOutput : sig ... end

Creates a portfolio. A delegated admin is authorized to invoke this command.

Sourcemodule CreatePortfolioInput : sig ... end

Creates a portfolio. A delegated admin is authorized to invoke this command.

Sourcemodule CreateConstraintOutput : sig ... end

Creates a constraint. A delegated admin is authorized to invoke this command.

Sourcemodule CreateConstraintInput : sig ... end

Creates a constraint. A delegated admin is authorized to invoke this command.

Sourcemodule CopyProductOutput : sig ... end

Copies the specified source product to the specified target product or a new product. You can copy a product to the same account or another account. You can copy a product to the same Region or another Region. If you copy a product to another account, you must first share the product in a portfolio using CreatePortfolioShare. This operation is performed asynchronously. To track the progress of the operation, use DescribeCopyProductStatus.

Sourcemodule CopyProductInput : sig ... end

Copies the specified source product to the specified target product or a new product. You can copy a product to the same account or another account. You can copy a product to the same Region or another Region. If you copy a product to another account, you must first share the product in a portfolio using CreatePortfolioShare. This operation is performed asynchronously. To track the progress of the operation, use DescribeCopyProductStatus.

Disassociates a batch of self-service actions from the specified provisioning artifact.

Disassociates a batch of self-service actions from the specified provisioning artifact.

Associates multiple self-service actions with provisioning artifacts.

Associates multiple self-service actions with provisioning artifacts.

Associate the specified TagOption with the specified portfolio or product.

Associate the specified TagOption with the specified portfolio or product.

Associates a self-service action with a provisioning artifact.

Associates a self-service action with a provisioning artifact.

Associates the specified product with the specified portfolio. A delegated admin is authorized to invoke this command.

Associates the specified product with the specified portfolio. A delegated admin is authorized to invoke this command.

Associates the specified principal ARN with the specified portfolio. If you share the portfolio with principal name sharing enabled, the PrincipalARN association is included in the share. The PortfolioID, PrincipalARN, and PrincipalType parameters are required. You can associate a maximum of 10 Principals with a portfolio using PrincipalType as IAM_PATTERN. When you associate a principal with portfolio, a potential privilege escalation path may occur when that portfolio is then shared with other accounts. For a user in a recipient account who is not an Service Catalog Admin, but still has the ability to create Principals (Users/Groups/Roles), that user could create a role that matches a principal name association for the portfolio. Although this user may not know which principal names are associated through Service Catalog, they may be able to guess the user. If this potential escalation path is a concern, then Service Catalog recommends using PrincipalType as IAM. With this configuration, the PrincipalARN must already exist in the recipient account before it can be associated.

Associates the specified principal ARN with the specified portfolio. If you share the portfolio with principal name sharing enabled, the PrincipalARN association is included in the share. The PortfolioID, PrincipalARN, and PrincipalType parameters are required. You can associate a maximum of 10 Principals with a portfolio using PrincipalType as IAM_PATTERN. When you associate a principal with portfolio, a potential privilege escalation path may occur when that portfolio is then shared with other accounts. For a user in a recipient account who is not an Service Catalog Admin, but still has the ability to create Principals (Users/Groups/Roles), that user could create a role that matches a principal name association for the portfolio. Although this user may not know which principal names are associated through Service Catalog, they may be able to guess the user. If this potential escalation path is a concern, then Service Catalog recommends using PrincipalType as IAM. With this configuration, the PrincipalARN must already exist in the recipient account before it can be associated.

Associates the specified budget with the specified resource.

Associates the specified budget with the specified resource.

Accepts an offer to share the specified portfolio.

Sourcemodule AcceptPortfolioShareInput : sig ... end

Accepts an offer to share the specified portfolio.