IAM / management / servicecatalog

AWS Service Catalog (IAM)

JSON →
AWSservicecatalogmanagement

AWS Service Catalog allows organizations to create and manage IT service catalogs of approved AWS resources for end users.

iamaws
docs ↗
Permissions
Actions in this service
servicecatalog:ListPortfolios
servicecatalog:DescribeProduct
servicecatalog:ListLaunchPaths
servicecatalog:ListApplications
servicecatalog:GetApplication
servicecatalog:DescribeRecord
servicecatalog:ListRecordHistory
servicecatalog:ListTagOptions
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "servicecatalog:ListPortfolios", "servicecatalog:DescribeProduct", "servicecatalog:ListLaunchPaths", "servicecatalog:ListApplications", "servicecatalog:GetApplication", "servicecatalog:DescribeRecord", "servicecatalog:ListRecordHistory", "servicecatalog:ListTagOptions" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid servicecatalog:* — grants full control including creating, updating, and deleting portfolios, products, and constraints
Avoid servicecatalog:CreateProduct and servicecatalog:DeleteProduct — can lead to unauthorized provisioning or removal of approved products
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/servicecatalog/servicecatalog.json ↗