AWS Service Catalog Administrator Guide AWS Service Catalog Administrator Guide AWS Service Catalog: Administrator Guide Copyright © Amazon Web Services, Inc. and/or its affiliates. All rights reserved. Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by Amazon. AWS Service Catalog Administrator Guide Table of Contents What Is AWS Service Catalog? ............................................................................................................. 1 Overview ................................................................................................................................... 1 Users ................................................................................................................................ 1 Products ........................................................................................................................... 2 Provisioned Products .......................................................................................................... 2 Portfolios .......................................................................................................................... 2 Versioning ......................................................................................................................... 2 Permissions ....................................................................................................................... 3 Constraints ........................................................................................................................ 3 Initial Administrator Workflow ............................................................................................. 3 Initial End User Workflow ................................................................................................... 3 Quotas ...................................................................................................................................... 4 AppRegistry ....................................................................................................................... 4 AWS Organizations ............................................................................................................ 4 Constraint quotas ............................................................................................................... 4 Portfolio quotas ................................................................................................................. 4 Product quotas .................................................................................................................. 5 Provisioned product quotas ................................................................................................. 5 Regional quotas ................................................................................................................. 5 Service action quotas ......................................................................................................... 5 TagOptions quotas ............................................................................................................. 5 Setting Up ........................................................................................................................................ 6 Sign Up for Amazon Web Services ............................................................................................... 6 Grant Permissions to Administrators and End Users ........................................................................ 6 Grant Permissions to Administrators ............................................................................................. 6 Grant Permissions to End Users ................................................................................................... 8 Getting Started .................................................................................................................................. 9 Step 1: Download the Template ................................................................................................... 9 Template Download ........................................................................................................... 9 Template Overview ............................................................................................................ 9 Step 2: Create a Key Pair .......................................................................................................... 12 Step 3: Create a Portfolio .......................................................................................................... 12 Step 4: Create a Product ........................................................................................................... 13 Step 5: Add a Template Constraint ............................................................................................. 13 Step 6: Add a Launch Constraint ................................................................................................ 14 Step 7: Grant End Users Access to the Portfolio ........................................................................... 15 Step 8: Test the End User Experience .......................................................................................... 16 Getting Started Library ..................................................................................................................... 17 Prerequisites ............................................................................................................................ 17 Reference Architectures ............................................................................................................. 17 High Reliability Architectures ..................................................................................................... 17 Learn More .............................................................................................................................. 18 Security ........................................................................................................................................... 19 Data Protection ........................................................................................................................ 19 Protecting Data with Encryption ........................................................................................ 20 Identity and Access Management ............................................................................................... 20 Audience ......................................................................................................................... 21 Predefined AWS Managed Policies ...................................................................................... 21 Identity-based policy examples for AWS Service Catalog ...................................................... 22 Troubleshooting AWS Service Catalog identity and access ...................................................... 26 Controlling Access ............................................................................................................ 28 Using Service-Linked Roles for AWS Service Catalog AppRegistry ............................................ 28 Logging and Monitoring ............................................................................................................ 31 Compliance Validation .............................................................................................................. 31 iii AWS Service Catalog Administrator Guide Resilience ................................................................................................................................ 31 Infrastructure Security .............................................................................................................. 32 Security Best Practices .............................................................................................................. 32 Managed policies .............................................................................................................. 33 AWS Service Catalog updates to managed policies ............................................................... 35 Managing Catalogs ........................................................................................................................... 37 Managing Portfolios ................................................................................................................. 37 Creating, Viewing, and Deleting Portfolios ........................................................................... 37 Viewing Portfolio Details ................................................................................................... 38 Creating and Deleting Portfolios ........................................................................................ 38 Adding Products ............................................................................................................... 38 Adding Constraints ........................................................................................................... 40 Granting Access to Users ................................................................................................... 41 Sharing