Hello - I am using AWS Control Tower and I have a Management Account and a Development Account. I use IAM Identity Center. I have created a AWS Service Catalog Portfolio in my Management Account and I want to share it with users in my Development Account. I have tried the following 2 options: * the "Share" option in the portfolio to share with OU containing the Development Account. * providing access to the "role" i.e. the role in IAM that will be assumed when the SSO user logs in. In both cases, when I go to the Development account and try to import the portfolio, I get an error saying "Error: Portfolio xxxxx not found". Please let me know what I amd doing wrong. Thanks, Anand

In Multi-Account setup, how to grant Service Catalog Portfolio access to IAM Identity center users in different account?

Hello - I am using AWS Control Tower and I have a Management Account and a Development Account. I use IAM Identity Center. I have created a AWS Service Catalog Portfolio in my Management Account and I want to share it with users in my Development Account.

I have tried the following 2 options:

the "Share" option in the portfolio to share with OU containing the Development Account.
providing access to the "role" i.e. the role in IAM that will be assumed when the SSO user logs in. In both cases, when I go to the Development account and try to import the portfolio, I get an error saying "Error: Portfolio xxxxx not found".

Please let me know what I amd doing wrong.

Thanks, Anand

トピック

管理とガバナンスセキュリティ、アイデンティティ、コンプライアンス

タグ

AWS Organizations AWSサービスカタログ AWS IAM アイデンティティセンター

言語

English

Anand R

質問済み 5ヶ月前269ビュー

3回答

新しい順
投票が多い順
コメントが多い順

これらの回答は役に立ちましたか？コミュニティがあなたの知識を活用できるように、正解に賛成票を投じてください。

承認された回答

I resolved it. My portfolio was created in a different region than where my Organization home. When I created the portfolio in the same region, it worked.

Anand R

回答済み 5ヶ月前

Have you followed this: https://docs.aws.amazon.com/servicecatalog/latest/adminguide/catalogs_portfolios_sharing_how-to-share.html as sharing depends from who starts and to whom is targeted

エキスパート

Antonio_Lagrotteria

回答済み 5ヶ月前

Thank you Antonio. Yes, I have tried all the methods mentioned in that URL. Sharing through Account ID, Sharing through OU.

Anand R

回答済み 5ヶ月前

In Multi-Account setup, how to grant Service Catalog Portfolio access to IAM Identity center users in different account?

関連するコンテンツ