AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Container for the parameters to the CreatePortfolioShare operation. Shares the specified portfolio with the specified account or organization node. Shares to an organization node can only be created by the management account of an organization or by a delegated administrator. You can share portfolios to an organization, an organizational unit, or a specific account.
Note that if a delegated admin is de-registered, they can no longer create portfolio shares.
AWSOrganizationsAccess
must be enabled in order to create a portfolio share
to an organization node.
You can't share a shared resource, including portfolios that contain a shared product.
If the portfolio share with the specified account or organization node already exists,
this action will have no effect and will not return an error. To update an existing
share, you must use the UpdatePortfolioShare
API instead.
When you associate a principal with portfolio, a potential privilege escalation path
may occur when that portfolio is then shared with other accounts. For a user in a
recipient account who is not an Service Catalog Admin, but still has the ability
to create Principals (Users/Groups/Roles), that user could create a role that matches
a principal name association for the portfolio. Although this user may not know which
principal names are associated through Service Catalog, they may be able to guess
the user. If this potential escalation path is a concern, then Service Catalog recommends
using PrincipalType
as IAM
. With this configuration, the PrincipalARN
must already exist in the recipient account before it can be associated.
Namespace: Amazon.ServiceCatalog.Model
Assembly: AWSSDK.ServiceCatalog.dll
Version: 3.x.y.z
public class CreatePortfolioShareRequest : AmazonServiceCatalogRequest IAmazonWebServiceRequest
The CreatePortfolioShareRequest type exposes the following members
Name | Description | |
---|---|---|
CreatePortfolioShareRequest() |
Name | Type | Description | |
---|---|---|---|
AcceptLanguage | System.String |
Gets and sets the property AcceptLanguage. The language code.
|
|
AccountId | System.String |
Gets and sets the property AccountId.
The Amazon Web Services account ID. For example, |
|
OrganizationNode | Amazon.ServiceCatalog.Model.OrganizationNode |
Gets and sets the property OrganizationNode.
The organization node to whom you are going to share. When you pass |
|
PortfolioId | System.String |
Gets and sets the property PortfolioId. The portfolio identifier. |
|
SharePrincipals | System.Boolean |
Gets and sets the property SharePrincipals.
This parameter is only supported for portfolios with an OrganizationalNode
Type of
Enables or disables
When you enable Principal Name Sharing for a portfolio share, the share recipient
account end users with a principal that matches any of the associated IAM patterns
can provision products from the portfolio. Once shared, the share recipient can view
associations of |
|
ShareTagOptions | System.Boolean |
Gets and sets the property ShareTagOptions.
Enables or disables |
.NET Core App:
Supported in: 3.1
.NET Standard:
Supported in: 2.0
.NET Framework:
Supported in: 4.5, 4.0, 3.5