AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Shares the specified portfolio with the specified account or organization node. Shares to an organization node can only be created by the management account of an organization or by a delegated administrator. You can share portfolios to an organization, an organizational unit, or a specific account.
Note that if a delegated admin is de-registered, they can no longer create portfolio shares.
AWSOrganizationsAccess must be enabled in order to create a portfolio share
to an organization node.
You can't share a shared resource, including portfolios that contain a shared product.
If the portfolio share with the specified account or organization node already exists,
this action will have no effect and will not return an error. To update an existing
share, you must use the UpdatePortfolioShare API instead.
When you associate a principal with portfolio, a potential privilege escalation path
may occur when that portfolio is then shared with other accounts. For a user in a
recipient account who is not an Service Catalog Admin, but still has the ability
to create Principals (Users/Groups/Roles), that user could create a role that matches
a principal name association for the portfolio. Although this user may not know which
principal names are associated through Service Catalog, they may be able to guess
the user. If this potential escalation path is a concern, then Service Catalog recommends
using PrincipalType as IAM. With this configuration, the PrincipalARN
must already exist in the recipient account before it can be associated.
This is an asynchronous operation using the standard naming convention for .NET 4.5 or higher. For .NET 3.5 the operation is implemented as a pair of methods using the standard naming convention of BeginCreatePortfolioShare and EndCreatePortfolioShare.
Namespace: Amazon.ServiceCatalog
Assembly: AWSSDK.ServiceCatalog.dll
Version: 3.x.y.z
public virtual Task<CreatePortfolioShareResponse> CreatePortfolioShareAsync( CreatePortfolioShareRequest request, CancellationToken cancellationToken )
Container for the necessary parameters to execute the CreatePortfolioShare service method.
A cancellation token that can be used by other objects or threads to receive notice of cancellation.
| Exception | Condition |
|---|---|
| InvalidParametersException | One or more parameters provided to the operation are not valid. |
| InvalidStateException | An attempt was made to modify a resource that is in a state that is not valid. Check your resources to ensure that they are in valid states before retrying the operation. |
| LimitExceededException | The current limits of the service would have been exceeded by this operation. Decrease your resource use or increase your service limits and retry the operation. |
| OperationNotSupportedException | The operation is not supported. |
| ResourceNotFoundException | The specified resource was not found. |
.NET Core App:
Supported in: 3.1
.NET Standard:
Supported in: 2.0
.NET Framework:
Supported in: 4.5