All checks
Medium ServiceCatalog · regional

Service Catalog portfolios should be shared within an AWS organization only

Confirms that Service Catalog portfolios are shared only within the AWS organization when Organizations integration is enabled.

service
ServiceCatalog
severity
Medium
scope
evaluated in every region

How to fix it

Ensure Service Catalog portfolios are shared only within the AWS organization.

  1. Open the AWS Service Catalog console.
  2. Navigate to 'Portfolios' in the left navigation pane.
  3. Select the portfolio that needs remediation.
  4. Go to the 'Sharing' tab.
  5. Review all shares and remove any shares that use type 'ACCOUNT' (external accounts).
  6. Ensure all shares use 'ORGANIZATION_MEMBER_ACCOUNT' or organization-level sharing.
  7. Save the changes.

See which of your accounts this check is failing on.

Book a demo