AWS code-library documentation change
Summary
Added multiple CLI code examples for AWS Service Catalog commands including create-constraint, create-provisioned-product-plan, delete-constraint, delete-provisioned-product-plan, describe-constraint, describe-portfolio-share-status, describe-portfolio-shares, describe-product, describe-provisioned-product-plan, describe-provisioning-parameters, list-constraints-for-portfolio, list-launch-paths, search-products, terminate-provisioned-product, and update-constraint.
Security assessment
The changes add documentation for constraint management commands (create/delete/update/describe constraints) which enforce security guardrails like IAM roles during product launches. This demonstrates security features but doesn't address any specific vulnerability. The examples show security configurations (e.g., RoleArn parameters) but lack evidence of fixing existing security issues.
Diff
diff --git a/code-library/latest/ug/cli_2_service-catalog_code_examples.md b/code-library/latest/ug/cli_2_service-catalog_code_examples.md index 2344dd8e6..583e3fdfd 100644 --- a//code-library/latest/ug/cli_2_service-catalog_code_examples.md +++ b//code-library/latest/ug/cli_2_service-catalog_code_examples.md @@ -151,0 +152,39 @@ Output: +The following code example shows how to use `create-constraint`. + +**AWS CLI** + + +**To create a constraints** + +The following `create-constraint` example creates a constraint. + + + aws servicecatalog create-constraint \ + --portfolio-id port-y3fnkesxxxxx \ + --product-id prod-cfrfxmraxxxxx \ + --type LAUNCH \ + --parameters '{"RoleArn" : "arn:aws:iam::123456789012:role/LaunchRole"}' + + +Output: + + + { + "ConstraintDetail": { + "ConstraintId": "cons-7tr6gei4bxxxx", + "Type": "LAUNCH", + "Owner": "123456789012", + "ProductId": "prod-cfrfxmra3xxxx", + "PortfolioId": "port-y3fnkeslpxxxx" + }, + "ConstraintParameters": "{\"RoleArn\" : \"arn:aws:iam::123456789012:role/LaunchRole\"}", + "Status": "CREATING" + } + +For more information, see [Using AWS Service Catalog Constraints](https://docs.aws.amazon.com/servicecatalog/latest/adminguide/constraints.html) in the _AWS Service Catalog User Guide_. + + * For API details, see [CreateConstraint](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/servicecatalog/create-constraint.html) in _AWS CLI Command Reference_. + + + + @@ -292,0 +332,36 @@ Output: +The following code example shows how to use `create-provisioned-product-plan`. + +**AWS CLI** + + +**To create a plan** + +The following `create-provisioned-product-plan` example creates a plan. + + + aws servicecatalog create-provisioned-product-plan \ + --plan-name test-plan \ + --plan-type CLOUDFORMATION \ + --product-id prod-cfrfxmraxxxxx \ + --provisioned-product-name test-pp \ + --provisioning-artifact-id pa-7wz4cu5cxxxxx + + +Output: + + + { + "PlanName": "test-plan", + "PlanId": "plan-cuxae3z6gxxxx", + "ProvisionProductId": "pp-7kh7wbc4xxxxx", + "ProvisionedProductName": "test-pp", + "ProvisioningArtifactId": "pa-7wz4cu5cxxxxx" + } + +For more information, see [Creating a launch plan](https://docs.aws.amazon.com/servicecatalog/latest/userguide/launch-plan.html) in the _AWS Service Catalog User Guide_. + + * For API details, see [CreateProvisionedProductPlan](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/servicecatalog/create-provisioned-product-plan.html) in _AWS CLI Command Reference_. + + + + @@ -376,0 +452,23 @@ Output: +The following code example shows how to use `delete-constraint`. + +**AWS CLI** + + +**To delete a constraint** + +The following `delete-constraint` example deletes a constraint. + + + aws servicecatalog delete-constraint \ + --id cons-7tr6gei4bxxxx + + +This command produces no output. + +For more information, see [Using AWS Service Catalog Constraints](https://docs.aws.amazon.com/servicecatalog/latest/adminguide/constraints.html) in the _AWS Service Catalog User Guide_. + + * For API details, see [DeleteConstraint](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/servicecatalog/delete-constraint.html) in _AWS CLI Command Reference_. + + + + @@ -440,0 +539,23 @@ This command produces no output. +The following code example shows how to use `delete-provisioned-product-plan`. + +**AWS CLI** + + +**To delete a provisioned product plan** + +The following `delete-provisioned-product-plan` example deletes a provisioned product plan. + + + aws servicecatalog delete-provisioned-product-plan \ + --plan-id plan-cuxae3z6gxxxx + + +This command produces no output. + +For more information, see [Creating a launch plan](https://docs.aws.amazon.com/servicecatalog/latest/userguide/launch-plan.html) in the _AWS Service Catalog User Guide_. + + * For API details, see [DeleteProvisionedProductPlan](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/servicecatalog/delete-provisioned-product-plan.html) in _AWS CLI Command Reference_. + + + + @@ -483,0 +605,36 @@ This command produces no output. +The following code example shows how to use `describe-constraint`. + +**AWS CLI** + + +**To describe a constraint** + +The following `describe-constraint` example describes a constraint. + + + aws servicecatalog describe-constraint \ + --id "cons-oqp52evr4bxxxx" + + +Output: + + + { + "ConstraintDetail": { + "ConstraintId": "cons-7tr6gei4bxxxx", + "Type": "LAUNCH", + "Owner": "123456789012", + "ProductId": "prod-cfrfxmra3xxxx", + "PortfolioId": "port-y3fnkeslpxxxx" + }, + "ConstraintParameters": "{\"RoleArn\" : \"arn:aws:iam::123456789012:role/LaunchRole\"}", + "Status": "AVAILABLE" + } + +For more information, see [Using AWS Service Catalog Constraints](https://docs.aws.amazon.com/servicecatalog/latest/adminguide/constraints.html) in the _AWS Service Catalog User Guide_. + + * For API details, see [DescribeConstraint](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/servicecatalog/describe-constraint.html) in _AWS CLI Command Reference_. + + + + @@ -510,0 +668,81 @@ Output: +The following code example shows how to use `describe-portfolio-share-status`. + +**AWS CLI** + + +**To describe portfolio share status** + +The following `describe-portfolio-share-status` example describes portfolio share status. + + + aws servicecatalog describe-portfolio-share-status \ + --portfolio-share-token "share-agngcybu4xxxx" + + +Output: + + + { + "PortfolioShareToken": "share-agngcybu4xxxx", + "PortfolioId": "port-y3fnkeslxxxxx", + "OrganizationNodeValue": "123456789012", + "Status": "COMPLETED", + "ShareDetails": { + "SuccessfulShares": [ + "012345678901" + ], + "ShareErrors": [] + } + } + +For more information, see [Sharing a Portfolio](https://docs.aws.amazon.com/servicecatalog/latest/adminguide/catalogs_portfolios_sharing_how-to-share.html) in the _AWS Service Catalog User Guide_. + + * For API details, see [DescribePortfolioShareStatus](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/servicecatalog/describe-portfolio-share-status.html) in _AWS CLI Command Reference_.