Add Service Catalog Products
Overview
In this lab we will walk through how to deploy additional Service Catalog Products to new accounts. We will also share a Service Catalog portfolio via AWS Organizations. We will be effectively deploying a CloudFormation with SC portfolios and products as step 1.
Prerequisites
- This lab requires an account with Administration privileges and Control Tower.
- DO NOT use the Root User
- Use a new SSO account your created.
Service Catalog deployment steps
- Login using the SSO account user
Download the SC portfolio and product json note the location or copy https://kenwalshtestad.s3.amazonaws.com/cfn/public/ct_training_lab-9.json
Right Click and Open the AWS CloudFormation Console in a new tab
Choose the Create stack button
Choose upload a template file
Choose the Choose File button navigate to file you downloaded select it
Enter the Stack name ctTest
Enter the PortfolioName use default
Choose the Next button
On the Stack Options page choose Next
On the Review page
- select I acknowledge that AWS CloudFormation might create IAM resources with custom names.
Choose Create Stack
Service Catalog launching a product
- Choose the Output tab of the stack
- Copy the outputs into a text file
- Click on the SwitchRoleSCEndUserRole
- Choose Switch role
- Right Click and Open the AWS Service Catalog Console
Choose Product List on the top left

Choose a product and launch it. e.g (Bucket)
Clean up
Terminate the product under provisioned product list Choose Action, Terminate
Copy the url for SwitchRolefullSCAdmin and open it in a new browser tab
Choose Switch Role
Switch back to the admin user you created

Share Service Catalog Portfolio via Organization
Capture AWS Organizations Id 
- Right Click and Open the [AWS Organization Console -Settings] https://console.aws.amazon.com/organizations/home#/organization/settings
- Copy the Organization ID
- Right Click and Open the AWS Service Catalog Console
- Choose Portfolios on the bottom left
- Choose ControlTower SC Demo Portfolio
- Choose Share
- Choose the Share with new Account button
- Choose the Organization radio button if not enabled choose Enable
- Paste the Organization ID
- Choose Share
All accounts under this organization will now have access to this Service Catalog portfolio and products. As new accounts get added they will have access.
Clean up
- Terminate any Service Catalog products deployed
- Go to CloudFormation and delete the Stack
Congratulation you have completed the Lab.