PrincipalPortfolioAssociation

Source: src/AWS/ServiceCatalog/PrincipalPortfolioAssociation.ts

Grants an IAM principal (user, group, or role) access to a Service Catalog portfolio, allowing it to browse and launch the portfolio’s products.

Granting Access

Associate an IAM role

import * as ServiceCatalog from "alchemy/AWS/ServiceCatalog";

yield* ServiceCatalog.PrincipalPortfolioAssociation("DevAccess", {
  portfolioId: portfolio.portfolioId,
  principalArn: role.roleArn,
});

Associate a wildcard principal pattern

yield* ServiceCatalog.PrincipalPortfolioAssociation("AllDevRoles", {
  portfolioId: portfolio.portfolioId,
  principalArn: "arn:aws:iam:::role/dev-*",
  principalType: "IAM_PATTERN",
});