Back to All Checks
Medium ServiceCatalog Regional

Service Catalog portfolios should be shared within an AWS organization only

NIST 800-53

Description

Confirms that Service Catalog portfolios are shared only within the AWS organization when Organizations integration is enabled.

Remediation

Ensure Service Catalog portfolios are shared only within the AWS organization.

Steps

  1. Open the AWS Service Catalog console.
  2. Navigate to 'Portfolios' in the left navigation pane.
  3. Select the portfolio that needs remediation.
  4. Go to the 'Sharing' tab.
  5. Review all shares and remove any shares that use type 'ACCOUNT' (external accounts).
  6. Ensure all shares use 'ORGANIZATION_MEMBER_ACCOUNT' or organization-level sharing.
  7. Save the changes.

Compliance

NIST 800-53
Start Your Free Security Check