📖 What is AWS Service Catalog?
AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS. It enables centralized control over which services are available to users, ensuring compliance and standardization across the organization.
"Think of this as an 'internal app store' for your company. It prevents users from launching non-compliant or overly expensive resources."
📚 Certification: AWS Certified Cloud Practitioner (CLF-C02)
🔑 What are the Key Concepts of AWS Service Catalog?
- ▸ Enables standardization by ensuring all deployed resources follow organizational best practices and compliance rules, reducing configuration errors across the environment.
- ▸ Provides a self-service portal where users can provision pre-approved IT services without requiring direct administrative access to the AWS Console.
- ▸ Uses Portfolios to organize products into groups, allowing administrators to control which users or groups have access to specific service sets.
- ▸ Leverages AWS CloudFormation templates to define 'products,' ensuring that infrastructure is deployed consistently and repeatably every time it is requested.
- ▸ Reduces shadow IT by limiting the types of resources users can launch, preventing the deployment of non-compliant or excessively expensive instances.
🎯 How does AWS Service Catalog appear on the CLF-C02 Exam?
You may be asked to identify the service that allows a central IT team to curate a list of approved AWS resources for developers to deploy independently while ensuring all deployments meet corporate security standards.
A scenario might describe a company wanting to provide a 'self-service' experience for launching pre-configured environments without giving users full IAM permissions to create resources, requiring you to select Service Catalog.
❓ Frequently Asked Questions
How does Service Catalog differ from AWS Organizations?
AWS Organizations focuses on account-level management, consolidated billing, and Service Control Policies (SCPs). In contrast, Service Catalog focuses on the specific, approved resource templates that users can deploy within those accounts.
Do users need full administrative permissions to launch a product from the catalog?
No. Users only need permission to access the Service Catalog. The service uses a separate launch role to provision the resources, allowing users to deploy complex infrastructure without having broad IAM permissions.