Task 1: Create a Service Catalog product and portfolio

  1. Login to your AWS console using the instructions provided by the instructor

  2. Go to Services search box > Service Catalog

    drawing
  3. From the left pane, under Administration, click on Product list

    drawing
  4. To create our product, we will use a simple CloudFormation template which include the following services:

    drawing
  5. Click alt text

  6. In Product Name type: my-awesome-product

  7. In Owner type your name or an alias

  8. In Version details select Use a CloudFormation template

  9. In Use a CloudFormation template text box, copy and paste the following URL:

    https://ee-assets-prod-us-east-1.s3.us-east-1.amazonaws.com/modules/6dc73ef66a2d4cf79e247e72cfa4006d/v1/CF-service-catalog-deploy.json
    

    ``

    Note: This CloudFormation template describes the resources and configurations that will be created as part of the Service Catalog product deployment

  10. In Version title, type v1

  11. Click drawing

  12. You must see this message

    drawing
  13. Now you need to create a Portfolio to share with your end users and add your newly created Product

  14. From the left pane, click on Portfolios

  15. Click on drawing

  16. In Portfolio Name, type my-awesome-portfolio

  17. In Owner, type your name or alias

  18. Click on drawing

  19. Click on the newly created Portfolio

  20. Now you will add the Product to the Portfolio, click on the Products tab

  21. Click on drawing

  22. Select your Product

    drawing
  23. Click on drawing

  24. Your Product has been added to your Portfolio, now you need to add users to consume your Product

  25. Click on the Groups, roles, and users tab

  26. Click on drawing

  27. Select the DeveloperGroup, which as been pre-created in the lab environment

    drawing
  28. Click on drawing

  29. In the next steps you will provide the IAM permissions to the Portfolio so it could have all the required permissions to deploy all the services described in your Product, you will do this by creating a Constraint and assign it an IAM Role. Click on the Constraints tab.

  30. Click on drawing

  31. You will see the Create constraint configuration

  32. In Product, select your Product

  33. In Constraint type, select Launch

  34. Scroll down to the Launch constraint section

  35. In Method, select Select IAM role

  36. In IAM role, select Sc-launchConstraint-role from the displayed options

  37. Click on drawing

    Note: This IAM role has been pre-created in this lab environment, feel free to navigate to Services > IAM >Roles > Sc-launchConstraint-role to see the Permissions policies attached