Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Creating stack set constraints

Focus mode
Creating stack set constraints - AWS Service Management Connector

AWS CloudFormation StackSets enable users to create and deploy products across multiple accounts and Regions.

To apply a stack set constraint to a Service Catalog product
  1. As a catalog admin in Service Catalog, choose the portfolio that contains the product.

  2. Expand Constraints and choose Add constraints.

  3. Choose the product from Product and set Constraint type to Stack Set. Choose Continue.

  4. On the StackSet constraint page, enter a description.

  5. Choose the account(s) in which you want to create products.

  6. Choose the Region(s) in which you want to deploy products. Products deploy in these Regions in the order you specify.

  7. Choose the following:

    AWSCloudFormationStackSetAdministrationRole to manage your target accounts.

    AWSCloudFormationStackSetExecutionRole for the role the Administrator will assume.

  8. Choose Submit.

Note

The available template for baseline permissions creates the permissions as well as the outputs needed for stack set constraints.

Example stack set outputs

SCStackSetAdministratorRoleARN arn:aws:iam::123456789123:role/AWSCloudFormationStackSetAdministrationRole SCIAMStackSetExecutionRoleName AWSCloudFormationStackSetExecutionRole SCIAMAdminRoleARN arn:aws:iam::123456789123:role/AWSCloudFormationStackSetAdministrationRole

The AWS Service Catalog products can have either a set set or a launch constraint, but not both.

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.