IamConfig / PolicySetConfig

Policy set configuration

policySets:
- deploymentTargets:
organizationalUnits:
- Root
identityCenterDependency: false
policies:
- name: Default-Boundary-Policy
policy: path/to/policy.json
interface IPolicySetConfig {
    deploymentTargets: IDeploymentTargets;
    identityCenterDependency?: boolean;
    policies: IPolicyConfig[];
}

Properties

deploymentTargets: IDeploymentTargets

Policy set deployment targets

identityCenterDependency?: boolean

Flag indicates if the policy is used in Identity Center PermissionSet assignments.

When the policy is used in Identity Center PermissionSet assignments, policy must be present in each deployment target accounts of identityCenterAssignments. When this flag is set to true policy is created in dependency stack.

policies: IPolicyConfig[]

List of Policies

Use this configuration to define accelerator managed IAM managed policies.

IamConfig / PolicySetConfig / PolicyConfig