OrganizationConfig / ServiceControlPolicyConfig

Service control policy configuration

serviceControlPolicies:
- name: QuarantineAccounts
description: Quarantine accounts
policy: path/to/policy.json
type: customerManaged
deploymentTargets:
organizationalUnits: []
interface IServiceControlPolicyConfig {
    deploymentTargets: IDeploymentTargets;
    description: string;
    name: string;
    policy: string;
    strategy?: "deny-list" | "allow-list";
    type: "awsManaged" | "customerManaged";
}

Properties

deploymentTargets: IDeploymentTargets
description: string

A description to assign to the policy.

name: string

The friendly name to assign to the policy. The regex pattern that is used to validate this parameter is a string of any of the characters in the ASCII character range.

policy: string

Service control definition json file. This file must be present in config repository

strategy?: "deny-list" | "allow-list"

Service control policy deployment targets

type: "awsManaged" | "customerManaged"

Kind of service control policy