@aws-accelerator/config
    Preparing search index...

    SecurityConfig / CentralSecurityServicesConfig / ScpRevertChangesConfig

    Configuration for automatically detecting and reverting manual changes to Service Control Policies (SCPs). This securty control helps maintain governance by ensuring that security policies cannot be modified outside of your approved change management process. When enabled, any manual changes to SCPs will be automatically reverted and security teams will be notified of the attempted modification.

    scpRevertChangesConfig:
    enable: true
    snsTopicName: Security
    interface IScpRevertChangesConfig {
        enable: boolean;
        snsTopicName?: string;
    }
    Index

    Properties

    enable: boolean

    Indicates whether manual changes to Service Control Policies are automatically detected and reverted.

    snsTopicName?: string

    Name of the SNS topic that will receive alerts when unauthorized SCP changes are detected and reverted.