AwsOrganizationsOrganizationCapabilityArgs

interface AwsOrganizationsOrganizationCapabilityArgs extends OrganizationArgs {
awsServiceAccessPrincipals?: Input<Input<string>[] | undefined>;
enabledPolicyTypes?: Input<Input<string>[] | undefined>;
featureSet?: Input<string | undefined>;
returnOrganizationOnly?: Input<boolean | undefined>;
}

Organisation capability arguments.

Hierarchy

OrganizationArgs
AwsOrganizationsOrganizationCapabilityArgs

Properties

`awsServiceAccessPrincipals: Input<Input<string>[] | undefined>`

Inherited from awsServiceAccessPrincipals

List of AWS service principal names for which you want to enable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com. Organization must have featureSet set to ALL. Some services do not support enablement via this endpoint, see warning in aws docs.

`enabledPolicyTypes: Input<Input<string>[] | undefined>`

Inherited from enabledPolicyTypes

List of Organizations policy types to enable in the Organization Root. Organization must have featureSet set to ALL. For additional information about valid policy types (e.g., AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, BEDROCK_POLICY, CHATBOT_POLICY, DECLARATIVE_POLICY_EC2, INSPECTOR_POLICY, RESOURCE_CONTROL_POLICY, S3_POLICY, SECURITYHUB_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY and UPGRADE_ROLLOUT_POLICY), see the AWS Organizations API Reference. To enable INSPECTOR_POLICY, awsServiceAccessPrincipals must include inspector2.amazonaws.com. To enable SECURITYHUB_POLICY, awsServiceAccessPrincipals must include securityhub.amazonaws.com.

`featureSet: Input<string | undefined>`

Inherited from featureSet

Specify ALL (default) or CONSOLIDATED_BILLING.

`returnOrganizationOnly: Input<boolean | undefined>`

Inherited from returnOrganizationOnly

Return (as attributes) only the results of the DescribeOrganization API to avoid API limits. When configured to true only the arn, featureSet, masterAccountArn, masterAccountEmail and masterAccountId attributes will be returned. All others will be empty. Default: false.