organization_conformance_pack

Gets an individual organization_conformance_pack resource

Overview

Name	organization_conformance_pack
Type	Resource
Description	organization_conformance_pack
Id	awscc.config.organization_conformance_pack

Fields

Name	Datatype	Description
organization_conformance_pack_name	string	The name of the organization conformance pack.
template_s3_uri	string	Location of file containing the template body.
template_body	string	A string containing full conformance pack template body.
delivery_s3_bucket	string	AWS Config stores intermediate files while processing conformance pack template.
delivery_s3_key_prefix	string	The prefix for the delivery S3 bucket.
conformance_pack_input_parameters	array	A list of ConformancePackInputParameter objects.
excluded_accounts	array	A list of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack.
region	string	AWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
organization_conformance_pack_name,
template_s3_uri,
template_body,
delivery_s3_bucket,
delivery_s3_key_prefix,
conformance_pack_input_parameters,
excluded_accounts
FROM awscc.config.organization_conformance_pack
WHERE data__Identifier = '<OrganizationConformancePackName>';

Permissions

To operate on the organization_conformance_pack resource, the following permissions are required:

Read

config:DescribeOrganizationConformancePacks

Delete

config:DeleteOrganizationConformancePack,
config:DescribeOrganizationConformancePackStatuses,
config:GetOrganizationConformancePackDetailedStatus,
organizations:ListDelegatedAdministrators

Update

config:PutOrganizationConformancePack,
config:DescribeOrganizationConformancePackStatuses,
config:GetOrganizationConformancePackDetailedStatus,
s3:GetObject,
s3:GetBucketAcl,
iam:CreateServiceLinkedRole,
iam:PassRole,
organizations:ListDelegatedAdministrators,
organizations:EnableAWSServiceAccess