AWS::Config::OrganizationConfigRuleResource Type definition for AWS::Config::OrganizationConfigRule
5 configurable properties. 1 required. Click a row to see details.
| Property | Type | Flags |
|---|---|---|
OrganizationConfigRuleName | string | RequiredCreate-only |
ExcludedAccounts | Array<string> | |
OrganizationCustomPolicyRuleMetadata | OrganizationCustomPolicyRuleMetadata | |
OrganizationCustomRuleMetadata | OrganizationCustomRuleMetadata | |
OrganizationManagedRuleMetadata | OrganizationManagedRuleMetadata |
Values returned after the resource is created. Access these with Fn::GetAtt.
| Attribute | Type | Description |
|---|---|---|
OrganizationConfigRuleArn | string | The Amazon Resource Name (ARN) of an organization AWS Config rule. |
A minimal template with required properties and common optional ones.
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::Config::OrganizationConfigRule
Resources:
MyResource:
Type: AWS::Config::OrganizationConfigRule
Properties:
OrganizationConfigRuleName: "my-organizationconfigrulename"Permissions CloudFormation needs in your IAM role to manage this resource.
config:PutOrganizationConfigRuleconfig:DescribeOrganizationConfigRulesconfig:DescribeOrganizationConfigRuleStatusesiam:CreateServiceLinkedRoleorganizations:EnableAWSServiceAccessconfig:DescribeOrganizationConfigRulesconfig:GetOrganizationCustomRulePolicyconfig:PutOrganizationConfigRuleconfig:DescribeOrganizationConfigRulesconfig:DescribeOrganizationConfigRuleStatusesiam:CreateServiceLinkedRoleorganizations:EnableAWSServiceAccessconfig:DescribeOrganizationConfigRuleStatusesconfig:DeleteOrganizationConfigRuleconfig:DescribeOrganizationConfigRulesOur bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterOrganizationConfigRuleNameThese properties cannot be changed after the resource is created. Updating them triggers a replacement.
OrganizationConfigRuleName