AWS::Macie::Member

Macie Member

Represents the association between an Amazon Macie administrator account and a member account. Creating this resource associates the specified account with the Macie administrator account that performs the operation; deleting it removes the association.

Properties

3 configurable properties. 1 required. Click a row to see details.

Filter:

Property	Type	Flags
`AccountId`	`string`	RequiredCreate-only
`Email`	`string`	Create-onlyWrite-only
`Tags`	`Array<Tag>`

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

Attribute	Type	Description
`AdministratorAccountId`	`string`	The AWS account ID for the Amazon Macie administrator account.
`Arn`	`string`	The Amazon Resource Name (ARN) of the association between the member account and the Amazon Macie administrator account.
`RelationshipStatus`	`string`	The current status of the relationship between the account and the Amazon Macie administrator account.
`UpdatedAt`	`string`	The date and time, in UTC and extended ISO 8601 format, of the most recent change to the status of the relationship between the account and the Amazon Macie administrator account.

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::Macie::Member

Resources:
  MyResource:
    Type: AWS::Macie::Member
    Properties:
      AccountId: "my-accountid"
      Tags:
        - Key: Environment
          Value: Production

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

macie2:CreateMembermacie2:GetMembermacie2:TagResourcemacie2:ListTagsForResource

read

macie2:GetMembermacie2:ListTagsForResource

update

macie2:GetMembermacie2:TagResourcemacie2:UntagResourcemacie2:ListTagsForResource

delete

macie2:DeleteMembermacie2:GetMembermacie2:ListTagsForResource

list

macie2:ListMembers

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

ServiceMacie

Properties7

Required1

TaggingSupported

Primary IDArn

Supported Operations

CreateReadUpdateDeleteList

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

AccountIdEmail

Related Resources

External Links

AWS Documentation