1. Packages
  2. AWS Classic
  3. API Docs
  4. cfg
  5. OrganizationConformancePack

Try AWS Native preview for resources not in the classic version.

AWS Classic v6.28.1 published on Thursday, Mar 28, 2024 by Pulumi

aws.cfg.OrganizationConformancePack

Explore with Pulumi AI

aws logo

Try AWS Native preview for resources not in the classic version.

AWS Classic v6.28.1 published on Thursday, Mar 28, 2024 by Pulumi

    Manages a Config Organization Conformance Pack. More information can be found in the Managing Conformance Packs Across all Accounts in Your Organization and AWS Config Managed Rules documentation. Example conformance pack templates may be found in the AWS Config Rules Repository.

    NOTE: This resource must be created in the Organization master account or a delegated administrator account, and the Organization must have all features enabled. Every Organization account except those configured in the excluded_accounts argument must have a Configuration Recorder with proper IAM permissions before the Organization Conformance Pack will successfully create or update. See also the aws.cfg.Recorder resource.

    Example Usage

    Using Template Body

    import * as pulumi from "@pulumi/pulumi";
    import * as aws from "@pulumi/aws";
    
    const example = new aws.cfg.OrganizationConformancePack("example", {
        name: "example",
        inputParameters: [{
            parameterName: "AccessKeysRotatedParameterMaxAccessKeyAge",
            parameterValue: "90",
        }],
        templateBody: `Parameters:
      AccessKeysRotatedParameterMaxAccessKeyAge:
        Type: String
    Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
    `,
    });
    const exampleOrganization = new aws.organizations.Organization("example", {
        awsServiceAccessPrincipals: ["config-multiaccountsetup.amazonaws.com"],
        featureSet: "ALL",
    });
    
    import pulumi
    import pulumi_aws as aws
    
    example = aws.cfg.OrganizationConformancePack("example",
        name="example",
        input_parameters=[aws.cfg.OrganizationConformancePackInputParameterArgs(
            parameter_name="AccessKeysRotatedParameterMaxAccessKeyAge",
            parameter_value="90",
        )],
        template_body="""Parameters:
      AccessKeysRotatedParameterMaxAccessKeyAge:
        Type: String
    Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
    """)
    example_organization = aws.organizations.Organization("example",
        aws_service_access_principals=["config-multiaccountsetup.amazonaws.com"],
        feature_set="ALL")
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/cfg"
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/organizations"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := cfg.NewOrganizationConformancePack(ctx, "example", &cfg.OrganizationConformancePackArgs{
    			Name: pulumi.String("example"),
    			InputParameters: cfg.OrganizationConformancePackInputParameterArray{
    				&cfg.OrganizationConformancePackInputParameterArgs{
    					ParameterName:  pulumi.String("AccessKeysRotatedParameterMaxAccessKeyAge"),
    					ParameterValue: pulumi.String("90"),
    				},
    			},
    			TemplateBody: pulumi.String(`Parameters:
      AccessKeysRotatedParameterMaxAccessKeyAge:
        Type: String
    Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
    `),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = organizations.NewOrganization(ctx, "example", &organizations.OrganizationArgs{
    			AwsServiceAccessPrincipals: pulumi.StringArray{
    				pulumi.String("config-multiaccountsetup.amazonaws.com"),
    			},
    			FeatureSet: pulumi.String("ALL"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Aws = Pulumi.Aws;
    
    return await Deployment.RunAsync(() => 
    {
        var example = new Aws.Cfg.OrganizationConformancePack("example", new()
        {
            Name = "example",
            InputParameters = new[]
            {
                new Aws.Cfg.Inputs.OrganizationConformancePackInputParameterArgs
                {
                    ParameterName = "AccessKeysRotatedParameterMaxAccessKeyAge",
                    ParameterValue = "90",
                },
            },
            TemplateBody = @"Parameters:
      AccessKeysRotatedParameterMaxAccessKeyAge:
        Type: String
    Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
    ",
        });
    
        var exampleOrganization = new Aws.Organizations.Organization("example", new()
        {
            AwsServiceAccessPrincipals = new[]
            {
                "config-multiaccountsetup.amazonaws.com",
            },
            FeatureSet = "ALL",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.aws.cfg.OrganizationConformancePack;
    import com.pulumi.aws.cfg.OrganizationConformancePackArgs;
    import com.pulumi.aws.cfg.inputs.OrganizationConformancePackInputParameterArgs;
    import com.pulumi.aws.organizations.Organization;
    import com.pulumi.aws.organizations.OrganizationArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var example = new OrganizationConformancePack("example", OrganizationConformancePackArgs.builder()        
                .name("example")
                .inputParameters(OrganizationConformancePackInputParameterArgs.builder()
                    .parameterName("AccessKeysRotatedParameterMaxAccessKeyAge")
                    .parameterValue("90")
                    .build())
                .templateBody("""
    Parameters:
      AccessKeysRotatedParameterMaxAccessKeyAge:
        Type: String
    Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
                """)
                .build());
    
            var exampleOrganization = new Organization("exampleOrganization", OrganizationArgs.builder()        
                .awsServiceAccessPrincipals("config-multiaccountsetup.amazonaws.com")
                .featureSet("ALL")
                .build());
    
        }
    }
    
    resources:
      example:
        type: aws:cfg:OrganizationConformancePack
        properties:
          name: example
          inputParameters:
            - parameterName: AccessKeysRotatedParameterMaxAccessKeyAge
              parameterValue: '90'
          templateBody: |
            Parameters:
              AccessKeysRotatedParameterMaxAccessKeyAge:
                Type: String
            Resources:
              IAMPasswordPolicy:
                Properties:
                  ConfigRuleName: IAMPasswordPolicy
                  Source:
                    Owner: AWS
                    SourceIdentifier: IAM_PASSWORD_POLICY
                Type: AWS::Config::ConfigRule        
      exampleOrganization:
        type: aws:organizations:Organization
        name: example
        properties:
          awsServiceAccessPrincipals:
            - config-multiaccountsetup.amazonaws.com
          featureSet: ALL
    

    Using Template S3 URI

    import * as pulumi from "@pulumi/pulumi";
    import * as aws from "@pulumi/aws";
    
    const exampleBucketV2 = new aws.s3.BucketV2("example", {bucket: "example"});
    const exampleBucketObjectv2 = new aws.s3.BucketObjectv2("example", {
        bucket: exampleBucketV2.id,
        key: "example-key",
        content: `Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
    `,
    });
    const example = new aws.cfg.OrganizationConformancePack("example", {
        name: "example",
        templateS3Uri: pulumi.interpolate`s3://${exampleBucketV2.bucket}/${exampleBucketObjectv2.key}`,
    });
    const exampleOrganization = new aws.organizations.Organization("example", {
        awsServiceAccessPrincipals: ["config-multiaccountsetup.amazonaws.com"],
        featureSet: "ALL",
    });
    
    import pulumi
    import pulumi_aws as aws
    
    example_bucket_v2 = aws.s3.BucketV2("example", bucket="example")
    example_bucket_objectv2 = aws.s3.BucketObjectv2("example",
        bucket=example_bucket_v2.id,
        key="example-key",
        content="""Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
    """)
    example = aws.cfg.OrganizationConformancePack("example",
        name="example",
        template_s3_uri=pulumi.Output.all(example_bucket_v2.bucket, example_bucket_objectv2.key).apply(lambda bucket, key: f"s3://{bucket}/{key}"))
    example_organization = aws.organizations.Organization("example",
        aws_service_access_principals=["config-multiaccountsetup.amazonaws.com"],
        feature_set="ALL")
    
    package main
    
    import (
    	"fmt"
    
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/cfg"
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/organizations"
    	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/s3"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		exampleBucketV2, err := s3.NewBucketV2(ctx, "example", &s3.BucketV2Args{
    			Bucket: pulumi.String("example"),
    		})
    		if err != nil {
    			return err
    		}
    		exampleBucketObjectv2, err := s3.NewBucketObjectv2(ctx, "example", &s3.BucketObjectv2Args{
    			Bucket: exampleBucketV2.ID(),
    			Key:    pulumi.String("example-key"),
    			Content: pulumi.String(`Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
    `),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = cfg.NewOrganizationConformancePack(ctx, "example", &cfg.OrganizationConformancePackArgs{
    			Name: pulumi.String("example"),
    			TemplateS3Uri: pulumi.All(exampleBucketV2.Bucket, exampleBucketObjectv2.Key).ApplyT(func(_args []interface{}) (string, error) {
    				bucket := _args[0].(string)
    				key := _args[1].(string)
    				return fmt.Sprintf("s3://%v/%v", bucket, key), nil
    			}).(pulumi.StringOutput),
    		})
    		if err != nil {
    			return err
    		}
    		_, err = organizations.NewOrganization(ctx, "example", &organizations.OrganizationArgs{
    			AwsServiceAccessPrincipals: pulumi.StringArray{
    				pulumi.String("config-multiaccountsetup.amazonaws.com"),
    			},
    			FeatureSet: pulumi.String("ALL"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using Aws = Pulumi.Aws;
    
    return await Deployment.RunAsync(() => 
    {
        var exampleBucketV2 = new Aws.S3.BucketV2("example", new()
        {
            Bucket = "example",
        });
    
        var exampleBucketObjectv2 = new Aws.S3.BucketObjectv2("example", new()
        {
            Bucket = exampleBucketV2.Id,
            Key = "example-key",
            Content = @"Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
    ",
        });
    
        var example = new Aws.Cfg.OrganizationConformancePack("example", new()
        {
            Name = "example",
            TemplateS3Uri = Output.Tuple(exampleBucketV2.Bucket, exampleBucketObjectv2.Key).Apply(values =>
            {
                var bucket = values.Item1;
                var key = values.Item2;
                return $"s3://{bucket}/{key}";
            }),
        });
    
        var exampleOrganization = new Aws.Organizations.Organization("example", new()
        {
            AwsServiceAccessPrincipals = new[]
            {
                "config-multiaccountsetup.amazonaws.com",
            },
            FeatureSet = "ALL",
        });
    
    });
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.aws.s3.BucketV2;
    import com.pulumi.aws.s3.BucketV2Args;
    import com.pulumi.aws.s3.BucketObjectv2;
    import com.pulumi.aws.s3.BucketObjectv2Args;
    import com.pulumi.aws.cfg.OrganizationConformancePack;
    import com.pulumi.aws.cfg.OrganizationConformancePackArgs;
    import com.pulumi.aws.organizations.Organization;
    import com.pulumi.aws.organizations.OrganizationArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var exampleBucketV2 = new BucketV2("exampleBucketV2", BucketV2Args.builder()        
                .bucket("example")
                .build());
    
            var exampleBucketObjectv2 = new BucketObjectv2("exampleBucketObjectv2", BucketObjectv2Args.builder()        
                .bucket(exampleBucketV2.id())
                .key("example-key")
                .content("""
    Resources:
      IAMPasswordPolicy:
        Properties:
          ConfigRuleName: IAMPasswordPolicy
          Source:
            Owner: AWS
            SourceIdentifier: IAM_PASSWORD_POLICY
        Type: AWS::Config::ConfigRule
                """)
                .build());
    
            var example = new OrganizationConformancePack("example", OrganizationConformancePackArgs.builder()        
                .name("example")
                .templateS3Uri(Output.tuple(exampleBucketV2.bucket(), exampleBucketObjectv2.key()).applyValue(values -> {
                    var bucket = values.t1;
                    var key = values.t2;
                    return String.format("s3://%s/%s", bucket,key);
                }))
                .build());
    
            var exampleOrganization = new Organization("exampleOrganization", OrganizationArgs.builder()        
                .awsServiceAccessPrincipals("config-multiaccountsetup.amazonaws.com")
                .featureSet("ALL")
                .build());
    
        }
    }
    
    resources:
      example:
        type: aws:cfg:OrganizationConformancePack
        properties:
          name: example
          templateS3Uri: s3://${exampleBucketV2.bucket}/${exampleBucketObjectv2.key}
      exampleOrganization:
        type: aws:organizations:Organization
        name: example
        properties:
          awsServiceAccessPrincipals:
            - config-multiaccountsetup.amazonaws.com
          featureSet: ALL
      exampleBucketV2:
        type: aws:s3:BucketV2
        name: example
        properties:
          bucket: example
      exampleBucketObjectv2:
        type: aws:s3:BucketObjectv2
        name: example
        properties:
          bucket: ${exampleBucketV2.id}
          key: example-key
          content: |
            Resources:
              IAMPasswordPolicy:
                Properties:
                  ConfigRuleName: IAMPasswordPolicy
                  Source:
                    Owner: AWS
                    SourceIdentifier: IAM_PASSWORD_POLICY
                Type: AWS::Config::ConfigRule        
    

    Create OrganizationConformancePack Resource

    new OrganizationConformancePack(name: string, args?: OrganizationConformancePackArgs, opts?: CustomResourceOptions);
    @overload
    def OrganizationConformancePack(resource_name: str,
                                    opts: Optional[ResourceOptions] = None,
                                    delivery_s3_bucket: Optional[str] = None,
                                    delivery_s3_key_prefix: Optional[str] = None,
                                    excluded_accounts: Optional[Sequence[str]] = None,
                                    input_parameters: Optional[Sequence[OrganizationConformancePackInputParameterArgs]] = None,
                                    name: Optional[str] = None,
                                    template_body: Optional[str] = None,
                                    template_s3_uri: Optional[str] = None)
    @overload
    def OrganizationConformancePack(resource_name: str,
                                    args: Optional[OrganizationConformancePackArgs] = None,
                                    opts: Optional[ResourceOptions] = None)
    func NewOrganizationConformancePack(ctx *Context, name string, args *OrganizationConformancePackArgs, opts ...ResourceOption) (*OrganizationConformancePack, error)
    public OrganizationConformancePack(string name, OrganizationConformancePackArgs? args = null, CustomResourceOptions? opts = null)
    public OrganizationConformancePack(String name, OrganizationConformancePackArgs args)
    public OrganizationConformancePack(String name, OrganizationConformancePackArgs args, CustomResourceOptions options)
    
    type: aws:cfg:OrganizationConformancePack
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    name string
    The unique name of the resource.
    args OrganizationConformancePackArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args OrganizationConformancePackArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args OrganizationConformancePackArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args OrganizationConformancePackArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args OrganizationConformancePackArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    OrganizationConformancePack Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The OrganizationConformancePack resource accepts the following input properties:

    DeliveryS3Bucket string
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    DeliveryS3KeyPrefix string
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    ExcludedAccounts List<string>
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    InputParameters List<OrganizationConformancePackInputParameter>
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    Name string
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    TemplateBody string
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    TemplateS3Uri string
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    DeliveryS3Bucket string
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    DeliveryS3KeyPrefix string
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    ExcludedAccounts []string
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    InputParameters []OrganizationConformancePackInputParameterArgs
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    Name string
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    TemplateBody string
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    TemplateS3Uri string
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    deliveryS3Bucket String
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    deliveryS3KeyPrefix String
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    excludedAccounts List<String>
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    inputParameters List<OrganizationConformancePackInputParameter>
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    name String
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    templateBody String
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    templateS3Uri String
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    deliveryS3Bucket string
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    deliveryS3KeyPrefix string
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    excludedAccounts string[]
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    inputParameters OrganizationConformancePackInputParameter[]
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    name string
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    templateBody string
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    templateS3Uri string
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    delivery_s3_bucket str
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    delivery_s3_key_prefix str
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    excluded_accounts Sequence[str]
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    input_parameters Sequence[OrganizationConformancePackInputParameterArgs]
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    name str
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    template_body str
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    template_s3_uri str
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    deliveryS3Bucket String
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    deliveryS3KeyPrefix String
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    excludedAccounts List<String>
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    inputParameters List<Property Map>
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    name String
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    templateBody String
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    templateS3Uri String
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the OrganizationConformancePack resource produces the following output properties:

    Arn string
    Amazon Resource Name (ARN) of the organization conformance pack.
    Id string
    The provider-assigned unique ID for this managed resource.
    Arn string
    Amazon Resource Name (ARN) of the organization conformance pack.
    Id string
    The provider-assigned unique ID for this managed resource.
    arn String
    Amazon Resource Name (ARN) of the organization conformance pack.
    id String
    The provider-assigned unique ID for this managed resource.
    arn string
    Amazon Resource Name (ARN) of the organization conformance pack.
    id string
    The provider-assigned unique ID for this managed resource.
    arn str
    Amazon Resource Name (ARN) of the organization conformance pack.
    id str
    The provider-assigned unique ID for this managed resource.
    arn String
    Amazon Resource Name (ARN) of the organization conformance pack.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing OrganizationConformancePack Resource

    Get an existing OrganizationConformancePack resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: OrganizationConformancePackState, opts?: CustomResourceOptions): OrganizationConformancePack
    @staticmethod
    def get(resource_name: str,
            id: str,
            opts: Optional[ResourceOptions] = None,
            arn: Optional[str] = None,
            delivery_s3_bucket: Optional[str] = None,
            delivery_s3_key_prefix: Optional[str] = None,
            excluded_accounts: Optional[Sequence[str]] = None,
            input_parameters: Optional[Sequence[OrganizationConformancePackInputParameterArgs]] = None,
            name: Optional[str] = None,
            template_body: Optional[str] = None,
            template_s3_uri: Optional[str] = None) -> OrganizationConformancePack
    func GetOrganizationConformancePack(ctx *Context, name string, id IDInput, state *OrganizationConformancePackState, opts ...ResourceOption) (*OrganizationConformancePack, error)
    public static OrganizationConformancePack Get(string name, Input<string> id, OrganizationConformancePackState? state, CustomResourceOptions? opts = null)
    public static OrganizationConformancePack get(String name, Output<String> id, OrganizationConformancePackState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Arn string
    Amazon Resource Name (ARN) of the organization conformance pack.
    DeliveryS3Bucket string
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    DeliveryS3KeyPrefix string
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    ExcludedAccounts List<string>
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    InputParameters List<OrganizationConformancePackInputParameter>
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    Name string
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    TemplateBody string
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    TemplateS3Uri string
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    Arn string
    Amazon Resource Name (ARN) of the organization conformance pack.
    DeliveryS3Bucket string
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    DeliveryS3KeyPrefix string
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    ExcludedAccounts []string
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    InputParameters []OrganizationConformancePackInputParameterArgs
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    Name string
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    TemplateBody string
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    TemplateS3Uri string
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    arn String
    Amazon Resource Name (ARN) of the organization conformance pack.
    deliveryS3Bucket String
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    deliveryS3KeyPrefix String
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    excludedAccounts List<String>
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    inputParameters List<OrganizationConformancePackInputParameter>
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    name String
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    templateBody String
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    templateS3Uri String
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    arn string
    Amazon Resource Name (ARN) of the organization conformance pack.
    deliveryS3Bucket string
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    deliveryS3KeyPrefix string
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    excludedAccounts string[]
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    inputParameters OrganizationConformancePackInputParameter[]
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    name string
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    templateBody string
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    templateS3Uri string
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    arn str
    Amazon Resource Name (ARN) of the organization conformance pack.
    delivery_s3_bucket str
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    delivery_s3_key_prefix str
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    excluded_accounts Sequence[str]
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    input_parameters Sequence[OrganizationConformancePackInputParameterArgs]
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    name str
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    template_body str
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    template_s3_uri str
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
    arn String
    Amazon Resource Name (ARN) of the organization conformance pack.
    deliveryS3Bucket String
    Amazon S3 bucket where AWS Config stores conformance pack templates. Delivery bucket must begin with awsconfigconforms prefix. Maximum length of 63.
    deliveryS3KeyPrefix String
    The prefix for the Amazon S3 bucket. Maximum length of 1024.
    excludedAccounts List<String>
    Set of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack. Maximum of 1000 accounts.
    inputParameters List<Property Map>
    Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the template_body or in the template stored in Amazon S3 if using template_s3_uri.
    name String
    The name of the organization conformance pack. Must begin with a letter and contain from 1 to 128 alphanumeric characters and hyphens.
    templateBody String
    A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
    templateS3Uri String
    Location of file, e.g., s3://bucketname/prefix, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.

    Supporting Types

    OrganizationConformancePackInputParameter, OrganizationConformancePackInputParameterArgs

    ParameterName string
    The input key.
    ParameterValue string
    The input value.
    ParameterName string
    The input key.
    ParameterValue string
    The input value.
    parameterName String
    The input key.
    parameterValue String
    The input value.
    parameterName string
    The input key.
    parameterValue string
    The input value.
    parameter_name str
    The input key.
    parameter_value str
    The input value.
    parameterName String
    The input key.
    parameterValue String
    The input value.

    Import

    Using pulumi import, import Config Organization Conformance Packs using the name. For example:

    $ pulumi import aws:cfg/organizationConformancePack:OrganizationConformancePack example example
    

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo

    Try AWS Native preview for resources not in the classic version.

    AWS Classic v6.28.1 published on Thursday, Mar 28, 2024 by Pulumi