Amazon Organization
Integrate all accounts and resources, and manage access with IAM Identity Center (SSO)
connected_resource_types List of resource types to sync.
Available resource types you can use
aws-organization-s3-bucket
Integration Config
region (Required | String) Region
Possible values: us-east-1, us-east-2, us-west-1, us-west-2, eu-central-1, eu-central-2, eu-west-1, eu-west-2, eu-south-1, eu-south-2, eu-west-3, eu-north-1, af-south-1, ap-east-1, ap-southeast-3, ap-southeast-4, ap-southeast-5, ap-southeast-7, ap-south-1, ap-south-2, ap-northeast-3, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-northeast-1, ca-central-1, ca-west-1, me-south-1, me-central-1, sa-east-1, il-central-1, mx-central-1
{
"aws-organization-integration": {
"name": "Amazon Organization",
"type": "aws-organization",
"connector_id": "apono-connector-id",
"connected_resource_types": [
"aws-organization-account"
],
"integration_config": {
"region": "<Region>",
"aws_sso_region": "<AWS SSO Region>",
"aws_resource_explorer_region": "<AWS Resource Explorer Region>",
"aws_sso_portal": "<SSO Portal>",
"management_account_role_arn": "<Management Account Role ARN>",
"filter_not_organizational_unit_ids": "<Exclude Organizational Unit IDs>",
"user_assuming_role_arns": "<Assumable Roles>",
"session_duration_hours": "<Session Duration (in Hours)>",
"filter_not_account_ids": "<Exclude Account IDs>",
"enable_audit": "<Enable Audit>",
}
}
}
aws-organization-s3-folder
aws-organization-iam-group
aws-organization-iam-role
aws-organization-customer-managed-iam-policy
aws-organization-account-iam-managed-policy
aws-organization-systems-manager-parameter-store
aws-organization-systems-manager-parameter-store-param
aws-organization-ec2-loadbalancer
aws-organization-ec2-instance
aws-organization-ec2-service
aws-organization-eks-cluster-v2
aws-organization-eks-namespace
aws-organization-ecr-repository
aws-organization-ecs-cluster
aws-organization-sagemaker-notebook
aws-organization-lambda-function
aws-organization-secrets-manager-secret
aws-organization-sqs-queue
aws-organization-sns-topic
aws-organization-dynamodb-table
aws-organization-cloudformation-stack
aws-organization-cloudformation-stackset
aws-organization-emr-cluster
aws-organization-acm-certificate
aws-organization-elasticache
aws-organization-route53-hostedzone
aws-organization-permission-boundary
aws_sso_region
(Required | String) AWS SSO Region
Possible values: us-east-1, us-east-2, us-west-1, us-west-2, eu-central-1, eu-central-2, eu-west-1, eu-west-2, eu-south-1, eu-south-2, eu-west-3, eu-north-1, af-south-1, ap-east-1, ap-southeast-3, ap-southeast-4, ap-southeast-5, ap-southeast-7, ap-south-1, ap-south-2, ap-northeast-3, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-northeast-1, ca-central-1, ca-west-1, me-south-1, me-central-1, sa-east-1, il-central-1, mx-central-1
aws_resource_explorer_region (Optional | String) AWS Resource Explorer Region
Possible values: us-east-1, us-east-2, us-west-1, us-west-2, eu-central-1, eu-central-2, eu-west-1, eu-west-2, eu-south-1, eu-south-2, eu-west-3, eu-north-1, af-south-1, ap-east-1, ap-southeast-3, ap-southeast-4, ap-southeast-5, ap-southeast-7, ap-south-1, ap-south-2, ap-northeast-3, ap-northeast-2, ap-southeast-1, ap-southeast-2, ap-northeast-1, ca-central-1, ca-west-1, me-south-1, me-central-1, sa-east-1, il-central-1, mx-central-1
aws_sso_portal (Required | String) SSO Portal
management_account_role_arn (Optional | String) Management Account Role ARN
filter_not_organizational_unit_ids (Optional | String) Exclude Organizational Unit IDs
user_assuming_role_arns (Optional | String) Assumable Roles
session_duration_hours (Optional | String) Session Duration (in Hours)
Possible values: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12
filter_not_account_ids (Optional | String) Exclude Account IDs
enable_audit (Optional | String) Enable Audit
Possible values: true, false
name = "Amazon Organization"
type = "aws-organization"
connector_id = "apono-connector-id"
connected_resource_types = ["aws-organization-account"]
metadata = {
region = "<Region>"
aws_sso_region = "<AWS SSO Region>"
aws_resource_explorer_region = "<AWS Resource Explorer Region>"
aws_sso_portal = "<SSO Portal>"
management_account_role_arn = "<Management Account Role ARN>"
filter_not_organizational_unit_ids = "<Exclude Organizational Unit IDs>"
user_assuming_role_arns = "<Assumable Roles>"
session_duration_hours = "<Session Duration (in Hours)>"
filter_not_account_ids = "<Exclude Account IDs>"
enable_audit = "<Enable Audit>"
}
}
name = "Amazon Organization"
type = "aws-organization"
connector_id = "apono-connector-id"
connected_resource_types = ["aws-organization-account"]
integration_config = {
region = "<Region>"
aws_sso_region = "<AWS SSO Region>"
aws_resource_explorer_region = "<AWS Resource Explorer Region>"
aws_sso_portal = "<SSO Portal>"
management_account_role_arn = "<Management Account Role ARN>"
filter_not_organizational_unit_ids = "<Exclude Organizational Unit IDs>"
user_assuming_role_arns = "<Assumable Roles>"
session_duration_hours = "<Session Duration (in Hours)>"
filter_not_account_ids = "<Exclude Account IDs>"
enable_audit = "<Enable Audit>"
}
}