NEW: adding aws org and iam

2020-08-25 16:30:23 +08:00
parent f0a68fb300
commit 48c5e88611
2 changed files with 53 additions and 0 deletions
@@ -0,0 +1,26 @@
+resource "aws_organizations_organization" "org" {
+  aws_service_access_principals = [
+    "cloudtrail.amazonaws.com",
+    "config.amazonaws.com",
+  ]
+
+  feature_set = "ALL"
+  enabled_policy_types = [
+    "TAG_POLICY",
+    "SERVICE_CONTROL_POLICY"
+  ]
+}
+
+resource "aws_organizations_policy" "taggig-policy" {
+  name = "tagging-policy"
+  type = "TAG_POLICY"
+
+  content = <<EOF
+{
+    "tags": {
+        "owner": {}
+    }
+}
+EOF
+}
+