This module creates following resources.
aws_organizations_organizationaws_organizations_aws_service_access (optional)aws_notifications_organizations_access (optional)aws_organizations_policy_attachment (optional)aws_organizations_tag (optional)aws_ram_sharing_with_organization (optional)aws_servicecatalog_organizations_access (optional)aws_servicequotas_template_association (optional)
| Name |
Source |
Version |
| resource_group |
tedilabs/misc/aws//modules/resource-group |
~> 0.12.0 |
| service_linked_role |
tedilabs/account/aws//modules/iam-service-linked-role |
~> 0.33.0 |
| Name |
Description |
Type |
Default |
Required |
| name |
(Required) The name of the Organization. |
string |
n/a |
yes |
| all_features_enabled |
(Optional) Whether to create AWS Organization with all features or only consolidated billing feature. Defaults to true. |
bool |
true |
no |
| enabled_policy_types |
(Optional) A set of Organizations Policy types to enable in the Organization Root. Organization must enable all features. Valid values are AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, BEDROCK_POLICY, CHATBOT_POLICY, DECLARATIVE_POLICY_EC2, INSPECTOR_POLICY, NETWORK_SECURITY_DIRECTOR_POLICY, RESOURCE_CONTROL_POLICY, SECURITYHUB_POLICY, SERVICE_CONTROL_POLICY, S3_POLICY, TAG_POLICY, UPGRADE_ROLLOUT_POLICY. |
set(string) |
[] |
no |
| module_tags_enabled |
(Optional) Whether to create AWS Resource Tags for the module informations. |
bool |
true |
no |
| policies |
(Optional) A map of policies to be attached to the Organization. Each key is only used internally within Terraform code. Each value is the ID of the policy to be attached. |
map(string) |
{} |
no |
| resource_group |
(Optional) A configurations of Resource Group for this module. resource_group as defined below.
(Optional) enabled - Whether to create Resource Group to find and group AWS resources which are created by this module. Defaults to true.
(Optional) name - The name of Resource Group. A Resource Group name can have a maximum of 127 characters, including letters, numbers, hyphens, dots, and underscores. The name cannot start with AWS or aws. If not provided, a name will be generated using the module name and instance name.
(Optional) description - The description of Resource Group. Defaults to Managed by Terraform.. |
object({
enabled = optional(bool, true)
name = optional(string, "")
description = optional(string, "Managed by Terraform.")
}) |
{} |
no |
| tags |
(Optional) A map of tags to add to all resources. |
map(string) |
{} |
no |
| trusted_access_enabled_service_principals |
(Optional) List of AWS service principal names for which you want to enable integration with the organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com. Organization must all_featrues_enabled set to true. |
set(string) |
[] |
no |
| Name |
Description |
| accounts |
The accounts for the Organization. |
| all_features_enabled |
Whether AWS Organization was configured with all features or only consolidated billing feature. |
| arn |
The Amazon Resource Name (ARN) of the Organization. |
| enabled_policy_types |
A set of Organizations Policy types enabled in the Organization Root. |
| id |
The ID of the Organization. |
| master_account |
The master account for the Organization. |
| name |
The name of the Organization. |
| non_master_accounts |
The non-master accounts for the Organization. |
| policies |
A set of policy IDs attached to the Organization Root. |
| resource_group |
The resource group created to manage resources in this module. |
| root |
The root information of the Organization. |
| trusted_access_enabled_service_principals |
List of AWS service principal names which is integrated with the organization. |