effective_policies

Creates, updates, deletes, gets or lists an effective_policies resource.

Overview

Name	effective_policies
Type	Resource
Id	aws.organizations.effective_policies

Fields

The following fields are returned by SELECT queries:

describe_effective_policy

Name	Datatype	Description
last_updated_timestamp	string (date-time)	The time of the last update to this policy.
policy_content	string	The text content of the policy. (pattern: <code>[\s\S]*</code>)
policy_type	string	The policy type. (TAG_POLICY, BACKUP_POLICY, AISERVICES_OPT_OUT_POLICY, CHATBOT_POLICY, DECLARATIVE_POLICY_EC2, SECURITYHUB_POLICY, INSPECTOR_POLICY, UPGRADE_ROLLOUT_POLICY, BEDROCK_POLICY, S3_POLICY, NETWORK_SECURITY_DIRECTOR_POLICY)
target_id	string	The account ID of the policy target. (pattern: <code>^(r-[0-9a-z]{4,32})|(\d{12})|(ou-[0-9a-z]{4,32}-[a-z0-9]{8,32})$</code>)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
describe_effective_policy	select	region		Returns the contents of the effective policy for specified policy type and account. The effective policy is the aggregation of any policies of the specified type that the account inherits, plus any policy of that type that is directly attached to the account. This operation applies only to management policies. It does not apply to authorization policies: service control policies (SCPs) and resource control policies (RCPs). For more information about policy inheritance, see Understanding management policy inheritance in the Organizations User Guide. You can call this operation from any account in a organization.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

describe_effective_policy

Returns the contents of the effective policy for specified policy type and account. The effective policy is the aggregation of any policies of the specified type that the account inherits, plus any policy of that type that is directly attached to the account. This operation applies only to management policies. It does not apply to authorization policies: service control policies (SCPs) and resource control policies (RCPs). For more information about policy inheritance, see Understanding management policy inheritance in the Organizations User Guide. You can call this operation from any account in a organization.

SELECT
last_updated_timestamp,
policy_content,
policy_type,
target_id
FROM aws.organizations.effective_policies
WHERE region = '{{ region }}' -- required
;