Policy: AWS > Account > Permissions > Default Region

The default region to be used when logging in to AWS accounts via Guardrails using Role mode. See Enabling AWS permissions for more information.

Targets

This policy targets the following resource types:

This policy is used with the following primary policy:

Schema Type	`string`
Default template	`{% if $.partition === "aws-cn" %}"cn-north-1"{% elif $.partition === "aws-us-gov" %}"us-gov-west-1"{% else %}"us-east-1"{% endif %}`
Default template input	`\| { partition: policy(uri:"tmod:@turbot/aws#/policy/types/partition") }`

Schema Type

string

Default template

{% if $.partition === "aws-cn" %}"cn-north-1"{% elif $.partition === "aws-us-gov" %}"us-gov-west-1"{% else %}"us-east-1"{% endif %}

Default template input

|
  {
    partition: policy(uri:"tmod:@turbot/aws#/policy/types/partition")
  }

Category URI

tmod:@turbot/turbot#/control/categories/iamPermissions

Policy Type URI

tmod:@turbot/aws-iam#/policy/types/accountPermissionsDefaultRegion

GraphQL

query policyType(id: "tmod:@turbot/aws-iam#/policy/types/accountPermissionsDefaultRegion") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/accountPermissionsDefaultRegion'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-iam#/policy/types/accountPermissionsDefaultRegion'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-iam#/policy/types/accountPermissionsDefaultRegion"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-iam#/policy/types/accountPermissionsDefaultRegion"