Turbot Guardrails Hub 
Hub
Mods
AWS
171
Mods
429
Resource Types
6,702
Policies
2,320
Controls
1,637
Quick Actions
524
IAM

Policy: AWS > Organizations > Organization > CMDB

Configure whether to record and synchronize details for the AWS Organizations organization into the CMDB.

The CMDB control is responsible for populating and updating all the attributes for that resource type in the Guardrails CMDB. All policies and controls in Guardrails are based around the resource, so usually the CMDB policy is set to "Enforce: Enabled".

If set to Skip then all changes to the CMDB are paused - no new resources will be discovered, no updates will be made and deleted resources will not be removed.

To cleanup resources and stop tracking changes, set this policy to "Enforce: Disabled".

Resource Types

This policy targets the following resource types:

Controls

Policy Specification

Schema Type
string
Valid Values [YAML]
  • Skip

  • Enforce: Enabled

  • Enforce: Disabled
Default template
{% if ($.account.Id is not null) and ($.account.Id === $.account.MasterAccountId) %} 'Enforce: Enabled' {%- else %} 'Skip' {% endif %}
Default template input
|
  {
    account {
      Id: get(path:"Id")
      MasterAccountId: get(path: "Organization.MasterAccountId")
    }
  }
Examples [YAML]
  • Skip

Category

In Your Workspace

Developers