ServiceNow CMDB CI relationship sync: faster, more complete →
Turbot Guardrails Hub 
Hub
Mods
AWS
172
Mods
431
Resource Types
6,720
Policies
2,323
Controls
1,637
Quick Actions
528
IAM

Policy: AWS > S3 > Trusted Organizations [Default]

List of AWS Organizations that are trusted for access in the AWS S3 policy.

This policy is used by the Trusted Access control to determine which members of type "organization" are allowed to be granted access. You may use the '*' and '?' wildcard characters.

example: - "o-333333333" - "o-c3a5y4wd52"

Note: Trusted Access > Organization Restrictions are ONLY applied to AWS principals. Services and Federated principals do NOT contain the aws:PrincipalOrgId condition key, and thus cannot be validated against the Organization.

Setting the policy to Empty array will remove all organizations.

Resource Types

This policy targets the following resource types:

Policy Specification

Schema Type
array
Default template
{% if $.trustedOrganizations.value | length == 0 %}[]{% else %}{% for item in $.trustedOrganizations.value %}- '{{ item }}'
{% endfor %}{% endif %}
Default template input
|
  {
    trustedOrganizations: policyValue(uri:"tmod:@turbot/aws#/policy/types/trustedOrganizations") {
      value
    }
  }

Category

In Your Workspace

Developers