Policy: AWS > Well-Architected Tool > AWS Well-Architected Framework > Cost Optimization > COST 02. How do you govern usage? > Implement groups and roles

Implement groups and roles that align to your policies and control who can create, modify, or decommission instances and resources in each group. For example, implement development, test, and production groups. This applies to AWS services and third-party solutions.

See Implement groups and roles for more information.

Resource Types

This policy targets the following resource types:

AWS > Well-Architected Tool > AWS Well-Architected Framework

Primary Policy

This policy is used with the following primary policy:

AWS > Well-Architected Tool > AWS Well-Architected Framework > Cost Optimization > COST 02. How do you govern usage?

Controls

Policy Specification

Schema Type	`string`
Default	`Skip`
Valid Values [YAML]	`Skip` `True` `False`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/other

Policy Type URI

tmod:@turbot/aws-wellarchitected-framework#/policy/types/cost02GroupsRoles

GraphQL

query policyType(id: "tmod:@turbot/aws-wellarchitected-framework#/policy/types/cost02GroupsRoles") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-wellarchitected-framework#/policy/types/cost02GroupsRoles'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-wellarchitected-framework#/policy/types/cost02GroupsRoles'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-wellarchitected-framework#/policy/types/cost02GroupsRoles"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-wellarchitected-framework#/policy/types/cost02GroupsRoles"