Class ControlParameter

  • All Implemented Interfaces:
    Serializable, SdkPojo, ToCopyableBuilder<ControlParameter.Builder,​ControlParameter>

    @Generated("software.amazon.awssdk:codegen")
    public final class ControlParameter
    extends Object
    implements SdkPojo, Serializable, ToCopyableBuilder<ControlParameter.Builder,​ControlParameter>

    Four types of control parameters are supported.

    • AllowedRegions: List of Amazon Web Services Regions exempted from the control. Each string is expected to be an Amazon Web Services Region code. This parameter is mandatory for the OU Region deny control, CT.MULTISERVICE.PV.1.

      Example: ["us-east-1","us-west-2"]

    • ExemptedActions: List of Amazon Web Services IAM actions exempted from the control. Each string is expected to be an IAM action.

      Example: ["logs:DescribeLogGroups","logs:StartQuery","logs:GetQueryResults"]

    • ExemptedPrincipalArns: List of Amazon Web Services IAM principal ARNs exempted from the control. Each string is expected to be an IAM principal that follows the pattern ^arn:(aws|aws-us-gov):(iam|sts)::.+:.+$

      Example: ["arn:aws:iam::*:role/ReadOnly","arn:aws:sts::*:assumed-role/ReadOnly/*"]

    • ExemptedResourceArns: List of resource ARNs exempted from the control. Each string is expected to be a resource ARN.

      Example: ["arn:aws:s3:::my-bucket-name"]

    See Also:
    Serialized Form