paws.management (version 0.1.6)

organizations_attach_policy: Attaches a policy to a root, an organizational unit (OU), or an individual account

Description

Attaches a policy to a root, an organizational unit (OU), or an individual account.

Usage

organizations_attach_policy(PolicyId, TargetId)

Arguments

PolicyId

[required] The unique identifier (ID) of the policy that you want to attach to the target. You can get the ID for the policy by calling the ListPolicies operation.

The regex pattern for a policy ID string requires \"p-\" followed by from 8 to 128 lowercase letters or digits.

TargetId

[required] The unique identifier (ID) of the root, OU, or account that you want to attach the policy to. You can get the ID by calling the ListRoots, ListOrganizationalUnitsForParent, or ListAccounts operations.

The regex pattern for a target ID string requires one of the following:

• Root - A string that begins with \"r-\" followed by from 4 to 32 lowercase letters or digits.

• Account - A string that consists of exactly 12 digits.

• Organizational unit (OU) - A string that begins with \"ou-\" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second \"-\" dash and from 8 to 32 additional lowercase letters or digits.

Request syntax

svc$attach_policy(
  PolicyId = "string",
  TargetId = "string"
)

Details

How the policy affects accounts depends on the type of policy:

• For more information about attaching SCPs, see How SCPs Work in the AWS Organizations User Guide.

• For information about attaching tag policies, see How Policy Inheritance Works in the AWS Organizations User Guide.

This operation can be called only from the organization\'s master account.

Examples

# NOT RUN {
# The following example shows how to attach a service control policy (SCP)
# to an OU:
# 
# }
# NOT RUN {
svc$attach_policy(
  PolicyId = "p-examplepolicyid111",
  TargetId = "ou-examplerootid111-exampleouid111"
)
# }
# NOT RUN {
# The following example shows how to attach a service control policy (SCP)
# to an account:
# 
# }
# NOT RUN {
svc$attach_policy(
  PolicyId = "p-examplepolicyid111",
  TargetId = "333333333333"
)
# }
# NOT RUN {
# }