aws-cdk-lib.aws_fms.CfnPolicy.IEMapProperty

interface IEMapProperty

LanguageType name
.NETAmazon.CDK.AWS.FMS.CfnPolicy.IEMapProperty
Gogithub.com/aws/aws-cdk-go/awscdk/v2/awsfms#CfnPolicy_IEMapProperty
Javasoftware.amazon.awscdk.services.fms.CfnPolicy.IEMapProperty
Pythonaws_cdk.aws_fms.CfnPolicy.IEMapProperty
TypeScript aws-cdk-lib » aws_fms » CfnPolicy » IEMapProperty

Specifies the AWS account IDs and AWS Organizations organizational units (OUs) to include in or exclude from the policy.

Specifying an OU is the equivalent of specifying all accounts in the OU and in any of its child OUs, including any child OUs and accounts that are added at a later time.

This is used for the policy's IncludeMap and ExcludeMap .

You can specify account IDs, OUs, or a combination:

  • Specify account IDs by setting the key to ACCOUNT . For example, the following is a valid map: {“ACCOUNT” : [“accountID1”, “accountID2”]} .
  • Specify OUs by setting the key to ORGUNIT . For example, the following is a valid map: {“ORGUNIT” : [“ouid111”, “ouid112”]} .
  • Specify accounts and OUs together in a single map, separated with a comma. For example, the following is a valid map: {“ACCOUNT” : [“accountID1”, “accountID2”], “ORGUNIT” : [“ouid111”, “ouid112”]} .

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_fms as fms } from 'aws-cdk-lib';
const iEMapProperty: fms.CfnPolicy.IEMapProperty = {
  account: ['account'],
  orgunit: ['orgunit'],
};

Properties

NameTypeDescription
account?string[]The account list for the map.
orgunit?string[]The organizational unit list for the map.

account?

Type: string[] (optional)

The account list for the map.


orgunit?

Type: string[] (optional)

The organizational unit list for the map.