terraform-aws-organizations

A Terraform module that creates an AWS Organizations.

Available Features

Create AWS Organizations
Create member account
Create organizational unit
Delegated Administrator
Manage an AWS Organizations policy

Requirements

Name	Version
terraform	>= 1.4.6
aws	>= 4.65.0

Providers

Name	Version
aws	>= 4.65.0

Modules

No modules.

Resources

Name	Type
aws_organizations_organization.this	resource

Inputs

Name Description Type Default Required

Name	Description	Type	Default	Required
aws_service_access_principals	(Optional) List of AWS service principal names for which you want to enable integration with your organization.	`list(string)`	[ "account.amazonaws.com", "aws-artifact-account-sync.amazonaws.com", "auditmanager.amazonaws.com", "backup.amazonaws.com", "member.org.stacksets.cloudformation.amazonaws.com", "cloudtrail.amazonaws.com", "compute-optimizer.amazonaws.com", "config.amazonaws.com", "controltower.amazonaws.com", "detective.amazonaws.com", "devops-guru.amazonaws.com", "ds.amazonaws.com", "fms.amazonaws.com", "access-analyzer.amazonaws.com", "guardduty.amazonaws.com", "health.amazonaws.com", "inspector2.amazonaws.com", "license-manager.amazonaws.com", "macie.amazonaws.com", "license-management.marketplace.amazonaws.com", "networkmanager.amazonaws.com", "ram.amazonaws.com", "securityhub.amazonaws.com", "storage-lens.s3.amazonaws.com", "servicecatalog.amazonaws.com", "servicequotas.amazonaws.com", "sso.amazonaws.com", "ssm.amazonaws.com", "tagpolicies.tag.amazonaws.com", "reporting.trustedadvisor.amazonaws.com", "wellarchitected.amazonaws.com", "ipam.amazonaws.com", "reachabilityanalyzer.networkinsights.amazonaws.com" ]	no
enabled_policy_types	(Optional) List of Organizations policy types to enable in the Organization Root.	`list(string)`	[ "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY" ]	no
feature_set	(Optional) Specify "ALL" (default) or "CONSOLIDATED_BILLING".	`string`	n/a	yes

aws_service_access_principals

(Optional) List of AWS service principal names for which you want to enable integration with your organization.

list(string)

[
  "account.amazonaws.com",
  "aws-artifact-account-sync.amazonaws.com",
  "auditmanager.amazonaws.com",
  "backup.amazonaws.com",
  "member.org.stacksets.cloudformation.amazonaws.com",
  "cloudtrail.amazonaws.com",
  "compute-optimizer.amazonaws.com",
  "config.amazonaws.com",
  "controltower.amazonaws.com",
  "detective.amazonaws.com",
  "devops-guru.amazonaws.com",
  "ds.amazonaws.com",
  "fms.amazonaws.com",
  "access-analyzer.amazonaws.com",
  "guardduty.amazonaws.com",
  "health.amazonaws.com",
  "inspector2.amazonaws.com",
  "license-manager.amazonaws.com",
  "macie.amazonaws.com",
  "license-management.marketplace.amazonaws.com",
  "networkmanager.amazonaws.com",
  "ram.amazonaws.com",
  "securityhub.amazonaws.com",
  "storage-lens.s3.amazonaws.com",
  "servicecatalog.amazonaws.com",
  "servicequotas.amazonaws.com",
  "sso.amazonaws.com",
  "ssm.amazonaws.com",
  "tagpolicies.tag.amazonaws.com",
  "reporting.trustedadvisor.amazonaws.com",
  "wellarchitected.amazonaws.com",
  "ipam.amazonaws.com",
  "reachabilityanalyzer.networkinsights.amazonaws.com"
]

enabled_policy_types

(Optional) List of Organizations policy types to enable in the Organization Root.