ScopeConfiguration

Defines which accounts and resources are in scope.

resourceScopes

The resource-level scoping configuration, keyed by resource type, that defines which resources within the selected accounts are in scope.

Type: String to ResourceScope object map

Map Entries: Minimum number of 0 items. Maximum number of 20 items.

Valid Keys: AWS::ApiGateway::Stage | AWS::CloudFront::Distribution | AWS::EC2::EIP | AWS::ElasticLoadBalancingV2::LoadBalancer::application | AWS::ElasticLoadBalancing::LoadBalancer

Required: Yes

accountFilter

The account filter that determines which accounts are in scope. When set, exactly one of includeAll, include, or exclude is set.

Organization administrators must include an account filter in every scope configuration. Single-account administrators must omit it: a scope without an account filter applies only to the administrator's own account. The presence of an account filter is fixed when the scope is created: an update can't add an account filter to a scope that was created without one, or remove the account filter from a scope that was created with one.

Type: AccountFilter object

Note: This object is a Union. Only one member of this object can be specified or returned.

Required: No

ScopeConfiguration

Contents

See Also