AWS Cloudformation template to create SCPs
Budget: $30 – $250 USD
create AWS Organizations Service Control Policy using CloudFormation Template.
The SCP is to restrict few Tags on all major billing resources during creation.
For example, if a User is creating an EC2 instance, the creation fails if the User doesn't pass the required Tags on the new EC2.
Reference: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples_tagging.html
Note: take 3 tags for this test like Tag1, Tag2 and also add a Condition to restrict the actions to few IAM roles like Role1, Role2 etc..
Note2: the SCP should contain all resources creation like EC2, S3, ECS containers etc etc which are majorly billed and used in a regular AWS account.
The SCP is to restrict few Tags on all major billing resources during creation.
For example, if a User is creating an EC2 instance, the creation fails if the User doesn't pass the required Tags on the new EC2.
Reference: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_examples_tagging.html
Note: take 3 tags for this test like Tag1, Tag2 and also add a Condition to restrict the actions to few IAM roles like Role1, Role2 etc..
Note2: the SCP should contain all resources creation like EC2, S3, ECS containers etc etc which are majorly billed and used in a regular AWS account.