AWS Conformance packs not deleting when deleting quick setup (ANSWERED)

The OrganizationConformancePack created by Quick Setup is not automatically deleted when you delete the Quick Setup resource. When you attempt to delete the Quick Setup, you may receive a message stating:

"Before deleting the Quick Setup configuration, you must remove all selected OUs and Regions. This can take some time depending on the number of OUs and Regions. This action will not delete conformance packs. If you want to delete the conformance packs that were deployed in the removed Regions, you can do so via the DeleteOrganizationConformancePack API."

To delete the OrganizationConformancePack, you need to use the DeleteOrganizationConformancePack API. I discovered that the name shown in the console might not match the actual name. Running the following command helped me find the correct names:

sh aws configservice describe-organization-conformance-packs

Returns

"OrganizationConformancePacks": [
    {
        "OrganizationConformancePackName": "AWS-QuickSetup-Operational-Best-Practices-for-AWS-Well-Architected-Security-Pillar",
        "OrganizationConformancePackArn": "arn:aws:config:us-east-1:XXXXXXXXXXXX:organization-conformance-pack/AWS-QuickSetup-Operational-Best-Practices-for-AWS-Well-Architected-Security-Pillar-unquni4j",
        "ConformancePackInputParameters": [],
        "ExcludedAccounts": [],
        "LastUpdateTime": "2024-05-31T11:00:39.158000-04:00"
    },
    {
        "OrganizationConformancePackName": "AWS-QuickSetup-Operational-Best-Practices-for-HIPAA-Security",
        "OrganizationConformancePackArn": "arn:aws:config:us-east-1:XXXXXXXXXXXX:organization-conformance-pack/AWS-QuickSetup-Operational-Best-Practices-for-HIPAA-Security-pnf5jfw1",
        "ConformancePackInputParameters": [],
        "ExcludedAccounts": [],
        "LastUpdateTime": "2024-05-03T10:00:32.215000-04:00"
    }
]

}

sh

example

aws configservice delete-organization-conformance-pack --organization-conformance-pack-name AWS-QuickSetup-Operational-Best-Practices-for-AWS-Well-Architected-Security-Pillar --Region <<REGION>> --Profile <<Profile>>

After retrieving the real names, I was able to successfully delete the conformance packs. A useful shortcut for the future is to take the base name "OrgConformsPack-" followed by the random numbers and letters. Additionally, this process must be performed for each region.