Deploy SCPs to OUs

Question

Hi AWS, we have some set of JSON files having SCPs code stored in a version control tool which we need deployed within AWS Contol Tower to about multiple OUs. How to do that?

Max Clements · Answer

Not a lot of information here, so answering broadly.  To create an SCP from your JSON policy - you can do this with the CLI or SDK by following he documentation here:

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_create.html

To attach that SCP to the root or an OU or OUs using the CLI or SDK  follow this documentation:

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_attach.html

If you want to use CICD principals to do this - which I think you do - given you specifically mention version control - you can do this a number of ways - including using AWS code* services.

Deploy SCPs to OUs

Relevant content