@pepperize/cdk-organizations
Version:
Manage AWS organizations, organizational units (OU), accounts and service control policies (SCP).
34 lines (33 loc) • 1.65 kB
TypeScript
import { RemovalPolicy } from "aws-cdk-lib";
import { Construct } from "constructs";
import { IAccount } from "./account";
export interface DelegatedAdministratorProps {
/**
* The member account in the organization to register as a delegated administrator.
*/
readonly account: IAccount;
/**
* The service principal of the AWS service for which you want to make the member account a delegated administrator.
*/
readonly servicePrincipal: string;
/**
* The region to delegate the administrator in.
*/
readonly region?: string;
/**
* If set to RemovalPolicy.RETAIN, the delegation will not be removed.
*
* @default RemovalPolicy.DESTROY
*/
readonly removalPolicy?: RemovalPolicy;
}
/**
* Enables the specified member account to administer the Organizations features of the specified AWS service. It grants read-only access to AWS Organizations service data. The account still requires IAM permissions to access and administer the AWS service.
*
* You can run this action only for AWS services that support this feature. For a current list of services that support it, see the column Supports Delegated Administrator in the table at AWS Services that you can use with AWS Organizations in the [AWS Organizations User Guide](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html).
*
* @see https://docs.aws.amazon.com/accounts/latest/reference/using-orgs-delegated-admin.html
*/
export declare class DelegatedAdministrator extends Construct {
constructor(scope: Construct, id: string, props: DelegatedAdministratorProps);
}