UNPKG

@pepperize/cdk-organizations

Version:

Manage AWS organizations, organizational units (OU), accounts and service control policies (SCP).

34 lines (33 loc) 1.65 kB
import { RemovalPolicy } from "aws-cdk-lib"; import { Construct } from "constructs"; import { IAccount } from "./account"; export interface DelegatedAdministratorProps { /** * The member account in the organization to register as a delegated administrator. */ readonly account: IAccount; /** * The service principal of the AWS service for which you want to make the member account a delegated administrator. */ readonly servicePrincipal: string; /** * The region to delegate the administrator in. */ readonly region?: string; /** * If set to RemovalPolicy.RETAIN, the delegation will not be removed. * * @default RemovalPolicy.DESTROY */ readonly removalPolicy?: RemovalPolicy; } /** * Enables the specified member account to administer the Organizations features of the specified AWS service. It grants read-only access to AWS Organizations service data. The account still requires IAM permissions to access and administer the AWS service. * * You can run this action only for AWS services that support this feature. For a current list of services that support it, see the column Supports Delegated Administrator in the table at AWS Services that you can use with AWS Organizations in the [AWS Organizations User Guide](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html). * * @see https://docs.aws.amazon.com/accounts/latest/reference/using-orgs-delegated-admin.html */ export declare class DelegatedAdministrator extends Construct { constructor(scope: Construct, id: string, props: DelegatedAdministratorProps); }