mirror of
https://github.com/Sea-Haven-Industries/seahaven-org-baseline.git
synced 2026-09-30 09:13:17 +00:00
10e66c92c0
cdk import by Id (non-mutating), content byte-exact from describe-policy, targetIds = exact live attachments. Post-import drift detection: IN_SYNC, 0 drifted. All four Retain — the full org guardrail set is now drift-checked IaC.
18 lines
562 B
JSON
18 lines
562 B
JSON
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Sid": "DenyRegionsOutsideUsEast1",
|
|
"Effect": "Deny",
|
|
"NotAction": [
|
|
"iam:*", "organizations:*", "account:*", "sts:*", "route53:*", "route53domains:*",
|
|
"cloudfront:*", "waf:*", "shield:*", "globalaccelerator:*", "budgets:*", "ce:*",
|
|
"cur:*", "health:*", "support:*", "supportplans:*", "trustedadvisor:*", "artifact:*",
|
|
"aws-portal:*"
|
|
],
|
|
"Resource": "*",
|
|
"Condition": { "StringNotEquals": { "aws:RequestedRegion": "us-east-1" } }
|
|
}
|
|
]
|
|
}
|
|
|