capabilities.work

AWS Control Tower Enable Control and Confirm

A 3-step recipe with Amazon Control Tower. We can help you get access.

Recipe · 3 steps

AWS Control Tower Enable Control and Confirm

Enable a control on an OU and wait for the operation to succeed.

  1. Start the asynchronous enable-control operation on the target OU and capture the operation identifier and the new enabled control ARN.
  2. Check the status of the enable-control operation. Repeats while the operation is still IN_PROGRESS, and proceeds to read the enabled control once it has SUCCEEDED.
  3. Retrieve the enabled control's details, including its status summary and drift status summary, now that the operation has completed.
What you'll need to have ready
  • controlIdentifier: The ARN of the control (guardrail) to activate.
  • targetIdentifier: The ARN of the organizational unit to apply the control to.
  • parameters: Optional list of control input parameters (key/value pairs).
For your developer

Arazzo workflow amazon-control-tower:enable-control, 3 operations: EnableControl → GetControlOperation → GetEnabledControl. Specs on APIs.io.