├── .github └── ISSUE_TEMPLATE │ ├── bug_report.md │ └── feature_request.md ├── .gitignore ├── CODE_OF_CONDUCT.md ├── CONTRIBUTING.md ├── LICENSE ├── README.md ├── bin └── aws-service-control-policies-deployment.ts ├── cdk.json ├── images ├── behave-test-report.png ├── ou-structure.png └── scp-deployment-pipeline.png ├── jest.config.js ├── lib ├── custom_resources │ └── create_and_attach_scp.py ├── setup-builder-account-stack.ts ├── setup-member-account-stack.ts ├── setup-org-management-stack.ts └── util │ └── constants.ts ├── package.json ├── repos-for-code-commit ├── policies │ ├── README.md │ └── scp │ │ ├── metadata.json │ │ ├── production │ │ ├── allowed.json │ │ └── restricted.json │ │ ├── sandbox │ │ ├── allowed.json │ │ └── restricted.json │ │ └── tools │ │ ├── allowed.json │ │ └── restricted.json └── tests │ ├── README.md │ ├── behave.ini │ ├── buildspec.yml │ ├── features │ ├── appmesh-actions.feature │ ├── appstream-actions.feature │ ├── cloudformation-actions.feature │ ├── dynamodb-actions.feature │ ├── ec2-actions.feature │ ├── iam-actions.feature │ └── lambda-actions.feature │ ├── requirements.txt │ └── steps │ ├── policy_simulator.py │ └── step_impl.py ├── test └── aws-service-control-policies-deployment.test.ts └── tsconfig.json /.github/ISSUE_TEMPLATE/bug_report.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/.github/ISSUE_TEMPLATE/bug_report.md -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/feature_request.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/.github/ISSUE_TEMPLATE/feature_request.md -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/.gitignore -------------------------------------------------------------------------------- /CODE_OF_CONDUCT.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/CODE_OF_CONDUCT.md -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/README.md -------------------------------------------------------------------------------- /bin/aws-service-control-policies-deployment.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/bin/aws-service-control-policies-deployment.ts -------------------------------------------------------------------------------- /cdk.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/cdk.json -------------------------------------------------------------------------------- /images/behave-test-report.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/images/behave-test-report.png -------------------------------------------------------------------------------- /images/ou-structure.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/images/ou-structure.png -------------------------------------------------------------------------------- /images/scp-deployment-pipeline.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/images/scp-deployment-pipeline.png -------------------------------------------------------------------------------- /jest.config.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/jest.config.js -------------------------------------------------------------------------------- /lib/custom_resources/create_and_attach_scp.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/lib/custom_resources/create_and_attach_scp.py -------------------------------------------------------------------------------- /lib/setup-builder-account-stack.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/lib/setup-builder-account-stack.ts -------------------------------------------------------------------------------- /lib/setup-member-account-stack.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/lib/setup-member-account-stack.ts -------------------------------------------------------------------------------- /lib/setup-org-management-stack.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/lib/setup-org-management-stack.ts -------------------------------------------------------------------------------- /lib/util/constants.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/lib/util/constants.ts -------------------------------------------------------------------------------- /package.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/package.json -------------------------------------------------------------------------------- /repos-for-code-commit/policies/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/policies/README.md -------------------------------------------------------------------------------- /repos-for-code-commit/policies/scp/metadata.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/policies/scp/metadata.json -------------------------------------------------------------------------------- /repos-for-code-commit/policies/scp/production/allowed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/policies/scp/production/allowed.json -------------------------------------------------------------------------------- /repos-for-code-commit/policies/scp/production/restricted.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/policies/scp/production/restricted.json -------------------------------------------------------------------------------- /repos-for-code-commit/policies/scp/sandbox/allowed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/policies/scp/sandbox/allowed.json -------------------------------------------------------------------------------- /repos-for-code-commit/policies/scp/sandbox/restricted.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/policies/scp/sandbox/restricted.json -------------------------------------------------------------------------------- /repos-for-code-commit/policies/scp/tools/allowed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/policies/scp/tools/allowed.json -------------------------------------------------------------------------------- /repos-for-code-commit/policies/scp/tools/restricted.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/policies/scp/tools/restricted.json -------------------------------------------------------------------------------- /repos-for-code-commit/tests/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/README.md -------------------------------------------------------------------------------- /repos-for-code-commit/tests/behave.ini: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /repos-for-code-commit/tests/buildspec.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/buildspec.yml -------------------------------------------------------------------------------- /repos-for-code-commit/tests/features/appmesh-actions.feature: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/features/appmesh-actions.feature -------------------------------------------------------------------------------- /repos-for-code-commit/tests/features/appstream-actions.feature: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/features/appstream-actions.feature -------------------------------------------------------------------------------- /repos-for-code-commit/tests/features/cloudformation-actions.feature: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/features/cloudformation-actions.feature -------------------------------------------------------------------------------- /repos-for-code-commit/tests/features/dynamodb-actions.feature: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/features/dynamodb-actions.feature -------------------------------------------------------------------------------- /repos-for-code-commit/tests/features/ec2-actions.feature: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/features/ec2-actions.feature -------------------------------------------------------------------------------- /repos-for-code-commit/tests/features/iam-actions.feature: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/features/iam-actions.feature -------------------------------------------------------------------------------- /repos-for-code-commit/tests/features/lambda-actions.feature: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/features/lambda-actions.feature -------------------------------------------------------------------------------- /repos-for-code-commit/tests/requirements.txt: -------------------------------------------------------------------------------- 1 | boto3 2 | behave 3 | requests -------------------------------------------------------------------------------- /repos-for-code-commit/tests/steps/policy_simulator.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/steps/policy_simulator.py -------------------------------------------------------------------------------- /repos-for-code-commit/tests/steps/step_impl.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/repos-for-code-commit/tests/steps/step_impl.py -------------------------------------------------------------------------------- /test/aws-service-control-policies-deployment.test.ts: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/test/aws-service-control-policies-deployment.test.ts -------------------------------------------------------------------------------- /tsconfig.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-service-control-policies-deployment/HEAD/tsconfig.json --------------------------------------------------------------------------------