├── .gitignore ├── README.md ├── SCP_Management_Pipeline ├── README.md ├── SCP_Management_Pipeline.py ├── __init__.py ├── access_analyzer_checks_buildspec.yaml ├── devtools.py ├── lambda_function │ └── lambda_function.py ├── pipeline.py ├── source.bat ├── terraform_apply_buildspec.yaml └── terraformbuild_buildspec.yaml ├── app.py ├── cdk.json ├── config.yaml ├── requirements.txt └── source_code ├── List-of-SCPs.md ├── README.md ├── backend.tf ├── find_blocking_scps ├── README.md └── scp_block_finder.py ├── providers.tf ├── ref_arch.png ├── scp_define_attach.tf ├── scp_module ├── main.tf ├── outputs.tf └── variables.tf ├── service_control_policies ├── InfrastructureOU │ └── Infrastructure_Baseline_InfrastructureOU.json.tpl ├── MultiOUs │ ├── Account_Baseline_AllowedServices.json.tpl │ └── Infrastructure_Baseline_VPCBoundaries.json.tpl └── Root │ ├── Account_Baseline_Root.json.tpl │ ├── Data_Baseline_Root.json.tpl │ ├── Infrastructure_Baseline_Root.json.tpl │ └── Security_Baseline_Root.json.tpl ├── terraform.tfvars └── variables.tf /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/.gitignore -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/README.md -------------------------------------------------------------------------------- /SCP_Management_Pipeline/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/SCP_Management_Pipeline/README.md -------------------------------------------------------------------------------- /SCP_Management_Pipeline/SCP_Management_Pipeline.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/SCP_Management_Pipeline/SCP_Management_Pipeline.py -------------------------------------------------------------------------------- /SCP_Management_Pipeline/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /SCP_Management_Pipeline/access_analyzer_checks_buildspec.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/SCP_Management_Pipeline/access_analyzer_checks_buildspec.yaml -------------------------------------------------------------------------------- /SCP_Management_Pipeline/devtools.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/SCP_Management_Pipeline/devtools.py -------------------------------------------------------------------------------- /SCP_Management_Pipeline/lambda_function/lambda_function.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/SCP_Management_Pipeline/lambda_function/lambda_function.py -------------------------------------------------------------------------------- /SCP_Management_Pipeline/pipeline.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/SCP_Management_Pipeline/pipeline.py -------------------------------------------------------------------------------- /SCP_Management_Pipeline/source.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/SCP_Management_Pipeline/source.bat -------------------------------------------------------------------------------- /SCP_Management_Pipeline/terraform_apply_buildspec.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/SCP_Management_Pipeline/terraform_apply_buildspec.yaml -------------------------------------------------------------------------------- /SCP_Management_Pipeline/terraformbuild_buildspec.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/SCP_Management_Pipeline/terraformbuild_buildspec.yaml -------------------------------------------------------------------------------- /app.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/app.py -------------------------------------------------------------------------------- /cdk.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/cdk.json -------------------------------------------------------------------------------- /config.yaml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/config.yaml -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/requirements.txt -------------------------------------------------------------------------------- /source_code/List-of-SCPs.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/List-of-SCPs.md -------------------------------------------------------------------------------- /source_code/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/README.md -------------------------------------------------------------------------------- /source_code/backend.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/backend.tf -------------------------------------------------------------------------------- /source_code/find_blocking_scps/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/find_blocking_scps/README.md -------------------------------------------------------------------------------- /source_code/find_blocking_scps/scp_block_finder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/find_blocking_scps/scp_block_finder.py -------------------------------------------------------------------------------- /source_code/providers.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/providers.tf -------------------------------------------------------------------------------- /source_code/ref_arch.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/ref_arch.png -------------------------------------------------------------------------------- /source_code/scp_define_attach.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/scp_define_attach.tf -------------------------------------------------------------------------------- /source_code/scp_module/main.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/scp_module/main.tf -------------------------------------------------------------------------------- /source_code/scp_module/outputs.tf: -------------------------------------------------------------------------------- 1 | output "scp_byte_size" { 2 | value = length(var.scp_policy) 3 | } 4 | -------------------------------------------------------------------------------- /source_code/scp_module/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/scp_module/variables.tf -------------------------------------------------------------------------------- /source_code/service_control_policies/InfrastructureOU/Infrastructure_Baseline_InfrastructureOU.json.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/service_control_policies/InfrastructureOU/Infrastructure_Baseline_InfrastructureOU.json.tpl -------------------------------------------------------------------------------- /source_code/service_control_policies/MultiOUs/Account_Baseline_AllowedServices.json.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/service_control_policies/MultiOUs/Account_Baseline_AllowedServices.json.tpl -------------------------------------------------------------------------------- /source_code/service_control_policies/MultiOUs/Infrastructure_Baseline_VPCBoundaries.json.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/service_control_policies/MultiOUs/Infrastructure_Baseline_VPCBoundaries.json.tpl -------------------------------------------------------------------------------- /source_code/service_control_policies/Root/Account_Baseline_Root.json.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/service_control_policies/Root/Account_Baseline_Root.json.tpl -------------------------------------------------------------------------------- /source_code/service_control_policies/Root/Data_Baseline_Root.json.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/service_control_policies/Root/Data_Baseline_Root.json.tpl -------------------------------------------------------------------------------- /source_code/service_control_policies/Root/Infrastructure_Baseline_Root.json.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/service_control_policies/Root/Infrastructure_Baseline_Root.json.tpl -------------------------------------------------------------------------------- /source_code/service_control_policies/Root/Security_Baseline_Root.json.tpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/service_control_policies/Root/Security_Baseline_Root.json.tpl -------------------------------------------------------------------------------- /source_code/terraform.tfvars: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/terraform.tfvars -------------------------------------------------------------------------------- /source_code/variables.tf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/scp-management-reference-architecture/HEAD/source_code/variables.tf --------------------------------------------------------------------------------