config:PutOrganizationConformancePack

Write

config:PutOrganizationConformancePack is a Write access-level action in the config service. Grants permission to add or update organization conformance pack for your entire organization evaluating whether your AWS resources comply with your desired configurations

Resource types

ARNs that config:PutOrganizationConformancePack can be scoped to in an IAM policy.

arn:${Partition}:config:${Region}:${Account}:organization-conformance-pack/${OrganizationConformancePackId}
OrganizationConformancePack

Condition keys

Keys you can use in the Condition block of a policy that grants config:PutOrganizationConformancePack.

aws:ResourceTag/${TagKey} String

Filters access by tag-value associated with the resource

Dependent actions

To use config:PutOrganizationConformancePack you may also need to grant:

Example IAM policy

A minimal policy that allows config:PutOrganizationConformancePack. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowConfigPutOrganizationConformancePack",
      "Effect": "Allow",
      "Action": "config:PutOrganizationConformancePack",
      "Resource": "*"
    }
  ]
}

Related actions in config

config:AssociateResourceTypes Write config:BatchGetAggregateResourceConfig Read config:BatchGetResourceConfig Read config:DeleteAggregationAuthorization Write config:DeleteConfigRule Write config:DeleteConfigurationAggregator Write config:DeleteConfigurationRecorder Write config:DeleteConformancePack Write config:DeleteConnector Write config:DeleteDeliveryChannel Write config:DeleteEvaluationResults Write config:DeleteOrganizationConfigRule Write

View all config actions →