SCP Attachments – Connecting SCPs to OUs (Week 1)
In this video, I explain how SCPs are attached to OUs using `aws_organizations_policy_attachment`.
Topics covered:
• The attachment resource – glues each SCP to its target
• Targets can be the root, an OU, or a specific account ID
• DenyCloudTrailDeletion attaches to ROOT – every account in the organisation
• ProductionRestrictions attaches to Production OU – inherits to HR and Finance
• DevInstanceLimits attaches to Development OU only
• SCPs are inherited – attach once, flows down automatically
Plus a complete summary of everything covered in this module:
• Variables – description, type, default
• Locals & Outputs – computed facts and shared values
• SCPs – The Guardrails (SCP 1, 2, 3)
• data vs resource + Attachments
Next module: Networking – 6 VPCs, Transit Gateway, 72 Subnets.
I'm LM – a Cloud Architect from South Africa.
You can download all the slides from Week 1 here:
📂01-Governance week 1 full Slides: http://spoo.me/01-gov
📂 Slides – http://spoo.me/scpattachement
📂 GitHub – https://bit.ly/44tiD65
#aws #terraform #cloudarchitecture #southafrica #cloudengineering #scps #servicecontrolpolicies #infrastructureascode