Skip to content
This repository was archived by the owner on May 7, 2025. It is now read-only.

Commit ad7e218

Browse files
authored
Keep IAM Users and Organization Role (#125)
* Kepp IAM Users and Organization Role * Update aws-nuke.yaml * Update aws-nuke.yaml * Kepp IAM Users and Organization Role
1 parent 7146581 commit ad7e218

File tree

1 file changed

+21
-1
lines changed

1 file changed

+21
-1
lines changed

.github/aws-nuke.yaml

+21-1
Original file line numberDiff line numberDiff line change
@@ -32,9 +32,29 @@ regions:
3232
- us-gov-east-1
3333
- us-gov-west-1
3434

35+
36+
resource-types:
37+
# don't nuke IAM users
38+
excludes:
39+
- IAMUser
40+
- IAMUserAccessKey
41+
- IAMUserPolicyAttachment
42+
3543
account-blocklist:
3644
- "999999999999" # production
3745

3846
accounts:
3947
# testing account
40-
126450723953: {}
48+
126450723953:
49+
presets:
50+
- defaults
51+
52+
presets:
53+
defaults:
54+
filters:
55+
IAMRole:
56+
- "OrganizationAccountAccessRole"
57+
IAMRolePolicy:
58+
- property: "role:RoleName"
59+
type: "regex"
60+
value: "^OrganizationAccountAccessRole$"

0 commit comments

Comments
 (0)