deploymentaccountconfiguration.md

ProServe::Organizations::Account DeploymentAccountConfiguration

(Optional) A dedicated deployment account can be used to further enhance security. This configuration creates a second role within the newly created account. This role trusts the given deployment account, allowing users in the given deployment account to assume the role.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{
    "AccountId" : String,
    "RoleName" : String,
    "AWSManagedPolicyArns" : [ String, ... ]
}

YAML

AccountId: String
RoleName: String
AWSManagedPolicyArns: 
      - String

Properties

AccountId

Deployment Account Id

Required: Yes

Type: String

Minimum: 12

Maximum: 12

Update requires: No interruption

RoleName

Deployment Role Name.

Required: No

Type: String

Minimum: 1

Maximum: 256

Update requires: No interruption

AWSManagedPolicyArns

A List of AWS managed policy arn's to attach to the deployment account role

Required: Yes

Type: List of String

Update requires: No interruption