Automates the creation and deployment of AWS Service Control Policies using Terraform and JSON.
This skill streamlines AWS Organizations governance by scaffolding all necessary components for a new Service Control Policy (SCP). It automatically generates JSON policy files with standardized naming conventions, updates Terraform resource definitions and outputs, integrates validation scripts for CI/CD pipelines, and ensures code consistency. It is ideal for security engineers and DevOps professionals looking to enforce organizational guardrails quickly while maintaining a clean, production-ready Infrastructure as Code (IaC) repository.
主な機能
01Strict adherence to PascalCase, snake_case, and kebab-case naming conventions
02Automated JSON policy scaffolding with valid IAM structure
03Terraform resource and attachment generation for OUs or Org Roots
04Built-in formatting and syntax validation via Terraform CLI
050 GitHub stars
06Automatic configuration of Terraform outputs and validation scripts
ユースケース
01Enforcing security guardrails on specific Organizational Units (OUs)
02Implementing data protection policies to prevent unauthorized S3 bucket access
03Restricting AWS regions across an organization to ensure compliance
