LoginSignup
0

More than 1 year has passed since last update.

RI・SavingsPlansを購入禁止にするポリシー

Posted at

やりたい事

マルチアカウント環境で勝手にRI・SavingsPlansを購入して欲しくない

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Statement1",
            "Effect": "Deny",
            "Action": [
                "ec2:PurchaseReservedInstancesOffering",
                "savingsplans:CreateSavingsPlan",
                "elasticache:PurchaseReservedCacheNodesOffering",
                "es:PurchaseReservedElasticsearchInstanceOffering",
                "redshift:PurchaseReservedNodeOffering",
                "rds:PurchaseReservedDBInstancesOffering",
                "dynamodb:PurchaseReservedCapacityOfferings",
                "cloudfront:CreateSavingsPlan"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

まとめ

上記内容でSCPを作成し、任意のOUに割り当てる

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
0