aws-samples / aws-samples/aws-control-tower-config-customization

How to exclude global resource types

Open
#14 1 comment 0 reactions 1 assignee Claimed by @vsr2158 View on GitHub
Dominant language
Python
Stars
52
Forks
51
Avg merge
2m
Merged PRs (30d)
4

Description

The default configuration by ControlTower is that `recordingStragegy` is `ALL_SUPPORTED_RESOURCE_TYPES` and only for the home region is it set to `includeGlobalResourceTypes = true`.

On the other hand, the solution here uses `recordingStrategy` with `EXCLUSION_BY_RESOURCE_TYPES`.

According to the [documentation](https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html#config-Type-RecordingGroup-includeGlobalResourceTypes), for `EXCLUSION_BY_RESOURCE_TYPES`, global resource types must be excluded manually.

So I am thinking that outside of the home region, global resource types may need to be added to `exclusionByResourceTypes`.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.