aws-samples / aws-samples/aws-control-tower-config-customization
How to exclude global resource types
- Dominant language
- Python
- Stars
- 52
- Forks
- 51
- Avg merge
- 2m
- Merged PRs (30d)
- 4
Description
The default configuration by ControlTower is that `recordingStragegy` is `ALL_SUPPORTED_RESOURCE_TYPES` and only for the home region is it set to `includeGlobalResourceTypes = true`.
On the other hand, the solution here uses `recordingStrategy` with `EXCLUSION_BY_RESOURCE_TYPES`.
According to the [documentation](https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html#config-Type-RecordingGroup-includeGlobalResourceTypes), for `EXCLUSION_BY_RESOURCE_TYPES`, global resource types must be excluded manually.
So I am thinking that outside of the home region, global resource types may need to be added to `exclusionByResourceTypes`.
Contributor guide
Assessment
This issue has not been assessed yet.