controltower.yml

Actions:
  - Name: controltower:DeleteLandingZone
  - Name: controltower:DisableBaseline
  - Name: controltower:DisableControl
  - Name: controltower:EnableBaseline
  - Name: controltower:EnableControl
  - Name: controltower:GetBaseline
  - Name: controltower:GetBaselineOperation
  - Name: controltower:GetControlOperation
  - Name: controltower:GetEnabledBaseline
  - Name: controltower:GetEnabledControl
  - Name: controltower:GetLandingZoneOperation
  - Name: controltower:ListBaselines
  - Name: controltower:ListControlOperations
  - Name: controltower:ListEnabledBaselines
  - Name: controltower:ListEnabledControls
  - Name: controltower:ListLandingZoneOperations
  - Name: controltower:ListLandingZones
  - Name: controltower:ListTagsForResource
  - Name: controltower:ResetEnabledBaseline
  - Name: controltower:ResetLandingZone
  - Name: controltower:TagResource
  - Name: controltower:UntagResource
  - Name: controltower:UpdateEnabledBaseline

  # actions with no corresponding API
  - Name: controltower:CreateLandingZone
  - Name: controltower:CreateManagedAccount
  - Name: controltower:DeregisterManagedAccount
  - Name: controltower:DeregisterOrganizationalUnit
  - Name: controltower:DescribeAccountFactoryConfig
  - Name: controltower:DescribeCoreService
  - Name: controltower:DescribeGuardrail
  - Name: controltower:DescribeGuardrailForTarget
  - Name: controltower:DescribeLandingZoneConfiguration
  - Name: controltower:DescribeManagedAccount
  - Name: controltower:DescribeManagedOrganizationalUnit
  - Name: controltower:DescribeRegisterOrganizationalUnitOperation
  - Name: controltower:DescribeSingleSignOn
  - Name: controltower:DisableGuardrail
  - Name: controltower:EnableGuardrail
  - Name: controltower:GetAccountInfo
  - Name: controltower:GetAvailableUpdates
  - Name: controltower:GetGuardrailComplianceStatus
  - Name: controltower:GetHomeRegion
  - Name: controltower:GetLandingZone
  - Name: controltower:GetLandingZoneDriftStatus
  - Name: controltower:GetLandingZoneStatus
  - Name: controltower:ListDirectoryGroups
  - Name: controltower:ListDriftDetails
  - Name: controltower:ListEnabledGuardrails
  - Name: controltower:ListExtendGovernancePrecheckDetails
  - Name: controltower:ListExternalConfigRuleCompliance
  - Name: controltower:ListGuardrailViolations
  - Name: controltower:ListGuardrails
  - Name: controltower:ListGuardrailsForTarget
  - Name: controltower:ListManagedAccounts
  - Name: controltower:ListManagedAccountsForGuardrail
  - Name: controltower:ListManagedAccountsForParent
  - Name: controltower:ListManagedOrganizationalUnits
  - Name: controltower:ListManagedOrganizationalUnitsForGuardrail
  - Name: controltower:ManageOrganizationalUnit
  - Name: controltower:PerformPreLaunchChecks
  - Name: controltower:ResetEnabledControl
  - Name: controltower:SetupLandingZone
  - Name: controltower:UpdateAccountFactoryConfig
  - Name: controltower:UpdateEnabledControl
  - Name: controltower:UpdateLandingZone