---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_controltower_enabled_baseline{% #aws_controltower_enabled_baseline %}

## `account_id`{% #account_id %}

**Type**: `STRING`

## `arn`{% #arn %}

**Type**: `STRING`**Provider name**: `arn`**Description**: The ARN of the `EnabledBaseline` resource

## `baseline_identifier`{% #baseline_identifier %}

**Type**: `STRING`**Provider name**: `baselineIdentifier`**Description**: The specific baseline that is enabled as part of the `EnabledBaseline` resource.

## `baseline_version`{% #baseline_version %}

**Type**: `STRING`**Provider name**: `baselineVersion`**Description**: The enabled version of the baseline.

## `drift_status_summary`{% #drift_status_summary %}

**Type**: `STRUCT`**Provider name**: `driftStatusSummary`**Description**: The drift status of the enabled baseline.

- `types`**Type**: `STRUCT`**Provider name**: `types`**Description**: The types of drift that can be detected for an enabled baseline. Amazon Web Services Control Tower detects inheritance drift on enabled baselines that apply at the OU level.
  - `inheritance`**Type**: `STRUCT`**Provider name**: `inheritance`**Description**: At least one account within the target OU does not match the baseline configuration defined on that OU. An account is in inheritance drift when it does not match the configuration of a parent OU, possibly a new parent OU, if the account is moved.
    - `status`**Type**: `STRING`**Provider name**: `status`**Description**: The inheritance drift status for enabled baselines.

## `parent_identifier`{% #parent_identifier %}

**Type**: `STRING`**Provider name**: `parentIdentifier`**Description**: An ARN that represents an object returned by `ListEnabledBaseline`, to describe an enabled baseline.

## `status_summary`{% #status_summary %}

**Type**: `STRUCT`**Provider name**: `statusSummary`

- `last_operation_identifier`**Type**: `STRING`**Provider name**: `lastOperationIdentifier`**Description**: The last operation identifier for the enabled resource.
- `status`**Type**: `STRING`**Provider name**: `status`**Description**: The deployment status of the enabled resource. Valid values:
  - `SUCCEEDED`: The `EnabledControl` or `EnabledBaseline` configuration was deployed successfully.
  - `UNDER_CHANGE`: The `EnabledControl` or `EnabledBaseline` configuration is changing.
  - `FAILED`: The `EnabledControl` or `EnabledBaseline` configuration failed to deploy.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`

## `target_identifier`{% #target_identifier %}

**Type**: `STRING`**Provider name**: `targetIdentifier`**Description**: The target upon which the baseline is enabled.