aws_controltower_enabled_control

account_id

Type: STRING

arn

Type: STRING
Provider name: arn
Description: The ARN of the enabled control.

control_identifier

Type: STRING
Provider name: controlIdentifier
Description: The controlIdentifier of the enabled control.

drift_status_summary

Type: STRUCT
Provider name: driftStatusSummary
Description: The drift status of the enabled control.

• drift_status
  Type: STRING
  Provider name: driftStatus
  Description: The drift status of the enabled control. Valid values:
  • DRIFTED: The enabledControl deployed in this configuration doesn’t match the configuration that Amazon Web Services Control Tower expected.
  • IN_SYNC: The enabledControl deployed in this configuration matches the configuration that Amazon Web Services Control Tower expected.
  • NOT_CHECKING: Amazon Web Services Control Tower does not check drift for this enabled control. Drift is not supported for the control type.
  • UNKNOWN: Amazon Web Services Control Tower is not able to check the drift status for the enabled control.

status_summary

Type: STRUCT
Provider name: statusSummary
Description: A short description of the status of the enabled control.

• last_operation_identifier
  Type: STRING
  Provider name: lastOperationIdentifier
  Description: The last operation identifier for the enabled resource.
  
• status
  Type: STRING
  Provider name: status
  Description: The deployment status of the enabled resource. Valid values:
  • SUCCEEDED: The EnabledControl or EnabledBaseline configuration was deployed successfully.
  • UNDER_CHANGE: The EnabledControl or EnabledBaseline configuration is changing.
  • FAILED: The EnabledControl or EnabledBaseline configuration failed to deploy.

tags

Type: UNORDERED_LIST_STRING

target_identifier

Type: STRING
Provider name: targetIdentifier
Description: The ARN of the organizational unit.