EnabledBaseline

Source: src/AWS/ControlTower/EnabledBaseline.ts

An AWS Control Tower baseline enabled on a target organizational unit. Enabling a baseline (e.g. AWSControlTowerBaseline) starts an asynchronous operation that registers the OU with Control Tower and deploys the baseline’s governance resources to its accounts.

Requires an AWS Control Tower landing zone and can only be managed from the Organizations management account.

Enabling Baselines

Register an OU with Control Tower

import * as ControlTower from "alchemy/AWS/ControlTower";

const enabled = yield* ControlTower.EnabledBaseline("WorkloadsBaseline", {
  baselineIdentifier:
    "arn:aws:controltower:us-west-2::baseline/17BSJV3IGJ2QSGA2",
  baselineVersion: "4.0",
  targetIdentifier: "arn:aws:organizations::111122223333:ou/o-example/ou-example",
});

Baseline with Identity Center parameter

const enabled = yield* ControlTower.EnabledBaseline("WorkloadsBaseline", {
  baselineIdentifier: controlTowerBaselineArn,
  baselineVersion: "4.0",
  targetIdentifier: ouArn,
  parameters: [
    {
      key: "IdentityCenterEnabledBaselineArn",
      value: identityCenterEnabledBaselineArn,
    },
  ],
});