ListEnabledControls

Source: src/AWS/ControlTower/ListEnabledControls.ts

Runtime binding for controltower:ListEnabledControls.

An account-level operation that enumerates the controls (guardrails) enabled on an organizational unit — or, with a filter, across the whole organization. Useful for compliance dashboards and drift-detection functions. Provide the implementation with Effect.provide(AWS.ControlTower.ListEnabledControlsHttp).

Auditing Enablements

// init — account-level binding takes no resource
const listEnabledControls = yield* AWS.ControlTower.ListEnabledControls();

// runtime
const result = yield* listEnabledControls({ targetIdentifier: ouArn });
const drifted = result.enabledControls.filter(
  (c) => c.driftStatusSummary?.driftStatus === "DRIFTED",
);