aws-samples / aws-control-tower-config-customization

MIT No Attribution
26 stars 25 forks source link

How to exclude global resource types #14

Open hacker65536 opened 6 months ago

hacker65536 commented 6 months ago

The default configuration by ControlTower is that recordingStragegy is ALL_SUPPORTED_RESOURCE_TYPES and only for the home region is it set to includeGlobalResourceTypes = true.

On the other hand, the solution here uses recordingStrategy with EXCLUSION_BY_RESOURCE_TYPES.

According to the documentation, for EXCLUSION_BY_RESOURCE_TYPES, global resource types must be excluded manually.

So I am thinking that outside of the home region, global resource types may need to be added to exclusionByResourceTypes.