The Customizations for AWS Control Tower solution combines AWS Control Tower and other highly-available, trusted AWS services to help customers more quickly set up a secure, multi-account AWS environment using AWS best practices.
Is your feature request related to a problem? Please describe.
SCPs can be added as policies. We also need to add Backup/Tag/AI Service OptOut Policies. Now we have to set this up with separate code and pipelines. This add complexity to governance. Would be nice to handle all organization policies the same way.
Describe the feature you'd like
Add a backup/tag/optout-policy under "/policies"
Add deploy_method: backup/tag/optout_policy to Manifest-file
Backup/Tag/Pptout-policy is applied to account or OU as described
Is your feature request related to a problem? Please describe.
SCPs can be added as policies. We also need to add Backup/Tag/AI Service OptOut Policies. Now we have to set this up with separate code and pipelines. This add complexity to governance. Would be nice to handle all organization policies the same way.
Describe the feature you'd like