Amazon Control Tower · JSON Structure

Enable Control Request Structure

EnableControlRequest schema from AWS Control Tower API

Type: object Properties: 4 Required: 2
ComplianceGovernanceLanding ZoneMulti-AccountSecurityControls

EnableControlRequest is a JSON Structure definition published by Amazon Control Tower, describing 4 properties, of which 2 are required. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

controlIdentifier targetIdentifier parameters tags

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-control-tower/refs/heads/main/json-structure/enable-control-request-structure.json",
  "name": "EnableControlRequest",
  "description": "EnableControlRequest schema from AWS Control Tower API",
  "type": "object",
  "properties": {
    "controlIdentifier": {
      "type": "string",
      "description": "The ARN of the control. Only Strongly recommended and Elective controls are permitted.",
      "example": "arn:aws:controltower:us-east-1::control/AWS-GR_ENCRYPTED_VOLUMES"
    },
    "targetIdentifier": {
      "type": "string",
      "description": "The ARN of the organizational unit on which the control will be enabled.",
      "example": "arn:aws:organizations::123456789012:ou/o-exampleorgid11/ou-exampleouid111"
    },
    "parameters": {
      "type": "array",
      "description": "A list of input parameter values that are supplied to enable the control.",
      "items": {
        "$ref": "#/components/schemas/EnabledControlParameter"
      }
    },
    "tags": {
      "type": "object",
      "description": "Tags to apply to the EnabledControl resource.",
      "additionalProperties": {
        "type": "string"
      }
    }
  },
  "required": [
    "controlIdentifier",
    "targetIdentifier"
  ]
}