enable_control

ControlTower.Client.enable_control(**kwargs)

This API call activates a control. It starts an asynchronous operation that creates AWS resources on the specified organizational unit and the accounts it contains. The resources created will vary according to the control that you specify.

See also: AWS API Documentation

Request Syntax

response = client.enable_control(
    controlIdentifier='string',
    targetIdentifier='string'
)

Parameters

• controlIdentifier (string) --

  [REQUIRED]

  The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the Region deny guardrail.

• targetIdentifier (string) --

  [REQUIRED]

  The ARN of the organizational unit.

Return type

dict

Returns

Response Syntax

{
    'operationIdentifier': 'string'
}

Response Structure

• (dict) --

  • operationIdentifier (string) --

    The ID of the asynchronous operation, which is used to track status. The operation is available for 90 days.

Exceptions

• ControlTower.Client.exceptions.ValidationException
• ControlTower.Client.exceptions.ConflictException
• ControlTower.Client.exceptions.ServiceQuotaExceededException
• ControlTower.Client.exceptions.InternalServerException
• ControlTower.Client.exceptions.AccessDeniedException
• ControlTower.Client.exceptions.ThrottlingException
• ControlTower.Client.exceptions.ResourceNotFoundException