Skip to content

Updates the configuration of an already enabled control

Description

Updates the configuration of an already enabled control.

If the enabled control shows an EnablementStatus of SUCCEEDED, supply parameters that are different from the currently configured parameters. Otherwise, Amazon Web Services Control Tower will not accept the request.

If the enabled control shows an EnablementStatus of FAILED, Amazon Web Services Control Tower updates the control to match any valid parameters that you supply.

If the DriftSummary status for the control shows as DRIFTED, you cannot call this API. Instead, you can update the control by calling the reset_enabled_control API. Alternatively, you can call disable_control and then call enable_control again. Also, you can run an extending governance operation to repair drift. For usage examples, see the Controls Reference Guide .

Usage

controltower_update_enabled_control(parameters,
  enabledControlIdentifier)

Arguments

  • parameters

    [required] A key/value pair, where Key is of type String and Value is of type Document.

  • enabledControlIdentifier

    [required] The ARN of the enabled control that will be updated.

Value

A list with the following syntax:

list(
  operationIdentifier = "string"
)

Request syntax

svc$update_enabled_control(
  parameters = list(
    list(
      key = "string",
      value = list()
    )
  ),
  enabledControlIdentifier = "string"
)