Skip to content

Start Configuration Policy Disassociation

securityhub_start_configuration_policy_disassociation R Documentation

Disassociates a target account, organizational unit, or the root from a specified configuration

Description

Disassociates a target account, organizational unit, or the root from a specified configuration. When you disassociate a configuration from its target, the target inherits the configuration of the closest parent. If there’s no configuration to inherit, the target retains its settings but becomes a self-managed account. A target can be disassociated from a configuration policy or self-managed behavior. Only the Security Hub delegated administrator can invoke this operation from the home Region.

Usage

securityhub_start_configuration_policy_disassociation(Target,
  ConfigurationPolicyIdentifier)

Arguments

Target

The identifier of the target account, organizational unit, or the root to disassociate from the specified configuration.

ConfigurationPolicyIdentifier

[required] The Amazon Resource Name (ARN) of a configuration policy, the universally unique identifier (UUID) of a configuration policy, or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration.

Value

An empty list.

Request syntax

svc$start_configuration_policy_disassociation(
  Target = list(
    AccountId = "string",
    OrganizationalUnitId = "string",
    RootId = "string"
  ),
  ConfigurationPolicyIdentifier = "string"
)

Examples

## Not run: 
# This operation disassociates a configuration policy or self-managed
# behavior from the target account, organizational unit, or the root.
svc$start_configuration_policy_disassociation(
  ConfigurationPolicyIdentifier = "SELF_MANAGED_SECURITY_HUB",
  Target = list(
    RootId = "r-f6g7h8i9j0example"
  )
)

## End(Not run)