Skip to content

Disassociates a target account, organizational unit, or the root from a specified configuration

Description

Disassociates a target account, organizational unit, or the root from a specified configuration. When you disassociate a configuration from its target, the target inherits the configuration of the closest parent. If there’s no configuration to inherit, the target retains its settings but becomes a self-managed account. A target can be disassociated from a configuration policy or self-managed behavior. Only the Security Hub CSPM delegated administrator can invoke this operation from the home Region.

Usage

securityhub_start_configuration_policy_disassociation(Target,
  ConfigurationPolicyIdentifier)

Arguments

  • Target

    The identifier of the target account, organizational unit, or the root to disassociate from the specified configuration.

  • ConfigurationPolicyIdentifier

    [required] The Amazon Resource Name (ARN) of a configuration policy, the universally unique identifier (UUID) of a configuration policy, or a value of SELF_MANAGED_SECURITY_HUB for a self-managed configuration.

Value

An empty list.

Request syntax

svc$start_configuration_policy_disassociation(
  Target = list(
    AccountId = "string",
    OrganizationalUnitId = "string",
    RootId = "string"
  ),
  ConfigurationPolicyIdentifier = "string"
)