Terjemahan disediakan oleh mesin penerjemah. Jika konten terjemahan yang diberikan bertentangan dengan versi bahasa Inggris aslinya, utamakan versi bahasa Inggris.
# AWS Control Tower contoh menggunakan AWS CLI
Contoh kode berikut menunjukkan cara melakukan tindakan dan mengimplementasikan skenario umum dengan menggunakan AWS Command Line Interface with AWS Control Tower.
*Tindakan* merupakan kutipan kode dari program yang lebih besar dan harus dijalankan dalam konteks. Sementara tindakan menunjukkan cara memanggil fungsi layanan individual, Anda dapat melihat tindakan dalam konteks dalam skenario terkait.
Setiap contoh menyertakan tautan ke kode sumber lengkap, di mana Anda dapat menemukan instruksi tentang cara mengatur dan menjalankan kode dalam konteks.
**Topics**
+ [Tindakan](#actions)
## Tindakan
### `buat-zona pendaratan-`
Contoh kode berikut menunjukkan cara menggunakan`create-landing-zone`.
**AWS CLI**
**Untuk membuat landing zone Control Tower**
`create-landing-zone`Contoh berikut menciptakan AWS Control Tower landing zone.
```
aws controltower create-landing-zone \
--landing-zone-version {{3.3}} \
--manifest {{"file://LandingZoneManifest.json"}}
```
Output:
```
{
"arn": "arn:aws:controltower:us-east-1:123456789012:landingzone/13CJG46WZKXXX4X5",
"operationIdentifier": "55XXXXXX-e2XX-41XX-a7XX-446XXXXXXXXX"
}
```
Untuk informasi selengkapnya, lihat [Memulai AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [CreateLandingZone](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/create-landing-zone.html)di *Referensi AWS CLI Perintah*.
### `hapus-zona pendaratan`
Contoh kode berikut menunjukkan cara menggunakan`delete-landing-zone`.
**AWS CLI**
**Untuk menonaktifkan landing zone**
`delete-landing-zone`Contoh berikut menonaktifkan zona pendaratan AWS Control Tower.
```
aws controltower delete-landing-zone \
--landing-zone-identifier {{arn:aws:controltower:us-east-1:123456789012:landingzone/13CJG46WZKXXX4X5}}
```
Output:
```
{
"operationIdentifier": "47XXXXXX-a6XX-82XX-c9XX-432XXXXXXXXX"
}
```
Untuk informasi selengkapnya, lihat [Menonaktifkan landing zone AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/decommission-landing-zone.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [DeleteLandingZone](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/delete-landing-zone.html)di *Referensi AWS CLI Perintah*.
### `menonaktifkan-dasar`
Contoh kode berikut menunjukkan cara menggunakan`disable-baseline`.
**AWS CLI**
**Untuk menonaktifkan baseline Control Tower**
`disable-baseline`Contoh berikut menonaktifkan garis dasar AWS Control Tower.
```
aws controltower disable-baseline \
--enabled-baseline-identifier {{arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XOM12BEL4YD578CQ2}}
```
Output:
```
{
"operationIdentifier": "b33486d7-5396-4ad0-9eae-3a57969fe8cd"
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [DisableBaseline](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/disable-baseline.html)di *Referensi AWS CLI Perintah*.
### `menonaktifkan-kontrol`
Contoh kode berikut menunjukkan cara menggunakan`disable-control`.
**AWS CLI**
**Untuk menonaktifkan kontrol Control Tower**
`disable-control`Contoh berikut menonaktifkan AWS kontrol yang diaktifkan Control Tower.
```
aws controltower disable-control \
--control-identifier {{arn:aws:controlcatalog:::control/497wrm2xnk1wxlf4obrxxxxxx}} \
--target-identifier {{arn:aws:organizations::123456789012:ou/o-s64ryxxxxx/ou-oqxx-i5wnxxxx}}
```
Output:
```
{
"operationIdentifier": "b8f0dxxx-08xx-43xx-a2xx-568e9922xxxx"
}
```
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [DisableControl](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/disable-control.html)di *Referensi AWS CLI Perintah*.
### `aktifkan-baseline`
Contoh kode berikut menunjukkan cara menggunakan`enable-baseline`.
**AWS CLI**
**Contoh 1: Untuk mengaktifkan baseline Control Tower yang dinonaktifkan**
`enable-baseline`Contoh berikut memungkinkan garis dasar AWS Control Tower jika `IdentityCenterBaseline` baseline dinonaktifkan.
```
aws controltower enable-baseline \
--baseline-identifier {{arn:aws:controltower:us-east-1::baseline/17BSJV3IGJ2QSGA2}} \
--baseline-version {{4.0}} \
--target-identifier {{arn:aws:organizations::123456789012:ou/o-s64ryixxxx/ou-oq9f-i5wnxxxx}}
```
Output:
```
{
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XOM12BEL4YD578CQ2",
"operationIdentifier": "51e190ac-8a37-4f6d-b63c-fb5104b5db38"
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
**Contoh 2: Untuk mengaktifkan baseline Control Tower yang diaktifkan**
`enable-baseline`Contoh berikut memungkinkan garis dasar AWS Control Tower jika `IdentityCenterBaseline` baseline diaktifkan.
```
aws controltower enable-baseline \
--baseline-identifier {{arn:aws:controltower:us-east-1::baseline/17BSJV3IGJ2QSGA2}} \
--baseline-version {{4.0}} \
--target-identifier {{arn:aws:organizations::123456789012:ou/o-s64ryixxxx/ou-oqxx-i5wnxxxx}} \
--parameters '{{[{"key":"IdentityCenterEnabledBaselineArn","value":"arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XAJNZNCBC1I386C7B"}]}}'
```
Output:
```
{
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XOM12BEL4YD578CQ2",
"operationIdentifier": "51e190ac-8a37-4f6d-b63c-fb5104b5db38"
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [EnableBaseline](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/enable-baseline.html)di *Referensi AWS CLI Perintah*.
### `mengaktifkan-kontrol`
Contoh kode berikut menunjukkan cara menggunakan`enable-control`.
**AWS CLI**
**Untuk mengaktifkan kontrol Control Tower**
`enable-control`Contoh berikut memungkinkan AWS kontrol Control Tower.
```
aws controltower enable-control \
--control-identifier {{arn:aws:controlcatalog:::control/497wrm2xnk1wxlf4obrxxxxxx}} \
--target-identifier {{arn:aws:organizations::123456789012:ou/o-s64ryxxxxx/ou-oqxx-i5wnxxxx}}
```
Output:
```
{
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledcontrol/18J5KBJ3W3VTIRLV",
"operationIdentifier": "7691fc5a-de87-4540-8c95-b0aabd56382c"
}
```
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [EnableControl](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/enable-control.html)di *Referensi AWS CLI Perintah*.
### `dapatkan-baseline-operasi`
Contoh kode berikut menunjukkan cara menggunakan`get-baseline-operation`.
**AWS CLI**
**Untuk mendapatkan operasi dasar Control Tower**
`get-baseline-operation`Contoh berikut mendapatkan rincian operasi dasar AWS Control Tower.
```
aws controltower get-baseline-operation \
--operation-identifier {{"51e190ac-8a37-4f6d-b63c-fb5104b5db38"}}
```
Output:
```
{
"baselineOperation": {
"endTime": "2025-04-17T23:48:46+00:00",
"operationIdentifier": "51e190ac-8a37-4f6d-b63c-fb5104b5db38",
"operationType": "ENABLE_BASELINE",
"startTime": "2025-04-17T23:46:37+00:00",
"status": "SUCCEEDED",
"statusMessage": "AWS Control Tower completed the baseline operation successfully."
}
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [GetBaselineOperation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/get-baseline-operation.html)di *Referensi AWS CLI Perintah*.
### `dapatkan-baseline`
Contoh kode berikut menunjukkan cara menggunakan`get-baseline`.
**AWS CLI**
**Untuk mendapatkan garis dasar Control Tower**
`get-baseline`Contoh berikut mendapatkan rincian dari garis dasar AWS Control Tower.
```
aws controltower get-baseline \
--baseline-identifier {{arn:aws:controltower:us-east-1::baseline/LN25R72TTG6IGPTQ}}
```
Output:
```
{
"arn": "arn:aws:controltower:us-east-1::baseline/LN25R72TTG6IGPTQ",
"description": "Sets up shared resources for AWS Identity Center, which prepares the AWSControlTowerBaseline to set up Identity Center access for accounts.",
"name": "IdentityCenterBaseline"
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [GetBaseline](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/get-baseline.html)di *Referensi AWS CLI Perintah*.
### `dapatkan-kontrol-operasi`
Contoh kode berikut menunjukkan cara menggunakan`get-control-operation`.
**AWS CLI**
**Untuk mendapatkan operasi kontrol Control Tower**
`get-control-operation`Contoh berikut mendapatkan rincian operasi AWS kontrol Control Tower.
```
aws controltower get-control-operation \
--operation-identifier {{"7691fc5a-de87-4540-8c95-b0aabd56382c"}}
```
Output:
```
{
"controlOperation": {
"controlIdentifier": "arn:aws:controlcatalog:::control/497wrm2xnk1wxlf4obrdo7mej",
"enabledControlIdentifier": "arn:aws:controltower:us-east-1:123456789012:enabledcontrol/18J5KBJ3W3VTIRLV",
"endTime": "2025-04-17T03:08:55+00:00",
"operationIdentifier": "7691fc5a-de87-4540-8c95-b0aabd56382c",
"operationType": "ENABLE_CONTROL",
"startTime": "2025-04-17T03:07:52+00:00",
"status": "SUCCEEDED",
"statusMessage": "Operation was successful.",
"targetIdentifier": "arn:aws:organizations::123456789012:ou/o-s64ryixxxx/ou-oqxx-i5wnxxxx"
}
}
```
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [GetControlOperation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/get-control-operation.html)di *Referensi AWS CLI Perintah*.
### `dapatkan-diaktifkan-dasar`
Contoh kode berikut menunjukkan cara menggunakan`get-enabled-baseline`.
**AWS CLI**
**Untuk mendapatkan baseline yang diaktifkan Control Tower**
`get-enabled-baseline`Contoh berikut mendapatkan detail dari garis dasar yang diaktifkan AWS Control Tower.
```
aws controltower get-enabled-baseline \
--enabled-baseline-identifier {{arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XOM12BEL4YD578CQ2}}
```
Output:
```
{
"enabledBaselineDetails": {
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XOM12BEL4YD578CQ2",
"baselineIdentifier": "arn:aws:controltower:us-east-1::baseline/17BSJV3IGJ2QSGA2",
"baselineVersion": "4.0",
"parameters": [
{
"key": "IdentityCenterEnabledBaselineArn",
"value": "arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XAJNZNCBC1I386C7B"
}
],
"statusSummary": {
"lastOperationIdentifier": "51e190ac-8a37-4f6d-b63c-fb5104b5db38",
"status": "SUCCEEDED"
},
"targetIdentifier": "arn:aws:organizations::123456789012:ou/o-3onqfufxxx/ou-g8xx-5kluxxxx"
}
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [GetEnabledBaseline](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/get-enabled-baseline.html)di *Referensi AWS CLI Perintah*.
### `dapatkan-mengaktifkan-kontrol`
Contoh kode berikut menunjukkan cara menggunakan`get-enabled-control`.
**AWS CLI**
**Untuk mendapatkan kontrol yang diaktifkan Control Tower**
`get-enabled-control`Contoh berikut mendapatkan rincian AWS kontrol yang diaktifkan Control Tower.
```
aws controltower get-enabled-control \
--enabled-control-identifier {{arn:aws:controltower:us-east-1:123456789012:enabledcontrol/26RGJRSLXCP1KW8D}}
```
Output:
```
{
"enabledControlDetails": {
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledcontrol/26RGJRSLXCP1KW8D",
"controlIdentifier": "arn:aws:controltower:us-east-1::control/AWS-GR_CLOUDTRAIL_CHANGE_PROHIBITED",
"driftStatusSummary": {
"driftStatus": "NOT_CHECKING"
},
"parameters": [],
"statusSummary": {
"status": "SUCCEEDED"
},
"targetIdentifier": "arn:aws:organizations::123456789012:ou/o-s64ryixxxx/ou-oqxx-i5wnxxxx",
"targetRegions": [
{
"name": "ap-south-2"
},
{
"name": "ap-south-1"
},
{
"name": "eu-south-1"
},
{
"name": "us-east-1"
}
]
}
}
```
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [GetEnabledControl](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/get-enabled-control.html)di *Referensi AWS CLI Perintah*.
### `dapatkan-pendaratan-zona-operasi`
Contoh kode berikut menunjukkan cara menggunakan`get-landing-zone-operation`.
**AWS CLI**
**Untuk mendapatkan operasi landing zone Control Tower**
`get-landing-zone-operation`Contoh berikut mendapatkan rincian operasi landing zone AWS Control Tower.
```
aws controltower get-landing-zone-operation \
--operation-identifier {{ee9d0d2d-6532-42d8-9b85-3fbb0700a606}}
```
Output:
```
{
"operationDetails": {
"operationIdentifier": "ee9d0d2d-6532-42d8-9b85-3fbb0700xxxx",
"operationType": "RESET",
"startTime": "2025-04-17T03:19:33+00:00",
"status": "IN_PROGRESS"
}
}
```
Untuk informasi selengkapnya, lihat [Memulai AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [GetLandingZoneOperation](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/get-landing-zone-operation.html)di *Referensi AWS CLI Perintah*.
### `mendapatkan zona pendaratan-`
Contoh kode berikut menunjukkan cara menggunakan`get-landing-zone`.
**AWS CLI**
**Untuk menggambarkan zona landing zone Control Tower**
`get-landing-zone`Contoh berikut mendapatkan rincian dari landing zone AWS Control Tower.
```
aws controltower get-landing-zone \
--landing-zone-identifier {{arn:aws:controltower:us-east-1:123456789012:landingzone/13CJG46WZKXXX4X5}}
```
Output:
```
{
"landingZone": {
"arn": "arn:aws:controltower:us-east-1:123456789012:landingzone/13CJG46WZKXXX4X5",
"driftStatus": {
"status": "IN_SYNC"
},
"latestAvailableVersion": "3.3",
"manifest": {
"accessManagement": {
"enabled": true
},
"securityRoles": {
"accountId": "098765432101"
},
"governedRegions": [
"us-east-1",
"us-west-2"
],
"organizationStructure": {
"security": {
"name": "Security"
}
},
"centralizedLogging": {
"accountId": "111122223333",
"configurations": {
"loggingBucket": {
"retentionDays": 365
},
"kmsKeyArn": "arn:aws:kms:us-east-1:123456789012:key/example-key-id",
"accessLoggingBucket": {
"retentionDays": 3650
}
},
"enabled": true
}
},
"status": "ACTIVE",
"version": "3.3"
}
}
```
Untuk informasi selengkapnya, lihat [Memulai AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [GetLandingZone](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/get-landing-zone.html)di *Referensi AWS CLI Perintah*.
### `daftar-baseline`
Contoh kode berikut menunjukkan cara menggunakan`list-baselines`.
**AWS CLI**
**Untuk membuat daftar garis dasar Control Tower**
`list-baselines`Contoh berikut mencantumkan semua baseline AWS Control Tower yang tersedia.
```
aws controltower list-baselines
```
Output:
```
{
"baselines": [
{
"arn": "arn:aws:controltower:us-east-1::baseline/4T4HA1KMO10S6311",
"description": "Sets up resources to monitor security and compliance of accounts in your organization.",
"name": "AuditBaseline"
},
{
"arn": "arn:aws:controltower:us-east-1::baseline/J8HX46AHS5MIKQPD",
"description": "Sets up a central repository for logs of API activities and resource configurations from accounts in your organization.",
"name": "LogArchiveBaseline"
},
{
"arn": "arn:aws:controltower:us-east-1::baseline/LN25R72TTG6IGPTQ",
"description": "Sets up shared resources for AWS Identity Center, which prepares the AWSControlTowerBaseline to set up Identity Center access for accounts.",
"name": "IdentityCenterBaseline"
},
{
"arn": "arn:aws:controltower:us-east-1::baseline/17BSJV3IGJ2QSGA2",
"description": "Sets up resources and mandatory controls for member accounts within the target OU, required for AWS Control Tower governance.",
"name": "AWSControlTowerBaseline"
},
{
"arn": "arn:aws:controltower:us-east-1::baseline/3WPD0NA6TJ9AOMU2",
"description": "Sets up a central AWS Backup vault in your organization.",
"name": "BackupCentralVaultBaseline"
},
{
"arn": "arn:aws:controltower:us-east-1::baseline/H6C5JFCJJ3CPU3J5",
"description": "Sets up AWS Backup Audit Manager.",
"name": "BackupAdminBaseline"
},
{
"arn": "arn:aws:controltower:us-east-1::baseline/APO9ATVPBKFRRGLK",
"description": "Sets up a local AWS Backup vault and attaches multiple AWS Backup plans.",
"name": "BackupBaseline"
}
]
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ListBaselines](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/list-baselines.html)di *Referensi AWS CLI Perintah*.
### `daftar-kontrol-operasi`
Contoh kode berikut menunjukkan cara menggunakan`list-control-operations`.
**AWS CLI**
**Untuk daftar operasi kontrol Control Tower**
`list-control-operations`Contoh berikut mencantumkan rincian AWS kontrol Control Tower yang sedang berlangsung atau diantrian.
```
aws controltower list-control-operations
```
Output:
```
{
"controlOperations": [
{
"startTime": "2024-02-19T19:22:08+00:00",
"operationType": "ENABLE_CONTROL",
"status": "IN_PROGRESS",
"statusMessage": "Operation is in progress.",
"operationIdentifier": "f9f43b45-db27-44df-89d8-f9129e3632XX",
"controlIdentifier": "arn:aws:controltower:us-east-1::control/SKIBWKYUQAAC",
"targetIdentifier": "arn:aws:organizations::123456789012:ou/o-yy67i3pfv2/ou-slt4-8abknXXX",
"enabledControlIdentifier": "arn:aws:controltower:us-east-1:123456789012:enabledcontrol/RWZFSHV2BBRU6JSE"
},
{
"startTime": "2024-02-19T19:21:09+00:00",
"operationType": "ENABLE_CONTROL",
"status": "IN_PROGRESS",
"statusMessage": "Operation is in progress",
"operationIdentifier": "171ee0b1-e926-486e-9775-005bd244ccXX",
"controlIdentifier": "arn:aws:controltower:us-east-1::control/PDKYAANJEWJE",
"targetIdentifier": "arn:aws:organizations::123456789012:ou/o-yy67i3pfv2/ou-slt4-fl6miXXX",
"enabledControlIdentifier": "arn:aws:controltower:us-east-2:123456789012:enabledcontrol/XCNJARWZFSHV6JSE"
}
]
}
```
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ListControlOperations](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/list-control-operations.html)di *Referensi AWS CLI Perintah*.
### `daftar-diaktifkan-baseline`
Contoh kode berikut menunjukkan cara menggunakan`list-enabled-baselines`.
**AWS CLI**
**Untuk membuat daftar baseline yang diaktifkan Control Tower**
`list-enabled-baselines`Contoh berikut mencantumkan semua baseline AWS Control Tower yang diaktifkan.
```
aws controltower list-enabled-baselines
```
Output:
```
{
"enabledBaselines": [
{
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XAJNZNCBC1I386C7B",
"baselineIdentifier": "arn:aws:controltower:us-east-1::baseline/LN25R72TTG6IGPTQ",
"statusSummary": {
"status": "SUCCEEDED"
},
"targetIdentifier": "arn:aws:organizations::123456789012:account/o-3onqfuxxxx/123456789012"
},
{
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XAH3ZJL9DWA386CA5",
"baselineIdentifier": "arn:aws:controltower:us-east-1::baseline/4T4HA1KMO10S6311",
"statusSummary": {
"status": "SUCCEEDED"
},
"targetIdentifier": "arn:aws:organizations::123456789012:account/o-3onqfuxxxx/012345098765"
},
{
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XALFJ9548TL386CBT",
"baselineIdentifier": "arn:aws:controltower:us-east-1::baseline/J8HX46AHS5MIKQPD",
"statusSummary": {
"status": "SUCCEEDED"
},
"targetIdentifier": "arn:aws:organizations::123456789012:account/o-3onqfuxxxx/098765432109"
}
]
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ListEnabledBaselines](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/list-enabled-baselines.html)di *Referensi AWS CLI Perintah*.
### `daftar-diaktifkan-kontrol`
Contoh kode berikut menunjukkan cara menggunakan`list-enabled-controls`.
**AWS CLI**
**Untuk membuat daftar kontrol yang diaktifkan Control Tower**
`list-enabled-controls`Contoh berikut mendapatkan rincian AWS kontrol yang diaktifkan Control Tower.
```
aws controltower list-enabled-controls \
--target-identifier {{arn:aws:organizations::123456789012:ou/o-s64ryxxxxx/ou-oqxx-i5wnxxxx}}
```
Output:
```
{
"enabledControls": [
{
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledcontrol/26RGJRSLXCP1KW8D",
"controlIdentifier": "arn:aws:controltower:us-east-1::control/AWS-GR_CLOUDTRAIL_CHANGE_PROHIBITED",
"driftStatusSummary": {
"driftStatus": "NOT_CHECKING"
},
"statusSummary": {
"status": "SUCCEEDED"
},
"targetIdentifier": "arn:aws:organizations::123456789012:ou/o-s64ryxxxxx/ou-oqxx-i5wnxxxx"
},
{
"arn": "arn:aws:controltower:us-east-1:123456789012:enabledcontrol/18AY24CWKM6IVSLU",
"controlIdentifier": "arn:aws:controltower:us-east-1::control/AWS-GR_CLOUDTRAIL_CLOUDWATCH_LOGS_ENABLED",
"driftStatusSummary": {
"driftStatus": "NOT_CHECKING"
},
"statusSummary": {
"status": "SUCCEEDED"
},
"targetIdentifier": "arn:aws:organizations::123456789012:ou/o-s64ryxxxxx/ou-oqxx-i5wnxxxx"
}
]
}
```
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ListEnabledControls](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/list-enabled-controls.html)di *Referensi AWS CLI Perintah*.
### `daftar-pendaratan-zona-operasi`
Contoh kode berikut menunjukkan cara menggunakan`list-landing-zone-operations`.
**AWS CLI**
**Untuk membuat daftar operasi landing zone Control Tower**
`list-landing-zone-operations`Contoh berikut mencantumkan operasi landing zone AWS Control Tower.
```
aws controltower list-landing-zone-operations
```
Output:
```
{
"landingZoneOperations": [
{
"operationIdentifier": "202ee056-5147-49fd-a7ad-8161e3bf043a",
"operationType": "RESET",
"status": "SUCCEEDED"
},
{
"operationIdentifier": "dbd4a4b1-baf9-48cc-bd71-6b923d0f2339",
"operationType": "RESET",
"status": "SUCCEEDED"
},
{
"operationIdentifier": "e6261ab8-3247-4052-af31-1afe7bb0593e",
"operationType": "UPDATE",
"status": "SUCCEEDED"
},
{
"operationIdentifier": "507c6c87-89a8-435f-8697-b257a800f129",
"operationType": "UPDATE",
"status": "SUCCEEDED"
}
]
}
```
Untuk informasi selengkapnya, lihat [Memulai AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ListLandingZoneOperations](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/list-landing-zone-operations.html)di *Referensi AWS CLI Perintah*.
### `daftar-zona pendaratan`
Contoh kode berikut menunjukkan cara menggunakan`list-landing-zones`.
**AWS CLI**
**Untuk membuat daftar pengenal landing zone Control Tower**
`list-landing-zones`Contoh berikut mencantumkan landing zone Control Tower`identifier`.
```
aws controltower list-landing-zones
```
Output:
```
{
"landingZones": [
{
"arn": "arn:aws:controltower:us-east-1:123456789012:landingzone/13CJG46WZKXXX4X5"
}
]
}
```
Untuk informasi selengkapnya, lihat [Memulai AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ListLandingZones](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/list-landing-zones.html)di *Referensi AWS CLI Perintah*.
### `list-tags-for-resource`
Contoh kode berikut menunjukkan cara menggunakan`list-tags-for-resource`.
**AWS CLI**
**Untuk mencantumkan tag untuk kontrol yang diaktifkan Control Tower**
`list-tags-for-resource`Contoh berikut mencantumkan tag untuk AWS Control Tower Enabled Controls.
```
aws controltower list-tags-for-resource \
--resource-arn {{"arn:aws:controltower:us-east-1:123456789012:enabledcontrol/2H2AWUG4SKG81855"}}
```
Output:
```
{
"tags": {
"TestTagKey": "TestTagValue"
}
}
```
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ListTagsForResource](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/list-tags-for-resource.html)di *Referensi AWS CLI Perintah*.
### `setel ulang-diaktifkan-baseline`
Contoh kode berikut menunjukkan cara menggunakan`reset-enabled-baseline`.
**AWS CLI**
**Untuk mengatur ulang baseline yang diaktifkan Control Tower**
`reset-enabled-baseline`Contoh berikut me-reset sebuah AWS Control Tower diaktifkan baseline.
```
aws controltower reset-enabled-baseline \
--enabled-baseline-identifier {{arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XOM12BEL4YD578CQ2}}
```
Output:
```
{
"operationIdentifier": "214cde95-5c39-46b9-b429-4fad550a7096"
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ResetEnabledBaseline](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/reset-enabled-baseline.html)di *Referensi AWS CLI Perintah*.
### `reset-enabled-control`
Contoh kode berikut menunjukkan cara menggunakan`reset-enabled-control`.
**AWS CLI**
**Untuk mengatur ulang kontrol yang diaktifkan Control Tower**
`reset-enabled-control`Contoh berikut me-reset AWS kontrol yang diaktifkan Control Tower.
```
aws controltower reset-enabled-control \
--enabled-control-identifier {{arn:aws:controltower:us-east-1:123456789012:enabledcontrol/2H2AWUG4SKG81855}}
```
Output:
```
{
"operationIdentifier": "8276XXXX-b4XX-4eXX-96XX-881d2a4XXXXX"
}
```
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ResetEnabledControl](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/reset-enabled-control.html)di *Referensi AWS CLI Perintah*.
### `mereset-zona pendaratan-`
Contoh kode berikut menunjukkan cara menggunakan`reset-landing-zone`.
**AWS CLI**
**Untuk mengatur ulang landing zone Control Tower**
`reset-landing-zone`Contoh berikut me-reset zona pendaratan AWS Control Tower.
```
aws controltower reset-landing-zone \
--landing-zone-identifier {{arn:aws:controltower:us-east-1:123456789012:landingzone/13CJG46WZKXXX4X5}}
```
Output:
```
{
"operationIdentifier": "73XXXXXX-b2XX-77XX-c6XX-374XXXXXXXXX"
}
```
Untuk informasi selengkapnya, lihat [Memulai AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [ResetLandingZone](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/reset-landing-zone.html)di *Referensi AWS CLI Perintah*.
### `tag-resource`
Contoh kode berikut menunjukkan cara menggunakan`tag-resource`.
**AWS CLI**
**Untuk menandai kontrol yang diaktifkan Control Tower**
`tag-resource`Contoh berikut menandai AWS kontrol yang diaktifkan Control Tower.
```
aws controltower tag-resource \
--resource-arn {{"arn:aws:controltower:us-east-1:123456789012:enabledcontrol/2H2AWUG4SKG81855"}} \
--tags {{"TestTagKey=TestTagValue"}}
```
Perintah ini tidak menghasilkan output.
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [TagResource](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/tag-resource.html)di *Referensi AWS CLI Perintah*.
### `untag-resource`
Contoh kode berikut menunjukkan cara menggunakan`untag-resource`.
**AWS CLI**
**Untuk menghapus tag kontrol yang diaktifkan Control Tower**
`untag-resource`Contoh berikut menghapus tag AWS kontrol yang diaktifkan Control Tower.
```
aws controltower untag-resource \
--resource-arn {{"arn:aws:controltower:us-east-1:123456789012:enabledcontrol/2H2AWUG4SKG81855"}} \
--tag-keys {{"TestTagKey"}}
```
Perintah ini tidak menghasilkan output.
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [UntagResource](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/untag-resource.html)di *Referensi AWS CLI Perintah*.
### `pembaruan-diaktifkan-baseline`
Contoh kode berikut menunjukkan cara menggunakan`update-enabled-baseline`.
**AWS CLI**
**Contoh 1: Untuk memperbarui baseline Control Tower yang dinonaktifkan**
`update-enabled-baseline`Contoh berikut memperbarui garis dasar yang diaktifkan AWS Control Tower jika baseline '' IdentityCenterBaseline dinonaktifkan.
```
aws controltower update-enabled-baseline \
--baseline-version {{4.0}} \
--enabled-baseline-identifier {{arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XOM12BEL4YD578CQ2}}
```
Output:
```
{
"operationIdentifier": "214cde95-5c39-46b9-b429-4fad550a7096"
}
```
**Contoh 2: Untuk memperbarui baseline Control Tower yang diaktifkan**
`update-enabled-baseline`Contoh berikut memperbarui garis dasar yang diaktifkan AWS Control Tower jika baseline '' IdentityCenterBaseline diaktifkan.
```
aws controltower update-enabled-baseline \
--baseline-version {{4.0}} \
--enabled-baseline-identifier {{arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XOM12BEL4YD578CQ2}} \
--parameters '{{[{"key":"IdentityCenterEnabledBaselineArn","value":"arn:aws:controltower:us-east-1:123456789012:enabledbaseline/XAJNZNCBC1I386C7B"}]}}'
```
Output:
```
{
"operationIdentifier": "b0f4a7c2-334d-48d9-971e-47fea9db3e8b"
}
```
Untuk informasi selengkapnya, lihat [Jenis garis dasar](https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [UpdateEnabledBaseline](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/update-enabled-baseline.html)di *Referensi AWS CLI Perintah*.
### `kontrol yang diaktifkan pembaruan-`
Contoh kode berikut menunjukkan cara menggunakan`update-enabled-control`.
**AWS CLI**
**Untuk memperbarui kontrol yang diaktifkan Control Tower**
`update-enabled-control`Contoh berikut memperbarui AWS kontrol yang diaktifkan Control Tower.
```
aws controltower update-enabled-control \
--enabled-control-identifier {{arn:aws:controltower:us-east-1:123456789012:enabledcontrol/JSJN8UL0G2MWGRTZ}} \
--parameters '{{[{"key":"AllowedRegions","value":["us-east-1","us-west-1","us-west-2","us-east-2"]}]}}'
```
Output:
```
{
"operationIdentifier": "b8f0dxxx-08xx-43xx-a2xx-568e9922xxxx"
}
```
Untuk informasi selengkapnya, lihat [Tentang kontrol di AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/controlreference/controls.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [UpdateEnabledControl](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/update-enabled-control.html)di *Referensi AWS CLI Perintah*.
### `zona perbaruan-pendaratan`
Contoh kode berikut menunjukkan cara menggunakan`update-landing-zone`.
**AWS CLI**
**Untuk memperbarui landing zone Control Tower**
`update-landing-zone`Contoh berikut memperbarui AWS Control Tower landing zone.
```
aws controltower update-landing-zone \
--landing-zone-identifier {{arn:aws:controltower:us-east-1:123456789012:landingzone/13CJG46WZKXXX4X5}} \
--landing-zone-version {{3.3}} \
--manifest {{"file://UpdateLandingZoneManifest.json"}}
```
Output:
```
{
"operationIdentifier": "53XXXXXX-b2XX-97XX-c6XX-474XXXXXXXXX"
}
```
Untuk informasi selengkapnya, lihat [Memulai AWS Control Tower](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html) di *Panduan Pengguna AWS Control Tower*.
+ Untuk detail API, lihat [UpdateLandingZone](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/controltower/update-landing-zone.html)di *Referensi AWS CLI Perintah*.