AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Generates an account status report. The report is generated asynchronously, and can take several hours to complete.
The report provides the current status of all attributes supported by declarative
policies for the accounts within the specified scope. The scope is determined by the
specified TargetId, which can represent an individual account, or all the accounts
that fall under the specified organizational unit (OU) or root (the entire Amazon
Web Services Organization).
The report is saved to your specified S3 bucket, using the following path structure (with the capitalized placeholders representing your specific values):
s3://AMZN-S3-DEMO-BUCKET/YOUR-OPTIONAL-S3-PREFIX/ec2_TARGETID_REPORTID_YYYYMMDDTHHMMZ.csv
Prerequisites for generating a report
The StartDeclarativePoliciesReport API can only be called by the management
account or delegated administrators for the organization.
An S3 bucket must be available before generating the report (you can create a new one or use an existing one), it must be in the same Region where the report generation request is made, and it must have an appropriate bucket policy. For a sample S3 policy, see Sample Amazon S3 policy under Examples.
Trusted access must be enabled for the service for which the declarative policy will
enforce a baseline configuration. If you use the Amazon Web Services Organizations
console, this is done automatically when you enable declarative policies. The API
uses the following service principal to identify the EC2 service: ec2.amazonaws.com.
For more information on how to enable trusted access with the Amazon Web Services
CLI and Amazon Web Services SDKs, see Using
Organizations with other Amazon Web Services services in the Amazon Web Services
Organizations User Guide.
Only one report per organization can be generated at a time. Attempting to generate a report while another is in progress will result in an error.
For more information, including the required IAM permissions to run this API, see Generating the account status report for declarative policies in the Amazon Web Services Organizations User Guide.
This is an asynchronous operation using the standard naming convention for .NET 4.7.2 or higher.
Namespace: Amazon.EC2
Assembly: AWSSDK.EC2.dll
Version: 3.x.y.z
public virtual Task<StartDeclarativePoliciesReportResponse> StartDeclarativePoliciesReportAsync( StartDeclarativePoliciesReportRequest request, CancellationToken cancellationToken )
Container for the necessary parameters to execute the StartDeclarativePoliciesReport service method.
A cancellation token that can be used by other objects or threads to receive notice of cancellation.
.NET:
Supported in: 8.0 and newer, Core 3.1
.NET Standard:
Supported in: 2.0
.NET Framework:
Supported in: 4.7.2 and newer