ScopeConfiguration
¶
Used by
Source code in docs_src/capo_network_security_manager/types/scope_configuration.py
account_filter
instance-attribute
¶
account_filter: NotRequired[AccountFilter]
The account filter that determines which accounts are in scope. When set, exactly one of includeAll, include, or exclude is set.
Organization administrators must include an account filter in every scope configuration. Single-account administrators must omit it: a scope without an account filter applies only to the administrator's own account. The presence of an account filter is fixed when the scope is created: an update can't add an account filter to a scope that was created without one, or remove the account filter from a scope that was created with one.
resource_scopes
instance-attribute
¶
resource_scopes: ResourceScopeMap
The resource-level scoping configuration, keyed by resource type, that defines which resources within the selected accounts are in scope.