How to import existing AWS Organizations SCPs and RCPs to CloudFormation

This article provides a comprehensive guide on importing existing AWS Organizations Service Control Policies (SCPs) and Resource Control Policies (RCPs) into CloudFormation using a command-line tool.

• The solution helps streamline policy management by enabling:
  • History tracking
  • Policy validation
  • Rollback capabilities
• Key features of the tool include:
• Identifying SCPs and RCPs in the organization
• Detecting AWS Control Tower policies
• Finding policies without targets
• Generating CloudFormation templates
• Recommended next steps:
• Store templates in a Git repository
• Set up a CI/CD pipeline
• Incorporate CloudFormation Hooks for policy validation

The solution aims to centralize and automate AWS governance, making policy management more efficient and reducing configuration risks.