in source/aws-bootstrap-kit/lib/organization.ts [126:157]
private enableAWSServiceAccess(principal: string) {
const resourceName = principal==='ssm.amazonaws.com'?"EnableSSMAWSServiceAccess":"EnableMultiAccountsSetup";
return new cr.AwsCustomResource(this,
resourceName,
{
onCreate: {
service: 'Organizations',
action: 'enableAWSServiceAccess',
physicalResourceId: cr.PhysicalResourceId.of(resourceName),
region: 'us-east-1',
parameters: {
ServicePrincipal: principal,
}
},
onDelete: {
service: 'Organizations',
action: 'disableAWSServiceAccess',
region: 'us-east-1',
parameters: {
ServicePrincipal: principal,
}
},
installLatestAwsSdk: false,
policy: cr.AwsCustomResourcePolicy.fromSdkCalls(
{
resources: cr.AwsCustomResourcePolicy.ANY_RESOURCE
}
)
}
);
}