private enableAWSServiceAccess()

in source/aws-bootstrap-kit/lib/organization.ts [126:157]


  private enableAWSServiceAccess(principal: string) {
    const resourceName = principal==='ssm.amazonaws.com'?"EnableSSMAWSServiceAccess":"EnableMultiAccountsSetup";

    return new cr.AwsCustomResource(this,
      resourceName,
      {
        onCreate: {
          service: 'Organizations',
          action: 'enableAWSServiceAccess',
          physicalResourceId: cr.PhysicalResourceId.of(resourceName),
          region: 'us-east-1',
          parameters: {
            ServicePrincipal: principal,
          }
        },
        onDelete: {
          service: 'Organizations',
          action: 'disableAWSServiceAccess',
          region: 'us-east-1',
          parameters: {
            ServicePrincipal: principal,
          }
        },
        installLatestAwsSdk: false,
        policy: cr.AwsCustomResourcePolicy.fromSdkCalls(
          {
            resources: cr.AwsCustomResourcePolicy.ANY_RESOURCE
          }
        )
      }
    );
  }