AWS organizations policy tag

[alexjanduci]

Dear,

I'm trying to filter TAG Policies in AWS Organizations, but when I run "custodian run --dryrun -s . first_policy.yaml" I receive only SCP policies. I don't get any error when I execute the policy.

The police:

policies:

TAG-POLICY [0012] >>>>

• name: tag-policy-0012-notifica-squad-nomedasquad
  resource: aws.org-policy
  description: |
  Notificar quando houver alteracoes na TAG-POLICY
  mode:
  tags:
  squad: MySquad
  managed_by: CloudCustodian
  type: cloudtrail
  events:
  • source: organizations.amazonaws.com
    event: UpdatePolicy
    ids: "requestParameters.policyId"
    filters:
  • type: value
    key: "Id"
    op: eq
    value: "example-of-tag-policy-id"

[alexjanduci]

Here the tag policy in AWS.