Getting started with declarative policies - AWS Organizations

Getting started with declarative policies

Follow these steps to get started using declarative policies.

  1. Learn about the permissions you must have to perform declarative policy tasks.

  2. Enable declarative policies for your organization.

  3. Run the account status report.

  4. Create a declarative policy.

  5. Attach the declarative policy to your organization's root, OU, or account.

  6. View the combined effective declarative policy that applies to an account.

For all of these steps, you sign in as an IAM user, assume an IAM role, or sign in as the root user (not recommended) in the organization's management account.

Other information