Creating a VPC endpoint policy for Amazon Organizations
You can attach an endpoint policy to your VPC endpoint that controls access to Organizations. The policy specifies the following information:
-
The principal that can perform actions.
-
The actions that can be performed.
-
The resources on which actions can be performed.
For more information, see Control access to VPC endpoints using endpoint policies in the Amazon VPC User Guide.
Example: VPC endpoint policy for Amazon Organizations actions
{ "Statement":[ { "Principal":"*", "Effect":"Allow", "Action":[ "Organizations:DescribeAccount" ], "Resource":"*" } ] }