使用以下命令更新基于资源的授权策略 Amazon Organizations

JSONp@@ ol icy — 粘贴并自定义一个基于资源的授权策略示例，以便在您的账户中使用，或者在JSON编辑器中键入您自己的JSON策略文档。

可视化编辑器-在可视化编辑器中构建新的委托策略，它可以指导您无需编写JSON语法即可创建委托策略。

Amazon CLI: put-resource-policy

以下为创建或更新委托策略的示例。

$ aws organizations put-resource-policy --content
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Fully_manage_backup_policies",
            "Effect": "Allow",
            "Principal": {
                "AWS": "135791357913"
            },
            "Action": [
                "organizations:DescribeOrganization",
                "organizations:ListAccounts",
                "organizations:CreatePolicy",
                "organizations:DescribePolicy",
                "organizations:UpdatePolicy",
                "organizations:DeletePolicy",
                "organizations:AttachPolicy",
                "organizations:DetachPolicy"
            ],
            "Resource": [
                "arn:aws:organizations::246802468024:root/o-abcdef/r-pqrstu",
                "arn:aws:organizations::246802468024:ou/o-abcdef/*",
                "arn:aws:organizations::246802468024:account/o-abcdef/*",
                "arn:aws:organizations::246802468024:organization/policy/backup_policy/*",
            ],
            "Condition": {
                "StringLikeIfExists": {
                    "organizations:PolicyType": [
                        "BACKUP_POLICY"
                    ]
                }
            }
        }
    ]
}

Amazon SDK: PutResourcePolicy