Creating a VPC endpoint policy for AWS Organizations - AWS Organizations
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

Creating a VPC endpoint policy for AWS Organizations

You can attach an endpoint policy to your VPC endpoint that controls access to Organizations. The policy specifies the following information:

  • The principal that can perform actions.

  • The actions that can be performed.

  • The resources on which actions can be performed.

For more information, see Control access to VPC endpoints using endpoint policies in the Amazon VPC User Guide.

Example: VPC endpoint policy for AWS Organizations actions

{ "Statement":[ { "Principal":"*", "Effect":"Allow", "Action":[ "Organizations:DescribeAccount" ], "Resource":"*" } ] }