This is the multi-page printable view of this section. Click here to print.
CreateDelegationPolicy
1 - 1.2
scpcli organization delegation policy create
[--organization_id <value>]
[--statement <value>]
[--version <value>]
Description
create a delegation policy
State ACTIVE (CURRENT)
| Version | Not Before |
|---|---|
| 1.2 | - |
Parameters
| Name | Type | Description | Example |
|---|---|---|---|
| organization_id optional | string | Organization ID | o-x9y8z7w6v5u4t3s2r1q0p9o8n7m6l5 |
| statement optional | array | Policy Syntax | '{"Action": ["s3:PutObject", "s3:GetObject"], "Condition": "", "Effect": "Allow", "NotAction": [""], "Principal": "", "Resource": ["*"], "Sid": "statement1"}' |
| version optional | string | Policy Version | - |
Responses
| Name | Description | Example |
|---|---|---|
| created_at | Created At | 2025-01-01T00:00:00.000Z |
| created_by | Created By | c23fb561c689455993874fa5d5ed4a2f |
| document | Delegation Policy Document | {‘Statement’: [{‘Action’: [‘organization:CreateServiceControlPolicy’, ‘organization:DeleteServiceControlPolicies’, ‘organization:SetServiceControlPolicy’, ‘organization:ShowServiceControlPolicy’, ‘organization:ListServiceControlPolicies’, ‘organization:ShowAccount’, ‘organization:ListAccounts’, ‘organization:ListOrganizationUnits’, ‘organization:ListOrganizationInvitations’, ‘organization:ListParents’, ‘organization:ListPoliciesForTarget’, ‘organization:ListTargetsForPolicy’, ‘organization:AttachPolicyBindings’, ‘organization:RemovePolicyBindings’, ‘organization:ShowDelegatePolicy’], ‘Effect’: ‘Allow’, ‘Principal’: {‘scp’: [‘srn:dev2::f045159f40c64125a1fe61bd71d1c14c:::iam:user/e3a6e3f99c1040639e9a3c8f8b7427df’]}, ‘Resource’: [’*’], ‘Sid’: ‘statement1’}], ‘Version’: ‘2024-07-01’} |
| modified_at | Modified At | 2025-01-01T00:00:00.000Z |
| modified_by | Modified By | c23fb561c689455993874fa5d5ed4a2f |
| organization_id | Organization ID | o-x9y8z7w6v5u4t3s2r1q0p9o8n7m6l5 |
2 - 1.1
scpcli organization delegation policy create
[--organization_id <value>]
[--statement <value>]
[--version <value>]
Description
create a delegation policy
State ACTIVE (DEPRECATED)
Deprecated versions with Not Before dates that have arrived or expired are no longer supported. We recommend using the latest version.
| Version | Not Before |
|---|---|
| 1.1 | 20260531 |
Parameters
| Name | Type | Description | Example |
|---|---|---|---|
| organization_id optional | string | Organization ID | o-x9y8z7w6v5u4t3s2r1q0p9o8n7m6l5 |
| statement optional | array | Policy Syntax | '{"Action": ["s3:PutObject", "s3:GetObject"], "Condition": "", "Effect": "Allow", "NotAction": [""], "Principal": "", "Resource": ["*"], "Sid": "statement1"}' |
| version optional | string | Policy Version | - |
Responses
| Name | Description | Example |
|---|---|---|
| created_at | Created At | 2025-01-01T00:00:00.000Z |
| created_by | Created By | c23fb561c689455993874fa5d5ed4a2f |
| document | Delegation Policy Document | {‘Statement’: [{‘Action’: [‘organization:CreateServiceControlPolicy’, ‘organization:DeleteServiceControlPolicies’, ‘organization:SetServiceControlPolicy’, ‘organization:ShowServiceControlPolicy’, ‘organization:ListServiceControlPolicies’, ‘organization:ShowAccount’, ‘organization:ListAccounts’, ‘organization:ListOrganizationUnits’, ‘organization:ListOrganizationInvitations’, ‘organization:ListParents’, ‘organization:ListPoliciesForTarget’, ‘organization:ListTargetsForPolicy’, ‘organization:AttachPolicyBindings’, ‘organization:RemovePolicyBindings’, ‘organization:ShowDelegatePolicy’], ‘Effect’: ‘Allow’, ‘Principal’: {‘scp’: [‘srn:dev2::f045159f40c64125a1fe61bd71d1c14c:::iam:user/e3a6e3f99c1040639e9a3c8f8b7427df’]}, ‘Resource’: [’*’], ‘Sid’: ‘statement1’}], ‘Version’: ‘2024-07-01’} |
| modified_at | Modified At | 2025-01-01T00:00:00.000Z |
| modified_by | Modified By | c23fb561c689455993874fa5d5ed4a2f |
| organization_id | Organization ID | o-x9y8z7w6v5u4t3s2r1q0p9o8n7m6l5 |
3 - 1.0
scpcli organization delegation policy create
[--organization_id <value>]
[--statement <value>]
[--version <value>]
Description
create a delegation policy
State ACTIVE (DEPRECATED)
Deprecated versions with Not Before dates that have arrived or expired are no longer supported. We recommend using the latest version.
| Version | Not Before |
|---|---|
| 1.0 | 20251231 |
Parameters
| Name | Type | Description | Example |
|---|---|---|---|
| organization_id optional | string | Organization ID | o-x9y8z7w6v5u4t3s2r1q0p9o8n7m6l5 |
| statement optional | array | Policy Syntax | '{"Action": ["s3:PutObject", "s3:GetObject"], "Condition": "", "Effect": "Allow", "NotAction": [""], "Principal": "", "Resource": ["*"], "Sid": "statement1"}' |
| version optional | string | Policy Version | - |
Responses
| Name | Description | Example |
|---|---|---|
| created_at | Created At | 2025-01-01T00:00:00.000Z |
| created_by | Created By | c23fb561c689455993874fa5d5ed4a2f |
| document | Delegation Policy Document | {‘Statement’: [{‘Action’: [‘organization:CreateServiceControlPolicy’, ‘organization:DeleteServiceControlPolicies’, ‘organization:SetServiceControlPolicy’, ‘organization:ShowServiceControlPolicy’, ‘organization:ListServiceControlPolicies’, ‘organization:ShowAccount’, ‘organization:ListAccounts’, ‘organization:ListOrganizationUnits’, ‘organization:ListOrganizationInvitations’, ‘organization:ListParents’, ‘organization:ListPoliciesForTarget’, ‘organization:ListTargetsForPolicy’, ‘organization:AttachPolicyBindings’, ‘organization:RemovePolicyBindings’, ‘organization:ShowDelegatePolicy’], ‘Effect’: ‘Allow’, ‘Principal’: {‘scp’: [‘srn:dev2::f045159f40c64125a1fe61bd71d1c14c:::iam:user/e3a6e3f99c1040639e9a3c8f8b7427df’]}, ‘Resource’: [’*’], ‘Sid’: ‘statement1’}], ‘Version’: ‘2024-07-01’} |
| modified_at | Modified At | 2025-01-01T00:00:00.000Z |
| modified_by | Modified By | c23fb561c689455993874fa5d5ed4a2f |
| organization_id | Organization ID | o-x9y8z7w6v5u4t3s2r1q0p9o8n7m6l5 |