Class PolicyExcludeMap


  • public final class PolicyExcludeMap
    extends java.lang.Object
    • Method Detail

      • accounts

        public java.util.List<java.lang.String> accounts()
        Returns:
        A list of AWS Organization member Accounts that you want to include for this AWS FMS Policy.
      • orgunits

        public java.util.List<java.lang.String> orgunits()
        Returns:
        A list of IDs of the AWS Organizational Units that you want to include for this AWS FMS Policy. Specifying an OU is the equivalent of specifying all accounts in the OU and in any of its child OUs, including any child OUs and accounts that are added at a later time. You can specify inclusions or exclusions, but not both. If you specify an `include_map`, AWS Firewall Manager applies the policy to all accounts specified by the `include_map`, and does not evaluate any `exclude_map` specifications. If you do not specify an `include_map`, then Firewall Manager applies the policy to all accounts except for those specified by the `exclude_map`.