---
type: resource-type
title: OrganizationsPolicy
description: aws resource type AWS::Organizations::Policy
name: OrganizationsPolicy
lexicon: aws
resource_type: AWS::Organizations::Policy
---
`AWS::Organizations::Policy`, a resource type of the aws lexicon.

## Properties

- `Content` (`Record<string, unknown>`, required): The Policy text content. For AWS CloudFormation templates formatted in YAML, you can provide the policy in JSON or YAML format. AWS CloudFormation always converts a YAML policy to JSON format before submitting it.
- `Name` (`string`, required): Name of the Policy
- `Type` (`"AISERVICES_OPT_OUT_POLICY" | "BACKUP_POLICY" | "BEDROCK_POLICY" | "CHATBOT_POLICY" | "DECLARATIVE_POLICY_EC2" | "INSPECTOR_POLICY" | "NETWORK_SECURITY_DIRECTOR_POLICY" | "RESOURCE_CONTROL_POLICY" | "S3_POLICY" | "SECURITYHUB_POLICY" | "SERVICE_CONTROL_POLICY" | "TAG_POLICY" | "UPGRADE_ROLLOUT_POLICY"`, required): The type of policy to create. You can specify one of the following values: AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, BEDROCK_POLICY, CHATBOT_POLICY, DECLARATIVE_POLICY_EC2, INSPECTOR_POLICY, NETWORK_SECURITY_DIRECTOR_POLICY, RESOURCE_CONTROL_POLICY, S3_POLICY, SECURITYHUB_POLICY, SERVICE_CONTROL_POLICY, TAG_POLICY, UPGRADE_ROLLOUT_POLICY
- `Arn` (`string`, optional): ARN of the Policy
- `AwsManaged` (`boolean`, optional): A boolean value that indicates whether the specified policy is an AWS managed policy. If true, then you can attach the policy to roots, OUs, or accounts, but you cannot edit it.
- `Description` (`string`, optional): Human readable description of the policy
- `Id` (`string`, optional): Id of the Policy
- `Tags` (`OrganizationsPolicy_Tag[]`, optional): A list of tags that you want to attach to the newly created policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to null.
- `TargetIds` (`string[]`, optional): List of unique identifiers (IDs) of the root, OU, or account that you want to attach the policy to

## Attributes

- `Arn`
- `AwsManaged`
- `Id`

## Governed by

- [WAW056](/rules/WAW056.md): SCP guardrail has no Deny statement — it constrains nothing
- [WAW057](/rules/WAW057.md): SCP guardrail is attached to no targets — it enforces nothing