enterprise-multi-account-identity-permissions.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  en: Centralized management of enterprise multi-account identity permissions.
  zh-cn: 企业多账号身份权限集中管理。
Parameters:
  FolderName1:
    Type: String
    Label:
      zh-cn: Core 资源目录名称
      en: Resource directory folder name
    AssociationProperty: AutoCompleteInput
    AssociationPropertyMetadata:
      Length: 5
      Prefix: core-
      CharacterClasses:
        - Class: lowercase
  FolderName2:
    Type: String
    Label:
      zh-cn: Application 资源目录名称
      en: Resource directory folder name
    AssociationProperty: AutoCompleteInput
    AssociationPropertyMetadata:
      Length: 5
      Prefix: application-
      CharacterClasses:
        - Class: lowercase
  AccountDisplayName:
    Type: String
    Label:
      zh-cn: Core文件夹下的账号名称
      en: The account name under the Core folder
    AssociationProperty: AutoCompleteInput
    AssociationPropertyMetadata:
      Length: 5
      Prefix: sandbox-account-
      CharacterClasses:
        - Class: lowercase
Resources:
  RDFolder1:
    Type: ALIYUN::ResourceManager::Folder
    Properties:
      FolderName:
        Ref: FolderName1
  RDFolder2:
    Type: ALIYUN::ResourceManager::Folder
    Properties:
      FolderName:
        Ref: FolderName2
  RDAccount1:
    Type: ALIYUN::ResourceManager::Account
    Properties:
      DeleteAccount: true
      DisplayName:
        Ref: AccountDisplayName
      FolderId:
        Fn::GetAtt:
          - RDFolder1
          - FolderId
Metadata:
  'ALIYUN::ROS::Interface':
    ParameterGroups:
      - Parameters:
          - FolderName1
          - FolderName2
          - AccountDisplayName
    TemplateTags:
      - 'acs:technical-solution:account:企业多账号身份权限集中管理-tech_solu_67'