Aws/controltower

@swamp/aws/controltowerv2026.10.25.1· AGPL-3.0-or-later· 1d agoBEHAVIORS

01README

AWS CONTROLTOWER infrastructure models

02Release Notes

Updated: landing_zone

03Behaviors3

@swamp/aws/controltower/enabled-baselinev2026.10.23.1enabled_baseline.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
BaselineIdentifier	string	yes
BaselineVersion	string	yes
TargetIdentifier	string	yes
Parameters?	array	no
Tags?	array	no

fn create()

Create a ControlTower EnabledBaseline

fn get(identifier: string)

Get a ControlTower EnabledBaseline

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the ControlTower EnabledBaseline

fn update()

Update a ControlTower EnabledBaseline

fn delete(identifier: string)

Delete a ControlTower EnabledBaseline

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the ControlTower EnabledBaseline

fn sync()

Sync ControlTower EnabledBaseline state from AWS

fn list(maxPages?: number, resourceModel?: string)

List ControlTower EnabledBaseline resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— ControlTower EnabledBaseline resource state

@swamp/aws/controltower/enabled-controlv2026.10.23.1enabled_control.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
ControlIdentifier	string	yes	Arn of the control.
TargetIdentifier	string	yes	Arn for Organizational unit to which the control needs to be applied
Parameters?	array	no	Parameters to configure the enabled control behavior.
Tags?	array	no	A set of tags to assign to the enabled control.

fn create()

Create a ControlTower EnabledControl

fn get(identifier: string)

Get a ControlTower EnabledControl

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the ControlTower EnabledControl

fn update()

Update a ControlTower EnabledControl

fn delete(identifier: string)

Delete a ControlTower EnabledControl

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the ControlTower EnabledControl

fn sync()

Sync ControlTower EnabledControl state from AWS

fn list(maxPages?: number, resourceModel?: string)

List ControlTower EnabledControl resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— ControlTower EnabledControl resource state

@swamp/aws/controltower/landing-zonev2026.10.25.1landing_zone.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
Manifest	unknown	yes
Version	string	yes
RemediationTypes?	array	no
Tags?	array	no

fn create()

Create a ControlTower LandingZone

fn get(identifier: string)

Get a ControlTower LandingZone

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the ControlTower LandingZone

fn update()

Update a ControlTower LandingZone

fn delete(identifier: string)

Delete a ControlTower LandingZone

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the ControlTower LandingZone

fn sync()

Sync ControlTower LandingZone state from AWS

fn list(maxPages?: number, resourceModel?: string)

List ControlTower LandingZone resources

Argument	Type	Required	Description
maxPages?	number	no	Maximum number of pages to fetch (default: 10)
resourceModel?	string	no	JSON resource model for parent-scoped listing (e.g. parent identifier)

Resources

state(infinite)— ControlTower LandingZone resource state

04Previous Versions19

2026.10.24.1AGPL-3.0-or-laterOct 24, 2026

2026.10.23.1AGPL-3.0-or-later(was none)Oct 24, 2026

Updated: enabled_baseline, enabled_control, landing_zone

2026.10.13.1Oct 13, 2026

Updated: enabled_baseline, enabled_control, landing_zone

2026.10.08.1Oct 8, 2026

2026.10.06.1Oct 6, 2026

2026.10.04.1Oct 4, 2026

2026.10.03.1Oct 3, 2026

2026.10.02.1Oct 2, 2026

2026.10.01.1Oct 1, 2026

2026.09.30.1Sep 30, 2026

2026.09.29.1Sep 29, 2026

2026.09.28.1Sep 28, 2026

2026.09.27.1Sep 27, 2026

2026.09.26.1Sep 26, 2026

2026.09.25.1Sep 25, 2026

2026.09.24.1Sep 24, 2026

2026.09.23.1Sep 23, 2026

2026.09.21.1Sep 21, 2026

2026.09.20.1Sep 20, 2026

05Stats

100 / 100

Downloads

116

Archive size

619.9 KB

Verified by Swamp

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit2/2earned
Docs keep secrets in a vault1/1earned
Has description1/1earned
Platform support declared (or universal)2/2earned
License2/2earned
Verified public repository2/2earned

Repository

https://github.com/swamp-club/swamp-extensions

06Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64 windows · x86_64

07Labels

#aws #controltower #cloud #infrastructure