Na}{

File Content: `create-policy.rst`

**To create an SCP**

The following example shows how to create a service control policy (SCP) that is named AllowAllS3Actions. In this example, we pass the new content as a reference to a file that has the new text.

Command::

  aws organizations create-policy --type SERVICE_CONTROL_POLICY --description "Enables admins of attached accounts to delegate all S3 permissions" --name AllowAllS3Actions --content file://policy-content.json

The file ``policy-content.json`` is a JSON document in the current folder that contains the following text::
  
  {
    "Version": "2012-10-17",
    "Statement": {
      "Effect": "Allow",
      "Action": "s3:*"
    }
  }

The output includes a Policy structure that contains details about the new policy.

Output::

  {
    "Policy": {
      "Content": "{\"Version\":\"2012-10-17\",\"Statement\":{\"Effect\":\"Allow\",\"Action\":\"s3:*\"}}",
      "PolicySummary": {
        "Arn": "arn:aws:organizations::o-exampleorgid:policy/service_control_policy/p-examplepolicyid111",
        "Description": "Enables admins of attached accounts to delegate all S3 permissions",
        "Name": "AllowAllS3Actions",
        "Type":"SERVICE_CONTROL_POLICY"
      }
    }
  }
  
For more information about creating and using policies in your organization, see `Managing Organization Policies`_ in the *AWS Organizations User Guide*.

.. _`Managing Organization Policies`: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies.html

Name	Size	Permission
accept-handshake.rst	1487 bytes	0755
attach-policy.rst	490 bytes	0755
cancel-handshake.rst	1745 bytes	0755
create-account.rst	1432 bytes	0755
create-organization.rst	2100 bytes	0755
create-organizational-unit.rst	555 bytes	0755
create-policy.rst	1481 bytes	0755
decline-handshake.rst	1419 bytes	0755
delete-organization.rst	346 bytes	0755
delete-organizational-unit.rst	276 bytes	0755
delete-policy.rst	254 bytes	0755
describe-account.rst	494 bytes	0755
describe-create-account-status.rst	838 bytes	0755
describe-handshake.rst	1186 bytes	0755
describe-organization.rst	689 bytes	0755
describe-organizational-unit.rst	478 bytes	0755
describe-policy.rst	774 bytes	0755
detach-policy.rst	223 bytes	0755
disable-policy-type.rst	593 bytes	0755
enable-all-features.rst	1260 bytes	0755
enable-policy-type.rst	667 bytes	0755
invite-account-to-organization.rst	1471 bytes	0755
leave-organization.rst	166 bytes	0755
list-accounts-for-parent.rst	689 bytes	0755
list-accounts.rst	1342 bytes	0755
list-children.rst	565 bytes	0755
list-handshakes-for-account.rst	1378 bytes	0755
list-handshakes-for-organization.rst	2946 bytes	0755
list-organizational-units-for-parent.rst	616 bytes	0755
list-parents.rst	363 bytes	0755
list-policies-for-target.rst	1371 bytes	0755
list-policies.rst	1371 bytes	0755
list-roots.rst	506 bytes	0755
list-targets-for-policy.rst	950 bytes	0755
move-account.rst	300 bytes	0755
remove-account-from-organization.rst	252 bytes	0755
update-organizational-unit.rst	483 bytes	0755
update-policy.rst	2127 bytes	0755

Name

Size

Permission

Action

accept-handshake.rst

1487 bytes

0755