organization-tasks.yml

Parameters:
  <<: !Include "./organization-parameters.yml"

AnnotateOrganization:
  Type: annotate-organization
  DefaultOrganizationAccessRoleName: OrganizationAccountAccessRole
  ExcludeAccounts: !Ref excludedAccounts
  AccountMapping:
    SecurityAccount: !Ref securityAccountId
    LogArchiveAccount: !Ref logArchiveAccountId

TypeRegistrations:
  Type: include
  MaxConcurrentTasks: 10
  Path: src/000-type-registration/organization-tasks.yml

CloudTrail:
  Type: include
  Skip: true
  Path: src/100-cloudtrail/organization-tasks.yml

AwsConfig:
  Type: include
  Path: src/200-aws-config/organization-tasks.yml

SecurityHub:
  DependsOn: [TypeRegistrations, AwsConfig]
  Type: include
  Path: src/300-security-hub/organization-tasks.yml

GuardDuty:
  DependsOn: [SecurityHub]
  Type: include
  Path: src/400-guardduty/organization-tasks.yml

SecureDefaults:
  DependsOn: [TypeRegistrations]
  Type: include
  Path: src/500-secure-defaults/organization-tasks.yml