Post enable control — controltower

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1428161141.0 KB

This API call activates a control. It starts an asynchronous operation that creates Amazon Web Services resources on the specified organizational unit and the accounts it contains. The resources created will vary according to the control that you specify. For usage examples, see the <a href="https://docs.aws.amazon.com/controltower/latest/controlreference/control-api-examples-short.html"> Controls Reference Guide </a>.

post/enable-control

Request body

controlIdentifierstring required

The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the Region deny control. For information on how to find the <code>controlIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.

targetIdentifierstring required

The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.

tagsobject

Tags to be applied to the <code>EnabledControl</code> resource.

Response

Success

operationIdentifierstring required

The ID of the asynchronous operation, which is used to track status. The operation is available for 90 days.

arnstring

The ARN of the <code>EnabledControl</code> resource.