arpio-config:recovery-principal

Indicates the organization or organizational unit ARN that a RAM resource share principal should point to in the recovery environment

arpio-config:recovery-principal:<org-or-ou-id> = <recovery-org-or-ou-arn>

<org-or-ou-id>

The short ID of the AWS organization or organizational unit (OU) that is included in a primary environment principal associated with the tagged RAM resource share.  The short ID is the last part of the orgnaization or organizational unit's full ARN, like o-123example for an organization, and ou-1234-5example for an organizational unit.

<recovery-org-or-ou-arn>

The full ARN of an organization or organizational unit to substitute for the matching principal in the recovery environment when the RAM resource share is recovered.

Supported Resources

• RAM Resource Share

Description

By default, Arpio does not translate organization and organization unit (OU) principal IDs associated with RAM resource shares because it does not know about the recovery-side organization layout.  Organization and organizational unit principal IDs are normally left untranslated during recovery.  This behavior supports recovery scenarios where resources are shared with external organizations, such as vendors or partners, because the recovered resources can be shared with them, too.

This config tag allows the default behavior to be overridden, so that the principal whose short ID matches the last component in the tag's name will be translated to the tag's value when the RAM resource share is recovered.

Examples