aws-samples
diff --git a/‎resource_control_policy/root.json‎
Lines changed: 23 additions & 0 deletions b/‎resource_control_policy/root.json‎
Lines changed: 23 additions & 0 deletions
diff --git a/‎policies/allow_services.json‎ ‎…rvice_control_policy/allow_services.json‎policies/allow_services.json renamed to service_control_policy/allow_services.json b/‎policies/allow_services.json‎ ‎…rvice_control_policy/allow_services.json‎policies/allow_services.json renamed to service_control_policy/allow_services.json
diff --git a/‎policies/root.json‎ ‎service_control_policy/root.json‎policies/root.json renamed to service_control_policy/root.json b/‎policies/root.json‎ ‎service_control_policy/root.json‎policies/root.json renamed to service_control_policy/root.json
diff --git a/‎policies/sandbox.json‎ ‎service_control_policy/sandbox.json‎policies/sandbox.json renamed to service_control_policy/sandbox.json b/‎policies/sandbox.json‎ ‎service_control_policy/sandbox.json‎policies/sandbox.json renamed to service_control_policy/sandbox.json
diff --git a/‎policies/ssm.json‎ ‎service_control_policy/ssm.json‎policies/ssm.json renamed to service_control_policy/ssm.json b/‎policies/ssm.json‎ ‎service_control_policy/ssm.json‎policies/ssm.json renamed to service_control_policy/ssm.json
@@ -0,0 +1,23 @@
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Sid": "EnforceSecureTransport",
+            "Effect": "Deny",
+            "Principal": "*",
+            "Action": [
+                "sts:*",
+                "s3:*",
+                "sqs:*",
+                "secretsmanager:*",
+                "kms:*"
+            ],
+            "Resource": "*",
+            "Condition": {
+                "BoolIfExists": {
+                    "aws:SecureTransport": "false"
+                }
+            }
+        }
+    ]
+}