The CloudFormation resources deployed by this project allow for automatic on-boarding/off-boarding of AWS accounts within your Lacework tenant. As new AWS accounts are added/updated/deleted within your AWS organization, the appropriate roles and permissions will be provisioned, and Lacework will be notified of the event.

This code is designed for customers using AWS Organizations without Control Tower - for Control Tower integrations, please follow the instructions here.

The master CloudFormation template sits in the following location:

https://lacework-alliances.s3.us-west-2.amazonaws.com/lacework-organization-cfn/templates/lacework-aws-cfg-manage.template.yml

Or you can simply click the button below to open the template in the AWS console.