adfconfig.yml.j2

# Copyright Amazon.com Inc. or its affiliates.
# SPDX-License-Identifier: MIT-0

roles:
  cross-account-access: {{ CrossAccountAccessRole }}
  # ^ The role by ADF to assume cross account access

regions:
  deployment-account: {{ DeploymentAccountRegion }}
  # ^ The region you define as your main deployment region
  targets: # A list of regions you wish to bootstrap and also deploy into via pipelines
    {%- for Region in TargetRegions %}
    - {{ Region }}
    {%- endfor %}

config:
  main-notification-endpoint:
    - type: {{ NotificationEndpointType }}  # slack or email
      target: {{ NotificationEndpoint }}
      # ^ Email/Slack channel who receives notifications for the main bootstrapping pipeline
  protected:
    {%- for OU in ProtectedOUs %}
    - {{ OU }}
    {%- endfor %}
  moves:
    - name: to-root
      action: safe  # Can be safe or remove-base
  scp:
    keep-default-scp: enabled
    # ^ Determines if the default AWSFullAccess SCP stays attached to all OU's
  scm:
    auto-create-repositories: enabled
    default-scm-branch: main
    # Optional:
    # default-scm-codecommit-account-id: "123456789012"
  deployment-maps:
    allow-empty-target: disabled
    # ^ Needs to be set to "enabled" to activate. Defaults to "disabled" when
    # not set.

  bootstrap-pipeline:
    # Configure whether or not to run tests in the bootstrap pipeline.
    # Needs to be set to "enabled" to activate. Defaults to "enabled" when not set.
    run-tests: enabled

# Optional config for multi-organization deployments of ADF:
#   org:
#    # Optional: Use this variable to define the AWS Organization in case of
#    # staged multi-organization ADF deployments
#    stage: dev