regions:
- global
- us-east-1
- us-east-2
- us-west-1
- us-west-2
- ap-east-1
- ap-south-1
- ap-northeast-1
- ap-northeast-2
- ap-southeast-1
- ap-southeast-2
- ca-central-1
- eu-central-1
- eu-west-1
- eu-west-2
- eu-west-3
- eu-north-1
- sa-east-1

account-blacklist:
- "000000000000"

accounts:
  "111111111111":
    presets:
    - "awssso"
    - "common"

presets:
  awssso:
    filters:
      IAMRole:
      - type: glob
        value: "AWSReservedSSO*"
      IAMRolePolicyAttachment:
      - type: glob
        value: "AWSReservedSSO*"
      IAMSAMLProvider:
      - type: contains
        value: "AWSSSO_"

  common:
    filters:
      IAMRole:
      - "AWSServiceRoleForOrganizations"

resource-types:
  excludes:
  - Route53HostedZone
  - Route53ResourceRecordSet