apiVersion: organizations.aws.m.upbound.io/v1beta1
kind: Organization
metadata:
  name: my-organization
  namespace: aws-organization
  labels:
    managed-by: crossplane
spec:
  forProvider:
    awsServiceAccessPrincipals:
      - cloudtrail.amazonaws.com
      - config.amazonaws.com
      - sso.amazonaws.com
      - account.amazonaws.com
      - ram.amazonaws.com
    enabledPolicyTypes:
      - SERVICE_CONTROL_POLICY
      - TAG_POLICY
    featureSet: ALL
  providerConfigRef:
    name: org-config