Help Center> Resource Governance Center> Getting Started> Using Governance Policies to Manage Your Landing Zone
Updated on 2024-05-24 GMT+08:00
View PDF

Using Governance Policies to Manage Your Landing Zone

RGC provides multiple types of governance policies. Mandatory governance policies are automatically applied to OUs created in RGC. You can use the management account to enable strongly recommended or elective governance policies as needed.

You need to register the OUs created in an organization before applying governance policies to them.

Preventive governance policies apply to all member accounts in the OUs, regardless of their enrollment status. Detective governance policies apply only to enrolled accounts.

Constraints

  • You can only manually enable or disable strongly recommended and elective governance policies.
  • Governance policies cannot be attached to the root OU or core OU.

Enabling a Governance Policy

  1. Log in to Huawei Cloud using the management account, and navigate to the RGC console.
  2. Choose Governance Policy Library > All Policies. In the policy list, locate the governance policy you want to enable.
  3. Click Enable Policy in the Operation column.

    Figure 1 Enabling governance policies

  4. Select an OU for which you want to enable this policy.

    Figure 2 Selecting an OU

  5. Click Enable Governance Policies in the lower right corner. This may take several minutes.

Viewing How a Governance Policy Is Applied

  1. Log in to Huawei Cloud using the management account, and navigate to the RGC console.
  2. On the Dashboard page, view information about OUs and Accounts, Enabled Governance Policies, Non-Compliant Resources, Registered OUs, and Enrolled Accounts in your landing zone.
  3. Under Non-Compliant Resources, click an account name to view the details about non-compliant resources.

    You can use the management account to handle the non-compliant resources.

    Figure 3 Non-compliant resources

Disabling a Governance Policy

  1. Log in to Huawei Cloud using the management account, and navigate to the RGC console.
  2. Choose Governance Policy Library > All Policies. In the policy list, locate the governance policy you want to disable.
  3. Click the policy name. The policy details are displayed.
  4. On the Enabled OUs page, choose the OU from which you want to disable this policy.

    Figure 4 Disabling a governance policy

  5. Click Disable Policy in the Operation column.
  6. Click OK. This may take several minutes.

    Figure 5 Disabling a governance policy