Skip to content

AWS Control Catalog

Floci emulates the AWS Control Catalog REST JSON surface used by governance workflows.

Supported Actions

Action Description
GetControl Returns catalog metadata for a supported control (POST /get-control)
ListControls Lists global controls with filtering and pagination (POST /list-controls)

GetControl validates the control ARN and returns ResourceNotFoundException for a well-formed control ARN that is not in the local catalog. The local catalog includes the preventive RCP controls and legacy Control Tower controls required by Cloud Launchpad Enterprise governance recovery.

The implementation distinguishes service control policies, resource control policies, and AWS Config rule controls because callers use Implementation.Type to choose valid recovery operations. In particular, AWS Control Tower does not support ResetEnabledControl for controls implemented with SCPs.

Configuration

Variable Default Description
FLOCI_SERVICES_CONTROLCATALOG_ENABLED true Enable or disable Control Catalog

See the AWS Control Catalog API Reference.