---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Set up suspension of an AWS account using service control policy

# Set up suspension of an AWS account using service control policy {#ariaid-title1}

* Release version: Yokohama
* 
* Updated August 11, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Set up a restriction on cloud account creation. For example, when the account owner isn't in the organization or if there are budget constraints. Using Cloud Account Management, admin adds the account number to the AWS organization's service control policy, promoting existing accounts to continue to function normally while blocking new account creation.

## Before you begin

Verify you have saved the CloudFormation template. For more details, see [Configuring Service Control Policy in AWS](https://servicenow-prod.fluidtopics.net/rCYLsPWMOQZXMgamx9dQcQ "The AWS admin configures a Service Control Policy (SCP) and shares its ID with the ServiceNow AI Platform admin for Cloud Account Management setup. Cloud Account Management enforces the SCP via API calls to block resource creation in the account.").

Role required: AWS admin

## Procedure

1. Log in to the AWS Management console.
2. Enter <kbd class="ph userinput">CloudFormation</kbd> in the search bar and then select it.
3. On the CloudFormation console, select Create Stack.
4. On the Create Stack page, select Choose an existing templateUpload a template fileChoose file to choose a template file from your local computer.
5. Select Next to continue and to validate the template.
6. On the Specify stack details page, enter a <kbd class="ph userinput">CloudFormation stack name</kbd> in the Stack name field.  
   The stack name is an identifier that helps you find a particular stack from a list of stacks. A stack name can contain only alphanumeric characters (case-sensitive) and hyphens. It must start with an alphabetic
   character and can't be longer than 128 characters.
7. Select Next and then select Submit.
{#configure-suspension-policy__steps_rvv_sq2_lcc}

## Result

Once the CloudFormation Template (CFT) creates the policy, an Amazon Resource Name (ARN) is assigned. An ARN typically follows the format:

    arn:aws:organizations::1234567890:policy/o-99t3h155el/service_control_policy/p-328wg3yb

To view the ARN, go to AWS OrganizationPoliciesService control policiesCAM_SCP_SupsendAccount_policy.

The key element that you must provide to the ServiceNow AI Platform admin is the policy element, which in this example is: p-328wg3yb.

## What to do next

[Provisioning modes for Cloud Account Management in Cloud Workspace](https://servicenow-prod.fluidtopics.net/qAIHT~goA5vUiAt0NIpDmg "Cloud Account Management in Cloud Workspace offers flexible provision modes such as Terraform and cloud native interfaces while centralizing management, enhancing security, optimizing costs, and improving governance.")

*[\>]: and then