# AWSSamples::IAMPrincipalBoundary::Hook ## Activation To activate a hook in your account, use the following JSON as the `Configuration` request parameter for [`SetTypeConfiguration`](https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html) API request. ### Configuration

{
    "CloudFormationConfiguration": {
        "HookConfiguration": {
            "TargetStacks":  "ALL" | "NONE",
            "FailureMode": "FAIL" | "WARN" ,
            "Properties" : {
                "iamPrincipalBoundaryArn" : String,
                "excludedPrincipalSuffixes" : String
            }
        }
    }
}

## Properties #### iamPrincipalBoundaryArn The ARN that must be attached as an IAM Principal _Required_: No _Type_: String #### excludedPrincipalSuffixes A comma separated list of principal names that should be excluded from the boundary. Each name provided will be matched using starts-with logic. _Required_: No _Type_: String --- ## Targets * `AWS::IAM::Role` * `AWS::IAM::User` ---

Please note that the enum values for TargetStacks and FailureMode might go out of date, please refer to their official documentation page for up-to-date values.