AWS Organizations - Get all custom SCPs and write to json

get_scps.sh

#!/usr/bin/env bash
# AWS Organizations - Get all custom SCPs and write to json

# shellcheck disable=2016
pols=$(aws organizations list-policies \
  --filter SERVICE_CONTROL_POLICY \
  --query 'Policies[?AwsManaged==`false`].[Id,Name]' \
  --output text)

# shellcheck disable=2162
xargs -n 2 <<< "$pols" | while read pol_id pol_name; do
  out_name="${pol_name// /_}(${pol_id}).json"
  echo "${out_name}"
  aws organizations describe-policy \
    --policy-id ${pol_id} \
    --output json \
    --query 'Policy.[Content]' | jq -r '.[]' | jq \
    > ${out_name}
done