aws-sdk-cloudformation 1.78.0 → 1.79.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5b1022215a3c2522513a868193dc7afc51501ccdd14dc144f0d8a2f7d82e1cbf
-  data.tar.gz: ffa1a738b1d4e13287d51b2de7cb58f17ded8769a5dde17ba2124aa42cc5af5c
+  metadata.gz: e6a9516008c194436b3a3c69bd3c2e7cedb38bedeb9105e331d90e4aa5ec4aff
+  data.tar.gz: 867dced10b8d563cad7b74a9aff1b805309370a526c6916b808b76f6e644438c
 SHA512:
-  metadata.gz: 60de0848ab1d504d17cb1d2a9e27f606b2cd0c6325de8c39ea514377844f8c3604946ba7d6783c4df2fd7682d7218708ec42ebcdb5dc786fae7253c65f8a986e
-  data.tar.gz: d22f8b009be878f99bccfbf23ce6b509e7002460f537bce3c366cea9dd1fa84490e27c2ba7d8c6873c1a26b43af8f1defa78f1863a97097f86011ab3c3d8155b
+  metadata.gz: 94eb86b7a7fe0b632487ca2bd4c8607944979ce484fbf55db55059745e292e307ec201e6346b062a6f885a5de8c7238c87e9d12f57f4239145563cfe01907619
+  data.tar.gz: 7c73a6e34b33b9e64e34329ca1f527b8fd5925234605e524760214a09370794a389a91288c72231654cd80533009be72233fe876805b887a843fb4de87c5d0cb

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.79.0 (2023-06-05)
+------------------
+
+* Feature - AWS CloudFormation StackSets provides customers with three new APIs to activate, deactivate, and describe AWS Organizations trusted access which is needed to get started with service-managed StackSets.
+
 1.78.0 (2023-05-31)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.78.0
+1.79.0

data/lib/aws-sdk-cloudformation/client.rb

@@ -373,21 +373,36 @@ module Aws::CloudFormation
 
     # @!group API Operations
 
+    # Activate trusted access with Organizations. With trusted access
+    # between StackSets and Organizations activated, the management account
+    # has permissions to create and manage StackSets for your organization.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudformation-2010-05-15/ActivateOrganizationsAccess AWS API Documentation
+    #
+    # @overload activate_organizations_access(params = {})
+    # @param [Hash] params ({})
+    def activate_organizations_access(params = {}, options = {})
+      req = build_request(:activate_organizations_access, params)
+      req.send_request(options)
+    end
+
     # Activates a public third-party extension, making it available for use
     # in stack templates. For more information, see [Using public
     # extensions][1] in the *CloudFormation User Guide*.
     #
     # Once you have activated a public third-party extension in your account
-    # and region, use
-    # [SetTypeConfiguration](AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html)
-    # to specify configuration properties for the extension. For more
-    # information, see [Configuring extensions at the account level][2] in
-    # the *CloudFormation User Guide*.
+    # and Region, use [SetTypeConfiguration][2] to specify configuration
+    # properties for the extension. For more information, see [Configuring
+    # extensions at the account level][3] in the *CloudFormation User
+    # Guide*.
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-public.html
-    # [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-register.html#registry-set-configuration
+    # [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html
+    # [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-register.html#registry-set-configuration
     #
     # @option params [String] :type
     #   The extension type.
@@ -415,18 +430,18 @@ module Aws::CloudFormation
     #
     # @option params [String] :type_name_alias
     #   An alias to assign to the public extension, in this account and
-    #   region. If you specify an alias for the extension, CloudFormation
+    #   Region. If you specify an alias for the extension, CloudFormation
     #   treats the alias as the extension type name within this account and
-    #   region. You must use the alias to refer to the extension in your
+    #   Region. You must use the alias to refer to the extension in your
     #   templates, API calls, and CloudFormation console.
     #
-    #   An extension alias must be unique within a given account and region.
+    #   An extension alias must be unique within a given account and Region.
     #   You can activate the same public resource multiple times in the same
-    #   account and region, using different type name aliases.
+    #   account and Region, using different type name aliases.
     #
     # @option params [Boolean] :auto_update
     #   Whether to automatically update the extension in this account and
-    #   region when a new *minor* version is published by the extension
+    #   Region when a new *minor* version is published by the extension
     #   publisher. Major versions released by the publisher must be manually
     #   updated.
     #
@@ -494,7 +509,7 @@ module Aws::CloudFormation
 
     # Returns configuration data for the specified CloudFormation
     # extensions, from the CloudFormation registry for the account and
-    # region.
+    # Region.
     #
     # For more information, see [Configuring extensions at the account
     # level][1] in the *CloudFormation User Guide*.
@@ -569,6 +584,19 @@ module Aws::CloudFormation
     #  </note>
     #
     # @option params [required, String] :stack_name
+    #   <note markdown="1"> If you don't pass a parameter to `StackName`, the API returns a
+    #   response that describes all resources in the account.
+    #
+    #    The IAM policy below can be added to IAM policies when you want to
+    #   limit resource-level permissions and avoid returning a response when
+    #   no parameter is sent in the request:
+    #
+    #    `\{ "Version": "2012-10-17", "Statement": [\{ "Effect": "Deny",
+    #   "Action": "cloudformation:DescribeStacks", "NotResource":
+    #   "arn:aws:cloudformation:*:*:stack/*/*" \}] \}`
+    #
+    #    </note>
+    #
     #   The name or the unique stack ID that's associated with the stack.
     #
     # @option params [String] :client_request_token
@@ -1772,8 +1800,23 @@ module Aws::CloudFormation
       req.send_request(options)
     end
 
+    # Deactivates trusted access with Organizations. If trusted access is
+    # deactivated, the management account does not have permissions to
+    # create and manage service-managed StackSets for your organization.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudformation-2010-05-15/DeactivateOrganizationsAccess AWS API Documentation
+    #
+    # @overload deactivate_organizations_access(params = {})
+    # @param [Hash] params ({})
+    def deactivate_organizations_access(params = {}, options = {})
+      req = build_request(:deactivate_organizations_access, params)
+      req.send_request(options)
+    end
+
     # Deactivates a public extension that was previously activated in this
-    # account and region.
+    # account and Region.
     #
     # Once deactivated, an extension can't be used in any CloudFormation
     # operation. This includes stack update operations where the stack
@@ -1782,7 +1825,7 @@ module Aws::CloudFormation
     # automatically updated if a new version of the extension is released.
     #
     # @option params [String] :type_name
-    #   The type name of the extension, in this account and region. If you
+    #   The type name of the extension, in this account and Region. If you
     #   specified a type name alias when enabling the extension, use the type
     #   name alias.
     #
@@ -1795,7 +1838,7 @@ module Aws::CloudFormation
     #
     # @option params [String] :arn
     #   The Amazon Resource Name (ARN) for the extension, in this account and
-    #   region.
+    #   Region.
     #
     #   Conditional: You must specify either `Arn`, or `TypeName` and `Type`.
     #
@@ -2379,6 +2422,56 @@ module Aws::CloudFormation
       req.send_request(options)
     end
 
+    # Retrieves information about the account's `OrganizationAccess`
+    # status. This API can be called either by the management account or the
+    # delegated administrator by using the `CallAs` parameter. This API can
+    # also be called without the `CallAs` parameter by the management
+    # account.
+    #
+    # @option params [String] :call_as
+    #   \[Service-managed permissions\] Specifies whether you are acting as an
+    #   account administrator in the organization's management account or as
+    #   a delegated administrator in a member account.
+    #
+    #   By default, `SELF` is specified.
+    #
+    #   * If you are signed in to the management account, specify `SELF`.
+    #
+    #   * If you are signed in to a delegated administrator account, specify
+    #     `DELEGATED_ADMIN`.
+    #
+    #     Your Amazon Web Services account must be registered as a delegated
+    #     administrator in the management account. For more information, see
+    #     [Register a delegated administrator][1] in the *CloudFormation User
+    #     Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-orgs-delegated-admin.html
+    #
+    # @return [Types::DescribeOrganizationsAccessOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeOrganizationsAccessOutput#status #status} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_organizations_access({
+    #     call_as: "SELF", # accepts SELF, DELEGATED_ADMIN
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.status #=> String, one of "ENABLED", "DISABLED", "DISABLED_PERMANENTLY"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudformation-2010-05-15/DescribeOrganizationsAccess AWS API Documentation
+    #
+    # @overload describe_organizations_access(params = {})
+    # @param [Hash] params ({})
+    def describe_organizations_access(params = {}, options = {})
+      req = build_request(:describe_organizations_access, params)
+      req.send_request(options)
+    end
+
     # Returns information about a CloudFormation extension publisher.
     #
     # If you don't supply a `PublisherId`, and you have registered as an
@@ -2435,7 +2528,7 @@ module Aws::CloudFormation
 
     # Returns information about a stack drift detection operation. A stack
     # drift detection operation detects whether a stack's actual
-    # configuration differs, or has *drifted*, from it's expected
+    # configuration differs, or has *drifted*, from its expected
     # configuration, as defined in the stack template and any values
     # specified as template parameters. A stack is considered to have
     # drifted if one or more of its resources have drifted. For more
@@ -2568,11 +2661,11 @@ module Aws::CloudFormation
       req.send_request(options)
     end
 
-    # Returns the stack instance that's associated with the specified stack
-    # set, Amazon Web Services account, and Region.
+    # Returns the stack instance that's associated with the specified
+    # StackSet, Amazon Web Services account, and Amazon Web Services Region.
     #
     # For a list of stack instances that are associated with a specific
-    # stack set, use ListStackInstances.
+    # StackSet, use ListStackInstances.
     #
     # @option params [required, String] :stack_set_name
     #   The name or the unique stack ID of the stack set that you want to get
@@ -2903,7 +2996,7 @@ module Aws::CloudFormation
       req.send_request(options)
     end
 
-    # Returns the description of the specified stack set.
+    # Returns the description of the specified StackSet.
     #
     # @option params [required, String] :stack_set_name
     #   The name or unique ID of the stack set whose description you want.
@@ -2987,7 +3080,7 @@ module Aws::CloudFormation
       req.send_request(options)
     end
 
-    # Returns the description of the specified stack set operation.
+    # Returns the description of the specified StackSet operation.
     #
     # @option params [required, String] :stack_set_name
     #   The name or the unique stack ID of the stack set for the stack
@@ -3082,6 +3175,21 @@ module Aws::CloudFormation
     #  </note>
     #
     # @option params [String] :stack_name
+    #   <note markdown="1"> If you don't pass a parameter to `StackName`, the API returns a
+    #   response that describes all resources in the account. This requires
+    #   `ListStacks` and `DescribeStacks` permissions.
+    #
+    #    The IAM policy below can be added to IAM policies when you want to
+    #   limit resource-level permissions and avoid returning a response when
+    #   no parameter is sent in the request:
+    #
+    #    \\\{ "Version": "2012-10-17", "Statement": \[\\\{ "Effect":
+    #   "Deny", "Action": "cloudformation:DescribeStacks",
+    #   "NotResource": "arn:aws:cloudformation:*:*:stack/*/*" \\}\]
+    #   \\}
+    #
+    #    </note>
+    #
     #   The name or the unique stack ID that's associated with the stack,
     #   which aren't always interchangeable:
     #
@@ -3349,7 +3457,7 @@ module Aws::CloudFormation
     end
 
     # Detects whether a stack's actual configuration differs, or has
-    # *drifted*, from it's expected configuration, as defined in the stack
+    # *drifted*, from its expected configuration, as defined in the stack
     # template and any values specified as template parameters. For each
     # resource in the stack that supports drift detection, CloudFormation
     # compares the actual configuration of the resource with its expected
@@ -3413,13 +3521,13 @@ module Aws::CloudFormation
     end
 
     # Returns information about whether a resource's actual configuration
-    # differs, or has *drifted*, from it's expected configuration, as
-    # defined in the stack template and any values specified as template
-    # parameters. This information includes actual and expected property
-    # values for resources in which CloudFormation detects drift. Only
-    # resource properties explicitly defined in the stack template are
-    # checked for drift. For more information about stack and resource
-    # drift, see [Detecting Unregulated Configuration Changes to Stacks and
+    # differs, or has *drifted*, from its expected configuration, as defined
+    # in the stack template and any values specified as template parameters.
+    # This information includes actual and expected property values for
+    # resources in which CloudFormation detects drift. Only resource
+    # properties explicitly defined in the stack template are checked for
+    # drift. For more information about stack and resource drift, see
+    # [Detecting Unregulated Configuration Changes to Stacks and
     # Resources][1].
     #
     # Use `DetectStackResourceDrift` to detect drift on individual
@@ -3957,11 +4065,6 @@ module Aws::CloudFormation
     # and Region, by specifying the stack ID of the stack you intend to
     # import.
     #
-    # <note markdown="1"> `ImportStacksToStackSet` is only supported by self-managed
-    # permissions.
-    #
-    #  </note>
-    #
     # @option params [required, String] :stack_set_name
     #   The name of the stack set. The name must be unique in the Region where
     #   you create your stack set.
@@ -4860,12 +4963,12 @@ module Aws::CloudFormation
     #   Valid values include:
     #
     #   * `PRIVATE`: Extensions that are visible and usable within this
-    #     account and region. This includes:
+    #     account and Region. This includes:
     #
-    #     * Private extensions you have registered in this account and region.
+    #     * Private extensions you have registered in this account and Region.
     #
     #     * Public extensions that you have activated in this account and
-    #       region.
+    #       Region.
     #
     #   * `PUBLIC`: Extensions that are publicly visible and available to be
     #     activated within any Amazon Web Services account. This includes
@@ -4983,7 +5086,7 @@ module Aws::CloudFormation
     end
 
     # Publishes the specified extension to the CloudFormation registry as a
-    # public extension in this region. Public extensions are available for
+    # public extension in this Region. Public extensions are available for
     # use by all CloudFormation users. For more information about publishing
     # extensions, see [Publishing extensions to make them available for
     # public use][1] in the *CloudFormation CLI User Guide*.
@@ -5218,25 +5321,26 @@ module Aws::CloudFormation
     # *CloudFormation CLI User Guide*.
     #
     # You can have a maximum of 50 resource extension versions registered at
-    # a time. This maximum is per account and per region. Use
-    # [DeregisterType](AWSCloudFormation/latest/APIReference/API_DeregisterType.html)
-    # to deregister specific extension versions if necessary.
+    # a time. This maximum is per account and per Region. Use
+    # [DeregisterType][2] to deregister specific extension versions if
+    # necessary.
     #
     # Once you have initiated a registration request using ` RegisterType `,
     # you can use ` DescribeTypeRegistration ` to monitor the progress of
     # the registration request.
     #
     # Once you have registered a private extension in your account and
-    # region, use
-    # [SetTypeConfiguration](AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html)
-    # to specify configuration properties for the extension. For more
-    # information, see [Configuring extensions at the account level][2] in
-    # the *CloudFormation User Guide*.
+    # Region, use [SetTypeConfiguration][3] to specify configuration
+    # properties for the extension. For more information, see [Configuring
+    # extensions at the account level][4] in the *CloudFormation User
+    # Guide*.
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-types.html
-    # [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-register.html#registry-set-configuration
+    # [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeregisterType.html
+    # [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_SetTypeConfiguration.html
+    # [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-register.html#registry-set-configuration
     #
     # @option params [String] :type
     #   The kind of extension.
@@ -5302,9 +5406,7 @@ module Aws::CloudFormation
     #   must contain a trust relationship with the CloudFormation service
     #   principle (`resources.cloudformation.amazonaws.com`). For more
     #   information about adding trust relationships, see [Modifying a role
-    #   trust
-    #   policy](IAM/latest/UserGuide/roles-managingrole-editing-console.html#roles-managingrole_edit-trust-policy)
-    #   in the *Identity and Access Management User Guide*.
+    #   trust policy][1] in the *Identity and Access Management User Guide*.
     #
     #   If your extension calls Amazon Web Services APIs in any of its
     #   handlers, you must create an <i> <a
@@ -5317,6 +5419,10 @@ module Aws::CloudFormation
     #   handler, thereby supplying your resource type with the appropriate
     #   credentials.
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/roles-managingrole-editing-console.html#roles-managingrole_edit-trust-policy
+    #
     # @option params [String] :client_request_token
     #   A unique identifier that acts as an idempotency key for this
     #   registration request. Specifying a client request token prevents
@@ -5452,32 +5558,32 @@ module Aws::CloudFormation
     end
 
     # Specifies the configuration data for a registered CloudFormation
-    # extension, in the given account and region.
+    # extension, in the given account and Region.
     #
     # To view the current configuration data for an extension, refer to the
-    # `ConfigurationSchema` element of
-    # [DescribeType](AWSCloudFormation/latest/APIReference/API_DescribeType.html).
-    # For more information, see [Configuring extensions at the account
-    # level][1] in the *CloudFormation User Guide*.
+    # `ConfigurationSchema` element of [DescribeType][1]. For more
+    # information, see [Configuring extensions at the account level][2] in
+    # the *CloudFormation User Guide*.
     #
     # It's strongly recommended that you use dynamic references to restrict
     # sensitive configuration definitions, such as third-party credentials.
     # For more details on dynamic references, see [Using dynamic references
-    # to specify template values][2] in the *CloudFormation User Guide*.
+    # to specify template values][3] in the *CloudFormation User Guide*.
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-register.html#registry-set-configuration
-    # [2]: https://docs.aws.amazon.com/
+    # [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeType.html
+    # [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry-register.html#registry-set-configuration
+    # [3]: https://docs.aws.amazon.com/
     #
     # @option params [String] :type_arn
     #   The Amazon Resource Name (ARN) for the extension, in this account and
-    #   region.
+    #   Region.
     #
     #   For public extensions, this will be the ARN assigned when you
-    #   [activate the type][1] in this account and region. For private
+    #   [activate the type][1] in this account and Region. For private
     #   extensions, this will be the ARN assigned when you [register the
-    #   type][2] in this account and region.
+    #   type][2] in this account and Region.
     #
     #   Do not include the extension versions suffix at the end of the ARN.
     #   You can set the configuration for an extension, but not for a specific
@@ -5489,17 +5595,18 @@ module Aws::CloudFormation
     #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_RegisterType.html
     #
     # @option params [required, String] :configuration
-    #   The configuration data for the extension, in this account and region.
+    #   The configuration data for the extension, in this account and Region.
     #
     #   The configuration data must be formatted as JSON, and validate against
     #   the schema returned in the `ConfigurationSchema` response element of
-    #   [API\_DescribeType](AWSCloudFormation/latest/APIReference/API_DescribeType.html).
-    #   For more information, see [Defining account-level configuration data
-    #   for an extension][1] in the *CloudFormation CLI User Guide*.
+    #   [DescribeType][1]. For more information, see [Defining account-level
+    #   configuration data for an extension][2] in the *CloudFormation CLI
+    #   User Guide*.
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-model.html#resource-type-howto-configuration
+    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeType.html
+    #   [2]: https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-model.html#resource-type-howto-configuration
     #
     # @option params [String] :configuration_alias
     #   An alias by which to refer to this extension configuration data.
@@ -5703,27 +5810,28 @@ module Aws::CloudFormation
     # publishing][1] in the *CloudFormation CLI User Guide*.
     #
     # If you don't specify a version, CloudFormation uses the default
-    # version of the extension in your account and region for testing.
+    # version of the extension in your account and Region for testing.
     #
     # To perform testing, CloudFormation assumes the execution role
     # specified when the type was registered. For more information, see
-    # [RegisterType](AWSCloudFormation/latest/APIReference/API_RegisterType.html).
+    # [RegisterType][2].
     #
     # Once you've initiated testing on an extension using `TestType`, you
-    # can pass the returned `TypeVersionArn` into [DescribeType][2] to
+    # can pass the returned `TypeVersionArn` into [DescribeType][3] to
     # monitor the current test status and test status description for the
     # extension.
     #
     # An extension must have a test status of `PASSED` before it can be
     # published. For more information, see [Publishing extensions to make
-    # them available for public use][3] in the *CloudFormation CLI User
+    # them available for public use][4] in the *CloudFormation CLI User
     # Guide*.
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/publish-extension.html#publish-extension-testing
-    # [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeType.html
-    # [3]: https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-publish.html
+    # [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_RegisterType.html
+    # [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DescribeType.html
+    # [4]: https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-publish.html
     #
     # @option params [String] :arn
     #   The Amazon Resource Name (ARN) of the extension.
@@ -5747,7 +5855,7 @@ module Aws::CloudFormation
     #   and `Type`.
     #
     #   If you don't specify a version, CloudFormation uses the default
-    #   version of the extension in this account and region for testing.
+    #   version of the extension in this account and Region for testing.
     #
     # @option params [String] :log_delivery_bucket
     #   The S3 bucket to which CloudFormation delivers the contract test
@@ -6828,7 +6936,7 @@ module Aws::CloudFormation
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-cloudformation'
-      context[:gem_version] = '1.78.0'
+      context[:gem_version] = '1.79.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cloudformation/client_api.rb

@@ -23,6 +23,8 @@ module Aws::CloudFormation
     AccountLimitList = Shapes::ListShape.new(name: 'AccountLimitList')
     AccountList = Shapes::ListShape.new(name: 'AccountList')
     AccountsUrl = Shapes::StringShape.new(name: 'AccountsUrl')
+    ActivateOrganizationsAccessInput = Shapes::StructureShape.new(name: 'ActivateOrganizationsAccessInput')
+    ActivateOrganizationsAccessOutput = Shapes::StructureShape.new(name: 'ActivateOrganizationsAccessOutput')
     ActivateTypeInput = Shapes::StructureShape.new(name: 'ActivateTypeInput')
     ActivateTypeOutput = Shapes::StructureShape.new(name: 'ActivateTypeOutput')
     AllowedValue = Shapes::StringShape.new(name: 'AllowedValue')
@@ -81,6 +83,8 @@ module Aws::CloudFormation
     CreateStackSetOutput = Shapes::StructureShape.new(name: 'CreateStackSetOutput')
     CreatedButModifiedException = Shapes::StructureShape.new(name: 'CreatedButModifiedException')
     CreationTime = Shapes::TimestampShape.new(name: 'CreationTime')
+    DeactivateOrganizationsAccessInput = Shapes::StructureShape.new(name: 'DeactivateOrganizationsAccessInput')
+    DeactivateOrganizationsAccessOutput = Shapes::StructureShape.new(name: 'DeactivateOrganizationsAccessOutput')
     DeactivateTypeInput = Shapes::StructureShape.new(name: 'DeactivateTypeInput')
     DeactivateTypeOutput = Shapes::StructureShape.new(name: 'DeactivateTypeOutput')
     DeleteChangeSetInput = Shapes::StructureShape.new(name: 'DeleteChangeSetInput')
@@ -101,6 +105,8 @@ module Aws::CloudFormation
     DescribeChangeSetHooksOutput = Shapes::StructureShape.new(name: 'DescribeChangeSetHooksOutput')
     DescribeChangeSetInput = Shapes::StructureShape.new(name: 'DescribeChangeSetInput')
     DescribeChangeSetOutput = Shapes::StructureShape.new(name: 'DescribeChangeSetOutput')
+    DescribeOrganizationsAccessInput = Shapes::StructureShape.new(name: 'DescribeOrganizationsAccessInput')
+    DescribeOrganizationsAccessOutput = Shapes::StructureShape.new(name: 'DescribeOrganizationsAccessOutput')
     DescribePublisherInput = Shapes::StructureShape.new(name: 'DescribePublisherInput')
     DescribePublisherOutput = Shapes::StructureShape.new(name: 'DescribePublisherOutput')
     DescribeStackDriftDetectionStatusInput = Shapes::StructureShape.new(name: 'DescribeStackDriftDetectionStatusInput')
@@ -244,6 +250,7 @@ module Aws::CloudFormation
     OperationStatus = Shapes::StringShape.new(name: 'OperationStatus')
     OperationStatusCheckFailedException = Shapes::StructureShape.new(name: 'OperationStatusCheckFailedException')
     OptionalSecureUrl = Shapes::StringShape.new(name: 'OptionalSecureUrl')
+    OrganizationStatus = Shapes::StringShape.new(name: 'OrganizationStatus')
     OrganizationalUnitId = Shapes::StringShape.new(name: 'OrganizationalUnitId')
     OrganizationalUnitIdList = Shapes::ListShape.new(name: 'OrganizationalUnitIdList')
     Output = Shapes::StructureShape.new(name: 'Output')
@@ -491,6 +498,10 @@ module Aws::CloudFormation
 
     AccountList.member = Shapes::ShapeRef.new(shape: Account)
 
+    ActivateOrganizationsAccessInput.struct_class = Types::ActivateOrganizationsAccessInput
+
+    ActivateOrganizationsAccessOutput.struct_class = Types::ActivateOrganizationsAccessOutput
+
     ActivateTypeInput.add_member(:type, Shapes::ShapeRef.new(shape: ThirdPartyType, location_name: "Type"))
     ActivateTypeInput.add_member(:public_type_arn, Shapes::ShapeRef.new(shape: ThirdPartyTypeArn, location_name: "PublicTypeArn"))
     ActivateTypeInput.add_member(:publisher_id, Shapes::ShapeRef.new(shape: PublisherId, location_name: "PublisherId"))
@@ -670,6 +681,10 @@ module Aws::CloudFormation
 
     CreatedButModifiedException.struct_class = Types::CreatedButModifiedException
 
+    DeactivateOrganizationsAccessInput.struct_class = Types::DeactivateOrganizationsAccessInput
+
+    DeactivateOrganizationsAccessOutput.struct_class = Types::DeactivateOrganizationsAccessOutput
+
     DeactivateTypeInput.add_member(:type_name, Shapes::ShapeRef.new(shape: TypeName, location_name: "TypeName"))
     DeactivateTypeInput.add_member(:type, Shapes::ShapeRef.new(shape: ThirdPartyType, location_name: "Type"))
     DeactivateTypeInput.add_member(:arn, Shapes::ShapeRef.new(shape: PrivateTypeArn, location_name: "Arn"))
@@ -770,6 +785,12 @@ module Aws::CloudFormation
     DescribeChangeSetOutput.add_member(:root_change_set_id, Shapes::ShapeRef.new(shape: ChangeSetId, location_name: "RootChangeSetId"))
     DescribeChangeSetOutput.struct_class = Types::DescribeChangeSetOutput
 
+    DescribeOrganizationsAccessInput.add_member(:call_as, Shapes::ShapeRef.new(shape: CallAs, location_name: "CallAs"))
+    DescribeOrganizationsAccessInput.struct_class = Types::DescribeOrganizationsAccessInput
+
+    DescribeOrganizationsAccessOutput.add_member(:status, Shapes::ShapeRef.new(shape: OrganizationStatus, location_name: "Status"))
+    DescribeOrganizationsAccessOutput.struct_class = Types::DescribeOrganizationsAccessOutput
+
     DescribePublisherInput.add_member(:publisher_id, Shapes::ShapeRef.new(shape: PublisherId, location_name: "PublisherId"))
     DescribePublisherInput.struct_class = Types::DescribePublisherInput
 
@@ -1822,6 +1843,16 @@ module Aws::CloudFormation
         "xmlNamespace" => "http://cloudformation.amazonaws.com/doc/2010-05-15/",
       }
 
+      api.add_operation(:activate_organizations_access, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "ActivateOrganizationsAccess"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: ActivateOrganizationsAccessInput)
+        o.output = Shapes::ShapeRef.new(shape: ActivateOrganizationsAccessOutput)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidOperationException)
+        o.errors << Shapes::ShapeRef.new(shape: OperationNotFoundException)
+      end)
+
       api.add_operation(:activate_type, Seahorse::Model::Operation.new.tap do |o|
         o.name = "ActivateType"
         o.http_method = "POST"
@@ -1908,6 +1939,16 @@ module Aws::CloudFormation
         o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
       end)
 
+      api.add_operation(:deactivate_organizations_access, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeactivateOrganizationsAccess"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: DeactivateOrganizationsAccessInput)
+        o.output = Shapes::ShapeRef.new(shape: DeactivateOrganizationsAccessOutput)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidOperationException)
+        o.errors << Shapes::ShapeRef.new(shape: OperationNotFoundException)
+      end)
+
       api.add_operation(:deactivate_type, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DeactivateType"
         o.http_method = "POST"
@@ -2000,6 +2041,16 @@ module Aws::CloudFormation
         o.errors << Shapes::ShapeRef.new(shape: ChangeSetNotFoundException)
       end)
 
+      api.add_operation(:describe_organizations_access, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DescribeOrganizationsAccess"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: DescribeOrganizationsAccessInput)
+        o.output = Shapes::ShapeRef.new(shape: DescribeOrganizationsAccessOutput)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidOperationException)
+        o.errors << Shapes::ShapeRef.new(shape: OperationNotFoundException)
+      end)
+
       api.add_operation(:describe_publisher, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DescribePublisher"
         o.http_method = "POST"