aws-sdk-organizations 1.42.1 → 1.47.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a953e5b0ab3d40e0a2a9b101be14080012e4ea1082ab867c7571241f34a7caf2
-  data.tar.gz: 20e6a492db5be209bee6c07c152c9a430c8bf1ca6f9c725d04c95333caf45a04
+  metadata.gz: 8d43ec5e40446e7b7f2b85785b6584e80fe3a8ad2356de8a1b3b2b86cbcc7002
+  data.tar.gz: 7cc5a8bb0f66a57f432ea4ec87555eba7f479b8c310c5877165df90331ce9205
 SHA512:
-  metadata.gz: 539f1ce6a5acc58b7ab4b2ed5d50ac604ad849f81edb51d71ac74b4c04e0c2475828f01a23b7413bf240e1abd24f6c2f92fc5824630f0e7d94f11ee06d74899e
-  data.tar.gz: fb9c1a8f066b6e57e602559846c51ffc8ae209bf42072a5ea54c5a9e46bd47400ec37d2e8e7f33f23e0a2f12617005cbbdd834f7ac0d9f9304bb053b737b259d
+  metadata.gz: 5d903830cc7239c4838822fa3a40fb0b1fc30287e32cfaa3b7a2da23f55643c25fad3a6ac03bcfa077cead90993c3a0960f5b253cba2b291e43de167b28c9331
+  data.tar.gz: 6ae85908925bf79fb1bd5312f17cde47dba6fe81519598d7c7b29ba93d346fd9ecdceff7180c1f724d231ed8811389219b70a33c6ff88c0b9362ade4c7ccf064

data/lib/aws-sdk-organizations.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -45,6 +47,6 @@ require_relative 'aws-sdk-organizations/customizations'
 # @service
 module Aws::Organizations
 
-  GEM_VERSION = '1.42.1'
+  GEM_VERSION = '1.47.0'
 
 end

data/lib/aws-sdk-organizations/client.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -459,53 +461,26 @@ module Aws::Organizations
 
     # Attaches a policy to a root, an organizational unit (OU), or an
     # individual account. How the policy affects accounts depends on the
-    # type of policy:
-    #
-    # * **Service control policy (SCP)** - An SCP specifies what permissions
-    #   can be delegated to users in affected member accounts. The scope of
-    #   influence for a policy depends on what you attach the policy to:
-    #
-    #   * If you attach an SCP to a root, it affects all accounts in the
-    #     organization.
-    #
-    #   * If you attach an SCP to an OU, it affects all accounts in that OU
-    #     and in any child OUs.
-    #
-    #   * If you attach the policy directly to an account, it affects only
-    #     that account.
-    #
-    #   SCPs are JSON policies that specify the maximum permissions for an
-    #   organization or organizational unit (OU). You can attach one SCP to
-    #   a higher level root or OU, and a different SCP to a child OU or to
-    #   an account. The child policy can further restrict only the
-    #   permissions that pass through the parent filter and are available to
-    #   the child. An SCP that is attached to a child can't grant a
-    #   permission that the parent hasn't already granted. For example,
-    #   imagine that the parent SCP allows permissions A, B, C, D, and E.
-    #   The child SCP allows C, D, E, F, and G. The result is that the
-    #   accounts affected by the child SCP are allowed to use only C, D, and
-    #   E. They can't use A or B because the child OU filtered them out.
-    #   They also can't use F and G because the parent OU filtered them
-    #   out. They can't be granted back by the child SCP; child SCPs can
-    #   only filter the permissions they receive from the parent SCP.
-    #
-    #   AWS Organizations attaches a default SCP named `"FullAWSAccess` to
-    #   every root, OU, and account. This default SCP allows all services
-    #   and actions, enabling any new child OU or account to inherit the
-    #   permissions of the parent root or OU. If you detach the default
-    #   policy, you must replace it with a policy that specifies the
-    #   permissions that you want to allow in that OU or account.
-    #
-    #   For more information about how AWS Organizations policies
-    #   permissions work, see [Using Service Control Policies][1] in the
-    #   *AWS Organizations User Guide.*
+    # type of policy. Refer to the *AWS Organizations User Guide* for
+    # information about each policy type:
+    #
+    # * [AISERVICES\_OPT\_OUT\_POLICY][1]
+    #
+    # * [BACKUP\_POLICY][2]
+    #
+    # * [SERVICE\_CONTROL\_POLICY][3]
+    #
+    # * [TAG\_POLICY][4]
     #
     # This operation can be called only from the organization's master
     # account.
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html
+    # [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html
+    # [2]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html
+    # [3]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html
+    # [4]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html
     #
     # @option params [required, String] :policy_id
     #   The unique identifier (ID) of the policy that you want to attach to
@@ -880,7 +855,7 @@ module Aws::Organizations
     #   resp.create_account_status.completed_timestamp #=> Time
     #   resp.create_account_status.account_id #=> String
     #   resp.create_account_status.gov_cloud_account_id #=> String
-    #   resp.create_account_status.failure_reason #=> String, one of "ACCOUNT_LIMIT_EXCEEDED", "EMAIL_ALREADY_EXISTS", "INVALID_ADDRESS", "INVALID_EMAIL", "CONCURRENT_ACCOUNT_MODIFICATION", "INTERNAL_FAILURE", "GOVCLOUD_ACCOUNT_ALREADY_EXISTS"
+    #   resp.create_account_status.failure_reason #=> String, one of "ACCOUNT_LIMIT_EXCEEDED", "EMAIL_ALREADY_EXISTS", "INVALID_ADDRESS", "INVALID_EMAIL", "CONCURRENT_ACCOUNT_MODIFICATION", "INTERNAL_FAILURE", "GOVCLOUD_ACCOUNT_ALREADY_EXISTS", "MISSING_BUSINESS_VALIDATION", "MISSING_PAYMENT_INSTRUMENT"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/CreateAccount AWS API Documentation
     #
@@ -967,12 +942,13 @@ module Aws::Organizations
     #
     # * When you create an account in an organization using the AWS
     #   Organizations console, API, or CLI commands, the information
-    #   required for the account to operate as a standalone account, such as
-    #   a payment method and signing the end user license agreement (EULA)
-    #   is *not* automatically collected. If you must remove an account from
-    #   your organization later, you can do so only after you provide the
-    #   missing information. Follow the steps at [ To leave an organization
-    #   as a member account][7] in the *AWS Organizations User Guide.*
+    #   required for the account to operate as a standalone account is *not*
+    #   automatically collected. This includes a payment method and signing
+    #   the end user license agreement (EULA). If you must remove an account
+    #   from your organization later, you can do so only after you provide
+    #   the missing information. Follow the steps at [ To leave an
+    #   organization as a member account][7] in the *AWS Organizations User
+    #   Guide.*
     #
     # * If you get an exception that indicates that you exceeded your
     #   account limits for the organization, contact [AWS Support][8].
@@ -1093,7 +1069,7 @@ module Aws::Organizations
     #   resp.create_account_status.completed_timestamp #=> Time
     #   resp.create_account_status.account_id #=> String
     #   resp.create_account_status.gov_cloud_account_id #=> String
-    #   resp.create_account_status.failure_reason #=> String, one of "ACCOUNT_LIMIT_EXCEEDED", "EMAIL_ALREADY_EXISTS", "INVALID_ADDRESS", "INVALID_EMAIL", "CONCURRENT_ACCOUNT_MODIFICATION", "INTERNAL_FAILURE", "GOVCLOUD_ACCOUNT_ALREADY_EXISTS"
+    #   resp.create_account_status.failure_reason #=> String, one of "ACCOUNT_LIMIT_EXCEEDED", "EMAIL_ALREADY_EXISTS", "INVALID_ADDRESS", "INVALID_EMAIL", "CONCURRENT_ACCOUNT_MODIFICATION", "INTERNAL_FAILURE", "GOVCLOUD_ACCOUNT_ALREADY_EXISTS", "MISSING_BUSINESS_VALIDATION", "MISSING_PAYMENT_INSTRUMENT"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/CreateGovCloudAccount AWS API Documentation
     #
@@ -1217,7 +1193,7 @@ module Aws::Organizations
     #   resp.organization.master_account_id #=> String
     #   resp.organization.master_account_email #=> String
     #   resp.organization.available_policy_types #=> Array
-    #   resp.organization.available_policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.organization.available_policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.organization.available_policy_types[0].status #=> String, one of "ENABLED", "PENDING_ENABLE", "PENDING_DISABLE"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/CreateOrganization AWS API Documentation
@@ -1327,17 +1303,9 @@ module Aws::Organizations
     # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies.html
     #
     # @option params [required, String] :content
-    #   The policy content to add to the new policy. For example, if you
-    #   create a [service control policy][1] (SCP), this string must be JSON
-    #   text that specifies the permissions that admins in attached accounts
-    #   can delegate to their users, groups, and roles. For more information
-    #   about the SCP syntax, see [Service Control Policy Syntax][2] in the
-    #   *AWS Organizations User Guide.*
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html
-    #   [2]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_scp-syntax.html
+    #   The policy text content to add to the new policy. The text that you
+    #   supply must adhere to the rules of the policy type you specify in the
+    #   `Type` parameter.
     #
     # @option params [required, String] :description
     #   An optional description to assign to the policy.
@@ -1353,12 +1321,23 @@ module Aws::Organizations
     #   [1]: http://wikipedia.org/wiki/regex
     #
     # @option params [required, String] :type
-    #   The type of policy to create.
+    #   The type of policy to create. You can specify one of the following
+    #   values:
+    #
+    #   * [AISERVICES\_OPT\_OUT\_POLICY][1]
+    #
+    #   * [BACKUP\_POLICY][2]
     #
-    #   <note markdown="1"> In the current release, the only type of policy that you can create is
-    #   a service control policy (SCP).
+    #   * [SERVICE\_CONTROL\_POLICY][3]
     #
-    #    </note>
+    #   * [TAG\_POLICY][4]
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html
+    #   [2]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html
+    #   [3]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html
+    #   [4]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html
     #
     # @return [Types::CreatePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1398,7 +1377,7 @@ module Aws::Organizations
     #     content: "PolicyContent", # required
     #     description: "PolicyDescription", # required
     #     name: "PolicyName", # required
-    #     type: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY
+    #     type: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY, BACKUP_POLICY, AISERVICES_OPT_OUT_POLICY
     #   })
     #
     # @example Response structure
@@ -1407,7 +1386,7 @@ module Aws::Organizations
     #   resp.policy.policy_summary.arn #=> String
     #   resp.policy.policy_summary.name #=> String
     #   resp.policy.policy_summary.description #=> String
-    #   resp.policy.policy_summary.type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.policy.policy_summary.type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.policy.policy_summary.aws_managed #=> Boolean
     #   resp.policy.content #=> String
     #
@@ -1646,6 +1625,11 @@ module Aws::Organizations
     # Removes the specified member AWS account as a delegated administrator
     # for the specified AWS service.
     #
+    # Deregistering a delegated administrator can have unintended impacts on
+    # the functionality of the enabled AWS service. See the documentation
+    # for the enabled service before you deregister a delegated
+    # administrator so that you understand any potential impacts.
+    #
     # You can run this action only for AWS services that support this
     # feature. For a current list of services that support it, see the
     # column *Supports Delegated Administrator* in the table at [AWS
@@ -1816,7 +1800,7 @@ module Aws::Organizations
     #   resp.create_account_status.completed_timestamp #=> Time
     #   resp.create_account_status.account_id #=> String
     #   resp.create_account_status.gov_cloud_account_id #=> String
-    #   resp.create_account_status.failure_reason #=> String, one of "ACCOUNT_LIMIT_EXCEEDED", "EMAIL_ALREADY_EXISTS", "INVALID_ADDRESS", "INVALID_EMAIL", "CONCURRENT_ACCOUNT_MODIFICATION", "INTERNAL_FAILURE", "GOVCLOUD_ACCOUNT_ALREADY_EXISTS"
+    #   resp.create_account_status.failure_reason #=> String, one of "ACCOUNT_LIMIT_EXCEEDED", "EMAIL_ALREADY_EXISTS", "INVALID_ADDRESS", "INVALID_EMAIL", "CONCURRENT_ACCOUNT_MODIFICATION", "INTERNAL_FAILURE", "GOVCLOUD_ACCOUNT_ALREADY_EXISTS", "MISSING_BUSINESS_VALIDATION", "MISSING_PAYMENT_INSTRUMENT"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/DescribeCreateAccountStatus AWS API Documentation
     #
@@ -1827,14 +1811,15 @@ module Aws::Organizations
       req.send_request(options)
     end
 
-    # Returns the contents of the effective tag policy for the account. The
-    # effective tag policy is the aggregation of any tag policies the
-    # account inherits, plus any policy directly that is attached to the
-    # account.
+    # Returns the contents of the effective policy for specified policy type
+    # and account. The effective policy is the aggregation of any policies
+    # of the specified type that the account inherits, plus any policy of
+    # that type that is directly attached to the account.
     #
-    # This action returns information on tag policies only.
+    # This operation applies only to policy types *other* than service
+    # control policies (SCPs).
     #
-    # For more information on policy inheritance, see [How Policy
+    # For more information about policy inheritance, see [How Policy
     # Inheritance Works][1] in the *AWS Organizations User Guide*.
     #
     # This operation can be called only from the organization's master
@@ -1846,12 +1831,25 @@ module Aws::Organizations
     # [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies-inheritance.html
     #
     # @option params [required, String] :policy_type
-    #   The type of policy that you want information about.
+    #   The type of policy that you want information about. You can specify
+    #   one of the following values:
+    #
+    #   * [AISERVICES\_OPT\_OUT\_POLICY][1]
+    #
+    #   * [BACKUP\_POLICY][2]
+    #
+    #   * [TAG\_POLICY][3]
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html
+    #   [2]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html
+    #   [3]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html
     #
     # @option params [String] :target_id
     #   When you're signed in as the master account, specify the ID of the
     #   account that you want details about. Specifying an organization root
-    #   or OU as the target is not supported.
+    #   or organizational unit (OU) as the target is not supported.
     #
     # @return [Types::DescribeEffectivePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1860,7 +1858,7 @@ module Aws::Organizations
     # @example Request syntax with placeholder values
     #
     #   resp = client.describe_effective_policy({
-    #     policy_type: "TAG_POLICY", # required, accepts TAG_POLICY
+    #     policy_type: "TAG_POLICY", # required, accepts TAG_POLICY, BACKUP_POLICY, AISERVICES_OPT_OUT_POLICY
     #     target_id: "PolicyTargetId",
     #   })
     #
@@ -1869,7 +1867,7 @@ module Aws::Organizations
     #   resp.effective_policy.policy_content #=> String
     #   resp.effective_policy.last_updated_timestamp #=> Time
     #   resp.effective_policy.target_id #=> String
-    #   resp.effective_policy.policy_type #=> String, one of "TAG_POLICY"
+    #   resp.effective_policy.policy_type #=> String, one of "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/DescribeEffectivePolicy AWS API Documentation
     #
@@ -2040,7 +2038,7 @@ module Aws::Organizations
     #   resp.organization.master_account_id #=> String
     #   resp.organization.master_account_email #=> String
     #   resp.organization.available_policy_types #=> Array
-    #   resp.organization.available_policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.organization.available_policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.organization.available_policy_types[0].status #=> String, one of "ENABLED", "PENDING_ENABLE", "PENDING_DISABLE"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/DescribeOrganization AWS API Documentation
@@ -2174,7 +2172,7 @@ module Aws::Organizations
     #   resp.policy.policy_summary.arn #=> String
     #   resp.policy.policy_summary.name #=> String
     #   resp.policy.policy_summary.description #=> String
-    #   resp.policy.policy_summary.type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.policy.policy_summary.type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.policy.policy_summary.aws_managed #=> Boolean
     #   resp.policy.content #=> String
     #
@@ -2188,18 +2186,20 @@ module Aws::Organizations
     end
 
     # Detaches a policy from a target root, organizational unit (OU), or
-    # account. If the policy being detached is a service control policy
-    # (SCP), the changes to permissions for IAM users and roles in affected
-    # accounts are immediate.
-    #
-    # **Note:** Every root, OU, and account must have at least one SCP
-    # attached. If you want to replace the default `FullAWSAccess` policy
-    # with one that limits the permissions that can be delegated, you must
-    # attach the replacement policy before you can remove the default one.
-    # This is the authorization strategy of an "[allow list][1]". If you
-    # instead attach a second SCP and leave the `FullAWSAccess` SCP still
-    # attached, and specify `"Effect": "Deny"` in the second SCP to override
-    # the `"Effect": "Allow"` in the `FullAWSAccess` policy (or any other
+    # account.
+    #
+    # If the policy being detached is a service control policy (SCP), the
+    # changes to permissions for AWS Identity and Access Management (IAM)
+    # users and roles in affected accounts are immediate.
+    #
+    # Every root, OU, and account must have at least one SCP attached. If
+    # you want to replace the default `FullAWSAccess` policy with an SCP
+    # that limits the permissions that can be delegated, you must attach the
+    # replacement SCP before you can remove the default SCP. This is the
+    # authorization strategy of an "[allow list][1]". If you instead
+    # attach a second SCP and leave the `FullAWSAccess` SCP still attached,
+    # and specify `"Effect": "Deny"` in the second SCP to override the
+    # `"Effect": "Allow"` in the `FullAWSAccess` policy (or any other
     # attached SCP), you're using the authorization strategy of a "[deny
     # list][2]".
     #
@@ -2208,8 +2208,8 @@ module Aws::Organizations
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_about-scps.html#orgs_policies_whitelist
-    # [2]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_about-scps.html#orgs_policies_blacklist
+    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/SCP_strategies.html#orgs_policies_allowlist
+    # [2]: https://docs.aws.amazon.com/organizations/latest/userguide/SCP_strategies.html#orgs_policies_denylist
     #
     # @option params [required, String] :policy_id
     #   The unique identifier (ID) of the policy you want to detach. You can
@@ -2332,18 +2332,19 @@ module Aws::Organizations
       req.send_request(options)
     end
 
-    # Disables an organizational control policy type in a root. A policy of
-    # a certain type can be attached to entities in a root only if that type
+    # Disables an organizational policy type in a root. A policy of a
+    # certain type can be attached to entities in a root only if that type
     # is enabled in the root. After you perform this operation, you no
     # longer can attach policies of the specified type to that root or to
     # any organizational unit (OU) or account in that root. You can undo
     # this by using the EnablePolicyType operation.
     #
     # This is an asynchronous request that AWS performs in the background.
-    # If you disable a policy for a root, it still appears enabled for the
-    # organization if [all features][1] are enabled for the organization.
-    # AWS recommends that you first use ListRoots to see the status of
-    # policy types for a specified root, and then use this operation.
+    # If you disable a policy type for a root, it still appears enabled for
+    # the organization if [all features][1] are enabled for the
+    # organization. AWS recommends that you first use ListRoots to see the
+    # status of policy types for a specified root, and then use this
+    # operation.
     #
     # This operation can be called only from the organization's master
     # account.
@@ -2367,7 +2368,23 @@ module Aws::Organizations
     #   [1]: http://wikipedia.org/wiki/regex
     #
     # @option params [required, String] :policy_type
-    #   The policy type that you want to disable in this root.
+    #   The policy type that you want to disable in this root. You can specify
+    #   one of the following values:
+    #
+    #   * [AISERVICES\_OPT\_OUT\_POLICY][1]
+    #
+    #   * [BACKUP\_POLICY][2]
+    #
+    #   * [SERVICE\_CONTROL\_POLICY][3]
+    #
+    #   * [TAG\_POLICY][4]
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html
+    #   [2]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html
+    #   [3]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html
+    #   [4]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html
     #
     # @return [Types::DisablePolicyTypeResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -2399,7 +2416,7 @@ module Aws::Organizations
     #
     #   resp = client.disable_policy_type({
     #     root_id: "RootId", # required
-    #     policy_type: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY
+    #     policy_type: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY, BACKUP_POLICY, AISERVICES_OPT_OUT_POLICY
     #   })
     #
     # @example Response structure
@@ -2408,7 +2425,7 @@ module Aws::Organizations
     #   resp.root.arn #=> String
     #   resp.root.name #=> String
     #   resp.root.policy_types #=> Array
-    #   resp.root.policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.root.policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.root.policy_types[0].status #=> String, one of "ENABLED", "PENDING_ENABLE", "PENDING_DISABLE"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/DisablePolicyType AWS API Documentation
@@ -2601,7 +2618,23 @@ module Aws::Organizations
     #   [1]: http://wikipedia.org/wiki/regex
     #
     # @option params [required, String] :policy_type
-    #   The policy type that you want to enable.
+    #   The policy type that you want to enable. You can specify one of the
+    #   following values:
+    #
+    #   * [AISERVICES\_OPT\_OUT\_POLICY][1]
+    #
+    #   * [BACKUP\_POLICY][2]
+    #
+    #   * [SERVICE\_CONTROL\_POLICY][3]
+    #
+    #   * [TAG\_POLICY][4]
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html
+    #   [2]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html
+    #   [3]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html
+    #   [4]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html
     #
     # @return [Types::EnablePolicyTypeResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -2637,7 +2670,7 @@ module Aws::Organizations
     #
     #   resp = client.enable_policy_type({
     #     root_id: "RootId", # required
-    #     policy_type: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY
+    #     policy_type: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY, BACKUP_POLICY, AISERVICES_OPT_OUT_POLICY
     #   })
     #
     # @example Response structure
@@ -2646,7 +2679,7 @@ module Aws::Organizations
     #   resp.root.arn #=> String
     #   resp.root.name #=> String
     #   resp.root.policy_types #=> Array
-    #   resp.root.policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.root.policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.root.policy_types[0].status #=> String, one of "ENABLED", "PENDING_ENABLE", "PENDING_DISABLE"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/EnablePolicyType AWS API Documentation
@@ -3397,7 +3430,7 @@ module Aws::Organizations
     #   resp.create_account_statuses[0].completed_timestamp #=> Time
     #   resp.create_account_statuses[0].account_id #=> String
     #   resp.create_account_statuses[0].gov_cloud_account_id #=> String
-    #   resp.create_account_statuses[0].failure_reason #=> String, one of "ACCOUNT_LIMIT_EXCEEDED", "EMAIL_ALREADY_EXISTS", "INVALID_ADDRESS", "INVALID_EMAIL", "CONCURRENT_ACCOUNT_MODIFICATION", "INTERNAL_FAILURE", "GOVCLOUD_ACCOUNT_ALREADY_EXISTS"
+    #   resp.create_account_statuses[0].failure_reason #=> String, one of "ACCOUNT_LIMIT_EXCEEDED", "EMAIL_ALREADY_EXISTS", "INVALID_ADDRESS", "INVALID_EMAIL", "CONCURRENT_ACCOUNT_MODIFICATION", "INTERNAL_FAILURE", "GOVCLOUD_ACCOUNT_ALREADY_EXISTS", "MISSING_BUSINESS_VALIDATION", "MISSING_PAYMENT_INSTRUMENT"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/ListCreateAccountStatus AWS API Documentation
@@ -4116,6 +4149,22 @@ module Aws::Organizations
     #
     # @option params [required, String] :filter
     #   Specifies the type of policy that you want to include in the response.
+    #   You must specify one of the following values:
+    #
+    #   * [AISERVICES\_OPT\_OUT\_POLICY][1]
+    #
+    #   * [BACKUP\_POLICY][2]
+    #
+    #   * [SERVICE\_CONTROL\_POLICY][3]
+    #
+    #   * [TAG\_POLICY][4]
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html
+    #   [2]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html
+    #   [3]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html
+    #   [4]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html
     #
     # @option params [String] :next_token
     #   The parameter for receiving additional results if you receive a
@@ -4185,7 +4234,7 @@ module Aws::Organizations
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_policies({
-    #     filter: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY
+    #     filter: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY, BACKUP_POLICY, AISERVICES_OPT_OUT_POLICY
     #     next_token: "NextToken",
     #     max_results: 1,
     #   })
@@ -4197,7 +4246,7 @@ module Aws::Organizations
     #   resp.policies[0].arn #=> String
     #   resp.policies[0].name #=> String
     #   resp.policies[0].description #=> String
-    #   resp.policies[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.policies[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.policies[0].aws_managed #=> Boolean
     #   resp.next_token #=> String
     #
@@ -4248,7 +4297,23 @@ module Aws::Organizations
     #   [1]: http://wikipedia.org/wiki/regex
     #
     # @option params [required, String] :filter
-    #   The type of policy that you want to include in the returned list.
+    #   The type of policy that you want to include in the returned list. You
+    #   must specify one of the following values:
+    #
+    #   * [AISERVICES\_OPT\_OUT\_POLICY][1]
+    #
+    #   * [BACKUP\_POLICY][2]
+    #
+    #   * [SERVICE\_CONTROL\_POLICY][3]
+    #
+    #   * [TAG\_POLICY][4]
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html
+    #   [2]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html
+    #   [3]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html
+    #   [4]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html
     #
     # @option params [String] :next_token
     #   The parameter for receiving additional results if you receive a
@@ -4306,7 +4371,7 @@ module Aws::Organizations
     #
     #   resp = client.list_policies_for_target({
     #     target_id: "PolicyTargetId", # required
-    #     filter: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY
+    #     filter: "SERVICE_CONTROL_POLICY", # required, accepts SERVICE_CONTROL_POLICY, TAG_POLICY, BACKUP_POLICY, AISERVICES_OPT_OUT_POLICY
     #     next_token: "NextToken",
     #     max_results: 1,
     #   })
@@ -4318,7 +4383,7 @@ module Aws::Organizations
     #   resp.policies[0].arn #=> String
     #   resp.policies[0].name #=> String
     #   resp.policies[0].description #=> String
-    #   resp.policies[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.policies[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.policies[0].aws_managed #=> Boolean
     #   resp.next_token #=> String
     #
@@ -4419,7 +4484,7 @@ module Aws::Organizations
     #   resp.roots[0].arn #=> String
     #   resp.roots[0].name #=> String
     #   resp.roots[0].policy_types #=> Array
-    #   resp.roots[0].policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.roots[0].policy_types[0].type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.roots[0].policy_types[0].status #=> String, one of "ENABLED", "PENDING_ENABLE", "PENDING_DISABLE"
     #   resp.next_token #=> String
     #
@@ -4801,9 +4866,9 @@ module Aws::Organizations
     #   The ID of the resource to add a tag to.
     #
     # @option params [required, Array<Types::Tag>] :tags
-    #   The tag to add to the specified resource. Specifying the tag key is
-    #   required. You can set the value of a tag to an empty string, but you
-    #   can't set the value of a tag to null.
+    #   The tag to add to the specified resource. You must specify both a tag
+    #   key and value. You can set the value of a tag to an empty string, but
+    #   you can't set it to null.
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -5046,7 +5111,7 @@ module Aws::Organizations
     #   resp.policy.policy_summary.arn #=> String
     #   resp.policy.policy_summary.name #=> String
     #   resp.policy.policy_summary.description #=> String
-    #   resp.policy.policy_summary.type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY"
+    #   resp.policy.policy_summary.type #=> String, one of "SERVICE_CONTROL_POLICY", "TAG_POLICY", "BACKUP_POLICY", "AISERVICES_OPT_OUT_POLICY"
     #   resp.policy.policy_summary.aws_managed #=> Boolean
     #   resp.policy.content #=> String
     #
@@ -5072,7 +5137,7 @@ module Aws::Organizations
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-organizations'
-      context[:gem_version] = '1.42.1'
+      context[:gem_version] = '1.47.0'
       Seahorse::Client::Request.new(handlers, context)
     end