aws-sdk-organizations 1.53.0 → 1.54.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/aws-sdk-organizations.rb +1 -1
- data/lib/aws-sdk-organizations/client.rb +95 -95
- data/lib/aws-sdk-organizations/types.rb +55 -50
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 12d5b32001c2e000c0e68f125e340547a8d1ed5aec990699d591ee15753adf5a
|
4
|
+
data.tar.gz: b870e7a4de0aec2c3322a6866fdcfa8c606fc20ba1cfc553f7a3ece322cdf147
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 3fa43a08728fe583f45a3dd6ad6ac859caf06e47f6bf1237a69aee01100812f5983d4dd26f133c8a16a7263033e32ba61c9d5c58558d2d8f60d20febf034190f
|
7
|
+
data.tar.gz: 37f0dc9aa70395aa4b9f515288f73127e12596a48efd6f7cff7597eeaf92393423fab6b118255610ea4b48ee1ad311695ecd9fdf249ba01b117833a09c0e4f25
|
@@ -356,7 +356,7 @@ module Aws::Organizations
|
|
356
356
|
# User Guide*.
|
357
357
|
#
|
358
358
|
# * **Enable all features final confirmation** handshake: only a
|
359
|
-
# principal from the
|
359
|
+
# principal from the management account.
|
360
360
|
#
|
361
361
|
# For more information about invitations, see [Inviting an AWS Account
|
362
362
|
# to Join Your Organization][2] in the *AWS Organizations User Guide.*
|
@@ -487,7 +487,7 @@ module Aws::Organizations
|
|
487
487
|
#
|
488
488
|
# * [TAG\_POLICY][4]
|
489
489
|
#
|
490
|
-
# This operation can be called only from the organization's
|
490
|
+
# This operation can be called only from the organization's management
|
491
491
|
# account.
|
492
492
|
#
|
493
493
|
#
|
@@ -716,12 +716,12 @@ module Aws::Organizations
|
|
716
716
|
#
|
717
717
|
# AWS Organizations preconfigures the new member account with a role
|
718
718
|
# (named `OrganizationAccountAccessRole` by default) that grants users
|
719
|
-
# in the
|
720
|
-
# account. Principals in the
|
719
|
+
# in the management account administrator permissions in the new member
|
720
|
+
# account. Principals in the management account can assume the role. AWS
|
721
721
|
# Organizations clones the company name and address information for the
|
722
|
-
# new account from the organization's
|
722
|
+
# new account from the organization's management account.
|
723
723
|
#
|
724
|
-
# This operation can be called only from the organization's
|
724
|
+
# This operation can be called only from the organization's management
|
725
725
|
# account.
|
726
726
|
#
|
727
727
|
# For more information about creating accounts, see [Creating an AWS
|
@@ -786,10 +786,10 @@ module Aws::Organizations
|
|
786
786
|
# (Optional)
|
787
787
|
#
|
788
788
|
# The name of an IAM role that AWS Organizations automatically
|
789
|
-
# preconfigures in the new member account. This role trusts the
|
790
|
-
# account, allowing users in the
|
791
|
-
# permitted by the
|
792
|
-
# administrator permissions in the new member account.
|
789
|
+
# preconfigures in the new member account. This role trusts the
|
790
|
+
# management account, allowing users in the management account to assume
|
791
|
+
# the role, as permitted by the management account administrator. The
|
792
|
+
# role has administrator permissions in the new member account.
|
793
793
|
#
|
794
794
|
# If you don't specify this parameter, the role name defaults to
|
795
795
|
# `OrganizationAccountAccessRole`.
|
@@ -913,11 +913,11 @@ module Aws::Organizations
|
|
913
913
|
# the [ *AWS GovCloud User Guide*.][1]
|
914
914
|
#
|
915
915
|
# * You already have an account in the AWS GovCloud (US) Region that is
|
916
|
-
# paired with a
|
917
|
-
# Region.
|
916
|
+
# paired with a management account of an organization in the
|
917
|
+
# commercial Region.
|
918
918
|
#
|
919
|
-
# * You call this action from the
|
920
|
-
# the commercial Region.
|
919
|
+
# * You call this action from the management account of your
|
920
|
+
# organization in the commercial Region.
|
921
921
|
#
|
922
922
|
# * You have the `organizations:CreateGovCloudAccount` permission.
|
923
923
|
#
|
@@ -943,11 +943,11 @@ module Aws::Organizations
|
|
943
943
|
# the TagResource operation in the GovCloud Region after the new
|
944
944
|
# GovCloud account exists.
|
945
945
|
#
|
946
|
-
# You call this action from the
|
947
|
-
# the commercial Region to create a standalone AWS account in the AWS
|
948
|
-
# GovCloud (US) Region. After the account is created, the
|
949
|
-
# of an organization in the AWS GovCloud (US) Region can invite
|
950
|
-
# that organization. For more information on inviting standalone
|
946
|
+
# You call this action from the management account of your organization
|
947
|
+
# in the commercial Region to create a standalone AWS account in the AWS
|
948
|
+
# GovCloud (US) Region. After the account is created, the management
|
949
|
+
# account of an organization in the AWS GovCloud (US) Region can invite
|
950
|
+
# it to that organization. For more information on inviting standalone
|
951
951
|
# accounts in the AWS GovCloud (US) to join an organization, see [AWS
|
952
952
|
# Organizations][4] in the *AWS GovCloud User Guide.*
|
953
953
|
#
|
@@ -976,14 +976,14 @@ module Aws::Organizations
|
|
976
976
|
# accounts are associated with the same email address.
|
977
977
|
#
|
978
978
|
# A role is created in the new account in the commercial Region that
|
979
|
-
# allows the
|
980
|
-
# to assume it. An AWS GovCloud (US) account is then created and
|
979
|
+
# allows the management account in the organization in the commercial
|
980
|
+
# Region to assume it. An AWS GovCloud (US) account is then created and
|
981
981
|
# associated with the commercial account that you just created. A role
|
982
982
|
# is also created in the new AWS GovCloud (US) account that can be
|
983
983
|
# assumed by the AWS GovCloud (US) account that is associated with the
|
984
|
-
#
|
985
|
-
# and to view a diagram that explains how account access
|
986
|
-
# Organizations][4] in the *AWS GovCloud User Guide.*
|
984
|
+
# management account of the commercial organization. For more
|
985
|
+
# information and to view a diagram that explains how account access
|
986
|
+
# works, see [AWS Organizations][4] in the *AWS GovCloud User Guide.*
|
987
987
|
#
|
988
988
|
# For more information about creating accounts, see [Creating an AWS
|
989
989
|
# Account in Your Organization][6] in the *AWS Organizations User
|
@@ -1056,9 +1056,9 @@ module Aws::Organizations
|
|
1056
1056
|
#
|
1057
1057
|
# The name of an IAM role that AWS Organizations automatically
|
1058
1058
|
# preconfigures in the new member accounts in both the AWS GovCloud (US)
|
1059
|
-
# Region and in the commercial Region. This role trusts the
|
1060
|
-
# account, allowing users in the
|
1061
|
-
# permitted by the
|
1059
|
+
# Region and in the commercial Region. This role trusts the management
|
1060
|
+
# account, allowing users in the management account to assume the role,
|
1061
|
+
# as permitted by the management account administrator. The role has
|
1062
1062
|
# administrator permissions in the new member account.
|
1063
1063
|
#
|
1064
1064
|
# If you don't specify this parameter, the role name defaults to
|
@@ -1158,11 +1158,11 @@ module Aws::Organizations
|
|
1158
1158
|
end
|
1159
1159
|
|
1160
1160
|
# Creates an AWS organization. The account whose user is calling the
|
1161
|
-
# `CreateOrganization` operation automatically becomes the [
|
1161
|
+
# `CreateOrganization` operation automatically becomes the [management
|
1162
1162
|
# account][1] of the new organization.
|
1163
1163
|
#
|
1164
1164
|
# This operation must be called using credentials from the account that
|
1165
|
-
# is to become the new organization's
|
1165
|
+
# is to become the new organization's management account. The principal
|
1166
1166
|
# must also have the relevant IAM permissions.
|
1167
1167
|
#
|
1168
1168
|
# By default (or if you set the `FeatureSet` parameter to `ALL`), the
|
@@ -1182,7 +1182,7 @@ module Aws::Organizations
|
|
1182
1182
|
# feature set supports different levels of functionality.
|
1183
1183
|
#
|
1184
1184
|
# * `CONSOLIDATED_BILLING`\: All member accounts have their bills
|
1185
|
-
# consolidated to and paid by the
|
1185
|
+
# consolidated to and paid by the management account. For more
|
1186
1186
|
# information, see [Consolidated billing][1] in the *AWS Organizations
|
1187
1187
|
# User Guide.*
|
1188
1188
|
#
|
@@ -1190,10 +1190,10 @@ module Aws::Organizations
|
|
1190
1190
|
# organizations in the AWS GovCloud (US) Region.
|
1191
1191
|
#
|
1192
1192
|
# * `ALL`\: In addition to all the features supported by the
|
1193
|
-
# consolidated billing feature set, the
|
1194
|
-
# any policy type to any member account in the organization. For
|
1195
|
-
# information, see [All features][2] in the *AWS Organizations
|
1196
|
-
# Guide.*
|
1193
|
+
# consolidated billing feature set, the management account can also
|
1194
|
+
# apply any policy type to any member account in the organization. For
|
1195
|
+
# more information, see [All features][2] in the *AWS Organizations
|
1196
|
+
# User Guide.*
|
1197
1197
|
#
|
1198
1198
|
#
|
1199
1199
|
#
|
@@ -1295,7 +1295,7 @@ module Aws::Organizations
|
|
1295
1295
|
# If the request includes tags, then the requester must have the
|
1296
1296
|
# `organizations:TagResource` permission.
|
1297
1297
|
#
|
1298
|
-
# This operation can be called only from the organization's
|
1298
|
+
# This operation can be called only from the organization's management
|
1299
1299
|
# account.
|
1300
1300
|
#
|
1301
1301
|
#
|
@@ -1401,7 +1401,7 @@ module Aws::Organizations
|
|
1401
1401
|
# If the request includes tags, then the requester must have the
|
1402
1402
|
# `organizations:TagResource` permission.
|
1403
1403
|
#
|
1404
|
-
# This operation can be called only from the organization's
|
1404
|
+
# This operation can be called only from the organization's management
|
1405
1405
|
# account.
|
1406
1406
|
#
|
1407
1407
|
#
|
@@ -1642,8 +1642,8 @@ module Aws::Organizations
|
|
1642
1642
|
end
|
1643
1643
|
|
1644
1644
|
# Deletes the organization. You can delete an organization only by using
|
1645
|
-
# credentials from the
|
1646
|
-
# member accounts.
|
1645
|
+
# credentials from the management account. The organization must be
|
1646
|
+
# empty of member accounts.
|
1647
1647
|
#
|
1648
1648
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
1649
1649
|
#
|
@@ -1660,7 +1660,7 @@ module Aws::Organizations
|
|
1660
1660
|
# must first remove all accounts and child OUs from the OU that you want
|
1661
1661
|
# to delete.
|
1662
1662
|
#
|
1663
|
-
# This operation can be called only from the organization's
|
1663
|
+
# This operation can be called only from the organization's management
|
1664
1664
|
# account.
|
1665
1665
|
#
|
1666
1666
|
# @option params [required, String] :organizational_unit_id
|
@@ -1708,7 +1708,7 @@ module Aws::Organizations
|
|
1708
1708
|
# perform this operation, you must first detach the policy from all
|
1709
1709
|
# organizational units (OUs), roots, and accounts.
|
1710
1710
|
#
|
1711
|
-
# This operation can be called only from the organization's
|
1711
|
+
# This operation can be called only from the organization's management
|
1712
1712
|
# account.
|
1713
1713
|
#
|
1714
1714
|
# @option params [required, String] :policy_id
|
@@ -1765,7 +1765,7 @@ module Aws::Organizations
|
|
1765
1765
|
# Services that you can use with AWS Organizations][1] in the *AWS
|
1766
1766
|
# Organizations User Guide.*
|
1767
1767
|
#
|
1768
|
-
# This operation can be called only from the organization's
|
1768
|
+
# This operation can be called only from the organization's management
|
1769
1769
|
# account.
|
1770
1770
|
#
|
1771
1771
|
#
|
@@ -1807,7 +1807,7 @@ module Aws::Organizations
|
|
1807
1807
|
# Retrieves AWS Organizations-related information about the specified
|
1808
1808
|
# account.
|
1809
1809
|
#
|
1810
|
-
# This operation can be called only from the organization's
|
1810
|
+
# This operation can be called only from the organization's management
|
1811
1811
|
# account or by a member account that is a delegated administrator for
|
1812
1812
|
# an AWS service.
|
1813
1813
|
#
|
@@ -1874,7 +1874,7 @@ module Aws::Organizations
|
|
1874
1874
|
# Retrieves the current status of an asynchronous request to create an
|
1875
1875
|
# account.
|
1876
1876
|
#
|
1877
|
-
# This operation can be called only from the organization's
|
1877
|
+
# This operation can be called only from the organization's management
|
1878
1878
|
# account or by a member account that is a delegated administrator for
|
1879
1879
|
# an AWS service.
|
1880
1880
|
#
|
@@ -1952,7 +1952,7 @@ module Aws::Organizations
|
|
1952
1952
|
# For more information about policy inheritance, see [How Policy
|
1953
1953
|
# Inheritance Works][1] in the *AWS Organizations User Guide*.
|
1954
1954
|
#
|
1955
|
-
# This operation can be called only from the organization's
|
1955
|
+
# This operation can be called only from the organization's management
|
1956
1956
|
# account or by a member account that is a delegated administrator for
|
1957
1957
|
# an AWS service.
|
1958
1958
|
#
|
@@ -1977,9 +1977,9 @@ module Aws::Organizations
|
|
1977
1977
|
# [3]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html
|
1978
1978
|
#
|
1979
1979
|
# @option params [String] :target_id
|
1980
|
-
# When you're signed in as the
|
1981
|
-
# account that you want details about. Specifying an organization
|
1982
|
-
# or organizational unit (OU) as the target is not supported.
|
1980
|
+
# When you're signed in as the management account, specify the ID of
|
1981
|
+
# the account that you want details about. Specifying an organization
|
1982
|
+
# root or organizational unit (OU) as the target is not supported.
|
1983
1983
|
#
|
1984
1984
|
# @return [Types::DescribeEffectivePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1985
1985
|
#
|
@@ -2182,7 +2182,7 @@ module Aws::Organizations
|
|
2182
2182
|
|
2183
2183
|
# Retrieves information about an organizational unit (OU).
|
2184
2184
|
#
|
2185
|
-
# This operation can be called only from the organization's
|
2185
|
+
# This operation can be called only from the organization's management
|
2186
2186
|
# account or by a member account that is a delegated administrator for
|
2187
2187
|
# an AWS service.
|
2188
2188
|
#
|
@@ -2245,7 +2245,7 @@ module Aws::Organizations
|
|
2245
2245
|
|
2246
2246
|
# Retrieves information about a policy.
|
2247
2247
|
#
|
2248
|
-
# This operation can be called only from the organization's
|
2248
|
+
# This operation can be called only from the organization's management
|
2249
2249
|
# account or by a member account that is a delegated administrator for
|
2250
2250
|
# an AWS service.
|
2251
2251
|
#
|
@@ -2333,7 +2333,7 @@ module Aws::Organizations
|
|
2333
2333
|
# attached SCP), you're using the authorization strategy of a "[deny
|
2334
2334
|
# list][2]".
|
2335
2335
|
#
|
2336
|
-
# This operation can be called only from the organization's
|
2336
|
+
# This operation can be called only from the organization's management
|
2337
2337
|
# account.
|
2338
2338
|
#
|
2339
2339
|
#
|
@@ -2432,7 +2432,7 @@ module Aws::Organizations
|
|
2432
2432
|
# Organizations, see [Integrating AWS Organizations with Other AWS
|
2433
2433
|
# Services][2] in the *AWS Organizations User Guide.*
|
2434
2434
|
#
|
2435
|
-
# This operation can be called only from the organization's
|
2435
|
+
# This operation can be called only from the organization's management
|
2436
2436
|
# account.
|
2437
2437
|
#
|
2438
2438
|
#
|
@@ -2476,7 +2476,7 @@ module Aws::Organizations
|
|
2476
2476
|
# status of policy types for a specified root, and then use this
|
2477
2477
|
# operation.
|
2478
2478
|
#
|
2479
|
-
# This operation can be called only from the organization's
|
2479
|
+
# This operation can be called only from the organization's management
|
2480
2480
|
# account.
|
2481
2481
|
#
|
2482
2482
|
# To view the status of available policy types in the organization, use
|
@@ -2586,7 +2586,7 @@ module Aws::Organizations
|
|
2586
2586
|
# Organizations, see [Integrating AWS Organizations with Other AWS
|
2587
2587
|
# Services][2] in the *AWS Organizations User Guide.*
|
2588
2588
|
#
|
2589
|
-
# This operation can be called only from the organization's
|
2589
|
+
# This operation can be called only from the organization's management
|
2590
2590
|
# account and only if the organization has [enabled all features][3].
|
2591
2591
|
#
|
2592
2592
|
#
|
@@ -2641,14 +2641,14 @@ module Aws::Organizations
|
|
2641
2641
|
# the feature set change by accepting the handshake that contains
|
2642
2642
|
# `"Action": "ENABLE_ALL_FEATURES"`. This completes the change.
|
2643
2643
|
#
|
2644
|
-
# After you enable all features in your organization, the
|
2645
|
-
# in the organization can apply policies on all member accounts.
|
2646
|
-
# policies can restrict what users and even administrators in
|
2647
|
-
# accounts can do. The
|
2648
|
-
# accounts from leaving the organization. Ensure that your
|
2649
|
-
# administrators are aware of this.
|
2644
|
+
# After you enable all features in your organization, the management
|
2645
|
+
# account in the organization can apply policies on all member accounts.
|
2646
|
+
# These policies can restrict what users and even administrators in
|
2647
|
+
# those accounts can do. The management account can apply policies that
|
2648
|
+
# prevent accounts from leaving the organization. Ensure that your
|
2649
|
+
# account administrators are aware of this.
|
2650
2650
|
#
|
2651
|
-
# This operation can be called only from the organization's
|
2651
|
+
# This operation can be called only from the organization's management
|
2652
2652
|
# account.
|
2653
2653
|
#
|
2654
2654
|
#
|
@@ -2729,7 +2729,7 @@ module Aws::Organizations
|
|
2729
2729
|
# AWS recommends that you first use ListRoots to see the status of
|
2730
2730
|
# policy types for a specified root, and then use this operation.
|
2731
2731
|
#
|
2732
|
-
# This operation can be called only from the organization's
|
2732
|
+
# This operation can be called only from the organization's management
|
2733
2733
|
# account.
|
2734
2734
|
#
|
2735
2735
|
# You can enable a policy type in a root only if that policy type is
|
@@ -2827,12 +2827,12 @@ module Aws::Organizations
|
|
2827
2827
|
# invitation is implemented as a Handshake whose details are in the
|
2828
2828
|
# response.
|
2829
2829
|
#
|
2830
|
-
# * You can invite AWS accounts only from the same seller as the
|
2831
|
-
# account. For example, if your organization's
|
2832
|
-
# created by Amazon Internet Services Pvt. Ltd (AISPL), an
|
2833
|
-
# in India, you can invite only other AISPL accounts to
|
2834
|
-
# organization. You can't combine accounts from AISPL and AWS or
|
2835
|
-
# any other AWS seller. For more information, see [Consolidated
|
2830
|
+
# * You can invite AWS accounts only from the same seller as the
|
2831
|
+
# management account. For example, if your organization's management
|
2832
|
+
# account was created by Amazon Internet Services Pvt. Ltd (AISPL), an
|
2833
|
+
# AWS seller in India, you can invite only other AISPL accounts to
|
2834
|
+
# your organization. You can't combine accounts from AISPL and AWS or
|
2835
|
+
# from any other AWS seller. For more information, see [Consolidated
|
2836
2836
|
# Billing in India][1].
|
2837
2837
|
#
|
2838
2838
|
# * If you receive an exception that indicates that you exceeded your
|
@@ -2844,7 +2844,7 @@ module Aws::Organizations
|
|
2844
2844
|
# If the request includes tags, then the requester must have the
|
2845
2845
|
# `organizations:TagResource` permission.
|
2846
2846
|
#
|
2847
|
-
# This operation can be called only from the organization's
|
2847
|
+
# This operation can be called only from the organization's management
|
2848
2848
|
# account.
|
2849
2849
|
#
|
2850
2850
|
#
|
@@ -3008,14 +3008,14 @@ module Aws::Organizations
|
|
3008
3008
|
|
3009
3009
|
# Removes a member account from its parent organization. This version of
|
3010
3010
|
# the operation is performed by the account that wants to leave. To
|
3011
|
-
# remove a member account as a user in the
|
3011
|
+
# remove a member account as a user in the management account, use
|
3012
3012
|
# RemoveAccountFromOrganization instead.
|
3013
3013
|
#
|
3014
3014
|
# This operation can be called only from a member account in the
|
3015
3015
|
# organization.
|
3016
3016
|
#
|
3017
|
-
# * The
|
3018
|
-
# set service control policies (SCPs) that can restrict what
|
3017
|
+
# * The management account in an organization with all features enabled
|
3018
|
+
# can set service control policies (SCPs) that can restrict what
|
3019
3019
|
# administrators of member accounts can do. This includes preventing
|
3020
3020
|
# them from successfully calling `LeaveOrganization` and leaving the
|
3021
3021
|
# organization.
|
@@ -3084,7 +3084,7 @@ module Aws::Organizations
|
|
3084
3084
|
# Organizations, see [Integrating AWS Organizations with Other AWS
|
3085
3085
|
# Services][1] in the *AWS Organizations User Guide.*
|
3086
3086
|
#
|
3087
|
-
# This operation can be called only from the organization's
|
3087
|
+
# This operation can be called only from the organization's management
|
3088
3088
|
# account or by a member account that is a delegated administrator for
|
3089
3089
|
# an AWS service.
|
3090
3090
|
#
|
@@ -3153,7 +3153,7 @@ module Aws::Organizations
|
|
3153
3153
|
#
|
3154
3154
|
# </note>
|
3155
3155
|
#
|
3156
|
-
# This operation can be called only from the organization's
|
3156
|
+
# This operation can be called only from the organization's management
|
3157
3157
|
# account or by a member account that is a delegated administrator for
|
3158
3158
|
# an AWS service.
|
3159
3159
|
#
|
@@ -3276,7 +3276,7 @@ module Aws::Organizations
|
|
3276
3276
|
#
|
3277
3277
|
# </note>
|
3278
3278
|
#
|
3279
|
-
# This operation can be called only from the organization's
|
3279
|
+
# This operation can be called only from the organization's management
|
3280
3280
|
# account or by a member account that is a delegated administrator for
|
3281
3281
|
# an AWS service.
|
3282
3282
|
#
|
@@ -3385,7 +3385,7 @@ module Aws::Organizations
|
|
3385
3385
|
#
|
3386
3386
|
# </note>
|
3387
3387
|
#
|
3388
|
-
# This operation can be called only from the organization's
|
3388
|
+
# This operation can be called only from the organization's management
|
3389
3389
|
# account or by a member account that is a delegated administrator for
|
3390
3390
|
# an AWS service.
|
3391
3391
|
#
|
@@ -3497,7 +3497,7 @@ module Aws::Organizations
|
|
3497
3497
|
#
|
3498
3498
|
# </note>
|
3499
3499
|
#
|
3500
|
-
# This operation can be called only from the organization's
|
3500
|
+
# This operation can be called only from the organization's management
|
3501
3501
|
# account or by a member account that is a delegated administrator for
|
3502
3502
|
# an AWS service.
|
3503
3503
|
#
|
@@ -3614,7 +3614,7 @@ module Aws::Organizations
|
|
3614
3614
|
# Lists the AWS accounts that are designated as delegated administrators
|
3615
3615
|
# in this organization.
|
3616
3616
|
#
|
3617
|
-
# This operation can be called only from the organization's
|
3617
|
+
# This operation can be called only from the organization's management
|
3618
3618
|
# account or by a member account that is a delegated administrator for
|
3619
3619
|
# an AWS service.
|
3620
3620
|
#
|
@@ -3684,7 +3684,7 @@ module Aws::Organizations
|
|
3684
3684
|
# List the AWS services for which the specified account is a delegated
|
3685
3685
|
# administrator.
|
3686
3686
|
#
|
3687
|
-
# This operation can be called only from the organization's
|
3687
|
+
# This operation can be called only from the organization's management
|
3688
3688
|
# account or by a member account that is a delegated administrator for
|
3689
3689
|
# an AWS service.
|
3690
3690
|
#
|
@@ -3906,7 +3906,7 @@ module Aws::Organizations
|
|
3906
3906
|
#
|
3907
3907
|
# </note>
|
3908
3908
|
#
|
3909
|
-
# This operation can be called only from the organization's
|
3909
|
+
# This operation can be called only from the organization's management
|
3910
3910
|
# account or by a member account that is a delegated administrator for
|
3911
3911
|
# an AWS service.
|
3912
3912
|
#
|
@@ -4092,7 +4092,7 @@ module Aws::Organizations
|
|
4092
4092
|
#
|
4093
4093
|
# </note>
|
4094
4094
|
#
|
4095
|
-
# This operation can be called only from the organization's
|
4095
|
+
# This operation can be called only from the organization's management
|
4096
4096
|
# account or by a member account that is a delegated administrator for
|
4097
4097
|
# an AWS service.
|
4098
4098
|
#
|
@@ -4204,7 +4204,7 @@ module Aws::Organizations
|
|
4204
4204
|
#
|
4205
4205
|
# </note>
|
4206
4206
|
#
|
4207
|
-
# This operation can be called only from the organization's
|
4207
|
+
# This operation can be called only from the organization's management
|
4208
4208
|
# account or by a member account that is a delegated administrator for
|
4209
4209
|
# an AWS service.
|
4210
4210
|
#
|
@@ -4310,7 +4310,7 @@ module Aws::Organizations
|
|
4310
4310
|
#
|
4311
4311
|
# </note>
|
4312
4312
|
#
|
4313
|
-
# This operation can be called only from the organization's
|
4313
|
+
# This operation can be called only from the organization's management
|
4314
4314
|
# account or by a member account that is a delegated administrator for
|
4315
4315
|
# an AWS service.
|
4316
4316
|
#
|
@@ -4438,7 +4438,7 @@ module Aws::Organizations
|
|
4438
4438
|
#
|
4439
4439
|
# </note>
|
4440
4440
|
#
|
4441
|
-
# This operation can be called only from the organization's
|
4441
|
+
# This operation can be called only from the organization's management
|
4442
4442
|
# account or by a member account that is a delegated administrator for
|
4443
4443
|
# an AWS service.
|
4444
4444
|
#
|
@@ -4573,7 +4573,7 @@ module Aws::Organizations
|
|
4573
4573
|
#
|
4574
4574
|
# </note>
|
4575
4575
|
#
|
4576
|
-
# This operation can be called only from the organization's
|
4576
|
+
# This operation can be called only from the organization's management
|
4577
4577
|
# account or by a member account that is a delegated administrator for
|
4578
4578
|
# an AWS service.
|
4579
4579
|
#
|
@@ -4676,7 +4676,7 @@ module Aws::Organizations
|
|
4676
4676
|
#
|
4677
4677
|
# * Policy (any type)
|
4678
4678
|
#
|
4679
|
-
# This operation can be called only from the organization's
|
4679
|
+
# This operation can be called only from the organization's management
|
4680
4680
|
# account or by a member account that is a delegated administrator for
|
4681
4681
|
# an AWS service.
|
4682
4682
|
#
|
@@ -4744,7 +4744,7 @@ module Aws::Organizations
|
|
4744
4744
|
#
|
4745
4745
|
# </note>
|
4746
4746
|
#
|
4747
|
-
# This operation can be called only from the organization's
|
4747
|
+
# This operation can be called only from the organization's management
|
4748
4748
|
# account or by a member account that is a delegated administrator for
|
4749
4749
|
# an AWS service.
|
4750
4750
|
#
|
@@ -4849,7 +4849,7 @@ module Aws::Organizations
|
|
4849
4849
|
# Moves an account from its current source parent root or organizational
|
4850
4850
|
# unit (OU) to the specified destination parent root or OU.
|
4851
4851
|
#
|
4852
|
-
# This operation can be called only from the organization's
|
4852
|
+
# This operation can be called only from the organization's management
|
4853
4853
|
# account.
|
4854
4854
|
#
|
4855
4855
|
# @option params [required, String] :account_id
|
@@ -4941,7 +4941,7 @@ module Aws::Organizations
|
|
4941
4941
|
# Services that you can use with AWS Organizations][1] in the *AWS
|
4942
4942
|
# Organizations User Guide.*
|
4943
4943
|
#
|
4944
|
-
# This operation can be called only from the organization's
|
4944
|
+
# This operation can be called only from the organization's management
|
4945
4945
|
# account.
|
4946
4946
|
#
|
4947
4947
|
#
|
@@ -4978,11 +4978,11 @@ module Aws::Organizations
|
|
4978
4978
|
#
|
4979
4979
|
# The removed account becomes a standalone account that isn't a member
|
4980
4980
|
# of any organization. It's no longer subject to any policies and is
|
4981
|
-
# responsible for its own bill payments. The organization's
|
4981
|
+
# responsible for its own bill payments. The organization's management
|
4982
4982
|
# account is no longer charged for any expenses accrued by the member
|
4983
4983
|
# account after it's removed from the organization.
|
4984
4984
|
#
|
4985
|
-
# This operation can be called only from the organization's
|
4985
|
+
# This operation can be called only from the organization's management
|
4986
4986
|
# account. Member accounts can remove themselves with LeaveOrganization
|
4987
4987
|
# instead.
|
4988
4988
|
#
|
@@ -5060,7 +5060,7 @@ module Aws::Organizations
|
|
5060
5060
|
#
|
5061
5061
|
# * Policy (any type)
|
5062
5062
|
#
|
5063
|
-
# This operation can be called only from the organization's
|
5063
|
+
# This operation can be called only from the organization's management
|
5064
5064
|
# account.
|
5065
5065
|
#
|
5066
5066
|
# @option params [required, String] :resource_id
|
@@ -5127,7 +5127,7 @@ module Aws::Organizations
|
|
5127
5127
|
#
|
5128
5128
|
# * Policy (any type)
|
5129
5129
|
#
|
5130
|
-
# This operation can be called only from the organization's
|
5130
|
+
# This operation can be called only from the organization's management
|
5131
5131
|
# account.
|
5132
5132
|
#
|
5133
5133
|
# @option params [required, String] :resource_id
|
@@ -5171,7 +5171,7 @@ module Aws::Organizations
|
|
5171
5171
|
# change. The child OUs and accounts remain in place, and any attached
|
5172
5172
|
# policies of the OU remain attached.
|
5173
5173
|
#
|
5174
|
-
# This operation can be called only from the organization's
|
5174
|
+
# This operation can be called only from the organization's management
|
5175
5175
|
# account.
|
5176
5176
|
#
|
5177
5177
|
# @option params [required, String] :organizational_unit_id
|
@@ -5246,7 +5246,7 @@ module Aws::Organizations
|
|
5246
5246
|
# If you don't supply any parameter, that value remains unchanged. You
|
5247
5247
|
# can't change a policy's type.
|
5248
5248
|
#
|
5249
|
-
# This operation can be called only from the organization's
|
5249
|
+
# This operation can be called only from the organization's management
|
5250
5250
|
# account.
|
5251
5251
|
#
|
5252
5252
|
# @option params [required, String] :policy_id
|
@@ -5380,7 +5380,7 @@ module Aws::Organizations
|
|
5380
5380
|
params: params,
|
5381
5381
|
config: config)
|
5382
5382
|
context[:gem_name] = 'aws-sdk-organizations'
|
5383
|
-
context[:gem_version] = '1.
|
5383
|
+
context[:gem_version] = '1.54.0'
|
5384
5384
|
Seahorse::Client::Request.new(handlers, context)
|
5385
5385
|
end
|
5386
5386
|
|
@@ -221,7 +221,7 @@ module Aws::Organizations
|
|
221
221
|
end
|
222
222
|
|
223
223
|
# You can't invite an existing account to your organization until you
|
224
|
-
# verify that you own the email address associated with the
|
224
|
+
# verify that you own the email address associated with the management
|
225
225
|
# account. For more information, see [Email Address Verification][1] in
|
226
226
|
# the *AWS Organizations User Guide.*
|
227
227
|
#
|
@@ -425,9 +425,9 @@ module Aws::Organizations
|
|
425
425
|
# </note>
|
426
426
|
#
|
427
427
|
# * ACCOUNT\_CANNOT\_LEAVE\_ORGANIZAION: You attempted to remove the
|
428
|
-
#
|
429
|
-
# account. Instead, after you remove all member accounts,
|
430
|
-
# organization itself.
|
428
|
+
# management account from the organization. You can't remove the
|
429
|
+
# management account. Instead, after you remove all member accounts,
|
430
|
+
# delete the organization itself.
|
431
431
|
#
|
432
432
|
# * ACCOUNT\_CANNOT\_LEAVE\_WITHOUT\_EULA: You attempted to remove an
|
433
433
|
# account from the organization that doesn't yet have enough
|
@@ -466,8 +466,8 @@ module Aws::Organizations
|
|
466
466
|
# Support][2].
|
467
467
|
#
|
468
468
|
# * CANNOT\_REGISTER\_MASTER\_AS\_DELEGATED\_ADMINISTRATOR: You
|
469
|
-
# attempted to register the
|
470
|
-
# delegated administrator for an AWS service integrated with
|
469
|
+
# attempted to register the management account of the organization as
|
470
|
+
# a delegated administrator for an AWS service integrated with
|
471
471
|
# Organizations. You can designate only a member account as a
|
472
472
|
# delegated administrator.
|
473
473
|
#
|
@@ -496,11 +496,11 @@ module Aws::Organizations
|
|
496
496
|
#
|
497
497
|
# * MASTER\_ACCOUNT\_ADDRESS\_DOES\_NOT\_MATCH\_MARKETPLACE: To create
|
498
498
|
# an account in this organization, you first must migrate the
|
499
|
-
# organization's
|
500
|
-
# to the
|
501
|
-
# addresses must be associated with the AISPL
|
502
|
-
# accounts in an organization must be associated with
|
503
|
-
# marketplace.
|
499
|
+
# organization's management account to the marketplace that
|
500
|
+
# corresponds to the management account's address. For example,
|
501
|
+
# accounts with India addresses must be associated with the AISPL
|
502
|
+
# marketplace. All accounts in an organization must be associated with
|
503
|
+
# the same marketplace.
|
504
504
|
#
|
505
505
|
# * MASTER\_ACCOUNT\_MISSING\_BUSINESS\_LICENSE: Applies only to the AWS
|
506
506
|
# Regions in China. To create an organization, the master must have an
|
@@ -509,16 +509,16 @@ module Aws::Organizations
|
|
509
509
|
#
|
510
510
|
# * MASTER\_ACCOUNT\_MISSING\_CONTACT\_INFO: To complete this operation,
|
511
511
|
# you must first provide a valid contact address and phone number for
|
512
|
-
# the
|
512
|
+
# the management account. Then try the operation again.
|
513
513
|
#
|
514
514
|
# * MASTER\_ACCOUNT\_NOT\_GOVCLOUD\_ENABLED: To complete this operation,
|
515
|
-
# the
|
515
|
+
# the management account must have an associated account in the AWS
|
516
516
|
# GovCloud (US-West) Region. For more information, see [AWS
|
517
517
|
# Organizations][3] in the *AWS GovCloud User Guide.*
|
518
518
|
#
|
519
519
|
# * MASTER\_ACCOUNT\_PAYMENT\_INSTRUMENT\_REQUIRED: To create an
|
520
|
-
# organization with this
|
521
|
-
# valid payment instrument, such as a credit card, with the account.
|
520
|
+
# organization with this management account, you first must associate
|
521
|
+
# a valid payment instrument, such as a credit card, with the account.
|
522
522
|
# Follow the steps at [To leave an organization when all required
|
523
523
|
# account information has not yet been provided][4] in the *AWS
|
524
524
|
# Organizations User Guide.*
|
@@ -621,10 +621,11 @@ module Aws::Organizations
|
|
621
621
|
# (Optional)
|
622
622
|
#
|
623
623
|
# The name of an IAM role that AWS Organizations automatically
|
624
|
-
# preconfigures in the new member account. This role trusts the
|
625
|
-
# account, allowing users in the
|
626
|
-
# permitted by the
|
627
|
-
# administrator permissions in the new
|
624
|
+
# preconfigures in the new member account. This role trusts the
|
625
|
+
# management account, allowing users in the management account to
|
626
|
+
# assume the role, as permitted by the management account
|
627
|
+
# administrator. The role has administrator permissions in the new
|
628
|
+
# member account.
|
628
629
|
#
|
629
630
|
# If you don't specify this parameter, the role name defaults to
|
630
631
|
# `OrganizationAccountAccessRole`.
|
@@ -803,7 +804,7 @@ module Aws::Organizations
|
|
803
804
|
# * MISSING\_BUSINESS\_VALIDATION: The AWS account that owns your
|
804
805
|
# organization has not received Business Validation.
|
805
806
|
#
|
806
|
-
# * MISSING\_PAYMENT\_INSTRUMENT: You must configure the
|
807
|
+
# * MISSING\_PAYMENT\_INSTRUMENT: You must configure the management
|
807
808
|
# account with a valid payment method, such as a credit card.
|
808
809
|
# @return [String]
|
809
810
|
#
|
@@ -874,9 +875,10 @@ module Aws::Organizations
|
|
874
875
|
# The name of an IAM role that AWS Organizations automatically
|
875
876
|
# preconfigures in the new member accounts in both the AWS GovCloud
|
876
877
|
# (US) Region and in the commercial Region. This role trusts the
|
877
|
-
#
|
878
|
-
# role, as permitted by the
|
879
|
-
# administrator permissions in the new
|
878
|
+
# management account, allowing users in the management account to
|
879
|
+
# assume the role, as permitted by the management account
|
880
|
+
# administrator. The role has administrator permissions in the new
|
881
|
+
# member account.
|
880
882
|
#
|
881
883
|
# If you don't specify this parameter, the role name defaults to
|
882
884
|
# `OrganizationAccountAccessRole`.
|
@@ -977,7 +979,7 @@ module Aws::Organizations
|
|
977
979
|
# feature set supports different levels of functionality.
|
978
980
|
#
|
979
981
|
# * `CONSOLIDATED_BILLING`\: All member accounts have their bills
|
980
|
-
# consolidated to and paid by the
|
982
|
+
# consolidated to and paid by the management account. For more
|
981
983
|
# information, see [Consolidated billing][1] in the *AWS
|
982
984
|
# Organizations User Guide.*
|
983
985
|
#
|
@@ -985,7 +987,7 @@ module Aws::Organizations
|
|
985
987
|
# organizations in the AWS GovCloud (US) Region.
|
986
988
|
#
|
987
989
|
# * `ALL`\: In addition to all the features supported by the
|
988
|
-
# consolidated billing feature set, the
|
990
|
+
# consolidated billing feature set, the management account can also
|
989
991
|
# apply any policy type to any member account in the organization.
|
990
992
|
# For more information, see [All features][2] in the *AWS
|
991
993
|
# Organizations User Guide.*
|
@@ -1516,9 +1518,9 @@ module Aws::Organizations
|
|
1516
1518
|
# @return [String]
|
1517
1519
|
#
|
1518
1520
|
# @!attribute [rw] target_id
|
1519
|
-
# When you're signed in as the
|
1520
|
-
# account that you want details about. Specifying an organization
|
1521
|
-
# or organizational unit (OU) as the target is not supported.
|
1521
|
+
# When you're signed in as the management account, specify the ID of
|
1522
|
+
# the account that you want details about. Specifying an organization
|
1523
|
+
# root or organizational unit (OU) as the target is not supported.
|
1522
1524
|
# @return [String]
|
1523
1525
|
#
|
1524
1526
|
# @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/DescribeEffectivePolicyRequest AWS API Documentation
|
@@ -1938,8 +1940,8 @@ module Aws::Organizations
|
|
1938
1940
|
include Aws::Structure
|
1939
1941
|
end
|
1940
1942
|
|
1941
|
-
# If you ran this action on the
|
1942
|
-
# enabled. If you ran the action on a member account, the account
|
1943
|
+
# If you ran this action on the management account, this policy type is
|
1944
|
+
# not enabled. If you ran the action on a member account, the account
|
1943
1945
|
# doesn't have an effective policy of this type. Contact the
|
1944
1946
|
# administrator of your organization about attaching a policy of this
|
1945
1947
|
# type to the account.
|
@@ -2102,9 +2104,10 @@ module Aws::Organizations
|
|
2102
2104
|
|
2103
2105
|
# Contains information that must be exchanged to securely establish a
|
2104
2106
|
# relationship between two accounts (an *originator* and a *recipient*).
|
2105
|
-
# For example, when a
|
2106
|
-
# account (the recipient) to join its organization, the two
|
2107
|
-
# exchange information as a series of handshake requests and
|
2107
|
+
# For example, when a management account (the originator) invites
|
2108
|
+
# another account (the recipient) to join its organization, the two
|
2109
|
+
# accounts exchange information as a series of handshake requests and
|
2110
|
+
# responses.
|
2108
2111
|
#
|
2109
2112
|
# **Note:** Handshakes that are CANCELED, ACCEPTED, or DECLINED show up
|
2110
2113
|
# in lists for only 30 days after entering that state After that they
|
@@ -2184,20 +2187,20 @@ module Aws::Organizations
|
|
2184
2187
|
# supported:
|
2185
2188
|
#
|
2186
2189
|
# * **INVITE**\: This type of handshake represents a request to join
|
2187
|
-
# an organization. It is always sent from the
|
2188
|
-
# non-member accounts.
|
2190
|
+
# an organization. It is always sent from the management account to
|
2191
|
+
# only non-member accounts.
|
2189
2192
|
#
|
2190
2193
|
# * **ENABLE\_ALL\_FEATURES**\: This type of handshake represents a
|
2191
2194
|
# request to enable all features in an organization. It is always
|
2192
|
-
# sent from the
|
2193
|
-
# Created accounts do not receive this because those
|
2194
|
-
# created by the organization's
|
2195
|
-
# inferred.
|
2195
|
+
# sent from the management account to only *invited* member
|
2196
|
+
# accounts. Created accounts do not receive this because those
|
2197
|
+
# accounts were created by the organization's management account
|
2198
|
+
# and approval is inferred.
|
2196
2199
|
#
|
2197
2200
|
# * **APPROVE\_ALL\_FEATURES**\: This type of handshake is sent from
|
2198
2201
|
# the Organizations service when all member accounts have approved
|
2199
2202
|
# the `ENABLE_ALL_FEATURES` invitation. It is sent only to the
|
2200
|
-
#
|
2203
|
+
# management account and signals the master that it can finalize the
|
2201
2204
|
# process to enable all features.
|
2202
2205
|
# @return [String]
|
2203
2206
|
#
|
@@ -2406,9 +2409,9 @@ module Aws::Organizations
|
|
2406
2409
|
# account that receives the handshake.
|
2407
2410
|
#
|
2408
2411
|
# * `OWNER_EMAIL` - Specifies the email address associated with the
|
2409
|
-
#
|
2412
|
+
# management account. Included as information about an organization.
|
2410
2413
|
#
|
2411
|
-
# * `OWNER_NAME` - Specifies the name associated with the
|
2414
|
+
# * `OWNER_NAME` - Specifies the name associated with the management
|
2412
2415
|
# account. Included as information about an organization.
|
2413
2416
|
#
|
2414
2417
|
# * `NOTES` - Additional text provided by the handshake initiator and
|
@@ -3830,9 +3833,10 @@ module Aws::Organizations
|
|
3830
3833
|
include Aws::Structure
|
3831
3834
|
end
|
3832
3835
|
|
3833
|
-
# You can't remove a
|
3834
|
-
# the
|
3835
|
-
# you must first delete the current organization of the
|
3836
|
+
# You can't remove a management account from an organization. If you
|
3837
|
+
# want the management account to become a member account in another
|
3838
|
+
# organization, you must first delete the current organization of the
|
3839
|
+
# management account.
|
3836
3840
|
#
|
3837
3841
|
# @!attribute [rw] message
|
3838
3842
|
# @return [String]
|
@@ -3961,7 +3965,7 @@ module Aws::Organizations
|
|
3961
3965
|
#
|
3962
3966
|
# @!attribute [rw] master_account_arn
|
3963
3967
|
# The Amazon Resource Name (ARN) of the account that is designated as
|
3964
|
-
# the
|
3968
|
+
# the management account for the organization.
|
3965
3969
|
#
|
3966
3970
|
# For more information about ARNs in Organizations, see [ARN Formats
|
3967
3971
|
# Supported by Organizations][1] in the *AWS Organizations User
|
@@ -3973,7 +3977,8 @@ module Aws::Organizations
|
|
3973
3977
|
# @return [String]
|
3974
3978
|
#
|
3975
3979
|
# @!attribute [rw] master_account_id
|
3976
|
-
# The unique identifier (ID) of the
|
3980
|
+
# The unique identifier (ID) of the management account of an
|
3981
|
+
# organization.
|
3977
3982
|
#
|
3978
3983
|
# The [regex pattern][1] for an account ID string requires exactly 12
|
3979
3984
|
# digits.
|
@@ -3985,7 +3990,7 @@ module Aws::Organizations
|
|
3985
3990
|
#
|
3986
3991
|
# @!attribute [rw] master_account_email
|
3987
3992
|
# The email address that is associated with the AWS account that is
|
3988
|
-
# designated as the
|
3993
|
+
# designated as the management account for the organization.
|
3989
3994
|
# @return [String]
|
3990
3995
|
#
|
3991
3996
|
# @!attribute [rw] available_policy_types
|
@@ -4011,8 +4016,8 @@ module Aws::Organizations
|
|
4011
4016
|
end
|
4012
4017
|
|
4013
4018
|
# The organization isn't empty. To delete an organization, you must
|
4014
|
-
# first remove all accounts except the
|
4015
|
-
# and delete all policies.
|
4019
|
+
# first remove all accounts except the management account, delete all
|
4020
|
+
# OUs, and delete all policies.
|
4016
4021
|
#
|
4017
4022
|
# @!attribute [rw] message
|
4018
4023
|
# @return [String]
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-organizations
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.54.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2020-10-
|
11
|
+
date: 2020-10-21 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|