aws-sdk-organizations 1.53.0 → 1.58.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -3,7 +3,7 @@
3
3
  # WARNING ABOUT GENERATED CODE
4
4
  #
5
5
  # This file is generated. See the contributing guide for more information:
6
- # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
6
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
7
7
  #
8
8
  # WARNING ABOUT GENERATED CODE
9
9
 
@@ -121,12 +121,12 @@ module Aws::Organizations
121
121
  # The Amazon Resource Name (ARN) of the account.
122
122
  #
123
123
  # For more information about ARNs in Organizations, see [ARN Formats
124
- # Supported by Organizations][1] in the *AWS Organizations User
125
- # Guide*.
124
+ # Supported by Organizations][1] in the *AWS Service Authorization
125
+ # Reference*.
126
126
  #
127
127
  #
128
128
  #
129
- # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns
129
+ # [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies
130
130
  # @return [String]
131
131
  #
132
132
  # @!attribute [rw] email
@@ -221,7 +221,7 @@ module Aws::Organizations
221
221
  end
222
222
 
223
223
  # You can't invite an existing account to your organization until you
224
- # verify that you own the email address associated with the master
224
+ # verify that you own the email address associated with the management
225
225
  # account. For more information, see [Email Address Verification][1] in
226
226
  # the *AWS Organizations User Guide.*
227
227
  #
@@ -425,9 +425,9 @@ module Aws::Organizations
425
425
  # </note>
426
426
  #
427
427
  # * ACCOUNT\_CANNOT\_LEAVE\_ORGANIZAION: You attempted to remove the
428
- # master account from the organization. You can't remove the master
429
- # account. Instead, after you remove all member accounts, delete the
430
- # organization itself.
428
+ # management account from the organization. You can't remove the
429
+ # management account. Instead, after you remove all member accounts,
430
+ # delete the organization itself.
431
431
  #
432
432
  # * ACCOUNT\_CANNOT\_LEAVE\_WITHOUT\_EULA: You attempted to remove an
433
433
  # account from the organization that doesn't yet have enough
@@ -466,8 +466,8 @@ module Aws::Organizations
466
466
  # Support][2].
467
467
  #
468
468
  # * CANNOT\_REGISTER\_MASTER\_AS\_DELEGATED\_ADMINISTRATOR: You
469
- # attempted to register the master account of the organization as a
470
- # delegated administrator for an AWS service integrated with
469
+ # attempted to register the management account of the organization as
470
+ # a delegated administrator for an AWS service integrated with
471
471
  # Organizations. You can designate only a member account as a
472
472
  # delegated administrator.
473
473
  #
@@ -496,11 +496,11 @@ module Aws::Organizations
496
496
  #
497
497
  # * MASTER\_ACCOUNT\_ADDRESS\_DOES\_NOT\_MATCH\_MARKETPLACE: To create
498
498
  # an account in this organization, you first must migrate the
499
- # organization's master account to the marketplace that corresponds
500
- # to the master account's address. For example, accounts with India
501
- # addresses must be associated with the AISPL marketplace. All
502
- # accounts in an organization must be associated with the same
503
- # marketplace.
499
+ # organization's management account to the marketplace that
500
+ # corresponds to the management account's address. For example,
501
+ # accounts with India addresses must be associated with the AISPL
502
+ # marketplace. All accounts in an organization must be associated with
503
+ # the same marketplace.
504
504
  #
505
505
  # * MASTER\_ACCOUNT\_MISSING\_BUSINESS\_LICENSE: Applies only to the AWS
506
506
  # Regions in China. To create an organization, the master must have an
@@ -509,16 +509,16 @@ module Aws::Organizations
509
509
  #
510
510
  # * MASTER\_ACCOUNT\_MISSING\_CONTACT\_INFO: To complete this operation,
511
511
  # you must first provide a valid contact address and phone number for
512
- # the master account. Then try the operation again.
512
+ # the management account. Then try the operation again.
513
513
  #
514
514
  # * MASTER\_ACCOUNT\_NOT\_GOVCLOUD\_ENABLED: To complete this operation,
515
- # the master account must have an associated account in the AWS
515
+ # the management account must have an associated account in the AWS
516
516
  # GovCloud (US-West) Region. For more information, see [AWS
517
517
  # Organizations][3] in the *AWS GovCloud User Guide.*
518
518
  #
519
519
  # * MASTER\_ACCOUNT\_PAYMENT\_INSTRUMENT\_REQUIRED: To create an
520
- # organization with this master account, you first must associate a
521
- # valid payment instrument, such as a credit card, with the account.
520
+ # organization with this management account, you first must associate
521
+ # a valid payment instrument, such as a credit card, with the account.
522
522
  # Follow the steps at [To leave an organization when all required
523
523
  # account information has not yet been provided][4] in the *AWS
524
524
  # Organizations User Guide.*
@@ -621,10 +621,11 @@ module Aws::Organizations
621
621
  # (Optional)
622
622
  #
623
623
  # The name of an IAM role that AWS Organizations automatically
624
- # preconfigures in the new member account. This role trusts the master
625
- # account, allowing users in the master account to assume the role, as
626
- # permitted by the master account administrator. The role has
627
- # administrator permissions in the new member account.
624
+ # preconfigures in the new member account. This role trusts the
625
+ # management account, allowing users in the management account to
626
+ # assume the role, as permitted by the management account
627
+ # administrator. The role has administrator permissions in the new
628
+ # member account.
628
629
  #
629
630
  # If you don't specify this parameter, the role name defaults to
630
631
  # `OrganizationAccountAccessRole`.
@@ -786,10 +787,17 @@ module Aws::Organizations
786
787
  # * EMAIL\_ALREADY\_EXISTS: The account could not be created because
787
788
  # another AWS account with that email address already exists.
788
789
  #
790
+ # * FAILED\_BUSINESS\_VALIDATION: The AWS account that owns your
791
+ # organization failed to receive business license validation.
792
+ #
789
793
  # * GOVCLOUD\_ACCOUNT\_ALREADY\_EXISTS: The account in the AWS
790
794
  # GovCloud (US) Region could not be created because this Region
791
795
  # already includes an account with that email address.
792
796
  #
797
+ # * IDENTITY\_INVALID\_BUSINESS\_VALIDATION: The AWS account that owns
798
+ # your organization can't complete business license validation
799
+ # because it doesn't have valid identity data.
800
+ #
793
801
  # * INVALID\_ADDRESS: The account could not be created because the
794
802
  # address you provided is not valid.
795
803
  #
@@ -803,8 +811,16 @@ module Aws::Organizations
803
811
  # * MISSING\_BUSINESS\_VALIDATION: The AWS account that owns your
804
812
  # organization has not received Business Validation.
805
813
  #
806
- # * MISSING\_PAYMENT\_INSTRUMENT: You must configure the master
814
+ # * MISSING\_PAYMENT\_INSTRUMENT: You must configure the management
807
815
  # account with a valid payment method, such as a credit card.
816
+ #
817
+ # * PENDING\_BUSINESS\_VALIDATION: The AWS account that owns your
818
+ # organization is still in the process of completing business
819
+ # license validation.
820
+ #
821
+ # * UNKNOWN\_BUSINESS\_VALIDATION: The AWS account that owns your
822
+ # organization has an unknown issue with business license
823
+ # validation.
808
824
  # @return [String]
809
825
  #
810
826
  # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/CreateAccountStatus AWS API Documentation
@@ -874,9 +890,10 @@ module Aws::Organizations
874
890
  # The name of an IAM role that AWS Organizations automatically
875
891
  # preconfigures in the new member accounts in both the AWS GovCloud
876
892
  # (US) Region and in the commercial Region. This role trusts the
877
- # master account, allowing users in the master account to assume the
878
- # role, as permitted by the master account administrator. The role has
879
- # administrator permissions in the new member account.
893
+ # management account, allowing users in the management account to
894
+ # assume the role, as permitted by the management account
895
+ # administrator. The role has administrator permissions in the new
896
+ # member account.
880
897
  #
881
898
  # If you don't specify this parameter, the role name defaults to
882
899
  # `OrganizationAccountAccessRole`.
@@ -977,7 +994,7 @@ module Aws::Organizations
977
994
  # feature set supports different levels of functionality.
978
995
  #
979
996
  # * `CONSOLIDATED_BILLING`\: All member accounts have their bills
980
- # consolidated to and paid by the master account. For more
997
+ # consolidated to and paid by the management account. For more
981
998
  # information, see [Consolidated billing][1] in the *AWS
982
999
  # Organizations User Guide.*
983
1000
  #
@@ -985,7 +1002,7 @@ module Aws::Organizations
985
1002
  # organizations in the AWS GovCloud (US) Region.
986
1003
  #
987
1004
  # * `ALL`\: In addition to all the features supported by the
988
- # consolidated billing feature set, the master account can also
1005
+ # consolidated billing feature set, the management account can also
989
1006
  # apply any policy type to any member account in the organization.
990
1007
  # For more information, see [All features][2] in the *AWS
991
1008
  # Organizations User Guide.*
@@ -1516,9 +1533,9 @@ module Aws::Organizations
1516
1533
  # @return [String]
1517
1534
  #
1518
1535
  # @!attribute [rw] target_id
1519
- # When you're signed in as the master account, specify the ID of the
1520
- # account that you want details about. Specifying an organization root
1521
- # or organizational unit (OU) as the target is not supported.
1536
+ # When you're signed in as the management account, specify the ID of
1537
+ # the account that you want details about. Specifying an organization
1538
+ # root or organizational unit (OU) as the target is not supported.
1522
1539
  # @return [String]
1523
1540
  #
1524
1541
  # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/DescribeEffectivePolicyRequest AWS API Documentation
@@ -1938,8 +1955,8 @@ module Aws::Organizations
1938
1955
  include Aws::Structure
1939
1956
  end
1940
1957
 
1941
- # If you ran this action on the master account, this policy type is not
1942
- # enabled. If you ran the action on a member account, the account
1958
+ # If you ran this action on the management account, this policy type is
1959
+ # not enabled. If you ran the action on a member account, the account
1943
1960
  # doesn't have an effective policy of this type. Contact the
1944
1961
  # administrator of your organization about attaching a policy of this
1945
1962
  # type to the account.
@@ -2102,9 +2119,10 @@ module Aws::Organizations
2102
2119
 
2103
2120
  # Contains information that must be exchanged to securely establish a
2104
2121
  # relationship between two accounts (an *originator* and a *recipient*).
2105
- # For example, when a master account (the originator) invites another
2106
- # account (the recipient) to join its organization, the two accounts
2107
- # exchange information as a series of handshake requests and responses.
2122
+ # For example, when a management account (the originator) invites
2123
+ # another account (the recipient) to join its organization, the two
2124
+ # accounts exchange information as a series of handshake requests and
2125
+ # responses.
2108
2126
  #
2109
2127
  # **Note:** Handshakes that are CANCELED, ACCEPTED, or DECLINED show up
2110
2128
  # in lists for only 30 days after entering that state After that they
@@ -2126,12 +2144,12 @@ module Aws::Organizations
2126
2144
  # The Amazon Resource Name (ARN) of a handshake.
2127
2145
  #
2128
2146
  # For more information about ARNs in Organizations, see [ARN Formats
2129
- # Supported by Organizations][1] in the *AWS Organizations User
2130
- # Guide*.
2147
+ # Supported by Organizations][1] in the *AWS Service Authorization
2148
+ # Reference*.
2131
2149
  #
2132
2150
  #
2133
2151
  #
2134
- # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns
2152
+ # [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies
2135
2153
  # @return [String]
2136
2154
  #
2137
2155
  # @!attribute [rw] parties
@@ -2184,20 +2202,20 @@ module Aws::Organizations
2184
2202
  # supported:
2185
2203
  #
2186
2204
  # * **INVITE**\: This type of handshake represents a request to join
2187
- # an organization. It is always sent from the master account to only
2188
- # non-member accounts.
2205
+ # an organization. It is always sent from the management account to
2206
+ # only non-member accounts.
2189
2207
  #
2190
2208
  # * **ENABLE\_ALL\_FEATURES**\: This type of handshake represents a
2191
2209
  # request to enable all features in an organization. It is always
2192
- # sent from the master account to only *invited* member accounts.
2193
- # Created accounts do not receive this because those accounts were
2194
- # created by the organization's master account and approval is
2195
- # inferred.
2210
+ # sent from the management account to only *invited* member
2211
+ # accounts. Created accounts do not receive this because those
2212
+ # accounts were created by the organization's management account
2213
+ # and approval is inferred.
2196
2214
  #
2197
2215
  # * **APPROVE\_ALL\_FEATURES**\: This type of handshake is sent from
2198
2216
  # the Organizations service when all member accounts have approved
2199
2217
  # the `ENABLE_ALL_FEATURES` invitation. It is sent only to the
2200
- # master account and signals the master that it can finalize the
2218
+ # management account and signals the master that it can finalize the
2201
2219
  # process to enable all features.
2202
2220
  # @return [String]
2203
2221
  #
@@ -2264,6 +2282,10 @@ module Aws::Organizations
2264
2282
  # * ORGANIZATION\_ALREADY\_HAS\_ALL\_FEATURES: The handshake request is
2265
2283
  # invalid because the organization has already enabled all features.
2266
2284
  #
2285
+ # * ORGANIZATION\_IS\_ALREADY\_PENDING\_ALL\_FEATURES\_MIGRATION: The
2286
+ # handshake request is invalid because the organization has already
2287
+ # started the process to enable all features.
2288
+ #
2267
2289
  # * ORGANIZATION\_FROM\_DIFFERENT\_SELLER\_OF\_RECORD: The request
2268
2290
  # failed because the account is from a different marketplace than the
2269
2291
  # accounts in the organization. For example, accounts with India
@@ -2406,9 +2428,9 @@ module Aws::Organizations
2406
2428
  # account that receives the handshake.
2407
2429
  #
2408
2430
  # * `OWNER_EMAIL` - Specifies the email address associated with the
2409
- # master account. Included as information about an organization.
2431
+ # management account. Included as information about an organization.
2410
2432
  #
2411
- # * `OWNER_NAME` - Specifies the name associated with the master
2433
+ # * `OWNER_NAME` - Specifies the name associated with the management
2412
2434
  # account. Included as information about an organization.
2413
2435
  #
2414
2436
  # * `NOTES` - Additional text provided by the handshake initiator and
@@ -2463,6 +2485,9 @@ module Aws::Organizations
2463
2485
  # * INPUT\_REQUIRED: You must include a value for all required
2464
2486
  # parameters.
2465
2487
  #
2488
+ # * INVALID\_EMAIL\_ADDRESS\_TARGET: You specified an invalid email
2489
+ # address for the invited account owner.
2490
+ #
2466
2491
  # * INVALID\_ENUM: You specified an invalid value.
2467
2492
  #
2468
2493
  # * INVALID\_ENUM\_POLICY\_TYPE: You specified an invalid policy type
@@ -3830,9 +3855,10 @@ module Aws::Organizations
3830
3855
  include Aws::Structure
3831
3856
  end
3832
3857
 
3833
- # You can't remove a master account from an organization. If you want
3834
- # the master account to become a member account in another organization,
3835
- # you must first delete the current organization of the master account.
3858
+ # You can't remove a management account from an organization. If you
3859
+ # want the management account to become a member account in another
3860
+ # organization, you must first delete the current organization of the
3861
+ # management account.
3836
3862
  #
3837
3863
  # @!attribute [rw] message
3838
3864
  # @return [String]
@@ -3937,12 +3963,12 @@ module Aws::Organizations
3937
3963
  # The Amazon Resource Name (ARN) of an organization.
3938
3964
  #
3939
3965
  # For more information about ARNs in Organizations, see [ARN Formats
3940
- # Supported by Organizations][1] in the *AWS Organizations User
3941
- # Guide*.
3966
+ # Supported by Organizations][1] in the *AWS Service Authorization
3967
+ # Reference*.
3942
3968
  #
3943
3969
  #
3944
3970
  #
3945
- # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns
3971
+ # [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies
3946
3972
  # @return [String]
3947
3973
  #
3948
3974
  # @!attribute [rw] feature_set
@@ -3961,19 +3987,20 @@ module Aws::Organizations
3961
3987
  #
3962
3988
  # @!attribute [rw] master_account_arn
3963
3989
  # The Amazon Resource Name (ARN) of the account that is designated as
3964
- # the master account for the organization.
3990
+ # the management account for the organization.
3965
3991
  #
3966
3992
  # For more information about ARNs in Organizations, see [ARN Formats
3967
- # Supported by Organizations][1] in the *AWS Organizations User
3968
- # Guide*.
3993
+ # Supported by Organizations][1] in the *AWS Service Authorization
3994
+ # Reference*.
3969
3995
  #
3970
3996
  #
3971
3997
  #
3972
- # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns
3998
+ # [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies
3973
3999
  # @return [String]
3974
4000
  #
3975
4001
  # @!attribute [rw] master_account_id
3976
- # The unique identifier (ID) of the master account of an organization.
4002
+ # The unique identifier (ID) of the management account of an
4003
+ # organization.
3977
4004
  #
3978
4005
  # The [regex pattern][1] for an account ID string requires exactly 12
3979
4006
  # digits.
@@ -3985,7 +4012,7 @@ module Aws::Organizations
3985
4012
  #
3986
4013
  # @!attribute [rw] master_account_email
3987
4014
  # The email address that is associated with the AWS account that is
3988
- # designated as the master account for the organization.
4015
+ # designated as the management account for the organization.
3989
4016
  # @return [String]
3990
4017
  #
3991
4018
  # @!attribute [rw] available_policy_types
@@ -4011,8 +4038,8 @@ module Aws::Organizations
4011
4038
  end
4012
4039
 
4013
4040
  # The organization isn't empty. To delete an organization, you must
4014
- # first remove all accounts except the master account, delete all OUs,
4015
- # and delete all policies.
4041
+ # first remove all accounts except the management account, delete all
4042
+ # OUs, and delete all policies.
4016
4043
  #
4017
4044
  # @!attribute [rw] message
4018
4045
  # @return [String]
@@ -4048,12 +4075,12 @@ module Aws::Organizations
4048
4075
  # The Amazon Resource Name (ARN) of this OU.
4049
4076
  #
4050
4077
  # For more information about ARNs in Organizations, see [ARN Formats
4051
- # Supported by Organizations][1] in the *AWS Organizations User
4052
- # Guide*.
4078
+ # Supported by Organizations][1] in the *AWS Service Authorization
4079
+ # Reference*.
4053
4080
  #
4054
4081
  #
4055
4082
  #
4056
- # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns
4083
+ # [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies
4057
4084
  # @return [String]
4058
4085
  #
4059
4086
  # @!attribute [rw] name
@@ -4249,12 +4276,12 @@ module Aws::Organizations
4249
4276
  # The Amazon Resource Name (ARN) of the policy.
4250
4277
  #
4251
4278
  # For more information about ARNs in Organizations, see [ARN Formats
4252
- # Supported by Organizations][1] in the *AWS Organizations User
4253
- # Guide*.
4279
+ # Supported by Organizations][1] in the *AWS Service Authorization
4280
+ # Reference*.
4254
4281
  #
4255
4282
  #
4256
4283
  #
4257
- # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns
4284
+ # [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies
4258
4285
  # @return [String]
4259
4286
  #
4260
4287
  # @!attribute [rw] name
@@ -4324,12 +4351,12 @@ module Aws::Organizations
4324
4351
  # The Amazon Resource Name (ARN) of the policy target.
4325
4352
  #
4326
4353
  # For more information about ARNs in Organizations, see [ARN Formats
4327
- # Supported by Organizations][1] in the *AWS Organizations User
4328
- # Guide*.
4354
+ # Supported by Organizations][1] in the *AWS Service Authorization
4355
+ # Reference*.
4329
4356
  #
4330
4357
  #
4331
4358
  #
4332
- # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns
4359
+ # [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies
4333
4360
  # @return [String]
4334
4361
  #
4335
4362
  # @!attribute [rw] name
@@ -4510,12 +4537,12 @@ module Aws::Organizations
4510
4537
  # The Amazon Resource Name (ARN) of the root.
4511
4538
  #
4512
4539
  # For more information about ARNs in Organizations, see [ARN Formats
4513
- # Supported by Organizations][1] in the *AWS Organizations User
4514
- # Guide*.
4540
+ # Supported by Organizations][1] in the *AWS Service Authorization
4541
+ # Reference*.
4515
4542
  #
4516
4543
  #
4517
4544
  #
4518
- # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns
4545
+ # [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies
4519
4546
  # @return [String]
4520
4547
  #
4521
4548
  # @!attribute [rw] name