aws-sdk-organizations 1.8.0 → 1.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/aws-sdk-organizations.rb +1 -1
- data/lib/aws-sdk-organizations/client.rb +85 -88
- metadata +3 -3
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 02ed3879a02b4485ad0142305166f10c757fd541
|
4
|
+
data.tar.gz: 698cf3762e6245f89442bac2de8b8f1e6b00b2b6
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 5a38db70ea797363f9a7b78d2d7b066508351442a9c069a41558c136af6a3a3b83debd1c2bdc590678af186cabe70d668f5d97d1d3e43ff27478e3877cd144a9
|
7
|
+
data.tar.gz: aac8c76d1b7ccc87f92fe960f3e24cb161943c7748d0bf7c42c026e3b1fe4328bf0867626804f4d3ccac41d079feb887bde7f71b470cd91b00b37630edcdae42
|
@@ -292,9 +292,9 @@ module Aws::Organizations
|
|
292
292
|
req.send_request(options)
|
293
293
|
end
|
294
294
|
|
295
|
-
# Attaches a policy to a root, an organizational unit, or an
|
296
|
-
# account. How the policy affects accounts depends on the
|
297
|
-
# policy:
|
295
|
+
# Attaches a policy to a root, an organizational unit (OU), or an
|
296
|
+
# individual account. How the policy affects accounts depends on the
|
297
|
+
# type of policy:
|
298
298
|
#
|
299
299
|
# * **Service control policy (SCP)** - An SCP specifies what permissions
|
300
300
|
# can be delegated to users in affected member accounts. The scope of
|
@@ -562,15 +562,26 @@ module Aws::Organizations
|
|
562
562
|
# Account in Your Organization][2] in the *AWS Organizations User
|
563
563
|
# Guide*.
|
564
564
|
#
|
565
|
-
# When you create an account in an organization using the AWS
|
566
|
-
#
|
567
|
-
# for the account to operate as a standalone account, such as
|
568
|
-
# method and signing the End User Licence Agreement (EULA)
|
569
|
-
# automatically collected. If you must remove an account from
|
570
|
-
# organization later, you can do so only after you provide the
|
571
|
-
# information. Follow the steps at [ To leave an organization
|
572
|
-
# required account information has not yet been provided][3]
|
573
|
-
# Organizations User Guide*.
|
565
|
+
# * When you create an account in an organization using the AWS
|
566
|
+
# Organizations console, API, or CLI commands, the information
|
567
|
+
# required for the account to operate as a standalone account, such as
|
568
|
+
# a payment method and signing the End User Licence Agreement (EULA)
|
569
|
+
# is *not* automatically collected. If you must remove an account from
|
570
|
+
# your organization later, you can do so only after you provide the
|
571
|
+
# missing information. Follow the steps at [ To leave an organization
|
572
|
+
# when all required account information has not yet been provided][3]
|
573
|
+
# in the *AWS Organizations User Guide*.
|
574
|
+
#
|
575
|
+
# * If you get an exception that indicates that you exceeded your
|
576
|
+
# account limits for the organization or that the operation failed
|
577
|
+
# because your organization is still initializing, wait one hour and
|
578
|
+
# then try again. If the error persists after an hour, then contact
|
579
|
+
# [AWS Customer Support][4].
|
580
|
+
#
|
581
|
+
# * Because `CreateAccount` operates asynchronously, it can return a
|
582
|
+
# successful completion message even though account initialization
|
583
|
+
# might still be in progress. You might need to wait a few minutes
|
584
|
+
# before you can successfully access the account.
|
574
585
|
#
|
575
586
|
# <note markdown="1"> When you create a member account with this operation, you can choose
|
576
587
|
# whether to create the account with the **IAM User and Role Access to
|
@@ -579,25 +590,17 @@ module Aws::Organizations
|
|
579
590
|
# for the account. If you disable this, then only the account root user
|
580
591
|
# can access billing information. For information about how to disable
|
581
592
|
# this for an account, see [Granting Access to Your Billing Information
|
582
|
-
# and Tools][
|
593
|
+
# and Tools][5].
|
583
594
|
#
|
584
595
|
# </note>
|
585
596
|
#
|
586
|
-
# This operation can be called only from the organization's master
|
587
|
-
# account.
|
588
|
-
#
|
589
|
-
# If you get an exception that indicates that you exceeded your account
|
590
|
-
# limits for the organization or that you can"t add an account because
|
591
|
-
# your organization is still initializing, please contact [ AWS Customer
|
592
|
-
# Support][5].
|
593
|
-
#
|
594
597
|
#
|
595
598
|
#
|
596
599
|
# [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_integration_services.html#orgs_integration_service-linked-roles
|
597
600
|
# [2]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html
|
598
601
|
# [3]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info
|
599
|
-
# [4]:
|
600
|
-
# [5]:
|
602
|
+
# [4]: https://console.aws.amazon.com/support/home#/
|
603
|
+
# [5]: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html
|
601
604
|
#
|
602
605
|
# @option params [required, String] :email
|
603
606
|
# The email address of the owner to assign to the new member account.
|
@@ -1135,7 +1138,7 @@ module Aws::Organizations
|
|
1135
1138
|
|
1136
1139
|
# Deletes the organization. You can delete an organization only by using
|
1137
1140
|
# credentials from the master account. The organization must be empty of
|
1138
|
-
# member accounts, OUs, and policies.
|
1141
|
+
# member accounts, organizational units (OUs), and policies.
|
1139
1142
|
#
|
1140
1143
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
1141
1144
|
#
|
@@ -1148,9 +1151,9 @@ module Aws::Organizations
|
|
1148
1151
|
req.send_request(options)
|
1149
1152
|
end
|
1150
1153
|
|
1151
|
-
# Deletes an organizational unit from a root or another OU. You
|
1152
|
-
# first remove all accounts and child OUs from the OU that you want
|
1153
|
-
# delete.
|
1154
|
+
# Deletes an organizational unit (OU) from a root or another OU. You
|
1155
|
+
# must first remove all accounts and child OUs from the OU that you want
|
1156
|
+
# to delete.
|
1154
1157
|
#
|
1155
1158
|
# This operation can be called only from the organization's master
|
1156
1159
|
# account.
|
@@ -1197,8 +1200,8 @@ module Aws::Organizations
|
|
1197
1200
|
end
|
1198
1201
|
|
1199
1202
|
# Deletes the specified policy from your organization. Before you
|
1200
|
-
# perform this operation, you must first detach the policy from all
|
1201
|
-
# roots, and accounts.
|
1203
|
+
# perform this operation, you must first detach the policy from all
|
1204
|
+
# organizational units (OUs), roots, and accounts.
|
1202
1205
|
#
|
1203
1206
|
# This operation can be called only from the organization's master
|
1204
1207
|
# account.
|
@@ -1680,10 +1683,10 @@ module Aws::Organizations
|
|
1680
1683
|
req.send_request(options)
|
1681
1684
|
end
|
1682
1685
|
|
1683
|
-
# Detaches a policy from a target root, organizational unit, or
|
1684
|
-
# If the policy being detached is a service control policy
|
1685
|
-
# changes to permissions for IAM users and roles in affected
|
1686
|
-
# are immediate.
|
1686
|
+
# Detaches a policy from a target root, organizational unit (OU), or
|
1687
|
+
# account. If the policy being detached is a service control policy
|
1688
|
+
# (SCP), the changes to permissions for IAM users and roles in affected
|
1689
|
+
# accounts are immediate.
|
1687
1690
|
#
|
1688
1691
|
# **Note:** Every root, OU, and account must have at least one SCP
|
1689
1692
|
# attached. If you want to replace the default `FullAWSAccess` policy
|
@@ -1828,8 +1831,8 @@ module Aws::Organizations
|
|
1828
1831
|
# a certain type can be attached to entities in a root only if that type
|
1829
1832
|
# is enabled in the root. After you perform this operation, you no
|
1830
1833
|
# longer can attach policies of the specified type to that root or to
|
1831
|
-
# any OU or account in that root. You can undo
|
1832
|
-
# EnablePolicyType operation.
|
1834
|
+
# any organizational unit (OU) or account in that root. You can undo
|
1835
|
+
# this by using the EnablePolicyType operation.
|
1833
1836
|
#
|
1834
1837
|
# This operation can be called only from the organization's master
|
1835
1838
|
# account.
|
@@ -1966,13 +1969,11 @@ module Aws::Organizations
|
|
1966
1969
|
# Organization][1] in the *AWS Organizations User Guide*.
|
1967
1970
|
#
|
1968
1971
|
# This operation is required only for organizations that were created
|
1969
|
-
# explicitly with only the consolidated billing features enabled
|
1970
|
-
#
|
1971
|
-
#
|
1972
|
-
#
|
1973
|
-
#
|
1974
|
-
# administrators in the invited accounts approve the change by accepting
|
1975
|
-
# the handshake.
|
1972
|
+
# explicitly with only the consolidated billing features enabled.
|
1973
|
+
# Calling this operation sends a handshake to every invited account in
|
1974
|
+
# the organization. The feature set change can be finalized and the
|
1975
|
+
# additional features enabled only after all administrators in the
|
1976
|
+
# invited accounts approve the change by accepting the handshake.
|
1976
1977
|
#
|
1977
1978
|
# After you enable all features, you can separately enable or disable
|
1978
1979
|
# individual policy types in a root using EnablePolicyType and
|
@@ -2063,9 +2064,9 @@ module Aws::Organizations
|
|
2063
2064
|
end
|
2064
2065
|
|
2065
2066
|
# Enables a policy type in a root. After you enable a policy type in a
|
2066
|
-
# root, you can attach policies of that type to the root, any
|
2067
|
-
# account in that root. You can undo this
|
2068
|
-
# operation.
|
2067
|
+
# root, you can attach policies of that type to the root, any
|
2068
|
+
# organizational unit (OU), or account in that root. You can undo this
|
2069
|
+
# by using the DisablePolicyType operation.
|
2069
2070
|
#
|
2070
2071
|
# This operation can be called only from the organization's master
|
2071
2072
|
# account.
|
@@ -2151,22 +2152,23 @@ module Aws::Organizations
|
|
2151
2152
|
# invitation is implemented as a Handshake whose details are in the
|
2152
2153
|
# response.
|
2153
2154
|
#
|
2154
|
-
# You can invite AWS accounts only from the same seller as the master
|
2155
|
-
#
|
2156
|
-
#
|
2157
|
-
# India, then you can only invite other AISPL accounts to your
|
2158
|
-
#
|
2159
|
-
#
|
2160
|
-
#
|
2155
|
+
# * You can invite AWS accounts only from the same seller as the master
|
2156
|
+
# account. For example, if your organization's master account was
|
2157
|
+
# created by Amazon Internet Services Pvt. Ltd (AISPL), an AWS seller
|
2158
|
+
# in India, then you can only invite other AISPL accounts to your
|
2159
|
+
# organization. You can't combine accounts from AISPL and AWS, or any
|
2160
|
+
# other AWS seller. For more information, see [Consolidated Billing in
|
2161
|
+
# India][1].
|
2162
|
+
#
|
2163
|
+
# * If you receive an exception that indicates that you exceeded your
|
2164
|
+
# account limits for the organization or that the operation failed
|
2165
|
+
# because your organization is still initializing, wait one hour and
|
2166
|
+
# then try again. If the error persists after an hour, then contact
|
2167
|
+
# [AWS Customer Support][2].
|
2161
2168
|
#
|
2162
2169
|
# This operation can be called only from the organization's master
|
2163
2170
|
# account.
|
2164
2171
|
#
|
2165
|
-
# If you get an exception that indicates that you exceeded your account
|
2166
|
-
# limits for the organization or that you can"t add an account because
|
2167
|
-
# your organization is still initializing, please contact [ AWS Customer
|
2168
|
-
# Support][2].
|
2169
|
-
#
|
2170
2172
|
#
|
2171
2173
|
#
|
2172
2174
|
# [1]: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/useconsolidatedbilliing-India.html
|
@@ -2416,8 +2418,8 @@ module Aws::Organizations
|
|
2416
2418
|
end
|
2417
2419
|
|
2418
2420
|
# Lists all the accounts in the organization. To request only the
|
2419
|
-
# accounts in a specified root or OU, use the
|
2420
|
-
# operation instead.
|
2421
|
+
# accounts in a specified root or organizational unit (OU), use the
|
2422
|
+
# ListAccountsForParent operation instead.
|
2421
2423
|
#
|
2422
2424
|
# <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
|
2423
2425
|
# when calling a `List*` operation. These operations can occasionally
|
@@ -2638,9 +2640,10 @@ module Aws::Organizations
|
|
2638
2640
|
req.send_request(options)
|
2639
2641
|
end
|
2640
2642
|
|
2641
|
-
# Lists all of the OUs or accounts that are
|
2642
|
-
# parent OU or root. This operation, along
|
2643
|
-
# to traverse the tree structure that makes
|
2643
|
+
# Lists all of the organizational units (OUs) or accounts that are
|
2644
|
+
# contained in the specified parent OU or root. This operation, along
|
2645
|
+
# with ListParents enables you to traverse the tree structure that makes
|
2646
|
+
# up this root.
|
2644
2647
|
#
|
2645
2648
|
# <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
|
2646
2649
|
# when calling a `List*` operation. These operations can occasionally
|
@@ -3730,8 +3733,8 @@ module Aws::Organizations
|
|
3730
3733
|
req.send_request(options)
|
3731
3734
|
end
|
3732
3735
|
|
3733
|
-
# Lists all the roots, OUs, and accounts to which
|
3734
|
-
# is attached.
|
3736
|
+
# Lists all the roots, organizaitonal units (OUs), and accounts to which
|
3737
|
+
# the specified policy is attached.
|
3735
3738
|
#
|
3736
3739
|
# <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
|
3737
3740
|
# when calling a `List*` operation. These operations can occasionally
|
@@ -3838,8 +3841,8 @@ module Aws::Organizations
|
|
3838
3841
|
req.send_request(options)
|
3839
3842
|
end
|
3840
3843
|
|
3841
|
-
# Moves an account from its current source parent root or
|
3842
|
-
# specified destination parent root or OU.
|
3844
|
+
# Moves an account from its current source parent root or organizational
|
3845
|
+
# unit (OU) to the specified destination parent root or OU.
|
3843
3846
|
#
|
3844
3847
|
# This operation can be called only from the organization's master
|
3845
3848
|
# account.
|
@@ -3934,31 +3937,25 @@ module Aws::Organizations
|
|
3934
3937
|
# account. Member accounts can remove themselves with LeaveOrganization
|
3935
3938
|
# instead.
|
3936
3939
|
#
|
3937
|
-
#
|
3938
|
-
#
|
3939
|
-
#
|
3940
|
-
#
|
3941
|
-
#
|
3942
|
-
#
|
3943
|
-
#
|
3944
|
-
#
|
3945
|
-
#
|
3946
|
-
#
|
3947
|
-
#
|
3948
|
-
#
|
3949
|
-
#
|
3950
|
-
#
|
3951
|
-
#
|
3952
|
-
#
|
3953
|
-
# * You can remove a member account only after you enable IAM user
|
3954
|
-
# access to billing in the member account. For more information, see
|
3955
|
-
# [Activating Access to the Billing and Cost Management Console][2] in
|
3956
|
-
# the *AWS Billing and Cost Management User Guide*.
|
3940
|
+
# You can remove an account from your organization only if the account
|
3941
|
+
# is configured with the information required to operate as a standalone
|
3942
|
+
# account. When you create an account in an organization using the AWS
|
3943
|
+
# Organizations console, API, or CLI commands, the information required
|
3944
|
+
# of standalone accounts is *not* automatically collected. For an
|
3945
|
+
# account that you want to make standalone, you must accept the End User
|
3946
|
+
# License Agreement (EULA), choose a support plan, provide and verify
|
3947
|
+
# the required contact information, and provide a current payment
|
3948
|
+
# method. AWS uses the payment method to charge for any billable (not
|
3949
|
+
# free tier) AWS activity that occurs while the account is not attached
|
3950
|
+
# to an organization. To remove an account that does not yet have this
|
3951
|
+
# information, you must sign in as the member account and follow the
|
3952
|
+
# steps at [ To leave an organization when all required account
|
3953
|
+
# information has not yet been provided][1] in the *AWS Organizations
|
3954
|
+
# User Guide*.
|
3957
3955
|
#
|
3958
3956
|
#
|
3959
3957
|
#
|
3960
3958
|
# [1]: http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info
|
3961
|
-
# [2]: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate
|
3962
3959
|
#
|
3963
3960
|
# @option params [required, String] :account_id
|
3964
3961
|
# The unique identifier (ID) of the member account that you want to
|
@@ -4209,7 +4206,7 @@ module Aws::Organizations
|
|
4209
4206
|
params: params,
|
4210
4207
|
config: config)
|
4211
4208
|
context[:gem_name] = 'aws-sdk-organizations'
|
4212
|
-
context[:gem_version] = '1.
|
4209
|
+
context[:gem_version] = '1.9.0'
|
4213
4210
|
Seahorse::Client::Request.new(handlers, context)
|
4214
4211
|
end
|
4215
4212
|
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-organizations
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.9.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2018-
|
11
|
+
date: 2018-05-14 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|
@@ -75,7 +75,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
75
75
|
version: '0'
|
76
76
|
requirements: []
|
77
77
|
rubyforge_project:
|
78
|
-
rubygems_version: 2.5.2.
|
78
|
+
rubygems_version: 2.5.2.3
|
79
79
|
signing_key:
|
80
80
|
specification_version: 4
|
81
81
|
summary: AWS SDK for Ruby - Organizations
|