aws-sdk-organizations 1.141.0 → 1.142.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8f3cc235c80804be715dfb2a34d9fd1d0bab2a7c273817edc935a768dd996253
-  data.tar.gz: ea8f6d60cf7f8471bc8f2db3b8f981ebac9859a115ae2edbf037e6c18f1d302c
+  metadata.gz: 3784eee0b50553e38c399f7d1cca6ff6c921ff2af32c9ed57bafd01a6593187e
+  data.tar.gz: df5594f3f10a8b3d40455d9a85c47e960d2ee85d3ee776ca4ef8fae97c470816
 SHA512:
-  metadata.gz: 8dacdfd4eac04a6284ccba184c3cbd45b54de3dfa6fb9842e7a507ccbf84bc130f5cec0a555401dec09bf674f76b5aab604a0f1f78107e6e0702049b394397e6
-  data.tar.gz: 369ea1aa99a59f5af617472ca95bb1a91db2bcd108705821314dd82e29f0cb895259f2e8d1a698b7fcb6928fbfe06a5700361dccb109c7c96e7f9786df65b2ca
+  metadata.gz: 38029f3f352629455494185c0c7b421e76c2b34360db66d0e64f0f6bf266ea390ed06867b6aca6cb6dfc3d98314bc26715f8d9d641dc591806c93fd794aea65d
+  data.tar.gz: 17ba966d1198ecd8bfd98a21293deb7246d01d2edd446a9de93b226de214fe3bc1153cecb28a17c30e7ee6244a708496c4d2b0a4c6288fe773db7b4d3a51c24a

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.142.0 (2026-05-27)
+------------------
+
+* Feature - AWS Organizations now emits CloudTrail events (AccountJoinedOrganization, AccountDepartedOrganization) to the management account for membership changes, including join and departure method and timestamp.
+
 1.141.0 (2026-05-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.141.0
+1.142.0

data/lib/aws-sdk-organizations/client.rb

@@ -504,6 +504,17 @@ module Aws::Organizations
     # For more information, see [Responding to invitations][3] and [Enabling
     # all features][1] in the *Organizations User Guide*.
     #
+    # When a handshake is accepted, Organizations logs membership events in
+    # CloudTrail, available only in the management account's event history.
+    # If the account was standalone and joined a new organization, an
+    # `AccountJoinedOrganization` event is logged with
+    # `joinedMethod:Invited` and `joinedTime` fields. If the account
+    # departed one organization and joined another, both an
+    # `AccountDepartedOrganization` event with `departedMethod:Left` and
+    # `departedTime` and an `AccountJoinedOrganization` event with
+    # `joinedMethod:Invited` and `joinedTime` are logged in their respective
+    # management accounts.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/manage-begin-all-features-standard-migration.html#manage-approve-all-features-invite
@@ -896,6 +907,12 @@ module Aws::Organizations
     #
     #  </note>
     #
+    # After the permanent termination of the account after the 90-day
+    # waiting period, Organizations logs a membership event in CloudTrail.
+    # The event is an `AccountDepartedOrganization` event with
+    # `departedMethod:Cleaned` and `departedTime`. This event is available
+    # only in the management account's event history.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html
@@ -943,6 +960,12 @@ module Aws::Organizations
     #   information on using CloudTrail with Organizations, see [Logging and
     #   monitoring in Organizations][1] in the *Organizations User Guide*.
     #
+    # Additionally, the `AccountJoinedOrganization` event is logged in
+    # CloudTrail and is available only in the management account's event
+    # history. This event includes `joinedMethod:Created` and `joinedTime`
+    # fields to provide context on how and when the account joined the
+    # organization.
+    #
     # The user who calls the API to create an account must have the
     # `organizations:CreateAccount` permission. If you enabled all features
     # in the organization, Organizations creates the required service-linked
@@ -1230,6 +1253,12 @@ module Aws::Organizations
     #   information on using CloudTrail with Organizations, see [Logging and
     #   monitoring in Organizations][5] in the *Organizations User Guide*.
     #
+    # Additionally, the `AccountJoinedOrganization` event is logged in
+    # CloudTrail and is available only in the management account's event
+    # history only for the linked commercial account. This event includes
+    # `joinedMethod:Created` and `joinedTime` fields to provide context on
+    # how and when the account joined the organization.
+    #
     #
     #
     # When you call the `CreateGovCloudAccount` action, you create two
@@ -1472,6 +1501,11 @@ module Aws::Organizations
     # `CONSOLIDATED_BILLING`, no policy types are enabled by default and you
     # can't use organization policies.
     #
+    # The `AccountJoinedOrganization` event is logged in CloudTrail and is
+    # available only in the management account's event history. This event
+    # includes `joinedMethod:Invited` and `joinedTime` fields to provide
+    # context on how and when the account joined the organization.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#account
@@ -1977,6 +2011,11 @@ module Aws::Organizations
     # credentials from the management account. The organization must be
     # empty of member accounts.
     #
+    # When an organization is deleted, Organizations logs a membership event
+    # in CloudTrail. The event is an `AccountDepartedOrganization` event
+    # with `departedMethod:Left` and `departedTime`. This event is available
+    # only in the management account's event history.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/DeleteOrganization AWS API Documentation
@@ -3722,6 +3761,12 @@ module Aws::Organizations
     #
     # You can only call from operation from a member account.
     #
+    # When an account leaves an organization, Organizations logs a
+    # membership event in CloudTrail. The event is an
+    # `AccountDepartedOrganization` event with `departedMethod:Left` and
+    # `departedTime`. This event is available only in the management
+    # account's event history.
+    #
     # * The management account in an organization with all features enabled
     #   can set service control policies (SCPs) that can restrict what
     #   administrators of member accounts can do. This includes preventing
@@ -6190,6 +6235,12 @@ module Aws::Organizations
     # You can only call this operation from the management account. Member
     # accounts can remove themselves with LeaveOrganization instead.
     #
+    # When an account is removed from an organization, Organizations logs a
+    # membership event in CloudTrail. The event is an
+    # `AccountDepartedOrganization` event with `departedMethod:Removed` and
+    # `departedTime`. This event is available only in the management
+    # account's event history.
+    #
     # * You can remove an account from your organization only if the account
     #   is configured with the information required to operate as a
     #   standalone account. When you create an account in an organization
@@ -6742,7 +6793,7 @@ module Aws::Organizations
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-organizations'
-      context[:gem_version] = '1.141.0'
+      context[:gem_version] = '1.142.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-organizations/types.rb

@@ -2669,8 +2669,11 @@ module Aws::Organizations
     #   The end date must be the end of the last day of the month
     #   (23.59.59.999).
     #
-    # * END\_DATE\_TOO\_EARLY: You provided an invalid end date. It is too
-    #   early for the transfer to end.
+    # * END\_DATE\_TOO\_EARLY: You provided an invalid end date. The end
+    #   date is too early.
+    #
+    # * END\_DATE\_TOO\_LATE: You provided an invalid end date. The end date
+    #   is too late.
     #
     # * IMMUTABLE\_POLICY: You specified a policy that is managed by Amazon
     #   Web Services and can't be modified.

data/lib/aws-sdk-organizations.rb

@@ -54,7 +54,7 @@ module Aws::Organizations
   autoload :EndpointProvider, 'aws-sdk-organizations/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-organizations/endpoints'
 
-  GEM_VERSION = '1.141.0'
+  GEM_VERSION = '1.142.0'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-organizations
 version: !ruby/object:Gem::Version
-  version: 1.141.0
+  version: 1.142.0
 platform: ruby
 authors:
 - Amazon Web Services