aws-sdk-organizations 1.53.0 → 1.54.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/aws-sdk-organizations.rb +1 -1
- data/lib/aws-sdk-organizations/client.rb +95 -95
- data/lib/aws-sdk-organizations/types.rb +55 -50
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 12d5b32001c2e000c0e68f125e340547a8d1ed5aec990699d591ee15753adf5a
|
|
4
|
+
data.tar.gz: b870e7a4de0aec2c3322a6866fdcfa8c606fc20ba1cfc553f7a3ece322cdf147
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 3fa43a08728fe583f45a3dd6ad6ac859caf06e47f6bf1237a69aee01100812f5983d4dd26f133c8a16a7263033e32ba61c9d5c58558d2d8f60d20febf034190f
|
|
7
|
+
data.tar.gz: 37f0dc9aa70395aa4b9f515288f73127e12596a48efd6f7cff7597eeaf92393423fab6b118255610ea4b48ee1ad311695ecd9fdf249ba01b117833a09c0e4f25
|
|
@@ -356,7 +356,7 @@ module Aws::Organizations
|
|
|
356
356
|
# User Guide*.
|
|
357
357
|
#
|
|
358
358
|
# * **Enable all features final confirmation** handshake: only a
|
|
359
|
-
# principal from the
|
|
359
|
+
# principal from the management account.
|
|
360
360
|
#
|
|
361
361
|
# For more information about invitations, see [Inviting an AWS Account
|
|
362
362
|
# to Join Your Organization][2] in the *AWS Organizations User Guide.*
|
|
@@ -487,7 +487,7 @@ module Aws::Organizations
|
|
|
487
487
|
#
|
|
488
488
|
# * [TAG\_POLICY][4]
|
|
489
489
|
#
|
|
490
|
-
# This operation can be called only from the organization's
|
|
490
|
+
# This operation can be called only from the organization's management
|
|
491
491
|
# account.
|
|
492
492
|
#
|
|
493
493
|
#
|
|
@@ -716,12 +716,12 @@ module Aws::Organizations
|
|
|
716
716
|
#
|
|
717
717
|
# AWS Organizations preconfigures the new member account with a role
|
|
718
718
|
# (named `OrganizationAccountAccessRole` by default) that grants users
|
|
719
|
-
# in the
|
|
720
|
-
# account. Principals in the
|
|
719
|
+
# in the management account administrator permissions in the new member
|
|
720
|
+
# account. Principals in the management account can assume the role. AWS
|
|
721
721
|
# Organizations clones the company name and address information for the
|
|
722
|
-
# new account from the organization's
|
|
722
|
+
# new account from the organization's management account.
|
|
723
723
|
#
|
|
724
|
-
# This operation can be called only from the organization's
|
|
724
|
+
# This operation can be called only from the organization's management
|
|
725
725
|
# account.
|
|
726
726
|
#
|
|
727
727
|
# For more information about creating accounts, see [Creating an AWS
|
|
@@ -786,10 +786,10 @@ module Aws::Organizations
|
|
|
786
786
|
# (Optional)
|
|
787
787
|
#
|
|
788
788
|
# The name of an IAM role that AWS Organizations automatically
|
|
789
|
-
# preconfigures in the new member account. This role trusts the
|
|
790
|
-
# account, allowing users in the
|
|
791
|
-
# permitted by the
|
|
792
|
-
# administrator permissions in the new member account.
|
|
789
|
+
# preconfigures in the new member account. This role trusts the
|
|
790
|
+
# management account, allowing users in the management account to assume
|
|
791
|
+
# the role, as permitted by the management account administrator. The
|
|
792
|
+
# role has administrator permissions in the new member account.
|
|
793
793
|
#
|
|
794
794
|
# If you don't specify this parameter, the role name defaults to
|
|
795
795
|
# `OrganizationAccountAccessRole`.
|
|
@@ -913,11 +913,11 @@ module Aws::Organizations
|
|
|
913
913
|
# the [ *AWS GovCloud User Guide*.][1]
|
|
914
914
|
#
|
|
915
915
|
# * You already have an account in the AWS GovCloud (US) Region that is
|
|
916
|
-
# paired with a
|
|
917
|
-
# Region.
|
|
916
|
+
# paired with a management account of an organization in the
|
|
917
|
+
# commercial Region.
|
|
918
918
|
#
|
|
919
|
-
# * You call this action from the
|
|
920
|
-
# the commercial Region.
|
|
919
|
+
# * You call this action from the management account of your
|
|
920
|
+
# organization in the commercial Region.
|
|
921
921
|
#
|
|
922
922
|
# * You have the `organizations:CreateGovCloudAccount` permission.
|
|
923
923
|
#
|
|
@@ -943,11 +943,11 @@ module Aws::Organizations
|
|
|
943
943
|
# the TagResource operation in the GovCloud Region after the new
|
|
944
944
|
# GovCloud account exists.
|
|
945
945
|
#
|
|
946
|
-
# You call this action from the
|
|
947
|
-
# the commercial Region to create a standalone AWS account in the AWS
|
|
948
|
-
# GovCloud (US) Region. After the account is created, the
|
|
949
|
-
# of an organization in the AWS GovCloud (US) Region can invite
|
|
950
|
-
# that organization. For more information on inviting standalone
|
|
946
|
+
# You call this action from the management account of your organization
|
|
947
|
+
# in the commercial Region to create a standalone AWS account in the AWS
|
|
948
|
+
# GovCloud (US) Region. After the account is created, the management
|
|
949
|
+
# account of an organization in the AWS GovCloud (US) Region can invite
|
|
950
|
+
# it to that organization. For more information on inviting standalone
|
|
951
951
|
# accounts in the AWS GovCloud (US) to join an organization, see [AWS
|
|
952
952
|
# Organizations][4] in the *AWS GovCloud User Guide.*
|
|
953
953
|
#
|
|
@@ -976,14 +976,14 @@ module Aws::Organizations
|
|
|
976
976
|
# accounts are associated with the same email address.
|
|
977
977
|
#
|
|
978
978
|
# A role is created in the new account in the commercial Region that
|
|
979
|
-
# allows the
|
|
980
|
-
# to assume it. An AWS GovCloud (US) account is then created and
|
|
979
|
+
# allows the management account in the organization in the commercial
|
|
980
|
+
# Region to assume it. An AWS GovCloud (US) account is then created and
|
|
981
981
|
# associated with the commercial account that you just created. A role
|
|
982
982
|
# is also created in the new AWS GovCloud (US) account that can be
|
|
983
983
|
# assumed by the AWS GovCloud (US) account that is associated with the
|
|
984
|
-
#
|
|
985
|
-
# and to view a diagram that explains how account access
|
|
986
|
-
# Organizations][4] in the *AWS GovCloud User Guide.*
|
|
984
|
+
# management account of the commercial organization. For more
|
|
985
|
+
# information and to view a diagram that explains how account access
|
|
986
|
+
# works, see [AWS Organizations][4] in the *AWS GovCloud User Guide.*
|
|
987
987
|
#
|
|
988
988
|
# For more information about creating accounts, see [Creating an AWS
|
|
989
989
|
# Account in Your Organization][6] in the *AWS Organizations User
|
|
@@ -1056,9 +1056,9 @@ module Aws::Organizations
|
|
|
1056
1056
|
#
|
|
1057
1057
|
# The name of an IAM role that AWS Organizations automatically
|
|
1058
1058
|
# preconfigures in the new member accounts in both the AWS GovCloud (US)
|
|
1059
|
-
# Region and in the commercial Region. This role trusts the
|
|
1060
|
-
# account, allowing users in the
|
|
1061
|
-
# permitted by the
|
|
1059
|
+
# Region and in the commercial Region. This role trusts the management
|
|
1060
|
+
# account, allowing users in the management account to assume the role,
|
|
1061
|
+
# as permitted by the management account administrator. The role has
|
|
1062
1062
|
# administrator permissions in the new member account.
|
|
1063
1063
|
#
|
|
1064
1064
|
# If you don't specify this parameter, the role name defaults to
|
|
@@ -1158,11 +1158,11 @@ module Aws::Organizations
|
|
|
1158
1158
|
end
|
|
1159
1159
|
|
|
1160
1160
|
# Creates an AWS organization. The account whose user is calling the
|
|
1161
|
-
# `CreateOrganization` operation automatically becomes the [
|
|
1161
|
+
# `CreateOrganization` operation automatically becomes the [management
|
|
1162
1162
|
# account][1] of the new organization.
|
|
1163
1163
|
#
|
|
1164
1164
|
# This operation must be called using credentials from the account that
|
|
1165
|
-
# is to become the new organization's
|
|
1165
|
+
# is to become the new organization's management account. The principal
|
|
1166
1166
|
# must also have the relevant IAM permissions.
|
|
1167
1167
|
#
|
|
1168
1168
|
# By default (or if you set the `FeatureSet` parameter to `ALL`), the
|
|
@@ -1182,7 +1182,7 @@ module Aws::Organizations
|
|
|
1182
1182
|
# feature set supports different levels of functionality.
|
|
1183
1183
|
#
|
|
1184
1184
|
# * `CONSOLIDATED_BILLING`\: All member accounts have their bills
|
|
1185
|
-
# consolidated to and paid by the
|
|
1185
|
+
# consolidated to and paid by the management account. For more
|
|
1186
1186
|
# information, see [Consolidated billing][1] in the *AWS Organizations
|
|
1187
1187
|
# User Guide.*
|
|
1188
1188
|
#
|
|
@@ -1190,10 +1190,10 @@ module Aws::Organizations
|
|
|
1190
1190
|
# organizations in the AWS GovCloud (US) Region.
|
|
1191
1191
|
#
|
|
1192
1192
|
# * `ALL`\: In addition to all the features supported by the
|
|
1193
|
-
# consolidated billing feature set, the
|
|
1194
|
-
# any policy type to any member account in the organization. For
|
|
1195
|
-
# information, see [All features][2] in the *AWS Organizations
|
|
1196
|
-
# Guide.*
|
|
1193
|
+
# consolidated billing feature set, the management account can also
|
|
1194
|
+
# apply any policy type to any member account in the organization. For
|
|
1195
|
+
# more information, see [All features][2] in the *AWS Organizations
|
|
1196
|
+
# User Guide.*
|
|
1197
1197
|
#
|
|
1198
1198
|
#
|
|
1199
1199
|
#
|
|
@@ -1295,7 +1295,7 @@ module Aws::Organizations
|
|
|
1295
1295
|
# If the request includes tags, then the requester must have the
|
|
1296
1296
|
# `organizations:TagResource` permission.
|
|
1297
1297
|
#
|
|
1298
|
-
# This operation can be called only from the organization's
|
|
1298
|
+
# This operation can be called only from the organization's management
|
|
1299
1299
|
# account.
|
|
1300
1300
|
#
|
|
1301
1301
|
#
|
|
@@ -1401,7 +1401,7 @@ module Aws::Organizations
|
|
|
1401
1401
|
# If the request includes tags, then the requester must have the
|
|
1402
1402
|
# `organizations:TagResource` permission.
|
|
1403
1403
|
#
|
|
1404
|
-
# This operation can be called only from the organization's
|
|
1404
|
+
# This operation can be called only from the organization's management
|
|
1405
1405
|
# account.
|
|
1406
1406
|
#
|
|
1407
1407
|
#
|
|
@@ -1642,8 +1642,8 @@ module Aws::Organizations
|
|
|
1642
1642
|
end
|
|
1643
1643
|
|
|
1644
1644
|
# Deletes the organization. You can delete an organization only by using
|
|
1645
|
-
# credentials from the
|
|
1646
|
-
# member accounts.
|
|
1645
|
+
# credentials from the management account. The organization must be
|
|
1646
|
+
# empty of member accounts.
|
|
1647
1647
|
#
|
|
1648
1648
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
|
1649
1649
|
#
|
|
@@ -1660,7 +1660,7 @@ module Aws::Organizations
|
|
|
1660
1660
|
# must first remove all accounts and child OUs from the OU that you want
|
|
1661
1661
|
# to delete.
|
|
1662
1662
|
#
|
|
1663
|
-
# This operation can be called only from the organization's
|
|
1663
|
+
# This operation can be called only from the organization's management
|
|
1664
1664
|
# account.
|
|
1665
1665
|
#
|
|
1666
1666
|
# @option params [required, String] :organizational_unit_id
|
|
@@ -1708,7 +1708,7 @@ module Aws::Organizations
|
|
|
1708
1708
|
# perform this operation, you must first detach the policy from all
|
|
1709
1709
|
# organizational units (OUs), roots, and accounts.
|
|
1710
1710
|
#
|
|
1711
|
-
# This operation can be called only from the organization's
|
|
1711
|
+
# This operation can be called only from the organization's management
|
|
1712
1712
|
# account.
|
|
1713
1713
|
#
|
|
1714
1714
|
# @option params [required, String] :policy_id
|
|
@@ -1765,7 +1765,7 @@ module Aws::Organizations
|
|
|
1765
1765
|
# Services that you can use with AWS Organizations][1] in the *AWS
|
|
1766
1766
|
# Organizations User Guide.*
|
|
1767
1767
|
#
|
|
1768
|
-
# This operation can be called only from the organization's
|
|
1768
|
+
# This operation can be called only from the organization's management
|
|
1769
1769
|
# account.
|
|
1770
1770
|
#
|
|
1771
1771
|
#
|
|
@@ -1807,7 +1807,7 @@ module Aws::Organizations
|
|
|
1807
1807
|
# Retrieves AWS Organizations-related information about the specified
|
|
1808
1808
|
# account.
|
|
1809
1809
|
#
|
|
1810
|
-
# This operation can be called only from the organization's
|
|
1810
|
+
# This operation can be called only from the organization's management
|
|
1811
1811
|
# account or by a member account that is a delegated administrator for
|
|
1812
1812
|
# an AWS service.
|
|
1813
1813
|
#
|
|
@@ -1874,7 +1874,7 @@ module Aws::Organizations
|
|
|
1874
1874
|
# Retrieves the current status of an asynchronous request to create an
|
|
1875
1875
|
# account.
|
|
1876
1876
|
#
|
|
1877
|
-
# This operation can be called only from the organization's
|
|
1877
|
+
# This operation can be called only from the organization's management
|
|
1878
1878
|
# account or by a member account that is a delegated administrator for
|
|
1879
1879
|
# an AWS service.
|
|
1880
1880
|
#
|
|
@@ -1952,7 +1952,7 @@ module Aws::Organizations
|
|
|
1952
1952
|
# For more information about policy inheritance, see [How Policy
|
|
1953
1953
|
# Inheritance Works][1] in the *AWS Organizations User Guide*.
|
|
1954
1954
|
#
|
|
1955
|
-
# This operation can be called only from the organization's
|
|
1955
|
+
# This operation can be called only from the organization's management
|
|
1956
1956
|
# account or by a member account that is a delegated administrator for
|
|
1957
1957
|
# an AWS service.
|
|
1958
1958
|
#
|
|
@@ -1977,9 +1977,9 @@ module Aws::Organizations
|
|
|
1977
1977
|
# [3]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html
|
|
1978
1978
|
#
|
|
1979
1979
|
# @option params [String] :target_id
|
|
1980
|
-
# When you're signed in as the
|
|
1981
|
-
# account that you want details about. Specifying an organization
|
|
1982
|
-
# or organizational unit (OU) as the target is not supported.
|
|
1980
|
+
# When you're signed in as the management account, specify the ID of
|
|
1981
|
+
# the account that you want details about. Specifying an organization
|
|
1982
|
+
# root or organizational unit (OU) as the target is not supported.
|
|
1983
1983
|
#
|
|
1984
1984
|
# @return [Types::DescribeEffectivePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
|
1985
1985
|
#
|
|
@@ -2182,7 +2182,7 @@ module Aws::Organizations
|
|
|
2182
2182
|
|
|
2183
2183
|
# Retrieves information about an organizational unit (OU).
|
|
2184
2184
|
#
|
|
2185
|
-
# This operation can be called only from the organization's
|
|
2185
|
+
# This operation can be called only from the organization's management
|
|
2186
2186
|
# account or by a member account that is a delegated administrator for
|
|
2187
2187
|
# an AWS service.
|
|
2188
2188
|
#
|
|
@@ -2245,7 +2245,7 @@ module Aws::Organizations
|
|
|
2245
2245
|
|
|
2246
2246
|
# Retrieves information about a policy.
|
|
2247
2247
|
#
|
|
2248
|
-
# This operation can be called only from the organization's
|
|
2248
|
+
# This operation can be called only from the organization's management
|
|
2249
2249
|
# account or by a member account that is a delegated administrator for
|
|
2250
2250
|
# an AWS service.
|
|
2251
2251
|
#
|
|
@@ -2333,7 +2333,7 @@ module Aws::Organizations
|
|
|
2333
2333
|
# attached SCP), you're using the authorization strategy of a "[deny
|
|
2334
2334
|
# list][2]".
|
|
2335
2335
|
#
|
|
2336
|
-
# This operation can be called only from the organization's
|
|
2336
|
+
# This operation can be called only from the organization's management
|
|
2337
2337
|
# account.
|
|
2338
2338
|
#
|
|
2339
2339
|
#
|
|
@@ -2432,7 +2432,7 @@ module Aws::Organizations
|
|
|
2432
2432
|
# Organizations, see [Integrating AWS Organizations with Other AWS
|
|
2433
2433
|
# Services][2] in the *AWS Organizations User Guide.*
|
|
2434
2434
|
#
|
|
2435
|
-
# This operation can be called only from the organization's
|
|
2435
|
+
# This operation can be called only from the organization's management
|
|
2436
2436
|
# account.
|
|
2437
2437
|
#
|
|
2438
2438
|
#
|
|
@@ -2476,7 +2476,7 @@ module Aws::Organizations
|
|
|
2476
2476
|
# status of policy types for a specified root, and then use this
|
|
2477
2477
|
# operation.
|
|
2478
2478
|
#
|
|
2479
|
-
# This operation can be called only from the organization's
|
|
2479
|
+
# This operation can be called only from the organization's management
|
|
2480
2480
|
# account.
|
|
2481
2481
|
#
|
|
2482
2482
|
# To view the status of available policy types in the organization, use
|
|
@@ -2586,7 +2586,7 @@ module Aws::Organizations
|
|
|
2586
2586
|
# Organizations, see [Integrating AWS Organizations with Other AWS
|
|
2587
2587
|
# Services][2] in the *AWS Organizations User Guide.*
|
|
2588
2588
|
#
|
|
2589
|
-
# This operation can be called only from the organization's
|
|
2589
|
+
# This operation can be called only from the organization's management
|
|
2590
2590
|
# account and only if the organization has [enabled all features][3].
|
|
2591
2591
|
#
|
|
2592
2592
|
#
|
|
@@ -2641,14 +2641,14 @@ module Aws::Organizations
|
|
|
2641
2641
|
# the feature set change by accepting the handshake that contains
|
|
2642
2642
|
# `"Action": "ENABLE_ALL_FEATURES"`. This completes the change.
|
|
2643
2643
|
#
|
|
2644
|
-
# After you enable all features in your organization, the
|
|
2645
|
-
# in the organization can apply policies on all member accounts.
|
|
2646
|
-
# policies can restrict what users and even administrators in
|
|
2647
|
-
# accounts can do. The
|
|
2648
|
-
# accounts from leaving the organization. Ensure that your
|
|
2649
|
-
# administrators are aware of this.
|
|
2644
|
+
# After you enable all features in your organization, the management
|
|
2645
|
+
# account in the organization can apply policies on all member accounts.
|
|
2646
|
+
# These policies can restrict what users and even administrators in
|
|
2647
|
+
# those accounts can do. The management account can apply policies that
|
|
2648
|
+
# prevent accounts from leaving the organization. Ensure that your
|
|
2649
|
+
# account administrators are aware of this.
|
|
2650
2650
|
#
|
|
2651
|
-
# This operation can be called only from the organization's
|
|
2651
|
+
# This operation can be called only from the organization's management
|
|
2652
2652
|
# account.
|
|
2653
2653
|
#
|
|
2654
2654
|
#
|
|
@@ -2729,7 +2729,7 @@ module Aws::Organizations
|
|
|
2729
2729
|
# AWS recommends that you first use ListRoots to see the status of
|
|
2730
2730
|
# policy types for a specified root, and then use this operation.
|
|
2731
2731
|
#
|
|
2732
|
-
# This operation can be called only from the organization's
|
|
2732
|
+
# This operation can be called only from the organization's management
|
|
2733
2733
|
# account.
|
|
2734
2734
|
#
|
|
2735
2735
|
# You can enable a policy type in a root only if that policy type is
|
|
@@ -2827,12 +2827,12 @@ module Aws::Organizations
|
|
|
2827
2827
|
# invitation is implemented as a Handshake whose details are in the
|
|
2828
2828
|
# response.
|
|
2829
2829
|
#
|
|
2830
|
-
# * You can invite AWS accounts only from the same seller as the
|
|
2831
|
-
# account. For example, if your organization's
|
|
2832
|
-
# created by Amazon Internet Services Pvt. Ltd (AISPL), an
|
|
2833
|
-
# in India, you can invite only other AISPL accounts to
|
|
2834
|
-
# organization. You can't combine accounts from AISPL and AWS or
|
|
2835
|
-
# any other AWS seller. For more information, see [Consolidated
|
|
2830
|
+
# * You can invite AWS accounts only from the same seller as the
|
|
2831
|
+
# management account. For example, if your organization's management
|
|
2832
|
+
# account was created by Amazon Internet Services Pvt. Ltd (AISPL), an
|
|
2833
|
+
# AWS seller in India, you can invite only other AISPL accounts to
|
|
2834
|
+
# your organization. You can't combine accounts from AISPL and AWS or
|
|
2835
|
+
# from any other AWS seller. For more information, see [Consolidated
|
|
2836
2836
|
# Billing in India][1].
|
|
2837
2837
|
#
|
|
2838
2838
|
# * If you receive an exception that indicates that you exceeded your
|
|
@@ -2844,7 +2844,7 @@ module Aws::Organizations
|
|
|
2844
2844
|
# If the request includes tags, then the requester must have the
|
|
2845
2845
|
# `organizations:TagResource` permission.
|
|
2846
2846
|
#
|
|
2847
|
-
# This operation can be called only from the organization's
|
|
2847
|
+
# This operation can be called only from the organization's management
|
|
2848
2848
|
# account.
|
|
2849
2849
|
#
|
|
2850
2850
|
#
|
|
@@ -3008,14 +3008,14 @@ module Aws::Organizations
|
|
|
3008
3008
|
|
|
3009
3009
|
# Removes a member account from its parent organization. This version of
|
|
3010
3010
|
# the operation is performed by the account that wants to leave. To
|
|
3011
|
-
# remove a member account as a user in the
|
|
3011
|
+
# remove a member account as a user in the management account, use
|
|
3012
3012
|
# RemoveAccountFromOrganization instead.
|
|
3013
3013
|
#
|
|
3014
3014
|
# This operation can be called only from a member account in the
|
|
3015
3015
|
# organization.
|
|
3016
3016
|
#
|
|
3017
|
-
# * The
|
|
3018
|
-
# set service control policies (SCPs) that can restrict what
|
|
3017
|
+
# * The management account in an organization with all features enabled
|
|
3018
|
+
# can set service control policies (SCPs) that can restrict what
|
|
3019
3019
|
# administrators of member accounts can do. This includes preventing
|
|
3020
3020
|
# them from successfully calling `LeaveOrganization` and leaving the
|
|
3021
3021
|
# organization.
|
|
@@ -3084,7 +3084,7 @@ module Aws::Organizations
|
|
|
3084
3084
|
# Organizations, see [Integrating AWS Organizations with Other AWS
|
|
3085
3085
|
# Services][1] in the *AWS Organizations User Guide.*
|
|
3086
3086
|
#
|
|
3087
|
-
# This operation can be called only from the organization's
|
|
3087
|
+
# This operation can be called only from the organization's management
|
|
3088
3088
|
# account or by a member account that is a delegated administrator for
|
|
3089
3089
|
# an AWS service.
|
|
3090
3090
|
#
|
|
@@ -3153,7 +3153,7 @@ module Aws::Organizations
|
|
|
3153
3153
|
#
|
|
3154
3154
|
# </note>
|
|
3155
3155
|
#
|
|
3156
|
-
# This operation can be called only from the organization's
|
|
3156
|
+
# This operation can be called only from the organization's management
|
|
3157
3157
|
# account or by a member account that is a delegated administrator for
|
|
3158
3158
|
# an AWS service.
|
|
3159
3159
|
#
|
|
@@ -3276,7 +3276,7 @@ module Aws::Organizations
|
|
|
3276
3276
|
#
|
|
3277
3277
|
# </note>
|
|
3278
3278
|
#
|
|
3279
|
-
# This operation can be called only from the organization's
|
|
3279
|
+
# This operation can be called only from the organization's management
|
|
3280
3280
|
# account or by a member account that is a delegated administrator for
|
|
3281
3281
|
# an AWS service.
|
|
3282
3282
|
#
|
|
@@ -3385,7 +3385,7 @@ module Aws::Organizations
|
|
|
3385
3385
|
#
|
|
3386
3386
|
# </note>
|
|
3387
3387
|
#
|
|
3388
|
-
# This operation can be called only from the organization's
|
|
3388
|
+
# This operation can be called only from the organization's management
|
|
3389
3389
|
# account or by a member account that is a delegated administrator for
|
|
3390
3390
|
# an AWS service.
|
|
3391
3391
|
#
|
|
@@ -3497,7 +3497,7 @@ module Aws::Organizations
|
|
|
3497
3497
|
#
|
|
3498
3498
|
# </note>
|
|
3499
3499
|
#
|
|
3500
|
-
# This operation can be called only from the organization's
|
|
3500
|
+
# This operation can be called only from the organization's management
|
|
3501
3501
|
# account or by a member account that is a delegated administrator for
|
|
3502
3502
|
# an AWS service.
|
|
3503
3503
|
#
|
|
@@ -3614,7 +3614,7 @@ module Aws::Organizations
|
|
|
3614
3614
|
# Lists the AWS accounts that are designated as delegated administrators
|
|
3615
3615
|
# in this organization.
|
|
3616
3616
|
#
|
|
3617
|
-
# This operation can be called only from the organization's
|
|
3617
|
+
# This operation can be called only from the organization's management
|
|
3618
3618
|
# account or by a member account that is a delegated administrator for
|
|
3619
3619
|
# an AWS service.
|
|
3620
3620
|
#
|
|
@@ -3684,7 +3684,7 @@ module Aws::Organizations
|
|
|
3684
3684
|
# List the AWS services for which the specified account is a delegated
|
|
3685
3685
|
# administrator.
|
|
3686
3686
|
#
|
|
3687
|
-
# This operation can be called only from the organization's
|
|
3687
|
+
# This operation can be called only from the organization's management
|
|
3688
3688
|
# account or by a member account that is a delegated administrator for
|
|
3689
3689
|
# an AWS service.
|
|
3690
3690
|
#
|
|
@@ -3906,7 +3906,7 @@ module Aws::Organizations
|
|
|
3906
3906
|
#
|
|
3907
3907
|
# </note>
|
|
3908
3908
|
#
|
|
3909
|
-
# This operation can be called only from the organization's
|
|
3909
|
+
# This operation can be called only from the organization's management
|
|
3910
3910
|
# account or by a member account that is a delegated administrator for
|
|
3911
3911
|
# an AWS service.
|
|
3912
3912
|
#
|
|
@@ -4092,7 +4092,7 @@ module Aws::Organizations
|
|
|
4092
4092
|
#
|
|
4093
4093
|
# </note>
|
|
4094
4094
|
#
|
|
4095
|
-
# This operation can be called only from the organization's
|
|
4095
|
+
# This operation can be called only from the organization's management
|
|
4096
4096
|
# account or by a member account that is a delegated administrator for
|
|
4097
4097
|
# an AWS service.
|
|
4098
4098
|
#
|
|
@@ -4204,7 +4204,7 @@ module Aws::Organizations
|
|
|
4204
4204
|
#
|
|
4205
4205
|
# </note>
|
|
4206
4206
|
#
|
|
4207
|
-
# This operation can be called only from the organization's
|
|
4207
|
+
# This operation can be called only from the organization's management
|
|
4208
4208
|
# account or by a member account that is a delegated administrator for
|
|
4209
4209
|
# an AWS service.
|
|
4210
4210
|
#
|
|
@@ -4310,7 +4310,7 @@ module Aws::Organizations
|
|
|
4310
4310
|
#
|
|
4311
4311
|
# </note>
|
|
4312
4312
|
#
|
|
4313
|
-
# This operation can be called only from the organization's
|
|
4313
|
+
# This operation can be called only from the organization's management
|
|
4314
4314
|
# account or by a member account that is a delegated administrator for
|
|
4315
4315
|
# an AWS service.
|
|
4316
4316
|
#
|
|
@@ -4438,7 +4438,7 @@ module Aws::Organizations
|
|
|
4438
4438
|
#
|
|
4439
4439
|
# </note>
|
|
4440
4440
|
#
|
|
4441
|
-
# This operation can be called only from the organization's
|
|
4441
|
+
# This operation can be called only from the organization's management
|
|
4442
4442
|
# account or by a member account that is a delegated administrator for
|
|
4443
4443
|
# an AWS service.
|
|
4444
4444
|
#
|
|
@@ -4573,7 +4573,7 @@ module Aws::Organizations
|
|
|
4573
4573
|
#
|
|
4574
4574
|
# </note>
|
|
4575
4575
|
#
|
|
4576
|
-
# This operation can be called only from the organization's
|
|
4576
|
+
# This operation can be called only from the organization's management
|
|
4577
4577
|
# account or by a member account that is a delegated administrator for
|
|
4578
4578
|
# an AWS service.
|
|
4579
4579
|
#
|
|
@@ -4676,7 +4676,7 @@ module Aws::Organizations
|
|
|
4676
4676
|
#
|
|
4677
4677
|
# * Policy (any type)
|
|
4678
4678
|
#
|
|
4679
|
-
# This operation can be called only from the organization's
|
|
4679
|
+
# This operation can be called only from the organization's management
|
|
4680
4680
|
# account or by a member account that is a delegated administrator for
|
|
4681
4681
|
# an AWS service.
|
|
4682
4682
|
#
|
|
@@ -4744,7 +4744,7 @@ module Aws::Organizations
|
|
|
4744
4744
|
#
|
|
4745
4745
|
# </note>
|
|
4746
4746
|
#
|
|
4747
|
-
# This operation can be called only from the organization's
|
|
4747
|
+
# This operation can be called only from the organization's management
|
|
4748
4748
|
# account or by a member account that is a delegated administrator for
|
|
4749
4749
|
# an AWS service.
|
|
4750
4750
|
#
|
|
@@ -4849,7 +4849,7 @@ module Aws::Organizations
|
|
|
4849
4849
|
# Moves an account from its current source parent root or organizational
|
|
4850
4850
|
# unit (OU) to the specified destination parent root or OU.
|
|
4851
4851
|
#
|
|
4852
|
-
# This operation can be called only from the organization's
|
|
4852
|
+
# This operation can be called only from the organization's management
|
|
4853
4853
|
# account.
|
|
4854
4854
|
#
|
|
4855
4855
|
# @option params [required, String] :account_id
|
|
@@ -4941,7 +4941,7 @@ module Aws::Organizations
|
|
|
4941
4941
|
# Services that you can use with AWS Organizations][1] in the *AWS
|
|
4942
4942
|
# Organizations User Guide.*
|
|
4943
4943
|
#
|
|
4944
|
-
# This operation can be called only from the organization's
|
|
4944
|
+
# This operation can be called only from the organization's management
|
|
4945
4945
|
# account.
|
|
4946
4946
|
#
|
|
4947
4947
|
#
|
|
@@ -4978,11 +4978,11 @@ module Aws::Organizations
|
|
|
4978
4978
|
#
|
|
4979
4979
|
# The removed account becomes a standalone account that isn't a member
|
|
4980
4980
|
# of any organization. It's no longer subject to any policies and is
|
|
4981
|
-
# responsible for its own bill payments. The organization's
|
|
4981
|
+
# responsible for its own bill payments. The organization's management
|
|
4982
4982
|
# account is no longer charged for any expenses accrued by the member
|
|
4983
4983
|
# account after it's removed from the organization.
|
|
4984
4984
|
#
|
|
4985
|
-
# This operation can be called only from the organization's
|
|
4985
|
+
# This operation can be called only from the organization's management
|
|
4986
4986
|
# account. Member accounts can remove themselves with LeaveOrganization
|
|
4987
4987
|
# instead.
|
|
4988
4988
|
#
|
|
@@ -5060,7 +5060,7 @@ module Aws::Organizations
|
|
|
5060
5060
|
#
|
|
5061
5061
|
# * Policy (any type)
|
|
5062
5062
|
#
|
|
5063
|
-
# This operation can be called only from the organization's
|
|
5063
|
+
# This operation can be called only from the organization's management
|
|
5064
5064
|
# account.
|
|
5065
5065
|
#
|
|
5066
5066
|
# @option params [required, String] :resource_id
|
|
@@ -5127,7 +5127,7 @@ module Aws::Organizations
|
|
|
5127
5127
|
#
|
|
5128
5128
|
# * Policy (any type)
|
|
5129
5129
|
#
|
|
5130
|
-
# This operation can be called only from the organization's
|
|
5130
|
+
# This operation can be called only from the organization's management
|
|
5131
5131
|
# account.
|
|
5132
5132
|
#
|
|
5133
5133
|
# @option params [required, String] :resource_id
|
|
@@ -5171,7 +5171,7 @@ module Aws::Organizations
|
|
|
5171
5171
|
# change. The child OUs and accounts remain in place, and any attached
|
|
5172
5172
|
# policies of the OU remain attached.
|
|
5173
5173
|
#
|
|
5174
|
-
# This operation can be called only from the organization's
|
|
5174
|
+
# This operation can be called only from the organization's management
|
|
5175
5175
|
# account.
|
|
5176
5176
|
#
|
|
5177
5177
|
# @option params [required, String] :organizational_unit_id
|
|
@@ -5246,7 +5246,7 @@ module Aws::Organizations
|
|
|
5246
5246
|
# If you don't supply any parameter, that value remains unchanged. You
|
|
5247
5247
|
# can't change a policy's type.
|
|
5248
5248
|
#
|
|
5249
|
-
# This operation can be called only from the organization's
|
|
5249
|
+
# This operation can be called only from the organization's management
|
|
5250
5250
|
# account.
|
|
5251
5251
|
#
|
|
5252
5252
|
# @option params [required, String] :policy_id
|
|
@@ -5380,7 +5380,7 @@ module Aws::Organizations
|
|
|
5380
5380
|
params: params,
|
|
5381
5381
|
config: config)
|
|
5382
5382
|
context[:gem_name] = 'aws-sdk-organizations'
|
|
5383
|
-
context[:gem_version] = '1.
|
|
5383
|
+
context[:gem_version] = '1.54.0'
|
|
5384
5384
|
Seahorse::Client::Request.new(handlers, context)
|
|
5385
5385
|
end
|
|
5386
5386
|
|
|
@@ -221,7 +221,7 @@ module Aws::Organizations
|
|
|
221
221
|
end
|
|
222
222
|
|
|
223
223
|
# You can't invite an existing account to your organization until you
|
|
224
|
-
# verify that you own the email address associated with the
|
|
224
|
+
# verify that you own the email address associated with the management
|
|
225
225
|
# account. For more information, see [Email Address Verification][1] in
|
|
226
226
|
# the *AWS Organizations User Guide.*
|
|
227
227
|
#
|
|
@@ -425,9 +425,9 @@ module Aws::Organizations
|
|
|
425
425
|
# </note>
|
|
426
426
|
#
|
|
427
427
|
# * ACCOUNT\_CANNOT\_LEAVE\_ORGANIZAION: You attempted to remove the
|
|
428
|
-
#
|
|
429
|
-
# account. Instead, after you remove all member accounts,
|
|
430
|
-
# organization itself.
|
|
428
|
+
# management account from the organization. You can't remove the
|
|
429
|
+
# management account. Instead, after you remove all member accounts,
|
|
430
|
+
# delete the organization itself.
|
|
431
431
|
#
|
|
432
432
|
# * ACCOUNT\_CANNOT\_LEAVE\_WITHOUT\_EULA: You attempted to remove an
|
|
433
433
|
# account from the organization that doesn't yet have enough
|
|
@@ -466,8 +466,8 @@ module Aws::Organizations
|
|
|
466
466
|
# Support][2].
|
|
467
467
|
#
|
|
468
468
|
# * CANNOT\_REGISTER\_MASTER\_AS\_DELEGATED\_ADMINISTRATOR: You
|
|
469
|
-
# attempted to register the
|
|
470
|
-
# delegated administrator for an AWS service integrated with
|
|
469
|
+
# attempted to register the management account of the organization as
|
|
470
|
+
# a delegated administrator for an AWS service integrated with
|
|
471
471
|
# Organizations. You can designate only a member account as a
|
|
472
472
|
# delegated administrator.
|
|
473
473
|
#
|
|
@@ -496,11 +496,11 @@ module Aws::Organizations
|
|
|
496
496
|
#
|
|
497
497
|
# * MASTER\_ACCOUNT\_ADDRESS\_DOES\_NOT\_MATCH\_MARKETPLACE: To create
|
|
498
498
|
# an account in this organization, you first must migrate the
|
|
499
|
-
# organization's
|
|
500
|
-
# to the
|
|
501
|
-
# addresses must be associated with the AISPL
|
|
502
|
-
# accounts in an organization must be associated with
|
|
503
|
-
# marketplace.
|
|
499
|
+
# organization's management account to the marketplace that
|
|
500
|
+
# corresponds to the management account's address. For example,
|
|
501
|
+
# accounts with India addresses must be associated with the AISPL
|
|
502
|
+
# marketplace. All accounts in an organization must be associated with
|
|
503
|
+
# the same marketplace.
|
|
504
504
|
#
|
|
505
505
|
# * MASTER\_ACCOUNT\_MISSING\_BUSINESS\_LICENSE: Applies only to the AWS
|
|
506
506
|
# Regions in China. To create an organization, the master must have an
|
|
@@ -509,16 +509,16 @@ module Aws::Organizations
|
|
|
509
509
|
#
|
|
510
510
|
# * MASTER\_ACCOUNT\_MISSING\_CONTACT\_INFO: To complete this operation,
|
|
511
511
|
# you must first provide a valid contact address and phone number for
|
|
512
|
-
# the
|
|
512
|
+
# the management account. Then try the operation again.
|
|
513
513
|
#
|
|
514
514
|
# * MASTER\_ACCOUNT\_NOT\_GOVCLOUD\_ENABLED: To complete this operation,
|
|
515
|
-
# the
|
|
515
|
+
# the management account must have an associated account in the AWS
|
|
516
516
|
# GovCloud (US-West) Region. For more information, see [AWS
|
|
517
517
|
# Organizations][3] in the *AWS GovCloud User Guide.*
|
|
518
518
|
#
|
|
519
519
|
# * MASTER\_ACCOUNT\_PAYMENT\_INSTRUMENT\_REQUIRED: To create an
|
|
520
|
-
# organization with this
|
|
521
|
-
# valid payment instrument, such as a credit card, with the account.
|
|
520
|
+
# organization with this management account, you first must associate
|
|
521
|
+
# a valid payment instrument, such as a credit card, with the account.
|
|
522
522
|
# Follow the steps at [To leave an organization when all required
|
|
523
523
|
# account information has not yet been provided][4] in the *AWS
|
|
524
524
|
# Organizations User Guide.*
|
|
@@ -621,10 +621,11 @@ module Aws::Organizations
|
|
|
621
621
|
# (Optional)
|
|
622
622
|
#
|
|
623
623
|
# The name of an IAM role that AWS Organizations automatically
|
|
624
|
-
# preconfigures in the new member account. This role trusts the
|
|
625
|
-
# account, allowing users in the
|
|
626
|
-
# permitted by the
|
|
627
|
-
# administrator permissions in the new
|
|
624
|
+
# preconfigures in the new member account. This role trusts the
|
|
625
|
+
# management account, allowing users in the management account to
|
|
626
|
+
# assume the role, as permitted by the management account
|
|
627
|
+
# administrator. The role has administrator permissions in the new
|
|
628
|
+
# member account.
|
|
628
629
|
#
|
|
629
630
|
# If you don't specify this parameter, the role name defaults to
|
|
630
631
|
# `OrganizationAccountAccessRole`.
|
|
@@ -803,7 +804,7 @@ module Aws::Organizations
|
|
|
803
804
|
# * MISSING\_BUSINESS\_VALIDATION: The AWS account that owns your
|
|
804
805
|
# organization has not received Business Validation.
|
|
805
806
|
#
|
|
806
|
-
# * MISSING\_PAYMENT\_INSTRUMENT: You must configure the
|
|
807
|
+
# * MISSING\_PAYMENT\_INSTRUMENT: You must configure the management
|
|
807
808
|
# account with a valid payment method, such as a credit card.
|
|
808
809
|
# @return [String]
|
|
809
810
|
#
|
|
@@ -874,9 +875,10 @@ module Aws::Organizations
|
|
|
874
875
|
# The name of an IAM role that AWS Organizations automatically
|
|
875
876
|
# preconfigures in the new member accounts in both the AWS GovCloud
|
|
876
877
|
# (US) Region and in the commercial Region. This role trusts the
|
|
877
|
-
#
|
|
878
|
-
# role, as permitted by the
|
|
879
|
-
# administrator permissions in the new
|
|
878
|
+
# management account, allowing users in the management account to
|
|
879
|
+
# assume the role, as permitted by the management account
|
|
880
|
+
# administrator. The role has administrator permissions in the new
|
|
881
|
+
# member account.
|
|
880
882
|
#
|
|
881
883
|
# If you don't specify this parameter, the role name defaults to
|
|
882
884
|
# `OrganizationAccountAccessRole`.
|
|
@@ -977,7 +979,7 @@ module Aws::Organizations
|
|
|
977
979
|
# feature set supports different levels of functionality.
|
|
978
980
|
#
|
|
979
981
|
# * `CONSOLIDATED_BILLING`\: All member accounts have their bills
|
|
980
|
-
# consolidated to and paid by the
|
|
982
|
+
# consolidated to and paid by the management account. For more
|
|
981
983
|
# information, see [Consolidated billing][1] in the *AWS
|
|
982
984
|
# Organizations User Guide.*
|
|
983
985
|
#
|
|
@@ -985,7 +987,7 @@ module Aws::Organizations
|
|
|
985
987
|
# organizations in the AWS GovCloud (US) Region.
|
|
986
988
|
#
|
|
987
989
|
# * `ALL`\: In addition to all the features supported by the
|
|
988
|
-
# consolidated billing feature set, the
|
|
990
|
+
# consolidated billing feature set, the management account can also
|
|
989
991
|
# apply any policy type to any member account in the organization.
|
|
990
992
|
# For more information, see [All features][2] in the *AWS
|
|
991
993
|
# Organizations User Guide.*
|
|
@@ -1516,9 +1518,9 @@ module Aws::Organizations
|
|
|
1516
1518
|
# @return [String]
|
|
1517
1519
|
#
|
|
1518
1520
|
# @!attribute [rw] target_id
|
|
1519
|
-
# When you're signed in as the
|
|
1520
|
-
# account that you want details about. Specifying an organization
|
|
1521
|
-
# or organizational unit (OU) as the target is not supported.
|
|
1521
|
+
# When you're signed in as the management account, specify the ID of
|
|
1522
|
+
# the account that you want details about. Specifying an organization
|
|
1523
|
+
# root or organizational unit (OU) as the target is not supported.
|
|
1522
1524
|
# @return [String]
|
|
1523
1525
|
#
|
|
1524
1526
|
# @see http://docs.aws.amazon.com/goto/WebAPI/organizations-2016-11-28/DescribeEffectivePolicyRequest AWS API Documentation
|
|
@@ -1938,8 +1940,8 @@ module Aws::Organizations
|
|
|
1938
1940
|
include Aws::Structure
|
|
1939
1941
|
end
|
|
1940
1942
|
|
|
1941
|
-
# If you ran this action on the
|
|
1942
|
-
# enabled. If you ran the action on a member account, the account
|
|
1943
|
+
# If you ran this action on the management account, this policy type is
|
|
1944
|
+
# not enabled. If you ran the action on a member account, the account
|
|
1943
1945
|
# doesn't have an effective policy of this type. Contact the
|
|
1944
1946
|
# administrator of your organization about attaching a policy of this
|
|
1945
1947
|
# type to the account.
|
|
@@ -2102,9 +2104,10 @@ module Aws::Organizations
|
|
|
2102
2104
|
|
|
2103
2105
|
# Contains information that must be exchanged to securely establish a
|
|
2104
2106
|
# relationship between two accounts (an *originator* and a *recipient*).
|
|
2105
|
-
# For example, when a
|
|
2106
|
-
# account (the recipient) to join its organization, the two
|
|
2107
|
-
# exchange information as a series of handshake requests and
|
|
2107
|
+
# For example, when a management account (the originator) invites
|
|
2108
|
+
# another account (the recipient) to join its organization, the two
|
|
2109
|
+
# accounts exchange information as a series of handshake requests and
|
|
2110
|
+
# responses.
|
|
2108
2111
|
#
|
|
2109
2112
|
# **Note:** Handshakes that are CANCELED, ACCEPTED, or DECLINED show up
|
|
2110
2113
|
# in lists for only 30 days after entering that state After that they
|
|
@@ -2184,20 +2187,20 @@ module Aws::Organizations
|
|
|
2184
2187
|
# supported:
|
|
2185
2188
|
#
|
|
2186
2189
|
# * **INVITE**\: This type of handshake represents a request to join
|
|
2187
|
-
# an organization. It is always sent from the
|
|
2188
|
-
# non-member accounts.
|
|
2190
|
+
# an organization. It is always sent from the management account to
|
|
2191
|
+
# only non-member accounts.
|
|
2189
2192
|
#
|
|
2190
2193
|
# * **ENABLE\_ALL\_FEATURES**\: This type of handshake represents a
|
|
2191
2194
|
# request to enable all features in an organization. It is always
|
|
2192
|
-
# sent from the
|
|
2193
|
-
# Created accounts do not receive this because those
|
|
2194
|
-
# created by the organization's
|
|
2195
|
-
# inferred.
|
|
2195
|
+
# sent from the management account to only *invited* member
|
|
2196
|
+
# accounts. Created accounts do not receive this because those
|
|
2197
|
+
# accounts were created by the organization's management account
|
|
2198
|
+
# and approval is inferred.
|
|
2196
2199
|
#
|
|
2197
2200
|
# * **APPROVE\_ALL\_FEATURES**\: This type of handshake is sent from
|
|
2198
2201
|
# the Organizations service when all member accounts have approved
|
|
2199
2202
|
# the `ENABLE_ALL_FEATURES` invitation. It is sent only to the
|
|
2200
|
-
#
|
|
2203
|
+
# management account and signals the master that it can finalize the
|
|
2201
2204
|
# process to enable all features.
|
|
2202
2205
|
# @return [String]
|
|
2203
2206
|
#
|
|
@@ -2406,9 +2409,9 @@ module Aws::Organizations
|
|
|
2406
2409
|
# account that receives the handshake.
|
|
2407
2410
|
#
|
|
2408
2411
|
# * `OWNER_EMAIL` - Specifies the email address associated with the
|
|
2409
|
-
#
|
|
2412
|
+
# management account. Included as information about an organization.
|
|
2410
2413
|
#
|
|
2411
|
-
# * `OWNER_NAME` - Specifies the name associated with the
|
|
2414
|
+
# * `OWNER_NAME` - Specifies the name associated with the management
|
|
2412
2415
|
# account. Included as information about an organization.
|
|
2413
2416
|
#
|
|
2414
2417
|
# * `NOTES` - Additional text provided by the handshake initiator and
|
|
@@ -3830,9 +3833,10 @@ module Aws::Organizations
|
|
|
3830
3833
|
include Aws::Structure
|
|
3831
3834
|
end
|
|
3832
3835
|
|
|
3833
|
-
# You can't remove a
|
|
3834
|
-
# the
|
|
3835
|
-
# you must first delete the current organization of the
|
|
3836
|
+
# You can't remove a management account from an organization. If you
|
|
3837
|
+
# want the management account to become a member account in another
|
|
3838
|
+
# organization, you must first delete the current organization of the
|
|
3839
|
+
# management account.
|
|
3836
3840
|
#
|
|
3837
3841
|
# @!attribute [rw] message
|
|
3838
3842
|
# @return [String]
|
|
@@ -3961,7 +3965,7 @@ module Aws::Organizations
|
|
|
3961
3965
|
#
|
|
3962
3966
|
# @!attribute [rw] master_account_arn
|
|
3963
3967
|
# The Amazon Resource Name (ARN) of the account that is designated as
|
|
3964
|
-
# the
|
|
3968
|
+
# the management account for the organization.
|
|
3965
3969
|
#
|
|
3966
3970
|
# For more information about ARNs in Organizations, see [ARN Formats
|
|
3967
3971
|
# Supported by Organizations][1] in the *AWS Organizations User
|
|
@@ -3973,7 +3977,8 @@ module Aws::Organizations
|
|
|
3973
3977
|
# @return [String]
|
|
3974
3978
|
#
|
|
3975
3979
|
# @!attribute [rw] master_account_id
|
|
3976
|
-
# The unique identifier (ID) of the
|
|
3980
|
+
# The unique identifier (ID) of the management account of an
|
|
3981
|
+
# organization.
|
|
3977
3982
|
#
|
|
3978
3983
|
# The [regex pattern][1] for an account ID string requires exactly 12
|
|
3979
3984
|
# digits.
|
|
@@ -3985,7 +3990,7 @@ module Aws::Organizations
|
|
|
3985
3990
|
#
|
|
3986
3991
|
# @!attribute [rw] master_account_email
|
|
3987
3992
|
# The email address that is associated with the AWS account that is
|
|
3988
|
-
# designated as the
|
|
3993
|
+
# designated as the management account for the organization.
|
|
3989
3994
|
# @return [String]
|
|
3990
3995
|
#
|
|
3991
3996
|
# @!attribute [rw] available_policy_types
|
|
@@ -4011,8 +4016,8 @@ module Aws::Organizations
|
|
|
4011
4016
|
end
|
|
4012
4017
|
|
|
4013
4018
|
# The organization isn't empty. To delete an organization, you must
|
|
4014
|
-
# first remove all accounts except the
|
|
4015
|
-
# and delete all policies.
|
|
4019
|
+
# first remove all accounts except the management account, delete all
|
|
4020
|
+
# OUs, and delete all policies.
|
|
4016
4021
|
#
|
|
4017
4022
|
# @!attribute [rw] message
|
|
4018
4023
|
# @return [String]
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: aws-sdk-organizations
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.54.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Amazon Web Services
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2020-10-
|
|
11
|
+
date: 2020-10-21 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: aws-sdk-core
|