@aws-sdk/client-organizations 3.216.0 → 3.218.0

package/dist-types/OrganizationsClient.d.ts

@@ -20,6 +20,7 @@ import { DeclineHandshakeCommandInput, DeclineHandshakeCommandOutput } from "./c
 import { DeleteOrganizationalUnitCommandInput, DeleteOrganizationalUnitCommandOutput } from "./commands/DeleteOrganizationalUnitCommand";
 import { DeleteOrganizationCommandInput, DeleteOrganizationCommandOutput } from "./commands/DeleteOrganizationCommand";
 import { DeletePolicyCommandInput, DeletePolicyCommandOutput } from "./commands/DeletePolicyCommand";
+import { DeleteResourcePolicyCommandInput, DeleteResourcePolicyCommandOutput } from "./commands/DeleteResourcePolicyCommand";
 import { DeregisterDelegatedAdministratorCommandInput, DeregisterDelegatedAdministratorCommandOutput } from "./commands/DeregisterDelegatedAdministratorCommand";
 import { DescribeAccountCommandInput, DescribeAccountCommandOutput } from "./commands/DescribeAccountCommand";
 import { DescribeCreateAccountStatusCommandInput, DescribeCreateAccountStatusCommandOutput } from "./commands/DescribeCreateAccountStatusCommand";
@@ -28,6 +29,7 @@ import { DescribeHandshakeCommandInput, DescribeHandshakeCommandOutput } from ".
 import { DescribeOrganizationalUnitCommandInput, DescribeOrganizationalUnitCommandOutput } from "./commands/DescribeOrganizationalUnitCommand";
 import { DescribeOrganizationCommandInput, DescribeOrganizationCommandOutput } from "./commands/DescribeOrganizationCommand";
 import { DescribePolicyCommandInput, DescribePolicyCommandOutput } from "./commands/DescribePolicyCommand";
+import { DescribeResourcePolicyCommandInput, DescribeResourcePolicyCommandOutput } from "./commands/DescribeResourcePolicyCommand";
 import { DetachPolicyCommandInput, DetachPolicyCommandOutput } from "./commands/DetachPolicyCommand";
 import { DisableAWSServiceAccessCommandInput, DisableAWSServiceAccessCommandOutput } from "./commands/DisableAWSServiceAccessCommand";
 import { DisablePolicyTypeCommandInput, DisablePolicyTypeCommandOutput } from "./commands/DisablePolicyTypeCommand";
@@ -53,6 +55,7 @@ import { ListRootsCommandInput, ListRootsCommandOutput } from "./commands/ListRo
 import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
 import { ListTargetsForPolicyCommandInput, ListTargetsForPolicyCommandOutput } from "./commands/ListTargetsForPolicyCommand";
 import { MoveAccountCommandInput, MoveAccountCommandOutput } from "./commands/MoveAccountCommand";
+import { PutResourcePolicyCommandInput, PutResourcePolicyCommandOutput } from "./commands/PutResourcePolicyCommand";
 import { RegisterDelegatedAdministratorCommandInput, RegisterDelegatedAdministratorCommandOutput } from "./commands/RegisterDelegatedAdministratorCommand";
 import { RemoveAccountFromOrganizationCommandInput, RemoveAccountFromOrganizationCommandOutput } from "./commands/RemoveAccountFromOrganizationCommand";
 import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/TagResourceCommand";
@@ -60,8 +63,8 @@ import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./command
 import { UpdateOrganizationalUnitCommandInput, UpdateOrganizationalUnitCommandOutput } from "./commands/UpdateOrganizationalUnitCommand";
 import { UpdatePolicyCommandInput, UpdatePolicyCommandOutput } from "./commands/UpdatePolicyCommand";
 import { ClientInputEndpointParameters, ClientResolvedEndpointParameters, EndpointParameters } from "./endpoint/EndpointParameters";
-export declare type ServiceInputTypes = AcceptHandshakeCommandInput | AttachPolicyCommandInput | CancelHandshakeCommandInput | CloseAccountCommandInput | CreateAccountCommandInput | CreateGovCloudAccountCommandInput | CreateOrganizationCommandInput | CreateOrganizationalUnitCommandInput | CreatePolicyCommandInput | DeclineHandshakeCommandInput | DeleteOrganizationCommandInput | DeleteOrganizationalUnitCommandInput | DeletePolicyCommandInput | DeregisterDelegatedAdministratorCommandInput | DescribeAccountCommandInput | DescribeCreateAccountStatusCommandInput | DescribeEffectivePolicyCommandInput | DescribeHandshakeCommandInput | DescribeOrganizationCommandInput | DescribeOrganizationalUnitCommandInput | DescribePolicyCommandInput | DetachPolicyCommandInput | DisableAWSServiceAccessCommandInput | DisablePolicyTypeCommandInput | EnableAWSServiceAccessCommandInput | EnableAllFeaturesCommandInput | EnablePolicyTypeCommandInput | InviteAccountToOrganizationCommandInput | LeaveOrganizationCommandInput | ListAWSServiceAccessForOrganizationCommandInput | ListAccountsCommandInput | ListAccountsForParentCommandInput | ListChildrenCommandInput | ListCreateAccountStatusCommandInput | ListDelegatedAdministratorsCommandInput | ListDelegatedServicesForAccountCommandInput | ListHandshakesForAccountCommandInput | ListHandshakesForOrganizationCommandInput | ListOrganizationalUnitsForParentCommandInput | ListParentsCommandInput | ListPoliciesCommandInput | ListPoliciesForTargetCommandInput | ListRootsCommandInput | ListTagsForResourceCommandInput | ListTargetsForPolicyCommandInput | MoveAccountCommandInput | RegisterDelegatedAdministratorCommandInput | RemoveAccountFromOrganizationCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateOrganizationalUnitCommandInput | UpdatePolicyCommandInput;
-export declare type ServiceOutputTypes = AcceptHandshakeCommandOutput | AttachPolicyCommandOutput | CancelHandshakeCommandOutput | CloseAccountCommandOutput | CreateAccountCommandOutput | CreateGovCloudAccountCommandOutput | CreateOrganizationCommandOutput | CreateOrganizationalUnitCommandOutput | CreatePolicyCommandOutput | DeclineHandshakeCommandOutput | DeleteOrganizationCommandOutput | DeleteOrganizationalUnitCommandOutput | DeletePolicyCommandOutput | DeregisterDelegatedAdministratorCommandOutput | DescribeAccountCommandOutput | DescribeCreateAccountStatusCommandOutput | DescribeEffectivePolicyCommandOutput | DescribeHandshakeCommandOutput | DescribeOrganizationCommandOutput | DescribeOrganizationalUnitCommandOutput | DescribePolicyCommandOutput | DetachPolicyCommandOutput | DisableAWSServiceAccessCommandOutput | DisablePolicyTypeCommandOutput | EnableAWSServiceAccessCommandOutput | EnableAllFeaturesCommandOutput | EnablePolicyTypeCommandOutput | InviteAccountToOrganizationCommandOutput | LeaveOrganizationCommandOutput | ListAWSServiceAccessForOrganizationCommandOutput | ListAccountsCommandOutput | ListAccountsForParentCommandOutput | ListChildrenCommandOutput | ListCreateAccountStatusCommandOutput | ListDelegatedAdministratorsCommandOutput | ListDelegatedServicesForAccountCommandOutput | ListHandshakesForAccountCommandOutput | ListHandshakesForOrganizationCommandOutput | ListOrganizationalUnitsForParentCommandOutput | ListParentsCommandOutput | ListPoliciesCommandOutput | ListPoliciesForTargetCommandOutput | ListRootsCommandOutput | ListTagsForResourceCommandOutput | ListTargetsForPolicyCommandOutput | MoveAccountCommandOutput | RegisterDelegatedAdministratorCommandOutput | RemoveAccountFromOrganizationCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateOrganizationalUnitCommandOutput | UpdatePolicyCommandOutput;
+export declare type ServiceInputTypes = AcceptHandshakeCommandInput | AttachPolicyCommandInput | CancelHandshakeCommandInput | CloseAccountCommandInput | CreateAccountCommandInput | CreateGovCloudAccountCommandInput | CreateOrganizationCommandInput | CreateOrganizationalUnitCommandInput | CreatePolicyCommandInput | DeclineHandshakeCommandInput | DeleteOrganizationCommandInput | DeleteOrganizationalUnitCommandInput | DeletePolicyCommandInput | DeleteResourcePolicyCommandInput | DeregisterDelegatedAdministratorCommandInput | DescribeAccountCommandInput | DescribeCreateAccountStatusCommandInput | DescribeEffectivePolicyCommandInput | DescribeHandshakeCommandInput | DescribeOrganizationCommandInput | DescribeOrganizationalUnitCommandInput | DescribePolicyCommandInput | DescribeResourcePolicyCommandInput | DetachPolicyCommandInput | DisableAWSServiceAccessCommandInput | DisablePolicyTypeCommandInput | EnableAWSServiceAccessCommandInput | EnableAllFeaturesCommandInput | EnablePolicyTypeCommandInput | InviteAccountToOrganizationCommandInput | LeaveOrganizationCommandInput | ListAWSServiceAccessForOrganizationCommandInput | ListAccountsCommandInput | ListAccountsForParentCommandInput | ListChildrenCommandInput | ListCreateAccountStatusCommandInput | ListDelegatedAdministratorsCommandInput | ListDelegatedServicesForAccountCommandInput | ListHandshakesForAccountCommandInput | ListHandshakesForOrganizationCommandInput | ListOrganizationalUnitsForParentCommandInput | ListParentsCommandInput | ListPoliciesCommandInput | ListPoliciesForTargetCommandInput | ListRootsCommandInput | ListTagsForResourceCommandInput | ListTargetsForPolicyCommandInput | MoveAccountCommandInput | PutResourcePolicyCommandInput | RegisterDelegatedAdministratorCommandInput | RemoveAccountFromOrganizationCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateOrganizationalUnitCommandInput | UpdatePolicyCommandInput;
+export declare type ServiceOutputTypes = AcceptHandshakeCommandOutput | AttachPolicyCommandOutput | CancelHandshakeCommandOutput | CloseAccountCommandOutput | CreateAccountCommandOutput | CreateGovCloudAccountCommandOutput | CreateOrganizationCommandOutput | CreateOrganizationalUnitCommandOutput | CreatePolicyCommandOutput | DeclineHandshakeCommandOutput | DeleteOrganizationCommandOutput | DeleteOrganizationalUnitCommandOutput | DeletePolicyCommandOutput | DeleteResourcePolicyCommandOutput | DeregisterDelegatedAdministratorCommandOutput | DescribeAccountCommandOutput | DescribeCreateAccountStatusCommandOutput | DescribeEffectivePolicyCommandOutput | DescribeHandshakeCommandOutput | DescribeOrganizationCommandOutput | DescribeOrganizationalUnitCommandOutput | DescribePolicyCommandOutput | DescribeResourcePolicyCommandOutput | DetachPolicyCommandOutput | DisableAWSServiceAccessCommandOutput | DisablePolicyTypeCommandOutput | EnableAWSServiceAccessCommandOutput | EnableAllFeaturesCommandOutput | EnablePolicyTypeCommandOutput | InviteAccountToOrganizationCommandOutput | LeaveOrganizationCommandOutput | ListAWSServiceAccessForOrganizationCommandOutput | ListAccountsCommandOutput | ListAccountsForParentCommandOutput | ListChildrenCommandOutput | ListCreateAccountStatusCommandOutput | ListDelegatedAdministratorsCommandOutput | ListDelegatedServicesForAccountCommandOutput | ListHandshakesForAccountCommandOutput | ListHandshakesForOrganizationCommandOutput | ListOrganizationalUnitsForParentCommandOutput | ListParentsCommandOutput | ListPoliciesCommandOutput | ListPoliciesForTargetCommandOutput | ListRootsCommandOutput | ListTagsForResourceCommandOutput | ListTargetsForPolicyCommandOutput | MoveAccountCommandOutput | PutResourcePolicyCommandOutput | RegisterDelegatedAdministratorCommandOutput | RemoveAccountFromOrganizationCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateOrganizationalUnitCommandOutput | UpdatePolicyCommandOutput;
 export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__HttpHandlerOptions>> {
     /**
      * The HTTP handler to use. Fetch in browser and Https in Nodejs.

package/dist-types/commands/AcceptHandshakeCommand.d.ts

@@ -10,7 +10,7 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
 /**
  * <p>Sends a response to the originator of a handshake agreeing to the action proposed by
  *             the handshake request.</p>
- *         <p>This operation can be called only by the following principals when they also have the
+ *         <p>You can only call this operation by the following principals when they also have the
  *             relevant IAM permissions:</p>
  *         <ul>
  *             <li>

package/dist-types/commands/CloseAccountCommand.d.ts

@@ -44,9 +44,9 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
  *                         grace period while the account is in SUSPENDED status. </p>
  *                 </li>
  *                <li>
- *                     <p>If the Amazon Web Services account you attempt to close is linked to an Amazon Web Services GovCloud (US)
- *                         account, the <code>CloseAccount</code> request will close both accounts. To
- *                         learn important pre-closure details, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/Closing-govcloud-account.html">
+ *                     <p>If the Amazon Web Services account you attempt to close is linked to an Amazon Web Services GovCloud
+ *                         (US) account, the <code>CloseAccount</code> request will close both
+ *                         accounts. To learn important pre-closure details, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/Closing-govcloud-account.html">
  *                             Closing an Amazon Web Services GovCloud (US) account</a> in the <i>
  *                             Amazon Web Services GovCloud User Guide</i>.</p>
  *                 </li>

package/dist-types/commands/CreateAccountCommand.d.ts

@@ -16,8 +16,8 @@ export interface CreateAccountCommandOutput extends CreateAccountResponse, __Met
  *             account. To check the status of the request, do one of the following:</p>
  *         <ul>
  *             <li>
- *                 <p>Use the <code>Id</code> member of the <code>CreateAccountStatus</code>
- *                     response element from this operation to provide as a parameter to the <a>DescribeCreateAccountStatus</a> operation.</p>
+ *                 <p>Use the <code>Id</code> value of the <code>CreateAccountStatus</code> response
+ *                     element from this operation to provide as a parameter to the <a>DescribeCreateAccountStatus</a> operation.</p>
  *             </li>
  *             <li>
  *                 <p>Check the CloudTrail log for the <code>CreateAccountResult</code> event. For

package/dist-types/commands/DeleteResourcePolicyCommand.d.ts

@@ -0,0 +1,37 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface DeleteResourcePolicyCommandInput {
+}
+export interface DeleteResourcePolicyCommandOutput extends __MetadataBearer {
+}
+/**
+ * <p>Deletes the resource policy from your organization.</p>
+ *         <p>You can only call this operation from the organization's management account.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DeleteResourcePolicyCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DeleteResourcePolicyCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DeleteResourcePolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DeleteResourcePolicyCommandInput} for command's `input` shape.
+ * @see {@link DeleteResourcePolicyCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for OrganizationsClient's `config` shape.
+ *
+ */
+export declare class DeleteResourcePolicyCommand extends $Command<DeleteResourcePolicyCommandInput, DeleteResourcePolicyCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: DeleteResourcePolicyCommandInput;
+    static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    constructor(input: DeleteResourcePolicyCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DeleteResourcePolicyCommandInput, DeleteResourcePolicyCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/DescribeResourcePolicyCommand.d.ts

@@ -0,0 +1,38 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { DescribeResourcePolicyResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface DescribeResourcePolicyCommandInput {
+}
+export interface DescribeResourcePolicyCommandOutput extends DescribeResourcePolicyResponse, __MetadataBearer {
+}
+/**
+ * <p>Retrieves information about a resource policy.</p>
+ *         <p>You can only call this operation from the organization's management account or by a member account that is a delegated administrator for an AWS service.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DescribeResourcePolicyCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DescribeResourcePolicyCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DescribeResourcePolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DescribeResourcePolicyCommandInput} for command's `input` shape.
+ * @see {@link DescribeResourcePolicyCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for OrganizationsClient's `config` shape.
+ *
+ */
+export declare class DescribeResourcePolicyCommand extends $Command<DescribeResourcePolicyCommandInput, DescribeResourcePolicyCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: DescribeResourcePolicyCommandInput;
+    static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    constructor(input: DescribeResourcePolicyCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DescribeResourcePolicyCommandInput, DescribeResourcePolicyCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/EnableAWSServiceAccessCommand.d.ts

@@ -25,7 +25,7 @@ export interface EnableAWSServiceAccessCommandOutput extends __MetadataBearer {
  *                 Organizations with Other Amazon Web Services Services</a> in the
  *                 <i>Organizations User Guide.</i>
  *          </p>
- *         <p>This operation can be called only from the organization's management account and only
+ *         <p>You can only call this operation from the organization's management account and only
  *             if the organization has <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">enabled all
  *                 features</a>.</p>
  * @example

package/dist-types/commands/PutResourcePolicyCommand.d.ts

@@ -0,0 +1,38 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { PutResourcePolicyRequest, PutResourcePolicyResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface PutResourcePolicyCommandInput extends PutResourcePolicyRequest {
+}
+export interface PutResourcePolicyCommandOutput extends PutResourcePolicyResponse, __MetadataBearer {
+}
+/**
+ * <p>Creates or updates a resource policy.</p>
+ *         <p>You can only call this operation from the organization's management account.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, PutResourcePolicyCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, PutResourcePolicyCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new PutResourcePolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link PutResourcePolicyCommandInput} for command's `input` shape.
+ * @see {@link PutResourcePolicyCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for OrganizationsClient's `config` shape.
+ *
+ */
+export declare class PutResourcePolicyCommand extends $Command<PutResourcePolicyCommandInput, PutResourcePolicyCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: PutResourcePolicyCommandInput;
+    static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    constructor(input: PutResourcePolicyCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<PutResourcePolicyCommandInput, PutResourcePolicyCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/commands/index.d.ts

@@ -11,6 +11,7 @@ export * from "./DeclineHandshakeCommand";
 export * from "./DeleteOrganizationCommand";
 export * from "./DeleteOrganizationalUnitCommand";
 export * from "./DeletePolicyCommand";
+export * from "./DeleteResourcePolicyCommand";
 export * from "./DeregisterDelegatedAdministratorCommand";
 export * from "./DescribeAccountCommand";
 export * from "./DescribeCreateAccountStatusCommand";
@@ -19,6 +20,7 @@ export * from "./DescribeHandshakeCommand";
 export * from "./DescribeOrganizationCommand";
 export * from "./DescribeOrganizationalUnitCommand";
 export * from "./DescribePolicyCommand";
+export * from "./DescribeResourcePolicyCommand";
 export * from "./DetachPolicyCommand";
 export * from "./DisableAWSServiceAccessCommand";
 export * from "./DisablePolicyTypeCommand";
@@ -44,6 +46,7 @@ export * from "./ListRootsCommand";
 export * from "./ListTagsForResourceCommand";
 export * from "./ListTargetsForPolicyCommand";
 export * from "./MoveAccountCommand";
+export * from "./PutResourcePolicyCommand";
 export * from "./RegisterDelegatedAdministratorCommand";
 export * from "./RemoveAccountFromOrganizationCommand";
 export * from "./TagResourceCommand";

package/dist-types/endpoint/EndpointParameters.d.ts

@@ -12,7 +12,7 @@ export declare const resolveClientEndpointParameters: <T>(options: T & ClientInp
     defaultSigningName: string;
 };
 export interface EndpointParameters extends __EndpointParameters {
-    Region?: string;
+    Region: string;
     UseDualStack?: boolean;
     UseFIPS?: boolean;
     Endpoint?: string;

package/dist-types/models/models_0.d.ts

@@ -246,6 +246,7 @@ export declare enum InvalidInputExceptionReason {
     INVALID_PARTY_TYPE_TARGET = "INVALID_PARTY_TYPE_TARGET",
     INVALID_PATTERN = "INVALID_PATTERN",
     INVALID_PATTERN_TARGET_ID = "INVALID_PATTERN_TARGET_ID",
+    INVALID_RESOURCE_POLICY_JSON = "INVALID_RESOURCE_POLICY_JSON",
     INVALID_ROLE_NAME = "INVALID_ROLE_NAME",
     INVALID_SYNTAX_ORGANIZATION = "INVALID_SYNTAX_ORGANIZATION_ARN",
     INVALID_SYNTAX_POLICY = "INVALID_SYNTAX_POLICY_ID",
@@ -257,7 +258,10 @@ export declare enum InvalidInputExceptionReason {
     MIN_VALUE_EXCEEDED = "MIN_VALUE_EXCEEDED",
     MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS = "MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS",
     TARGET_NOT_SUPPORTED = "TARGET_NOT_SUPPORTED",
-    UNRECOGNIZED_SERVICE_PRINCIPAL = "UNRECOGNIZED_SERVICE_PRINCIPAL"
+    UNRECOGNIZED_SERVICE_PRINCIPAL = "UNRECOGNIZED_SERVICE_PRINCIPAL",
+    UNSUPPORTED_ACTION_IN_RESOURCE_POLICY = "UNSUPPORTED_ACTION_IN_RESOURCE_POLICY",
+    UNSUPPORTED_POLICY_TYPE_IN_RESOURCE_POLICY = "UNSUPPORTED_POLICY_TYPE_IN_RESOURCE_POLICY",
+    UNSUPPORTED_RESOURCE_IN_RESOURCE_POLICY = "UNSUPPORTED_RESOURCE_IN_RESOURCE_POLICY"
 }
 /**
  * <p>The requested operation failed because you provided invalid values for one or more of
@@ -993,8 +997,7 @@ export interface CreateAccountRequest {
      */
     AccountName: string | undefined;
     /**
-     * <p>(Optional)</p>
-     *         <p>The name of an IAM role that Organizations automatically preconfigures in the new member
+     * <p>The name of an IAM role that Organizations automatically preconfigures in the new member
      *             account. This role trusts the management account, allowing users in the management
      *             account to assume the role, as permitted by the management account administrator. The
      *             role has administrator permissions in the new member account.</p>
@@ -1061,7 +1064,8 @@ export declare enum CreateAccountFailureReason {
     MISSING_BUSINESS_VALIDATION = "MISSING_BUSINESS_VALIDATION",
     MISSING_PAYMENT_INSTRUMENT = "MISSING_PAYMENT_INSTRUMENT",
     PENDING_BUSINESS_VALIDATIONv = "PENDING_BUSINESS_VALIDATION",
-    UNKNOWN_BUSINESS_VALIDATION = "UNKNOWN_BUSINESS_VALIDATION"
+    UNKNOWN_BUSINESS_VALIDATION = "UNKNOWN_BUSINESS_VALIDATION",
+    UPDATE_EXISTING_RESOURCE_POLICY_WITH_TAGS_NOT_SUPPORTED = "UPDATE_EXISTING_RESOURCE_POLICY_WITH_TAGS_NOT_SUPPORTED"
 }
 export declare enum CreateAccountState {
     FAILED = "FAILED",
@@ -1765,6 +1769,18 @@ export declare class PolicyInUseException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<PolicyInUseException, __BaseException>);
 }
+/**
+ * <p>We can't find a resource policy request with the parameter that you specified.</p>
+ */
+export declare class ResourcePolicyNotFoundException extends __BaseException {
+    readonly name: "ResourcePolicyNotFoundException";
+    readonly $fault: "client";
+    Message?: string;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ResourcePolicyNotFoundException, __BaseException>);
+}
 export interface DeregisterDelegatedAdministratorRequest {
     /**
      * <p>The account ID number of the member account in the organization that you want to
@@ -1962,6 +1978,38 @@ export interface DescribePolicyResponse {
      */
     Policy?: Policy;
 }
+/**
+ * <p>A structure that contains resource policy ID and Amazon Resource Name (ARN).</p>
+ */
+export interface ResourcePolicySummary {
+    /**
+     * <p>The unique identifier (ID) of the resource policy.</p>
+     */
+    Id?: string;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the resource policy.</p>
+     */
+    Arn?: string;
+}
+/**
+ * <p>A structure that contains details about a resource policy.</p>
+ */
+export interface ResourcePolicy {
+    /**
+     * <p>A structure that contains resource policy ID and Amazon Resource Name (ARN).</p>
+     */
+    ResourcePolicySummary?: ResourcePolicySummary;
+    /**
+     * <p>The policy text of the resource policy.</p>
+     */
+    Content?: string;
+}
+export interface DescribeResourcePolicyResponse {
+    /**
+     * <p>A structure that contains details about the resource policy.</p>
+     */
+    ResourcePolicy?: ResourcePolicy;
+}
 export interface DetachPolicyRequest {
     /**
      * <p>The unique identifier (ID) of the policy you want to detach. You can get the ID from
@@ -3293,6 +3341,33 @@ export declare class SourceParentNotFoundException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<SourceParentNotFoundException, __BaseException>);
 }
+export interface PutResourcePolicyRequest {
+    /**
+     * <p>If provided, the new content for the resource policy. The text must be correctly formatted JSON
+     *             that complies with the syntax for the resource policy's type. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_scp-syntax.html">Service
+     *                 Control Policy Syntax</a> in the <i>Organizations User Guide.</i>
+     *          </p>
+     */
+    Content: string | undefined;
+    /**
+     * <p>Updates the list of tags that you want to attach to the newly-created resource policy. For each tag in
+     *             the list, you must specify both a tag key and a value. You can set the value to an empty
+     *             string, but you can't set it to <code>null</code>. For more information about tagging,
+     *             see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging Organizations
+     *                 resources</a> in the Organizations User Guide.</p>
+     *         <note>
+     *             <p>Calls with tags apply to the initial creation of the resource policy, otherwise an exception is thrown. If any one of the tags is invalid or if you exceed the allowed number of tags for
+     *                 the resource policy, then the entire request fails and the resource policy is not created. </p>
+     *         </note>
+     */
+    Tags?: Tag[];
+}
+export interface PutResourcePolicyResponse {
+    /**
+     * <p>A structure that contains details about the resource policy.</p>
+     */
+    ResourcePolicy?: ResourcePolicy;
+}
 export interface RegisterDelegatedAdministratorRequest {
     /**
      * <p>The account ID number of the member account in the organization to register as a
@@ -3839,6 +3914,18 @@ export declare const DescribePolicyRequestFilterSensitiveLog: (obj: DescribePoli
  * @internal
  */
 export declare const DescribePolicyResponseFilterSensitiveLog: (obj: DescribePolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const ResourcePolicySummaryFilterSensitiveLog: (obj: ResourcePolicySummary) => any;
+/**
+ * @internal
+ */
+export declare const ResourcePolicyFilterSensitiveLog: (obj: ResourcePolicy) => any;
+/**
+ * @internal
+ */
+export declare const DescribeResourcePolicyResponseFilterSensitiveLog: (obj: DescribeResourcePolicyResponse) => any;
 /**
  * @internal
  */
@@ -4031,6 +4118,14 @@ export declare const ListTargetsForPolicyResponseFilterSensitiveLog: (obj: ListT
  * @internal
  */
 export declare const MoveAccountRequestFilterSensitiveLog: (obj: MoveAccountRequest) => any;
+/**
+ * @internal
+ */
+export declare const PutResourcePolicyRequestFilterSensitiveLog: (obj: PutResourcePolicyRequest) => any;
+/**
+ * @internal
+ */
+export declare const PutResourcePolicyResponseFilterSensitiveLog: (obj: PutResourcePolicyResponse) => any;
 /**
  * @internal
  */

package/dist-types/protocols/Aws_json1_1.d.ts

@@ -13,6 +13,7 @@ import { DeclineHandshakeCommandInput, DeclineHandshakeCommandOutput } from "../
 import { DeleteOrganizationalUnitCommandInput, DeleteOrganizationalUnitCommandOutput } from "../commands/DeleteOrganizationalUnitCommand";
 import { DeleteOrganizationCommandInput, DeleteOrganizationCommandOutput } from "../commands/DeleteOrganizationCommand";
 import { DeletePolicyCommandInput, DeletePolicyCommandOutput } from "../commands/DeletePolicyCommand";
+import { DeleteResourcePolicyCommandInput, DeleteResourcePolicyCommandOutput } from "../commands/DeleteResourcePolicyCommand";
 import { DeregisterDelegatedAdministratorCommandInput, DeregisterDelegatedAdministratorCommandOutput } from "../commands/DeregisterDelegatedAdministratorCommand";
 import { DescribeAccountCommandInput, DescribeAccountCommandOutput } from "../commands/DescribeAccountCommand";
 import { DescribeCreateAccountStatusCommandInput, DescribeCreateAccountStatusCommandOutput } from "../commands/DescribeCreateAccountStatusCommand";
@@ -21,6 +22,7 @@ import { DescribeHandshakeCommandInput, DescribeHandshakeCommandOutput } from ".
 import { DescribeOrganizationalUnitCommandInput, DescribeOrganizationalUnitCommandOutput } from "../commands/DescribeOrganizationalUnitCommand";
 import { DescribeOrganizationCommandInput, DescribeOrganizationCommandOutput } from "../commands/DescribeOrganizationCommand";
 import { DescribePolicyCommandInput, DescribePolicyCommandOutput } from "../commands/DescribePolicyCommand";
+import { DescribeResourcePolicyCommandInput, DescribeResourcePolicyCommandOutput } from "../commands/DescribeResourcePolicyCommand";
 import { DetachPolicyCommandInput, DetachPolicyCommandOutput } from "../commands/DetachPolicyCommand";
 import { DisableAWSServiceAccessCommandInput, DisableAWSServiceAccessCommandOutput } from "../commands/DisableAWSServiceAccessCommand";
 import { DisablePolicyTypeCommandInput, DisablePolicyTypeCommandOutput } from "../commands/DisablePolicyTypeCommand";
@@ -46,6 +48,7 @@ import { ListRootsCommandInput, ListRootsCommandOutput } from "../commands/ListR
 import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "../commands/ListTagsForResourceCommand";
 import { ListTargetsForPolicyCommandInput, ListTargetsForPolicyCommandOutput } from "../commands/ListTargetsForPolicyCommand";
 import { MoveAccountCommandInput, MoveAccountCommandOutput } from "../commands/MoveAccountCommand";
+import { PutResourcePolicyCommandInput, PutResourcePolicyCommandOutput } from "../commands/PutResourcePolicyCommand";
 import { RegisterDelegatedAdministratorCommandInput, RegisterDelegatedAdministratorCommandOutput } from "../commands/RegisterDelegatedAdministratorCommand";
 import { RemoveAccountFromOrganizationCommandInput, RemoveAccountFromOrganizationCommandOutput } from "../commands/RemoveAccountFromOrganizationCommand";
 import { TagResourceCommandInput, TagResourceCommandOutput } from "../commands/TagResourceCommand";
@@ -65,6 +68,7 @@ export declare const serializeAws_json1_1DeclineHandshakeCommand: (input: Declin
 export declare const serializeAws_json1_1DeleteOrganizationCommand: (input: DeleteOrganizationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DeleteOrganizationalUnitCommand: (input: DeleteOrganizationalUnitCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DeletePolicyCommand: (input: DeletePolicyCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+export declare const serializeAws_json1_1DeleteResourcePolicyCommand: (input: DeleteResourcePolicyCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DeregisterDelegatedAdministratorCommand: (input: DeregisterDelegatedAdministratorCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DescribeAccountCommand: (input: DescribeAccountCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DescribeCreateAccountStatusCommand: (input: DescribeCreateAccountStatusCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
@@ -73,6 +77,7 @@ export declare const serializeAws_json1_1DescribeHandshakeCommand: (input: Descr
 export declare const serializeAws_json1_1DescribeOrganizationCommand: (input: DescribeOrganizationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DescribeOrganizationalUnitCommand: (input: DescribeOrganizationalUnitCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DescribePolicyCommand: (input: DescribePolicyCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+export declare const serializeAws_json1_1DescribeResourcePolicyCommand: (input: DescribeResourcePolicyCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DetachPolicyCommand: (input: DetachPolicyCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DisableAWSServiceAccessCommand: (input: DisableAWSServiceAccessCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1DisablePolicyTypeCommand: (input: DisablePolicyTypeCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
@@ -98,6 +103,7 @@ export declare const serializeAws_json1_1ListRootsCommand: (input: ListRootsComm
 export declare const serializeAws_json1_1ListTagsForResourceCommand: (input: ListTagsForResourceCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1ListTargetsForPolicyCommand: (input: ListTargetsForPolicyCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1MoveAccountCommand: (input: MoveAccountCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
+export declare const serializeAws_json1_1PutResourcePolicyCommand: (input: PutResourcePolicyCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1RegisterDelegatedAdministratorCommand: (input: RegisterDelegatedAdministratorCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1RemoveAccountFromOrganizationCommand: (input: RemoveAccountFromOrganizationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
 export declare const serializeAws_json1_1TagResourceCommand: (input: TagResourceCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
@@ -117,6 +123,7 @@ export declare const deserializeAws_json1_1DeclineHandshakeCommand: (output: __H
 export declare const deserializeAws_json1_1DeleteOrganizationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteOrganizationCommandOutput>;
 export declare const deserializeAws_json1_1DeleteOrganizationalUnitCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteOrganizationalUnitCommandOutput>;
 export declare const deserializeAws_json1_1DeletePolicyCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeletePolicyCommandOutput>;
+export declare const deserializeAws_json1_1DeleteResourcePolicyCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteResourcePolicyCommandOutput>;
 export declare const deserializeAws_json1_1DeregisterDelegatedAdministratorCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeregisterDelegatedAdministratorCommandOutput>;
 export declare const deserializeAws_json1_1DescribeAccountCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeAccountCommandOutput>;
 export declare const deserializeAws_json1_1DescribeCreateAccountStatusCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeCreateAccountStatusCommandOutput>;
@@ -125,6 +132,7 @@ export declare const deserializeAws_json1_1DescribeHandshakeCommand: (output: __
 export declare const deserializeAws_json1_1DescribeOrganizationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeOrganizationCommandOutput>;
 export declare const deserializeAws_json1_1DescribeOrganizationalUnitCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeOrganizationalUnitCommandOutput>;
 export declare const deserializeAws_json1_1DescribePolicyCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribePolicyCommandOutput>;
+export declare const deserializeAws_json1_1DescribeResourcePolicyCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeResourcePolicyCommandOutput>;
 export declare const deserializeAws_json1_1DetachPolicyCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DetachPolicyCommandOutput>;
 export declare const deserializeAws_json1_1DisableAWSServiceAccessCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DisableAWSServiceAccessCommandOutput>;
 export declare const deserializeAws_json1_1DisablePolicyTypeCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DisablePolicyTypeCommandOutput>;
@@ -150,6 +158,7 @@ export declare const deserializeAws_json1_1ListRootsCommand: (output: __HttpResp
 export declare const deserializeAws_json1_1ListTagsForResourceCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListTagsForResourceCommandOutput>;
 export declare const deserializeAws_json1_1ListTargetsForPolicyCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListTargetsForPolicyCommandOutput>;
 export declare const deserializeAws_json1_1MoveAccountCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<MoveAccountCommandOutput>;
+export declare const deserializeAws_json1_1PutResourcePolicyCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<PutResourcePolicyCommandOutput>;
 export declare const deserializeAws_json1_1RegisterDelegatedAdministratorCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RegisterDelegatedAdministratorCommandOutput>;
 export declare const deserializeAws_json1_1RemoveAccountFromOrganizationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RemoveAccountFromOrganizationCommandOutput>;
 export declare const deserializeAws_json1_1TagResourceCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<TagResourceCommandOutput>;

package/dist-types/ts3.4/Organizations.d.ts

@@ -51,6 +51,10 @@ import {
   DeletePolicyCommandInput,
   DeletePolicyCommandOutput,
 } from "./commands/DeletePolicyCommand";
+import {
+  DeleteResourcePolicyCommandInput,
+  DeleteResourcePolicyCommandOutput,
+} from "./commands/DeleteResourcePolicyCommand";
 import {
   DeregisterDelegatedAdministratorCommandInput,
   DeregisterDelegatedAdministratorCommandOutput,
@@ -83,6 +87,10 @@ import {
   DescribePolicyCommandInput,
   DescribePolicyCommandOutput,
 } from "./commands/DescribePolicyCommand";
+import {
+  DescribeResourcePolicyCommandInput,
+  DescribeResourcePolicyCommandOutput,
+} from "./commands/DescribeResourcePolicyCommand";
 import {
   DetachPolicyCommandInput,
   DetachPolicyCommandOutput,
@@ -183,6 +191,10 @@ import {
   MoveAccountCommandInput,
   MoveAccountCommandOutput,
 } from "./commands/MoveAccountCommand";
+import {
+  PutResourcePolicyCommandInput,
+  PutResourcePolicyCommandOutput,
+} from "./commands/PutResourcePolicyCommand";
 import {
   RegisterDelegatedAdministratorCommandInput,
   RegisterDelegatedAdministratorCommandOutput,
@@ -378,6 +390,19 @@ export declare class Organizations extends OrganizationsClient {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: DeletePolicyCommandOutput) => void
   ): void;
+  deleteResourcePolicy(
+    args: DeleteResourcePolicyCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<DeleteResourcePolicyCommandOutput>;
+  deleteResourcePolicy(
+    args: DeleteResourcePolicyCommandInput,
+    cb: (err: any, data?: DeleteResourcePolicyCommandOutput) => void
+  ): void;
+  deleteResourcePolicy(
+    args: DeleteResourcePolicyCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: DeleteResourcePolicyCommandOutput) => void
+  ): void;
   deregisterDelegatedAdministrator(
     args: DeregisterDelegatedAdministratorCommandInput,
     options?: __HttpHandlerOptions
@@ -482,6 +507,19 @@ export declare class Organizations extends OrganizationsClient {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: DescribePolicyCommandOutput) => void
   ): void;
+  describeResourcePolicy(
+    args: DescribeResourcePolicyCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<DescribeResourcePolicyCommandOutput>;
+  describeResourcePolicy(
+    args: DescribeResourcePolicyCommandInput,
+    cb: (err: any, data?: DescribeResourcePolicyCommandOutput) => void
+  ): void;
+  describeResourcePolicy(
+    args: DescribeResourcePolicyCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: DescribeResourcePolicyCommandOutput) => void
+  ): void;
   detachPolicy(
     args: DetachPolicyCommandInput,
     options?: __HttpHandlerOptions
@@ -813,6 +851,19 @@ export declare class Organizations extends OrganizationsClient {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: MoveAccountCommandOutput) => void
   ): void;
+  putResourcePolicy(
+    args: PutResourcePolicyCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<PutResourcePolicyCommandOutput>;
+  putResourcePolicy(
+    args: PutResourcePolicyCommandInput,
+    cb: (err: any, data?: PutResourcePolicyCommandOutput) => void
+  ): void;
+  putResourcePolicy(
+    args: PutResourcePolicyCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: PutResourcePolicyCommandOutput) => void
+  ): void;
   registerDelegatedAdministrator(
     args: RegisterDelegatedAdministratorCommandInput,
     options?: __HttpHandlerOptions