@aws-sdk/client-organizations 3.312.0 → 3.316.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -55,1356 +55,412 @@ import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./command
55
55
  import { UpdateOrganizationalUnitCommandInput, UpdateOrganizationalUnitCommandOutput } from "./commands/UpdateOrganizationalUnitCommand";
56
56
  import { UpdatePolicyCommandInput, UpdatePolicyCommandOutput } from "./commands/UpdatePolicyCommand";
57
57
  import { OrganizationsClient } from "./OrganizationsClient";
58
- /**
59
- * @public
60
- * <p>Organizations is a web service that enables you to consolidate your multiple
61
- * Amazon Web Services accounts into an <i>organization</i> and centrally manage your
62
- * accounts and their resources.</p>
63
- * <p>This guide provides descriptions of the Organizations operations. For more
64
- * information about using this service, see the <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html">Organizations User Guide</a>.</p>
65
- * <p>
66
- * <b>Support and feedback for Organizations</b>
67
- * </p>
68
- * <p>We welcome your feedback. Send your comments to <a href="mailto:feedback-awsorganizations@amazon.com">feedback-awsorganizations@amazon.com</a> or post your feedback and questions in
69
- * the <a href="http://forums.aws.amazon.com/forum.jspa?forumID=219">Organizations support forum</a>. For
70
- * more information about the Amazon Web Services support forums, see <a href="http://forums.aws.amazon.com/help.jspa">Forums Help</a>.</p>
71
- * <p>
72
- * <b>Endpoint to call When using the CLI or the Amazon Web Services
73
- * SDK</b>
74
- * </p>
75
- * <p>For the current release of Organizations, specify the <code>us-east-1</code> region
76
- * for all Amazon Web Services API and CLI calls made from the commercial Amazon Web Services Regions outside of
77
- * China. If calling from one of the Amazon Web Services Regions in China, then specify
78
- * <code>cn-northwest-1</code>. You can do this in the CLI by using these parameters
79
- * and commands:</p>
80
- * <ul>
81
- * <li>
82
- * <p>Use the following parameter with each command to specify both the endpoint and
83
- * its region:</p>
84
- * <p>
85
- * <code>--endpoint-url https://organizations.us-east-1.amazonaws.com</code>
86
- * <i>(from commercial Amazon Web Services Regions outside of China)</i>
87
- * </p>
88
- * <p>or</p>
89
- * <p>
90
- * <code>--endpoint-url
91
- * https://organizations.cn-northwest-1.amazonaws.com.cn</code>
92
- * <i>(from Amazon Web Services Regions in China)</i>
93
- * </p>
94
- * </li>
95
- * <li>
96
- * <p>Use the default endpoint, but configure your default region with this
97
- * command:</p>
98
- * <p>
99
- * <code>aws configure set default.region us-east-1</code>
100
- * <i>(from commercial Amazon Web Services Regions outside of China)</i>
101
- * </p>
102
- * <p>or</p>
103
- * <p>
104
- * <code>aws configure set default.region cn-northwest-1</code>
105
- * <i>(from Amazon Web Services Regions in China)</i>
106
- * </p>
107
- * </li>
108
- * <li>
109
- * <p>Use the following parameter with each command to specify the endpoint:</p>
110
- * <p>
111
- * <code>--region us-east-1</code>
112
- * <i>(from commercial Amazon Web Services Regions outside of China)</i>
113
- * </p>
114
- * <p>or</p>
115
- * <p>
116
- * <code>--region cn-northwest-1</code>
117
- * <i>(from Amazon Web Services Regions in China)</i>
118
- * </p>
119
- * </li>
120
- * </ul>
121
- * <p>
122
- * <b>Recording API Requests</b>
123
- * </p>
124
- * <p>Organizations supports CloudTrail, a service that records Amazon Web Services API calls for your
125
- * Amazon Web Services account and delivers log files to an Amazon S3 bucket. By using information collected
126
- * by CloudTrail, you can determine which requests the Organizations service received, who made the
127
- * request and when, and so on. For more about Organizations and its support for CloudTrail, see
128
- * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_incident-response.html#orgs_cloudtrail-integration">Logging
129
- * Organizations Events with CloudTrail</a> in the <i>Organizations User Guide</i>.
130
- * To learn more about CloudTrail, including how to turn it on and find your log files, see the
131
- * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html">CloudTrail User Guide</a>.</p>
132
- */
133
- export declare class Organizations extends OrganizationsClient {
58
+ export interface Organizations {
134
59
  /**
135
- * @public
136
- * <p>Sends a response to the originator of a handshake agreeing to the action proposed by
137
- * the handshake request.</p>
138
- * <p>You can only call this operation by the following principals when they also have the
139
- * relevant IAM permissions:</p>
140
- * <ul>
141
- * <li>
142
- * <p>
143
- * <b>Invitation to join</b> or <b>Approve all features request</b> handshakes: only a principal from
144
- * the member account.</p>
145
- * <p>The user who calls the API for an invitation to join must have the
146
- * <code>organizations:AcceptHandshake</code> permission. If you enabled all
147
- * features in the organization, the user must also have the
148
- * <code>iam:CreateServiceLinkedRole</code> permission so that Organizations can
149
- * create the required service-linked role named <code>AWSServiceRoleForOrganizations</code>. For
150
- * more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integration_services.html#orgs_integration_service-linked-roles">Organizations and Service-Linked Roles</a> in the
151
- * <i>Organizations User Guide</i>.</p>
152
- * </li>
153
- * <li>
154
- * <p>
155
- * <b>Enable all features final confirmation</b>
156
- * handshake: only a principal from the management account.</p>
157
- * <p>For more information about invitations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_invites.html">Inviting an
158
- * Amazon Web Services account to join your organization</a> in the
159
- * <i>Organizations User Guide.</i> For more information about requests to
160
- * enable all features in the organization, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling all features in your organization</a> in
161
- * the <i>Organizations User Guide.</i>
162
- * </p>
163
- * </li>
164
- * </ul>
165
- * <p>After you accept a handshake, it continues to appear in the results of relevant APIs
166
- * for only 30 days. After that, it's deleted.</p>
60
+ * @see {@link AcceptHandshakeCommand}
167
61
  */
168
62
  acceptHandshake(args: AcceptHandshakeCommandInput, options?: __HttpHandlerOptions): Promise<AcceptHandshakeCommandOutput>;
169
63
  acceptHandshake(args: AcceptHandshakeCommandInput, cb: (err: any, data?: AcceptHandshakeCommandOutput) => void): void;
170
64
  acceptHandshake(args: AcceptHandshakeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AcceptHandshakeCommandOutput) => void): void;
171
65
  /**
172
- * @public
173
- * <p>Attaches a policy to a root, an organizational unit (OU), or an individual account.
174
- * How the policy affects accounts depends on the type of policy. Refer to the
175
- * <i>Organizations User Guide</i> for information about each policy type:</p>
176
- * <ul>
177
- * <li>
178
- * <p>
179
- * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html">AISERVICES_OPT_OUT_POLICY</a>
180
- * </p>
181
- * </li>
182
- * <li>
183
- * <p>
184
- * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html">BACKUP_POLICY</a>
185
- * </p>
186
- * </li>
187
- * <li>
188
- * <p>
189
- * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html">SERVICE_CONTROL_POLICY</a>
190
- * </p>
191
- * </li>
192
- * <li>
193
- * <p>
194
- * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html">TAG_POLICY</a>
195
- * </p>
196
- * </li>
197
- * </ul>
198
- * <p>This operation can be called only from the organization's management account.</p>
66
+ * @see {@link AttachPolicyCommand}
199
67
  */
200
68
  attachPolicy(args: AttachPolicyCommandInput, options?: __HttpHandlerOptions): Promise<AttachPolicyCommandOutput>;
201
69
  attachPolicy(args: AttachPolicyCommandInput, cb: (err: any, data?: AttachPolicyCommandOutput) => void): void;
202
70
  attachPolicy(args: AttachPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachPolicyCommandOutput) => void): void;
203
71
  /**
204
- * @public
205
- * <p>Cancels a handshake. Canceling a handshake sets the handshake state to
206
- * <code>CANCELED</code>.</p>
207
- * <p>This operation can be called only from the account that originated the handshake. The recipient of the handshake can't cancel it, but can use <a>DeclineHandshake</a> instead. After a handshake is canceled, the recipient
208
- * can no longer respond to that handshake.</p>
209
- * <p>After you cancel a handshake, it continues to appear in the results of relevant APIs
210
- * for only 30 days. After that, it's deleted.</p>
72
+ * @see {@link CancelHandshakeCommand}
211
73
  */
212
74
  cancelHandshake(args: CancelHandshakeCommandInput, options?: __HttpHandlerOptions): Promise<CancelHandshakeCommandOutput>;
213
75
  cancelHandshake(args: CancelHandshakeCommandInput, cb: (err: any, data?: CancelHandshakeCommandOutput) => void): void;
214
76
  cancelHandshake(args: CancelHandshakeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CancelHandshakeCommandOutput) => void): void;
215
77
  /**
216
- * @public
217
- * <p>Closes an Amazon Web Services member account within an organization. You can close an account when
218
- * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">all
219
- * features are enabled </a>. You can't close the management account with this API.
220
- * This is an asynchronous request that Amazon Web Services performs in the background. Because
221
- * <code>CloseAccount</code> operates asynchronously, it can return a successful
222
- * completion message even though account closure might still be in progress. You need to
223
- * wait a few minutes before the account is fully closed. To check the status of the
224
- * request, do one of the following:</p>
225
- * <ul>
226
- * <li>
227
- * <p>Use the <code>AccountId</code> that you sent in the <code>CloseAccount</code>
228
- * request to provide as a parameter to the <a>DescribeAccount</a>
229
- * operation. </p>
230
- * <p>While the close account request is in progress, Account status will indicate
231
- * PENDING_CLOSURE. When the close account request completes, the status will
232
- * change to SUSPENDED. </p>
233
- * </li>
234
- * <li>
235
- * <p>Check the CloudTrail log for the <code>CloseAccountResult</code> event that gets
236
- * published after the account closes successfully. For information on using CloudTrail
237
- * with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_security_incident-response.html#orgs_cloudtrail-integration">Logging and monitoring in Organizations</a> in the
238
- * <i>Organizations User Guide.</i>
239
- * </p>
240
- * </li>
241
- * </ul>
242
- * <note>
243
- * <ul>
244
- * <li>
245
- * <p>You can close only 10% of member accounts, between 10 and 200, within a
246
- * rolling 30 day period. This quota is not bound by a calendar month, but
247
- * starts when you close an account.</p>
248
- * <p>After you reach this limit, you can close additional accounts in the
249
- * Billing console. For more information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/close-account.html">Closing an
250
- * account</a> in the Amazon Web Services Billing and Cost Management User Guide.</p>
251
- * </li>
252
- * <li>
253
- * <p>To reinstate a closed account, contact Amazon Web Services Support within the 90-day
254
- * grace period while the account is in SUSPENDED status. </p>
255
- * </li>
256
- * <li>
257
- * <p>If the Amazon Web Services account you attempt to close is linked to an Amazon Web Services GovCloud
258
- * (US) account, the <code>CloseAccount</code> request will close both
259
- * accounts. To learn important pre-closure details, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/Closing-govcloud-account.html">
260
- * Closing an Amazon Web Services GovCloud (US) account</a> in the <i>
261
- * Amazon Web Services GovCloud User Guide</i>.</p>
262
- * </li>
263
- * </ul>
264
- * </note>
265
- * <p>For more information about closing accounts, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html">Closing an
266
- * Amazon Web Services account</a> in the <i>Organizations User Guide.</i>
267
- * </p>
78
+ * @see {@link CloseAccountCommand}
268
79
  */
269
80
  closeAccount(args: CloseAccountCommandInput, options?: __HttpHandlerOptions): Promise<CloseAccountCommandOutput>;
270
81
  closeAccount(args: CloseAccountCommandInput, cb: (err: any, data?: CloseAccountCommandOutput) => void): void;
271
82
  closeAccount(args: CloseAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CloseAccountCommandOutput) => void): void;
272
83
  /**
273
- * @public
274
- * <p>Creates an Amazon Web Services account that is automatically a member of the organization whose
275
- * credentials made the request. This is an asynchronous request that Amazon Web Services performs in the
276
- * background. Because <code>CreateAccount</code> operates asynchronously, it can return a
277
- * successful completion message even though account initialization might still be in
278
- * progress. You might need to wait a few minutes before you can successfully access the
279
- * account. To check the status of the request, do one of the following:</p>
280
- * <ul>
281
- * <li>
282
- * <p>Use the <code>Id</code> value of the <code>CreateAccountStatus</code> response
283
- * element from this operation to provide as a parameter to the <a>DescribeCreateAccountStatus</a> operation.</p>
284
- * </li>
285
- * <li>
286
- * <p>Check the CloudTrail log for the <code>CreateAccountResult</code> event. For
287
- * information on using CloudTrail with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_security_incident-response.html#orgs_cloudtrail-integration">Logging and monitoring in Organizations</a> in the
288
- * <i>Organizations User Guide.</i>
289
- * </p>
290
- * </li>
291
- * </ul>
292
- * <p>The user who calls the API to create an account must have the
293
- * <code>organizations:CreateAccount</code> permission. If you enabled all features in
294
- * the organization, Organizations creates the required service-linked role named
295
- * <code>AWSServiceRoleForOrganizations</code>. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html#orgs_integrate_services-using_slrs">Organizations and Service-Linked Roles</a> in the
296
- * <i>Organizations User Guide</i>.</p>
297
- * <p>If the request includes tags, then the requester must have the
298
- * <code>organizations:TagResource</code> permission.</p>
299
- * <p>Organizations preconfigures the new member account with a role (named
300
- * <code>OrganizationAccountAccessRole</code> by default) that grants users in the
301
- * management account administrator permissions in the new member account. Principals in
302
- * the management account can assume the role. Organizations clones the company name and address
303
- * information for the new account from the organization's management account.</p>
304
- * <p>This operation can be called only from the organization's management account.</p>
305
- * <p>For more information about creating accounts, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html">Creating an Amazon Web Services account in
306
- * Your Organization</a> in the <i>Organizations User Guide.</i>
307
- * </p>
308
- * <important>
309
- * <ul>
310
- * <li>
311
- * <p>When you create an account in an organization using the Organizations console,
312
- * API, or CLI commands, the information required for the account to operate
313
- * as a standalone account, such as a payment method and signing the end user
314
- * license agreement (EULA) is <i>not</i> automatically
315
- * collected. If you must remove an account from your organization later, you
316
- * can do so only after you provide the missing information. Follow the steps
317
- * at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization as a member account</a> in the
318
- * <i>Organizations User Guide</i>.</p>
319
- * </li>
320
- * <li>
321
- * <p>If you get an exception that indicates that you exceeded your account
322
- * limits for the organization, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
323
- * </li>
324
- * <li>
325
- * <p>If you get an exception that indicates that the operation failed because
326
- * your organization is still initializing, wait one hour and then try again.
327
- * If the error persists, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
328
- * </li>
329
- * <li>
330
- * <p>Using <code>CreateAccount</code> to create multiple temporary accounts
331
- * isn't recommended. You can only close an account from the Billing and Cost Management console, and
332
- * you must be signed in as the root user. For information on the requirements
333
- * and process for closing an account, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html">Closing an
334
- * Amazon Web Services account</a> in the
335
- * <i>Organizations User Guide</i>.</p>
336
- * </li>
337
- * </ul>
338
- * </important>
339
- * <note>
340
- * <p>When you create a member account with this operation, you can choose whether to
341
- * create the account with the <b>IAM User and Role Access to
342
- * Billing Information</b> switch enabled. If you enable it, IAM users and
343
- * roles that have appropriate permissions can view billing information for the
344
- * account. If you disable it, only the account root user can access billing
345
- * information. For information about how to disable this switch for an account, see
346
- * <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html">Granting
347
- * Access to Your Billing Information and Tools</a>.</p>
348
- * </note>
84
+ * @see {@link CreateAccountCommand}
349
85
  */
350
86
  createAccount(args: CreateAccountCommandInput, options?: __HttpHandlerOptions): Promise<CreateAccountCommandOutput>;
351
87
  createAccount(args: CreateAccountCommandInput, cb: (err: any, data?: CreateAccountCommandOutput) => void): void;
352
88
  createAccount(args: CreateAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateAccountCommandOutput) => void): void;
353
89
  /**
354
- * @public
355
- * <p>This action is available if all of the following are true:</p>
356
- * <ul>
357
- * <li>
358
- * <p>You're authorized to create accounts in the Amazon Web Services GovCloud (US) Region. For
359
- * more information on the Amazon Web Services GovCloud (US) Region, see the <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/welcome.html">
360
- * <i>Amazon Web Services GovCloud User Guide</i>.</a>
361
- * </p>
362
- * </li>
363
- * <li>
364
- * <p>You already have an account in the Amazon Web Services GovCloud (US) Region that is paired
365
- * with a management account of an organization in the commercial Region.</p>
366
- * </li>
367
- * <li>
368
- * <p>You call this action from the management account of your organization in the
369
- * commercial Region.</p>
370
- * </li>
371
- * <li>
372
- * <p>You have the <code>organizations:CreateGovCloudAccount</code> permission.
373
- * </p>
374
- * </li>
375
- * </ul>
376
- * <p>Organizations automatically creates the required service-linked role named
377
- * <code>AWSServiceRoleForOrganizations</code>. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html#orgs_integrate_services-using_slrs">Organizations and Service-Linked Roles</a> in the
378
- * <i>Organizations User Guide.</i>
379
- * </p>
380
- * <p>Amazon Web Services automatically enables CloudTrail for Amazon Web Services GovCloud (US) accounts, but you should also
381
- * do the following:</p>
382
- * <ul>
383
- * <li>
384
- * <p>Verify that CloudTrail is enabled to store logs.</p>
385
- * </li>
386
- * <li>
387
- * <p>Create an Amazon S3 bucket for CloudTrail log storage.</p>
388
- * <p>For more information, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/verifying-cloudtrail.html">Verifying CloudTrail Is
389
- * Enabled</a> in the <i>Amazon Web Services GovCloud User Guide</i>.
390
- * </p>
391
- * </li>
392
- * </ul>
393
- * <p>If the request includes tags, then the requester must have the
394
- * <code>organizations:TagResource</code> permission. The tags are attached to the
395
- * commercial account associated with the GovCloud account, rather than the GovCloud
396
- * account itself. To add tags to the GovCloud account, call the <a>TagResource</a> operation in the GovCloud Region after the new GovCloud
397
- * account exists.</p>
398
- * <p>You call this action from the management account of your organization in the
399
- * commercial Region to create a standalone Amazon Web Services account in the Amazon Web Services GovCloud (US)
400
- * Region. After the account is created, the management account of an organization in the
401
- * Amazon Web Services GovCloud (US) Region can invite it to that organization. For more information on
402
- * inviting standalone accounts in the Amazon Web Services GovCloud (US) to join an organization, see
403
- * <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html">Organizations</a> in the
404
- * <i>Amazon Web Services GovCloud User Guide.</i>
405
- * </p>
406
- * <p>Calling <code>CreateGovCloudAccount</code> is an asynchronous request that Amazon Web Services
407
- * performs in the background. Because <code>CreateGovCloudAccount</code> operates
408
- * asynchronously, it can return a successful completion message even though account
409
- * initialization might still be in progress. You might need to wait a few minutes before
410
- * you can successfully access the account. To check the status of the request, do one of
411
- * the following:</p>
412
- * <ul>
413
- * <li>
414
- * <p>Use the <code>OperationId</code> response element from this operation to
415
- * provide as a parameter to the <a>DescribeCreateAccountStatus</a>
416
- * operation.</p>
417
- * </li>
418
- * <li>
419
- * <p>Check the CloudTrail log for the <code>CreateAccountResult</code> event. For
420
- * information on using CloudTrail with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_monitoring.html">Monitoring the Activity in Your
421
- * Organization</a> in the <i>Organizations User Guide.</i>
422
- * </p>
423
- * </li>
424
- * </ul>
425
- * <p></p>
426
- * <p>When you call the <code>CreateGovCloudAccount</code> action, you create two accounts:
427
- * a standalone account in the Amazon Web Services GovCloud (US) Region and an associated account in the
428
- * commercial Region for billing and support purposes. The account in the commercial Region
429
- * is automatically a member of the organization whose credentials made the request. Both
430
- * accounts are associated with the same email address.</p>
431
- * <p>A role is created in the new account in the commercial Region that allows the
432
- * management account in the organization in the commercial Region to assume it. An Amazon Web Services
433
- * GovCloud (US) account is then created and associated with the commercial account that
434
- * you just created. A role is also created in the new Amazon Web Services GovCloud (US) account that can
435
- * be assumed by the Amazon Web Services GovCloud (US) account that is associated with the management
436
- * account of the commercial organization. For more information and to view a diagram that
437
- * explains how account access works, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html">Organizations</a> in the
438
- * <i>Amazon Web Services GovCloud User Guide.</i>
439
- * </p>
440
- * <p>For more information about creating accounts, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html">Creating
441
- * an Amazon Web Services account in Your Organization</a> in the
442
- * <i>Organizations User Guide.</i>
443
- * </p>
444
- * <important>
445
- * <ul>
446
- * <li>
447
- * <p>When you create an account in an organization using the Organizations console,
448
- * API, or CLI commands, the information required for the account to operate as
449
- * a standalone account is <i>not</i> automatically collected.
450
- * This includes a payment method and signing the end user license agreement
451
- * (EULA). If you must remove an account from your organization later, you can
452
- * do so only after you provide the missing information. Follow the steps at
453
- * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization as a member account</a> in the
454
- * <i>Organizations User Guide.</i>
455
- * </p>
456
- * </li>
457
- * <li>
458
- * <p>If you get an exception that indicates that you exceeded your account
459
- * limits for the organization, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
460
- * </li>
461
- * <li>
462
- * <p>If you get an exception that indicates that the operation failed because
463
- * your organization is still initializing, wait one hour and then try again.
464
- * If the error persists, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
465
- * </li>
466
- * <li>
467
- * <p>Using <code>CreateGovCloudAccount</code> to create multiple temporary
468
- * accounts isn't recommended. You can only close an account from the Amazon Web Services
469
- * Billing and Cost Management console, and you must be signed in as the root user. For information on
470
- * the requirements and process for closing an account, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html">Closing an
471
- * Amazon Web Services account</a> in the
472
- * <i>Organizations User Guide</i>.</p>
473
- * </li>
474
- * </ul>
475
- * </important>
476
- * <note>
477
- * <p>When you create a member account with this operation, you can choose whether to
478
- * create the account with the <b>IAM User and Role Access to
479
- * Billing Information</b> switch enabled. If you enable it, IAM users and
480
- * roles that have appropriate permissions can view billing information for the
481
- * account. If you disable it, only the account root user can access billing
482
- * information. For information about how to disable this switch for an account, see
483
- * <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html">Granting
484
- * Access to Your Billing Information and Tools</a>.</p>
485
- * </note>
90
+ * @see {@link CreateGovCloudAccountCommand}
486
91
  */
487
92
  createGovCloudAccount(args: CreateGovCloudAccountCommandInput, options?: __HttpHandlerOptions): Promise<CreateGovCloudAccountCommandOutput>;
488
93
  createGovCloudAccount(args: CreateGovCloudAccountCommandInput, cb: (err: any, data?: CreateGovCloudAccountCommandOutput) => void): void;
489
94
  createGovCloudAccount(args: CreateGovCloudAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateGovCloudAccountCommandOutput) => void): void;
490
95
  /**
491
- * @public
492
- * <p>Creates an Amazon Web Services organization. The account whose user is calling the
493
- * <code>CreateOrganization</code> operation automatically becomes the <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#account">management account</a> of the new organization.</p>
494
- * <p>This operation must be called using credentials from the account that is to become the
495
- * new organization's management account. The principal must also have the relevant IAM
496
- * permissions.</p>
497
- * <p>By default (or if you set the <code>FeatureSet</code> parameter to <code>ALL</code>),
498
- * the new organization is created with all features enabled and service control policies
499
- * automatically enabled in the root. If you instead choose to create the organization
500
- * supporting only the consolidated billing features by setting the <code>FeatureSet</code>
501
- * parameter to <code>CONSOLIDATED_BILLING"</code>, no policy types are enabled by default,
502
- * and you can't use organization policies</p>
96
+ * @see {@link CreateOrganizationCommand}
503
97
  */
504
98
  createOrganization(args: CreateOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<CreateOrganizationCommandOutput>;
505
99
  createOrganization(args: CreateOrganizationCommandInput, cb: (err: any, data?: CreateOrganizationCommandOutput) => void): void;
506
100
  createOrganization(args: CreateOrganizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateOrganizationCommandOutput) => void): void;
507
101
  /**
508
- * @public
509
- * <p>Creates an organizational unit (OU) within a root or parent OU. An OU is a container
510
- * for accounts that enables you to organize your accounts to apply policies according to
511
- * your business requirements. The number of levels deep that you can nest OUs is dependent
512
- * upon the policy types enabled for that root. For service control policies, the limit is
513
- * five.</p>
514
- * <p>For more information about OUs, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_ous.html">Managing Organizational Units</a> in the
515
- * <i>Organizations User Guide.</i>
516
- * </p>
517
- * <p>If the request includes tags, then the requester must have the
518
- * <code>organizations:TagResource</code> permission.</p>
519
- * <p>This operation can be called only from the organization's management account.</p>
102
+ * @see {@link CreateOrganizationalUnitCommand}
520
103
  */
521
104
  createOrganizationalUnit(args: CreateOrganizationalUnitCommandInput, options?: __HttpHandlerOptions): Promise<CreateOrganizationalUnitCommandOutput>;
522
105
  createOrganizationalUnit(args: CreateOrganizationalUnitCommandInput, cb: (err: any, data?: CreateOrganizationalUnitCommandOutput) => void): void;
523
106
  createOrganizationalUnit(args: CreateOrganizationalUnitCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateOrganizationalUnitCommandOutput) => void): void;
524
107
  /**
525
- * @public
526
- * <p>Creates a policy of a specified type that you can attach to a root, an organizational
527
- * unit (OU), or an individual Amazon Web Services account.</p>
528
- * <p>For more information about policies and their use, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies.html">Managing
529
- * Organization Policies</a>.</p>
530
- * <p>If the request includes tags, then the requester must have the
531
- * <code>organizations:TagResource</code> permission.</p>
532
- * <p>This operation can be called only from the organization's management account.</p>
108
+ * @see {@link CreatePolicyCommand}
533
109
  */
534
110
  createPolicy(args: CreatePolicyCommandInput, options?: __HttpHandlerOptions): Promise<CreatePolicyCommandOutput>;
535
111
  createPolicy(args: CreatePolicyCommandInput, cb: (err: any, data?: CreatePolicyCommandOutput) => void): void;
536
112
  createPolicy(args: CreatePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreatePolicyCommandOutput) => void): void;
537
113
  /**
538
- * @public
539
- * <p>Declines a handshake request. This sets the handshake state to <code>DECLINED</code>
540
- * and effectively deactivates the request.</p>
541
- * <p>This operation can be called only from the account that received the handshake. The originator of the handshake can use <a>CancelHandshake</a>
542
- * instead. The originator can't reactivate a declined request, but can reinitiate the
543
- * process with a new handshake request.</p>
544
- * <p>After you decline a handshake, it continues to appear in the results of relevant APIs
545
- * for only 30 days. After that, it's deleted.</p>
114
+ * @see {@link DeclineHandshakeCommand}
546
115
  */
547
116
  declineHandshake(args: DeclineHandshakeCommandInput, options?: __HttpHandlerOptions): Promise<DeclineHandshakeCommandOutput>;
548
117
  declineHandshake(args: DeclineHandshakeCommandInput, cb: (err: any, data?: DeclineHandshakeCommandOutput) => void): void;
549
118
  declineHandshake(args: DeclineHandshakeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeclineHandshakeCommandOutput) => void): void;
550
119
  /**
551
- * @public
552
- * <p>Deletes the organization. You can delete an organization only by using credentials
553
- * from the management account. The organization must be empty of member accounts.</p>
120
+ * @see {@link DeleteOrganizationCommand}
554
121
  */
555
122
  deleteOrganization(args: DeleteOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<DeleteOrganizationCommandOutput>;
556
123
  deleteOrganization(args: DeleteOrganizationCommandInput, cb: (err: any, data?: DeleteOrganizationCommandOutput) => void): void;
557
124
  deleteOrganization(args: DeleteOrganizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteOrganizationCommandOutput) => void): void;
558
125
  /**
559
- * @public
560
- * <p>Deletes an organizational unit (OU) from a root or another OU. You must first remove
561
- * all accounts and child OUs from the OU that you want to delete.</p>
562
- * <p>This operation can be called only from the organization's management account.</p>
126
+ * @see {@link DeleteOrganizationalUnitCommand}
563
127
  */
564
128
  deleteOrganizationalUnit(args: DeleteOrganizationalUnitCommandInput, options?: __HttpHandlerOptions): Promise<DeleteOrganizationalUnitCommandOutput>;
565
129
  deleteOrganizationalUnit(args: DeleteOrganizationalUnitCommandInput, cb: (err: any, data?: DeleteOrganizationalUnitCommandOutput) => void): void;
566
130
  deleteOrganizationalUnit(args: DeleteOrganizationalUnitCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteOrganizationalUnitCommandOutput) => void): void;
567
131
  /**
568
- * @public
569
- * <p>Deletes the specified policy from your organization. Before you perform this
570
- * operation, you must first detach the policy from all organizational units (OUs), roots,
571
- * and accounts.</p>
572
- * <p>This operation can be called only from the organization's management account.</p>
132
+ * @see {@link DeletePolicyCommand}
573
133
  */
574
134
  deletePolicy(args: DeletePolicyCommandInput, options?: __HttpHandlerOptions): Promise<DeletePolicyCommandOutput>;
575
135
  deletePolicy(args: DeletePolicyCommandInput, cb: (err: any, data?: DeletePolicyCommandOutput) => void): void;
576
136
  deletePolicy(args: DeletePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeletePolicyCommandOutput) => void): void;
577
137
  /**
578
- * @public
579
- * <p>Deletes the resource policy from your organization.</p>
580
- * <p>You can only call this operation from the organization's management account.</p>
138
+ * @see {@link DeleteResourcePolicyCommand}
581
139
  */
582
140
  deleteResourcePolicy(args: DeleteResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<DeleteResourcePolicyCommandOutput>;
583
141
  deleteResourcePolicy(args: DeleteResourcePolicyCommandInput, cb: (err: any, data?: DeleteResourcePolicyCommandOutput) => void): void;
584
142
  deleteResourcePolicy(args: DeleteResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteResourcePolicyCommandOutput) => void): void;
585
143
  /**
586
- * @public
587
- * <p>Removes the specified member Amazon Web Services account as a delegated administrator for the
588
- * specified Amazon Web Services service.</p>
589
- * <important>
590
- * <p>Deregistering a delegated administrator can have unintended impacts on the
591
- * functionality of the enabled Amazon Web Services service. See the documentation for the enabled
592
- * service before you deregister a delegated administrator so that you understand any
593
- * potential impacts.</p>
594
- * </important>
595
- * <p>You can run this action only for Amazon Web Services services that support this
596
- * feature. For a current list of services that support it, see the column <i>Supports
597
- * Delegated Administrator</i> in the table at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">Amazon Web Services Services that you can use with
598
- * Organizations</a> in the <i>Organizations User Guide.</i>
599
- * </p>
600
- * <p>This operation can be called only from the organization's management account.</p>
144
+ * @see {@link DeregisterDelegatedAdministratorCommand}
601
145
  */
602
146
  deregisterDelegatedAdministrator(args: DeregisterDelegatedAdministratorCommandInput, options?: __HttpHandlerOptions): Promise<DeregisterDelegatedAdministratorCommandOutput>;
603
147
  deregisterDelegatedAdministrator(args: DeregisterDelegatedAdministratorCommandInput, cb: (err: any, data?: DeregisterDelegatedAdministratorCommandOutput) => void): void;
604
148
  deregisterDelegatedAdministrator(args: DeregisterDelegatedAdministratorCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeregisterDelegatedAdministratorCommandOutput) => void): void;
605
149
  /**
606
- * @public
607
- * <p>Retrieves Organizations-related information about the specified account.</p>
608
- * <p>This operation can be called only from the organization's
609
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
150
+ * @see {@link DescribeAccountCommand}
610
151
  */
611
152
  describeAccount(args: DescribeAccountCommandInput, options?: __HttpHandlerOptions): Promise<DescribeAccountCommandOutput>;
612
153
  describeAccount(args: DescribeAccountCommandInput, cb: (err: any, data?: DescribeAccountCommandOutput) => void): void;
613
154
  describeAccount(args: DescribeAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeAccountCommandOutput) => void): void;
614
155
  /**
615
- * @public
616
- * <p>Retrieves the current status of an asynchronous request to create an account.</p>
617
- * <p>This operation can be called only from the organization's
618
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
156
+ * @see {@link DescribeCreateAccountStatusCommand}
619
157
  */
620
158
  describeCreateAccountStatus(args: DescribeCreateAccountStatusCommandInput, options?: __HttpHandlerOptions): Promise<DescribeCreateAccountStatusCommandOutput>;
621
159
  describeCreateAccountStatus(args: DescribeCreateAccountStatusCommandInput, cb: (err: any, data?: DescribeCreateAccountStatusCommandOutput) => void): void;
622
160
  describeCreateAccountStatus(args: DescribeCreateAccountStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeCreateAccountStatusCommandOutput) => void): void;
623
161
  /**
624
- * @public
625
- * <p>Returns the contents of the effective policy for specified policy type and account.
626
- * The effective policy is the aggregation of any policies of the specified type that the
627
- * account inherits, plus any policy of that type that is directly attached to the
628
- * account.</p>
629
- * <p>This operation applies only to policy types <i>other</i> than service
630
- * control policies (SCPs).</p>
631
- * <p>For more information about policy inheritance, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies-inheritance.html">How Policy Inheritance
632
- * Works</a> in the <i>Organizations User Guide</i>.</p>
633
- * <p>This operation can be called only from the organization's
634
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
162
+ * @see {@link DescribeEffectivePolicyCommand}
635
163
  */
636
164
  describeEffectivePolicy(args: DescribeEffectivePolicyCommandInput, options?: __HttpHandlerOptions): Promise<DescribeEffectivePolicyCommandOutput>;
637
165
  describeEffectivePolicy(args: DescribeEffectivePolicyCommandInput, cb: (err: any, data?: DescribeEffectivePolicyCommandOutput) => void): void;
638
166
  describeEffectivePolicy(args: DescribeEffectivePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeEffectivePolicyCommandOutput) => void): void;
639
167
  /**
640
- * @public
641
- * <p>Retrieves information about a previously requested handshake. The handshake ID comes
642
- * from the response to the original <a>InviteAccountToOrganization</a>
643
- * operation that generated the handshake.</p>
644
- * <p>You can access handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>, or
645
- * <code>CANCELED</code> for only 30 days after they change to that state. They're then
646
- * deleted and no longer accessible.</p>
647
- * <p>This operation can be called from any account in the organization.</p>
168
+ * @see {@link DescribeHandshakeCommand}
648
169
  */
649
170
  describeHandshake(args: DescribeHandshakeCommandInput, options?: __HttpHandlerOptions): Promise<DescribeHandshakeCommandOutput>;
650
171
  describeHandshake(args: DescribeHandshakeCommandInput, cb: (err: any, data?: DescribeHandshakeCommandOutput) => void): void;
651
172
  describeHandshake(args: DescribeHandshakeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeHandshakeCommandOutput) => void): void;
652
173
  /**
653
- * @public
654
- * <p>Retrieves information about the organization that the user's account belongs
655
- * to.</p>
656
- * <p>This operation can be called from any account in the organization.</p>
657
- * <note>
658
- * <p>Even if a policy type is shown as available in the organization, you can disable
659
- * it separately at the root level with <a>DisablePolicyType</a>. Use <a>ListRoots</a> to see the status of policy types for a specified
660
- * root.</p>
661
- * </note>
174
+ * @see {@link DescribeOrganizationCommand}
662
175
  */
663
176
  describeOrganization(args: DescribeOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<DescribeOrganizationCommandOutput>;
664
177
  describeOrganization(args: DescribeOrganizationCommandInput, cb: (err: any, data?: DescribeOrganizationCommandOutput) => void): void;
665
178
  describeOrganization(args: DescribeOrganizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeOrganizationCommandOutput) => void): void;
666
179
  /**
667
- * @public
668
- * <p>Retrieves information about an organizational unit (OU).</p>
669
- * <p>This operation can be called only from the organization's
670
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
180
+ * @see {@link DescribeOrganizationalUnitCommand}
671
181
  */
672
182
  describeOrganizationalUnit(args: DescribeOrganizationalUnitCommandInput, options?: __HttpHandlerOptions): Promise<DescribeOrganizationalUnitCommandOutput>;
673
183
  describeOrganizationalUnit(args: DescribeOrganizationalUnitCommandInput, cb: (err: any, data?: DescribeOrganizationalUnitCommandOutput) => void): void;
674
184
  describeOrganizationalUnit(args: DescribeOrganizationalUnitCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeOrganizationalUnitCommandOutput) => void): void;
675
185
  /**
676
- * @public
677
- * <p>Retrieves information about a policy.</p>
678
- * <p>This operation can be called only from the organization's
679
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
186
+ * @see {@link DescribePolicyCommand}
680
187
  */
681
188
  describePolicy(args: DescribePolicyCommandInput, options?: __HttpHandlerOptions): Promise<DescribePolicyCommandOutput>;
682
189
  describePolicy(args: DescribePolicyCommandInput, cb: (err: any, data?: DescribePolicyCommandOutput) => void): void;
683
190
  describePolicy(args: DescribePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribePolicyCommandOutput) => void): void;
684
191
  /**
685
- * @public
686
- * <p>Retrieves information about a resource policy.</p>
687
- * <p>You can only call this operation from the organization's management account or by a
688
- * member account that is a delegated administrator for an Amazon Web Services service.</p>
192
+ * @see {@link DescribeResourcePolicyCommand}
689
193
  */
690
194
  describeResourcePolicy(args: DescribeResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<DescribeResourcePolicyCommandOutput>;
691
195
  describeResourcePolicy(args: DescribeResourcePolicyCommandInput, cb: (err: any, data?: DescribeResourcePolicyCommandOutput) => void): void;
692
196
  describeResourcePolicy(args: DescribeResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeResourcePolicyCommandOutput) => void): void;
693
197
  /**
694
- * @public
695
- * <p>Detaches a policy from a target root, organizational unit (OU), or account.</p>
696
- * <important>
697
- * <p>If the policy being detached is a service control policy (SCP), the changes to
698
- * permissions for Identity and Access Management (IAM) users and roles in affected accounts are
699
- * immediate.</p>
700
- * </important>
701
- * <p>Every root, OU, and account must have at least one SCP attached. If you want to
702
- * replace the default <code>FullAWSAccess</code> policy with an SCP that limits the
703
- * permissions that can be delegated, you must attach the replacement SCP before you can
704
- * remove the default SCP. This is the authorization strategy of an "<a href="https://docs.aws.amazon.com/organizations/latest/userguide/SCP_strategies.html#orgs_policies_allowlist">allow list</a>". If you instead attach a second SCP and
705
- * leave the <code>FullAWSAccess</code> SCP still attached, and specify <code>"Effect":
706
- * "Deny"</code> in the second SCP to override the <code>"Effect": "Allow"</code> in
707
- * the <code>FullAWSAccess</code> policy (or any other attached SCP), you're using the
708
- * authorization strategy of a "<a href="https://docs.aws.amazon.com/organizations/latest/userguide/SCP_strategies.html#orgs_policies_denylist">deny list</a>".</p>
709
- * <p>This operation can be called only from the organization's management account.</p>
198
+ * @see {@link DetachPolicyCommand}
710
199
  */
711
200
  detachPolicy(args: DetachPolicyCommandInput, options?: __HttpHandlerOptions): Promise<DetachPolicyCommandOutput>;
712
201
  detachPolicy(args: DetachPolicyCommandInput, cb: (err: any, data?: DetachPolicyCommandOutput) => void): void;
713
202
  detachPolicy(args: DetachPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachPolicyCommandOutput) => void): void;
714
203
  /**
715
- * @public
716
- * <p>Disables the integration of an Amazon Web Services service (the service that is specified by
717
- * <code>ServicePrincipal</code>) with Organizations. When you disable integration, the
718
- * specified service no longer can create a <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html">service-linked role</a> in
719
- * <i>new</i> accounts in your organization. This means the service can't
720
- * perform operations on your behalf on any new accounts in your organization. The service
721
- * can still perform operations in older accounts until the service completes its clean-up
722
- * from Organizations.</p>
723
- * <important>
724
- * <p>We <b>
725
- * <i>strongly recommend</i>
726
- * </b> that
727
- * you don't use this command to disable integration between Organizations and the specified
728
- * Amazon Web Services service. Instead, use the console or commands that are provided by the
729
- * specified service. This lets the trusted service perform any required initialization
730
- * when enabling trusted access, such as creating any required resources and any
731
- * required clean up of resources when disabling trusted access. </p>
732
- * <p>For information about how to disable trusted service access to your organization
733
- * using the trusted service, see the <b>Learn more</b> link
734
- * under the <b>Supports Trusted Access</b> column at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">Amazon Web Services services that you can use with Organizations</a>. on this page.</p>
735
- * <p>If you disable access by using this command, it causes the following actions to
736
- * occur:</p>
737
- * <ul>
738
- * <li>
739
- * <p>The service can no longer create a service-linked role in the accounts in
740
- * your organization. This means that the service can't perform operations on
741
- * your behalf on any new accounts in your organization. The service can still
742
- * perform operations in older accounts until the service completes its
743
- * clean-up from Organizations. </p>
744
- * </li>
745
- * <li>
746
- * <p>The service can no longer perform tasks in the member accounts in the
747
- * organization, unless those operations are explicitly permitted by the IAM
748
- * policies that are attached to your roles. This includes any data aggregation
749
- * from the member accounts to the management account, or to a delegated
750
- * administrator account, where relevant.</p>
751
- * </li>
752
- * <li>
753
- * <p>Some services detect this and clean up any remaining data or resources
754
- * related to the integration, while other services stop accessing the
755
- * organization but leave any historical data and configuration in place to
756
- * support a possible re-enabling of the integration.</p>
757
- * </li>
758
- * </ul>
759
- * <p>Using the other service's console or commands to disable the integration ensures
760
- * that the other service is aware that it can clean up any resources that are required
761
- * only for the integration. How the service cleans up its resources in the
762
- * organization's accounts depends on that service. For more information, see the
763
- * documentation for the other Amazon Web Services service. </p>
764
- * </important>
765
- * <p>After you perform the <code>DisableAWSServiceAccess</code> operation, the specified
766
- * service can no longer perform operations in your organization's accounts </p>
767
- * <p>For more information about integrating other services with Organizations, including the
768
- * list of services that work with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating Organizations with Other
769
- * Amazon Web Services Services</a> in the <i>Organizations User Guide.</i>
770
- * </p>
771
- * <p>This operation can be called only from the organization's management account.</p>
204
+ * @see {@link DisableAWSServiceAccessCommand}
772
205
  */
773
206
  disableAWSServiceAccess(args: DisableAWSServiceAccessCommandInput, options?: __HttpHandlerOptions): Promise<DisableAWSServiceAccessCommandOutput>;
774
207
  disableAWSServiceAccess(args: DisableAWSServiceAccessCommandInput, cb: (err: any, data?: DisableAWSServiceAccessCommandOutput) => void): void;
775
208
  disableAWSServiceAccess(args: DisableAWSServiceAccessCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisableAWSServiceAccessCommandOutput) => void): void;
776
209
  /**
777
- * @public
778
- * <p>Disables an organizational policy type in a root. A policy of a certain type can be
779
- * attached to entities in a root only if that type is enabled in the root. After you
780
- * perform this operation, you no longer can attach policies of the specified type to that
781
- * root or to any organizational unit (OU) or account in that root. You can undo this by
782
- * using the <a>EnablePolicyType</a> operation.</p>
783
- * <p>This is an asynchronous request that Amazon Web Services performs in the background. If you disable
784
- * a policy type for a root, it still appears enabled for the organization if <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">all features</a> are enabled for the organization. Amazon Web Services recommends that you
785
- * first use <a>ListRoots</a> to see the status of policy types for a specified
786
- * root, and then use this operation.</p>
787
- * <p>This operation can be called only from the organization's management account.</p>
788
- * <p> To view the status of available policy types in the organization, use <a>DescribeOrganization</a>.</p>
210
+ * @see {@link DisablePolicyTypeCommand}
789
211
  */
790
212
  disablePolicyType(args: DisablePolicyTypeCommandInput, options?: __HttpHandlerOptions): Promise<DisablePolicyTypeCommandOutput>;
791
213
  disablePolicyType(args: DisablePolicyTypeCommandInput, cb: (err: any, data?: DisablePolicyTypeCommandOutput) => void): void;
792
214
  disablePolicyType(args: DisablePolicyTypeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisablePolicyTypeCommandOutput) => void): void;
793
215
  /**
794
- * @public
795
- * <p>Enables all features in an organization. This enables the use of organization policies
796
- * that can restrict the services and actions that can be called in each account. Until you
797
- * enable all features, you have access only to consolidated billing, and you can't use any
798
- * of the advanced account administration features that Organizations supports. For more
799
- * information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling All Features in Your Organization</a> in the
800
- * <i>Organizations User Guide.</i>
801
- * </p>
802
- * <important>
803
- * <p>This operation is required only for organizations that were created explicitly
804
- * with only the consolidated billing features enabled. Calling this operation sends a
805
- * handshake to every invited account in the organization. The feature set change can
806
- * be finalized and the additional features enabled only after all administrators in
807
- * the invited accounts approve the change by accepting the handshake.</p>
808
- * </important>
809
- * <p>After you enable all features, you can separately enable or disable individual policy
810
- * types in a root using <a>EnablePolicyType</a> and <a>DisablePolicyType</a>. To see the status of policy types in a root, use
811
- * <a>ListRoots</a>.</p>
812
- * <p>After all invited member accounts accept the handshake, you finalize the feature set
813
- * change by accepting the handshake that contains <code>"Action":
814
- * "ENABLE_ALL_FEATURES"</code>. This completes the change.</p>
815
- * <p>After you enable all features in your organization, the management account in the
816
- * organization can apply policies on all member accounts. These policies can restrict what
817
- * users and even administrators in those accounts can do. The management account can apply
818
- * policies that prevent accounts from leaving the organization. Ensure that your account
819
- * administrators are aware of this.</p>
820
- * <p>This operation can be called only from the organization's management account.</p>
216
+ * @see {@link EnableAllFeaturesCommand}
821
217
  */
822
218
  enableAllFeatures(args: EnableAllFeaturesCommandInput, options?: __HttpHandlerOptions): Promise<EnableAllFeaturesCommandOutput>;
823
219
  enableAllFeatures(args: EnableAllFeaturesCommandInput, cb: (err: any, data?: EnableAllFeaturesCommandOutput) => void): void;
824
220
  enableAllFeatures(args: EnableAllFeaturesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EnableAllFeaturesCommandOutput) => void): void;
825
221
  /**
826
- * @public
827
- * <p>Enables the integration of an Amazon Web Services service (the service that is specified by
828
- * <code>ServicePrincipal</code>) with Organizations. When you enable integration, you allow
829
- * the specified service to create a <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html">service-linked role</a> in
830
- * all the accounts in your organization. This allows the service to perform operations on
831
- * your behalf in your organization and its accounts.</p>
832
- * <important>
833
- * <p>We recommend that you enable integration between Organizations and the specified Amazon Web Services
834
- * service by using the console or commands that are provided by the specified service.
835
- * Doing so ensures that the service is aware that it can create the resources that are
836
- * required for the integration. How the service creates those resources in the
837
- * organization's accounts depends on that service. For more information, see the
838
- * documentation for the other Amazon Web Services service.</p>
839
- * </important>
840
- * <p>For more information about enabling services to integrate with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating
841
- * Organizations with Other Amazon Web Services Services</a> in the
842
- * <i>Organizations User Guide.</i>
843
- * </p>
844
- * <p>You can only call this operation from the organization's management account and only
845
- * if the organization has <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">enabled all
846
- * features</a>.</p>
222
+ * @see {@link EnableAWSServiceAccessCommand}
847
223
  */
848
224
  enableAWSServiceAccess(args: EnableAWSServiceAccessCommandInput, options?: __HttpHandlerOptions): Promise<EnableAWSServiceAccessCommandOutput>;
849
225
  enableAWSServiceAccess(args: EnableAWSServiceAccessCommandInput, cb: (err: any, data?: EnableAWSServiceAccessCommandOutput) => void): void;
850
226
  enableAWSServiceAccess(args: EnableAWSServiceAccessCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EnableAWSServiceAccessCommandOutput) => void): void;
851
227
  /**
852
- * @public
853
- * <p>Enables a policy type in a root. After you enable a policy type in a root, you can
854
- * attach policies of that type to the root, any organizational unit (OU), or account in
855
- * that root. You can undo this by using the <a>DisablePolicyType</a>
856
- * operation.</p>
857
- * <p>This is an asynchronous request that Amazon Web Services performs in the background. Amazon Web Services
858
- * recommends that you first use <a>ListRoots</a> to see the status of policy
859
- * types for a specified root, and then use this operation.</p>
860
- * <p>This operation can be called only from the organization's management account.</p>
861
- * <p>You can enable a policy type in a root only if that policy type is available in the
862
- * organization. To view the status of available policy types in the organization, use
863
- * <a>DescribeOrganization</a>.</p>
228
+ * @see {@link EnablePolicyTypeCommand}
864
229
  */
865
230
  enablePolicyType(args: EnablePolicyTypeCommandInput, options?: __HttpHandlerOptions): Promise<EnablePolicyTypeCommandOutput>;
866
231
  enablePolicyType(args: EnablePolicyTypeCommandInput, cb: (err: any, data?: EnablePolicyTypeCommandOutput) => void): void;
867
232
  enablePolicyType(args: EnablePolicyTypeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EnablePolicyTypeCommandOutput) => void): void;
868
233
  /**
869
- * @public
870
- * <p>Sends an invitation to another account to join your organization as a member account.
871
- * Organizations sends email on your behalf to the email address that is associated with the
872
- * other account's owner. The invitation is implemented as a <a>Handshake</a>
873
- * whose details are in the response.</p>
874
- * <important>
875
- * <ul>
876
- * <li>
877
- * <p>You can invite Amazon Web Services accounts only from the same seller as the management
878
- * account. For example, if your organization's management account was created
879
- * by Amazon Internet Services Pvt. Ltd (AISPL), an Amazon Web Services seller in India, you
880
- * can invite only other AISPL accounts to your organization. You can't combine
881
- * accounts from AISPL and Amazon Web Services or from any other Amazon Web Services seller. For more
882
- * information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/useconsolidatedbilliing-India.html">Consolidated
883
- * Billing in India</a>.</p>
884
- * </li>
885
- * <li>
886
- * <p>If you receive an exception that indicates that you exceeded your account
887
- * limits for the organization or that the operation failed because your
888
- * organization is still initializing, wait one hour and then try again. If the
889
- * error persists after an hour, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
890
- * </li>
891
- * </ul>
892
- * </important>
893
- * <p>If the request includes tags, then the requester must have the
894
- * <code>organizations:TagResource</code> permission.</p>
895
- * <p>This operation can be called only from the organization's management account.</p>
234
+ * @see {@link InviteAccountToOrganizationCommand}
896
235
  */
897
236
  inviteAccountToOrganization(args: InviteAccountToOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<InviteAccountToOrganizationCommandOutput>;
898
237
  inviteAccountToOrganization(args: InviteAccountToOrganizationCommandInput, cb: (err: any, data?: InviteAccountToOrganizationCommandOutput) => void): void;
899
238
  inviteAccountToOrganization(args: InviteAccountToOrganizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: InviteAccountToOrganizationCommandOutput) => void): void;
900
239
  /**
901
- * @public
902
- * <p>Removes a member account from its parent organization. This version of the operation
903
- * is performed by the account that wants to leave. To remove a member account as a user in
904
- * the management account, use <a>RemoveAccountFromOrganization</a>
905
- * instead.</p>
906
- * <p>This operation can be called only from a member account in the organization.</p>
907
- * <important>
908
- * <ul>
909
- * <li>
910
- * <p>The management account in an organization with all features enabled can
911
- * set service control policies (SCPs) that can restrict what administrators of
912
- * member accounts can do. This includes preventing them from successfully
913
- * calling <code>LeaveOrganization</code> and leaving the organization.</p>
914
- * </li>
915
- * <li>
916
- * <p>You can leave an organization as a member account only if the account is
917
- * configured with the information required to operate as a standalone account.
918
- * When you create an account in an organization using the Organizations console,
919
- * API, or CLI commands, the information required of standalone accounts is
920
- * <i>not</i> automatically collected. For each account that
921
- * you want to make standalone, you must perform the following steps. If any of
922
- * the steps are already completed for this account, that step doesn't
923
- * appear.</p>
924
- * <ul>
925
- * <li>
926
- * <p>Choose a support plan</p>
927
- * </li>
928
- * <li>
929
- * <p>Provide and verify the required contact information</p>
930
- * </li>
931
- * <li>
932
- * <p>Provide a current payment method</p>
933
- * </li>
934
- * </ul>
935
- * <p>Amazon Web Services uses the payment method to charge for any billable (not free tier)
936
- * Amazon Web Services activity that occurs while the account isn't attached to an
937
- * organization. Follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization when all required account information has not
938
- * yet been provided</a> in the
939
- * <i>Organizations User Guide.</i>
940
- * </p>
941
- * </li>
942
- * <li>
943
- * <p>The account that you want to leave must not be a delegated administrator
944
- * account for any Amazon Web Services service enabled for your organization. If the account
945
- * is a delegated administrator, you must first change the delegated
946
- * administrator account to another account that is remaining in the
947
- * organization.</p>
948
- * </li>
949
- * <li>
950
- * <p>You can leave an organization only after you enable IAM user access to
951
- * billing in your account. For more information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate">Activating Access to the Billing and Cost Management Console</a> in the
952
- * <i>Amazon Web Services Billing and Cost Management User Guide.</i>
953
- * </p>
954
- * </li>
955
- * <li>
956
- * <p>After the account leaves the organization, all tags that were attached to
957
- * the account object in the organization are deleted. Amazon Web Services accounts outside
958
- * of an organization do not support tags.</p>
959
- * </li>
960
- * <li>
961
- * <p>A newly created account has a waiting period before it can be removed from
962
- * its organization. If you get an error that indicates that a wait period is
963
- * required, then try again in a few days.</p>
964
- * </li>
965
- * </ul>
966
- * </important>
240
+ * @see {@link LeaveOrganizationCommand}
967
241
  */
968
242
  leaveOrganization(args: LeaveOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<LeaveOrganizationCommandOutput>;
969
243
  leaveOrganization(args: LeaveOrganizationCommandInput, cb: (err: any, data?: LeaveOrganizationCommandOutput) => void): void;
970
244
  leaveOrganization(args: LeaveOrganizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: LeaveOrganizationCommandOutput) => void): void;
971
245
  /**
972
- * @public
973
- * <p>Lists all the accounts in the organization. To request only the accounts in a
974
- * specified root or organizational unit (OU), use the <a>ListAccountsForParent</a> operation instead.</p>
975
- * <note>
976
- * <p>Always check the <code>NextToken</code> response parameter
977
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
978
- * occasionally return an empty set of results even when there are more results available. The
979
- * <code>NextToken</code> response parameter value is <code>null</code>
980
- * <i>only</i>
981
- * when there are no more results to display.</p>
982
- * </note>
983
- * <p>This operation can be called only from the organization's
984
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
246
+ * @see {@link ListAccountsCommand}
985
247
  */
986
248
  listAccounts(args: ListAccountsCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountsCommandOutput>;
987
249
  listAccounts(args: ListAccountsCommandInput, cb: (err: any, data?: ListAccountsCommandOutput) => void): void;
988
250
  listAccounts(args: ListAccountsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountsCommandOutput) => void): void;
989
251
  /**
990
- * @public
991
- * <p>Lists the accounts in an organization that are contained by the specified target root
992
- * or organizational unit (OU). If you specify the root, you get a list of all the accounts
993
- * that aren't in any OU. If you specify an OU, you get a list of all the accounts in only
994
- * that OU and not in any child OUs. To get a list of all accounts in the organization, use
995
- * the <a>ListAccounts</a> operation.</p>
996
- * <note>
997
- * <p>Always check the <code>NextToken</code> response parameter
998
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
999
- * occasionally return an empty set of results even when there are more results available. The
1000
- * <code>NextToken</code> response parameter value is <code>null</code>
1001
- * <i>only</i>
1002
- * when there are no more results to display.</p>
1003
- * </note>
1004
- * <p>This operation can be called only from the organization's
1005
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
252
+ * @see {@link ListAccountsForParentCommand}
1006
253
  */
1007
254
  listAccountsForParent(args: ListAccountsForParentCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountsForParentCommandOutput>;
1008
255
  listAccountsForParent(args: ListAccountsForParentCommandInput, cb: (err: any, data?: ListAccountsForParentCommandOutput) => void): void;
1009
256
  listAccountsForParent(args: ListAccountsForParentCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountsForParentCommandOutput) => void): void;
1010
257
  /**
1011
- * @public
1012
- * <p>Returns a list of the Amazon Web Services services that you enabled to integrate with your
1013
- * organization. After a service on this list creates the resources that it requires for
1014
- * the integration, it can perform operations on your organization and its accounts.</p>
1015
- * <p>For more information about integrating other services with Organizations, including the
1016
- * list of services that currently work with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating Organizations with Other
1017
- * Amazon Web Services Services</a> in the <i>Organizations User Guide.</i>
1018
- * </p>
1019
- * <p>This operation can be called only from the organization's
1020
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
258
+ * @see {@link ListAWSServiceAccessForOrganizationCommand}
1021
259
  */
1022
260
  listAWSServiceAccessForOrganization(args: ListAWSServiceAccessForOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<ListAWSServiceAccessForOrganizationCommandOutput>;
1023
261
  listAWSServiceAccessForOrganization(args: ListAWSServiceAccessForOrganizationCommandInput, cb: (err: any, data?: ListAWSServiceAccessForOrganizationCommandOutput) => void): void;
1024
262
  listAWSServiceAccessForOrganization(args: ListAWSServiceAccessForOrganizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAWSServiceAccessForOrganizationCommandOutput) => void): void;
1025
263
  /**
1026
- * @public
1027
- * <p>Lists all of the organizational units (OUs) or accounts that are contained in the
1028
- * specified parent OU or root. This operation, along with <a>ListParents</a>
1029
- * enables you to traverse the tree structure that makes up this root.</p>
1030
- * <note>
1031
- * <p>Always check the <code>NextToken</code> response parameter
1032
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1033
- * occasionally return an empty set of results even when there are more results available. The
1034
- * <code>NextToken</code> response parameter value is <code>null</code>
1035
- * <i>only</i>
1036
- * when there are no more results to display.</p>
1037
- * </note>
1038
- * <p>This operation can be called only from the organization's
1039
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
264
+ * @see {@link ListChildrenCommand}
1040
265
  */
1041
266
  listChildren(args: ListChildrenCommandInput, options?: __HttpHandlerOptions): Promise<ListChildrenCommandOutput>;
1042
267
  listChildren(args: ListChildrenCommandInput, cb: (err: any, data?: ListChildrenCommandOutput) => void): void;
1043
268
  listChildren(args: ListChildrenCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListChildrenCommandOutput) => void): void;
1044
269
  /**
1045
- * @public
1046
- * <p>Lists the account creation requests that match the specified status that is currently
1047
- * being tracked for the organization.</p>
1048
- * <note>
1049
- * <p>Always check the <code>NextToken</code> response parameter
1050
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1051
- * occasionally return an empty set of results even when there are more results available. The
1052
- * <code>NextToken</code> response parameter value is <code>null</code>
1053
- * <i>only</i>
1054
- * when there are no more results to display.</p>
1055
- * </note>
1056
- * <p>This operation can be called only from the organization's
1057
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
270
+ * @see {@link ListCreateAccountStatusCommand}
1058
271
  */
1059
272
  listCreateAccountStatus(args: ListCreateAccountStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListCreateAccountStatusCommandOutput>;
1060
273
  listCreateAccountStatus(args: ListCreateAccountStatusCommandInput, cb: (err: any, data?: ListCreateAccountStatusCommandOutput) => void): void;
1061
274
  listCreateAccountStatus(args: ListCreateAccountStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListCreateAccountStatusCommandOutput) => void): void;
1062
275
  /**
1063
- * @public
1064
- * <p>Lists the Amazon Web Services accounts that are designated as delegated administrators in this
1065
- * organization.</p>
1066
- * <p>This operation can be called only from the organization's
1067
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
276
+ * @see {@link ListDelegatedAdministratorsCommand}
1068
277
  */
1069
278
  listDelegatedAdministrators(args: ListDelegatedAdministratorsCommandInput, options?: __HttpHandlerOptions): Promise<ListDelegatedAdministratorsCommandOutput>;
1070
279
  listDelegatedAdministrators(args: ListDelegatedAdministratorsCommandInput, cb: (err: any, data?: ListDelegatedAdministratorsCommandOutput) => void): void;
1071
280
  listDelegatedAdministrators(args: ListDelegatedAdministratorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListDelegatedAdministratorsCommandOutput) => void): void;
1072
281
  /**
1073
- * @public
1074
- * <p>List the Amazon Web Services services for which the specified account is a delegated
1075
- * administrator.</p>
1076
- * <p>This operation can be called only from the organization's
1077
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
282
+ * @see {@link ListDelegatedServicesForAccountCommand}
1078
283
  */
1079
284
  listDelegatedServicesForAccount(args: ListDelegatedServicesForAccountCommandInput, options?: __HttpHandlerOptions): Promise<ListDelegatedServicesForAccountCommandOutput>;
1080
285
  listDelegatedServicesForAccount(args: ListDelegatedServicesForAccountCommandInput, cb: (err: any, data?: ListDelegatedServicesForAccountCommandOutput) => void): void;
1081
286
  listDelegatedServicesForAccount(args: ListDelegatedServicesForAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListDelegatedServicesForAccountCommandOutput) => void): void;
1082
287
  /**
1083
- * @public
1084
- * <p>Lists the current handshakes that are associated with the account of the requesting
1085
- * user.</p>
1086
- * <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
1087
- * <code>CANCELED</code>, or <code>EXPIRED</code> appear in the results of this API for
1088
- * only 30 days after changing to that state. After that, they're deleted and no longer
1089
- * accessible.</p>
1090
- * <note>
1091
- * <p>Always check the <code>NextToken</code> response parameter
1092
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1093
- * occasionally return an empty set of results even when there are more results available. The
1094
- * <code>NextToken</code> response parameter value is <code>null</code>
1095
- * <i>only</i>
1096
- * when there are no more results to display.</p>
1097
- * </note>
1098
- * <p>This operation can be called from any account in the organization.</p>
288
+ * @see {@link ListHandshakesForAccountCommand}
1099
289
  */
1100
290
  listHandshakesForAccount(args: ListHandshakesForAccountCommandInput, options?: __HttpHandlerOptions): Promise<ListHandshakesForAccountCommandOutput>;
1101
291
  listHandshakesForAccount(args: ListHandshakesForAccountCommandInput, cb: (err: any, data?: ListHandshakesForAccountCommandOutput) => void): void;
1102
292
  listHandshakesForAccount(args: ListHandshakesForAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListHandshakesForAccountCommandOutput) => void): void;
1103
293
  /**
1104
- * @public
1105
- * <p>Lists the handshakes that are associated with the organization that the requesting
1106
- * user is part of. The <code>ListHandshakesForOrganization</code> operation returns a list
1107
- * of handshake structures. Each structure contains details and status about a
1108
- * handshake.</p>
1109
- * <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
1110
- * <code>CANCELED</code>, or <code>EXPIRED</code> appear in the results of this API for
1111
- * only 30 days after changing to that state. After that, they're deleted and no longer
1112
- * accessible.</p>
1113
- * <note>
1114
- * <p>Always check the <code>NextToken</code> response parameter
1115
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1116
- * occasionally return an empty set of results even when there are more results available. The
1117
- * <code>NextToken</code> response parameter value is <code>null</code>
1118
- * <i>only</i>
1119
- * when there are no more results to display.</p>
1120
- * </note>
1121
- * <p>This operation can be called only from the organization's
1122
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
294
+ * @see {@link ListHandshakesForOrganizationCommand}
1123
295
  */
1124
296
  listHandshakesForOrganization(args: ListHandshakesForOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<ListHandshakesForOrganizationCommandOutput>;
1125
297
  listHandshakesForOrganization(args: ListHandshakesForOrganizationCommandInput, cb: (err: any, data?: ListHandshakesForOrganizationCommandOutput) => void): void;
1126
298
  listHandshakesForOrganization(args: ListHandshakesForOrganizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListHandshakesForOrganizationCommandOutput) => void): void;
1127
299
  /**
1128
- * @public
1129
- * <p>Lists the organizational units (OUs) in a parent organizational unit or root.</p>
1130
- * <note>
1131
- * <p>Always check the <code>NextToken</code> response parameter
1132
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1133
- * occasionally return an empty set of results even when there are more results available. The
1134
- * <code>NextToken</code> response parameter value is <code>null</code>
1135
- * <i>only</i>
1136
- * when there are no more results to display.</p>
1137
- * </note>
1138
- * <p>This operation can be called only from the organization's
1139
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
300
+ * @see {@link ListOrganizationalUnitsForParentCommand}
1140
301
  */
1141
302
  listOrganizationalUnitsForParent(args: ListOrganizationalUnitsForParentCommandInput, options?: __HttpHandlerOptions): Promise<ListOrganizationalUnitsForParentCommandOutput>;
1142
303
  listOrganizationalUnitsForParent(args: ListOrganizationalUnitsForParentCommandInput, cb: (err: any, data?: ListOrganizationalUnitsForParentCommandOutput) => void): void;
1143
304
  listOrganizationalUnitsForParent(args: ListOrganizationalUnitsForParentCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListOrganizationalUnitsForParentCommandOutput) => void): void;
1144
305
  /**
1145
- * @public
1146
- * <p>Lists the root or organizational units (OUs) that serve as the immediate parent of the
1147
- * specified child OU or account. This operation, along with <a>ListChildren</a>
1148
- * enables you to traverse the tree structure that makes up this root.</p>
1149
- * <note>
1150
- * <p>Always check the <code>NextToken</code> response parameter
1151
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1152
- * occasionally return an empty set of results even when there are more results available. The
1153
- * <code>NextToken</code> response parameter value is <code>null</code>
1154
- * <i>only</i>
1155
- * when there are no more results to display.</p>
1156
- * </note>
1157
- * <p>This operation can be called only from the organization's
1158
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
1159
- * <note>
1160
- * <p>In the current release, a child can have only a single parent.</p>
1161
- * </note>
306
+ * @see {@link ListParentsCommand}
1162
307
  */
1163
308
  listParents(args: ListParentsCommandInput, options?: __HttpHandlerOptions): Promise<ListParentsCommandOutput>;
1164
309
  listParents(args: ListParentsCommandInput, cb: (err: any, data?: ListParentsCommandOutput) => void): void;
1165
310
  listParents(args: ListParentsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListParentsCommandOutput) => void): void;
1166
311
  /**
1167
- * @public
1168
- * <p>Retrieves the list of all policies in an organization of a specified type.</p>
1169
- * <note>
1170
- * <p>Always check the <code>NextToken</code> response parameter
1171
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1172
- * occasionally return an empty set of results even when there are more results available. The
1173
- * <code>NextToken</code> response parameter value is <code>null</code>
1174
- * <i>only</i>
1175
- * when there are no more results to display.</p>
1176
- * </note>
1177
- * <p>This operation can be called only from the organization's
1178
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
312
+ * @see {@link ListPoliciesCommand}
1179
313
  */
1180
314
  listPolicies(args: ListPoliciesCommandInput, options?: __HttpHandlerOptions): Promise<ListPoliciesCommandOutput>;
1181
315
  listPolicies(args: ListPoliciesCommandInput, cb: (err: any, data?: ListPoliciesCommandOutput) => void): void;
1182
316
  listPolicies(args: ListPoliciesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPoliciesCommandOutput) => void): void;
1183
317
  /**
1184
- * @public
1185
- * <p>Lists the policies that are directly attached to the specified target root,
1186
- * organizational unit (OU), or account. You must specify the policy type that you want
1187
- * included in the returned list.</p>
1188
- * <note>
1189
- * <p>Always check the <code>NextToken</code> response parameter
1190
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1191
- * occasionally return an empty set of results even when there are more results available. The
1192
- * <code>NextToken</code> response parameter value is <code>null</code>
1193
- * <i>only</i>
1194
- * when there are no more results to display.</p>
1195
- * </note>
1196
- * <p>This operation can be called only from the organization's
1197
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
318
+ * @see {@link ListPoliciesForTargetCommand}
1198
319
  */
1199
320
  listPoliciesForTarget(args: ListPoliciesForTargetCommandInput, options?: __HttpHandlerOptions): Promise<ListPoliciesForTargetCommandOutput>;
1200
321
  listPoliciesForTarget(args: ListPoliciesForTargetCommandInput, cb: (err: any, data?: ListPoliciesForTargetCommandOutput) => void): void;
1201
322
  listPoliciesForTarget(args: ListPoliciesForTargetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPoliciesForTargetCommandOutput) => void): void;
1202
323
  /**
1203
- * @public
1204
- * <p>Lists the roots that are defined in the current organization.</p>
1205
- * <note>
1206
- * <p>Always check the <code>NextToken</code> response parameter
1207
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1208
- * occasionally return an empty set of results even when there are more results available. The
1209
- * <code>NextToken</code> response parameter value is <code>null</code>
1210
- * <i>only</i>
1211
- * when there are no more results to display.</p>
1212
- * </note>
1213
- * <p>This operation can be called only from the organization's
1214
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
1215
- * <note>
1216
- * <p>Policy types can be enabled and disabled in roots. This is distinct from whether
1217
- * they're available in the organization. When you enable all features, you make policy
1218
- * types available for use in that organization. Individual policy types can then be
1219
- * enabled and disabled in a root. To see the availability of a policy type in an
1220
- * organization, use <a>DescribeOrganization</a>.</p>
1221
- * </note>
324
+ * @see {@link ListRootsCommand}
1222
325
  */
1223
326
  listRoots(args: ListRootsCommandInput, options?: __HttpHandlerOptions): Promise<ListRootsCommandOutput>;
1224
327
  listRoots(args: ListRootsCommandInput, cb: (err: any, data?: ListRootsCommandOutput) => void): void;
1225
328
  listRoots(args: ListRootsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListRootsCommandOutput) => void): void;
1226
329
  /**
1227
- * @public
1228
- * <p>Lists tags that are attached to the specified resource.</p>
1229
- * <p>You can attach tags to the following resources in Organizations.</p>
1230
- * <ul>
1231
- * <li>
1232
- * <p>Amazon Web Services account</p>
1233
- * </li>
1234
- * <li>
1235
- * <p>Organization root</p>
1236
- * </li>
1237
- * <li>
1238
- * <p>Organizational unit (OU)</p>
1239
- * </li>
1240
- * <li>
1241
- * <p>Policy (any type)</p>
1242
- * </li>
1243
- * </ul>
1244
- * <p>This operation can be called only from the organization's
1245
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
330
+ * @see {@link ListTagsForResourceCommand}
1246
331
  */
1247
332
  listTagsForResource(args: ListTagsForResourceCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsForResourceCommandOutput>;
1248
333
  listTagsForResource(args: ListTagsForResourceCommandInput, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
1249
334
  listTagsForResource(args: ListTagsForResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
1250
335
  /**
1251
- * @public
1252
- * <p>Lists all the roots, organizational units (OUs), and accounts that the specified
1253
- * policy is attached to.</p>
1254
- * <note>
1255
- * <p>Always check the <code>NextToken</code> response parameter
1256
- * for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
1257
- * occasionally return an empty set of results even when there are more results available. The
1258
- * <code>NextToken</code> response parameter value is <code>null</code>
1259
- * <i>only</i>
1260
- * when there are no more results to display.</p>
1261
- * </note>
1262
- * <p>This operation can be called only from the organization's
1263
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
336
+ * @see {@link ListTargetsForPolicyCommand}
1264
337
  */
1265
338
  listTargetsForPolicy(args: ListTargetsForPolicyCommandInput, options?: __HttpHandlerOptions): Promise<ListTargetsForPolicyCommandOutput>;
1266
339
  listTargetsForPolicy(args: ListTargetsForPolicyCommandInput, cb: (err: any, data?: ListTargetsForPolicyCommandOutput) => void): void;
1267
340
  listTargetsForPolicy(args: ListTargetsForPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTargetsForPolicyCommandOutput) => void): void;
1268
341
  /**
1269
- * @public
1270
- * <p>Moves an account from its current source parent root or organizational unit (OU) to
1271
- * the specified destination parent root or OU.</p>
1272
- * <p>This operation can be called only from the organization's management account.</p>
342
+ * @see {@link MoveAccountCommand}
1273
343
  */
1274
344
  moveAccount(args: MoveAccountCommandInput, options?: __HttpHandlerOptions): Promise<MoveAccountCommandOutput>;
1275
345
  moveAccount(args: MoveAccountCommandInput, cb: (err: any, data?: MoveAccountCommandOutput) => void): void;
1276
346
  moveAccount(args: MoveAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: MoveAccountCommandOutput) => void): void;
1277
347
  /**
1278
- * @public
1279
- * <p>Creates or updates a resource policy.</p>
1280
- * <p>You can only call this operation from the organization's management account.</p>
348
+ * @see {@link PutResourcePolicyCommand}
1281
349
  */
1282
350
  putResourcePolicy(args: PutResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<PutResourcePolicyCommandOutput>;
1283
351
  putResourcePolicy(args: PutResourcePolicyCommandInput, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
1284
352
  putResourcePolicy(args: PutResourcePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutResourcePolicyCommandOutput) => void): void;
1285
353
  /**
1286
- * @public
1287
- * <p>Enables the specified member account to administer the Organizations features of the specified
1288
- * Amazon Web Services service. It grants read-only access to Organizations service data. The account still
1289
- * requires IAM permissions to access and administer the Amazon Web Services service.</p>
1290
- * <p>You can run this action only for Amazon Web Services services that support this
1291
- * feature. For a current list of services that support it, see the column <i>Supports
1292
- * Delegated Administrator</i> in the table at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">Amazon Web Services Services that you can use with
1293
- * Organizations</a> in the <i>Organizations User Guide.</i>
1294
- * </p>
1295
- * <p>This operation can be called only from the organization's management account.</p>
354
+ * @see {@link RegisterDelegatedAdministratorCommand}
1296
355
  */
1297
356
  registerDelegatedAdministrator(args: RegisterDelegatedAdministratorCommandInput, options?: __HttpHandlerOptions): Promise<RegisterDelegatedAdministratorCommandOutput>;
1298
357
  registerDelegatedAdministrator(args: RegisterDelegatedAdministratorCommandInput, cb: (err: any, data?: RegisterDelegatedAdministratorCommandOutput) => void): void;
1299
358
  registerDelegatedAdministrator(args: RegisterDelegatedAdministratorCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RegisterDelegatedAdministratorCommandOutput) => void): void;
1300
359
  /**
1301
- * @public
1302
- * <p>Removes the specified account from the organization.</p>
1303
- * <p>The removed account becomes a standalone account that isn't a member of any
1304
- * organization. It's no longer subject to any policies and is responsible for its own bill
1305
- * payments. The organization's management account is no longer charged for any expenses
1306
- * accrued by the member account after it's removed from the organization.</p>
1307
- * <p>This operation can be called only from the organization's management account. Member accounts can remove themselves with <a>LeaveOrganization</a> instead.</p>
1308
- * <important>
1309
- * <ul>
1310
- * <li>
1311
- * <p>You can remove an account from your organization only if the account is
1312
- * configured with the information required to operate as a standalone account.
1313
- * When you create an account in an organization using the Organizations console,
1314
- * API, or CLI commands, the information required of standalone accounts is
1315
- * <i>not</i> automatically collected. For an account that
1316
- * you want to make standalone, you must choose a support plan, provide and
1317
- * verify the required contact information, and provide a current payment
1318
- * method. Amazon Web Services uses the payment method to charge for any billable (not free
1319
- * tier) Amazon Web Services activity that occurs while the account isn't attached to an
1320
- * organization. To remove an account that doesn't yet have this information,
1321
- * you must sign in as the member account and follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization when all required account information has not
1322
- * yet been provided</a> in the
1323
- * <i>Organizations User Guide.</i>
1324
- * </p>
1325
- * </li>
1326
- * <li>
1327
- * <p>The account that you want to leave must not be a delegated administrator
1328
- * account for any Amazon Web Services service enabled for your organization. If the account
1329
- * is a delegated administrator, you must first change the delegated
1330
- * administrator account to another account that is remaining in the
1331
- * organization.</p>
1332
- * </li>
1333
- * <li>
1334
- * <p>After the account leaves the organization, all tags that were attached to
1335
- * the account object in the organization are deleted. Amazon Web Services accounts outside
1336
- * of an organization do not support tags.</p>
1337
- * </li>
1338
- * </ul>
1339
- * </important>
360
+ * @see {@link RemoveAccountFromOrganizationCommand}
1340
361
  */
1341
362
  removeAccountFromOrganization(args: RemoveAccountFromOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<RemoveAccountFromOrganizationCommandOutput>;
1342
363
  removeAccountFromOrganization(args: RemoveAccountFromOrganizationCommandInput, cb: (err: any, data?: RemoveAccountFromOrganizationCommandOutput) => void): void;
1343
364
  removeAccountFromOrganization(args: RemoveAccountFromOrganizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RemoveAccountFromOrganizationCommandOutput) => void): void;
1344
365
  /**
1345
- * @public
1346
- * <p>Adds one or more tags to the specified resource.</p>
1347
- * <p>Currently, you can attach tags to the following resources in Organizations.</p>
1348
- * <ul>
1349
- * <li>
1350
- * <p>Amazon Web Services account</p>
1351
- * </li>
1352
- * <li>
1353
- * <p>Organization root</p>
1354
- * </li>
1355
- * <li>
1356
- * <p>Organizational unit (OU)</p>
1357
- * </li>
1358
- * <li>
1359
- * <p>Policy (any type)</p>
1360
- * </li>
1361
- * </ul>
1362
- * <p>This operation can be called only from the organization's management account.</p>
366
+ * @see {@link TagResourceCommand}
1363
367
  */
1364
368
  tagResource(args: TagResourceCommandInput, options?: __HttpHandlerOptions): Promise<TagResourceCommandOutput>;
1365
369
  tagResource(args: TagResourceCommandInput, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
1366
370
  tagResource(args: TagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
1367
371
  /**
1368
- * @public
1369
- * <p>Removes any tags with the specified keys from the specified resource.</p>
1370
- * <p>You can attach tags to the following resources in Organizations.</p>
1371
- * <ul>
1372
- * <li>
1373
- * <p>Amazon Web Services account</p>
1374
- * </li>
1375
- * <li>
1376
- * <p>Organization root</p>
1377
- * </li>
1378
- * <li>
1379
- * <p>Organizational unit (OU)</p>
1380
- * </li>
1381
- * <li>
1382
- * <p>Policy (any type)</p>
1383
- * </li>
1384
- * </ul>
1385
- * <p>This operation can be called only from the organization's management account.</p>
372
+ * @see {@link UntagResourceCommand}
1386
373
  */
1387
374
  untagResource(args: UntagResourceCommandInput, options?: __HttpHandlerOptions): Promise<UntagResourceCommandOutput>;
1388
375
  untagResource(args: UntagResourceCommandInput, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
1389
376
  untagResource(args: UntagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
1390
377
  /**
1391
- * @public
1392
- * <p>Renames the specified organizational unit (OU). The ID and ARN don't change. The child
1393
- * OUs and accounts remain in place, and any attached policies of the OU remain
1394
- * attached.</p>
1395
- * <p>This operation can be called only from the organization's management account.</p>
378
+ * @see {@link UpdateOrganizationalUnitCommand}
1396
379
  */
1397
380
  updateOrganizationalUnit(args: UpdateOrganizationalUnitCommandInput, options?: __HttpHandlerOptions): Promise<UpdateOrganizationalUnitCommandOutput>;
1398
381
  updateOrganizationalUnit(args: UpdateOrganizationalUnitCommandInput, cb: (err: any, data?: UpdateOrganizationalUnitCommandOutput) => void): void;
1399
382
  updateOrganizationalUnit(args: UpdateOrganizationalUnitCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateOrganizationalUnitCommandOutput) => void): void;
1400
383
  /**
1401
- * @public
1402
- * <p>Updates an existing policy with a new name, description, or content. If you don't
1403
- * supply any parameter, that value remains unchanged. You can't change a policy's
1404
- * type.</p>
1405
- * <p>This operation can be called only from the organization's management account.</p>
384
+ * @see {@link UpdatePolicyCommand}
1406
385
  */
1407
386
  updatePolicy(args: UpdatePolicyCommandInput, options?: __HttpHandlerOptions): Promise<UpdatePolicyCommandOutput>;
1408
387
  updatePolicy(args: UpdatePolicyCommandInput, cb: (err: any, data?: UpdatePolicyCommandOutput) => void): void;
1409
388
  updatePolicy(args: UpdatePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdatePolicyCommandOutput) => void): void;
1410
389
  }
390
+ /**
391
+ * @public
392
+ * <p>Organizations is a web service that enables you to consolidate your multiple
393
+ * Amazon Web Services accounts into an <i>organization</i> and centrally manage your
394
+ * accounts and their resources.</p>
395
+ * <p>This guide provides descriptions of the Organizations operations. For more
396
+ * information about using this service, see the <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html">Organizations User Guide</a>.</p>
397
+ * <p>
398
+ * <b>Support and feedback for Organizations</b>
399
+ * </p>
400
+ * <p>We welcome your feedback. Send your comments to <a href="mailto:feedback-awsorganizations@amazon.com">feedback-awsorganizations@amazon.com</a> or post your feedback and questions in
401
+ * the <a href="http://forums.aws.amazon.com/forum.jspa?forumID=219">Organizations support forum</a>. For
402
+ * more information about the Amazon Web Services support forums, see <a href="http://forums.aws.amazon.com/help.jspa">Forums Help</a>.</p>
403
+ * <p>
404
+ * <b>Endpoint to call When using the CLI or the Amazon Web Services
405
+ * SDK</b>
406
+ * </p>
407
+ * <p>For the current release of Organizations, specify the <code>us-east-1</code> region
408
+ * for all Amazon Web Services API and CLI calls made from the commercial Amazon Web Services Regions outside of
409
+ * China. If calling from one of the Amazon Web Services Regions in China, then specify
410
+ * <code>cn-northwest-1</code>. You can do this in the CLI by using these parameters
411
+ * and commands:</p>
412
+ * <ul>
413
+ * <li>
414
+ * <p>Use the following parameter with each command to specify both the endpoint and
415
+ * its region:</p>
416
+ * <p>
417
+ * <code>--endpoint-url https://organizations.us-east-1.amazonaws.com</code>
418
+ * <i>(from commercial Amazon Web Services Regions outside of China)</i>
419
+ * </p>
420
+ * <p>or</p>
421
+ * <p>
422
+ * <code>--endpoint-url
423
+ * https://organizations.cn-northwest-1.amazonaws.com.cn</code>
424
+ * <i>(from Amazon Web Services Regions in China)</i>
425
+ * </p>
426
+ * </li>
427
+ * <li>
428
+ * <p>Use the default endpoint, but configure your default region with this
429
+ * command:</p>
430
+ * <p>
431
+ * <code>aws configure set default.region us-east-1</code>
432
+ * <i>(from commercial Amazon Web Services Regions outside of China)</i>
433
+ * </p>
434
+ * <p>or</p>
435
+ * <p>
436
+ * <code>aws configure set default.region cn-northwest-1</code>
437
+ * <i>(from Amazon Web Services Regions in China)</i>
438
+ * </p>
439
+ * </li>
440
+ * <li>
441
+ * <p>Use the following parameter with each command to specify the endpoint:</p>
442
+ * <p>
443
+ * <code>--region us-east-1</code>
444
+ * <i>(from commercial Amazon Web Services Regions outside of China)</i>
445
+ * </p>
446
+ * <p>or</p>
447
+ * <p>
448
+ * <code>--region cn-northwest-1</code>
449
+ * <i>(from Amazon Web Services Regions in China)</i>
450
+ * </p>
451
+ * </li>
452
+ * </ul>
453
+ * <p>
454
+ * <b>Recording API Requests</b>
455
+ * </p>
456
+ * <p>Organizations supports CloudTrail, a service that records Amazon Web Services API calls for your
457
+ * Amazon Web Services account and delivers log files to an Amazon S3 bucket. By using information collected
458
+ * by CloudTrail, you can determine which requests the Organizations service received, who made the
459
+ * request and when, and so on. For more about Organizations and its support for CloudTrail, see
460
+ * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_incident-response.html#orgs_cloudtrail-integration">Logging
461
+ * Organizations Events with CloudTrail</a> in the <i>Organizations User Guide</i>.
462
+ * To learn more about CloudTrail, including how to turn it on and find your log files, see the
463
+ * <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html">CloudTrail User Guide</a>.</p>
464
+ */
465
+ export declare class Organizations extends OrganizationsClient implements Organizations {
466
+ }