@aws-sdk/client-organizations 3.34.0 → 3.35.0

package/dist-types/ts3.4/commands/DescribeHandshakeCommand.d.ts

@@ -0,0 +1,41 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { DescribeHandshakeRequest, DescribeHandshakeResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface DescribeHandshakeCommandInput extends DescribeHandshakeRequest {
+}
+export interface DescribeHandshakeCommandOutput extends DescribeHandshakeResponse, __MetadataBearer {
+}
+/**
+ * <p>Retrieves information about a previously requested handshake. The handshake ID comes
+ *             from the response to the original <a>InviteAccountToOrganization</a>
+ *             operation that generated the handshake.</p>
+ *         <p>You can access handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>, or
+ *                 <code>CANCELED</code> for only 30 days after they change to that state. They're then
+ *             deleted and no longer accessible.</p>
+ *         <p>This operation can be called from any account in the organization.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DescribeHandshakeCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DescribeHandshakeCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DescribeHandshakeCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DescribeHandshakeCommandInput} for command's `input` shape.
+ * @see {@link DescribeHandshakeCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class DescribeHandshakeCommand extends $Command<DescribeHandshakeCommandInput, DescribeHandshakeCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: DescribeHandshakeCommandInput;
+    constructor(input: DescribeHandshakeCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DescribeHandshakeCommandInput, DescribeHandshakeCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/DescribeOrganizationCommand.d.ts

@@ -0,0 +1,42 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { DescribeOrganizationResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface DescribeOrganizationCommandInput {
+}
+export interface DescribeOrganizationCommandOutput extends DescribeOrganizationResponse, __MetadataBearer {
+}
+/**
+ * <p>Retrieves information about the organization that the user's account belongs
+ *             to.</p>
+ *         <p>This operation can be called from any account in the organization.</p>
+ *         <note>
+ *             <p>Even if a policy type is shown as available in the organization, you can disable
+ *                 it separately at the root level with <a>DisablePolicyType</a>. Use <a>ListRoots</a> to see the status of policy types for a specified
+ *                 root.</p>
+ *         </note>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DescribeOrganizationCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DescribeOrganizationCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DescribeOrganizationCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DescribeOrganizationCommandInput} for command's `input` shape.
+ * @see {@link DescribeOrganizationCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class DescribeOrganizationCommand extends $Command<DescribeOrganizationCommandInput, DescribeOrganizationCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: DescribeOrganizationCommandInput;
+    constructor(input: DescribeOrganizationCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DescribeOrganizationCommandInput, DescribeOrganizationCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/DescribeOrganizationalUnitCommand.d.ts

@@ -0,0 +1,37 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { DescribeOrganizationalUnitRequest, DescribeOrganizationalUnitResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface DescribeOrganizationalUnitCommandInput extends DescribeOrganizationalUnitRequest {
+}
+export interface DescribeOrganizationalUnitCommandOutput extends DescribeOrganizationalUnitResponse, __MetadataBearer {
+}
+/**
+ * <p>Retrieves information about an organizational unit (OU).</p>
+ *         <p>This operation can be called only from the organization's
+ * management account or by a member account that is a delegated administrator for an AWS service.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DescribeOrganizationalUnitCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DescribeOrganizationalUnitCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DescribeOrganizationalUnitCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DescribeOrganizationalUnitCommandInput} for command's `input` shape.
+ * @see {@link DescribeOrganizationalUnitCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class DescribeOrganizationalUnitCommand extends $Command<DescribeOrganizationalUnitCommandInput, DescribeOrganizationalUnitCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: DescribeOrganizationalUnitCommandInput;
+    constructor(input: DescribeOrganizationalUnitCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DescribeOrganizationalUnitCommandInput, DescribeOrganizationalUnitCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/DescribePolicyCommand.d.ts

@@ -0,0 +1,37 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { DescribePolicyRequest, DescribePolicyResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface DescribePolicyCommandInput extends DescribePolicyRequest {
+}
+export interface DescribePolicyCommandOutput extends DescribePolicyResponse, __MetadataBearer {
+}
+/**
+ * <p>Retrieves information about a policy.</p>
+ *         <p>This operation can be called only from the organization's
+ * management account or by a member account that is a delegated administrator for an AWS service.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DescribePolicyCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DescribePolicyCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DescribePolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DescribePolicyCommandInput} for command's `input` shape.
+ * @see {@link DescribePolicyCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class DescribePolicyCommand extends $Command<DescribePolicyCommandInput, DescribePolicyCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: DescribePolicyCommandInput;
+    constructor(input: DescribePolicyCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DescribePolicyCommandInput, DescribePolicyCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/DetachPolicyCommand.d.ts

@@ -0,0 +1,49 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { DetachPolicyRequest } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface DetachPolicyCommandInput extends DetachPolicyRequest {
+}
+export interface DetachPolicyCommandOutput extends __MetadataBearer {
+}
+/**
+ * <p>Detaches a policy from a target root, organizational unit (OU), or account.</p>
+ *         <important>
+ *             <p>If the policy being detached is a service control policy (SCP), the changes to
+ *                 permissions for AWS Identity and Access Management (IAM) users and roles in affected accounts are
+ *                 immediate.</p>
+ *         </important>
+ *         <p>Every root, OU, and account must have at least one SCP attached. If you want to
+ *             replace the default <code>FullAWSAccess</code> policy with an SCP that limits the
+ *             permissions that can be delegated, you must attach the replacement SCP before you can
+ *             remove the default SCP. This is the authorization strategy of an "<a href="https://docs.aws.amazon.com/organizations/latest/userguide/SCP_strategies.html#orgs_policies_allowlist">allow list</a>". If you instead attach a second SCP and
+ *             leave the <code>FullAWSAccess</code> SCP still attached, and specify <code>"Effect":
+ *                 "Deny"</code> in the second SCP to override the <code>"Effect": "Allow"</code> in
+ *             the <code>FullAWSAccess</code> policy (or any other attached SCP), you're using the
+ *             authorization strategy of a "<a href="https://docs.aws.amazon.com/organizations/latest/userguide/SCP_strategies.html#orgs_policies_denylist">deny list</a>".</p>
+ *         <p>This operation can be called only from the organization's management account.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DetachPolicyCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DetachPolicyCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DetachPolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DetachPolicyCommandInput} for command's `input` shape.
+ * @see {@link DetachPolicyCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class DetachPolicyCommand extends $Command<DetachPolicyCommandInput, DetachPolicyCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: DetachPolicyCommandInput;
+    constructor(input: DetachPolicyCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DetachPolicyCommandInput, DetachPolicyCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/DisableAWSServiceAccessCommand.d.ts

@@ -0,0 +1,90 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { DisableAWSServiceAccessRequest } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface DisableAWSServiceAccessCommandInput extends DisableAWSServiceAccessRequest {
+}
+export interface DisableAWSServiceAccessCommandOutput extends __MetadataBearer {
+}
+/**
+ * <p>Disables the integration of an AWS service (the service that is specified by
+ *                 <code>ServicePrincipal</code>) with AWS Organizations. When you disable integration, the
+ *             specified service no longer can create a <a href="http://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html">service-linked role</a> in
+ *                 <i>new</i> accounts in your organization. This means the service can't
+ *             perform operations on your behalf on any new accounts in your organization. The service
+ *             can still perform operations in older accounts until the service completes its clean-up
+ *             from AWS Organizations.</p>
+ *         <important>
+ *             <p>We <b>
+ *                   <i>strongly recommend</i>
+ *                </b> that
+ *                 you don't use this command to disable integration between AWS Organizations and the specified
+ *                 AWS service. Instead, use the console or commands that are provided by the
+ *                 specified service. This lets the trusted service perform any required initialization
+ *                 when enabling trusted access, such as creating any required resources and any
+ *                 required clean up of resources when disabling trusted access. </p>
+ *             <p>For information about how to disable trusted service access to your organization
+ *                 using the trusted service, see the <b>Learn more</b> link
+ *                 under the <b>Supports Trusted Access</b> column at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">AWS services that you can use with AWS Organizations</a>. on this page.</p>
+ *             <p>If you disable access by using this command, it causes the following actions to
+ *                 occur:</p>
+ *             <ul>
+ *                <li>
+ *                     <p>The service can no longer create a service-linked role in the accounts in
+ *                         your organization. This means that the service can't perform operations on
+ *                         your behalf on any new accounts in your organization. The service can still
+ *                         perform operations in older accounts until the service completes its
+ *                         clean-up from AWS Organizations. </p>
+ *                 </li>
+ *                <li>
+ *                     <p>The service can no longer perform tasks in the member accounts in the
+ *                         organization, unless those operations are explicitly permitted by the IAM
+ *                         policies that are attached to your roles. This includes any data aggregation
+ *                         from the member accounts to the management account, or to a delegated
+ *                         administrator account, where relevant.</p>
+ *                 </li>
+ *                <li>
+ *                     <p>Some services detect this and clean up any remaining data or resources
+ *                         related to the integration, while other services stop accessing the
+ *                         organization but leave any historical data and configuration in place to
+ *                         support a possible re-enabling of the integration.</p>
+ *                 </li>
+ *             </ul>
+ *             <p>Using the other service's console or commands to disable the integration ensures
+ *                 that the other service is aware that it can clean up any resources that are required
+ *                 only for the integration. How the service cleans up its resources in the
+ *                 organization's accounts depends on that service. For more information, see the
+ *                 documentation for the other AWS service. </p>
+ *         </important>
+ *         <p>After you perform the <code>DisableAWSServiceAccess</code> operation, the specified
+ *             service can no longer perform operations in your organization's accounts </p>
+ *         <p>For more information about integrating other services with AWS Organizations, including the
+ *             list of services that work with Organizations, see <a href="http://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating AWS Organizations with Other
+ *                 AWS Services</a> in the <i>AWS Organizations User Guide.</i>
+ *          </p>
+ *         <p>This operation can be called only from the organization's management account.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DisableAWSServiceAccessCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DisableAWSServiceAccessCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DisableAWSServiceAccessCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DisableAWSServiceAccessCommandInput} for command's `input` shape.
+ * @see {@link DisableAWSServiceAccessCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class DisableAWSServiceAccessCommand extends $Command<DisableAWSServiceAccessCommandInput, DisableAWSServiceAccessCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: DisableAWSServiceAccessCommandInput;
+    constructor(input: DisableAWSServiceAccessCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DisableAWSServiceAccessCommandInput, DisableAWSServiceAccessCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/DisablePolicyTypeCommand.d.ts

@@ -0,0 +1,45 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { DisablePolicyTypeRequest, DisablePolicyTypeResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface DisablePolicyTypeCommandInput extends DisablePolicyTypeRequest {
+}
+export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeResponse, __MetadataBearer {
+}
+/**
+ * <p>Disables an organizational policy type in a root. A policy of a certain type can be
+ *             attached to entities in a root only if that type is enabled in the root. After you
+ *             perform this operation, you no longer can attach policies of the specified type to that
+ *             root or to any organizational unit (OU) or account in that root. You can undo this by
+ *             using the <a>EnablePolicyType</a> operation.</p>
+ *         <p>This is an asynchronous request that AWS performs in the background. If you disable
+ *             a policy type for a root, it still appears enabled for the organization if <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">all features</a> are enabled for the organization. AWS recommends that you
+ *             first use <a>ListRoots</a> to see the status of policy types for a specified
+ *             root, and then use this operation.</p>
+ *         <p>This operation can be called only from the organization's management account.</p>
+ *         <p> To view the status of available policy types in the organization, use <a>DescribeOrganization</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DisablePolicyTypeCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DisablePolicyTypeCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DisablePolicyTypeCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DisablePolicyTypeCommandInput} for command's `input` shape.
+ * @see {@link DisablePolicyTypeCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class DisablePolicyTypeCommand extends $Command<DisablePolicyTypeCommandInput, DisablePolicyTypeCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: DisablePolicyTypeCommandInput;
+    constructor(input: DisablePolicyTypeCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<DisablePolicyTypeCommandInput, DisablePolicyTypeCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/EnableAWSServiceAccessCommand.d.ts

@@ -0,0 +1,53 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { EnableAWSServiceAccessRequest } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface EnableAWSServiceAccessCommandInput extends EnableAWSServiceAccessRequest {
+}
+export interface EnableAWSServiceAccessCommandOutput extends __MetadataBearer {
+}
+/**
+ * <p>Enables the integration of an AWS service (the service that is specified by
+ *                 <code>ServicePrincipal</code>) with AWS Organizations. When you enable integration, you allow
+ *             the specified service to create a <a href="http://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html">service-linked role</a> in
+ *             all the accounts in your organization. This allows the service to perform operations on
+ *             your behalf in your organization and its accounts.</p>
+ *         <important>
+ *             <p>We recommend that you enable integration between AWS Organizations and the specified AWS
+ *                 service by using the console or commands that are provided by the specified service.
+ *                 Doing so ensures that the service is aware that it can create the resources that are
+ *                 required for the integration. How the service creates those resources in the
+ *                 organization's accounts depends on that service. For more information, see the
+ *                 documentation for the other AWS service.</p>
+ *         </important>
+ *         <p>For more information about enabling services to integrate with AWS Organizations, see <a href="http://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating AWS Organizations with Other
+ *                 AWS Services</a> in the <i>AWS Organizations User Guide.</i>
+ *          </p>
+ *         <p>This operation can be called only from the organization's management account and only
+ *             if the organization has <a href="http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">enabled all
+ *                 features</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, EnableAWSServiceAccessCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, EnableAWSServiceAccessCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new EnableAWSServiceAccessCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link EnableAWSServiceAccessCommandInput} for command's `input` shape.
+ * @see {@link EnableAWSServiceAccessCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class EnableAWSServiceAccessCommand extends $Command<EnableAWSServiceAccessCommandInput, EnableAWSServiceAccessCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: EnableAWSServiceAccessCommandInput;
+    constructor(input: EnableAWSServiceAccessCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<EnableAWSServiceAccessCommandInput, EnableAWSServiceAccessCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/EnableAllFeaturesCommand.d.ts

@@ -0,0 +1,60 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { EnableAllFeaturesRequest, EnableAllFeaturesResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface EnableAllFeaturesCommandInput extends EnableAllFeaturesRequest {
+}
+export interface EnableAllFeaturesCommandOutput extends EnableAllFeaturesResponse, __MetadataBearer {
+}
+/**
+ * <p>Enables all features in an organization. This enables the use of organization policies
+ *             that can restrict the services and actions that can be called in each account. Until you
+ *             enable all features, you have access only to consolidated billing, and you can't use any
+ *             of the advanced account administration features that AWS Organizations supports. For more
+ *             information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling All Features in Your Organization</a> in the
+ *                 <i>AWS Organizations User Guide.</i>
+ *          </p>
+ *         <important>
+ *             <p>This operation is required only for organizations that were created explicitly
+ *                 with only the consolidated billing features enabled. Calling this operation sends a
+ *                 handshake to every invited account in the organization. The feature set change can
+ *                 be finalized and the additional features enabled only after all administrators in
+ *                 the invited accounts approve the change by accepting the handshake.</p>
+ *         </important>
+ *         <p>After you enable all features, you can separately enable or disable individual policy
+ *             types in a root using <a>EnablePolicyType</a> and <a>DisablePolicyType</a>. To see the status of policy types in a root, use
+ *                 <a>ListRoots</a>.</p>
+ *         <p>After all invited member accounts accept the handshake, you finalize the feature set
+ *             change by accepting the handshake that contains <code>"Action":
+ *                 "ENABLE_ALL_FEATURES"</code>. This completes the change.</p>
+ *         <p>After you enable all features in your organization, the management account in the
+ *             organization can apply policies on all member accounts. These policies can restrict what
+ *             users and even administrators in those accounts can do. The management account can apply
+ *             policies that prevent accounts from leaving the organization. Ensure that your account
+ *             administrators are aware of this.</p>
+ *         <p>This operation can be called only from the organization's management account.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, EnableAllFeaturesCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, EnableAllFeaturesCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new EnableAllFeaturesCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link EnableAllFeaturesCommandInput} for command's `input` shape.
+ * @see {@link EnableAllFeaturesCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class EnableAllFeaturesCommand extends $Command<EnableAllFeaturesCommandInput, EnableAllFeaturesCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: EnableAllFeaturesCommandInput;
+    constructor(input: EnableAllFeaturesCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<EnableAllFeaturesCommandInput, EnableAllFeaturesCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/EnablePolicyTypeCommand.d.ts

@@ -0,0 +1,45 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { EnablePolicyTypeRequest, EnablePolicyTypeResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface EnablePolicyTypeCommandInput extends EnablePolicyTypeRequest {
+}
+export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse, __MetadataBearer {
+}
+/**
+ * <p>Enables a policy type in a root. After you enable a policy type in a root, you can
+ *             attach policies of that type to the root, any organizational unit (OU), or account in
+ *             that root. You can undo this by using the <a>DisablePolicyType</a>
+ *             operation.</p>
+ *         <p>This is an asynchronous request that AWS performs in the background. AWS
+ *             recommends that you first use <a>ListRoots</a> to see the status of policy
+ *             types for a specified root, and then use this operation.</p>
+ *         <p>This operation can be called only from the organization's management account.</p>
+ *         <p>You can enable a policy type in a root only if that policy type is available in the
+ *             organization. To view the status of available policy types in the organization, use
+ *                 <a>DescribeOrganization</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, EnablePolicyTypeCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, EnablePolicyTypeCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new EnablePolicyTypeCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link EnablePolicyTypeCommandInput} for command's `input` shape.
+ * @see {@link EnablePolicyTypeCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class EnablePolicyTypeCommand extends $Command<EnablePolicyTypeCommandInput, EnablePolicyTypeCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: EnablePolicyTypeCommandInput;
+    constructor(input: EnablePolicyTypeCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<EnablePolicyTypeCommandInput, EnablePolicyTypeCommandOutput>;
+    private serialize;
+    private deserialize;
+}

package/dist-types/ts3.4/commands/InviteAccountToOrganizationCommand.d.ts

@@ -0,0 +1,60 @@
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
+import { InviteAccountToOrganizationRequest, InviteAccountToOrganizationResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+export interface InviteAccountToOrganizationCommandInput extends InviteAccountToOrganizationRequest {
+}
+export interface InviteAccountToOrganizationCommandOutput extends InviteAccountToOrganizationResponse, __MetadataBearer {
+}
+/**
+ * <p>Sends an invitation to another account to join your organization as a member account.
+ *             AWS Organizations sends email on your behalf to the email address that is associated with the
+ *             other account's owner. The invitation is implemented as a <a>Handshake</a>
+ *             whose details are in the response.</p>
+ *         <important>
+ *             <ul>
+ *                <li>
+ *                     <p>You can invite AWS accounts only from the same seller as the management
+ *                         account. For example, if your organization's management account was created
+ *                         by Amazon Internet Services Pvt. Ltd (AISPL), an AWS seller in India, you
+ *                         can invite only other AISPL accounts to your organization. You can't combine
+ *                         accounts from AISPL and AWS or from any other AWS seller. For more
+ *                         information, see <a href="http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/useconsolidatedbilliing-India.html">Consolidated
+ *                             Billing in India</a>.</p>
+ *                 </li>
+ *                <li>
+ *                     <p>If you receive an exception that indicates that you exceeded your account
+ *                         limits for the organization or that the operation failed because your
+ *                         organization is still initializing, wait one hour and then try again. If the
+ *                         error persists after an hour, contact <a href="https://console.aws.amazon.com/support/home#/">AWS Support</a>.</p>
+ *                 </li>
+ *             </ul>
+ *         </important>
+ *         <p>If the request includes tags, then the requester must have the
+ *                 <code>organizations:TagResource</code> permission.</p>
+ *         <p>This operation can be called only from the organization's management account.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, InviteAccountToOrganizationCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, InviteAccountToOrganizationCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new InviteAccountToOrganizationCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link InviteAccountToOrganizationCommandInput} for command's `input` shape.
+ * @see {@link InviteAccountToOrganizationCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export declare class InviteAccountToOrganizationCommand extends $Command<InviteAccountToOrganizationCommandInput, InviteAccountToOrganizationCommandOutput, OrganizationsClientResolvedConfig> {
+    readonly input: InviteAccountToOrganizationCommandInput;
+    constructor(input: InviteAccountToOrganizationCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: OrganizationsClientResolvedConfig, options?: __HttpHandlerOptions): Handler<InviteAccountToOrganizationCommandInput, InviteAccountToOrganizationCommandOutput>;
+    private serialize;
+    private deserialize;
+}