@aws-sdk/client-organizations 3.34.0 → 3.35.0

package/src/commands/DescribeOrganizationCommand.ts

@@ -0,0 +1,102 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { DescribeOrganizationResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+import {
+  deserializeAws_json1_1DescribeOrganizationCommand,
+  serializeAws_json1_1DescribeOrganizationCommand,
+} from "../protocols/Aws_json1_1";
+
+export interface DescribeOrganizationCommandInput {}
+export interface DescribeOrganizationCommandOutput extends DescribeOrganizationResponse, __MetadataBearer {}
+
+/**
+ * <p>Retrieves information about the organization that the user's account belongs
+ *             to.</p>
+ *         <p>This operation can be called from any account in the organization.</p>
+ *         <note>
+ *             <p>Even if a policy type is shown as available in the organization, you can disable
+ *                 it separately at the root level with <a>DisablePolicyType</a>. Use <a>ListRoots</a> to see the status of policy types for a specified
+ *                 root.</p>
+ *         </note>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DescribeOrganizationCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DescribeOrganizationCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DescribeOrganizationCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DescribeOrganizationCommandInput} for command's `input` shape.
+ * @see {@link DescribeOrganizationCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class DescribeOrganizationCommand extends $Command<
+  DescribeOrganizationCommandInput,
+  DescribeOrganizationCommandOutput,
+  OrganizationsClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: DescribeOrganizationCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: OrganizationsClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<DescribeOrganizationCommandInput, DescribeOrganizationCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "OrganizationsClient";
+    const commandName = "DescribeOrganizationCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: (input: any) => input,
+      outputFilterSensitiveLog: DescribeOrganizationResponse.filterSensitiveLog,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: DescribeOrganizationCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1DescribeOrganizationCommand(input, context);
+  }
+
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<DescribeOrganizationCommandOutput> {
+    return deserializeAws_json1_1DescribeOrganizationCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}

package/src/commands/DescribeOrganizationalUnitCommand.ts

@@ -0,0 +1,100 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { DescribeOrganizationalUnitRequest, DescribeOrganizationalUnitResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+import {
+  deserializeAws_json1_1DescribeOrganizationalUnitCommand,
+  serializeAws_json1_1DescribeOrganizationalUnitCommand,
+} from "../protocols/Aws_json1_1";
+
+export interface DescribeOrganizationalUnitCommandInput extends DescribeOrganizationalUnitRequest {}
+export interface DescribeOrganizationalUnitCommandOutput extends DescribeOrganizationalUnitResponse, __MetadataBearer {}
+
+/**
+ * <p>Retrieves information about an organizational unit (OU).</p>
+ *         <p>This operation can be called only from the organization's
+ * management account or by a member account that is a delegated administrator for an AWS service.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DescribeOrganizationalUnitCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DescribeOrganizationalUnitCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DescribeOrganizationalUnitCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DescribeOrganizationalUnitCommandInput} for command's `input` shape.
+ * @see {@link DescribeOrganizationalUnitCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class DescribeOrganizationalUnitCommand extends $Command<
+  DescribeOrganizationalUnitCommandInput,
+  DescribeOrganizationalUnitCommandOutput,
+  OrganizationsClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: DescribeOrganizationalUnitCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: OrganizationsClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<DescribeOrganizationalUnitCommandInput, DescribeOrganizationalUnitCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "OrganizationsClient";
+    const commandName = "DescribeOrganizationalUnitCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: DescribeOrganizationalUnitRequest.filterSensitiveLog,
+      outputFilterSensitiveLog: DescribeOrganizationalUnitResponse.filterSensitiveLog,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: DescribeOrganizationalUnitCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1DescribeOrganizationalUnitCommand(input, context);
+  }
+
+  private deserialize(
+    output: __HttpResponse,
+    context: __SerdeContext
+  ): Promise<DescribeOrganizationalUnitCommandOutput> {
+    return deserializeAws_json1_1DescribeOrganizationalUnitCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}

package/src/commands/DescribePolicyCommand.ts

@@ -0,0 +1,97 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { DescribePolicyRequest, DescribePolicyResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+import {
+  deserializeAws_json1_1DescribePolicyCommand,
+  serializeAws_json1_1DescribePolicyCommand,
+} from "../protocols/Aws_json1_1";
+
+export interface DescribePolicyCommandInput extends DescribePolicyRequest {}
+export interface DescribePolicyCommandOutput extends DescribePolicyResponse, __MetadataBearer {}
+
+/**
+ * <p>Retrieves information about a policy.</p>
+ *         <p>This operation can be called only from the organization's
+ * management account or by a member account that is a delegated administrator for an AWS service.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DescribePolicyCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DescribePolicyCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DescribePolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DescribePolicyCommandInput} for command's `input` shape.
+ * @see {@link DescribePolicyCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class DescribePolicyCommand extends $Command<
+  DescribePolicyCommandInput,
+  DescribePolicyCommandOutput,
+  OrganizationsClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: DescribePolicyCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: OrganizationsClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<DescribePolicyCommandInput, DescribePolicyCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "OrganizationsClient";
+    const commandName = "DescribePolicyCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: DescribePolicyRequest.filterSensitiveLog,
+      outputFilterSensitiveLog: DescribePolicyResponse.filterSensitiveLog,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: DescribePolicyCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1DescribePolicyCommand(input, context);
+  }
+
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<DescribePolicyCommandOutput> {
+    return deserializeAws_json1_1DescribePolicyCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}

package/src/commands/DetachPolicyCommand.ts

@@ -0,0 +1,109 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { DetachPolicyRequest } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+import {
+  deserializeAws_json1_1DetachPolicyCommand,
+  serializeAws_json1_1DetachPolicyCommand,
+} from "../protocols/Aws_json1_1";
+
+export interface DetachPolicyCommandInput extends DetachPolicyRequest {}
+export interface DetachPolicyCommandOutput extends __MetadataBearer {}
+
+/**
+ * <p>Detaches a policy from a target root, organizational unit (OU), or account.</p>
+ *         <important>
+ *             <p>If the policy being detached is a service control policy (SCP), the changes to
+ *                 permissions for AWS Identity and Access Management (IAM) users and roles in affected accounts are
+ *                 immediate.</p>
+ *         </important>
+ *         <p>Every root, OU, and account must have at least one SCP attached. If you want to
+ *             replace the default <code>FullAWSAccess</code> policy with an SCP that limits the
+ *             permissions that can be delegated, you must attach the replacement SCP before you can
+ *             remove the default SCP. This is the authorization strategy of an "<a href="https://docs.aws.amazon.com/organizations/latest/userguide/SCP_strategies.html#orgs_policies_allowlist">allow list</a>". If you instead attach a second SCP and
+ *             leave the <code>FullAWSAccess</code> SCP still attached, and specify <code>"Effect":
+ *                 "Deny"</code> in the second SCP to override the <code>"Effect": "Allow"</code> in
+ *             the <code>FullAWSAccess</code> policy (or any other attached SCP), you're using the
+ *             authorization strategy of a "<a href="https://docs.aws.amazon.com/organizations/latest/userguide/SCP_strategies.html#orgs_policies_denylist">deny list</a>".</p>
+ *         <p>This operation can be called only from the organization's management account.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DetachPolicyCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DetachPolicyCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DetachPolicyCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DetachPolicyCommandInput} for command's `input` shape.
+ * @see {@link DetachPolicyCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class DetachPolicyCommand extends $Command<
+  DetachPolicyCommandInput,
+  DetachPolicyCommandOutput,
+  OrganizationsClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: DetachPolicyCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: OrganizationsClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<DetachPolicyCommandInput, DetachPolicyCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "OrganizationsClient";
+    const commandName = "DetachPolicyCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: DetachPolicyRequest.filterSensitiveLog,
+      outputFilterSensitiveLog: (output: any) => output,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: DetachPolicyCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1DetachPolicyCommand(input, context);
+  }
+
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<DetachPolicyCommandOutput> {
+    return deserializeAws_json1_1DetachPolicyCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}

package/src/commands/DisableAWSServiceAccessCommand.ts

@@ -0,0 +1,150 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { DisableAWSServiceAccessRequest } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+import {
+  deserializeAws_json1_1DisableAWSServiceAccessCommand,
+  serializeAws_json1_1DisableAWSServiceAccessCommand,
+} from "../protocols/Aws_json1_1";
+
+export interface DisableAWSServiceAccessCommandInput extends DisableAWSServiceAccessRequest {}
+export interface DisableAWSServiceAccessCommandOutput extends __MetadataBearer {}
+
+/**
+ * <p>Disables the integration of an AWS service (the service that is specified by
+ *                 <code>ServicePrincipal</code>) with AWS Organizations. When you disable integration, the
+ *             specified service no longer can create a <a href="http://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html">service-linked role</a> in
+ *                 <i>new</i> accounts in your organization. This means the service can't
+ *             perform operations on your behalf on any new accounts in your organization. The service
+ *             can still perform operations in older accounts until the service completes its clean-up
+ *             from AWS Organizations.</p>
+ *         <important>
+ *             <p>We <b>
+ *                   <i>strongly recommend</i>
+ *                </b> that
+ *                 you don't use this command to disable integration between AWS Organizations and the specified
+ *                 AWS service. Instead, use the console or commands that are provided by the
+ *                 specified service. This lets the trusted service perform any required initialization
+ *                 when enabling trusted access, such as creating any required resources and any
+ *                 required clean up of resources when disabling trusted access. </p>
+ *             <p>For information about how to disable trusted service access to your organization
+ *                 using the trusted service, see the <b>Learn more</b> link
+ *                 under the <b>Supports Trusted Access</b> column at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">AWS services that you can use with AWS Organizations</a>. on this page.</p>
+ *             <p>If you disable access by using this command, it causes the following actions to
+ *                 occur:</p>
+ *             <ul>
+ *                <li>
+ *                     <p>The service can no longer create a service-linked role in the accounts in
+ *                         your organization. This means that the service can't perform operations on
+ *                         your behalf on any new accounts in your organization. The service can still
+ *                         perform operations in older accounts until the service completes its
+ *                         clean-up from AWS Organizations. </p>
+ *                 </li>
+ *                <li>
+ *                     <p>The service can no longer perform tasks in the member accounts in the
+ *                         organization, unless those operations are explicitly permitted by the IAM
+ *                         policies that are attached to your roles. This includes any data aggregation
+ *                         from the member accounts to the management account, or to a delegated
+ *                         administrator account, where relevant.</p>
+ *                 </li>
+ *                <li>
+ *                     <p>Some services detect this and clean up any remaining data or resources
+ *                         related to the integration, while other services stop accessing the
+ *                         organization but leave any historical data and configuration in place to
+ *                         support a possible re-enabling of the integration.</p>
+ *                 </li>
+ *             </ul>
+ *             <p>Using the other service's console or commands to disable the integration ensures
+ *                 that the other service is aware that it can clean up any resources that are required
+ *                 only for the integration. How the service cleans up its resources in the
+ *                 organization's accounts depends on that service. For more information, see the
+ *                 documentation for the other AWS service. </p>
+ *         </important>
+ *         <p>After you perform the <code>DisableAWSServiceAccess</code> operation, the specified
+ *             service can no longer perform operations in your organization's accounts </p>
+ *         <p>For more information about integrating other services with AWS Organizations, including the
+ *             list of services that work with Organizations, see <a href="http://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating AWS Organizations with Other
+ *                 AWS Services</a> in the <i>AWS Organizations User Guide.</i>
+ *          </p>
+ *         <p>This operation can be called only from the organization's management account.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DisableAWSServiceAccessCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DisableAWSServiceAccessCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DisableAWSServiceAccessCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DisableAWSServiceAccessCommandInput} for command's `input` shape.
+ * @see {@link DisableAWSServiceAccessCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class DisableAWSServiceAccessCommand extends $Command<
+  DisableAWSServiceAccessCommandInput,
+  DisableAWSServiceAccessCommandOutput,
+  OrganizationsClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: DisableAWSServiceAccessCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: OrganizationsClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<DisableAWSServiceAccessCommandInput, DisableAWSServiceAccessCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "OrganizationsClient";
+    const commandName = "DisableAWSServiceAccessCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: DisableAWSServiceAccessRequest.filterSensitiveLog,
+      outputFilterSensitiveLog: (output: any) => output,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: DisableAWSServiceAccessCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1DisableAWSServiceAccessCommand(input, context);
+  }
+
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<DisableAWSServiceAccessCommandOutput> {
+    return deserializeAws_json1_1DisableAWSServiceAccessCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}

package/src/commands/DisablePolicyTypeCommand.ts

@@ -0,0 +1,105 @@
+import { getSerdePlugin } from "@aws-sdk/middleware-serde";
+import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  FinalizeHandlerArguments,
+  Handler,
+  HandlerExecutionContext,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+  SerdeContext as __SerdeContext,
+} from "@aws-sdk/types";
+
+import { DisablePolicyTypeRequest, DisablePolicyTypeResponse } from "../models/models_0";
+import { OrganizationsClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../OrganizationsClient";
+import {
+  deserializeAws_json1_1DisablePolicyTypeCommand,
+  serializeAws_json1_1DisablePolicyTypeCommand,
+} from "../protocols/Aws_json1_1";
+
+export interface DisablePolicyTypeCommandInput extends DisablePolicyTypeRequest {}
+export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeResponse, __MetadataBearer {}
+
+/**
+ * <p>Disables an organizational policy type in a root. A policy of a certain type can be
+ *             attached to entities in a root only if that type is enabled in the root. After you
+ *             perform this operation, you no longer can attach policies of the specified type to that
+ *             root or to any organizational unit (OU) or account in that root. You can undo this by
+ *             using the <a>EnablePolicyType</a> operation.</p>
+ *         <p>This is an asynchronous request that AWS performs in the background. If you disable
+ *             a policy type for a root, it still appears enabled for the organization if <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">all features</a> are enabled for the organization. AWS recommends that you
+ *             first use <a>ListRoots</a> to see the status of policy types for a specified
+ *             root, and then use this operation.</p>
+ *         <p>This operation can be called only from the organization's management account.</p>
+ *         <p> To view the status of available policy types in the organization, use <a>DescribeOrganization</a>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { OrganizationsClient, DisablePolicyTypeCommand } from "@aws-sdk/client-organizations"; // ES Modules import
+ * // const { OrganizationsClient, DisablePolicyTypeCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
+ * const client = new OrganizationsClient(config);
+ * const command = new DisablePolicyTypeCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link DisablePolicyTypeCommandInput} for command's `input` shape.
+ * @see {@link DisablePolicyTypeCommandOutput} for command's `response` shape.
+ * @see {@link OrganizationsClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+export class DisablePolicyTypeCommand extends $Command<
+  DisablePolicyTypeCommandInput,
+  DisablePolicyTypeCommandOutput,
+  OrganizationsClientResolvedConfig
+> {
+  // Start section: command_properties
+  // End section: command_properties
+
+  constructor(readonly input: DisablePolicyTypeCommandInput) {
+    // Start section: command_constructor
+    super();
+    // End section: command_constructor
+  }
+
+  /**
+   * @internal
+   */
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: OrganizationsClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<DisablePolicyTypeCommandInput, DisablePolicyTypeCommandOutput> {
+    this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
+
+    const stack = clientStack.concat(this.middlewareStack);
+
+    const { logger } = configuration;
+    const clientName = "OrganizationsClient";
+    const commandName = "DisablePolicyTypeCommand";
+    const handlerExecutionContext: HandlerExecutionContext = {
+      logger,
+      clientName,
+      commandName,
+      inputFilterSensitiveLog: DisablePolicyTypeRequest.filterSensitiveLog,
+      outputFilterSensitiveLog: DisablePolicyTypeResponse.filterSensitiveLog,
+    };
+    const { requestHandler } = configuration;
+    return stack.resolve(
+      (request: FinalizeHandlerArguments<any>) =>
+        requestHandler.handle(request.request as __HttpRequest, options || {}),
+      handlerExecutionContext
+    );
+  }
+
+  private serialize(input: DisablePolicyTypeCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
+    return serializeAws_json1_1DisablePolicyTypeCommand(input, context);
+  }
+
+  private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<DisablePolicyTypeCommandOutput> {
+    return deserializeAws_json1_1DisablePolicyTypeCommand(output, context);
+  }
+
+  // Start section: command_body_extra
+  // End section: command_body_extra
+}