@aws-sdk/client-organizations 3.398.0 → 3.405.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -3
- package/dist-cjs/endpoint/ruleset.js +3 -3
- package/dist-es/endpoint/ruleset.js +3 -3
- package/dist-types/Organizations.d.ts +3 -3
- package/dist-types/OrganizationsClient.d.ts +3 -3
- package/dist-types/commands/AcceptHandshakeCommand.d.ts +8 -10
- package/dist-types/commands/AttachPolicyCommand.d.ts +22 -23
- package/dist-types/commands/CancelHandshakeCommand.d.ts +3 -5
- package/dist-types/commands/CloseAccountCommand.d.ts +24 -28
- package/dist-types/commands/CreateAccountCommand.d.ts +31 -33
- package/dist-types/commands/CreateGovCloudAccountCommand.d.ts +34 -40
- package/dist-types/commands/CreateOrganizationCommand.d.ts +20 -21
- package/dist-types/commands/CreateOrganizationalUnitCommand.d.ts +20 -22
- package/dist-types/commands/CreatePolicyCommand.d.ts +24 -26
- package/dist-types/commands/DeclineHandshakeCommand.d.ts +3 -5
- package/dist-types/commands/DeleteOrganizationCommand.d.ts +4 -6
- package/dist-types/commands/DeleteOrganizationalUnitCommand.d.ts +3 -5
- package/dist-types/commands/DeletePolicyCommand.d.ts +5 -6
- package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +18 -19
- package/dist-types/commands/DeregisterDelegatedAdministratorCommand.d.ts +18 -19
- package/dist-types/commands/DescribeAccountCommand.d.ts +3 -5
- package/dist-types/commands/DescribeCreateAccountStatusCommand.d.ts +3 -5
- package/dist-types/commands/DescribeEffectivePolicyCommand.d.ts +21 -23
- package/dist-types/commands/DescribeHandshakeCommand.d.ts +3 -5
- package/dist-types/commands/DescribeOrganizationCommand.d.ts +3 -5
- package/dist-types/commands/DescribeOrganizationalUnitCommand.d.ts +3 -5
- package/dist-types/commands/DescribePolicyCommand.d.ts +3 -5
- package/dist-types/commands/DescribeResourcePolicyCommand.d.ts +20 -21
- package/dist-types/commands/DetachPolicyCommand.d.ts +20 -20
- package/dist-types/commands/DisableAWSServiceAccessCommand.d.ts +20 -22
- package/dist-types/commands/DisablePolicyTypeCommand.d.ts +22 -23
- package/dist-types/commands/EnableAWSServiceAccessCommand.d.ts +21 -23
- package/dist-types/commands/EnableAllFeaturesCommand.d.ts +7 -9
- package/dist-types/commands/EnablePolicyTypeCommand.d.ts +21 -22
- package/dist-types/commands/InviteAccountToOrganizationCommand.d.ts +24 -25
- package/dist-types/commands/LeaveOrganizationCommand.d.ts +28 -26
- package/dist-types/commands/ListAWSServiceAccessForOrganizationCommand.d.ts +20 -22
- package/dist-types/commands/ListAccountsCommand.d.ts +3 -5
- package/dist-types/commands/ListAccountsForParentCommand.d.ts +3 -5
- package/dist-types/commands/ListChildrenCommand.d.ts +3 -5
- package/dist-types/commands/ListCreateAccountStatusCommand.d.ts +3 -5
- package/dist-types/commands/ListDelegatedAdministratorsCommand.d.ts +18 -19
- package/dist-types/commands/ListDelegatedServicesForAccountCommand.d.ts +18 -19
- package/dist-types/commands/ListHandshakesForAccountCommand.d.ts +3 -5
- package/dist-types/commands/ListHandshakesForOrganizationCommand.d.ts +3 -5
- package/dist-types/commands/ListOrganizationalUnitsForParentCommand.d.ts +3 -5
- package/dist-types/commands/ListParentsCommand.d.ts +3 -5
- package/dist-types/commands/ListPoliciesCommand.d.ts +3 -5
- package/dist-types/commands/ListPoliciesForTargetCommand.d.ts +3 -5
- package/dist-types/commands/ListRootsCommand.d.ts +3 -5
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +3 -5
- package/dist-types/commands/ListTargetsForPolicyCommand.d.ts +3 -5
- package/dist-types/commands/MoveAccountCommand.d.ts +3 -5
- package/dist-types/commands/PutResourcePolicyCommand.d.ts +18 -19
- package/dist-types/commands/RegisterDelegatedAdministratorCommand.d.ts +18 -19
- package/dist-types/commands/RemoveAccountFromOrganizationCommand.d.ts +21 -29
- package/dist-types/commands/TagResourceCommand.d.ts +20 -20
- package/dist-types/commands/UntagResourceCommand.d.ts +20 -20
- package/dist-types/commands/UpdateOrganizationalUnitCommand.d.ts +3 -5
- package/dist-types/commands/UpdatePolicyCommand.d.ts +22 -23
- package/dist-types/index.d.ts +3 -3
- package/dist-types/models/models_0.d.ts +63 -62
- package/package.json +7 -7
package/README.md
CHANGED
|
@@ -75,9 +75,9 @@ Amazon Web Services account and delivers log files to an Amazon S3 bucket. By us
|
|
|
75
75
|
by CloudTrail, you can determine which requests the Organizations service received, who made the
|
|
76
76
|
request and when, and so on. For more about Organizations and its support for CloudTrail, see
|
|
77
77
|
<a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_incident-response.html#orgs_cloudtrail-integration">Logging
|
|
78
|
-
Organizations
|
|
79
|
-
To learn more about CloudTrail, including how to turn it
|
|
80
|
-
<a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html">CloudTrail User Guide</a>.</p>
|
|
78
|
+
Organizations API calls with CloudTrail</a> in the
|
|
79
|
+
<i>Organizations User Guide</i>. To learn more about CloudTrail, including how to turn it
|
|
80
|
+
on and find your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html">CloudTrail User Guide</a>.</p>
|
|
81
81
|
|
|
82
82
|
## Installing
|
|
83
83
|
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.ruleSet = void 0;
|
|
4
|
-
const
|
|
5
|
-
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = { [
|
|
6
|
-
const _data = { version: "1.0", parameters: { Region:
|
|
4
|
+
const A = "required", B = "fn", C = "argv", D = "ref", E = "authSchemes", F = "signingName", G = "signingRegion";
|
|
5
|
+
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = "sigv4", h = "organizations", i = { [A]: false, "type": "String" }, j = { [A]: true, "default": false, "type": "Boolean" }, k = { [D]: "Endpoint" }, l = { [B]: "booleanEquals", [C]: [{ [D]: "UseFIPS" }, true] }, m = { [B]: "booleanEquals", [C]: [{ [D]: "UseDualStack" }, true] }, n = {}, o = { [B]: f, [C]: [{ [B]: "getAttr", [C]: [{ [D]: e }, "name"] }, "aws"] }, p = { [B]: "getAttr", [C]: [{ [D]: e }, "name"] }, q = { [B]: "booleanEquals", [C]: [{ [D]: "UseFIPS" }, false] }, r = { [B]: "booleanEquals", [C]: [{ [D]: "UseDualStack" }, false] }, s = { [E]: [{ "name": g, [F]: h, [G]: "us-east-1" }] }, t = { [B]: f, [C]: [p, "aws-us-gov"] }, u = { "url": "https://organizations.us-gov-west-1.amazonaws.com", "properties": { [E]: [{ "name": g, [F]: h, [G]: "us-gov-west-1" }] }, "headers": {} }, v = { [B]: "booleanEquals", [C]: [true, { [B]: "getAttr", [C]: [{ [D]: e }, "supportsFIPS"] }] }, w = { [B]: "booleanEquals", [C]: [true, { [B]: "getAttr", [C]: [{ [D]: e }, "supportsDualStack"] }] }, x = [l], y = [m], z = [{ [D]: "Region" }];
|
|
6
|
+
const _data = { version: "1.0", parameters: { Region: i, UseDualStack: j, UseFIPS: j, Endpoint: i }, rules: [{ conditions: [{ [B]: a, [C]: [k] }], type: b, rules: [{ conditions: x, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { conditions: y, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: k, properties: n, headers: n }, type: d }] }, { conditions: [{ [B]: a, [C]: z }], type: b, rules: [{ conditions: [{ [B]: "aws.partition", [C]: z, assign: e }], type: b, rules: [{ conditions: [o, q, r], endpoint: { url: "https://organizations.us-east-1.amazonaws.com", properties: s, headers: n }, type: d }, { conditions: [o, l, r], endpoint: { url: "https://organizations-fips.us-east-1.amazonaws.com", properties: s, headers: n }, type: d }, { conditions: [{ [B]: f, [C]: [p, "aws-cn"] }, q, r], endpoint: { url: "https://organizations.cn-northwest-1.amazonaws.com.cn", properties: { [E]: [{ name: g, [F]: h, [G]: "cn-northwest-1" }] }, headers: n }, type: d }, { conditions: [t, q, r], endpoint: u, type: d }, { conditions: [t, l, r], endpoint: u, type: d }, { conditions: [l, m], type: b, rules: [{ conditions: [v, w], type: b, rules: [{ endpoint: { url: "https://organizations-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: n, headers: n }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: x, type: b, rules: [{ conditions: [v], type: b, rules: [{ endpoint: { url: "https://organizations-fips.{Region}.{PartitionResult#dnsSuffix}", properties: n, headers: n }, type: d }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: y, type: b, rules: [{ conditions: [w], type: b, rules: [{ endpoint: { url: "https://organizations.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: n, headers: n }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://organizations.{Region}.{PartitionResult#dnsSuffix}", properties: n, headers: n }, type: d }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] };
|
|
7
7
|
exports.ruleSet = _data;
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
const
|
|
2
|
-
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = { [
|
|
3
|
-
const _data = { version: "1.0", parameters: { Region:
|
|
1
|
+
const A = "required", B = "fn", C = "argv", D = "ref", E = "authSchemes", F = "signingName", G = "signingRegion";
|
|
2
|
+
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = "sigv4", h = "organizations", i = { [A]: false, "type": "String" }, j = { [A]: true, "default": false, "type": "Boolean" }, k = { [D]: "Endpoint" }, l = { [B]: "booleanEquals", [C]: [{ [D]: "UseFIPS" }, true] }, m = { [B]: "booleanEquals", [C]: [{ [D]: "UseDualStack" }, true] }, n = {}, o = { [B]: f, [C]: [{ [B]: "getAttr", [C]: [{ [D]: e }, "name"] }, "aws"] }, p = { [B]: "getAttr", [C]: [{ [D]: e }, "name"] }, q = { [B]: "booleanEquals", [C]: [{ [D]: "UseFIPS" }, false] }, r = { [B]: "booleanEquals", [C]: [{ [D]: "UseDualStack" }, false] }, s = { [E]: [{ "name": g, [F]: h, [G]: "us-east-1" }] }, t = { [B]: f, [C]: [p, "aws-us-gov"] }, u = { "url": "https://organizations.us-gov-west-1.amazonaws.com", "properties": { [E]: [{ "name": g, [F]: h, [G]: "us-gov-west-1" }] }, "headers": {} }, v = { [B]: "booleanEquals", [C]: [true, { [B]: "getAttr", [C]: [{ [D]: e }, "supportsFIPS"] }] }, w = { [B]: "booleanEquals", [C]: [true, { [B]: "getAttr", [C]: [{ [D]: e }, "supportsDualStack"] }] }, x = [l], y = [m], z = [{ [D]: "Region" }];
|
|
3
|
+
const _data = { version: "1.0", parameters: { Region: i, UseDualStack: j, UseFIPS: j, Endpoint: i }, rules: [{ conditions: [{ [B]: a, [C]: [k] }], type: b, rules: [{ conditions: x, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { conditions: y, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: k, properties: n, headers: n }, type: d }] }, { conditions: [{ [B]: a, [C]: z }], type: b, rules: [{ conditions: [{ [B]: "aws.partition", [C]: z, assign: e }], type: b, rules: [{ conditions: [o, q, r], endpoint: { url: "https://organizations.us-east-1.amazonaws.com", properties: s, headers: n }, type: d }, { conditions: [o, l, r], endpoint: { url: "https://organizations-fips.us-east-1.amazonaws.com", properties: s, headers: n }, type: d }, { conditions: [{ [B]: f, [C]: [p, "aws-cn"] }, q, r], endpoint: { url: "https://organizations.cn-northwest-1.amazonaws.com.cn", properties: { [E]: [{ name: g, [F]: h, [G]: "cn-northwest-1" }] }, headers: n }, type: d }, { conditions: [t, q, r], endpoint: u, type: d }, { conditions: [t, l, r], endpoint: u, type: d }, { conditions: [l, m], type: b, rules: [{ conditions: [v, w], type: b, rules: [{ endpoint: { url: "https://organizations-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: n, headers: n }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: x, type: b, rules: [{ conditions: [v], type: b, rules: [{ endpoint: { url: "https://organizations-fips.{Region}.{PartitionResult#dnsSuffix}", properties: n, headers: n }, type: d }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: y, type: b, rules: [{ conditions: [w], type: b, rules: [{ endpoint: { url: "https://organizations.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: n, headers: n }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://organizations.{Region}.{PartitionResult#dnsSuffix}", properties: n, headers: n }, type: d }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] };
|
|
4
4
|
export const ruleSet = _data;
|
|
@@ -458,9 +458,9 @@ export interface Organizations {
|
|
|
458
458
|
* by CloudTrail, you can determine which requests the Organizations service received, who made the
|
|
459
459
|
* request and when, and so on. For more about Organizations and its support for CloudTrail, see
|
|
460
460
|
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_incident-response.html#orgs_cloudtrail-integration">Logging
|
|
461
|
-
* Organizations
|
|
462
|
-
* To learn more about CloudTrail, including how to turn it
|
|
463
|
-
*
|
|
461
|
+
* Organizations API calls with CloudTrail</a> in the
|
|
462
|
+
* <i>Organizations User Guide</i>. To learn more about CloudTrail, including how to turn it
|
|
463
|
+
* on and find your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html">CloudTrail User Guide</a>.</p>
|
|
464
464
|
*/
|
|
465
465
|
export declare class Organizations extends OrganizationsClient implements Organizations {
|
|
466
466
|
}
|
|
@@ -274,9 +274,9 @@ export interface OrganizationsClientResolvedConfig extends OrganizationsClientRe
|
|
|
274
274
|
* by CloudTrail, you can determine which requests the Organizations service received, who made the
|
|
275
275
|
* request and when, and so on. For more about Organizations and its support for CloudTrail, see
|
|
276
276
|
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_incident-response.html#orgs_cloudtrail-integration">Logging
|
|
277
|
-
* Organizations
|
|
278
|
-
* To learn more about CloudTrail, including how to turn it
|
|
279
|
-
*
|
|
277
|
+
* Organizations API calls with CloudTrail</a> in the
|
|
278
|
+
* <i>Organizations User Guide</i>. To learn more about CloudTrail, including how to turn it
|
|
279
|
+
* on and find your log files, see the <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html">CloudTrail User Guide</a>.</p>
|
|
280
280
|
*/
|
|
281
281
|
export declare class OrganizationsClient extends __Client<__HttpHandlerOptions, ServiceInputTypes, ServiceOutputTypes, OrganizationsClientResolvedConfig> {
|
|
282
282
|
/**
|
|
@@ -37,7 +37,7 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
|
|
|
37
37
|
* features in the organization, the user must also have the
|
|
38
38
|
* <code>iam:CreateServiceLinkedRole</code> permission so that Organizations can
|
|
39
39
|
* create the required service-linked role named <code>AWSServiceRoleForOrganizations</code>. For
|
|
40
|
-
* more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integration_services.html#
|
|
40
|
+
* more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integration_services.html#orgs_integrate_services-using_slrs">Organizations and service-linked roles</a> in the
|
|
41
41
|
* <i>Organizations User Guide</i>.</p>
|
|
42
42
|
* </li>
|
|
43
43
|
* <li>
|
|
@@ -46,10 +46,9 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
|
|
|
46
46
|
* handshake: only a principal from the management account.</p>
|
|
47
47
|
* <p>For more information about invitations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_invites.html">Inviting an
|
|
48
48
|
* Amazon Web Services account to join your organization</a> in the
|
|
49
|
-
* <i>Organizations User Guide
|
|
49
|
+
* <i>Organizations User Guide</i>. For more information about requests to
|
|
50
50
|
* enable all features in the organization, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling all features in your organization</a> in
|
|
51
|
-
* the <i>Organizations User Guide
|
|
52
|
-
* </p>
|
|
51
|
+
* the <i>Organizations User Guide</i>.</p>
|
|
53
52
|
* </li>
|
|
54
53
|
* </ul>
|
|
55
54
|
* <p>After you accept a handshake, it continues to appear in the results of relevant APIs
|
|
@@ -107,8 +106,7 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
|
|
|
107
106
|
* <p>You don't have permissions to perform the requested operation. The user or role that
|
|
108
107
|
* is making the request must have at least one IAM permissions policy attached that
|
|
109
108
|
* grants the required permissions. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html">Access Management</a> in the
|
|
110
|
-
* <i>IAM User Guide
|
|
111
|
-
* </p>
|
|
109
|
+
* <i>IAM User Guide</i>.</p>
|
|
112
110
|
*
|
|
113
111
|
* @throws {@link AccessDeniedForDependencyException} (client fault)
|
|
114
112
|
* <p>The operation that you attempted requires you to have the
|
|
@@ -143,7 +141,8 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
|
|
|
143
141
|
* <important>
|
|
144
142
|
* <p>If you get this exception immediately after creating the organization,
|
|
145
143
|
* wait one hour and try again. If after an hour it continues to fail with this
|
|
146
|
-
* error, contact <a href="https://
|
|
144
|
+
* error, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services
|
|
145
|
+
* Support</a>.</p>
|
|
147
146
|
* </important>
|
|
148
147
|
* </li>
|
|
149
148
|
* <li>
|
|
@@ -306,9 +305,8 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
|
|
|
306
305
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
307
306
|
* <p>You have sent too many requests in too short a period of time. The quota helps protect
|
|
308
307
|
* against denial-of-service attacks. Try again later.</p>
|
|
309
|
-
* <p>For information about quotas that affect Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html">Quotas for Organizations</a>in the
|
|
310
|
-
* <i>Organizations User Guide
|
|
311
|
-
* </p>
|
|
308
|
+
* <p>For information about quotas that affect Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html">Quotas for Organizations</a> in the
|
|
309
|
+
* <i>Organizations User Guide</i>.</p>
|
|
312
310
|
*
|
|
313
311
|
* @throws {@link OrganizationsServiceException}
|
|
314
312
|
* <p>Base exception class for all service exceptions from Organizations service.</p>
|
|
@@ -48,7 +48,8 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {
|
|
|
48
48
|
* </p>
|
|
49
49
|
* </li>
|
|
50
50
|
* </ul>
|
|
51
|
-
* <p>This operation can be called only from the organization's
|
|
51
|
+
* <p>This operation can be called only from the organization's
|
|
52
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
52
53
|
* @example
|
|
53
54
|
* Use a bare-bones client and the command you need to make an API call.
|
|
54
55
|
* ```javascript
|
|
@@ -75,8 +76,7 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {
|
|
|
75
76
|
* <p>You don't have permissions to perform the requested operation. The user or role that
|
|
76
77
|
* is making the request must have at least one IAM permissions policy attached that
|
|
77
78
|
* grants the required permissions. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html">Access Management</a> in the
|
|
78
|
-
* <i>IAM User Guide
|
|
79
|
-
* </p>
|
|
79
|
+
* <i>IAM User Guide</i>.</p>
|
|
80
80
|
*
|
|
81
81
|
* @throws {@link AWSOrganizationsNotInUseException} (client fault)
|
|
82
82
|
* <p>Your account isn't a member of an organization. To make this request, you must use the
|
|
@@ -107,19 +107,20 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {
|
|
|
107
107
|
* account from the organization that doesn't yet have enough information to exist
|
|
108
108
|
* as a standalone account. This account requires you to first complete phone
|
|
109
109
|
* verification. Follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#orgs_manage_accounts_remove-from-master">Removing a member account from your organization</a> in the
|
|
110
|
-
* <i>Organizations User Guide
|
|
111
|
-
* </p>
|
|
110
|
+
* <i>Organizations User Guide</i>.</p>
|
|
112
111
|
* </li>
|
|
113
112
|
* <li>
|
|
114
113
|
* <p>ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of
|
|
115
114
|
* accounts that you can create in one day.</p>
|
|
116
115
|
* </li>
|
|
117
116
|
* <li>
|
|
118
|
-
* <p>ACCOUNT_CREATION_NOT_COMPLETE: Your account setup isn't complete or your
|
|
117
|
+
* <p>ACCOUNT_CREATION_NOT_COMPLETE: Your account setup isn't complete or your
|
|
118
|
+
* account isn't fully active. You must complete the account setup before you
|
|
119
|
+
* create an organization.</p>
|
|
119
120
|
* </li>
|
|
120
121
|
* <li>
|
|
121
122
|
* <p>ACCOUNT_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the limit on the number
|
|
122
|
-
* of accounts in an organization. If you need more accounts, contact <a href="https://
|
|
123
|
+
* of accounts in an organization. If you need more accounts, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a> to
|
|
123
124
|
* request an increase in your limit. </p>
|
|
124
125
|
* <p>Or the number of invitations that you tried to send would cause you to exceed
|
|
125
126
|
* the limit of accounts in your organization. Send fewer invitations or contact
|
|
@@ -130,11 +131,14 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {
|
|
|
130
131
|
* <important>
|
|
131
132
|
* <p>If you get this exception when running a command immediately after
|
|
132
133
|
* creating the organization, wait one hour and try again. After an hour, if
|
|
133
|
-
* the command continues to fail with this error, contact <a href="https://
|
|
134
|
-
* Support</a>.</p>
|
|
134
|
+
* the command continues to fail with this error, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
135
135
|
* </important>
|
|
136
136
|
* </li>
|
|
137
137
|
* <li>
|
|
138
|
+
* <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
|
|
139
|
+
* register a suspended account as a delegated administrator.</p>
|
|
140
|
+
* </li>
|
|
141
|
+
* <li>
|
|
138
142
|
* <p>CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR: You attempted to register
|
|
139
143
|
* the management account of the organization as a delegated administrator for an
|
|
140
144
|
* Amazon Web Services service integrated with Organizations. You can designate only a member account as a
|
|
@@ -209,15 +213,13 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {
|
|
|
209
213
|
* management account must have an associated account in the Amazon Web Services GovCloud
|
|
210
214
|
* (US-West) Region. For more information, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html">Organizations</a>
|
|
211
215
|
* in the
|
|
212
|
-
* <i>Amazon Web Services GovCloud User Guide
|
|
213
|
-
* </p>
|
|
216
|
+
* <i>Amazon Web Services GovCloud User Guide</i>.</p>
|
|
214
217
|
* </li>
|
|
215
218
|
* <li>
|
|
216
219
|
* <p>MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To create an organization with
|
|
217
220
|
* this management account, you first must associate a valid payment instrument,
|
|
218
|
-
* such as a credit card, with the account.
|
|
219
|
-
*
|
|
220
|
-
* </p>
|
|
221
|
+
* such as a credit card, with the account. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_account-before-remove.html">Considerations before removing an account from an organization</a> in
|
|
222
|
+
* the <i>Organizations User Guide</i>.</p>
|
|
221
223
|
* </li>
|
|
222
224
|
* <li>
|
|
223
225
|
* <p>MAX_DELEGATED_ADMINISTRATORS_FOR_SERVICE_LIMIT_EXCEEDED: You attempted to
|
|
@@ -236,9 +238,8 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {
|
|
|
236
238
|
* <li>
|
|
237
239
|
* <p>MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To complete this operation with
|
|
238
240
|
* this member account, you first must associate a valid payment instrument, such
|
|
239
|
-
* as a credit card, with the account.
|
|
240
|
-
*
|
|
241
|
-
* </p>
|
|
241
|
+
* as a credit card, with the account. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_account-before-remove.html">Considerations before removing an account from an organization</a> in
|
|
242
|
+
* the <i>Organizations User Guide</i>.</p>
|
|
242
243
|
* </li>
|
|
243
244
|
* <li>
|
|
244
245
|
* <p>MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to detach a policy
|
|
@@ -400,9 +401,8 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {
|
|
|
400
401
|
* @throws {@link PolicyTypeNotEnabledException} (client fault)
|
|
401
402
|
* <p>The specified policy type isn't currently enabled in this root. You can't attach
|
|
402
403
|
* policies of the specified type to entities in a root until you enable that type in the
|
|
403
|
-
* root. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling
|
|
404
|
-
* in
|
|
405
|
-
* </p>
|
|
404
|
+
* root. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling all features
|
|
405
|
+
* in your organization</a> in the <i>Organizations User Guide</i>.</p>
|
|
406
406
|
*
|
|
407
407
|
* @throws {@link ServiceException} (server fault)
|
|
408
408
|
* <p>Organizations can't complete your request because of an internal service error. Try again
|
|
@@ -415,9 +415,8 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {
|
|
|
415
415
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
416
416
|
* <p>You have sent too many requests in too short a period of time. The quota helps protect
|
|
417
417
|
* against denial-of-service attacks. Try again later.</p>
|
|
418
|
-
* <p>For information about quotas that affect Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html">Quotas for Organizations</a>in the
|
|
419
|
-
* <i>Organizations User Guide
|
|
420
|
-
* </p>
|
|
418
|
+
* <p>For information about quotas that affect Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html">Quotas for Organizations</a> in the
|
|
419
|
+
* <i>Organizations User Guide</i>.</p>
|
|
421
420
|
*
|
|
422
421
|
* @throws {@link UnsupportedAPIEndpointException} (client fault)
|
|
423
422
|
* <p>This action isn't available in the current Amazon Web Services Region.</p>
|
|
@@ -82,8 +82,7 @@ export interface CancelHandshakeCommandOutput extends CancelHandshakeResponse, _
|
|
|
82
82
|
* <p>You don't have permissions to perform the requested operation. The user or role that
|
|
83
83
|
* is making the request must have at least one IAM permissions policy attached that
|
|
84
84
|
* grants the required permissions. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html">Access Management</a> in the
|
|
85
|
-
* <i>IAM User Guide
|
|
86
|
-
* </p>
|
|
85
|
+
* <i>IAM User Guide</i>.</p>
|
|
87
86
|
*
|
|
88
87
|
* @throws {@link ConcurrentModificationException} (client fault)
|
|
89
88
|
* <p>The target of the operation is currently being modified by a different request. Try
|
|
@@ -212,9 +211,8 @@ export interface CancelHandshakeCommandOutput extends CancelHandshakeResponse, _
|
|
|
212
211
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
213
212
|
* <p>You have sent too many requests in too short a period of time. The quota helps protect
|
|
214
213
|
* against denial-of-service attacks. Try again later.</p>
|
|
215
|
-
* <p>For information about quotas that affect Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html">Quotas for Organizations</a>in the
|
|
216
|
-
* <i>Organizations User Guide
|
|
217
|
-
* </p>
|
|
214
|
+
* <p>For information about quotas that affect Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html">Quotas for Organizations</a> in the
|
|
215
|
+
* <i>Organizations User Guide</i>.</p>
|
|
218
216
|
*
|
|
219
217
|
* @throws {@link OrganizationsServiceException}
|
|
220
218
|
* <p>Base exception class for all service exceptions from Organizations service.</p>
|
|
@@ -44,8 +44,7 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
|
|
|
44
44
|
* <p>Check the CloudTrail log for the <code>CloseAccountResult</code> event that gets
|
|
45
45
|
* published after the account closes successfully. For information on using CloudTrail
|
|
46
46
|
* with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_security_incident-response.html#orgs_cloudtrail-integration">Logging and monitoring in Organizations</a> in the
|
|
47
|
-
* <i>Organizations User Guide
|
|
48
|
-
* </p>
|
|
47
|
+
* <i>Organizations User Guide</i>.</p>
|
|
49
48
|
* </li>
|
|
50
49
|
* </ul>
|
|
51
50
|
* <note>
|
|
@@ -53,10 +52,11 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
|
|
|
53
52
|
* <li>
|
|
54
53
|
* <p>You can close only 10% of member accounts, between 10 and 200, within a
|
|
55
54
|
* rolling 30 day period. This quota is not bound by a calendar month, but
|
|
56
|
-
* starts when you close an account
|
|
57
|
-
*
|
|
58
|
-
*
|
|
59
|
-
*
|
|
55
|
+
* starts when you close an account. After you reach this limit, you can close
|
|
56
|
+
* additional accounts. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html">Closing a member
|
|
57
|
+
* account in your organization</a> in the
|
|
58
|
+
* <i>Organizations User Guide</i>.
|
|
59
|
+
* </p>
|
|
60
60
|
* </li>
|
|
61
61
|
* <li>
|
|
62
62
|
* <p>To reinstate a closed account, contact Amazon Web Services Support within the 90-day
|
|
@@ -71,9 +71,6 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
|
|
|
71
71
|
* </li>
|
|
72
72
|
* </ul>
|
|
73
73
|
* </note>
|
|
74
|
-
* <p>For more information about closing accounts, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html">Closing an
|
|
75
|
-
* Amazon Web Services account</a> in the <i>Organizations User Guide.</i>
|
|
76
|
-
* </p>
|
|
77
74
|
* @example
|
|
78
75
|
* Use a bare-bones client and the command you need to make an API call.
|
|
79
76
|
* ```javascript
|
|
@@ -99,8 +96,7 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
|
|
|
99
96
|
* <p>You don't have permissions to perform the requested operation. The user or role that
|
|
100
97
|
* is making the request must have at least one IAM permissions policy attached that
|
|
101
98
|
* grants the required permissions. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html">Access Management</a> in the
|
|
102
|
-
* <i>IAM User Guide
|
|
103
|
-
* </p>
|
|
99
|
+
* <i>IAM User Guide</i>.</p>
|
|
104
100
|
*
|
|
105
101
|
* @throws {@link AccountAlreadyClosedException} (client fault)
|
|
106
102
|
* <p>You attempted to close an account that is already closed.</p>
|
|
@@ -143,19 +139,20 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
|
|
|
143
139
|
* account from the organization that doesn't yet have enough information to exist
|
|
144
140
|
* as a standalone account. This account requires you to first complete phone
|
|
145
141
|
* verification. Follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#orgs_manage_accounts_remove-from-master">Removing a member account from your organization</a> in the
|
|
146
|
-
* <i>Organizations User Guide
|
|
147
|
-
* </p>
|
|
142
|
+
* <i>Organizations User Guide</i>.</p>
|
|
148
143
|
* </li>
|
|
149
144
|
* <li>
|
|
150
145
|
* <p>ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of
|
|
151
146
|
* accounts that you can create in one day.</p>
|
|
152
147
|
* </li>
|
|
153
148
|
* <li>
|
|
154
|
-
* <p>ACCOUNT_CREATION_NOT_COMPLETE: Your account setup isn't complete or your
|
|
149
|
+
* <p>ACCOUNT_CREATION_NOT_COMPLETE: Your account setup isn't complete or your
|
|
150
|
+
* account isn't fully active. You must complete the account setup before you
|
|
151
|
+
* create an organization.</p>
|
|
155
152
|
* </li>
|
|
156
153
|
* <li>
|
|
157
154
|
* <p>ACCOUNT_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the limit on the number
|
|
158
|
-
* of accounts in an organization. If you need more accounts, contact <a href="https://
|
|
155
|
+
* of accounts in an organization. If you need more accounts, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a> to
|
|
159
156
|
* request an increase in your limit. </p>
|
|
160
157
|
* <p>Or the number of invitations that you tried to send would cause you to exceed
|
|
161
158
|
* the limit of accounts in your organization. Send fewer invitations or contact
|
|
@@ -166,11 +163,14 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
|
|
|
166
163
|
* <important>
|
|
167
164
|
* <p>If you get this exception when running a command immediately after
|
|
168
165
|
* creating the organization, wait one hour and try again. After an hour, if
|
|
169
|
-
* the command continues to fail with this error, contact <a href="https://
|
|
170
|
-
* Support</a>.</p>
|
|
166
|
+
* the command continues to fail with this error, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
171
167
|
* </important>
|
|
172
168
|
* </li>
|
|
173
169
|
* <li>
|
|
170
|
+
* <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
|
|
171
|
+
* register a suspended account as a delegated administrator.</p>
|
|
172
|
+
* </li>
|
|
173
|
+
* <li>
|
|
174
174
|
* <p>CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR: You attempted to register
|
|
175
175
|
* the management account of the organization as a delegated administrator for an
|
|
176
176
|
* Amazon Web Services service integrated with Organizations. You can designate only a member account as a
|
|
@@ -245,15 +245,13 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
|
|
|
245
245
|
* management account must have an associated account in the Amazon Web Services GovCloud
|
|
246
246
|
* (US-West) Region. For more information, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html">Organizations</a>
|
|
247
247
|
* in the
|
|
248
|
-
* <i>Amazon Web Services GovCloud User Guide
|
|
249
|
-
* </p>
|
|
248
|
+
* <i>Amazon Web Services GovCloud User Guide</i>.</p>
|
|
250
249
|
* </li>
|
|
251
250
|
* <li>
|
|
252
251
|
* <p>MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To create an organization with
|
|
253
252
|
* this management account, you first must associate a valid payment instrument,
|
|
254
|
-
* such as a credit card, with the account.
|
|
255
|
-
*
|
|
256
|
-
* </p>
|
|
253
|
+
* such as a credit card, with the account. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_account-before-remove.html">Considerations before removing an account from an organization</a> in
|
|
254
|
+
* the <i>Organizations User Guide</i>.</p>
|
|
257
255
|
* </li>
|
|
258
256
|
* <li>
|
|
259
257
|
* <p>MAX_DELEGATED_ADMINISTRATORS_FOR_SERVICE_LIMIT_EXCEEDED: You attempted to
|
|
@@ -272,9 +270,8 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
|
|
|
272
270
|
* <li>
|
|
273
271
|
* <p>MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To complete this operation with
|
|
274
272
|
* this member account, you first must associate a valid payment instrument, such
|
|
275
|
-
* as a credit card, with the account.
|
|
276
|
-
*
|
|
277
|
-
* </p>
|
|
273
|
+
* as a credit card, with the account. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_account-before-remove.html">Considerations before removing an account from an organization</a> in
|
|
274
|
+
* the <i>Organizations User Guide</i>.</p>
|
|
278
275
|
* </li>
|
|
279
276
|
* <li>
|
|
280
277
|
* <p>MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to detach a policy
|
|
@@ -430,9 +427,8 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {
|
|
|
430
427
|
* @throws {@link TooManyRequestsException} (client fault)
|
|
431
428
|
* <p>You have sent too many requests in too short a period of time. The quota helps protect
|
|
432
429
|
* against denial-of-service attacks. Try again later.</p>
|
|
433
|
-
* <p>For information about quotas that affect Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html">Quotas for Organizations</a>in the
|
|
434
|
-
* <i>Organizations User Guide
|
|
435
|
-
* </p>
|
|
430
|
+
* <p>For information about quotas that affect Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html">Quotas for Organizations</a> in the
|
|
431
|
+
* <i>Organizations User Guide</i>.</p>
|
|
436
432
|
*
|
|
437
433
|
* @throws {@link UnsupportedAPIEndpointException} (client fault)
|
|
438
434
|
* <p>This action isn't available in the current Amazon Web Services Region.</p>
|