@aws-sdk/client-organizations 3.55.0 → 3.59.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +27 -0
- package/README.md +28 -27
- package/dist-cjs/Organizations.js +15 -0
- package/dist-cjs/commands/CloseAccountCommand.js +36 -0
- package/dist-cjs/commands/index.js +1 -0
- package/dist-cjs/models/models_0.js +44 -4
- package/dist-cjs/protocols/Aws_json1_1.js +109 -3
- package/dist-es/Organizations.js +15 -0
- package/dist-es/commands/CloseAccountCommand.js +39 -0
- package/dist-es/commands/index.js +1 -0
- package/dist-es/models/models_0.js +36 -0
- package/dist-es/protocols/Aws_json1_1.js +133 -1
- package/dist-types/Organizations.d.ts +213 -205
- package/dist-types/OrganizationsClient.d.ts +31 -29
- package/dist-types/commands/AcceptHandshakeCommand.d.ts +8 -7
- package/dist-types/commands/AttachPolicyCommand.d.ts +1 -1
- package/dist-types/commands/CloseAccountCommand.d.ts +35 -0
- package/dist-types/commands/CreateAccountCommand.d.ts +24 -27
- package/dist-types/commands/CreateGovCloudAccountCommand.d.ts +39 -40
- package/dist-types/commands/CreateOrganizationCommand.d.ts +1 -1
- package/dist-types/commands/CreateOrganizationalUnitCommand.d.ts +1 -1
- package/dist-types/commands/CreatePolicyCommand.d.ts +1 -1
- package/dist-types/commands/DeregisterDelegatedAdministratorCommand.d.ts +6 -6
- package/dist-types/commands/DescribeAccountCommand.d.ts +2 -2
- package/dist-types/commands/DescribeCreateAccountStatusCommand.d.ts +1 -1
- package/dist-types/commands/DescribeEffectivePolicyCommand.d.ts +3 -3
- package/dist-types/commands/DescribeOrganizationalUnitCommand.d.ts +1 -1
- package/dist-types/commands/DescribePolicyCommand.d.ts +1 -1
- package/dist-types/commands/DetachPolicyCommand.d.ts +1 -1
- package/dist-types/commands/DisableAWSServiceAccessCommand.d.ts +12 -12
- package/dist-types/commands/DisablePolicyTypeCommand.d.ts +2 -2
- package/dist-types/commands/EnableAWSServiceAccessCommand.d.ts +9 -8
- package/dist-types/commands/EnableAllFeaturesCommand.d.ts +2 -2
- package/dist-types/commands/EnablePolicyTypeCommand.d.ts +1 -1
- package/dist-types/commands/InviteAccountToOrganizationCommand.d.ts +6 -6
- package/dist-types/commands/LeaveOrganizationCommand.d.ts +9 -9
- package/dist-types/commands/ListAWSServiceAccessForOrganizationCommand.d.ts +5 -5
- package/dist-types/commands/ListAccountsCommand.d.ts +1 -1
- package/dist-types/commands/ListAccountsForParentCommand.d.ts +1 -1
- package/dist-types/commands/ListChildrenCommand.d.ts +1 -1
- package/dist-types/commands/ListCreateAccountStatusCommand.d.ts +1 -1
- package/dist-types/commands/ListDelegatedAdministratorsCommand.d.ts +2 -2
- package/dist-types/commands/ListDelegatedServicesForAccountCommand.d.ts +2 -2
- package/dist-types/commands/ListHandshakesForAccountCommand.d.ts +4 -3
- package/dist-types/commands/ListHandshakesForOrganizationCommand.d.ts +5 -4
- package/dist-types/commands/ListOrganizationalUnitsForParentCommand.d.ts +1 -1
- package/dist-types/commands/ListParentsCommand.d.ts +1 -1
- package/dist-types/commands/ListPoliciesCommand.d.ts +1 -1
- package/dist-types/commands/ListPoliciesForTargetCommand.d.ts +1 -1
- package/dist-types/commands/ListRootsCommand.d.ts +1 -1
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +3 -3
- package/dist-types/commands/ListTargetsForPolicyCommand.d.ts +1 -1
- package/dist-types/commands/RegisterDelegatedAdministratorCommand.d.ts +5 -5
- package/dist-types/commands/RemoveAccountFromOrganizationCommand.d.ts +7 -7
- package/dist-types/commands/TagResourceCommand.d.ts +2 -2
- package/dist-types/commands/UntagResourceCommand.d.ts +2 -2
- package/dist-types/commands/index.d.ts +1 -0
- package/dist-types/models/models_0.d.ts +255 -148
- package/dist-types/protocols/Aws_json1_1.d.ts +3 -0
- package/dist-types/ts3.4/Organizations.d.ts +5 -0
- package/dist-types/ts3.4/OrganizationsClient.d.ts +3 -2
- package/dist-types/ts3.4/commands/CloseAccountCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/index.d.ts +1 -0
- package/dist-types/ts3.4/models/models_0.d.ts +30 -0
- package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts +3 -0
- package/package.json +18 -18
|
@@ -2,6 +2,7 @@ import { HttpHandlerOptions as __HttpHandlerOptions } from "@aws-sdk/types";
|
|
|
2
2
|
import { AcceptHandshakeCommandInput, AcceptHandshakeCommandOutput } from "./commands/AcceptHandshakeCommand";
|
|
3
3
|
import { AttachPolicyCommandInput, AttachPolicyCommandOutput } from "./commands/AttachPolicyCommand";
|
|
4
4
|
import { CancelHandshakeCommandInput, CancelHandshakeCommandOutput } from "./commands/CancelHandshakeCommand";
|
|
5
|
+
import { CloseAccountCommandInput, CloseAccountCommandOutput } from "./commands/CloseAccountCommand";
|
|
5
6
|
import { CreateAccountCommandInput, CreateAccountCommandOutput } from "./commands/CreateAccountCommand";
|
|
6
7
|
import { CreateGovCloudAccountCommandInput, CreateGovCloudAccountCommandOutput } from "./commands/CreateGovCloudAccountCommand";
|
|
7
8
|
import { CreateOrganizationalUnitCommandInput, CreateOrganizationalUnitCommandOutput } from "./commands/CreateOrganizationalUnitCommand";
|
|
@@ -52,39 +53,39 @@ import { UpdateOrganizationalUnitCommandInput, UpdateOrganizationalUnitCommandOu
|
|
|
52
53
|
import { UpdatePolicyCommandInput, UpdatePolicyCommandOutput } from "./commands/UpdatePolicyCommand";
|
|
53
54
|
import { OrganizationsClient } from "./OrganizationsClient";
|
|
54
55
|
/**
|
|
55
|
-
* <p>
|
|
56
|
-
* into an <i>organization</i> and centrally manage your
|
|
57
|
-
* resources.</p>
|
|
58
|
-
* <p>This guide provides descriptions of the Organizations operations. For more
|
|
59
|
-
* using this service, see the <a href="
|
|
56
|
+
* <p>Organizations is a web service that enables you to consolidate your multiple
|
|
57
|
+
* Amazon Web Services accounts into an <i>organization</i> and centrally manage your
|
|
58
|
+
* accounts and their resources.</p>
|
|
59
|
+
* <p>This guide provides descriptions of the Organizations operations. For more
|
|
60
|
+
* information about using this service, see the <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html">Organizations User Guide</a>.</p>
|
|
60
61
|
* <p>
|
|
61
|
-
* <b>Support and feedback for
|
|
62
|
+
* <b>Support and feedback for Organizations</b>
|
|
62
63
|
* </p>
|
|
63
64
|
* <p>We welcome your feedback. Send your comments to <a href="mailto:feedback-awsorganizations@amazon.com">feedback-awsorganizations@amazon.com</a> or post your feedback and questions in
|
|
64
|
-
* the <a href="http://forums.aws.amazon.com/forum.jspa?forumID=219">
|
|
65
|
-
* more information about the
|
|
65
|
+
* the <a href="http://forums.aws.amazon.com/forum.jspa?forumID=219">Organizations support forum</a>. For
|
|
66
|
+
* more information about the Amazon Web Services support forums, see <a href="http://forums.aws.amazon.com/help.jspa">Forums Help</a>.</p>
|
|
66
67
|
* <p>
|
|
67
|
-
* <b>Endpoint to call When using the
|
|
68
|
+
* <b>Endpoint to call When using the CLI or the Amazon Web Services
|
|
68
69
|
* SDK</b>
|
|
69
70
|
* </p>
|
|
70
|
-
* <p>For the current release of Organizations, specify the <code>us-east-1</code> region
|
|
71
|
-
*
|
|
72
|
-
* calling from one of the
|
|
73
|
-
*
|
|
74
|
-
* commands:</p>
|
|
71
|
+
* <p>For the current release of Organizations, specify the <code>us-east-1</code> region
|
|
72
|
+
* for all Amazon Web Services API and CLI calls made from the commercial Amazon Web Services Regions outside of
|
|
73
|
+
* China. If calling from one of the Amazon Web Services Regions in China, then specify
|
|
74
|
+
* <code>cn-northwest-1</code>. You can do this in the CLI by using these parameters
|
|
75
|
+
* and commands:</p>
|
|
75
76
|
* <ul>
|
|
76
77
|
* <li>
|
|
77
78
|
* <p>Use the following parameter with each command to specify both the endpoint and
|
|
78
79
|
* its region:</p>
|
|
79
80
|
* <p>
|
|
80
81
|
* <code>--endpoint-url https://organizations.us-east-1.amazonaws.com</code>
|
|
81
|
-
* <i>(from commercial
|
|
82
|
+
* <i>(from commercial Amazon Web Services Regions outside of China)</i>
|
|
82
83
|
* </p>
|
|
83
84
|
* <p>or</p>
|
|
84
85
|
* <p>
|
|
85
86
|
* <code>--endpoint-url
|
|
86
87
|
* https://organizations.cn-northwest-1.amazonaws.com.cn</code>
|
|
87
|
-
* <i>(from
|
|
88
|
+
* <i>(from Amazon Web Services Regions in China)</i>
|
|
88
89
|
* </p>
|
|
89
90
|
* </li>
|
|
90
91
|
* <li>
|
|
@@ -92,37 +93,38 @@ import { OrganizationsClient } from "./OrganizationsClient";
|
|
|
92
93
|
* command:</p>
|
|
93
94
|
* <p>
|
|
94
95
|
* <code>aws configure set default.region us-east-1</code>
|
|
95
|
-
* <i>(from commercial
|
|
96
|
+
* <i>(from commercial Amazon Web Services Regions outside of China)</i>
|
|
96
97
|
* </p>
|
|
97
98
|
* <p>or</p>
|
|
98
99
|
* <p>
|
|
99
100
|
* <code>aws configure set default.region cn-northwest-1</code>
|
|
100
|
-
* <i>(from
|
|
101
|
+
* <i>(from Amazon Web Services Regions in China)</i>
|
|
101
102
|
* </p>
|
|
102
103
|
* </li>
|
|
103
104
|
* <li>
|
|
104
105
|
* <p>Use the following parameter with each command to specify the endpoint:</p>
|
|
105
106
|
* <p>
|
|
106
107
|
* <code>--region us-east-1</code>
|
|
107
|
-
* <i>(from commercial
|
|
108
|
+
* <i>(from commercial Amazon Web Services Regions outside of China)</i>
|
|
108
109
|
* </p>
|
|
109
110
|
* <p>or</p>
|
|
110
111
|
* <p>
|
|
111
112
|
* <code>--region cn-northwest-1</code>
|
|
112
|
-
* <i>(from
|
|
113
|
+
* <i>(from Amazon Web Services Regions in China)</i>
|
|
113
114
|
* </p>
|
|
114
115
|
* </li>
|
|
115
116
|
* </ul>
|
|
116
117
|
* <p>
|
|
117
118
|
* <b>Recording API Requests</b>
|
|
118
119
|
* </p>
|
|
119
|
-
* <p>
|
|
120
|
-
* account and delivers log files to an Amazon S3 bucket. By using information collected
|
|
121
|
-
*
|
|
122
|
-
* and when, and so on. For more about
|
|
123
|
-
*
|
|
124
|
-
*
|
|
125
|
-
*
|
|
120
|
+
* <p>Organizations supports CloudTrail, a service that records Amazon Web Services API calls for your
|
|
121
|
+
* Amazon Web Services account and delivers log files to an Amazon S3 bucket. By using information collected
|
|
122
|
+
* by CloudTrail, you can determine which requests the Organizations service received, who made the
|
|
123
|
+
* request and when, and so on. For more about Organizations and its support for CloudTrail, see
|
|
124
|
+
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_incident-response.html#orgs_cloudtrail-integration">Logging
|
|
125
|
+
* Organizations Events with CloudTrail</a> in the <i>Organizations User Guide</i>.
|
|
126
|
+
* To learn more about CloudTrail, including how to turn it on and find your log files, see the
|
|
127
|
+
* <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html">CloudTrail User Guide</a>.</p>
|
|
126
128
|
*/
|
|
127
129
|
export declare class Organizations extends OrganizationsClient {
|
|
128
130
|
/**
|
|
@@ -138,19 +140,20 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
138
140
|
* <p>The user who calls the API for an invitation to join must have the
|
|
139
141
|
* <code>organizations:AcceptHandshake</code> permission. If you enabled all
|
|
140
142
|
* features in the organization, the user must also have the
|
|
141
|
-
* <code>iam:CreateServiceLinkedRole</code> permission so that
|
|
143
|
+
* <code>iam:CreateServiceLinkedRole</code> permission so that Organizations can
|
|
142
144
|
* create the required service-linked role named <code>AWSServiceRoleForOrganizations</code>. For
|
|
143
|
-
* more information, see <a href="
|
|
144
|
-
* <i>
|
|
145
|
+
* more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integration_services.html#orgs_integration_service-linked-roles">Organizations and Service-Linked Roles</a> in the
|
|
146
|
+
* <i>Organizations User Guide</i>.</p>
|
|
145
147
|
* </li>
|
|
146
148
|
* <li>
|
|
147
149
|
* <p>
|
|
148
150
|
* <b>Enable all features final confirmation</b>
|
|
149
151
|
* handshake: only a principal from the management account.</p>
|
|
150
|
-
* <p>For more information about invitations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_invites.html">Inviting an
|
|
151
|
-
*
|
|
152
|
-
*
|
|
153
|
-
* the <
|
|
152
|
+
* <p>For more information about invitations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_invites.html">Inviting an
|
|
153
|
+
* Amazon Web Services account to join your organization</a> in the
|
|
154
|
+
* <i>Organizations User Guide.</i> For more information about requests to
|
|
155
|
+
* enable all features in the organization, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling all features in your organization</a> in
|
|
156
|
+
* the <i>Organizations User Guide.</i>
|
|
154
157
|
* </p>
|
|
155
158
|
* </li>
|
|
156
159
|
* </ul>
|
|
@@ -163,7 +166,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
163
166
|
/**
|
|
164
167
|
* <p>Attaches a policy to a root, an organizational unit (OU), or an individual account.
|
|
165
168
|
* How the policy affects accounts depends on the type of policy. Refer to the
|
|
166
|
-
* <i>
|
|
169
|
+
* <i>Organizations User Guide</i> for information about each policy type:</p>
|
|
167
170
|
* <ul>
|
|
168
171
|
* <li>
|
|
169
172
|
* <p>
|
|
@@ -203,8 +206,14 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
203
206
|
cancelHandshake(args: CancelHandshakeCommandInput, cb: (err: any, data?: CancelHandshakeCommandOutput) => void): void;
|
|
204
207
|
cancelHandshake(args: CancelHandshakeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CancelHandshakeCommandOutput) => void): void;
|
|
205
208
|
/**
|
|
206
|
-
* <p>
|
|
207
|
-
|
|
209
|
+
* <p>Closes an Amazon Web Services account that is now a part of an Organizations, either created within the organization, or invited to join the organization.</p>
|
|
210
|
+
*/
|
|
211
|
+
closeAccount(args: CloseAccountCommandInput, options?: __HttpHandlerOptions): Promise<CloseAccountCommandOutput>;
|
|
212
|
+
closeAccount(args: CloseAccountCommandInput, cb: (err: any, data?: CloseAccountCommandOutput) => void): void;
|
|
213
|
+
closeAccount(args: CloseAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CloseAccountCommandOutput) => void): void;
|
|
214
|
+
/**
|
|
215
|
+
* <p>Creates an Amazon Web Services account that is automatically a member of the organization whose
|
|
216
|
+
* credentials made the request. This is an asynchronous request that Amazon Web Services performs in the
|
|
208
217
|
* background. Because <code>CreateAccount</code> operates asynchronously, it can return a
|
|
209
218
|
* successful completion message even though account initialization might still be in
|
|
210
219
|
* progress. You might need to wait a few minutes before you can successfully access the
|
|
@@ -215,59 +224,56 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
215
224
|
* response element from this operation to provide as a parameter to the <a>DescribeCreateAccountStatus</a> operation.</p>
|
|
216
225
|
* </li>
|
|
217
226
|
* <li>
|
|
218
|
-
* <p>Check the
|
|
219
|
-
* information on using
|
|
220
|
-
* <i>
|
|
227
|
+
* <p>Check the CloudTrail log for the <code>CreateAccountResult</code> event. For
|
|
228
|
+
* information on using CloudTrail with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_security_incident-response.html#orgs_cloudtrail-integration">Logging and monitoring in Organizations</a> in the
|
|
229
|
+
* <i>Organizations User Guide.</i>
|
|
221
230
|
* </p>
|
|
222
231
|
* </li>
|
|
223
232
|
* </ul>
|
|
224
233
|
* <p>The user who calls the API to create an account must have the
|
|
225
234
|
* <code>organizations:CreateAccount</code> permission. If you enabled all features in
|
|
226
|
-
* the organization,
|
|
227
|
-
* <code>AWSServiceRoleForOrganizations</code>. For more information, see <a href="
|
|
228
|
-
* <i>
|
|
235
|
+
* the organization, Organizations creates the required service-linked role named
|
|
236
|
+
* <code>AWSServiceRoleForOrganizations</code>. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html#orgs_integrate_services-using_slrs">Organizations and Service-Linked Roles</a> in the
|
|
237
|
+
* <i>Organizations User Guide</i>.</p>
|
|
229
238
|
* <p>If the request includes tags, then the requester must have the
|
|
230
239
|
* <code>organizations:TagResource</code> permission.</p>
|
|
231
|
-
* <p>
|
|
240
|
+
* <p>Organizations preconfigures the new member account with a role (named
|
|
232
241
|
* <code>OrganizationAccountAccessRole</code> by default) that grants users in the
|
|
233
242
|
* management account administrator permissions in the new member account. Principals in
|
|
234
|
-
* the management account can assume the role.
|
|
243
|
+
* the management account can assume the role. Organizations clones the company name and address
|
|
235
244
|
* information for the new account from the organization's management account.</p>
|
|
236
245
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
237
|
-
* <p>For more information about creating accounts, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html">Creating
|
|
238
|
-
*
|
|
239
|
-
* <i>AWS Organizations User Guide.</i>
|
|
246
|
+
* <p>For more information about creating accounts, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html">Creating an Amazon Web Services account in
|
|
247
|
+
* Your Organization</a> in the <i>Organizations User Guide.</i>
|
|
240
248
|
* </p>
|
|
241
249
|
* <important>
|
|
242
250
|
* <ul>
|
|
243
251
|
* <li>
|
|
244
|
-
* <p>When you create an account in an organization using the
|
|
245
|
-
* API, or CLI commands, the information required for the account to operate
|
|
246
|
-
* a standalone account, such as a payment method and signing the end user
|
|
252
|
+
* <p>When you create an account in an organization using the Organizations console,
|
|
253
|
+
* API, or CLI commands, the information required for the account to operate
|
|
254
|
+
* as a standalone account, such as a payment method and signing the end user
|
|
247
255
|
* license agreement (EULA) is <i>not</i> automatically
|
|
248
256
|
* collected. If you must remove an account from your organization later, you
|
|
249
257
|
* can do so only after you provide the missing information. Follow the steps
|
|
250
|
-
* at <a href="
|
|
251
|
-
* <i>
|
|
258
|
+
* at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization as a member account</a> in the
|
|
259
|
+
* <i>Organizations User Guide</i>.</p>
|
|
252
260
|
* </li>
|
|
253
261
|
* <li>
|
|
254
262
|
* <p>If you get an exception that indicates that you exceeded your account
|
|
255
|
-
* limits for the organization, contact <a href="https://console.aws.amazon.com/support/home#/">
|
|
263
|
+
* limits for the organization, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
256
264
|
* </li>
|
|
257
265
|
* <li>
|
|
258
266
|
* <p>If you get an exception that indicates that the operation failed because
|
|
259
267
|
* your organization is still initializing, wait one hour and then try again.
|
|
260
|
-
* If the error persists, contact <a href="https://console.aws.amazon.com/support/home#/">
|
|
261
|
-
* Support</a>.</p>
|
|
268
|
+
* If the error persists, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
262
269
|
* </li>
|
|
263
270
|
* <li>
|
|
264
271
|
* <p>Using <code>CreateAccount</code> to create multiple temporary accounts
|
|
265
|
-
* isn't recommended. You can only close an account from the Billing and Cost
|
|
266
|
-
*
|
|
267
|
-
*
|
|
268
|
-
*
|
|
269
|
-
*
|
|
270
|
-
* <i>AWS Organizations User Guide</i>.</p>
|
|
272
|
+
* isn't recommended. You can only close an account from the Billing and Cost Management console, and
|
|
273
|
+
* you must be signed in as the root user. For information on the requirements
|
|
274
|
+
* and process for closing an account, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html">Closing an
|
|
275
|
+
* Amazon Web Services account</a> in the
|
|
276
|
+
* <i>Organizations User Guide</i>.</p>
|
|
271
277
|
* </li>
|
|
272
278
|
* </ul>
|
|
273
279
|
* </important>
|
|
@@ -289,13 +295,13 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
289
295
|
* <p>This action is available if all of the following are true:</p>
|
|
290
296
|
* <ul>
|
|
291
297
|
* <li>
|
|
292
|
-
* <p>You're authorized to create accounts in the
|
|
293
|
-
* more information on the
|
|
294
|
-
* <i>
|
|
298
|
+
* <p>You're authorized to create accounts in the Amazon Web Services GovCloud (US) Region. For
|
|
299
|
+
* more information on the Amazon Web Services GovCloud (US) Region, see the <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/welcome.html">
|
|
300
|
+
* <i>Amazon Web Services GovCloud User Guide</i>.</a>
|
|
295
301
|
* </p>
|
|
296
302
|
* </li>
|
|
297
303
|
* <li>
|
|
298
|
-
* <p>You already have an account in the
|
|
304
|
+
* <p>You already have an account in the Amazon Web Services GovCloud (US) Region that is paired
|
|
299
305
|
* with a management account of an organization in the commercial Region.</p>
|
|
300
306
|
* </li>
|
|
301
307
|
* <li>
|
|
@@ -307,20 +313,20 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
307
313
|
* </p>
|
|
308
314
|
* </li>
|
|
309
315
|
* </ul>
|
|
310
|
-
* <p>
|
|
311
|
-
* <code>AWSServiceRoleForOrganizations</code>. For more information, see <a href="
|
|
312
|
-
* <i>
|
|
316
|
+
* <p>Organizations automatically creates the required service-linked role named
|
|
317
|
+
* <code>AWSServiceRoleForOrganizations</code>. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html#orgs_integrate_services-using_slrs">Organizations and Service-Linked Roles</a> in the
|
|
318
|
+
* <i>Organizations User Guide.</i>
|
|
313
319
|
* </p>
|
|
314
|
-
* <p>
|
|
320
|
+
* <p>Amazon Web Services automatically enables CloudTrail for Amazon Web Services GovCloud (US) accounts, but you should also
|
|
315
321
|
* do the following:</p>
|
|
316
322
|
* <ul>
|
|
317
323
|
* <li>
|
|
318
|
-
* <p>Verify that
|
|
324
|
+
* <p>Verify that CloudTrail is enabled to store logs.</p>
|
|
319
325
|
* </li>
|
|
320
326
|
* <li>
|
|
321
|
-
* <p>Create an S3 bucket for
|
|
322
|
-
* <p>For more information, see <a href="
|
|
323
|
-
* Enabled</a> in the <i>
|
|
327
|
+
* <p>Create an Amazon S3 bucket for CloudTrail log storage.</p>
|
|
328
|
+
* <p>For more information, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/verifying-cloudtrail.html">Verifying CloudTrail Is
|
|
329
|
+
* Enabled</a> in the <i>Amazon Web Services GovCloud User Guide</i>.
|
|
324
330
|
* </p>
|
|
325
331
|
* </li>
|
|
326
332
|
* </ul>
|
|
@@ -330,14 +336,14 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
330
336
|
* account itself. To add tags to the GovCloud account, call the <a>TagResource</a> operation in the GovCloud Region after the new GovCloud
|
|
331
337
|
* account exists.</p>
|
|
332
338
|
* <p>You call this action from the management account of your organization in the
|
|
333
|
-
* commercial Region to create a standalone
|
|
339
|
+
* commercial Region to create a standalone Amazon Web Services account in the Amazon Web Services GovCloud (US)
|
|
334
340
|
* Region. After the account is created, the management account of an organization in the
|
|
335
|
-
*
|
|
336
|
-
* inviting standalone accounts in the
|
|
337
|
-
* <a href="
|
|
338
|
-
*
|
|
341
|
+
* Amazon Web Services GovCloud (US) Region can invite it to that organization. For more information on
|
|
342
|
+
* inviting standalone accounts in the Amazon Web Services GovCloud (US) to join an organization, see
|
|
343
|
+
* <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html">Organizations</a> in the
|
|
344
|
+
* <i>Amazon Web Services GovCloud User Guide.</i>
|
|
339
345
|
* </p>
|
|
340
|
-
* <p>Calling <code>CreateGovCloudAccount</code> is an asynchronous request that
|
|
346
|
+
* <p>Calling <code>CreateGovCloudAccount</code> is an asynchronous request that Amazon Web Services
|
|
341
347
|
* performs in the background. Because <code>CreateGovCloudAccount</code> operates
|
|
342
348
|
* asynchronously, it can return a successful completion message even though account
|
|
343
349
|
* initialization might still be in progress. You might need to wait a few minutes before
|
|
@@ -350,63 +356,62 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
350
356
|
* operation.</p>
|
|
351
357
|
* </li>
|
|
352
358
|
* <li>
|
|
353
|
-
* <p>Check the
|
|
354
|
-
* information on using
|
|
355
|
-
* Organization</a> in the <i>
|
|
359
|
+
* <p>Check the CloudTrail log for the <code>CreateAccountResult</code> event. For
|
|
360
|
+
* information on using CloudTrail with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_monitoring.html">Monitoring the Activity in Your
|
|
361
|
+
* Organization</a> in the <i>Organizations User Guide.</i>
|
|
356
362
|
* </p>
|
|
357
363
|
* </li>
|
|
358
364
|
* </ul>
|
|
359
365
|
* <p></p>
|
|
360
366
|
* <p>When you call the <code>CreateGovCloudAccount</code> action, you create two accounts:
|
|
361
|
-
* a standalone account in the
|
|
367
|
+
* a standalone account in the Amazon Web Services GovCloud (US) Region and an associated account in the
|
|
362
368
|
* commercial Region for billing and support purposes. The account in the commercial Region
|
|
363
369
|
* is automatically a member of the organization whose credentials made the request. Both
|
|
364
370
|
* accounts are associated with the same email address.</p>
|
|
365
371
|
* <p>A role is created in the new account in the commercial Region that allows the
|
|
366
|
-
* management account in the organization in the commercial Region to assume it. An
|
|
372
|
+
* management account in the organization in the commercial Region to assume it. An Amazon Web Services
|
|
367
373
|
* GovCloud (US) account is then created and associated with the commercial account that
|
|
368
|
-
* you just created. A role is also created in the new
|
|
369
|
-
* be assumed by the
|
|
374
|
+
* you just created. A role is also created in the new Amazon Web Services GovCloud (US) account that can
|
|
375
|
+
* be assumed by the Amazon Web Services GovCloud (US) account that is associated with the management
|
|
370
376
|
* account of the commercial organization. For more information and to view a diagram that
|
|
371
|
-
* explains how account access works, see <a href="
|
|
372
|
-
* <i>
|
|
377
|
+
* explains how account access works, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html">Organizations</a> in the
|
|
378
|
+
* <i>Amazon Web Services GovCloud User Guide.</i>
|
|
373
379
|
* </p>
|
|
374
380
|
*
|
|
375
381
|
*
|
|
376
382
|
* <p>For more information about creating accounts, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html">Creating
|
|
377
|
-
* an
|
|
378
|
-
* <i>
|
|
383
|
+
* an Amazon Web Services account in Your Organization</a> in the
|
|
384
|
+
* <i>Organizations User Guide.</i>
|
|
379
385
|
* </p>
|
|
380
386
|
* <important>
|
|
381
387
|
* <ul>
|
|
382
388
|
* <li>
|
|
383
|
-
* <p>When you create an account in an organization using the
|
|
389
|
+
* <p>When you create an account in an organization using the Organizations console,
|
|
384
390
|
* API, or CLI commands, the information required for the account to operate as
|
|
385
391
|
* a standalone account is <i>not</i> automatically collected.
|
|
386
392
|
* This includes a payment method and signing the end user license agreement
|
|
387
393
|
* (EULA). If you must remove an account from your organization later, you can
|
|
388
394
|
* do so only after you provide the missing information. Follow the steps at
|
|
389
|
-
* <a href="
|
|
390
|
-
* <i>
|
|
395
|
+
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization as a member account</a> in the
|
|
396
|
+
* <i>Organizations User Guide.</i>
|
|
391
397
|
* </p>
|
|
392
398
|
* </li>
|
|
393
399
|
* <li>
|
|
394
400
|
* <p>If you get an exception that indicates that you exceeded your account
|
|
395
|
-
* limits for the organization, contact <a href="https://console.aws.amazon.com/support/home#/">
|
|
401
|
+
* limits for the organization, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
396
402
|
* </li>
|
|
397
403
|
* <li>
|
|
398
404
|
* <p>If you get an exception that indicates that the operation failed because
|
|
399
405
|
* your organization is still initializing, wait one hour and then try again.
|
|
400
|
-
* If the error persists, contact <a href="https://console.aws.amazon.com/support/home#/">
|
|
401
|
-
* Support</a>.</p>
|
|
406
|
+
* If the error persists, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
402
407
|
* </li>
|
|
403
408
|
* <li>
|
|
404
409
|
* <p>Using <code>CreateGovCloudAccount</code> to create multiple temporary
|
|
405
|
-
* accounts isn't recommended. You can only close an account from the
|
|
406
|
-
* Billing and Cost Management console, and you must be signed in as the root
|
|
407
|
-
*
|
|
408
|
-
*
|
|
409
|
-
*
|
|
410
|
+
* accounts isn't recommended. You can only close an account from the Amazon Web Services
|
|
411
|
+
* Billing and Cost Management console, and you must be signed in as the root user. For information on
|
|
412
|
+
* the requirements and process for closing an account, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html">Closing an
|
|
413
|
+
* Amazon Web Services account</a> in the
|
|
414
|
+
* <i>Organizations User Guide</i>.</p>
|
|
410
415
|
* </li>
|
|
411
416
|
* </ul>
|
|
412
417
|
* </important>
|
|
@@ -425,7 +430,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
425
430
|
createGovCloudAccount(args: CreateGovCloudAccountCommandInput, cb: (err: any, data?: CreateGovCloudAccountCommandOutput) => void): void;
|
|
426
431
|
createGovCloudAccount(args: CreateGovCloudAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateGovCloudAccountCommandOutput) => void): void;
|
|
427
432
|
/**
|
|
428
|
-
* <p>Creates an
|
|
433
|
+
* <p>Creates an Amazon Web Services organization. The account whose user is calling the
|
|
429
434
|
* <code>CreateOrganization</code> operation automatically becomes the <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#account">management account</a> of the new organization.</p>
|
|
430
435
|
* <p>This operation must be called using credentials from the account that is to become the
|
|
431
436
|
* new organization's management account. The principal must also have the relevant IAM
|
|
@@ -447,7 +452,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
447
452
|
* upon the policy types enabled for that root. For service control policies, the limit is
|
|
448
453
|
* five.</p>
|
|
449
454
|
* <p>For more information about OUs, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_ous.html">Managing Organizational Units</a> in the
|
|
450
|
-
* <i>
|
|
455
|
+
* <i>Organizations User Guide.</i>
|
|
451
456
|
* </p>
|
|
452
457
|
* <p>If the request includes tags, then the requester must have the
|
|
453
458
|
* <code>organizations:TagResource</code> permission.</p>
|
|
@@ -458,7 +463,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
458
463
|
createOrganizationalUnit(args: CreateOrganizationalUnitCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateOrganizationalUnitCommandOutput) => void): void;
|
|
459
464
|
/**
|
|
460
465
|
* <p>Creates a policy of a specified type that you can attach to a root, an organizational
|
|
461
|
-
* unit (OU), or an individual
|
|
466
|
+
* unit (OU), or an individual Amazon Web Services account.</p>
|
|
462
467
|
* <p>For more information about policies and their use, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies.html">Managing
|
|
463
468
|
* Organization Policies</a>.</p>
|
|
464
469
|
* <p>If the request includes tags, then the requester must have the
|
|
@@ -505,18 +510,18 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
505
510
|
deletePolicy(args: DeletePolicyCommandInput, cb: (err: any, data?: DeletePolicyCommandOutput) => void): void;
|
|
506
511
|
deletePolicy(args: DeletePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeletePolicyCommandOutput) => void): void;
|
|
507
512
|
/**
|
|
508
|
-
* <p>Removes the specified member
|
|
509
|
-
* specified
|
|
513
|
+
* <p>Removes the specified member Amazon Web Services account as a delegated administrator for the
|
|
514
|
+
* specified Amazon Web Services service.</p>
|
|
510
515
|
* <important>
|
|
511
516
|
* <p>Deregistering a delegated administrator can have unintended impacts on the
|
|
512
|
-
* functionality of the enabled
|
|
517
|
+
* functionality of the enabled Amazon Web Services service. See the documentation for the enabled
|
|
513
518
|
* service before you deregister a delegated administrator so that you understand any
|
|
514
519
|
* potential impacts.</p>
|
|
515
520
|
* </important>
|
|
516
|
-
* <p>You can run this action only for
|
|
521
|
+
* <p>You can run this action only for Amazon Web Services services that support this
|
|
517
522
|
* feature. For a current list of services that support it, see the column <i>Supports
|
|
518
|
-
* Delegated Administrator</i> in the table at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">
|
|
519
|
-
*
|
|
523
|
+
* Delegated Administrator</i> in the table at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">Amazon Web Services Services that you can use with
|
|
524
|
+
* Organizations</a> in the <i>Organizations User Guide.</i>
|
|
520
525
|
* </p>
|
|
521
526
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
522
527
|
*/
|
|
@@ -524,9 +529,9 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
524
529
|
deregisterDelegatedAdministrator(args: DeregisterDelegatedAdministratorCommandInput, cb: (err: any, data?: DeregisterDelegatedAdministratorCommandOutput) => void): void;
|
|
525
530
|
deregisterDelegatedAdministrator(args: DeregisterDelegatedAdministratorCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeregisterDelegatedAdministratorCommandOutput) => void): void;
|
|
526
531
|
/**
|
|
527
|
-
* <p>Retrieves
|
|
532
|
+
* <p>Retrieves Organizations-related information about the specified account.</p>
|
|
528
533
|
* <p>This operation can be called only from the organization's
|
|
529
|
-
* management account or by a member account that is a delegated administrator for an
|
|
534
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
530
535
|
*/
|
|
531
536
|
describeAccount(args: DescribeAccountCommandInput, options?: __HttpHandlerOptions): Promise<DescribeAccountCommandOutput>;
|
|
532
537
|
describeAccount(args: DescribeAccountCommandInput, cb: (err: any, data?: DescribeAccountCommandOutput) => void): void;
|
|
@@ -534,7 +539,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
534
539
|
/**
|
|
535
540
|
* <p>Retrieves the current status of an asynchronous request to create an account.</p>
|
|
536
541
|
* <p>This operation can be called only from the organization's
|
|
537
|
-
* management account or by a member account that is a delegated administrator for an
|
|
542
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
538
543
|
*/
|
|
539
544
|
describeCreateAccountStatus(args: DescribeCreateAccountStatusCommandInput, options?: __HttpHandlerOptions): Promise<DescribeCreateAccountStatusCommandOutput>;
|
|
540
545
|
describeCreateAccountStatus(args: DescribeCreateAccountStatusCommandInput, cb: (err: any, data?: DescribeCreateAccountStatusCommandOutput) => void): void;
|
|
@@ -546,10 +551,10 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
546
551
|
* account.</p>
|
|
547
552
|
* <p>This operation applies only to policy types <i>other</i> than service
|
|
548
553
|
* control policies (SCPs).</p>
|
|
549
|
-
* <p>For more information about policy inheritance, see <a href="
|
|
550
|
-
* Works</a> in the <i>
|
|
554
|
+
* <p>For more information about policy inheritance, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies-inheritance.html">How Policy Inheritance
|
|
555
|
+
* Works</a> in the <i>Organizations User Guide</i>.</p>
|
|
551
556
|
* <p>This operation can be called only from the organization's
|
|
552
|
-
* management account or by a member account that is a delegated administrator for an
|
|
557
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
553
558
|
*/
|
|
554
559
|
describeEffectivePolicy(args: DescribeEffectivePolicyCommandInput, options?: __HttpHandlerOptions): Promise<DescribeEffectivePolicyCommandOutput>;
|
|
555
560
|
describeEffectivePolicy(args: DescribeEffectivePolicyCommandInput, cb: (err: any, data?: DescribeEffectivePolicyCommandOutput) => void): void;
|
|
@@ -582,7 +587,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
582
587
|
/**
|
|
583
588
|
* <p>Retrieves information about an organizational unit (OU).</p>
|
|
584
589
|
* <p>This operation can be called only from the organization's
|
|
585
|
-
* management account or by a member account that is a delegated administrator for an
|
|
590
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
586
591
|
*/
|
|
587
592
|
describeOrganizationalUnit(args: DescribeOrganizationalUnitCommandInput, options?: __HttpHandlerOptions): Promise<DescribeOrganizationalUnitCommandOutput>;
|
|
588
593
|
describeOrganizationalUnit(args: DescribeOrganizationalUnitCommandInput, cb: (err: any, data?: DescribeOrganizationalUnitCommandOutput) => void): void;
|
|
@@ -590,7 +595,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
590
595
|
/**
|
|
591
596
|
* <p>Retrieves information about a policy.</p>
|
|
592
597
|
* <p>This operation can be called only from the organization's
|
|
593
|
-
* management account or by a member account that is a delegated administrator for an
|
|
598
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
594
599
|
*/
|
|
595
600
|
describePolicy(args: DescribePolicyCommandInput, options?: __HttpHandlerOptions): Promise<DescribePolicyCommandOutput>;
|
|
596
601
|
describePolicy(args: DescribePolicyCommandInput, cb: (err: any, data?: DescribePolicyCommandOutput) => void): void;
|
|
@@ -599,7 +604,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
599
604
|
* <p>Detaches a policy from a target root, organizational unit (OU), or account.</p>
|
|
600
605
|
* <important>
|
|
601
606
|
* <p>If the policy being detached is a service control policy (SCP), the changes to
|
|
602
|
-
* permissions for
|
|
607
|
+
* permissions for Identity and Access Management (IAM) users and roles in affected accounts are
|
|
603
608
|
* immediate.</p>
|
|
604
609
|
* </important>
|
|
605
610
|
* <p>Every root, OU, and account must have at least one SCP attached. If you want to
|
|
@@ -616,25 +621,25 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
616
621
|
detachPolicy(args: DetachPolicyCommandInput, cb: (err: any, data?: DetachPolicyCommandOutput) => void): void;
|
|
617
622
|
detachPolicy(args: DetachPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachPolicyCommandOutput) => void): void;
|
|
618
623
|
/**
|
|
619
|
-
* <p>Disables the integration of an
|
|
620
|
-
* <code>ServicePrincipal</code>) with
|
|
621
|
-
* specified service no longer can create a <a href="
|
|
624
|
+
* <p>Disables the integration of an Amazon Web Services service (the service that is specified by
|
|
625
|
+
* <code>ServicePrincipal</code>) with Organizations. When you disable integration, the
|
|
626
|
+
* specified service no longer can create a <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html">service-linked role</a> in
|
|
622
627
|
* <i>new</i> accounts in your organization. This means the service can't
|
|
623
628
|
* perform operations on your behalf on any new accounts in your organization. The service
|
|
624
629
|
* can still perform operations in older accounts until the service completes its clean-up
|
|
625
|
-
* from
|
|
630
|
+
* from Organizations.</p>
|
|
626
631
|
* <important>
|
|
627
632
|
* <p>We <b>
|
|
628
633
|
* <i>strongly recommend</i>
|
|
629
634
|
* </b> that
|
|
630
|
-
* you don't use this command to disable integration between
|
|
631
|
-
*
|
|
635
|
+
* you don't use this command to disable integration between Organizations and the specified
|
|
636
|
+
* Amazon Web Services service. Instead, use the console or commands that are provided by the
|
|
632
637
|
* specified service. This lets the trusted service perform any required initialization
|
|
633
638
|
* when enabling trusted access, such as creating any required resources and any
|
|
634
639
|
* required clean up of resources when disabling trusted access. </p>
|
|
635
640
|
* <p>For information about how to disable trusted service access to your organization
|
|
636
641
|
* using the trusted service, see the <b>Learn more</b> link
|
|
637
|
-
* under the <b>Supports Trusted Access</b> column at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">
|
|
642
|
+
* under the <b>Supports Trusted Access</b> column at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">Amazon Web Services services that you can use with Organizations</a>. on this page.</p>
|
|
638
643
|
* <p>If you disable access by using this command, it causes the following actions to
|
|
639
644
|
* occur:</p>
|
|
640
645
|
* <ul>
|
|
@@ -643,7 +648,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
643
648
|
* your organization. This means that the service can't perform operations on
|
|
644
649
|
* your behalf on any new accounts in your organization. The service can still
|
|
645
650
|
* perform operations in older accounts until the service completes its
|
|
646
|
-
* clean-up from
|
|
651
|
+
* clean-up from Organizations. </p>
|
|
647
652
|
* </li>
|
|
648
653
|
* <li>
|
|
649
654
|
* <p>The service can no longer perform tasks in the member accounts in the
|
|
@@ -663,13 +668,13 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
663
668
|
* that the other service is aware that it can clean up any resources that are required
|
|
664
669
|
* only for the integration. How the service cleans up its resources in the
|
|
665
670
|
* organization's accounts depends on that service. For more information, see the
|
|
666
|
-
* documentation for the other
|
|
671
|
+
* documentation for the other Amazon Web Services service. </p>
|
|
667
672
|
* </important>
|
|
668
673
|
* <p>After you perform the <code>DisableAWSServiceAccess</code> operation, the specified
|
|
669
674
|
* service can no longer perform operations in your organization's accounts </p>
|
|
670
|
-
* <p>For more information about integrating other services with
|
|
671
|
-
* list of services that work with Organizations, see <a href="
|
|
672
|
-
*
|
|
675
|
+
* <p>For more information about integrating other services with Organizations, including the
|
|
676
|
+
* list of services that work with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating Organizations with Other
|
|
677
|
+
* Amazon Web Services Services</a> in the <i>Organizations User Guide.</i>
|
|
673
678
|
* </p>
|
|
674
679
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
675
680
|
*/
|
|
@@ -682,8 +687,8 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
682
687
|
* perform this operation, you no longer can attach policies of the specified type to that
|
|
683
688
|
* root or to any organizational unit (OU) or account in that root. You can undo this by
|
|
684
689
|
* using the <a>EnablePolicyType</a> operation.</p>
|
|
685
|
-
* <p>This is an asynchronous request that
|
|
686
|
-
* a policy type for a root, it still appears enabled for the organization if <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">all features</a> are enabled for the organization.
|
|
690
|
+
* <p>This is an asynchronous request that Amazon Web Services performs in the background. If you disable
|
|
691
|
+
* a policy type for a root, it still appears enabled for the organization if <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">all features</a> are enabled for the organization. Amazon Web Services recommends that you
|
|
687
692
|
* first use <a>ListRoots</a> to see the status of policy types for a specified
|
|
688
693
|
* root, and then use this operation.</p>
|
|
689
694
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
@@ -696,9 +701,9 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
696
701
|
* <p>Enables all features in an organization. This enables the use of organization policies
|
|
697
702
|
* that can restrict the services and actions that can be called in each account. Until you
|
|
698
703
|
* enable all features, you have access only to consolidated billing, and you can't use any
|
|
699
|
-
* of the advanced account administration features that
|
|
704
|
+
* of the advanced account administration features that Organizations supports. For more
|
|
700
705
|
* information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling All Features in Your Organization</a> in the
|
|
701
|
-
* <i>
|
|
706
|
+
* <i>Organizations User Guide.</i>
|
|
702
707
|
* </p>
|
|
703
708
|
* <important>
|
|
704
709
|
* <p>This operation is required only for organizations that were created explicitly
|
|
@@ -724,24 +729,25 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
724
729
|
enableAllFeatures(args: EnableAllFeaturesCommandInput, cb: (err: any, data?: EnableAllFeaturesCommandOutput) => void): void;
|
|
725
730
|
enableAllFeatures(args: EnableAllFeaturesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EnableAllFeaturesCommandOutput) => void): void;
|
|
726
731
|
/**
|
|
727
|
-
* <p>Enables the integration of an
|
|
728
|
-
* <code>ServicePrincipal</code>) with
|
|
729
|
-
* the specified service to create a <a href="
|
|
732
|
+
* <p>Enables the integration of an Amazon Web Services service (the service that is specified by
|
|
733
|
+
* <code>ServicePrincipal</code>) with Organizations. When you enable integration, you allow
|
|
734
|
+
* the specified service to create a <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html">service-linked role</a> in
|
|
730
735
|
* all the accounts in your organization. This allows the service to perform operations on
|
|
731
736
|
* your behalf in your organization and its accounts.</p>
|
|
732
737
|
* <important>
|
|
733
|
-
* <p>We recommend that you enable integration between
|
|
738
|
+
* <p>We recommend that you enable integration between Organizations and the specified Amazon Web Services
|
|
734
739
|
* service by using the console or commands that are provided by the specified service.
|
|
735
740
|
* Doing so ensures that the service is aware that it can create the resources that are
|
|
736
741
|
* required for the integration. How the service creates those resources in the
|
|
737
742
|
* organization's accounts depends on that service. For more information, see the
|
|
738
|
-
* documentation for the other
|
|
743
|
+
* documentation for the other Amazon Web Services service.</p>
|
|
739
744
|
* </important>
|
|
740
|
-
* <p>For more information about enabling services to integrate with
|
|
741
|
-
*
|
|
745
|
+
* <p>For more information about enabling services to integrate with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating
|
|
746
|
+
* Organizations with Other Amazon Web Services Services</a> in the
|
|
747
|
+
* <i>Organizations User Guide.</i>
|
|
742
748
|
* </p>
|
|
743
749
|
* <p>This operation can be called only from the organization's management account and only
|
|
744
|
-
* if the organization has <a href="
|
|
750
|
+
* if the organization has <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">enabled all
|
|
745
751
|
* features</a>.</p>
|
|
746
752
|
*/
|
|
747
753
|
enableAWSServiceAccess(args: EnableAWSServiceAccessCommandInput, options?: __HttpHandlerOptions): Promise<EnableAWSServiceAccessCommandOutput>;
|
|
@@ -752,7 +758,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
752
758
|
* attach policies of that type to the root, any organizational unit (OU), or account in
|
|
753
759
|
* that root. You can undo this by using the <a>DisablePolicyType</a>
|
|
754
760
|
* operation.</p>
|
|
755
|
-
* <p>This is an asynchronous request that
|
|
761
|
+
* <p>This is an asynchronous request that Amazon Web Services performs in the background. Amazon Web Services
|
|
756
762
|
* recommends that you first use <a>ListRoots</a> to see the status of policy
|
|
757
763
|
* types for a specified root, and then use this operation.</p>
|
|
758
764
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
@@ -765,25 +771,25 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
765
771
|
enablePolicyType(args: EnablePolicyTypeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EnablePolicyTypeCommandOutput) => void): void;
|
|
766
772
|
/**
|
|
767
773
|
* <p>Sends an invitation to another account to join your organization as a member account.
|
|
768
|
-
*
|
|
774
|
+
* Organizations sends email on your behalf to the email address that is associated with the
|
|
769
775
|
* other account's owner. The invitation is implemented as a <a>Handshake</a>
|
|
770
776
|
* whose details are in the response.</p>
|
|
771
777
|
* <important>
|
|
772
778
|
* <ul>
|
|
773
779
|
* <li>
|
|
774
|
-
* <p>You can invite
|
|
780
|
+
* <p>You can invite Amazon Web Services accounts only from the same seller as the management
|
|
775
781
|
* account. For example, if your organization's management account was created
|
|
776
|
-
* by Amazon Internet Services Pvt. Ltd (AISPL), an
|
|
782
|
+
* by Amazon Internet Services Pvt. Ltd (AISPL), an Amazon Web Services seller in India, you
|
|
777
783
|
* can invite only other AISPL accounts to your organization. You can't combine
|
|
778
|
-
* accounts from AISPL and
|
|
779
|
-
* information, see <a href="
|
|
784
|
+
* accounts from AISPL and Amazon Web Services or from any other Amazon Web Services seller. For more
|
|
785
|
+
* information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/useconsolidatedbilliing-India.html">Consolidated
|
|
780
786
|
* Billing in India</a>.</p>
|
|
781
787
|
* </li>
|
|
782
788
|
* <li>
|
|
783
789
|
* <p>If you receive an exception that indicates that you exceeded your account
|
|
784
790
|
* limits for the organization or that the operation failed because your
|
|
785
791
|
* organization is still initializing, wait one hour and then try again. If the
|
|
786
|
-
* error persists after an hour, contact <a href="https://console.aws.amazon.com/support/home#/">
|
|
792
|
+
* error persists after an hour, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
787
793
|
* </li>
|
|
788
794
|
* </ul>
|
|
789
795
|
* </important>
|
|
@@ -811,7 +817,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
811
817
|
* <li>
|
|
812
818
|
* <p>You can leave an organization as a member account only if the account is
|
|
813
819
|
* configured with the information required to operate as a standalone account.
|
|
814
|
-
* When you create an account in an organization using the
|
|
820
|
+
* When you create an account in an organization using the Organizations console,
|
|
815
821
|
* API, or CLI commands, the information required of standalone accounts is
|
|
816
822
|
* <i>not</i> automatically collected. For each account that
|
|
817
823
|
* you want to make standalone, you must perform the following steps. If any of
|
|
@@ -828,29 +834,29 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
828
834
|
* <p>Provide a current payment method</p>
|
|
829
835
|
* </li>
|
|
830
836
|
* </ul>
|
|
831
|
-
* <p>
|
|
832
|
-
*
|
|
833
|
-
* organization. Follow the steps at <a href="
|
|
837
|
+
* <p>Amazon Web Services uses the payment method to charge for any billable (not free tier)
|
|
838
|
+
* Amazon Web Services activity that occurs while the account isn't attached to an
|
|
839
|
+
* organization. Follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization when all required account information has not
|
|
834
840
|
* yet been provided</a> in the
|
|
835
|
-
* <i>
|
|
841
|
+
* <i>Organizations User Guide.</i>
|
|
836
842
|
* </p>
|
|
837
843
|
* </li>
|
|
838
844
|
* <li>
|
|
839
845
|
* <p>The account that you want to leave must not be a delegated administrator
|
|
840
|
-
* account for any
|
|
846
|
+
* account for any Amazon Web Services service enabled for your organization. If the account
|
|
841
847
|
* is a delegated administrator, you must first change the delegated
|
|
842
848
|
* administrator account to another account that is remaining in the
|
|
843
849
|
* organization.</p>
|
|
844
850
|
* </li>
|
|
845
851
|
* <li>
|
|
846
852
|
* <p>You can leave an organization only after you enable IAM user access to
|
|
847
|
-
* billing in your account. For more information, see <a href="
|
|
848
|
-
*
|
|
853
|
+
* billing in your account. For more information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate">Activating Access to the Billing and Cost Management Console</a> in the
|
|
854
|
+
* <i>Amazon Web Services Billing and Cost Management User Guide.</i>
|
|
849
855
|
* </p>
|
|
850
856
|
* </li>
|
|
851
857
|
* <li>
|
|
852
858
|
* <p>After the account leaves the organization, all tags that were attached to
|
|
853
|
-
* the account object in the organization are deleted.
|
|
859
|
+
* the account object in the organization are deleted. Amazon Web Services accounts outside
|
|
854
860
|
* of an organization do not support tags.</p>
|
|
855
861
|
* </li>
|
|
856
862
|
* <li>
|
|
@@ -876,7 +882,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
876
882
|
* when there are no more results to display.</p>
|
|
877
883
|
* </note>
|
|
878
884
|
* <p>This operation can be called only from the organization's
|
|
879
|
-
* management account or by a member account that is a delegated administrator for an
|
|
885
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
880
886
|
*/
|
|
881
887
|
listAccounts(args: ListAccountsCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountsCommandOutput>;
|
|
882
888
|
listAccounts(args: ListAccountsCommandInput, cb: (err: any, data?: ListAccountsCommandOutput) => void): void;
|
|
@@ -896,21 +902,21 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
896
902
|
* when there are no more results to display.</p>
|
|
897
903
|
* </note>
|
|
898
904
|
* <p>This operation can be called only from the organization's
|
|
899
|
-
* management account or by a member account that is a delegated administrator for an
|
|
905
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
900
906
|
*/
|
|
901
907
|
listAccountsForParent(args: ListAccountsForParentCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountsForParentCommandOutput>;
|
|
902
908
|
listAccountsForParent(args: ListAccountsForParentCommandInput, cb: (err: any, data?: ListAccountsForParentCommandOutput) => void): void;
|
|
903
909
|
listAccountsForParent(args: ListAccountsForParentCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountsForParentCommandOutput) => void): void;
|
|
904
910
|
/**
|
|
905
|
-
* <p>Returns a list of the
|
|
911
|
+
* <p>Returns a list of the Amazon Web Services services that you enabled to integrate with your
|
|
906
912
|
* organization. After a service on this list creates the resources that it requires for
|
|
907
913
|
* the integration, it can perform operations on your organization and its accounts.</p>
|
|
908
|
-
* <p>For more information about integrating other services with
|
|
909
|
-
* list of services that currently work with Organizations, see <a href="
|
|
910
|
-
*
|
|
914
|
+
* <p>For more information about integrating other services with Organizations, including the
|
|
915
|
+
* list of services that currently work with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating Organizations with Other
|
|
916
|
+
* Amazon Web Services Services</a> in the <i>Organizations User Guide.</i>
|
|
911
917
|
* </p>
|
|
912
918
|
* <p>This operation can be called only from the organization's
|
|
913
|
-
* management account or by a member account that is a delegated administrator for an
|
|
919
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
914
920
|
*/
|
|
915
921
|
listAWSServiceAccessForOrganization(args: ListAWSServiceAccessForOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<ListAWSServiceAccessForOrganizationCommandOutput>;
|
|
916
922
|
listAWSServiceAccessForOrganization(args: ListAWSServiceAccessForOrganizationCommandInput, cb: (err: any, data?: ListAWSServiceAccessForOrganizationCommandOutput) => void): void;
|
|
@@ -928,7 +934,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
928
934
|
* when there are no more results to display.</p>
|
|
929
935
|
* </note>
|
|
930
936
|
* <p>This operation can be called only from the organization's
|
|
931
|
-
* management account or by a member account that is a delegated administrator for an
|
|
937
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
932
938
|
*/
|
|
933
939
|
listChildren(args: ListChildrenCommandInput, options?: __HttpHandlerOptions): Promise<ListChildrenCommandOutput>;
|
|
934
940
|
listChildren(args: ListChildrenCommandInput, cb: (err: any, data?: ListChildrenCommandOutput) => void): void;
|
|
@@ -945,25 +951,25 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
945
951
|
* when there are no more results to display.</p>
|
|
946
952
|
* </note>
|
|
947
953
|
* <p>This operation can be called only from the organization's
|
|
948
|
-
* management account or by a member account that is a delegated administrator for an
|
|
954
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
949
955
|
*/
|
|
950
956
|
listCreateAccountStatus(args: ListCreateAccountStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListCreateAccountStatusCommandOutput>;
|
|
951
957
|
listCreateAccountStatus(args: ListCreateAccountStatusCommandInput, cb: (err: any, data?: ListCreateAccountStatusCommandOutput) => void): void;
|
|
952
958
|
listCreateAccountStatus(args: ListCreateAccountStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListCreateAccountStatusCommandOutput) => void): void;
|
|
953
959
|
/**
|
|
954
|
-
* <p>Lists the
|
|
960
|
+
* <p>Lists the Amazon Web Services accounts that are designated as delegated administrators in this
|
|
955
961
|
* organization.</p>
|
|
956
962
|
* <p>This operation can be called only from the organization's
|
|
957
|
-
* management account or by a member account that is a delegated administrator for an
|
|
963
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
958
964
|
*/
|
|
959
965
|
listDelegatedAdministrators(args: ListDelegatedAdministratorsCommandInput, options?: __HttpHandlerOptions): Promise<ListDelegatedAdministratorsCommandOutput>;
|
|
960
966
|
listDelegatedAdministrators(args: ListDelegatedAdministratorsCommandInput, cb: (err: any, data?: ListDelegatedAdministratorsCommandOutput) => void): void;
|
|
961
967
|
listDelegatedAdministrators(args: ListDelegatedAdministratorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListDelegatedAdministratorsCommandOutput) => void): void;
|
|
962
968
|
/**
|
|
963
|
-
* <p>List the
|
|
969
|
+
* <p>List the Amazon Web Services services for which the specified account is a delegated
|
|
964
970
|
* administrator.</p>
|
|
965
971
|
* <p>This operation can be called only from the organization's
|
|
966
|
-
* management account or by a member account that is a delegated administrator for an
|
|
972
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
967
973
|
*/
|
|
968
974
|
listDelegatedServicesForAccount(args: ListDelegatedServicesForAccountCommandInput, options?: __HttpHandlerOptions): Promise<ListDelegatedServicesForAccountCommandOutput>;
|
|
969
975
|
listDelegatedServicesForAccount(args: ListDelegatedServicesForAccountCommandInput, cb: (err: any, data?: ListDelegatedServicesForAccountCommandOutput) => void): void;
|
|
@@ -971,9 +977,10 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
971
977
|
/**
|
|
972
978
|
* <p>Lists the current handshakes that are associated with the account of the requesting
|
|
973
979
|
* user.</p>
|
|
974
|
-
* <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
|
|
975
|
-
* <code>CANCELED</code> appear in the results of this API for
|
|
976
|
-
* changing to that state. After that, they're deleted and no longer
|
|
980
|
+
* <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
|
|
981
|
+
* <code>CANCELED</code>, or <code>EXPIRED</code> appear in the results of this API for
|
|
982
|
+
* only 30 days after changing to that state. After that, they're deleted and no longer
|
|
983
|
+
* accessible.</p>
|
|
977
984
|
* <note>
|
|
978
985
|
* <p>Always check the <code>NextToken</code> response parameter
|
|
979
986
|
* for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
|
|
@@ -992,9 +999,10 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
992
999
|
* user is part of. The <code>ListHandshakesForOrganization</code> operation returns a list
|
|
993
1000
|
* of handshake structures. Each structure contains details and status about a
|
|
994
1001
|
* handshake.</p>
|
|
995
|
-
* <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
|
|
996
|
-
* <code>CANCELED</code> appear in the results of this API for
|
|
997
|
-
* changing to that state. After that, they're deleted and no longer
|
|
1002
|
+
* <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
|
|
1003
|
+
* <code>CANCELED</code>, or <code>EXPIRED</code> appear in the results of this API for
|
|
1004
|
+
* only 30 days after changing to that state. After that, they're deleted and no longer
|
|
1005
|
+
* accessible.</p>
|
|
998
1006
|
* <note>
|
|
999
1007
|
* <p>Always check the <code>NextToken</code> response parameter
|
|
1000
1008
|
* for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
|
|
@@ -1004,7 +1012,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1004
1012
|
* when there are no more results to display.</p>
|
|
1005
1013
|
* </note>
|
|
1006
1014
|
* <p>This operation can be called only from the organization's
|
|
1007
|
-
* management account or by a member account that is a delegated administrator for an
|
|
1015
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
1008
1016
|
*/
|
|
1009
1017
|
listHandshakesForOrganization(args: ListHandshakesForOrganizationCommandInput, options?: __HttpHandlerOptions): Promise<ListHandshakesForOrganizationCommandOutput>;
|
|
1010
1018
|
listHandshakesForOrganization(args: ListHandshakesForOrganizationCommandInput, cb: (err: any, data?: ListHandshakesForOrganizationCommandOutput) => void): void;
|
|
@@ -1020,7 +1028,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1020
1028
|
* when there are no more results to display.</p>
|
|
1021
1029
|
* </note>
|
|
1022
1030
|
* <p>This operation can be called only from the organization's
|
|
1023
|
-
* management account or by a member account that is a delegated administrator for an
|
|
1031
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
1024
1032
|
*/
|
|
1025
1033
|
listOrganizationalUnitsForParent(args: ListOrganizationalUnitsForParentCommandInput, options?: __HttpHandlerOptions): Promise<ListOrganizationalUnitsForParentCommandOutput>;
|
|
1026
1034
|
listOrganizationalUnitsForParent(args: ListOrganizationalUnitsForParentCommandInput, cb: (err: any, data?: ListOrganizationalUnitsForParentCommandOutput) => void): void;
|
|
@@ -1038,7 +1046,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1038
1046
|
* when there are no more results to display.</p>
|
|
1039
1047
|
* </note>
|
|
1040
1048
|
* <p>This operation can be called only from the organization's
|
|
1041
|
-
* management account or by a member account that is a delegated administrator for an
|
|
1049
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
1042
1050
|
* <note>
|
|
1043
1051
|
* <p>In the current release, a child can have only a single parent.</p>
|
|
1044
1052
|
* </note>
|
|
@@ -1057,7 +1065,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1057
1065
|
* when there are no more results to display.</p>
|
|
1058
1066
|
* </note>
|
|
1059
1067
|
* <p>This operation can be called only from the organization's
|
|
1060
|
-
* management account or by a member account that is a delegated administrator for an
|
|
1068
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
1061
1069
|
*/
|
|
1062
1070
|
listPolicies(args: ListPoliciesCommandInput, options?: __HttpHandlerOptions): Promise<ListPoliciesCommandOutput>;
|
|
1063
1071
|
listPolicies(args: ListPoliciesCommandInput, cb: (err: any, data?: ListPoliciesCommandOutput) => void): void;
|
|
@@ -1075,7 +1083,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1075
1083
|
* when there are no more results to display.</p>
|
|
1076
1084
|
* </note>
|
|
1077
1085
|
* <p>This operation can be called only from the organization's
|
|
1078
|
-
* management account or by a member account that is a delegated administrator for an
|
|
1086
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
1079
1087
|
*/
|
|
1080
1088
|
listPoliciesForTarget(args: ListPoliciesForTargetCommandInput, options?: __HttpHandlerOptions): Promise<ListPoliciesForTargetCommandOutput>;
|
|
1081
1089
|
listPoliciesForTarget(args: ListPoliciesForTargetCommandInput, cb: (err: any, data?: ListPoliciesForTargetCommandOutput) => void): void;
|
|
@@ -1091,7 +1099,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1091
1099
|
* when there are no more results to display.</p>
|
|
1092
1100
|
* </note>
|
|
1093
1101
|
* <p>This operation can be called only from the organization's
|
|
1094
|
-
* management account or by a member account that is a delegated administrator for an
|
|
1102
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
1095
1103
|
* <note>
|
|
1096
1104
|
* <p>Policy types can be enabled and disabled in roots. This is distinct from whether
|
|
1097
1105
|
* they're available in the organization. When you enable all features, you make policy
|
|
@@ -1105,10 +1113,10 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1105
1113
|
listRoots(args: ListRootsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListRootsCommandOutput) => void): void;
|
|
1106
1114
|
/**
|
|
1107
1115
|
* <p>Lists tags that are attached to the specified resource.</p>
|
|
1108
|
-
* <p>You can attach tags to the following resources in
|
|
1116
|
+
* <p>You can attach tags to the following resources in Organizations.</p>
|
|
1109
1117
|
* <ul>
|
|
1110
1118
|
* <li>
|
|
1111
|
-
* <p>
|
|
1119
|
+
* <p>Amazon Web Services account</p>
|
|
1112
1120
|
* </li>
|
|
1113
1121
|
* <li>
|
|
1114
1122
|
* <p>Organization root</p>
|
|
@@ -1121,7 +1129,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1121
1129
|
* </li>
|
|
1122
1130
|
* </ul>
|
|
1123
1131
|
* <p>This operation can be called only from the organization's
|
|
1124
|
-
* management account or by a member account that is a delegated administrator for an
|
|
1132
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
1125
1133
|
*/
|
|
1126
1134
|
listTagsForResource(args: ListTagsForResourceCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsForResourceCommandOutput>;
|
|
1127
1135
|
listTagsForResource(args: ListTagsForResourceCommandInput, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
|
|
@@ -1138,7 +1146,7 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1138
1146
|
* when there are no more results to display.</p>
|
|
1139
1147
|
* </note>
|
|
1140
1148
|
* <p>This operation can be called only from the organization's
|
|
1141
|
-
* management account or by a member account that is a delegated administrator for an
|
|
1149
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
1142
1150
|
*/
|
|
1143
1151
|
listTargetsForPolicy(args: ListTargetsForPolicyCommandInput, options?: __HttpHandlerOptions): Promise<ListTargetsForPolicyCommandOutput>;
|
|
1144
1152
|
listTargetsForPolicy(args: ListTargetsForPolicyCommandInput, cb: (err: any, data?: ListTargetsForPolicyCommandOutput) => void): void;
|
|
@@ -1153,12 +1161,12 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1153
1161
|
moveAccount(args: MoveAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: MoveAccountCommandOutput) => void): void;
|
|
1154
1162
|
/**
|
|
1155
1163
|
* <p>Enables the specified member account to administer the Organizations features of the specified
|
|
1156
|
-
*
|
|
1157
|
-
* requires IAM permissions to access and administer the
|
|
1158
|
-
* <p>You can run this action only for
|
|
1164
|
+
* Amazon Web Services service. It grants read-only access to Organizations service data. The account still
|
|
1165
|
+
* requires IAM permissions to access and administer the Amazon Web Services service.</p>
|
|
1166
|
+
* <p>You can run this action only for Amazon Web Services services that support this
|
|
1159
1167
|
* feature. For a current list of services that support it, see the column <i>Supports
|
|
1160
|
-
* Delegated Administrator</i> in the table at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">
|
|
1161
|
-
*
|
|
1168
|
+
* Delegated Administrator</i> in the table at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">Amazon Web Services Services that you can use with
|
|
1169
|
+
* Organizations</a> in the <i>Organizations User Guide.</i>
|
|
1162
1170
|
* </p>
|
|
1163
1171
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
1164
1172
|
*/
|
|
@@ -1177,29 +1185,29 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1177
1185
|
* <li>
|
|
1178
1186
|
* <p>You can remove an account from your organization only if the account is
|
|
1179
1187
|
* configured with the information required to operate as a standalone account.
|
|
1180
|
-
* When you create an account in an organization using the
|
|
1188
|
+
* When you create an account in an organization using the Organizations console,
|
|
1181
1189
|
* API, or CLI commands, the information required of standalone accounts is
|
|
1182
1190
|
* <i>not</i> automatically collected. For an account that
|
|
1183
1191
|
* you want to make standalone, you must choose a support plan, provide and
|
|
1184
1192
|
* verify the required contact information, and provide a current payment
|
|
1185
|
-
* method.
|
|
1186
|
-
* tier)
|
|
1193
|
+
* method. Amazon Web Services uses the payment method to charge for any billable (not free
|
|
1194
|
+
* tier) Amazon Web Services activity that occurs while the account isn't attached to an
|
|
1187
1195
|
* organization. To remove an account that doesn't yet have this information,
|
|
1188
|
-
* you must sign in as the member account and follow the steps at <a href="
|
|
1196
|
+
* you must sign in as the member account and follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization when all required account information has not
|
|
1189
1197
|
* yet been provided</a> in the
|
|
1190
|
-
* <i>
|
|
1198
|
+
* <i>Organizations User Guide.</i>
|
|
1191
1199
|
* </p>
|
|
1192
1200
|
* </li>
|
|
1193
1201
|
* <li>
|
|
1194
1202
|
* <p>The account that you want to leave must not be a delegated administrator
|
|
1195
|
-
* account for any
|
|
1203
|
+
* account for any Amazon Web Services service enabled for your organization. If the account
|
|
1196
1204
|
* is a delegated administrator, you must first change the delegated
|
|
1197
1205
|
* administrator account to another account that is remaining in the
|
|
1198
1206
|
* organization.</p>
|
|
1199
1207
|
* </li>
|
|
1200
1208
|
* <li>
|
|
1201
1209
|
* <p>After the account leaves the organization, all tags that were attached to
|
|
1202
|
-
* the account object in the organization are deleted.
|
|
1210
|
+
* the account object in the organization are deleted. Amazon Web Services accounts outside
|
|
1203
1211
|
* of an organization do not support tags.</p>
|
|
1204
1212
|
* </li>
|
|
1205
1213
|
* </ul>
|
|
@@ -1210,10 +1218,10 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1210
1218
|
removeAccountFromOrganization(args: RemoveAccountFromOrganizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RemoveAccountFromOrganizationCommandOutput) => void): void;
|
|
1211
1219
|
/**
|
|
1212
1220
|
* <p>Adds one or more tags to the specified resource.</p>
|
|
1213
|
-
* <p>Currently, you can attach tags to the following resources in
|
|
1221
|
+
* <p>Currently, you can attach tags to the following resources in Organizations.</p>
|
|
1214
1222
|
* <ul>
|
|
1215
1223
|
* <li>
|
|
1216
|
-
* <p>
|
|
1224
|
+
* <p>Amazon Web Services account</p>
|
|
1217
1225
|
* </li>
|
|
1218
1226
|
* <li>
|
|
1219
1227
|
* <p>Organization root</p>
|
|
@@ -1232,10 +1240,10 @@ export declare class Organizations extends OrganizationsClient {
|
|
|
1232
1240
|
tagResource(args: TagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
|
|
1233
1241
|
/**
|
|
1234
1242
|
* <p>Removes any tags with the specified keys from the specified resource.</p>
|
|
1235
|
-
* <p>You can attach tags to the following resources in
|
|
1243
|
+
* <p>You can attach tags to the following resources in Organizations.</p>
|
|
1236
1244
|
* <ul>
|
|
1237
1245
|
* <li>
|
|
1238
|
-
* <p>
|
|
1246
|
+
* <p>Amazon Web Services account</p>
|
|
1239
1247
|
* </li>
|
|
1240
1248
|
* <li>
|
|
1241
1249
|
* <p>Organization root</p>
|