@aws-sdk/client-organizations 3.58.0 → 3.59.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +11 -0
- package/README.md +28 -27
- package/dist-cjs/Organizations.js +15 -0
- package/dist-cjs/commands/CloseAccountCommand.js +36 -0
- package/dist-cjs/commands/index.js +1 -0
- package/dist-cjs/models/models_0.js +44 -4
- package/dist-cjs/protocols/Aws_json1_1.js +109 -3
- package/dist-es/Organizations.js +15 -0
- package/dist-es/commands/CloseAccountCommand.js +39 -0
- package/dist-es/commands/index.js +1 -0
- package/dist-es/models/models_0.js +36 -0
- package/dist-es/protocols/Aws_json1_1.js +133 -1
- package/dist-types/Organizations.d.ts +213 -205
- package/dist-types/OrganizationsClient.d.ts +31 -29
- package/dist-types/commands/AcceptHandshakeCommand.d.ts +8 -7
- package/dist-types/commands/AttachPolicyCommand.d.ts +1 -1
- package/dist-types/commands/CloseAccountCommand.d.ts +35 -0
- package/dist-types/commands/CreateAccountCommand.d.ts +24 -27
- package/dist-types/commands/CreateGovCloudAccountCommand.d.ts +39 -40
- package/dist-types/commands/CreateOrganizationCommand.d.ts +1 -1
- package/dist-types/commands/CreateOrganizationalUnitCommand.d.ts +1 -1
- package/dist-types/commands/CreatePolicyCommand.d.ts +1 -1
- package/dist-types/commands/DeregisterDelegatedAdministratorCommand.d.ts +6 -6
- package/dist-types/commands/DescribeAccountCommand.d.ts +2 -2
- package/dist-types/commands/DescribeCreateAccountStatusCommand.d.ts +1 -1
- package/dist-types/commands/DescribeEffectivePolicyCommand.d.ts +3 -3
- package/dist-types/commands/DescribeOrganizationalUnitCommand.d.ts +1 -1
- package/dist-types/commands/DescribePolicyCommand.d.ts +1 -1
- package/dist-types/commands/DetachPolicyCommand.d.ts +1 -1
- package/dist-types/commands/DisableAWSServiceAccessCommand.d.ts +12 -12
- package/dist-types/commands/DisablePolicyTypeCommand.d.ts +2 -2
- package/dist-types/commands/EnableAWSServiceAccessCommand.d.ts +9 -8
- package/dist-types/commands/EnableAllFeaturesCommand.d.ts +2 -2
- package/dist-types/commands/EnablePolicyTypeCommand.d.ts +1 -1
- package/dist-types/commands/InviteAccountToOrganizationCommand.d.ts +6 -6
- package/dist-types/commands/LeaveOrganizationCommand.d.ts +9 -9
- package/dist-types/commands/ListAWSServiceAccessForOrganizationCommand.d.ts +5 -5
- package/dist-types/commands/ListAccountsCommand.d.ts +1 -1
- package/dist-types/commands/ListAccountsForParentCommand.d.ts +1 -1
- package/dist-types/commands/ListChildrenCommand.d.ts +1 -1
- package/dist-types/commands/ListCreateAccountStatusCommand.d.ts +1 -1
- package/dist-types/commands/ListDelegatedAdministratorsCommand.d.ts +2 -2
- package/dist-types/commands/ListDelegatedServicesForAccountCommand.d.ts +2 -2
- package/dist-types/commands/ListHandshakesForAccountCommand.d.ts +4 -3
- package/dist-types/commands/ListHandshakesForOrganizationCommand.d.ts +5 -4
- package/dist-types/commands/ListOrganizationalUnitsForParentCommand.d.ts +1 -1
- package/dist-types/commands/ListParentsCommand.d.ts +1 -1
- package/dist-types/commands/ListPoliciesCommand.d.ts +1 -1
- package/dist-types/commands/ListPoliciesForTargetCommand.d.ts +1 -1
- package/dist-types/commands/ListRootsCommand.d.ts +1 -1
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +3 -3
- package/dist-types/commands/ListTargetsForPolicyCommand.d.ts +1 -1
- package/dist-types/commands/RegisterDelegatedAdministratorCommand.d.ts +5 -5
- package/dist-types/commands/RemoveAccountFromOrganizationCommand.d.ts +7 -7
- package/dist-types/commands/TagResourceCommand.d.ts +2 -2
- package/dist-types/commands/UntagResourceCommand.d.ts +2 -2
- package/dist-types/commands/index.d.ts +1 -0
- package/dist-types/models/models_0.d.ts +255 -148
- package/dist-types/protocols/Aws_json1_1.d.ts +3 -0
- package/dist-types/ts3.4/Organizations.d.ts +5 -0
- package/dist-types/ts3.4/OrganizationsClient.d.ts +3 -2
- package/dist-types/ts3.4/commands/CloseAccountCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/index.d.ts +1 -0
- package/dist-types/ts3.4/models/models_0.d.ts +30 -0
- package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts +3 -0
- package/package.json +1 -1
|
@@ -10,7 +10,7 @@ export interface DetachPolicyCommandOutput extends __MetadataBearer {
|
|
|
10
10
|
* <p>Detaches a policy from a target root, organizational unit (OU), or account.</p>
|
|
11
11
|
* <important>
|
|
12
12
|
* <p>If the policy being detached is a service control policy (SCP), the changes to
|
|
13
|
-
* permissions for
|
|
13
|
+
* permissions for Identity and Access Management (IAM) users and roles in affected accounts are
|
|
14
14
|
* immediate.</p>
|
|
15
15
|
* </important>
|
|
16
16
|
* <p>Every root, OU, and account must have at least one SCP attached. If you want to
|
|
@@ -7,25 +7,25 @@ export interface DisableAWSServiceAccessCommandInput extends DisableAWSServiceAc
|
|
|
7
7
|
export interface DisableAWSServiceAccessCommandOutput extends __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Disables the integration of an
|
|
11
|
-
* <code>ServicePrincipal</code>) with
|
|
12
|
-
* specified service no longer can create a <a href="
|
|
10
|
+
* <p>Disables the integration of an Amazon Web Services service (the service that is specified by
|
|
11
|
+
* <code>ServicePrincipal</code>) with Organizations. When you disable integration, the
|
|
12
|
+
* specified service no longer can create a <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html">service-linked role</a> in
|
|
13
13
|
* <i>new</i> accounts in your organization. This means the service can't
|
|
14
14
|
* perform operations on your behalf on any new accounts in your organization. The service
|
|
15
15
|
* can still perform operations in older accounts until the service completes its clean-up
|
|
16
|
-
* from
|
|
16
|
+
* from Organizations.</p>
|
|
17
17
|
* <important>
|
|
18
18
|
* <p>We <b>
|
|
19
19
|
* <i>strongly recommend</i>
|
|
20
20
|
* </b> that
|
|
21
|
-
* you don't use this command to disable integration between
|
|
22
|
-
*
|
|
21
|
+
* you don't use this command to disable integration between Organizations and the specified
|
|
22
|
+
* Amazon Web Services service. Instead, use the console or commands that are provided by the
|
|
23
23
|
* specified service. This lets the trusted service perform any required initialization
|
|
24
24
|
* when enabling trusted access, such as creating any required resources and any
|
|
25
25
|
* required clean up of resources when disabling trusted access. </p>
|
|
26
26
|
* <p>For information about how to disable trusted service access to your organization
|
|
27
27
|
* using the trusted service, see the <b>Learn more</b> link
|
|
28
|
-
* under the <b>Supports Trusted Access</b> column at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">
|
|
28
|
+
* under the <b>Supports Trusted Access</b> column at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">Amazon Web Services services that you can use with Organizations</a>. on this page.</p>
|
|
29
29
|
* <p>If you disable access by using this command, it causes the following actions to
|
|
30
30
|
* occur:</p>
|
|
31
31
|
* <ul>
|
|
@@ -34,7 +34,7 @@ export interface DisableAWSServiceAccessCommandOutput extends __MetadataBearer {
|
|
|
34
34
|
* your organization. This means that the service can't perform operations on
|
|
35
35
|
* your behalf on any new accounts in your organization. The service can still
|
|
36
36
|
* perform operations in older accounts until the service completes its
|
|
37
|
-
* clean-up from
|
|
37
|
+
* clean-up from Organizations. </p>
|
|
38
38
|
* </li>
|
|
39
39
|
* <li>
|
|
40
40
|
* <p>The service can no longer perform tasks in the member accounts in the
|
|
@@ -54,13 +54,13 @@ export interface DisableAWSServiceAccessCommandOutput extends __MetadataBearer {
|
|
|
54
54
|
* that the other service is aware that it can clean up any resources that are required
|
|
55
55
|
* only for the integration. How the service cleans up its resources in the
|
|
56
56
|
* organization's accounts depends on that service. For more information, see the
|
|
57
|
-
* documentation for the other
|
|
57
|
+
* documentation for the other Amazon Web Services service. </p>
|
|
58
58
|
* </important>
|
|
59
59
|
* <p>After you perform the <code>DisableAWSServiceAccess</code> operation, the specified
|
|
60
60
|
* service can no longer perform operations in your organization's accounts </p>
|
|
61
|
-
* <p>For more information about integrating other services with
|
|
62
|
-
* list of services that work with Organizations, see <a href="
|
|
63
|
-
*
|
|
61
|
+
* <p>For more information about integrating other services with Organizations, including the
|
|
62
|
+
* list of services that work with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating Organizations with Other
|
|
63
|
+
* Amazon Web Services Services</a> in the <i>Organizations User Guide.</i>
|
|
64
64
|
* </p>
|
|
65
65
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
66
66
|
* @example
|
|
@@ -12,8 +12,8 @@ export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeRespons
|
|
|
12
12
|
* perform this operation, you no longer can attach policies of the specified type to that
|
|
13
13
|
* root or to any organizational unit (OU) or account in that root. You can undo this by
|
|
14
14
|
* using the <a>EnablePolicyType</a> operation.</p>
|
|
15
|
-
* <p>This is an asynchronous request that
|
|
16
|
-
* a policy type for a root, it still appears enabled for the organization if <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">all features</a> are enabled for the organization.
|
|
15
|
+
* <p>This is an asynchronous request that Amazon Web Services performs in the background. If you disable
|
|
16
|
+
* a policy type for a root, it still appears enabled for the organization if <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">all features</a> are enabled for the organization. Amazon Web Services recommends that you
|
|
17
17
|
* first use <a>ListRoots</a> to see the status of policy types for a specified
|
|
18
18
|
* root, and then use this operation.</p>
|
|
19
19
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
@@ -7,24 +7,25 @@ export interface EnableAWSServiceAccessCommandInput extends EnableAWSServiceAcce
|
|
|
7
7
|
export interface EnableAWSServiceAccessCommandOutput extends __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Enables the integration of an
|
|
11
|
-
* <code>ServicePrincipal</code>) with
|
|
12
|
-
* the specified service to create a <a href="
|
|
10
|
+
* <p>Enables the integration of an Amazon Web Services service (the service that is specified by
|
|
11
|
+
* <code>ServicePrincipal</code>) with Organizations. When you enable integration, you allow
|
|
12
|
+
* the specified service to create a <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html">service-linked role</a> in
|
|
13
13
|
* all the accounts in your organization. This allows the service to perform operations on
|
|
14
14
|
* your behalf in your organization and its accounts.</p>
|
|
15
15
|
* <important>
|
|
16
|
-
* <p>We recommend that you enable integration between
|
|
16
|
+
* <p>We recommend that you enable integration between Organizations and the specified Amazon Web Services
|
|
17
17
|
* service by using the console or commands that are provided by the specified service.
|
|
18
18
|
* Doing so ensures that the service is aware that it can create the resources that are
|
|
19
19
|
* required for the integration. How the service creates those resources in the
|
|
20
20
|
* organization's accounts depends on that service. For more information, see the
|
|
21
|
-
* documentation for the other
|
|
21
|
+
* documentation for the other Amazon Web Services service.</p>
|
|
22
22
|
* </important>
|
|
23
|
-
* <p>For more information about enabling services to integrate with
|
|
24
|
-
*
|
|
23
|
+
* <p>For more information about enabling services to integrate with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating
|
|
24
|
+
* Organizations with Other Amazon Web Services Services</a> in the
|
|
25
|
+
* <i>Organizations User Guide.</i>
|
|
25
26
|
* </p>
|
|
26
27
|
* <p>This operation can be called only from the organization's management account and only
|
|
27
|
-
* if the organization has <a href="
|
|
28
|
+
* if the organization has <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">enabled all
|
|
28
29
|
* features</a>.</p>
|
|
29
30
|
* @example
|
|
30
31
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,9 +10,9 @@ export interface EnableAllFeaturesCommandOutput extends EnableAllFeaturesRespons
|
|
|
10
10
|
* <p>Enables all features in an organization. This enables the use of organization policies
|
|
11
11
|
* that can restrict the services and actions that can be called in each account. Until you
|
|
12
12
|
* enable all features, you have access only to consolidated billing, and you can't use any
|
|
13
|
-
* of the advanced account administration features that
|
|
13
|
+
* of the advanced account administration features that Organizations supports. For more
|
|
14
14
|
* information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling All Features in Your Organization</a> in the
|
|
15
|
-
* <i>
|
|
15
|
+
* <i>Organizations User Guide.</i>
|
|
16
16
|
* </p>
|
|
17
17
|
* <important>
|
|
18
18
|
* <p>This operation is required only for organizations that were created explicitly
|
|
@@ -11,7 +11,7 @@ export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse,
|
|
|
11
11
|
* attach policies of that type to the root, any organizational unit (OU), or account in
|
|
12
12
|
* that root. You can undo this by using the <a>DisablePolicyType</a>
|
|
13
13
|
* operation.</p>
|
|
14
|
-
* <p>This is an asynchronous request that
|
|
14
|
+
* <p>This is an asynchronous request that Amazon Web Services performs in the background. Amazon Web Services
|
|
15
15
|
* recommends that you first use <a>ListRoots</a> to see the status of policy
|
|
16
16
|
* types for a specified root, and then use this operation.</p>
|
|
17
17
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
@@ -8,25 +8,25 @@ export interface InviteAccountToOrganizationCommandOutput extends InviteAccountT
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Sends an invitation to another account to join your organization as a member account.
|
|
11
|
-
*
|
|
11
|
+
* Organizations sends email on your behalf to the email address that is associated with the
|
|
12
12
|
* other account's owner. The invitation is implemented as a <a>Handshake</a>
|
|
13
13
|
* whose details are in the response.</p>
|
|
14
14
|
* <important>
|
|
15
15
|
* <ul>
|
|
16
16
|
* <li>
|
|
17
|
-
* <p>You can invite
|
|
17
|
+
* <p>You can invite Amazon Web Services accounts only from the same seller as the management
|
|
18
18
|
* account. For example, if your organization's management account was created
|
|
19
|
-
* by Amazon Internet Services Pvt. Ltd (AISPL), an
|
|
19
|
+
* by Amazon Internet Services Pvt. Ltd (AISPL), an Amazon Web Services seller in India, you
|
|
20
20
|
* can invite only other AISPL accounts to your organization. You can't combine
|
|
21
|
-
* accounts from AISPL and
|
|
22
|
-
* information, see <a href="
|
|
21
|
+
* accounts from AISPL and Amazon Web Services or from any other Amazon Web Services seller. For more
|
|
22
|
+
* information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/useconsolidatedbilliing-India.html">Consolidated
|
|
23
23
|
* Billing in India</a>.</p>
|
|
24
24
|
* </li>
|
|
25
25
|
* <li>
|
|
26
26
|
* <p>If you receive an exception that indicates that you exceeded your account
|
|
27
27
|
* limits for the organization or that the operation failed because your
|
|
28
28
|
* organization is still initializing, wait one hour and then try again. If the
|
|
29
|
-
* error persists after an hour, contact <a href="https://console.aws.amazon.com/support/home#/">
|
|
29
|
+
* error persists after an hour, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
30
30
|
* </li>
|
|
31
31
|
* </ul>
|
|
32
32
|
* </important>
|
|
@@ -22,7 +22,7 @@ export interface LeaveOrganizationCommandOutput extends __MetadataBearer {
|
|
|
22
22
|
* <li>
|
|
23
23
|
* <p>You can leave an organization as a member account only if the account is
|
|
24
24
|
* configured with the information required to operate as a standalone account.
|
|
25
|
-
* When you create an account in an organization using the
|
|
25
|
+
* When you create an account in an organization using the Organizations console,
|
|
26
26
|
* API, or CLI commands, the information required of standalone accounts is
|
|
27
27
|
* <i>not</i> automatically collected. For each account that
|
|
28
28
|
* you want to make standalone, you must perform the following steps. If any of
|
|
@@ -39,29 +39,29 @@ export interface LeaveOrganizationCommandOutput extends __MetadataBearer {
|
|
|
39
39
|
* <p>Provide a current payment method</p>
|
|
40
40
|
* </li>
|
|
41
41
|
* </ul>
|
|
42
|
-
* <p>
|
|
43
|
-
*
|
|
44
|
-
* organization. Follow the steps at <a href="
|
|
42
|
+
* <p>Amazon Web Services uses the payment method to charge for any billable (not free tier)
|
|
43
|
+
* Amazon Web Services activity that occurs while the account isn't attached to an
|
|
44
|
+
* organization. Follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization when all required account information has not
|
|
45
45
|
* yet been provided</a> in the
|
|
46
|
-
* <i>
|
|
46
|
+
* <i>Organizations User Guide.</i>
|
|
47
47
|
* </p>
|
|
48
48
|
* </li>
|
|
49
49
|
* <li>
|
|
50
50
|
* <p>The account that you want to leave must not be a delegated administrator
|
|
51
|
-
* account for any
|
|
51
|
+
* account for any Amazon Web Services service enabled for your organization. If the account
|
|
52
52
|
* is a delegated administrator, you must first change the delegated
|
|
53
53
|
* administrator account to another account that is remaining in the
|
|
54
54
|
* organization.</p>
|
|
55
55
|
* </li>
|
|
56
56
|
* <li>
|
|
57
57
|
* <p>You can leave an organization only after you enable IAM user access to
|
|
58
|
-
* billing in your account. For more information, see <a href="
|
|
59
|
-
*
|
|
58
|
+
* billing in your account. For more information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate">Activating Access to the Billing and Cost Management Console</a> in the
|
|
59
|
+
* <i>Amazon Web Services Billing and Cost Management User Guide.</i>
|
|
60
60
|
* </p>
|
|
61
61
|
* </li>
|
|
62
62
|
* <li>
|
|
63
63
|
* <p>After the account leaves the organization, all tags that were attached to
|
|
64
|
-
* the account object in the organization are deleted.
|
|
64
|
+
* the account object in the organization are deleted. Amazon Web Services accounts outside
|
|
65
65
|
* of an organization do not support tags.</p>
|
|
66
66
|
* </li>
|
|
67
67
|
* <li>
|
|
@@ -7,15 +7,15 @@ export interface ListAWSServiceAccessForOrganizationCommandInput extends ListAWS
|
|
|
7
7
|
export interface ListAWSServiceAccessForOrganizationCommandOutput extends ListAWSServiceAccessForOrganizationResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Returns a list of the
|
|
10
|
+
* <p>Returns a list of the Amazon Web Services services that you enabled to integrate with your
|
|
11
11
|
* organization. After a service on this list creates the resources that it requires for
|
|
12
12
|
* the integration, it can perform operations on your organization and its accounts.</p>
|
|
13
|
-
* <p>For more information about integrating other services with
|
|
14
|
-
* list of services that currently work with Organizations, see <a href="
|
|
15
|
-
*
|
|
13
|
+
* <p>For more information about integrating other services with Organizations, including the
|
|
14
|
+
* list of services that currently work with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Integrating Organizations with Other
|
|
15
|
+
* Amazon Web Services Services</a> in the <i>Organizations User Guide.</i>
|
|
16
16
|
* </p>
|
|
17
17
|
* <p>This operation can be called only from the organization's
|
|
18
|
-
* management account or by a member account that is a delegated administrator for an
|
|
18
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
19
19
|
* @example
|
|
20
20
|
* Use a bare-bones client and the command you need to make an API call.
|
|
21
21
|
* ```javascript
|
|
@@ -18,7 +18,7 @@ export interface ListAccountsCommandOutput extends ListAccountsResponse, __Metad
|
|
|
18
18
|
* when there are no more results to display.</p>
|
|
19
19
|
* </note>
|
|
20
20
|
* <p>This operation can be called only from the organization's
|
|
21
|
-
* management account or by a member account that is a delegated administrator for an
|
|
21
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
22
22
|
* @example
|
|
23
23
|
* Use a bare-bones client and the command you need to make an API call.
|
|
24
24
|
* ```javascript
|
|
@@ -21,7 +21,7 @@ export interface ListAccountsForParentCommandOutput extends ListAccountsForParen
|
|
|
21
21
|
* when there are no more results to display.</p>
|
|
22
22
|
* </note>
|
|
23
23
|
* <p>This operation can be called only from the organization's
|
|
24
|
-
* management account or by a member account that is a delegated administrator for an
|
|
24
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
25
25
|
* @example
|
|
26
26
|
* Use a bare-bones client and the command you need to make an API call.
|
|
27
27
|
* ```javascript
|
|
@@ -19,7 +19,7 @@ export interface ListChildrenCommandOutput extends ListChildrenResponse, __Metad
|
|
|
19
19
|
* when there are no more results to display.</p>
|
|
20
20
|
* </note>
|
|
21
21
|
* <p>This operation can be called only from the organization's
|
|
22
|
-
* management account or by a member account that is a delegated administrator for an
|
|
22
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
23
23
|
* @example
|
|
24
24
|
* Use a bare-bones client and the command you need to make an API call.
|
|
25
25
|
* ```javascript
|
|
@@ -18,7 +18,7 @@ export interface ListCreateAccountStatusCommandOutput extends ListCreateAccountS
|
|
|
18
18
|
* when there are no more results to display.</p>
|
|
19
19
|
* </note>
|
|
20
20
|
* <p>This operation can be called only from the organization's
|
|
21
|
-
* management account or by a member account that is a delegated administrator for an
|
|
21
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
22
22
|
* @example
|
|
23
23
|
* Use a bare-bones client and the command you need to make an API call.
|
|
24
24
|
* ```javascript
|
|
@@ -7,10 +7,10 @@ export interface ListDelegatedAdministratorsCommandInput extends ListDelegatedAd
|
|
|
7
7
|
export interface ListDelegatedAdministratorsCommandOutput extends ListDelegatedAdministratorsResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the
|
|
10
|
+
* <p>Lists the Amazon Web Services accounts that are designated as delegated administrators in this
|
|
11
11
|
* organization.</p>
|
|
12
12
|
* <p>This operation can be called only from the organization's
|
|
13
|
-
* management account or by a member account that is a delegated administrator for an
|
|
13
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
14
14
|
* @example
|
|
15
15
|
* Use a bare-bones client and the command you need to make an API call.
|
|
16
16
|
* ```javascript
|
|
@@ -7,10 +7,10 @@ export interface ListDelegatedServicesForAccountCommandInput extends ListDelegat
|
|
|
7
7
|
export interface ListDelegatedServicesForAccountCommandOutput extends ListDelegatedServicesForAccountResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>List the
|
|
10
|
+
* <p>List the Amazon Web Services services for which the specified account is a delegated
|
|
11
11
|
* administrator.</p>
|
|
12
12
|
* <p>This operation can be called only from the organization's
|
|
13
|
-
* management account or by a member account that is a delegated administrator for an
|
|
13
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
14
14
|
* @example
|
|
15
15
|
* Use a bare-bones client and the command you need to make an API call.
|
|
16
16
|
* ```javascript
|
|
@@ -9,9 +9,10 @@ export interface ListHandshakesForAccountCommandOutput extends ListHandshakesFor
|
|
|
9
9
|
/**
|
|
10
10
|
* <p>Lists the current handshakes that are associated with the account of the requesting
|
|
11
11
|
* user.</p>
|
|
12
|
-
* <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
|
|
13
|
-
* <code>CANCELED</code> appear in the results of this API for
|
|
14
|
-
* changing to that state. After that, they're deleted and no longer
|
|
12
|
+
* <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
|
|
13
|
+
* <code>CANCELED</code>, or <code>EXPIRED</code> appear in the results of this API for
|
|
14
|
+
* only 30 days after changing to that state. After that, they're deleted and no longer
|
|
15
|
+
* accessible.</p>
|
|
15
16
|
* <note>
|
|
16
17
|
* <p>Always check the <code>NextToken</code> response parameter
|
|
17
18
|
* for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
|
|
@@ -11,9 +11,10 @@ export interface ListHandshakesForOrganizationCommandOutput extends ListHandshak
|
|
|
11
11
|
* user is part of. The <code>ListHandshakesForOrganization</code> operation returns a list
|
|
12
12
|
* of handshake structures. Each structure contains details and status about a
|
|
13
13
|
* handshake.</p>
|
|
14
|
-
* <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
|
|
15
|
-
* <code>CANCELED</code> appear in the results of this API for
|
|
16
|
-
* changing to that state. After that, they're deleted and no longer
|
|
14
|
+
* <p>Handshakes that are <code>ACCEPTED</code>, <code>DECLINED</code>,
|
|
15
|
+
* <code>CANCELED</code>, or <code>EXPIRED</code> appear in the results of this API for
|
|
16
|
+
* only 30 days after changing to that state. After that, they're deleted and no longer
|
|
17
|
+
* accessible.</p>
|
|
17
18
|
* <note>
|
|
18
19
|
* <p>Always check the <code>NextToken</code> response parameter
|
|
19
20
|
* for a <code>null</code> value when calling a <code>List*</code> operation. These operations can
|
|
@@ -23,7 +24,7 @@ export interface ListHandshakesForOrganizationCommandOutput extends ListHandshak
|
|
|
23
24
|
* when there are no more results to display.</p>
|
|
24
25
|
* </note>
|
|
25
26
|
* <p>This operation can be called only from the organization's
|
|
26
|
-
* management account or by a member account that is a delegated administrator for an
|
|
27
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
27
28
|
* @example
|
|
28
29
|
* Use a bare-bones client and the command you need to make an API call.
|
|
29
30
|
* ```javascript
|
|
@@ -17,7 +17,7 @@ export interface ListOrganizationalUnitsForParentCommandOutput extends ListOrgan
|
|
|
17
17
|
* when there are no more results to display.</p>
|
|
18
18
|
* </note>
|
|
19
19
|
* <p>This operation can be called only from the organization's
|
|
20
|
-
* management account or by a member account that is a delegated administrator for an
|
|
20
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
21
21
|
* @example
|
|
22
22
|
* Use a bare-bones client and the command you need to make an API call.
|
|
23
23
|
* ```javascript
|
|
@@ -19,7 +19,7 @@ export interface ListParentsCommandOutput extends ListParentsResponse, __Metadat
|
|
|
19
19
|
* when there are no more results to display.</p>
|
|
20
20
|
* </note>
|
|
21
21
|
* <p>This operation can be called only from the organization's
|
|
22
|
-
* management account or by a member account that is a delegated administrator for an
|
|
22
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
23
23
|
* <note>
|
|
24
24
|
* <p>In the current release, a child can have only a single parent.</p>
|
|
25
25
|
* </note>
|
|
@@ -17,7 +17,7 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
|
|
|
17
17
|
* when there are no more results to display.</p>
|
|
18
18
|
* </note>
|
|
19
19
|
* <p>This operation can be called only from the organization's
|
|
20
|
-
* management account or by a member account that is a delegated administrator for an
|
|
20
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
21
21
|
* @example
|
|
22
22
|
* Use a bare-bones client and the command you need to make an API call.
|
|
23
23
|
* ```javascript
|
|
@@ -19,7 +19,7 @@ export interface ListPoliciesForTargetCommandOutput extends ListPoliciesForTarge
|
|
|
19
19
|
* when there are no more results to display.</p>
|
|
20
20
|
* </note>
|
|
21
21
|
* <p>This operation can be called only from the organization's
|
|
22
|
-
* management account or by a member account that is a delegated administrator for an
|
|
22
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
23
23
|
* @example
|
|
24
24
|
* Use a bare-bones client and the command you need to make an API call.
|
|
25
25
|
* ```javascript
|
|
@@ -17,7 +17,7 @@ export interface ListRootsCommandOutput extends ListRootsResponse, __MetadataBea
|
|
|
17
17
|
* when there are no more results to display.</p>
|
|
18
18
|
* </note>
|
|
19
19
|
* <p>This operation can be called only from the organization's
|
|
20
|
-
* management account or by a member account that is a delegated administrator for an
|
|
20
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
21
21
|
* <note>
|
|
22
22
|
* <p>Policy types can be enabled and disabled in roots. This is distinct from whether
|
|
23
23
|
* they're available in the organization. When you enable all features, you make policy
|
|
@@ -8,10 +8,10 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Lists tags that are attached to the specified resource.</p>
|
|
11
|
-
* <p>You can attach tags to the following resources in
|
|
11
|
+
* <p>You can attach tags to the following resources in Organizations.</p>
|
|
12
12
|
* <ul>
|
|
13
13
|
* <li>
|
|
14
|
-
* <p>
|
|
14
|
+
* <p>Amazon Web Services account</p>
|
|
15
15
|
* </li>
|
|
16
16
|
* <li>
|
|
17
17
|
* <p>Organization root</p>
|
|
@@ -24,7 +24,7 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
|
|
|
24
24
|
* </li>
|
|
25
25
|
* </ul>
|
|
26
26
|
* <p>This operation can be called only from the organization's
|
|
27
|
-
* management account or by a member account that is a delegated administrator for an
|
|
27
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
28
28
|
* @example
|
|
29
29
|
* Use a bare-bones client and the command you need to make an API call.
|
|
30
30
|
* ```javascript
|
|
@@ -18,7 +18,7 @@ export interface ListTargetsForPolicyCommandOutput extends ListTargetsForPolicyR
|
|
|
18
18
|
* when there are no more results to display.</p>
|
|
19
19
|
* </note>
|
|
20
20
|
* <p>This operation can be called only from the organization's
|
|
21
|
-
* management account or by a member account that is a delegated administrator for an
|
|
21
|
+
* management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
|
|
22
22
|
* @example
|
|
23
23
|
* Use a bare-bones client and the command you need to make an API call.
|
|
24
24
|
* ```javascript
|
|
@@ -8,12 +8,12 @@ export interface RegisterDelegatedAdministratorCommandOutput extends __MetadataB
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Enables the specified member account to administer the Organizations features of the specified
|
|
11
|
-
*
|
|
12
|
-
* requires IAM permissions to access and administer the
|
|
13
|
-
* <p>You can run this action only for
|
|
11
|
+
* Amazon Web Services service. It grants read-only access to Organizations service data. The account still
|
|
12
|
+
* requires IAM permissions to access and administer the Amazon Web Services service.</p>
|
|
13
|
+
* <p>You can run this action only for Amazon Web Services services that support this
|
|
14
14
|
* feature. For a current list of services that support it, see the column <i>Supports
|
|
15
|
-
* Delegated Administrator</i> in the table at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">
|
|
16
|
-
*
|
|
15
|
+
* Delegated Administrator</i> in the table at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html">Amazon Web Services Services that you can use with
|
|
16
|
+
* Organizations</a> in the <i>Organizations User Guide.</i>
|
|
17
17
|
* </p>
|
|
18
18
|
* <p>This operation can be called only from the organization's management account.</p>
|
|
19
19
|
* @example
|
|
@@ -18,29 +18,29 @@ export interface RemoveAccountFromOrganizationCommandOutput extends __MetadataBe
|
|
|
18
18
|
* <li>
|
|
19
19
|
* <p>You can remove an account from your organization only if the account is
|
|
20
20
|
* configured with the information required to operate as a standalone account.
|
|
21
|
-
* When you create an account in an organization using the
|
|
21
|
+
* When you create an account in an organization using the Organizations console,
|
|
22
22
|
* API, or CLI commands, the information required of standalone accounts is
|
|
23
23
|
* <i>not</i> automatically collected. For an account that
|
|
24
24
|
* you want to make standalone, you must choose a support plan, provide and
|
|
25
25
|
* verify the required contact information, and provide a current payment
|
|
26
|
-
* method.
|
|
27
|
-
* tier)
|
|
26
|
+
* method. Amazon Web Services uses the payment method to charge for any billable (not free
|
|
27
|
+
* tier) Amazon Web Services activity that occurs while the account isn't attached to an
|
|
28
28
|
* organization. To remove an account that doesn't yet have this information,
|
|
29
|
-
* you must sign in as the member account and follow the steps at <a href="
|
|
29
|
+
* you must sign in as the member account and follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info"> To leave an organization when all required account information has not
|
|
30
30
|
* yet been provided</a> in the
|
|
31
|
-
* <i>
|
|
31
|
+
* <i>Organizations User Guide.</i>
|
|
32
32
|
* </p>
|
|
33
33
|
* </li>
|
|
34
34
|
* <li>
|
|
35
35
|
* <p>The account that you want to leave must not be a delegated administrator
|
|
36
|
-
* account for any
|
|
36
|
+
* account for any Amazon Web Services service enabled for your organization. If the account
|
|
37
37
|
* is a delegated administrator, you must first change the delegated
|
|
38
38
|
* administrator account to another account that is remaining in the
|
|
39
39
|
* organization.</p>
|
|
40
40
|
* </li>
|
|
41
41
|
* <li>
|
|
42
42
|
* <p>After the account leaves the organization, all tags that were attached to
|
|
43
|
-
* the account object in the organization are deleted.
|
|
43
|
+
* the account object in the organization are deleted. Amazon Web Services accounts outside
|
|
44
44
|
* of an organization do not support tags.</p>
|
|
45
45
|
* </li>
|
|
46
46
|
* </ul>
|
|
@@ -8,10 +8,10 @@ export interface TagResourceCommandOutput extends __MetadataBearer {
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Adds one or more tags to the specified resource.</p>
|
|
11
|
-
* <p>Currently, you can attach tags to the following resources in
|
|
11
|
+
* <p>Currently, you can attach tags to the following resources in Organizations.</p>
|
|
12
12
|
* <ul>
|
|
13
13
|
* <li>
|
|
14
|
-
* <p>
|
|
14
|
+
* <p>Amazon Web Services account</p>
|
|
15
15
|
* </li>
|
|
16
16
|
* <li>
|
|
17
17
|
* <p>Organization root</p>
|
|
@@ -8,10 +8,10 @@ export interface UntagResourceCommandOutput extends __MetadataBearer {
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Removes any tags with the specified keys from the specified resource.</p>
|
|
11
|
-
* <p>You can attach tags to the following resources in
|
|
11
|
+
* <p>You can attach tags to the following resources in Organizations.</p>
|
|
12
12
|
* <ul>
|
|
13
13
|
* <li>
|
|
14
|
-
* <p>
|
|
14
|
+
* <p>Amazon Web Services account</p>
|
|
15
15
|
* </li>
|
|
16
16
|
* <li>
|
|
17
17
|
* <p>Organization root</p>
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
export * from "./AcceptHandshakeCommand";
|
|
2
2
|
export * from "./AttachPolicyCommand";
|
|
3
3
|
export * from "./CancelHandshakeCommand";
|
|
4
|
+
export * from "./CloseAccountCommand";
|
|
4
5
|
export * from "./CreateAccountCommand";
|
|
5
6
|
export * from "./CreateGovCloudAccountCommand";
|
|
6
7
|
export * from "./CreateOrganizationCommand";
|