@aws-sdk/client-organizations 3.58.0 → 3.59.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +11 -0
- package/README.md +28 -27
- package/dist-cjs/Organizations.js +15 -0
- package/dist-cjs/commands/CloseAccountCommand.js +36 -0
- package/dist-cjs/commands/index.js +1 -0
- package/dist-cjs/models/models_0.js +44 -4
- package/dist-cjs/protocols/Aws_json1_1.js +109 -3
- package/dist-es/Organizations.js +15 -0
- package/dist-es/commands/CloseAccountCommand.js +39 -0
- package/dist-es/commands/index.js +1 -0
- package/dist-es/models/models_0.js +36 -0
- package/dist-es/protocols/Aws_json1_1.js +133 -1
- package/dist-types/Organizations.d.ts +213 -205
- package/dist-types/OrganizationsClient.d.ts +31 -29
- package/dist-types/commands/AcceptHandshakeCommand.d.ts +8 -7
- package/dist-types/commands/AttachPolicyCommand.d.ts +1 -1
- package/dist-types/commands/CloseAccountCommand.d.ts +35 -0
- package/dist-types/commands/CreateAccountCommand.d.ts +24 -27
- package/dist-types/commands/CreateGovCloudAccountCommand.d.ts +39 -40
- package/dist-types/commands/CreateOrganizationCommand.d.ts +1 -1
- package/dist-types/commands/CreateOrganizationalUnitCommand.d.ts +1 -1
- package/dist-types/commands/CreatePolicyCommand.d.ts +1 -1
- package/dist-types/commands/DeregisterDelegatedAdministratorCommand.d.ts +6 -6
- package/dist-types/commands/DescribeAccountCommand.d.ts +2 -2
- package/dist-types/commands/DescribeCreateAccountStatusCommand.d.ts +1 -1
- package/dist-types/commands/DescribeEffectivePolicyCommand.d.ts +3 -3
- package/dist-types/commands/DescribeOrganizationalUnitCommand.d.ts +1 -1
- package/dist-types/commands/DescribePolicyCommand.d.ts +1 -1
- package/dist-types/commands/DetachPolicyCommand.d.ts +1 -1
- package/dist-types/commands/DisableAWSServiceAccessCommand.d.ts +12 -12
- package/dist-types/commands/DisablePolicyTypeCommand.d.ts +2 -2
- package/dist-types/commands/EnableAWSServiceAccessCommand.d.ts +9 -8
- package/dist-types/commands/EnableAllFeaturesCommand.d.ts +2 -2
- package/dist-types/commands/EnablePolicyTypeCommand.d.ts +1 -1
- package/dist-types/commands/InviteAccountToOrganizationCommand.d.ts +6 -6
- package/dist-types/commands/LeaveOrganizationCommand.d.ts +9 -9
- package/dist-types/commands/ListAWSServiceAccessForOrganizationCommand.d.ts +5 -5
- package/dist-types/commands/ListAccountsCommand.d.ts +1 -1
- package/dist-types/commands/ListAccountsForParentCommand.d.ts +1 -1
- package/dist-types/commands/ListChildrenCommand.d.ts +1 -1
- package/dist-types/commands/ListCreateAccountStatusCommand.d.ts +1 -1
- package/dist-types/commands/ListDelegatedAdministratorsCommand.d.ts +2 -2
- package/dist-types/commands/ListDelegatedServicesForAccountCommand.d.ts +2 -2
- package/dist-types/commands/ListHandshakesForAccountCommand.d.ts +4 -3
- package/dist-types/commands/ListHandshakesForOrganizationCommand.d.ts +5 -4
- package/dist-types/commands/ListOrganizationalUnitsForParentCommand.d.ts +1 -1
- package/dist-types/commands/ListParentsCommand.d.ts +1 -1
- package/dist-types/commands/ListPoliciesCommand.d.ts +1 -1
- package/dist-types/commands/ListPoliciesForTargetCommand.d.ts +1 -1
- package/dist-types/commands/ListRootsCommand.d.ts +1 -1
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +3 -3
- package/dist-types/commands/ListTargetsForPolicyCommand.d.ts +1 -1
- package/dist-types/commands/RegisterDelegatedAdministratorCommand.d.ts +5 -5
- package/dist-types/commands/RemoveAccountFromOrganizationCommand.d.ts +7 -7
- package/dist-types/commands/TagResourceCommand.d.ts +2 -2
- package/dist-types/commands/UntagResourceCommand.d.ts +2 -2
- package/dist-types/commands/index.d.ts +1 -0
- package/dist-types/models/models_0.d.ts +255 -148
- package/dist-types/protocols/Aws_json1_1.d.ts +3 -0
- package/dist-types/ts3.4/Organizations.d.ts +5 -0
- package/dist-types/ts3.4/OrganizationsClient.d.ts +3 -2
- package/dist-types/ts3.4/commands/CloseAccountCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/index.d.ts +1 -0
- package/dist-types/ts3.4/models/models_0.d.ts +30 -0
- package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts +3 -0
- package/package.json +1 -1
|
@@ -86,7 +86,7 @@ export declare enum AccessDeniedForDependencyExceptionReason {
|
|
|
86
86
|
/**
|
|
87
87
|
* <p>The operation that you attempted requires you to have the
|
|
88
88
|
* <code>iam:CreateServiceLinkedRole</code> for
|
|
89
|
-
* <code>organizations.amazonaws.com</code> permission so that
|
|
89
|
+
* <code>organizations.amazonaws.com</code> permission so that Organizations can create the
|
|
90
90
|
* required service-linked role. You don't have that permission.</p>
|
|
91
91
|
*/
|
|
92
92
|
export declare class AccessDeniedForDependencyException extends __BaseException {
|
|
@@ -143,6 +143,7 @@ export declare enum HandshakeConstraintViolationExceptionReason {
|
|
|
143
143
|
ALREADY_IN_AN_ORGANIZATION = "ALREADY_IN_AN_ORGANIZATION",
|
|
144
144
|
HANDSHAKE_RATE_LIMIT_EXCEEDED = "HANDSHAKE_RATE_LIMIT_EXCEEDED",
|
|
145
145
|
INVITE_DISABLED_DURING_ENABLE_ALL_FEATURES = "INVITE_DISABLED_DURING_ENABLE_ALL_FEATURES",
|
|
146
|
+
MANAGEMENT_ACCOUNT_EMAIL_NOT_VERIFIED = "MANAGEMENT_ACCOUNT_EMAIL_NOT_VERIFIED",
|
|
146
147
|
ORGANIZATION_ALREADY_HAS_ALL_FEATURES = "ORGANIZATION_ALREADY_HAS_ALL_FEATURES",
|
|
147
148
|
ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD = "ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD",
|
|
148
149
|
ORGANIZATION_IS_ALREADY_PENDING_ALL_FEATURES_MIGRATION = "ORGANIZATION_IS_ALREADY_PENDING_ALL_FEATURES_MIGRATION",
|
|
@@ -164,8 +165,7 @@ export declare enum HandshakeConstraintViolationExceptionReason {
|
|
|
164
165
|
* <important>
|
|
165
166
|
* <p>If you get this exception immediately after creating the organization,
|
|
166
167
|
* wait one hour and try again. If after an hour it continues to fail with this
|
|
167
|
-
* error, contact <a href="https://
|
|
168
|
-
* Support</a>.</p>
|
|
168
|
+
* error, contact <a href="https://docs.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
169
169
|
* </important>
|
|
170
170
|
* </li>
|
|
171
171
|
* <li>
|
|
@@ -285,7 +285,7 @@ export declare enum InvalidInputExceptionReason {
|
|
|
285
285
|
* entity.</p>
|
|
286
286
|
* </li>
|
|
287
287
|
* <li>
|
|
288
|
-
* <p>IMMUTABLE_POLICY: You specified a policy that is managed by
|
|
288
|
+
* <p>IMMUTABLE_POLICY: You specified a policy that is managed by Amazon Web Services and can't be
|
|
289
289
|
* modified.</p>
|
|
290
290
|
* </li>
|
|
291
291
|
* <li>
|
|
@@ -339,7 +339,7 @@ export declare enum InvalidInputExceptionReason {
|
|
|
339
339
|
* <li>
|
|
340
340
|
* <p>INVALID_SYSTEM_TAGS_PARAMETER: You specified a tag key that is a system tag.
|
|
341
341
|
* You can’t add, edit, or delete system tag keys because they're reserved for
|
|
342
|
-
*
|
|
342
|
+
* Amazon Web Services use. System tags don’t count against your tags per resource limit.</p>
|
|
343
343
|
* </li>
|
|
344
344
|
* <li>
|
|
345
345
|
* <p>MAX_FILTER_LIMIT_EXCEEDED: You can specify only one filter parameter for the
|
|
@@ -386,7 +386,7 @@ export declare class InvalidInputException extends __BaseException {
|
|
|
386
386
|
constructor(opts: __ExceptionOptionType<InvalidInputException, __BaseException>);
|
|
387
387
|
}
|
|
388
388
|
/**
|
|
389
|
-
* <p>
|
|
389
|
+
* <p>Organizations can't complete your request because of an internal service error. Try again
|
|
390
390
|
* later.</p>
|
|
391
391
|
*/
|
|
392
392
|
export declare class ServiceException extends __BaseException {
|
|
@@ -401,8 +401,8 @@ export declare class ServiceException extends __BaseException {
|
|
|
401
401
|
/**
|
|
402
402
|
* <p>You have sent too many requests in too short a period of time. The quota helps protect
|
|
403
403
|
* against denial-of-service attacks. Try again later.</p>
|
|
404
|
-
* <p>For information about quotas that affect
|
|
405
|
-
* <i>
|
|
404
|
+
* <p>For information about quotas that affect Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html">Quotas for Organizations</a>in the
|
|
405
|
+
* <i>Organizations User Guide.</i>
|
|
406
406
|
* </p>
|
|
407
407
|
*/
|
|
408
408
|
export declare class TooManyRequestsException extends __BaseException {
|
|
@@ -421,10 +421,11 @@ export declare enum AccountJoinedMethod {
|
|
|
421
421
|
}
|
|
422
422
|
export declare enum AccountStatus {
|
|
423
423
|
ACTIVE = "ACTIVE",
|
|
424
|
+
PENDING_CLOSURE = "PENDING_CLOSURE",
|
|
424
425
|
SUSPENDED = "SUSPENDED"
|
|
425
426
|
}
|
|
426
427
|
/**
|
|
427
|
-
* <p>Contains information about an
|
|
428
|
+
* <p>Contains information about an Amazon Web Services account that is a member of an
|
|
428
429
|
* organization.</p>
|
|
429
430
|
*/
|
|
430
431
|
export interface Account {
|
|
@@ -437,11 +438,11 @@ export interface Account {
|
|
|
437
438
|
/**
|
|
438
439
|
* <p>The Amazon Resource Name (ARN) of the account.</p>
|
|
439
440
|
* <p>For more information about ARNs in Organizations, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies">ARN
|
|
440
|
-
* Formats Supported by Organizations</a> in the <i>
|
|
441
|
+
* Formats Supported by Organizations</a> in the <i>Amazon Web Services Service Authorization Reference</i>.</p>
|
|
441
442
|
*/
|
|
442
443
|
Arn?: string;
|
|
443
444
|
/**
|
|
444
|
-
* <p>The email address associated with the
|
|
445
|
+
* <p>The email address associated with the Amazon Web Services account.</p>
|
|
445
446
|
* <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a> for this parameter is a string of characters that represents a
|
|
446
447
|
* standard internet email address.</p>
|
|
447
448
|
*/
|
|
@@ -473,7 +474,19 @@ export declare namespace Account {
|
|
|
473
474
|
const filterSensitiveLog: (obj: Account) => any;
|
|
474
475
|
}
|
|
475
476
|
/**
|
|
476
|
-
* <p>
|
|
477
|
+
* <p>You attempted to close an account that is already closed.</p>
|
|
478
|
+
*/
|
|
479
|
+
export declare class AccountAlreadyClosedException extends __BaseException {
|
|
480
|
+
readonly name: "AccountAlreadyClosedException";
|
|
481
|
+
readonly $fault: "client";
|
|
482
|
+
Message?: string;
|
|
483
|
+
/**
|
|
484
|
+
* @internal
|
|
485
|
+
*/
|
|
486
|
+
constructor(opts: __ExceptionOptionType<AccountAlreadyClosedException, __BaseException>);
|
|
487
|
+
}
|
|
488
|
+
/**
|
|
489
|
+
* <p>The specified account is already a delegated administrator for this Amazon Web Services
|
|
477
490
|
* service.</p>
|
|
478
491
|
*/
|
|
479
492
|
export declare class AccountAlreadyRegisteredException extends __BaseException {
|
|
@@ -486,7 +499,7 @@ export declare class AccountAlreadyRegisteredException extends __BaseException {
|
|
|
486
499
|
constructor(opts: __ExceptionOptionType<AccountAlreadyRegisteredException, __BaseException>);
|
|
487
500
|
}
|
|
488
501
|
/**
|
|
489
|
-
* <p> We can't find an
|
|
502
|
+
* <p> We can't find an Amazon Web Services account with the <code>AccountId</code> that you specified, or
|
|
490
503
|
* the account whose credentials you used to make this request isn't a member of an
|
|
491
504
|
* organization.</p>
|
|
492
505
|
*/
|
|
@@ -500,7 +513,7 @@ export declare class AccountNotFoundException extends __BaseException {
|
|
|
500
513
|
constructor(opts: __ExceptionOptionType<AccountNotFoundException, __BaseException>);
|
|
501
514
|
}
|
|
502
515
|
/**
|
|
503
|
-
* <p>The specified account is not a delegated administrator for this
|
|
516
|
+
* <p>The specified account is not a delegated administrator for this Amazon Web Services service. </p>
|
|
504
517
|
*/
|
|
505
518
|
export declare class AccountNotRegisteredException extends __BaseException {
|
|
506
519
|
readonly name: "AccountNotRegisteredException";
|
|
@@ -514,8 +527,8 @@ export declare class AccountNotRegisteredException extends __BaseException {
|
|
|
514
527
|
/**
|
|
515
528
|
* <p>You can't invite an existing account to your organization until you verify that you
|
|
516
529
|
* own the email address associated with the management account. For more information, see
|
|
517
|
-
* <a href="
|
|
518
|
-
*
|
|
530
|
+
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_create.html#about-email-verification">Email Address
|
|
531
|
+
* Verification</a> in the <i>Organizations User Guide.</i>
|
|
519
532
|
* </p>
|
|
520
533
|
*/
|
|
521
534
|
export declare class AccountOwnerNotVerifiedException extends __BaseException {
|
|
@@ -587,8 +600,11 @@ export declare enum ConstraintViolationExceptionReason {
|
|
|
587
600
|
ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION = "ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION",
|
|
588
601
|
ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED = "ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED",
|
|
589
602
|
ACCOUNT_NUMBER_LIMIT_EXCEEDED = "ACCOUNT_NUMBER_LIMIT_EXCEEDED",
|
|
603
|
+
CANNOT_CLOSE_MANAGEMENT_ACCOUNT = "CANNOT_CLOSE_MANAGEMENT_ACCOUNT",
|
|
590
604
|
CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR = "CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR",
|
|
591
605
|
CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG = "CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG",
|
|
606
|
+
CLOSE_ACCOUNT_QUOTA_EXCEEDED = "CLOSE_ACCOUNT_QUOTA_EXCEEDED",
|
|
607
|
+
CLOSE_ACCOUNT_REQUESTS_LIMIT_EXCEEDED = "CLOSE_ACCOUNT_REQUESTS_LIMIT_EXCEEDED",
|
|
592
608
|
CREATE_ORGANIZATION_IN_BILLING_MODE_UNSUPPORTED_REGION = "CREATE_ORGANIZATION_IN_BILLING_MODE_UNSUPPORTED_REGION",
|
|
593
609
|
DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE = "DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE",
|
|
594
610
|
EMAIL_VERIFICATION_CODE_EXPIRED = "EMAIL_VERIFICATION_CODE_EXPIRED",
|
|
@@ -608,6 +624,7 @@ export declare enum ConstraintViolationExceptionReason {
|
|
|
608
624
|
OU_NUMBER_LIMIT_EXCEEDED = "OU_NUMBER_LIMIT_EXCEEDED",
|
|
609
625
|
POLICY_CONTENT_LIMIT_EXCEEDED = "POLICY_CONTENT_LIMIT_EXCEEDED",
|
|
610
626
|
POLICY_NUMBER_LIMIT_EXCEEDED = "POLICY_NUMBER_LIMIT_EXCEEDED",
|
|
627
|
+
SERVICE_ACCESS_NOT_ENABLED = "SERVICE_ACCESS_NOT_ENABLED",
|
|
611
628
|
TAG_POLICY_VIOLATION = "TAG_POLICY_VIOLATION",
|
|
612
629
|
WAIT_PERIOD_ACTIVE = "WAIT_PERIOD_ACTIVE"
|
|
613
630
|
}
|
|
@@ -628,19 +645,11 @@ export declare enum ConstraintViolationExceptionReason {
|
|
|
628
645
|
* after you remove all member accounts, delete the organization itself.</p>
|
|
629
646
|
* </li>
|
|
630
647
|
* <li>
|
|
631
|
-
* <p>ACCOUNT_CANNOT_LEAVE_WITHOUT_EULA: You attempted to remove an account from the
|
|
632
|
-
* organization that doesn't yet have enough information to exist as a standalone
|
|
633
|
-
* account. This account requires you to first agree to the AWS Customer
|
|
634
|
-
* Agreement. Follow the steps at <a href="http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#orgs_manage_accounts_remove-from-master">Removing a member account from your organization</a>in the
|
|
635
|
-
* <i>AWS Organizations User Guide.</i>
|
|
636
|
-
* </p>
|
|
637
|
-
* </li>
|
|
638
|
-
* <li>
|
|
639
648
|
* <p>ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION: You attempted to remove an
|
|
640
649
|
* account from the organization that doesn't yet have enough information to exist
|
|
641
650
|
* as a standalone account. This account requires you to first complete phone
|
|
642
|
-
* verification. Follow the steps at <a href="
|
|
643
|
-
* <i>
|
|
651
|
+
* verification. Follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#orgs_manage_accounts_remove-from-master">Removing a member account from your organization</a> in the
|
|
652
|
+
* <i>Organizations User Guide.</i>
|
|
644
653
|
* </p>
|
|
645
654
|
* </li>
|
|
646
655
|
* <li>
|
|
@@ -649,25 +658,26 @@ export declare enum ConstraintViolationExceptionReason {
|
|
|
649
658
|
* </li>
|
|
650
659
|
* <li>
|
|
651
660
|
* <p>ACCOUNT_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the limit on the number
|
|
652
|
-
* of accounts in an organization. If you need more accounts, contact <a href="https://
|
|
653
|
-
* in your limit. </p>
|
|
661
|
+
* of accounts in an organization. If you need more accounts, contact <a href="https://docs.aws.amazon.com/support/home#/">Amazon Web Services Support</a> to
|
|
662
|
+
* request an increase in your limit. </p>
|
|
654
663
|
* <p>Or the number of invitations that you tried to send would cause you to exceed
|
|
655
664
|
* the limit of accounts in your organization. Send fewer invitations or contact
|
|
656
|
-
*
|
|
665
|
+
* Amazon Web Services Support to request an increase in the number of accounts.</p>
|
|
657
666
|
* <note>
|
|
658
667
|
* <p>Deleted and closed accounts still count toward your limit.</p>
|
|
659
668
|
* </note>
|
|
660
669
|
* <important>
|
|
661
670
|
* <p>If you get this exception when running a command immediately after
|
|
662
671
|
* creating the organization, wait one hour and try again. After an hour, if
|
|
663
|
-
* the command continues to fail with this error, contact <a href="https://
|
|
672
|
+
* the command continues to fail with this error, contact <a href="https://docs.aws.amazon.com/support/home#/">Amazon Web Services
|
|
673
|
+
* Support</a>.</p>
|
|
664
674
|
* </important>
|
|
665
675
|
* </li>
|
|
666
676
|
* <li>
|
|
667
677
|
* <p>CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR: You attempted to register
|
|
668
678
|
* the management account of the organization as a delegated administrator for an
|
|
669
|
-
*
|
|
670
|
-
*
|
|
679
|
+
* Amazon Web Services service integrated with Organizations. You can designate only a member account as a
|
|
680
|
+
* delegated administrator.</p>
|
|
671
681
|
* </li>
|
|
672
682
|
* <li>
|
|
673
683
|
* <p>CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG: You attempted to remove an
|
|
@@ -681,8 +691,8 @@ export declare enum ConstraintViolationExceptionReason {
|
|
|
681
691
|
* </li>
|
|
682
692
|
* <li>
|
|
683
693
|
* <p>DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE: You attempted to register an
|
|
684
|
-
*
|
|
685
|
-
* delegated administrator. To complete this operation, you must first deregister
|
|
694
|
+
* Amazon Web Services account as a delegated administrator for an Amazon Web Services service that already has
|
|
695
|
+
* a delegated administrator. To complete this operation, you must first deregister
|
|
686
696
|
* any existing delegated administrators for this service.</p>
|
|
687
697
|
* </li>
|
|
688
698
|
* <li>
|
|
@@ -703,9 +713,9 @@ export declare enum ConstraintViolationExceptionReason {
|
|
|
703
713
|
* marketplace.</p>
|
|
704
714
|
* </li>
|
|
705
715
|
* <li>
|
|
706
|
-
* <p>MASTER_ACCOUNT_MISSING_BUSINESS_LICENSE: Applies only to the
|
|
707
|
-
* China. To create an organization, the master must have a valid business
|
|
708
|
-
* For more information, contact customer support.</p>
|
|
716
|
+
* <p>MASTER_ACCOUNT_MISSING_BUSINESS_LICENSE: Applies only to the Amazon Web Services /> Regions
|
|
717
|
+
* in China. To create an organization, the master must have a valid business
|
|
718
|
+
* license. For more information, contact customer support.</p>
|
|
709
719
|
* </li>
|
|
710
720
|
* <li>
|
|
711
721
|
* <p>MASTER_ACCOUNT_MISSING_CONTACT_INFO: To complete this operation, you must
|
|
@@ -714,17 +724,17 @@ export declare enum ConstraintViolationExceptionReason {
|
|
|
714
724
|
* </li>
|
|
715
725
|
* <li>
|
|
716
726
|
* <p>MASTER_ACCOUNT_NOT_GOVCLOUD_ENABLED: To complete this operation, the
|
|
717
|
-
* management account must have an associated account in the
|
|
718
|
-
* (US-West) Region. For more information, see <a href="
|
|
719
|
-
* the
|
|
720
|
-
* <i>
|
|
727
|
+
* management account must have an associated account in the Amazon Web Services GovCloud
|
|
728
|
+
* (US-West) Region. For more information, see <a href="https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html">Organizations</a>
|
|
729
|
+
* in the
|
|
730
|
+
* <i>Amazon Web Services GovCloud User Guide.</i>
|
|
721
731
|
* </p>
|
|
722
732
|
* </li>
|
|
723
733
|
* <li>
|
|
724
734
|
* <p>MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To create an organization with
|
|
725
735
|
* this management account, you first must associate a valid payment instrument,
|
|
726
|
-
* such as a credit card, with the account. Follow the steps at <a href="
|
|
727
|
-
* been provided</a> in the <i>
|
|
736
|
+
* such as a credit card, with the account. Follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info">To leave an organization when all required account information has not yet
|
|
737
|
+
* been provided</a> in the <i>Organizations User Guide.</i>
|
|
728
738
|
* </p>
|
|
729
739
|
* </li>
|
|
730
740
|
* <li>
|
|
@@ -744,8 +754,8 @@ export declare enum ConstraintViolationExceptionReason {
|
|
|
744
754
|
* <li>
|
|
745
755
|
* <p>MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To complete this operation with
|
|
746
756
|
* this member account, you first must associate a valid payment instrument, such
|
|
747
|
-
* as a credit card, with the account. Follow the steps at <a href="
|
|
748
|
-
* been provided</a> in the <i>
|
|
757
|
+
* as a credit card, with the account. Follow the steps at <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info">To leave an organization when all required account information has not yet
|
|
758
|
+
* been provided</a> in the <i>Organizations User Guide.</i>
|
|
749
759
|
* </p>
|
|
750
760
|
* </li>
|
|
751
761
|
* <li>
|
|
@@ -776,9 +786,19 @@ export declare enum ConstraintViolationExceptionReason {
|
|
|
776
786
|
* that you can have in an organization.</p>
|
|
777
787
|
* </li>
|
|
778
788
|
* <li>
|
|
789
|
+
* <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
|
|
790
|
+
* administrator before you enabled service access. Call the <code>EnableAWSServiceAccess</code> API
|
|
791
|
+
* first.</p>
|
|
792
|
+
* </li>
|
|
793
|
+
* <li>
|
|
779
794
|
* <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
|
|
780
795
|
* that are not compliant with the tag policy requirements for this account.</p>
|
|
781
796
|
* </li>
|
|
797
|
+
* <li>
|
|
798
|
+
* <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, there is a waiting
|
|
799
|
+
* period before you can remove it from the organization. If you get an error that
|
|
800
|
+
* indicates that a wait period is required, try again in a few days.</p>
|
|
801
|
+
* </li>
|
|
782
802
|
* </ul>
|
|
783
803
|
*/
|
|
784
804
|
export declare class ConstraintViolationException extends __BaseException {
|
|
@@ -832,7 +852,7 @@ export declare class PolicyNotFoundException extends __BaseException {
|
|
|
832
852
|
* <p>The specified policy type isn't currently enabled in this root. You can't attach
|
|
833
853
|
* policies of the specified type to entities in a root until you enable that type in the
|
|
834
854
|
* root. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling All Features
|
|
835
|
-
* in Your Organization</a> in the <i>
|
|
855
|
+
* in Your Organization</a> in the <i>Organizations User Guide.</i>
|
|
836
856
|
* </p>
|
|
837
857
|
*/
|
|
838
858
|
export declare class PolicyTypeNotEnabledException extends __BaseException {
|
|
@@ -858,7 +878,7 @@ export declare class TargetNotFoundException extends __BaseException {
|
|
|
858
878
|
constructor(opts: __ExceptionOptionType<TargetNotFoundException, __BaseException>);
|
|
859
879
|
}
|
|
860
880
|
/**
|
|
861
|
-
* <p>This action isn't available in the current
|
|
881
|
+
* <p>This action isn't available in the current Amazon Web Services Region.</p>
|
|
862
882
|
*/
|
|
863
883
|
export declare class UnsupportedAPIEndpointException extends __BaseException {
|
|
864
884
|
readonly name: "UnsupportedAPIEndpointException";
|
|
@@ -884,6 +904,30 @@ export declare namespace CancelHandshakeRequest {
|
|
|
884
904
|
*/
|
|
885
905
|
const filterSensitiveLog: (obj: CancelHandshakeRequest) => any;
|
|
886
906
|
}
|
|
907
|
+
export interface CloseAccountRequest {
|
|
908
|
+
/**
|
|
909
|
+
* <p>Retrieves the Amazon Web Services account Id for the current <code>CloseAccount</code> API request. </p>
|
|
910
|
+
*/
|
|
911
|
+
AccountId: string | undefined;
|
|
912
|
+
}
|
|
913
|
+
export declare namespace CloseAccountRequest {
|
|
914
|
+
/**
|
|
915
|
+
* @internal
|
|
916
|
+
*/
|
|
917
|
+
const filterSensitiveLog: (obj: CloseAccountRequest) => any;
|
|
918
|
+
}
|
|
919
|
+
/**
|
|
920
|
+
* <p>The request failed because it conflicts with the current state of the specified resource.</p>
|
|
921
|
+
*/
|
|
922
|
+
export declare class ConflictException extends __BaseException {
|
|
923
|
+
readonly name: "ConflictException";
|
|
924
|
+
readonly $fault: "client";
|
|
925
|
+
Message?: string;
|
|
926
|
+
/**
|
|
927
|
+
* @internal
|
|
928
|
+
*/
|
|
929
|
+
constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
|
|
930
|
+
}
|
|
887
931
|
export declare enum IAMUserAccessToBilling {
|
|
888
932
|
ALLOW = "ALLOW",
|
|
889
933
|
DENY = "DENY"
|
|
@@ -893,7 +937,7 @@ export declare enum IAMUserAccessToBilling {
|
|
|
893
937
|
* <p>You can attach tags to any of the following organization resources.</p>
|
|
894
938
|
* <ul>
|
|
895
939
|
* <li>
|
|
896
|
-
* <p>
|
|
940
|
+
* <p>Amazon Web Services account</p>
|
|
897
941
|
* </li>
|
|
898
942
|
* <li>
|
|
899
943
|
* <p>Organizational unit (OU)</p>
|
|
@@ -926,9 +970,40 @@ export declare namespace Tag {
|
|
|
926
970
|
export interface CreateAccountRequest {
|
|
927
971
|
/**
|
|
928
972
|
* <p>The email address of the owner to assign to the new member account. This email address
|
|
929
|
-
* must not already be associated with another
|
|
930
|
-
* address to complete account creation
|
|
931
|
-
*
|
|
973
|
+
* must not already be associated with another Amazon Web Services account. You must use a valid email
|
|
974
|
+
* address to complete account creation.</p>
|
|
975
|
+
* <p>The rules for a valid email address:</p>
|
|
976
|
+
* <ul>
|
|
977
|
+
* <li>
|
|
978
|
+
* <p>The address must be a minimum of 6 and a maximum of 64 characters long.</p>
|
|
979
|
+
* </li>
|
|
980
|
+
* <li>
|
|
981
|
+
* <p>All characters must be 7-bit ASCII characters.</p>
|
|
982
|
+
* </li>
|
|
983
|
+
* <li>
|
|
984
|
+
* <p>There must be one and only one @ symbol, which separates the local name from
|
|
985
|
+
* the domain name.</p>
|
|
986
|
+
* </li>
|
|
987
|
+
* <li>
|
|
988
|
+
* <p>The local name can't contain any of the following characters:</p>
|
|
989
|
+
* <p>whitespace, " ' ( ) < > [ ] : ; , \ | % &</p>
|
|
990
|
+
* </li>
|
|
991
|
+
* <li>
|
|
992
|
+
* <p>The local name can't begin with a dot (.)</p>
|
|
993
|
+
* </li>
|
|
994
|
+
* <li>
|
|
995
|
+
* <p>The domain name can consist of only the characters [a-z],[A-Z],[0-9], hyphen
|
|
996
|
+
* (-), or dot (.)</p>
|
|
997
|
+
* </li>
|
|
998
|
+
* <li>
|
|
999
|
+
* <p>The domain name can't begin or end with a hyphen (-) or dot (.)</p>
|
|
1000
|
+
* </li>
|
|
1001
|
+
* <li>
|
|
1002
|
+
* <p>The domain name must contain at least one dot</p>
|
|
1003
|
+
* </li>
|
|
1004
|
+
* </ul>
|
|
1005
|
+
* <p>You can't access the root user of the account or remove an account that was created
|
|
1006
|
+
* with an invalid email address.</p>
|
|
932
1007
|
*/
|
|
933
1008
|
Email: string | undefined;
|
|
934
1009
|
/**
|
|
@@ -937,7 +1012,7 @@ export interface CreateAccountRequest {
|
|
|
937
1012
|
AccountName: string | undefined;
|
|
938
1013
|
/**
|
|
939
1014
|
* <p>(Optional)</p>
|
|
940
|
-
* <p>The name of an IAM role that
|
|
1015
|
+
* <p>The name of an IAM role that Organizations automatically preconfigures in the new member
|
|
941
1016
|
* account. This role trusts the management account, allowing users in the management
|
|
942
1017
|
* account to assume the role, as permitted by the management account administrator. The
|
|
943
1018
|
* role has administrator permissions in the new member account.</p>
|
|
@@ -949,12 +1024,12 @@ export interface CreateAccountRequest {
|
|
|
949
1024
|
* <li>
|
|
950
1025
|
* <p>
|
|
951
1026
|
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html#orgs_manage_accounts_create-cross-account-role">Accessing and Administering the Member Accounts in Your
|
|
952
|
-
* Organization</a> in the <i>
|
|
1027
|
+
* Organization</a> in the <i>Organizations User Guide</i>
|
|
953
1028
|
* </p>
|
|
954
1029
|
* </li>
|
|
955
1030
|
* <li>
|
|
956
1031
|
* <p>Steps 2 and 3 in <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html">Tutorial:
|
|
957
|
-
* Delegate Access Across
|
|
1032
|
+
* Delegate Access Across Amazon Web Services accounts Using IAM Roles</a> in the
|
|
958
1033
|
* <i>IAM User Guide</i>
|
|
959
1034
|
* </p>
|
|
960
1035
|
* </li>
|
|
@@ -970,7 +1045,7 @@ export interface CreateAccountRequest {
|
|
|
970
1045
|
* to <code>DENY</code>, only the root user of the new account can access account billing
|
|
971
1046
|
* information. For more information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate">Activating
|
|
972
1047
|
* Access to the Billing and Cost Management Console</a> in the
|
|
973
|
-
*
|
|
1048
|
+
* <i>Amazon Web Services Billing and Cost Management User Guide</i>.</p>
|
|
974
1049
|
* <p>If you don't specify this parameter, the value defaults to <code>ALLOW</code>, and
|
|
975
1050
|
* IAM users and roles with the required permissions can access billing information for
|
|
976
1051
|
* the new account.</p>
|
|
@@ -980,11 +1055,12 @@ export interface CreateAccountRequest {
|
|
|
980
1055
|
* <p>A list of tags that you want to attach to the newly created account. For each tag in
|
|
981
1056
|
* the list, you must specify both a tag key and a value. You can set the value to an empty
|
|
982
1057
|
* string, but you can't set it to <code>null</code>. For more information about tagging,
|
|
983
|
-
* see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging
|
|
984
|
-
* resources</a> in the
|
|
1058
|
+
* see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging Organizations
|
|
1059
|
+
* resources</a> in the Organizations User Guide.</p>
|
|
985
1060
|
* <note>
|
|
986
|
-
* <p>If any one of the tags is invalid or if you exceed the allowed number of
|
|
987
|
-
* an account, then the entire request fails and the account is not
|
|
1061
|
+
* <p>If any one of the tags is invalid or if you exceed the maximum allowed number of
|
|
1062
|
+
* tags for an account, then the entire request fails and the account is not
|
|
1063
|
+
* created.</p>
|
|
988
1064
|
* </note>
|
|
989
1065
|
*/
|
|
990
1066
|
Tags?: Tag[];
|
|
@@ -1016,7 +1092,7 @@ export declare enum CreateAccountState {
|
|
|
1016
1092
|
SUCCEEDED = "SUCCEEDED"
|
|
1017
1093
|
}
|
|
1018
1094
|
/**
|
|
1019
|
-
* <p>Contains the status about a <a>CreateAccount</a> or <a>CreateGovCloudAccount</a> request to create an
|
|
1095
|
+
* <p>Contains the status about a <a>CreateAccount</a> or <a>CreateGovCloudAccount</a> request to create an Amazon Web Services account or an Amazon Web Services
|
|
1020
1096
|
* GovCloud (US) account in an organization.</p>
|
|
1021
1097
|
*/
|
|
1022
1098
|
export interface CreateAccountStatus {
|
|
@@ -1033,7 +1109,7 @@ export interface CreateAccountStatus {
|
|
|
1033
1109
|
*/
|
|
1034
1110
|
AccountName?: string;
|
|
1035
1111
|
/**
|
|
1036
|
-
* <p>The status of the asynchronous request to create an
|
|
1112
|
+
* <p>The status of the asynchronous request to create an Amazon Web Services account.</p>
|
|
1037
1113
|
*/
|
|
1038
1114
|
State?: CreateAccountState | string;
|
|
1039
1115
|
/**
|
|
@@ -1053,7 +1129,7 @@ export interface CreateAccountStatus {
|
|
|
1053
1129
|
AccountId?: string;
|
|
1054
1130
|
/**
|
|
1055
1131
|
* <p>If the account was created successfully, the unique identifier (ID) of the new account
|
|
1056
|
-
* in the
|
|
1132
|
+
* in the Amazon Web Services GovCloud (US) Region.</p>
|
|
1057
1133
|
*/
|
|
1058
1134
|
GovCloudAccountId?: string;
|
|
1059
1135
|
/**
|
|
@@ -1068,20 +1144,20 @@ export interface CreateAccountStatus {
|
|
|
1068
1144
|
* information.</p>
|
|
1069
1145
|
* </li>
|
|
1070
1146
|
* <li>
|
|
1071
|
-
* <p>EMAIL_ALREADY_EXISTS: The account could not be created because another
|
|
1147
|
+
* <p>EMAIL_ALREADY_EXISTS: The account could not be created because another Amazon Web Services
|
|
1072
1148
|
* account with that email address already exists.</p>
|
|
1073
1149
|
* </li>
|
|
1074
1150
|
* <li>
|
|
1075
|
-
* <p>FAILED_BUSINESS_VALIDATION: The
|
|
1151
|
+
* <p>FAILED_BUSINESS_VALIDATION: The Amazon Web Services account that owns your organization
|
|
1076
1152
|
* failed to receive business license validation.</p>
|
|
1077
1153
|
* </li>
|
|
1078
1154
|
* <li>
|
|
1079
|
-
* <p>GOVCLOUD_ACCOUNT_ALREADY_EXISTS: The account in the
|
|
1155
|
+
* <p>GOVCLOUD_ACCOUNT_ALREADY_EXISTS: The account in the Amazon Web Services GovCloud (US) Region
|
|
1080
1156
|
* could not be created because this Region already includes an account with that
|
|
1081
1157
|
* email address.</p>
|
|
1082
1158
|
* </li>
|
|
1083
1159
|
* <li>
|
|
1084
|
-
* <p>IDENTITY_INVALID_BUSINESS_VALIDATION: The
|
|
1160
|
+
* <p>IDENTITY_INVALID_BUSINESS_VALIDATION: The Amazon Web Services account that owns your
|
|
1085
1161
|
* organization can't complete business license validation because it doesn't have
|
|
1086
1162
|
* valid identity data.</p>
|
|
1087
1163
|
* </li>
|
|
@@ -1095,11 +1171,11 @@ export interface CreateAccountStatus {
|
|
|
1095
1171
|
* </li>
|
|
1096
1172
|
* <li>
|
|
1097
1173
|
* <p>INTERNAL_FAILURE: The account could not be created because of an internal
|
|
1098
|
-
* failure. Try again later. If the problem persists, contact
|
|
1174
|
+
* failure. Try again later. If the problem persists, contact Amazon Web Services Customer
|
|
1099
1175
|
* Support.</p>
|
|
1100
1176
|
* </li>
|
|
1101
1177
|
* <li>
|
|
1102
|
-
* <p>MISSING_BUSINESS_VALIDATION: The
|
|
1178
|
+
* <p>MISSING_BUSINESS_VALIDATION: The Amazon Web Services account that owns your organization has
|
|
1103
1179
|
* not received Business Validation.</p>
|
|
1104
1180
|
* </li>
|
|
1105
1181
|
* <li>
|
|
@@ -1107,11 +1183,11 @@ export interface CreateAccountStatus {
|
|
|
1107
1183
|
* valid payment method, such as a credit card.</p>
|
|
1108
1184
|
* </li>
|
|
1109
1185
|
* <li>
|
|
1110
|
-
* <p>PENDING_BUSINESS_VALIDATION: The
|
|
1186
|
+
* <p>PENDING_BUSINESS_VALIDATION: The Amazon Web Services account that owns your organization is
|
|
1111
1187
|
* still in the process of completing business license validation.</p>
|
|
1112
1188
|
* </li>
|
|
1113
1189
|
* <li>
|
|
1114
|
-
* <p>UNKNOWN_BUSINESS_VALIDATION: The
|
|
1190
|
+
* <p>UNKNOWN_BUSINESS_VALIDATION: The Amazon Web Services account that owns your organization has
|
|
1115
1191
|
* an unknown issue with business license validation.</p>
|
|
1116
1192
|
* </li>
|
|
1117
1193
|
* </ul>
|
|
@@ -1130,9 +1206,10 @@ export interface CreateAccountResponse {
|
|
|
1130
1206
|
* response structure might not be fully populated when you first receive it because
|
|
1131
1207
|
* account creation is an asynchronous process. You can pass the returned
|
|
1132
1208
|
* <code>CreateAccountStatus</code> ID as a parameter to <a>DescribeCreateAccountStatus</a> to get status about the progress of the
|
|
1133
|
-
* request at later times. You can also check the
|
|
1134
|
-
* <code>CreateAccountResult</code> event. For more information, see <a href="
|
|
1135
|
-
* Organization</a> in the
|
|
1209
|
+
* request at later times. You can also check the CloudTrail log for the
|
|
1210
|
+
* <code>CreateAccountResult</code> event. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_monitoring.html">Monitoring the
|
|
1211
|
+
* Activity in Your Organization</a> in the
|
|
1212
|
+
* <i>Organizations User Guide</i>.</p>
|
|
1136
1213
|
*/
|
|
1137
1214
|
CreateAccountStatus?: CreateAccountStatus;
|
|
1138
1215
|
}
|
|
@@ -1143,10 +1220,9 @@ export declare namespace CreateAccountResponse {
|
|
|
1143
1220
|
const filterSensitiveLog: (obj: CreateAccountResponse) => any;
|
|
1144
1221
|
}
|
|
1145
1222
|
/**
|
|
1146
|
-
* <p>
|
|
1223
|
+
* <p>Organizations couldn't perform the operation because your organization hasn't finished
|
|
1147
1224
|
* initializing. This can take up to an hour. Try again later. If after one hour you
|
|
1148
|
-
* continue to receive this error, contact <a href="https://console.aws.amazon.com/support/home#/">
|
|
1149
|
-
* Support</a>.</p>
|
|
1225
|
+
* continue to receive this error, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
|
|
1150
1226
|
*/
|
|
1151
1227
|
export declare class FinalizingOrganizationException extends __BaseException {
|
|
1152
1228
|
readonly name: "FinalizingOrganizationException";
|
|
@@ -1159,13 +1235,44 @@ export declare class FinalizingOrganizationException extends __BaseException {
|
|
|
1159
1235
|
}
|
|
1160
1236
|
export interface CreateGovCloudAccountRequest {
|
|
1161
1237
|
/**
|
|
1162
|
-
* <p>
|
|
1163
|
-
* Region. This email address must not already be associated with another
|
|
1164
|
-
* You must use a valid email address to complete account creation
|
|
1165
|
-
*
|
|
1166
|
-
*
|
|
1167
|
-
*
|
|
1168
|
-
*
|
|
1238
|
+
* <p>Specifies the email address of the owner to assign to the new member account in the
|
|
1239
|
+
* commercial Region. This email address must not already be associated with another
|
|
1240
|
+
* Amazon Web Services account. You must use a valid email address to complete account creation.</p>
|
|
1241
|
+
* <p>The rules for a valid email address:</p>
|
|
1242
|
+
* <ul>
|
|
1243
|
+
* <li>
|
|
1244
|
+
* <p>The address must be a minimum of 6 and a maximum of 64 characters long.</p>
|
|
1245
|
+
* </li>
|
|
1246
|
+
* <li>
|
|
1247
|
+
* <p>All characters must be 7-bit ASCII characters.</p>
|
|
1248
|
+
* </li>
|
|
1249
|
+
* <li>
|
|
1250
|
+
* <p>There must be one and only one @ symbol, which separates the local name from
|
|
1251
|
+
* the domain name.</p>
|
|
1252
|
+
* </li>
|
|
1253
|
+
* <li>
|
|
1254
|
+
* <p>The local name can't contain any of the following characters:</p>
|
|
1255
|
+
* <p>whitespace, " ' ( ) < > [ ] : ; , \ | % &</p>
|
|
1256
|
+
* </li>
|
|
1257
|
+
* <li>
|
|
1258
|
+
* <p>The local name can't begin with a dot (.)</p>
|
|
1259
|
+
* </li>
|
|
1260
|
+
* <li>
|
|
1261
|
+
* <p>The domain name can consist of only the characters [a-z],[A-Z],[0-9], hyphen
|
|
1262
|
+
* (-), or dot (.)</p>
|
|
1263
|
+
* </li>
|
|
1264
|
+
* <li>
|
|
1265
|
+
* <p>The domain name can't begin or end with a hyphen (-) or dot (.)</p>
|
|
1266
|
+
* </li>
|
|
1267
|
+
* <li>
|
|
1268
|
+
* <p>The domain name must contain at least one dot</p>
|
|
1269
|
+
* </li>
|
|
1270
|
+
* </ul>
|
|
1271
|
+
* <p>You can't access the root user of the account or remove an account that was created
|
|
1272
|
+
* with an invalid email address. Like all request parameters for
|
|
1273
|
+
* <code>CreateGovCloudAccount</code>, the request for the email address for the Amazon Web Services
|
|
1274
|
+
* GovCloud (US) account originates from the commercial Region, not from the Amazon Web Services GovCloud
|
|
1275
|
+
* (US) Region.</p>
|
|
1169
1276
|
*/
|
|
1170
1277
|
Email: string | undefined;
|
|
1171
1278
|
/**
|
|
@@ -1174,8 +1281,8 @@ export interface CreateGovCloudAccountRequest {
|
|
|
1174
1281
|
AccountName: string | undefined;
|
|
1175
1282
|
/**
|
|
1176
1283
|
* <p>(Optional)</p>
|
|
1177
|
-
* <p>The name of an IAM role that
|
|
1178
|
-
* accounts in both the
|
|
1284
|
+
* <p>The name of an IAM role that Organizations automatically preconfigures in the new member
|
|
1285
|
+
* accounts in both the Amazon Web Services GovCloud (US) Region and in the commercial Region. This role
|
|
1179
1286
|
* trusts the management account, allowing users in the management account to assume the
|
|
1180
1287
|
* role, as permitted by the management account administrator. The role has administrator
|
|
1181
1288
|
* permissions in the new member account.</p>
|
|
@@ -1183,7 +1290,7 @@ export interface CreateGovCloudAccountRequest {
|
|
|
1183
1290
|
* <code>OrganizationAccountAccessRole</code>.</p>
|
|
1184
1291
|
* <p>For more information about how to use this role to access the member account, see
|
|
1185
1292
|
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html#orgs_manage_accounts_create-cross-account-role">Accessing and Administering the Member Accounts in Your Organization</a> in the
|
|
1186
|
-
* <i>
|
|
1293
|
+
* <i>Organizations User Guide</i> and steps 2 and 3 in <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html">Tutorial: Delegate Access Across Amazon Web Services accounts Using IAM Roles</a> in the
|
|
1187
1294
|
* <i>IAM User Guide.</i>
|
|
1188
1295
|
* </p>
|
|
1189
1296
|
* <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a> that
|
|
@@ -1197,7 +1304,7 @@ export interface CreateGovCloudAccountRequest {
|
|
|
1197
1304
|
* required permissions. If set to <code>DENY</code>, only the root user of the new account
|
|
1198
1305
|
* can access account billing information. For more information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate">Activating
|
|
1199
1306
|
* Access to the Billing and Cost Management Console</a> in the
|
|
1200
|
-
*
|
|
1307
|
+
* <i>Amazon Web Services Billing and Cost Management User Guide.</i>
|
|
1201
1308
|
* </p>
|
|
1202
1309
|
* <p>If you don't specify this parameter, the value defaults to <code>ALLOW</code>, and
|
|
1203
1310
|
* IAM users and roles with the required permissions can access billing information for
|
|
@@ -1211,11 +1318,12 @@ export interface CreateGovCloudAccountRequest {
|
|
|
1211
1318
|
* account exists.</p>
|
|
1212
1319
|
* <p>For each tag in the list, you must specify both a tag key and a value. You can set the
|
|
1213
1320
|
* value to an empty string, but you can't set it to <code>null</code>. For more
|
|
1214
|
-
* information about tagging, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging
|
|
1215
|
-
*
|
|
1321
|
+
* information about tagging, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging Organizations resources</a> in the
|
|
1322
|
+
* Organizations User Guide.</p>
|
|
1216
1323
|
* <note>
|
|
1217
|
-
* <p>If any one of the tags is invalid or if you exceed the allowed number of
|
|
1218
|
-
* an account, then the entire request fails and the account is not
|
|
1324
|
+
* <p>If any one of the tags is invalid or if you exceed the maximum allowed number of
|
|
1325
|
+
* tags for an account, then the entire request fails and the account is not
|
|
1326
|
+
* created.</p>
|
|
1219
1327
|
* </note>
|
|
1220
1328
|
*/
|
|
1221
1329
|
Tags?: Tag[];
|
|
@@ -1228,7 +1336,7 @@ export declare namespace CreateGovCloudAccountRequest {
|
|
|
1228
1336
|
}
|
|
1229
1337
|
export interface CreateGovCloudAccountResponse {
|
|
1230
1338
|
/**
|
|
1231
|
-
* <p>Contains the status about a <a>CreateAccount</a> or <a>CreateGovCloudAccount</a> request to create an
|
|
1339
|
+
* <p>Contains the status about a <a>CreateAccount</a> or <a>CreateGovCloudAccount</a> request to create an Amazon Web Services account or an Amazon Web Services
|
|
1232
1340
|
* GovCloud (US) account in an organization.</p>
|
|
1233
1341
|
*/
|
|
1234
1342
|
CreateAccountStatus?: CreateAccountStatus;
|
|
@@ -1253,10 +1361,10 @@ export interface CreateOrganizationRequest {
|
|
|
1253
1361
|
* <code>CONSOLIDATED_BILLING</code>: All member accounts have their bills
|
|
1254
1362
|
* consolidated to and paid by the management account. For more information, see
|
|
1255
1363
|
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-cb-only">Consolidated billing</a> in the
|
|
1256
|
-
* <i>
|
|
1364
|
+
* <i>Organizations User Guide.</i>
|
|
1257
1365
|
* </p>
|
|
1258
1366
|
* <p> The consolidated billing feature subset isn't available for organizations in
|
|
1259
|
-
* the
|
|
1367
|
+
* the Amazon Web Services GovCloud (US) Region.</p>
|
|
1260
1368
|
* </li>
|
|
1261
1369
|
* <li>
|
|
1262
1370
|
* <p>
|
|
@@ -1264,7 +1372,7 @@ export interface CreateOrganizationRequest {
|
|
|
1264
1372
|
* consolidated billing feature set, the management account can also apply any
|
|
1265
1373
|
* policy type to any member account in the organization. For more information, see
|
|
1266
1374
|
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set-all">All
|
|
1267
|
-
* features</a> in the <i>
|
|
1375
|
+
* features</a> in the <i>Organizations User Guide.</i>
|
|
1268
1376
|
* </p>
|
|
1269
1377
|
* </li>
|
|
1270
1378
|
* </ul>
|
|
@@ -1324,7 +1432,7 @@ export interface Organization {
|
|
|
1324
1432
|
/**
|
|
1325
1433
|
* <p>The Amazon Resource Name (ARN) of an organization.</p>
|
|
1326
1434
|
* <p>For more information about ARNs in Organizations, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies">ARN
|
|
1327
|
-
* Formats Supported by Organizations</a> in the <i>
|
|
1435
|
+
* Formats Supported by Organizations</a> in the <i>Amazon Web Services Service Authorization Reference</i>.</p>
|
|
1328
1436
|
*/
|
|
1329
1437
|
Arn?: string;
|
|
1330
1438
|
/**
|
|
@@ -1332,14 +1440,14 @@ export interface Organization {
|
|
|
1332
1440
|
* "ALL", then all features are enabled and policies can be applied to accounts in the
|
|
1333
1441
|
* organization. If set to "CONSOLIDATED_BILLING", then only consolidated billing
|
|
1334
1442
|
* functionality is available. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">Enabling All Features
|
|
1335
|
-
* in Your Organization</a> in the <i>
|
|
1443
|
+
* in Your Organization</a> in the <i>Organizations User Guide</i>.</p>
|
|
1336
1444
|
*/
|
|
1337
1445
|
FeatureSet?: OrganizationFeatureSet | string;
|
|
1338
1446
|
/**
|
|
1339
1447
|
* <p>The Amazon Resource Name (ARN) of the account that is designated as the management
|
|
1340
1448
|
* account for the organization.</p>
|
|
1341
1449
|
* <p>For more information about ARNs in Organizations, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies">ARN
|
|
1342
|
-
* Formats Supported by Organizations</a> in the <i>
|
|
1450
|
+
* Formats Supported by Organizations</a> in the <i>Amazon Web Services Service Authorization Reference</i>.</p>
|
|
1343
1451
|
*/
|
|
1344
1452
|
MasterAccountArn?: string;
|
|
1345
1453
|
/**
|
|
@@ -1349,7 +1457,7 @@ export interface Organization {
|
|
|
1349
1457
|
*/
|
|
1350
1458
|
MasterAccountId?: string;
|
|
1351
1459
|
/**
|
|
1352
|
-
* <p>The email address that is associated with the
|
|
1460
|
+
* <p>The email address that is associated with the Amazon Web Services account that is designated as the
|
|
1353
1461
|
* management account for the organization.</p>
|
|
1354
1462
|
*/
|
|
1355
1463
|
MasterAccountEmail?: string;
|
|
@@ -1410,8 +1518,8 @@ export interface CreateOrganizationalUnitRequest {
|
|
|
1410
1518
|
* <p>A list of tags that you want to attach to the newly created OU. For each tag in the
|
|
1411
1519
|
* list, you must specify both a tag key and a value. You can set the value to an empty
|
|
1412
1520
|
* string, but you can't set it to <code>null</code>. For more information about tagging,
|
|
1413
|
-
* see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging
|
|
1414
|
-
* resources</a> in the
|
|
1521
|
+
* see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging Organizations
|
|
1522
|
+
* resources</a> in the Organizations User Guide.</p>
|
|
1415
1523
|
* <note>
|
|
1416
1524
|
* <p>If any one of the tags is invalid or if you exceed the allowed number of tags for
|
|
1417
1525
|
* an OU, then the entire request fails and the OU is not created.</p>
|
|
@@ -1426,7 +1534,7 @@ export declare namespace CreateOrganizationalUnitRequest {
|
|
|
1426
1534
|
const filterSensitiveLog: (obj: CreateOrganizationalUnitRequest) => any;
|
|
1427
1535
|
}
|
|
1428
1536
|
/**
|
|
1429
|
-
* <p>Contains details about an organizational unit (OU). An OU is a container of
|
|
1537
|
+
* <p>Contains details about an organizational unit (OU). An OU is a container of Amazon Web Services
|
|
1430
1538
|
* accounts within a root of an organization. Policies that are attached to an OU apply to
|
|
1431
1539
|
* all accounts contained in that OU and in any child OUs.</p>
|
|
1432
1540
|
*/
|
|
@@ -1442,7 +1550,7 @@ export interface OrganizationalUnit {
|
|
|
1442
1550
|
/**
|
|
1443
1551
|
* <p>The Amazon Resource Name (ARN) of this OU.</p>
|
|
1444
1552
|
* <p>For more information about ARNs in Organizations, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies">ARN
|
|
1445
|
-
* Formats Supported by Organizations</a> in the <i>
|
|
1553
|
+
* Formats Supported by Organizations</a> in the <i>Amazon Web Services Service Authorization Reference</i>.</p>
|
|
1446
1554
|
*/
|
|
1447
1555
|
Arn?: string;
|
|
1448
1556
|
/**
|
|
@@ -1542,8 +1650,8 @@ export interface CreatePolicyRequest {
|
|
|
1542
1650
|
* <p>A list of tags that you want to attach to the newly created policy. For each tag in
|
|
1543
1651
|
* the list, you must specify both a tag key and a value. You can set the value to an empty
|
|
1544
1652
|
* string, but you can't set it to <code>null</code>. For more information about tagging,
|
|
1545
|
-
* see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging
|
|
1546
|
-
* resources</a> in the
|
|
1653
|
+
* see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging Organizations
|
|
1654
|
+
* resources</a> in the Organizations User Guide.</p>
|
|
1547
1655
|
* <note>
|
|
1548
1656
|
* <p>If any one of the tags is invalid or if you exceed the allowed number of tags for
|
|
1549
1657
|
* a policy, then the entire request fails and the policy is not created.</p>
|
|
@@ -1571,7 +1679,7 @@ export interface PolicySummary {
|
|
|
1571
1679
|
/**
|
|
1572
1680
|
* <p>The Amazon Resource Name (ARN) of the policy.</p>
|
|
1573
1681
|
* <p>For more information about ARNs in Organizations, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies">ARN
|
|
1574
|
-
* Formats Supported by Organizations</a> in the <i>
|
|
1682
|
+
* Formats Supported by Organizations</a> in the <i>Amazon Web Services Service Authorization Reference</i>.</p>
|
|
1575
1683
|
*/
|
|
1576
1684
|
Arn?: string;
|
|
1577
1685
|
/**
|
|
@@ -1590,7 +1698,7 @@ export interface PolicySummary {
|
|
|
1590
1698
|
*/
|
|
1591
1699
|
Type?: PolicyType | string;
|
|
1592
1700
|
/**
|
|
1593
|
-
* <p>A boolean value that indicates whether the specified policy is an
|
|
1701
|
+
* <p>A boolean value that indicates whether the specified policy is an Amazon Web Services managed
|
|
1594
1702
|
* policy. If true, then you can attach the policy to roots, OUs, or accounts, but you
|
|
1595
1703
|
* cannot edit it.</p>
|
|
1596
1704
|
*/
|
|
@@ -1651,7 +1759,7 @@ export declare class DuplicatePolicyException extends __BaseException {
|
|
|
1651
1759
|
* <p>The provided policy document doesn't meet the requirements of the specified policy
|
|
1652
1760
|
* type. For example, the syntax might be incorrect. For details about service control
|
|
1653
1761
|
* policy syntax, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_scp-syntax.html">Service Control Policy
|
|
1654
|
-
* Syntax</a> in the <i>
|
|
1762
|
+
* Syntax</a> in the <i>Organizations User Guide.</i>
|
|
1655
1763
|
* </p>
|
|
1656
1764
|
*/
|
|
1657
1765
|
export declare class MalformedPolicyDocumentException extends __BaseException {
|
|
@@ -1667,7 +1775,7 @@ export declare class MalformedPolicyDocumentException extends __BaseException {
|
|
|
1667
1775
|
* <p>You can't use the specified policy type with the feature set currently enabled for
|
|
1668
1776
|
* this organization. For example, you can enable SCPs only after you enable all features
|
|
1669
1777
|
* in the organization. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies.html#enable_policies_on_root">Managing
|
|
1670
|
-
*
|
|
1778
|
+
* Organizations Policies</a>in the <i>Organizations User Guide.</i>
|
|
1671
1779
|
* </p>
|
|
1672
1780
|
*/
|
|
1673
1781
|
export declare class PolicyTypeNotAvailableForOrganizationException extends __BaseException {
|
|
@@ -1786,9 +1894,9 @@ export interface DeregisterDelegatedAdministratorRequest {
|
|
|
1786
1894
|
*/
|
|
1787
1895
|
AccountId: string | undefined;
|
|
1788
1896
|
/**
|
|
1789
|
-
* <p>The service principal name of an
|
|
1897
|
+
* <p>The service principal name of an Amazon Web Services service for which the account is a delegated
|
|
1790
1898
|
* administrator.</p>
|
|
1791
|
-
* <p>Delegated administrator privileges are revoked for only the specified
|
|
1899
|
+
* <p>Delegated administrator privileges are revoked for only the specified Amazon Web Services service
|
|
1792
1900
|
* from the member account. If the specified service is the only service for which the
|
|
1793
1901
|
* member account is a delegated administrator, the operation also revokes Organizations read action
|
|
1794
1902
|
* permissions.</p>
|
|
@@ -1803,7 +1911,7 @@ export declare namespace DeregisterDelegatedAdministratorRequest {
|
|
|
1803
1911
|
}
|
|
1804
1912
|
export interface DescribeAccountRequest {
|
|
1805
1913
|
/**
|
|
1806
|
-
* <p>The unique identifier (ID) of the
|
|
1914
|
+
* <p>The unique identifier (ID) of the Amazon Web Services account that you want information about. You
|
|
1807
1915
|
* can get the ID from the <a>ListAccounts</a> or <a>ListAccountsForParent</a> operations.</p>
|
|
1808
1916
|
* <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a> for an account ID string requires exactly 12
|
|
1809
1917
|
* digits.</p>
|
|
@@ -2115,7 +2223,7 @@ export declare class PolicyNotAttachedException extends __BaseException {
|
|
|
2115
2223
|
}
|
|
2116
2224
|
export interface DisableAWSServiceAccessRequest {
|
|
2117
2225
|
/**
|
|
2118
|
-
* <p>The service principal name of the
|
|
2226
|
+
* <p>The service principal name of the Amazon Web Services service for which you want to disable
|
|
2119
2227
|
* integration with your organization. This is typically in the form of a URL, such as
|
|
2120
2228
|
* <code>
|
|
2121
2229
|
* <i>service-abbreviation</i>.amazonaws.com</code>.</p>
|
|
@@ -2173,7 +2281,7 @@ export declare namespace DisablePolicyTypeRequest {
|
|
|
2173
2281
|
/**
|
|
2174
2282
|
* <p>Contains details about a root. A root is a top-level parent node in the hierarchy of
|
|
2175
2283
|
* an organization that can contain organizational units (OUs) and accounts.
|
|
2176
|
-
* The root contains every
|
|
2284
|
+
* The root contains every Amazon Web Services account in the
|
|
2177
2285
|
* organization.</p>
|
|
2178
2286
|
*/
|
|
2179
2287
|
export interface Root {
|
|
@@ -2186,7 +2294,7 @@ export interface Root {
|
|
|
2186
2294
|
/**
|
|
2187
2295
|
* <p>The Amazon Resource Name (ARN) of the root.</p>
|
|
2188
2296
|
* <p>For more information about ARNs in Organizations, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies">ARN
|
|
2189
|
-
* Formats Supported by Organizations</a> in the <i>
|
|
2297
|
+
* Formats Supported by Organizations</a> in the <i>Amazon Web Services Service Authorization Reference</i>.</p>
|
|
2190
2298
|
*/
|
|
2191
2299
|
Arn?: string;
|
|
2192
2300
|
/**
|
|
@@ -2247,7 +2355,7 @@ export declare namespace EnableAllFeaturesRequest {
|
|
|
2247
2355
|
}
|
|
2248
2356
|
export interface EnableAWSServiceAccessRequest {
|
|
2249
2357
|
/**
|
|
2250
|
-
* <p>The service principal name of the
|
|
2358
|
+
* <p>The service principal name of the Amazon Web Services service for which you want to enable
|
|
2251
2359
|
* integration with your organization. This is typically in the form of a URL, such as
|
|
2252
2360
|
* <code>
|
|
2253
2361
|
* <i>service-abbreviation</i>.amazonaws.com</code>.</p>
|
|
@@ -2344,7 +2452,7 @@ export declare class DuplicateHandshakeException extends __BaseException {
|
|
|
2344
2452
|
}
|
|
2345
2453
|
export interface InviteAccountToOrganizationRequest {
|
|
2346
2454
|
/**
|
|
2347
|
-
* <p>The identifier (ID) of the
|
|
2455
|
+
* <p>The identifier (ID) of the Amazon Web Services account that you want to invite to join your
|
|
2348
2456
|
* organization. This is a JSON object that contains the following elements:</p>
|
|
2349
2457
|
* <p>
|
|
2350
2458
|
* <code>{ "Type": "ACCOUNT", "Id": "<<i>
|
|
@@ -2352,12 +2460,12 @@ export interface InviteAccountToOrganizationRequest {
|
|
|
2352
2460
|
* number</b>
|
|
2353
2461
|
* </i>>" }</code>
|
|
2354
2462
|
* </p>
|
|
2355
|
-
* <p>If you use the
|
|
2463
|
+
* <p>If you use the CLI, you can submit this as a single string, similar to the following
|
|
2356
2464
|
* example:</p>
|
|
2357
2465
|
* <p>
|
|
2358
2466
|
* <code>--target Id=123456789012,Type=ACCOUNT</code>
|
|
2359
2467
|
* </p>
|
|
2360
|
-
* <p>If you specify <code>"Type": "ACCOUNT"</code>, you must provide the
|
|
2468
|
+
* <p>If you specify <code>"Type": "ACCOUNT"</code>, you must provide the Amazon Web Services account ID
|
|
2361
2469
|
* number as the <code>Id</code>. If you specify <code>"Type": "EMAIL"</code>, you must
|
|
2362
2470
|
* specify the email address that is associated with the account.</p>
|
|
2363
2471
|
* <p>
|
|
@@ -2374,8 +2482,8 @@ export interface InviteAccountToOrganizationRequest {
|
|
|
2374
2482
|
* <p>A list of tags that you want to attach to the account when it becomes a member of the
|
|
2375
2483
|
* organization. For each tag in the list, you must specify both a tag key and a value. You
|
|
2376
2484
|
* can set the value to an empty string, but you can't set it to <code>null</code>. For
|
|
2377
|
-
* more information about tagging, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging
|
|
2378
|
-
*
|
|
2485
|
+
* more information about tagging, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html">Tagging Organizations resources</a> in the
|
|
2486
|
+
* Organizations User Guide.</p>
|
|
2379
2487
|
* <important>
|
|
2380
2488
|
* <p>Any tags in the request are checked for compliance with any applicable tag
|
|
2381
2489
|
* policies when the request is made. The request is rejected if the tags in the
|
|
@@ -2539,8 +2647,8 @@ export declare namespace ListAWSServiceAccessForOrganizationRequest {
|
|
|
2539
2647
|
const filterSensitiveLog: (obj: ListAWSServiceAccessForOrganizationRequest) => any;
|
|
2540
2648
|
}
|
|
2541
2649
|
/**
|
|
2542
|
-
* <p>A structure that contains details of a service principal that represents an
|
|
2543
|
-
* service that is enabled to integrate with
|
|
2650
|
+
* <p>A structure that contains details of a service principal that represents an Amazon Web Services
|
|
2651
|
+
* service that is enabled to integrate with Organizations.</p>
|
|
2544
2652
|
*/
|
|
2545
2653
|
export interface EnabledServicePrincipal {
|
|
2546
2654
|
/**
|
|
@@ -2550,7 +2658,7 @@ export interface EnabledServicePrincipal {
|
|
|
2550
2658
|
*/
|
|
2551
2659
|
ServicePrincipal?: string;
|
|
2552
2660
|
/**
|
|
2553
|
-
* <p>The date that the service principal was enabled for integration with
|
|
2661
|
+
* <p>The date that the service principal was enabled for integration with Organizations.</p>
|
|
2554
2662
|
*/
|
|
2555
2663
|
DateEnabled?: Date;
|
|
2556
2664
|
}
|
|
@@ -2564,7 +2672,7 @@ export interface ListAWSServiceAccessForOrganizationResponse {
|
|
|
2564
2672
|
/**
|
|
2565
2673
|
* <p>A list of the service principals for the services that are enabled to integrate with
|
|
2566
2674
|
* your organization. Each principal is a structure that includes the name and the date
|
|
2567
|
-
* that it was enabled for integration with
|
|
2675
|
+
* that it was enabled for integration with Organizations.</p>
|
|
2568
2676
|
*/
|
|
2569
2677
|
EnabledServicePrincipals?: EnabledServicePrincipal[];
|
|
2570
2678
|
/**
|
|
@@ -2789,7 +2897,7 @@ export interface DelegatedAdministrator {
|
|
|
2789
2897
|
*/
|
|
2790
2898
|
Arn?: string;
|
|
2791
2899
|
/**
|
|
2792
|
-
* <p>The email address that is associated with the delegated administrator's
|
|
2900
|
+
* <p>The email address that is associated with the delegated administrator's Amazon Web Services
|
|
2793
2901
|
* account.</p>
|
|
2794
2902
|
*/
|
|
2795
2903
|
Email?: string;
|
|
@@ -2873,12 +2981,12 @@ export declare namespace ListDelegatedServicesForAccountRequest {
|
|
|
2873
2981
|
const filterSensitiveLog: (obj: ListDelegatedServicesForAccountRequest) => any;
|
|
2874
2982
|
}
|
|
2875
2983
|
/**
|
|
2876
|
-
* <p>Contains information about the
|
|
2984
|
+
* <p>Contains information about the Amazon Web Services service for which the account is a delegated
|
|
2877
2985
|
* administrator.</p>
|
|
2878
2986
|
*/
|
|
2879
2987
|
export interface DelegatedService {
|
|
2880
2988
|
/**
|
|
2881
|
-
* <p>The name of an
|
|
2989
|
+
* <p>The name of an Amazon Web Services service that can request an operation for the specified service.
|
|
2882
2990
|
* This is typically in the form of a URL, such as:
|
|
2883
2991
|
* <code>
|
|
2884
2992
|
* <i>servicename</i>.amazonaws.com</code>.</p>
|
|
@@ -3081,7 +3189,7 @@ export declare namespace ListOrganizationalUnitsForParentResponse {
|
|
|
3081
3189
|
const filterSensitiveLog: (obj: ListOrganizationalUnitsForParentResponse) => any;
|
|
3082
3190
|
}
|
|
3083
3191
|
/**
|
|
3084
|
-
* <p>We can't find an organizational unit (OU) or
|
|
3192
|
+
* <p>We can't find an organizational unit (OU) or Amazon Web Services account with the
|
|
3085
3193
|
* <code>ChildId</code> that you specified.</p>
|
|
3086
3194
|
*/
|
|
3087
3195
|
export declare class ChildNotFoundException extends __BaseException {
|
|
@@ -3421,7 +3529,7 @@ export interface ListTagsForResourceRequest {
|
|
|
3421
3529
|
* <p>You can specify any of the following taggable resources.</p>
|
|
3422
3530
|
* <ul>
|
|
3423
3531
|
* <li>
|
|
3424
|
-
* <p>
|
|
3532
|
+
* <p>Amazon Web Services account – specify the account ID number.</p>
|
|
3425
3533
|
* </li>
|
|
3426
3534
|
* <li>
|
|
3427
3535
|
* <p>Organizational unit – specify the OU ID that begins with <code>ou-</code> and
|
|
@@ -3546,7 +3654,7 @@ export interface PolicyTargetSummary {
|
|
|
3546
3654
|
/**
|
|
3547
3655
|
* <p>The Amazon Resource Name (ARN) of the policy target.</p>
|
|
3548
3656
|
* <p>For more information about ARNs in Organizations, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies">ARN
|
|
3549
|
-
* Formats Supported by Organizations</a> in the <i>
|
|
3657
|
+
* Formats Supported by Organizations</a> in the <i>Amazon Web Services Service Authorization Reference</i>.</p>
|
|
3550
3658
|
*/
|
|
3551
3659
|
Arn?: string;
|
|
3552
3660
|
/**
|
|
@@ -3686,7 +3794,7 @@ export interface RegisterDelegatedAdministratorRequest {
|
|
|
3686
3794
|
*/
|
|
3687
3795
|
AccountId: string | undefined;
|
|
3688
3796
|
/**
|
|
3689
|
-
* <p>The service principal of the
|
|
3797
|
+
* <p>The service principal of the Amazon Web Services service for which you want to make the member
|
|
3690
3798
|
* account a delegated administrator.</p>
|
|
3691
3799
|
*/
|
|
3692
3800
|
ServicePrincipal: string | undefined;
|
|
@@ -3715,14 +3823,10 @@ export declare namespace RemoveAccountFromOrganizationRequest {
|
|
|
3715
3823
|
export interface TagResourceRequest {
|
|
3716
3824
|
/**
|
|
3717
3825
|
* <p>The ID of the resource to add a tag to.</p>
|
|
3718
|
-
*/
|
|
3719
|
-
ResourceId: string | undefined;
|
|
3720
|
-
/**
|
|
3721
|
-
* <p>A list of tags to add to the specified resource.</p>
|
|
3722
3826
|
* <p>You can specify any of the following taggable resources.</p>
|
|
3723
3827
|
* <ul>
|
|
3724
3828
|
* <li>
|
|
3725
|
-
* <p>
|
|
3829
|
+
* <p>Amazon Web Services account – specify the account ID number.</p>
|
|
3726
3830
|
* </li>
|
|
3727
3831
|
* <li>
|
|
3728
3832
|
* <p>Organizational unit – specify the OU ID that begins with <code>ou-</code> and
|
|
@@ -3743,12 +3847,15 @@ export interface TagResourceRequest {
|
|
|
3743
3847
|
* </p>
|
|
3744
3848
|
* </li>
|
|
3745
3849
|
* </ul>
|
|
3746
|
-
|
|
3747
|
-
|
|
3850
|
+
*/
|
|
3851
|
+
ResourceId: string | undefined;
|
|
3852
|
+
/**
|
|
3853
|
+
* <p>A list of tags to add to the specified resource.</p>
|
|
3854
|
+
* <p>For each tag in the list, you must specify both a tag key and a value. The value can
|
|
3855
|
+
* be an empty string, but you can't set it to <code>null</code>.</p>
|
|
3748
3856
|
* <note>
|
|
3749
|
-
* <p>If any one of the tags is invalid or if you exceed the allowed number of
|
|
3750
|
-
*
|
|
3751
|
-
* created.</p>
|
|
3857
|
+
* <p>If any one of the tags is invalid or if you exceed the maximum allowed number of
|
|
3858
|
+
* tags for a resource, then the entire request fails.</p>
|
|
3752
3859
|
* </note>
|
|
3753
3860
|
*/
|
|
3754
3861
|
Tags: Tag[] | undefined;
|
|
@@ -3765,7 +3872,7 @@ export interface UntagResourceRequest {
|
|
|
3765
3872
|
* <p>You can specify any of the following taggable resources.</p>
|
|
3766
3873
|
* <ul>
|
|
3767
3874
|
* <li>
|
|
3768
|
-
* <p>
|
|
3875
|
+
* <p>Amazon Web Services account – specify the account ID number.</p>
|
|
3769
3876
|
* </li>
|
|
3770
3877
|
* <li>
|
|
3771
3878
|
* <p>Organizational unit – specify the OU ID that begins with <code>ou-</code> and
|
|
@@ -3857,7 +3964,7 @@ export interface UpdatePolicyRequest {
|
|
|
3857
3964
|
/**
|
|
3858
3965
|
* <p>If provided, the new content for the policy. The text must be correctly formatted JSON
|
|
3859
3966
|
* that complies with the syntax for the policy's type. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_scp-syntax.html">Service
|
|
3860
|
-
* Control Policy Syntax</a> in the <i>
|
|
3967
|
+
* Control Policy Syntax</a> in the <i>Organizations User Guide.</i>
|
|
3861
3968
|
* </p>
|
|
3862
3969
|
*/
|
|
3863
3970
|
Content?: string;
|
|
@@ -3896,7 +4003,7 @@ export interface HandshakeResource {
|
|
|
3896
4003
|
* <ul>
|
|
3897
4004
|
* <li>
|
|
3898
4005
|
* <p>
|
|
3899
|
-
* <code>ACCOUNT</code> - Specifies an
|
|
4006
|
+
* <code>ACCOUNT</code> - Specifies an Amazon Web Services account ID number.</p>
|
|
3900
4007
|
* </li>
|
|
3901
4008
|
* <li>
|
|
3902
4009
|
* <p>
|
|
@@ -3945,8 +4052,8 @@ export declare namespace HandshakeResource {
|
|
|
3945
4052
|
* accounts exchange information as a series of handshake requests and responses.</p>
|
|
3946
4053
|
* <p>
|
|
3947
4054
|
* <b>Note:</b> Handshakes that are <code>CANCELED</code>,
|
|
3948
|
-
* <code>ACCEPTED</code>, or <code>
|
|
3949
|
-
* after entering that state After that they are deleted.</p>
|
|
4055
|
+
* <code>ACCEPTED</code>, <code>DECLINED</code>, or <code>EXPIRED</code> show up in
|
|
4056
|
+
* lists for only 30 days after entering that state After that they are deleted.</p>
|
|
3950
4057
|
*/
|
|
3951
4058
|
export interface Handshake {
|
|
3952
4059
|
/**
|
|
@@ -3959,7 +4066,7 @@ export interface Handshake {
|
|
|
3959
4066
|
/**
|
|
3960
4067
|
* <p>The Amazon Resource Name (ARN) of a handshake.</p>
|
|
3961
4068
|
* <p>For more information about ARNs in Organizations, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies">ARN
|
|
3962
|
-
* Formats Supported by Organizations</a> in the <i>
|
|
4069
|
+
* Formats Supported by Organizations</a> in the <i>Amazon Web Services Service Authorization Reference</i>.</p>
|
|
3963
4070
|
*/
|
|
3964
4071
|
Arn?: string;
|
|
3965
4072
|
/**
|