@aws-sdk/client-organizations 3.828.0 → 3.831.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/dist-cjs/index.js +3 -0
  2. package/dist-es/models/models_0.js +3 -0
  3. package/dist-types/commands/AcceptHandshakeCommand.d.ts +4 -5
  4. package/dist-types/commands/AttachPolicyCommand.d.ts +33 -10
  5. package/dist-types/commands/CancelHandshakeCommand.d.ts +2 -1
  6. package/dist-types/commands/CloseAccountCommand.d.ts +27 -9
  7. package/dist-types/commands/CreateAccountCommand.d.ts +27 -9
  8. package/dist-types/commands/CreateGovCloudAccountCommand.d.ts +27 -9
  9. package/dist-types/commands/CreateOrganizationCommand.d.ts +28 -10
  10. package/dist-types/commands/CreateOrganizationalUnitCommand.d.ts +27 -9
  11. package/dist-types/commands/CreatePolicyCommand.d.ts +30 -12
  12. package/dist-types/commands/DeclineHandshakeCommand.d.ts +2 -1
  13. package/dist-types/commands/DeleteOrganizationCommand.d.ts +2 -1
  14. package/dist-types/commands/DeleteOrganizationalUnitCommand.d.ts +2 -1
  15. package/dist-types/commands/DeletePolicyCommand.d.ts +3 -2
  16. package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +26 -9
  17. package/dist-types/commands/DeregisterDelegatedAdministratorCommand.d.ts +27 -9
  18. package/dist-types/commands/DescribeAccountCommand.d.ts +3 -2
  19. package/dist-types/commands/DescribeCreateAccountStatusCommand.d.ts +3 -2
  20. package/dist-types/commands/DescribeEffectivePolicyCommand.d.ts +29 -11
  21. package/dist-types/commands/DescribeHandshakeCommand.d.ts +2 -1
  22. package/dist-types/commands/DescribeOrganizationCommand.d.ts +1 -1
  23. package/dist-types/commands/DescribeOrganizationalUnitCommand.d.ts +3 -2
  24. package/dist-types/commands/DescribePolicyCommand.d.ts +4 -3
  25. package/dist-types/commands/DescribeResourcePolicyCommand.d.ts +26 -9
  26. package/dist-types/commands/DetachPolicyCommand.d.ts +28 -10
  27. package/dist-types/commands/DisableAWSServiceAccessCommand.d.ts +27 -9
  28. package/dist-types/commands/DisablePolicyTypeCommand.d.ts +30 -12
  29. package/dist-types/commands/EnableAWSServiceAccessCommand.d.ts +28 -12
  30. package/dist-types/commands/EnableAllFeaturesCommand.d.ts +29 -13
  31. package/dist-types/commands/EnablePolicyTypeCommand.d.ts +30 -12
  32. package/dist-types/commands/InviteAccountToOrganizationCommand.d.ts +30 -27
  33. package/dist-types/commands/LeaveOrganizationCommand.d.ts +27 -14
  34. package/dist-types/commands/ListAWSServiceAccessForOrganizationCommand.d.ts +28 -10
  35. package/dist-types/commands/ListAccountsCommand.d.ts +3 -2
  36. package/dist-types/commands/ListAccountsForParentCommand.d.ts +3 -2
  37. package/dist-types/commands/ListChildrenCommand.d.ts +3 -2
  38. package/dist-types/commands/ListCreateAccountStatusCommand.d.ts +3 -2
  39. package/dist-types/commands/ListDelegatedAdministratorsCommand.d.ts +28 -10
  40. package/dist-types/commands/ListDelegatedServicesForAccountCommand.d.ts +28 -10
  41. package/dist-types/commands/ListHandshakesForAccountCommand.d.ts +2 -1
  42. package/dist-types/commands/ListHandshakesForOrganizationCommand.d.ts +3 -2
  43. package/dist-types/commands/ListOrganizationalUnitsForParentCommand.d.ts +3 -2
  44. package/dist-types/commands/ListParentsCommand.d.ts +3 -2
  45. package/dist-types/commands/ListPoliciesCommand.d.ts +5 -4
  46. package/dist-types/commands/ListPoliciesForTargetCommand.d.ts +5 -4
  47. package/dist-types/commands/ListRootsCommand.d.ts +4 -3
  48. package/dist-types/commands/ListTagsForResourceCommand.d.ts +3 -2
  49. package/dist-types/commands/ListTargetsForPolicyCommand.d.ts +3 -2
  50. package/dist-types/commands/MoveAccountCommand.d.ts +2 -1
  51. package/dist-types/commands/PutResourcePolicyCommand.d.ts +28 -10
  52. package/dist-types/commands/RegisterDelegatedAdministratorCommand.d.ts +27 -9
  53. package/dist-types/commands/RemoveAccountFromOrganizationCommand.d.ts +27 -9
  54. package/dist-types/commands/TagResourceCommand.d.ts +28 -10
  55. package/dist-types/commands/UntagResourceCommand.d.ts +28 -10
  56. package/dist-types/commands/UpdateOrganizationalUnitCommand.d.ts +2 -1
  57. package/dist-types/commands/UpdatePolicyCommand.d.ts +29 -11
  58. package/dist-types/endpoint/EndpointParameters.d.ts +7 -7
  59. package/dist-types/models/models_0.d.ts +62 -13
  60. package/dist-types/runtimeConfig.browser.d.ts +2 -2
  61. package/dist-types/runtimeConfig.native.d.ts +2 -2
  62. package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +7 -7
  63. package/dist-types/ts3.4/models/models_0.d.ts +3 -0
  64. package/dist-types/ts3.4/runtimeConfig.browser.d.ts +4 -2
  65. package/dist-types/ts3.4/runtimeConfig.native.d.ts +4 -2
  66. package/package.json +2 -2
package/dist-types/commands/DisablePolicyTypeCommand.d.ts CHANGED
@@ -37,7 +37,7 @@ declare const DisablePolicyTypeCommand_base: {
37
37
  * first use <a>ListRoots</a> to see the status of policy types for a specified
38
38
  * root, and then use this operation.</p>
39
39
  * <p>This operation can be called only from the organization's
40
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
40
+ * management account or by a member account that is a delegated administrator.</p>
41
41
  * <p> To view the status of available policy types in the organization, use <a>DescribeOrganization</a>.</p>
42
42
  * @example
43
43
  * Use a bare-bones client and the command you need to make an API call.
@@ -47,7 +47,7 @@ declare const DisablePolicyTypeCommand_base: {
47
47
  * const client = new OrganizationsClient(config);
48
48
  * const input = { // DisablePolicyTypeRequest
49
49
  * RootId: "STRING_VALUE", // required
50
- * PolicyType: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2", // required
50
+ * PolicyType: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY", // required
51
51
  * };
52
52
  * const command = new DisablePolicyTypeCommand(input);
53
53
  * const response = await client.send(command);
@@ -58,7 +58,7 @@ declare const DisablePolicyTypeCommand_base: {
58
58
  * // Name: "STRING_VALUE",
59
59
  * // PolicyTypes: [ // PolicyTypes
60
60
  * // { // PolicyTypeSummary
61
- * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2",
61
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY",
62
62
  * // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
63
63
  * // },
64
64
  * // ],
@@ -136,9 +136,11 @@ declare const DisablePolicyTypeCommand_base: {
136
136
  * </important>
137
137
  * </li>
138
138
  * <li>
139
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
140
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
141
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
139
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
140
+ * more than 5000 accounts, and you can only use the standard migration process for
141
+ * organizations with less than 5000 accounts. Use the assisted migration process
142
+ * to enable all features mode, or create a support case for assistance if you are
143
+ * unable to use assisted migration.</p>
142
144
  * </li>
143
145
  * <li>
144
146
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -273,17 +275,32 @@ declare const DisablePolicyTypeCommand_base: {
273
275
  * that you can have in an organization.</p>
274
276
  * </li>
275
277
  * <li>
276
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
277
- * administrator before you enabled service access. Call the
278
- * <code>EnableAWSServiceAccess</code> API first.</p>
278
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
279
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
280
+ * complete this operation, you must first disable the policy type.</p>
281
+ * </li>
282
+ * <li>
283
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
284
+ * <ul>
285
+ * <li>
286
+ * <p>You attempted to register a delegated administrator before you enabled
287
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
288
+ * first.</p>
289
+ * </li>
290
+ * <li>
291
+ * <p>You attempted to enable a policy type before you enabled service
292
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
293
+ * </li>
294
+ * </ul>
279
295
  * </li>
280
296
  * <li>
281
297
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
282
298
  * that are not compliant with the tag policy requirements for this account.</p>
283
299
  * </li>
284
300
  * <li>
285
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
286
- * Invited accounts aren't subject to this waiting period.</p>
301
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
302
+ * least seven days after the account was created. Invited accounts aren't subject
303
+ * to this waiting period.</p>
287
304
  * </li>
288
305
  * </ul>
289
306
  *
@@ -342,7 +359,8 @@ declare const DisablePolicyTypeCommand_base: {
342
359
  * the required pattern.</p>
343
360
  * </li>
344
361
  * <li>
345
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
362
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
363
+ * policy.</p>
346
364
  * </li>
347
365
  * <li>
348
366
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/EnableAWSServiceAccessCommand.d.ts CHANGED
@@ -44,9 +44,7 @@ declare const EnableAWSServiceAccessCommand_base: {
44
44
  * <p>For more information about enabling services to integrate with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Using
45
45
  * Organizations with other Amazon Web Services services</a> in the
46
46
  * <i>Organizations User Guide</i>.</p>
47
- * <p>You can only call this operation from the organization's management account and only
48
- * if the organization has <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html">enabled all
49
- * features</a>.</p>
47
+ * <p>This operation can be called only from the organization's management account.</p>
50
48
  * @example
51
49
  * Use a bare-bones client and the command you need to make an API call.
52
50
  * ```javascript
@@ -131,9 +129,11 @@ declare const EnableAWSServiceAccessCommand_base: {
131
129
  * </important>
132
130
  * </li>
133
131
  * <li>
134
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
135
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
136
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
132
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
133
+ * more than 5000 accounts, and you can only use the standard migration process for
134
+ * organizations with less than 5000 accounts. Use the assisted migration process
135
+ * to enable all features mode, or create a support case for assistance if you are
136
+ * unable to use assisted migration.</p>
137
137
  * </li>
138
138
  * <li>
139
139
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -268,17 +268,32 @@ declare const EnableAWSServiceAccessCommand_base: {
268
268
  * that you can have in an organization.</p>
269
269
  * </li>
270
270
  * <li>
271
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
272
- * administrator before you enabled service access. Call the
273
- * <code>EnableAWSServiceAccess</code> API first.</p>
271
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
272
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
273
+ * complete this operation, you must first disable the policy type.</p>
274
+ * </li>
275
+ * <li>
276
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
277
+ * <ul>
278
+ * <li>
279
+ * <p>You attempted to register a delegated administrator before you enabled
280
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
281
+ * first.</p>
282
+ * </li>
283
+ * <li>
284
+ * <p>You attempted to enable a policy type before you enabled service
285
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
286
+ * </li>
287
+ * </ul>
274
288
  * </li>
275
289
  * <li>
276
290
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
277
291
  * that are not compliant with the tag policy requirements for this account.</p>
278
292
  * </li>
279
293
  * <li>
280
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
281
- * Invited accounts aren't subject to this waiting period.</p>
294
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
295
+ * least seven days after the account was created. Invited accounts aren't subject
296
+ * to this waiting period.</p>
282
297
  * </li>
283
298
  * </ul>
284
299
  *
@@ -337,7 +352,8 @@ declare const EnableAWSServiceAccessCommand_base: {
337
352
  * the required pattern.</p>
338
353
  * </li>
339
354
  * <li>
340
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
355
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
356
+ * policy.</p>
341
357
  * </li>
342
358
  * <li>
343
359
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/EnableAllFeaturesCommand.d.ts CHANGED
@@ -162,9 +162,11 @@ declare const EnableAllFeaturesCommand_base: {
162
162
  * </important>
163
163
  * </li>
164
164
  * <li>
165
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
166
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
167
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
165
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
166
+ * more than 5000 accounts, and you can only use the standard migration process for
167
+ * organizations with less than 5000 accounts. Use the assisted migration process
168
+ * to enable all features mode, or create a support case for assistance if you are
169
+ * unable to use assisted migration.</p>
168
170
  * </li>
169
171
  * <li>
170
172
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -299,17 +301,32 @@ declare const EnableAllFeaturesCommand_base: {
299
301
  * that you can have in an organization.</p>
300
302
  * </li>
301
303
  * <li>
302
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
303
- * administrator before you enabled service access. Call the
304
- * <code>EnableAWSServiceAccess</code> API first.</p>
304
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
305
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
306
+ * complete this operation, you must first disable the policy type.</p>
307
+ * </li>
308
+ * <li>
309
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
310
+ * <ul>
311
+ * <li>
312
+ * <p>You attempted to register a delegated administrator before you enabled
313
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
314
+ * first.</p>
315
+ * </li>
316
+ * <li>
317
+ * <p>You attempted to enable a policy type before you enabled service
318
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
319
+ * </li>
320
+ * </ul>
305
321
  * </li>
306
322
  * <li>
307
323
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
308
324
  * that are not compliant with the tag policy requirements for this account.</p>
309
325
  * </li>
310
326
  * <li>
311
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
312
- * Invited accounts aren't subject to this waiting period.</p>
327
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
328
+ * least seven days after the account was created. Invited accounts aren't subject
329
+ * to this waiting period.</p>
313
330
  * </li>
314
331
  * </ul>
315
332
  *
@@ -357,10 +374,8 @@ declare const EnableAllFeaturesCommand_base: {
357
374
  * </li>
358
375
  * <li>
359
376
  * <p>ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD: The request failed because the
360
- * account is from a different marketplace than the accounts in the organization.
361
- * For example, accounts with India addresses must be associated with the AISPL
362
- * marketplace. All accounts in an organization must be from the same
363
- * marketplace.</p>
377
+ * account is from a different marketplace than the accounts in the
378
+ * organization.</p>
364
379
  * </li>
365
380
  * <li>
366
381
  * <p>ORGANIZATION_MEMBERSHIP_CHANGE_RATE_LIMIT_EXCEEDED: You attempted to change
@@ -428,7 +443,8 @@ declare const EnableAllFeaturesCommand_base: {
428
443
  * the required pattern.</p>
429
444
  * </li>
430
445
  * <li>
431
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
446
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
447
+ * policy.</p>
432
448
  * </li>
433
449
  * <li>
434
450
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/EnablePolicyTypeCommand.d.ts CHANGED
@@ -35,7 +35,7 @@ declare const EnablePolicyTypeCommand_base: {
35
35
  * recommends that you first use <a>ListRoots</a> to see the status of policy
36
36
  * types for a specified root, and then use this operation.</p>
37
37
  * <p>This operation can be called only from the organization's
38
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
38
+ * management account or by a member account that is a delegated administrator.</p>
39
39
  * <p>You can enable a policy type in a root only if that policy type is available in the
40
40
  * organization. To view the status of available policy types in the organization, use
41
41
  * <a>DescribeOrganization</a>.</p>
@@ -47,7 +47,7 @@ declare const EnablePolicyTypeCommand_base: {
47
47
  * const client = new OrganizationsClient(config);
48
48
  * const input = { // EnablePolicyTypeRequest
49
49
  * RootId: "STRING_VALUE", // required
50
- * PolicyType: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2", // required
50
+ * PolicyType: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY", // required
51
51
  * };
52
52
  * const command = new EnablePolicyTypeCommand(input);
53
53
  * const response = await client.send(command);
@@ -58,7 +58,7 @@ declare const EnablePolicyTypeCommand_base: {
58
58
  * // Name: "STRING_VALUE",
59
59
  * // PolicyTypes: [ // PolicyTypes
60
60
  * // { // PolicyTypeSummary
61
- * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2",
61
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY",
62
62
  * // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
63
63
  * // },
64
64
  * // ],
@@ -136,9 +136,11 @@ declare const EnablePolicyTypeCommand_base: {
136
136
  * </important>
137
137
  * </li>
138
138
  * <li>
139
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
140
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
141
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
139
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
140
+ * more than 5000 accounts, and you can only use the standard migration process for
141
+ * organizations with less than 5000 accounts. Use the assisted migration process
142
+ * to enable all features mode, or create a support case for assistance if you are
143
+ * unable to use assisted migration.</p>
142
144
  * </li>
143
145
  * <li>
144
146
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -273,17 +275,32 @@ declare const EnablePolicyTypeCommand_base: {
273
275
  * that you can have in an organization.</p>
274
276
  * </li>
275
277
  * <li>
276
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
277
- * administrator before you enabled service access. Call the
278
- * <code>EnableAWSServiceAccess</code> API first.</p>
278
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
279
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
280
+ * complete this operation, you must first disable the policy type.</p>
281
+ * </li>
282
+ * <li>
283
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
284
+ * <ul>
285
+ * <li>
286
+ * <p>You attempted to register a delegated administrator before you enabled
287
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
288
+ * first.</p>
289
+ * </li>
290
+ * <li>
291
+ * <p>You attempted to enable a policy type before you enabled service
292
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
293
+ * </li>
294
+ * </ul>
279
295
  * </li>
280
296
  * <li>
281
297
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
282
298
  * that are not compliant with the tag policy requirements for this account.</p>
283
299
  * </li>
284
300
  * <li>
285
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
286
- * Invited accounts aren't subject to this waiting period.</p>
301
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
302
+ * least seven days after the account was created. Invited accounts aren't subject
303
+ * to this waiting period.</p>
287
304
  * </li>
288
305
  * </ul>
289
306
  *
@@ -342,7 +359,8 @@ declare const EnablePolicyTypeCommand_base: {
342
359
  * the required pattern.</p>
343
360
  * </li>
344
361
  * <li>
345
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
362
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
363
+ * policy.</p>
346
364
  * </li>
347
365
  * <li>
348
366
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/InviteAccountToOrganizationCommand.d.ts CHANGED
@@ -32,23 +32,10 @@ declare const InviteAccountToOrganizationCommand_base: {
32
32
  * other account's owner. The invitation is implemented as a <a>Handshake</a>
33
33
  * whose details are in the response.</p>
34
34
  * <important>
35
- * <ul>
36
- * <li>
37
- * <p>You can invite Amazon Web Services accounts only from the same seller as the management
38
- * account. For example, if your organization's management account was created
39
- * by Amazon Internet Services Pvt. Ltd (AISPL), an Amazon Web Services seller in India, you
40
- * can invite only other AISPL accounts to your organization. You can't combine
41
- * accounts from AISPL and Amazon Web Services or from any other Amazon Web Services seller. For more
42
- * information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/useconsolidatedbilling-India.html">Consolidated
43
- * billing in India</a>.</p>
44
- * </li>
45
- * <li>
46
- * <p>If you receive an exception that indicates that you exceeded your account
35
+ * <p>If you receive an exception that indicates that you exceeded your account
47
36
  * limits for the organization or that the operation failed because your
48
37
  * organization is still initializing, wait one hour and then try again. If the
49
38
  * error persists after an hour, contact <a href="https://console.aws.amazon.com/support/home#/">Amazon Web Services Support</a>.</p>
50
- * </li>
51
- * </ul>
52
39
  * </important>
53
40
  * <p>If the request includes tags, then the requester must have the
54
41
  * <code>organizations:TagResource</code> permission.</p>
@@ -181,9 +168,11 @@ declare const InviteAccountToOrganizationCommand_base: {
181
168
  * </important>
182
169
  * </li>
183
170
  * <li>
184
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
185
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
186
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
171
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
172
+ * more than 5000 accounts, and you can only use the standard migration process for
173
+ * organizations with less than 5000 accounts. Use the assisted migration process
174
+ * to enable all features mode, or create a support case for assistance if you are
175
+ * unable to use assisted migration.</p>
187
176
  * </li>
188
177
  * <li>
189
178
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -318,17 +307,32 @@ declare const InviteAccountToOrganizationCommand_base: {
318
307
  * that you can have in an organization.</p>
319
308
  * </li>
320
309
  * <li>
321
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
322
- * administrator before you enabled service access. Call the
323
- * <code>EnableAWSServiceAccess</code> API first.</p>
310
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
311
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
312
+ * complete this operation, you must first disable the policy type.</p>
313
+ * </li>
314
+ * <li>
315
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
316
+ * <ul>
317
+ * <li>
318
+ * <p>You attempted to register a delegated administrator before you enabled
319
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
320
+ * first.</p>
321
+ * </li>
322
+ * <li>
323
+ * <p>You attempted to enable a policy type before you enabled service
324
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
325
+ * </li>
326
+ * </ul>
324
327
  * </li>
325
328
  * <li>
326
329
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
327
330
  * that are not compliant with the tag policy requirements for this account.</p>
328
331
  * </li>
329
332
  * <li>
330
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
331
- * Invited accounts aren't subject to this waiting period.</p>
333
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
334
+ * least seven days after the account was created. Invited accounts aren't subject
335
+ * to this waiting period.</p>
332
336
  * </li>
333
337
  * </ul>
334
338
  *
@@ -388,10 +392,8 @@ declare const InviteAccountToOrganizationCommand_base: {
388
392
  * </li>
389
393
  * <li>
390
394
  * <p>ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD: The request failed because the
391
- * account is from a different marketplace than the accounts in the organization.
392
- * For example, accounts with India addresses must be associated with the AISPL
393
- * marketplace. All accounts in an organization must be from the same
394
- * marketplace.</p>
395
+ * account is from a different marketplace than the accounts in the
396
+ * organization.</p>
395
397
  * </li>
396
398
  * <li>
397
399
  * <p>ORGANIZATION_MEMBERSHIP_CHANGE_RATE_LIMIT_EXCEEDED: You attempted to change
@@ -459,7 +461,8 @@ declare const InviteAccountToOrganizationCommand_base: {
459
461
  * the required pattern.</p>
460
462
  * </li>
461
463
  * <li>
462
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
464
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
465
+ * policy.</p>
463
466
  * </li>
464
467
  * <li>
465
468
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/LeaveOrganizationCommand.d.ts CHANGED
@@ -72,11 +72,6 @@ declare const LeaveOrganizationCommand_base: {
72
72
  * organization.</p>
73
73
  * </li>
74
74
  * <li>
75
- * <p>You can leave an organization only after you enable IAM user access to
76
- * billing in your account. For more information, see <a href="https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate">About IAM access to the Billing and Cost Management console</a> in the
77
- * <i>Amazon Web Services Billing and Cost Management User Guide</i>.</p>
78
- * </li>
79
- * <li>
80
75
  * <p>After the account leaves the organization, all tags that were attached to
81
76
  * the account object in the organization are deleted. Amazon Web Services accounts outside
82
77
  * of an organization do not support tags.</p>
@@ -180,9 +175,11 @@ declare const LeaveOrganizationCommand_base: {
180
175
  * </important>
181
176
  * </li>
182
177
  * <li>
183
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
184
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
185
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
178
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
179
+ * more than 5000 accounts, and you can only use the standard migration process for
180
+ * organizations with less than 5000 accounts. Use the assisted migration process
181
+ * to enable all features mode, or create a support case for assistance if you are
182
+ * unable to use assisted migration.</p>
186
183
  * </li>
187
184
  * <li>
188
185
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -317,17 +314,32 @@ declare const LeaveOrganizationCommand_base: {
317
314
  * that you can have in an organization.</p>
318
315
  * </li>
319
316
  * <li>
320
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
321
- * administrator before you enabled service access. Call the
322
- * <code>EnableAWSServiceAccess</code> API first.</p>
317
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
318
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
319
+ * complete this operation, you must first disable the policy type.</p>
320
+ * </li>
321
+ * <li>
322
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
323
+ * <ul>
324
+ * <li>
325
+ * <p>You attempted to register a delegated administrator before you enabled
326
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
327
+ * first.</p>
328
+ * </li>
329
+ * <li>
330
+ * <p>You attempted to enable a policy type before you enabled service
331
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
332
+ * </li>
333
+ * </ul>
323
334
  * </li>
324
335
  * <li>
325
336
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
326
337
  * that are not compliant with the tag policy requirements for this account.</p>
327
338
  * </li>
328
339
  * <li>
329
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
330
- * Invited accounts aren't subject to this waiting period.</p>
340
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
341
+ * least seven days after the account was created. Invited accounts aren't subject
342
+ * to this waiting period.</p>
331
343
  * </li>
332
344
  * </ul>
333
345
  *
@@ -386,7 +398,8 @@ declare const LeaveOrganizationCommand_base: {
386
398
  * the required pattern.</p>
387
399
  * </li>
388
400
  * <li>
389
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
401
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
402
+ * policy.</p>
390
403
  * </li>
391
404
  * <li>
392
405
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/ListAWSServiceAccessForOrganizationCommand.d.ts CHANGED
@@ -34,7 +34,7 @@ declare const ListAWSServiceAccessForOrganizationCommand_base: {
34
34
  * list of services that currently work with Organizations, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html">Using Organizations with other Amazon Web Services
35
35
  * services</a> in the <i>Organizations User Guide</i>.</p>
36
36
  * <p>This operation can be called only from the organization's
37
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
37
+ * management account or by a member account that is a delegated administrator.</p>
38
38
  * @example
39
39
  * Use a bare-bones client and the command you need to make an API call.
40
40
  * ```javascript
@@ -124,9 +124,11 @@ declare const ListAWSServiceAccessForOrganizationCommand_base: {
124
124
  * </important>
125
125
  * </li>
126
126
  * <li>
127
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
128
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
129
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
127
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
128
+ * more than 5000 accounts, and you can only use the standard migration process for
129
+ * organizations with less than 5000 accounts. Use the assisted migration process
130
+ * to enable all features mode, or create a support case for assistance if you are
131
+ * unable to use assisted migration.</p>
130
132
  * </li>
131
133
  * <li>
132
134
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -261,17 +263,32 @@ declare const ListAWSServiceAccessForOrganizationCommand_base: {
261
263
  * that you can have in an organization.</p>
262
264
  * </li>
263
265
  * <li>
264
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
265
- * administrator before you enabled service access. Call the
266
- * <code>EnableAWSServiceAccess</code> API first.</p>
266
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
267
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
268
+ * complete this operation, you must first disable the policy type.</p>
269
+ * </li>
270
+ * <li>
271
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
272
+ * <ul>
273
+ * <li>
274
+ * <p>You attempted to register a delegated administrator before you enabled
275
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
276
+ * first.</p>
277
+ * </li>
278
+ * <li>
279
+ * <p>You attempted to enable a policy type before you enabled service
280
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
281
+ * </li>
282
+ * </ul>
267
283
  * </li>
268
284
  * <li>
269
285
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
270
286
  * that are not compliant with the tag policy requirements for this account.</p>
271
287
  * </li>
272
288
  * <li>
273
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
274
- * Invited accounts aren't subject to this waiting period.</p>
289
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
290
+ * least seven days after the account was created. Invited accounts aren't subject
291
+ * to this waiting period.</p>
275
292
  * </li>
276
293
  * </ul>
277
294
  *
@@ -330,7 +347,8 @@ declare const ListAWSServiceAccessForOrganizationCommand_base: {
330
347
  * the required pattern.</p>
331
348
  * </li>
332
349
  * <li>
333
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
350
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
351
+ * policy.</p>
334
352
  * </li>
335
353
  * <li>
336
354
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/ListAccountsCommand.d.ts CHANGED
@@ -38,7 +38,7 @@ declare const ListAccountsCommand_base: {
38
38
  * when there are no more results to display.</p>
39
39
  * </note>
40
40
  * <p>This operation can be called only from the organization's
41
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
41
+ * management account or by a member account that is a delegated administrator.</p>
42
42
  * @example
43
43
  * Use a bare-bones client and the command you need to make an API call.
44
44
  * ```javascript
@@ -139,7 +139,8 @@ declare const ListAccountsCommand_base: {
139
139
  * the required pattern.</p>
140
140
  * </li>
141
141
  * <li>
142
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
142
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
143
+ * policy.</p>
143
144
  * </li>
144
145
  * <li>
145
146
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/ListAccountsForParentCommand.d.ts CHANGED
@@ -41,7 +41,7 @@ declare const ListAccountsForParentCommand_base: {
41
41
  * when there are no more results to display.</p>
42
42
  * </note>
43
43
  * <p>This operation can be called only from the organization's
44
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
44
+ * management account or by a member account that is a delegated administrator.</p>
45
45
  * @example
46
46
  * Use a bare-bones client and the command you need to make an API call.
47
47
  * ```javascript
@@ -143,7 +143,8 @@ declare const ListAccountsForParentCommand_base: {
143
143
  * the required pattern.</p>
144
144
  * </li>
145
145
  * <li>
146
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
146
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
147
+ * policy.</p>
147
148
  * </li>
148
149
  * <li>
149
150
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name