@aws-sdk/client-organizations 3.830.0 → 3.831.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/dist-cjs/index.js +3 -0
  2. package/dist-es/models/models_0.js +3 -0
  3. package/dist-types/commands/AcceptHandshakeCommand.d.ts +4 -5
  4. package/dist-types/commands/AttachPolicyCommand.d.ts +33 -10
  5. package/dist-types/commands/CancelHandshakeCommand.d.ts +2 -1
  6. package/dist-types/commands/CloseAccountCommand.d.ts +27 -9
  7. package/dist-types/commands/CreateAccountCommand.d.ts +27 -9
  8. package/dist-types/commands/CreateGovCloudAccountCommand.d.ts +27 -9
  9. package/dist-types/commands/CreateOrganizationCommand.d.ts +28 -10
  10. package/dist-types/commands/CreateOrganizationalUnitCommand.d.ts +27 -9
  11. package/dist-types/commands/CreatePolicyCommand.d.ts +30 -12
  12. package/dist-types/commands/DeclineHandshakeCommand.d.ts +2 -1
  13. package/dist-types/commands/DeleteOrganizationCommand.d.ts +2 -1
  14. package/dist-types/commands/DeleteOrganizationalUnitCommand.d.ts +2 -1
  15. package/dist-types/commands/DeletePolicyCommand.d.ts +3 -2
  16. package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +26 -9
  17. package/dist-types/commands/DeregisterDelegatedAdministratorCommand.d.ts +27 -9
  18. package/dist-types/commands/DescribeAccountCommand.d.ts +3 -2
  19. package/dist-types/commands/DescribeCreateAccountStatusCommand.d.ts +3 -2
  20. package/dist-types/commands/DescribeEffectivePolicyCommand.d.ts +29 -11
  21. package/dist-types/commands/DescribeHandshakeCommand.d.ts +2 -1
  22. package/dist-types/commands/DescribeOrganizationCommand.d.ts +1 -1
  23. package/dist-types/commands/DescribeOrganizationalUnitCommand.d.ts +3 -2
  24. package/dist-types/commands/DescribePolicyCommand.d.ts +4 -3
  25. package/dist-types/commands/DescribeResourcePolicyCommand.d.ts +26 -9
  26. package/dist-types/commands/DetachPolicyCommand.d.ts +28 -10
  27. package/dist-types/commands/DisableAWSServiceAccessCommand.d.ts +27 -9
  28. package/dist-types/commands/DisablePolicyTypeCommand.d.ts +30 -12
  29. package/dist-types/commands/EnableAWSServiceAccessCommand.d.ts +28 -12
  30. package/dist-types/commands/EnableAllFeaturesCommand.d.ts +29 -13
  31. package/dist-types/commands/EnablePolicyTypeCommand.d.ts +30 -12
  32. package/dist-types/commands/InviteAccountToOrganizationCommand.d.ts +30 -27
  33. package/dist-types/commands/LeaveOrganizationCommand.d.ts +27 -14
  34. package/dist-types/commands/ListAWSServiceAccessForOrganizationCommand.d.ts +28 -10
  35. package/dist-types/commands/ListAccountsCommand.d.ts +3 -2
  36. package/dist-types/commands/ListAccountsForParentCommand.d.ts +3 -2
  37. package/dist-types/commands/ListChildrenCommand.d.ts +3 -2
  38. package/dist-types/commands/ListCreateAccountStatusCommand.d.ts +3 -2
  39. package/dist-types/commands/ListDelegatedAdministratorsCommand.d.ts +28 -10
  40. package/dist-types/commands/ListDelegatedServicesForAccountCommand.d.ts +28 -10
  41. package/dist-types/commands/ListHandshakesForAccountCommand.d.ts +2 -1
  42. package/dist-types/commands/ListHandshakesForOrganizationCommand.d.ts +3 -2
  43. package/dist-types/commands/ListOrganizationalUnitsForParentCommand.d.ts +3 -2
  44. package/dist-types/commands/ListParentsCommand.d.ts +3 -2
  45. package/dist-types/commands/ListPoliciesCommand.d.ts +5 -4
  46. package/dist-types/commands/ListPoliciesForTargetCommand.d.ts +5 -4
  47. package/dist-types/commands/ListRootsCommand.d.ts +4 -3
  48. package/dist-types/commands/ListTagsForResourceCommand.d.ts +3 -2
  49. package/dist-types/commands/ListTargetsForPolicyCommand.d.ts +3 -2
  50. package/dist-types/commands/MoveAccountCommand.d.ts +2 -1
  51. package/dist-types/commands/PutResourcePolicyCommand.d.ts +28 -10
  52. package/dist-types/commands/RegisterDelegatedAdministratorCommand.d.ts +27 -9
  53. package/dist-types/commands/RemoveAccountFromOrganizationCommand.d.ts +27 -9
  54. package/dist-types/commands/TagResourceCommand.d.ts +28 -10
  55. package/dist-types/commands/UntagResourceCommand.d.ts +28 -10
  56. package/dist-types/commands/UpdateOrganizationalUnitCommand.d.ts +2 -1
  57. package/dist-types/commands/UpdatePolicyCommand.d.ts +29 -11
  58. package/dist-types/models/models_0.d.ts +62 -13
  59. package/dist-types/ts3.4/models/models_0.d.ts +3 -0
  60. package/package.json +1 -1
package/dist-types/commands/DeletePolicyCommand.d.ts CHANGED
@@ -31,7 +31,7 @@ declare const DeletePolicyCommand_base: {
31
31
  * operation, you must first detach the policy from all organizational units (OUs), roots,
32
32
  * and accounts.</p>
33
33
  * <p>This operation can be called only from the organization's
34
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
34
+ * management account or by a member account that is a delegated administrator.</p>
35
35
  * @example
36
36
  * Use a bare-bones client and the command you need to make an API call.
37
37
  * ```javascript
@@ -122,7 +122,8 @@ declare const DeletePolicyCommand_base: {
122
122
  * the required pattern.</p>
123
123
  * </li>
124
124
  * <li>
125
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
125
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
126
+ * policy.</p>
126
127
  * </li>
127
128
  * <li>
128
129
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DeleteResourcePolicyCommand.d.ts CHANGED
@@ -27,7 +27,7 @@ declare const DeleteResourcePolicyCommand_base: {
27
27
  };
28
28
  /**
29
29
  * <p>Deletes the resource policy from your organization.</p>
30
- * <p>You can only call this operation from the organization's management account.</p>
30
+ * <p>This operation can be called only from the organization's management account.</p>
31
31
  * @example
32
32
  * Use a bare-bones client and the command you need to make an API call.
33
33
  * ```javascript
@@ -110,9 +110,11 @@ declare const DeleteResourcePolicyCommand_base: {
110
110
  * </important>
111
111
  * </li>
112
112
  * <li>
113
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
114
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
115
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
113
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
114
+ * more than 5000 accounts, and you can only use the standard migration process for
115
+ * organizations with less than 5000 accounts. Use the assisted migration process
116
+ * to enable all features mode, or create a support case for assistance if you are
117
+ * unable to use assisted migration.</p>
116
118
  * </li>
117
119
  * <li>
118
120
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -247,17 +249,32 @@ declare const DeleteResourcePolicyCommand_base: {
247
249
  * that you can have in an organization.</p>
248
250
  * </li>
249
251
  * <li>
250
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
251
- * administrator before you enabled service access. Call the
252
- * <code>EnableAWSServiceAccess</code> API first.</p>
252
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
253
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
254
+ * complete this operation, you must first disable the policy type.</p>
255
+ * </li>
256
+ * <li>
257
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
258
+ * <ul>
259
+ * <li>
260
+ * <p>You attempted to register a delegated administrator before you enabled
261
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
262
+ * first.</p>
263
+ * </li>
264
+ * <li>
265
+ * <p>You attempted to enable a policy type before you enabled service
266
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
267
+ * </li>
268
+ * </ul>
253
269
  * </li>
254
270
  * <li>
255
271
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
256
272
  * that are not compliant with the tag policy requirements for this account.</p>
257
273
  * </li>
258
274
  * <li>
259
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
260
- * Invited accounts aren't subject to this waiting period.</p>
275
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
276
+ * least seven days after the account was created. Invited accounts aren't subject
277
+ * to this waiting period.</p>
261
278
  * </li>
262
279
  * </ul>
263
280
  *
package/dist-types/commands/DeregisterDelegatedAdministratorCommand.d.ts CHANGED
@@ -134,9 +134,11 @@ declare const DeregisterDelegatedAdministratorCommand_base: {
134
134
  * </important>
135
135
  * </li>
136
136
  * <li>
137
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
138
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
139
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
137
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
138
+ * more than 5000 accounts, and you can only use the standard migration process for
139
+ * organizations with less than 5000 accounts. Use the assisted migration process
140
+ * to enable all features mode, or create a support case for assistance if you are
141
+ * unable to use assisted migration.</p>
140
142
  * </li>
141
143
  * <li>
142
144
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -271,17 +273,32 @@ declare const DeregisterDelegatedAdministratorCommand_base: {
271
273
  * that you can have in an organization.</p>
272
274
  * </li>
273
275
  * <li>
274
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
275
- * administrator before you enabled service access. Call the
276
- * <code>EnableAWSServiceAccess</code> API first.</p>
276
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
277
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
278
+ * complete this operation, you must first disable the policy type.</p>
279
+ * </li>
280
+ * <li>
281
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
282
+ * <ul>
283
+ * <li>
284
+ * <p>You attempted to register a delegated administrator before you enabled
285
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
286
+ * first.</p>
287
+ * </li>
288
+ * <li>
289
+ * <p>You attempted to enable a policy type before you enabled service
290
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
291
+ * </li>
292
+ * </ul>
277
293
  * </li>
278
294
  * <li>
279
295
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
280
296
  * that are not compliant with the tag policy requirements for this account.</p>
281
297
  * </li>
282
298
  * <li>
283
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
284
- * Invited accounts aren't subject to this waiting period.</p>
299
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
300
+ * least seven days after the account was created. Invited accounts aren't subject
301
+ * to this waiting period.</p>
285
302
  * </li>
286
303
  * </ul>
287
304
  *
@@ -340,7 +357,8 @@ declare const DeregisterDelegatedAdministratorCommand_base: {
340
357
  * the required pattern.</p>
341
358
  * </li>
342
359
  * <li>
343
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
360
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
361
+ * policy.</p>
344
362
  * </li>
345
363
  * <li>
346
364
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DescribeAccountCommand.d.ts CHANGED
@@ -29,7 +29,7 @@ declare const DescribeAccountCommand_base: {
29
29
  /**
30
30
  * <p>Retrieves Organizations-related information about the specified account.</p>
31
31
  * <p>This operation can be called only from the organization's
32
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
32
+ * management account or by a member account that is a delegated administrator.</p>
33
33
  * @example
34
34
  * Use a bare-bones client and the command you need to make an API call.
35
35
  * ```javascript
@@ -131,7 +131,8 @@ declare const DescribeAccountCommand_base: {
131
131
  * the required pattern.</p>
132
132
  * </li>
133
133
  * <li>
134
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
134
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
135
+ * policy.</p>
135
136
  * </li>
136
137
  * <li>
137
138
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DescribeCreateAccountStatusCommand.d.ts CHANGED
@@ -29,7 +29,7 @@ declare const DescribeCreateAccountStatusCommand_base: {
29
29
  /**
30
30
  * <p>Retrieves the current status of an asynchronous request to create an account.</p>
31
31
  * <p>This operation can be called only from the organization's
32
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
32
+ * management account or by a member account that is a delegated administrator.</p>
33
33
  * @example
34
34
  * Use a bare-bones client and the command you need to make an API call.
35
35
  * ```javascript
@@ -131,7 +131,8 @@ declare const DescribeCreateAccountStatusCommand_base: {
131
131
  * the required pattern.</p>
132
132
  * </li>
133
133
  * <li>
134
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
134
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
135
+ * policy.</p>
135
136
  * </li>
136
137
  * <li>
137
138
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DescribeEffectivePolicyCommand.d.ts CHANGED
@@ -44,7 +44,7 @@ declare const DescribeEffectivePolicyCommand_base: {
44
44
  * // const { OrganizationsClient, DescribeEffectivePolicyCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
45
45
  * const client = new OrganizationsClient(config);
46
46
  * const input = { // DescribeEffectivePolicyRequest
47
- * PolicyType: "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2", // required
47
+ * PolicyType: "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY", // required
48
48
  * TargetId: "STRING_VALUE",
49
49
  * };
50
50
  * const command = new DescribeEffectivePolicyCommand(input);
@@ -54,7 +54,7 @@ declare const DescribeEffectivePolicyCommand_base: {
54
54
  * // PolicyContent: "STRING_VALUE",
55
55
  * // LastUpdatedTimestamp: new Date("TIMESTAMP"),
56
56
  * // TargetId: "STRING_VALUE",
57
- * // PolicyType: "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2",
57
+ * // PolicyType: "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY",
58
58
  * // },
59
59
  * // };
60
60
  *
@@ -125,9 +125,11 @@ declare const DescribeEffectivePolicyCommand_base: {
125
125
  * </important>
126
126
  * </li>
127
127
  * <li>
128
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
129
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
130
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
128
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
129
+ * more than 5000 accounts, and you can only use the standard migration process for
130
+ * organizations with less than 5000 accounts. Use the assisted migration process
131
+ * to enable all features mode, or create a support case for assistance if you are
132
+ * unable to use assisted migration.</p>
131
133
  * </li>
132
134
  * <li>
133
135
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -262,17 +264,32 @@ declare const DescribeEffectivePolicyCommand_base: {
262
264
  * that you can have in an organization.</p>
263
265
  * </li>
264
266
  * <li>
265
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
266
- * administrator before you enabled service access. Call the
267
- * <code>EnableAWSServiceAccess</code> API first.</p>
267
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
268
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
269
+ * complete this operation, you must first disable the policy type.</p>
270
+ * </li>
271
+ * <li>
272
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
273
+ * <ul>
274
+ * <li>
275
+ * <p>You attempted to register a delegated administrator before you enabled
276
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
277
+ * first.</p>
278
+ * </li>
279
+ * <li>
280
+ * <p>You attempted to enable a policy type before you enabled service
281
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
282
+ * </li>
283
+ * </ul>
268
284
  * </li>
269
285
  * <li>
270
286
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
271
287
  * that are not compliant with the tag policy requirements for this account.</p>
272
288
  * </li>
273
289
  * <li>
274
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
275
- * Invited accounts aren't subject to this waiting period.</p>
290
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
291
+ * least seven days after the account was created. Invited accounts aren't subject
292
+ * to this waiting period.</p>
276
293
  * </li>
277
294
  * </ul>
278
295
  *
@@ -337,7 +354,8 @@ declare const DescribeEffectivePolicyCommand_base: {
337
354
  * the required pattern.</p>
338
355
  * </li>
339
356
  * <li>
340
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
357
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
358
+ * policy.</p>
341
359
  * </li>
342
360
  * <li>
343
361
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DescribeHandshakeCommand.d.ts CHANGED
@@ -151,7 +151,8 @@ declare const DescribeHandshakeCommand_base: {
151
151
  * the required pattern.</p>
152
152
  * </li>
153
153
  * <li>
154
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
154
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
155
+ * policy.</p>
155
156
  * </li>
156
157
  * <li>
157
158
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DescribeOrganizationCommand.d.ts CHANGED
@@ -54,7 +54,7 @@ declare const DescribeOrganizationCommand_base: {
54
54
  * // MasterAccountEmail: "STRING_VALUE",
55
55
  * // AvailablePolicyTypes: [ // PolicyTypes
56
56
  * // { // PolicyTypeSummary
57
- * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2",
57
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY",
58
58
  * // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
59
59
  * // },
60
60
  * // ],
package/dist-types/commands/DescribeOrganizationalUnitCommand.d.ts CHANGED
@@ -29,7 +29,7 @@ declare const DescribeOrganizationalUnitCommand_base: {
29
29
  /**
30
30
  * <p>Retrieves information about an organizational unit (OU).</p>
31
31
  * <p>This operation can be called only from the organization's
32
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
32
+ * management account or by a member account that is a delegated administrator.</p>
33
33
  * @example
34
34
  * Use a bare-bones client and the command you need to make an API call.
35
35
  * ```javascript
@@ -122,7 +122,8 @@ declare const DescribeOrganizationalUnitCommand_base: {
122
122
  * the required pattern.</p>
123
123
  * </li>
124
124
  * <li>
125
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
125
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
126
+ * policy.</p>
126
127
  * </li>
127
128
  * <li>
128
129
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DescribePolicyCommand.d.ts CHANGED
@@ -29,7 +29,7 @@ declare const DescribePolicyCommand_base: {
29
29
  /**
30
30
  * <p>Retrieves information about a policy.</p>
31
31
  * <p>This operation can be called only from the organization's
32
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
32
+ * management account or by a member account that is a delegated administrator.</p>
33
33
  * @example
34
34
  * Use a bare-bones client and the command you need to make an API call.
35
35
  * ```javascript
@@ -48,7 +48,7 @@ declare const DescribePolicyCommand_base: {
48
48
  * // Arn: "STRING_VALUE",
49
49
  * // Name: "STRING_VALUE",
50
50
  * // Description: "STRING_VALUE",
51
- * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2",
51
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY",
52
52
  * // AwsManaged: true || false,
53
53
  * // },
54
54
  * // Content: "STRING_VALUE",
@@ -128,7 +128,8 @@ declare const DescribePolicyCommand_base: {
128
128
  * the required pattern.</p>
129
129
  * </li>
130
130
  * <li>
131
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
131
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
132
+ * policy.</p>
132
133
  * </li>
133
134
  * <li>
134
135
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DescribeResourcePolicyCommand.d.ts CHANGED
@@ -29,7 +29,7 @@ declare const DescribeResourcePolicyCommand_base: {
29
29
  /**
30
30
  * <p>Retrieves information about a resource policy.</p>
31
31
  * <p>This operation can be called only from the organization's
32
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
32
+ * management account or by a member account that is a delegated administrator.</p>
33
33
  * @example
34
34
  * Use a bare-bones client and the command you need to make an API call.
35
35
  * ```javascript
@@ -116,9 +116,11 @@ declare const DescribeResourcePolicyCommand_base: {
116
116
  * </important>
117
117
  * </li>
118
118
  * <li>
119
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
120
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
121
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
119
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
120
+ * more than 5000 accounts, and you can only use the standard migration process for
121
+ * organizations with less than 5000 accounts. Use the assisted migration process
122
+ * to enable all features mode, or create a support case for assistance if you are
123
+ * unable to use assisted migration.</p>
122
124
  * </li>
123
125
  * <li>
124
126
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -253,17 +255,32 @@ declare const DescribeResourcePolicyCommand_base: {
253
255
  * that you can have in an organization.</p>
254
256
  * </li>
255
257
  * <li>
256
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
257
- * administrator before you enabled service access. Call the
258
- * <code>EnableAWSServiceAccess</code> API first.</p>
258
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
259
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
260
+ * complete this operation, you must first disable the policy type.</p>
261
+ * </li>
262
+ * <li>
263
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
264
+ * <ul>
265
+ * <li>
266
+ * <p>You attempted to register a delegated administrator before you enabled
267
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
268
+ * first.</p>
269
+ * </li>
270
+ * <li>
271
+ * <p>You attempted to enable a policy type before you enabled service
272
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
273
+ * </li>
274
+ * </ul>
259
275
  * </li>
260
276
  * <li>
261
277
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
262
278
  * that are not compliant with the tag policy requirements for this account.</p>
263
279
  * </li>
264
280
  * <li>
265
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
266
- * Invited accounts aren't subject to this waiting period.</p>
281
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
282
+ * least seven days after the account was created. Invited accounts aren't subject
283
+ * to this waiting period.</p>
267
284
  * </li>
268
285
  * </ul>
269
286
  *
package/dist-types/commands/DetachPolicyCommand.d.ts CHANGED
@@ -42,7 +42,7 @@ declare const DetachPolicyCommand_base: {
42
42
  * the <code>FullAWSAccess</code> policy (or any other attached SCP), you're using the
43
43
  * authorization strategy of a "<a href="https://docs.aws.amazon.com/organizations/latest/userguide/SCP_strategies.html#orgs_policies_denylist">deny list</a>".</p>
44
44
  * <p>This operation can be called only from the organization's
45
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
45
+ * management account or by a member account that is a delegated administrator.</p>
46
46
  * @example
47
47
  * Use a bare-bones client and the command you need to make an API call.
48
48
  * ```javascript
@@ -128,9 +128,11 @@ declare const DetachPolicyCommand_base: {
128
128
  * </important>
129
129
  * </li>
130
130
  * <li>
131
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
132
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
133
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
131
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
132
+ * more than 5000 accounts, and you can only use the standard migration process for
133
+ * organizations with less than 5000 accounts. Use the assisted migration process
134
+ * to enable all features mode, or create a support case for assistance if you are
135
+ * unable to use assisted migration.</p>
134
136
  * </li>
135
137
  * <li>
136
138
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -265,17 +267,32 @@ declare const DetachPolicyCommand_base: {
265
267
  * that you can have in an organization.</p>
266
268
  * </li>
267
269
  * <li>
268
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
269
- * administrator before you enabled service access. Call the
270
- * <code>EnableAWSServiceAccess</code> API first.</p>
270
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
271
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
272
+ * complete this operation, you must first disable the policy type.</p>
273
+ * </li>
274
+ * <li>
275
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
276
+ * <ul>
277
+ * <li>
278
+ * <p>You attempted to register a delegated administrator before you enabled
279
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
280
+ * first.</p>
281
+ * </li>
282
+ * <li>
283
+ * <p>You attempted to enable a policy type before you enabled service
284
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
285
+ * </li>
286
+ * </ul>
271
287
  * </li>
272
288
  * <li>
273
289
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
274
290
  * that are not compliant with the tag policy requirements for this account.</p>
275
291
  * </li>
276
292
  * <li>
277
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
278
- * Invited accounts aren't subject to this waiting period.</p>
293
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
294
+ * least seven days after the account was created. Invited accounts aren't subject
295
+ * to this waiting period.</p>
279
296
  * </li>
280
297
  * </ul>
281
298
  *
@@ -334,7 +351,8 @@ declare const DetachPolicyCommand_base: {
334
351
  * the required pattern.</p>
335
352
  * </li>
336
353
  * <li>
337
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
354
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
355
+ * policy.</p>
338
356
  * </li>
339
357
  * <li>
340
358
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DisableAWSServiceAccessCommand.d.ts CHANGED
@@ -166,9 +166,11 @@ declare const DisableAWSServiceAccessCommand_base: {
166
166
  * </important>
167
167
  * </li>
168
168
  * <li>
169
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
170
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
171
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
169
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
170
+ * more than 5000 accounts, and you can only use the standard migration process for
171
+ * organizations with less than 5000 accounts. Use the assisted migration process
172
+ * to enable all features mode, or create a support case for assistance if you are
173
+ * unable to use assisted migration.</p>
172
174
  * </li>
173
175
  * <li>
174
176
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -303,17 +305,32 @@ declare const DisableAWSServiceAccessCommand_base: {
303
305
  * that you can have in an organization.</p>
304
306
  * </li>
305
307
  * <li>
306
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
307
- * administrator before you enabled service access. Call the
308
- * <code>EnableAWSServiceAccess</code> API first.</p>
308
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
309
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
310
+ * complete this operation, you must first disable the policy type.</p>
311
+ * </li>
312
+ * <li>
313
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
314
+ * <ul>
315
+ * <li>
316
+ * <p>You attempted to register a delegated administrator before you enabled
317
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
318
+ * first.</p>
319
+ * </li>
320
+ * <li>
321
+ * <p>You attempted to enable a policy type before you enabled service
322
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
323
+ * </li>
324
+ * </ul>
309
325
  * </li>
310
326
  * <li>
311
327
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
312
328
  * that are not compliant with the tag policy requirements for this account.</p>
313
329
  * </li>
314
330
  * <li>
315
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
316
- * Invited accounts aren't subject to this waiting period.</p>
331
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
332
+ * least seven days after the account was created. Invited accounts aren't subject
333
+ * to this waiting period.</p>
317
334
  * </li>
318
335
  * </ul>
319
336
  *
@@ -372,7 +389,8 @@ declare const DisableAWSServiceAccessCommand_base: {
372
389
  * the required pattern.</p>
373
390
  * </li>
374
391
  * <li>
375
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
392
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
393
+ * policy.</p>
376
394
  * </li>
377
395
  * <li>
378
396
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name