@aws-sdk/client-organizations 3.830.0 → 3.835.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (62) hide show
  1. package/dist-cjs/index.js +3 -0
  2. package/dist-es/models/models_0.js +3 -0
  3. package/dist-types/commands/AcceptHandshakeCommand.d.ts +4 -5
  4. package/dist-types/commands/AttachPolicyCommand.d.ts +33 -10
  5. package/dist-types/commands/CancelHandshakeCommand.d.ts +2 -1
  6. package/dist-types/commands/CloseAccountCommand.d.ts +27 -9
  7. package/dist-types/commands/CreateAccountCommand.d.ts +27 -9
  8. package/dist-types/commands/CreateGovCloudAccountCommand.d.ts +27 -9
  9. package/dist-types/commands/CreateOrganizationCommand.d.ts +28 -10
  10. package/dist-types/commands/CreateOrganizationalUnitCommand.d.ts +27 -9
  11. package/dist-types/commands/CreatePolicyCommand.d.ts +30 -12
  12. package/dist-types/commands/DeclineHandshakeCommand.d.ts +2 -1
  13. package/dist-types/commands/DeleteOrganizationCommand.d.ts +2 -1
  14. package/dist-types/commands/DeleteOrganizationalUnitCommand.d.ts +2 -1
  15. package/dist-types/commands/DeletePolicyCommand.d.ts +3 -2
  16. package/dist-types/commands/DeleteResourcePolicyCommand.d.ts +26 -9
  17. package/dist-types/commands/DeregisterDelegatedAdministratorCommand.d.ts +27 -9
  18. package/dist-types/commands/DescribeAccountCommand.d.ts +3 -2
  19. package/dist-types/commands/DescribeCreateAccountStatusCommand.d.ts +3 -2
  20. package/dist-types/commands/DescribeEffectivePolicyCommand.d.ts +29 -11
  21. package/dist-types/commands/DescribeHandshakeCommand.d.ts +2 -1
  22. package/dist-types/commands/DescribeOrganizationCommand.d.ts +1 -1
  23. package/dist-types/commands/DescribeOrganizationalUnitCommand.d.ts +3 -2
  24. package/dist-types/commands/DescribePolicyCommand.d.ts +4 -3
  25. package/dist-types/commands/DescribeResourcePolicyCommand.d.ts +26 -9
  26. package/dist-types/commands/DetachPolicyCommand.d.ts +28 -10
  27. package/dist-types/commands/DisableAWSServiceAccessCommand.d.ts +27 -9
  28. package/dist-types/commands/DisablePolicyTypeCommand.d.ts +30 -12
  29. package/dist-types/commands/EnableAWSServiceAccessCommand.d.ts +28 -12
  30. package/dist-types/commands/EnableAllFeaturesCommand.d.ts +29 -13
  31. package/dist-types/commands/EnablePolicyTypeCommand.d.ts +30 -12
  32. package/dist-types/commands/InviteAccountToOrganizationCommand.d.ts +30 -27
  33. package/dist-types/commands/LeaveOrganizationCommand.d.ts +27 -14
  34. package/dist-types/commands/ListAWSServiceAccessForOrganizationCommand.d.ts +28 -10
  35. package/dist-types/commands/ListAccountsCommand.d.ts +3 -2
  36. package/dist-types/commands/ListAccountsForParentCommand.d.ts +3 -2
  37. package/dist-types/commands/ListChildrenCommand.d.ts +3 -2
  38. package/dist-types/commands/ListCreateAccountStatusCommand.d.ts +3 -2
  39. package/dist-types/commands/ListDelegatedAdministratorsCommand.d.ts +28 -10
  40. package/dist-types/commands/ListDelegatedServicesForAccountCommand.d.ts +28 -10
  41. package/dist-types/commands/ListHandshakesForAccountCommand.d.ts +2 -1
  42. package/dist-types/commands/ListHandshakesForOrganizationCommand.d.ts +3 -2
  43. package/dist-types/commands/ListOrganizationalUnitsForParentCommand.d.ts +3 -2
  44. package/dist-types/commands/ListParentsCommand.d.ts +3 -2
  45. package/dist-types/commands/ListPoliciesCommand.d.ts +5 -4
  46. package/dist-types/commands/ListPoliciesForTargetCommand.d.ts +5 -4
  47. package/dist-types/commands/ListRootsCommand.d.ts +4 -3
  48. package/dist-types/commands/ListTagsForResourceCommand.d.ts +3 -2
  49. package/dist-types/commands/ListTargetsForPolicyCommand.d.ts +3 -2
  50. package/dist-types/commands/MoveAccountCommand.d.ts +2 -1
  51. package/dist-types/commands/PutResourcePolicyCommand.d.ts +28 -10
  52. package/dist-types/commands/RegisterDelegatedAdministratorCommand.d.ts +27 -9
  53. package/dist-types/commands/RemoveAccountFromOrganizationCommand.d.ts +27 -9
  54. package/dist-types/commands/TagResourceCommand.d.ts +28 -10
  55. package/dist-types/commands/UntagResourceCommand.d.ts +28 -10
  56. package/dist-types/commands/UpdateOrganizationalUnitCommand.d.ts +2 -1
  57. package/dist-types/commands/UpdatePolicyCommand.d.ts +29 -11
  58. package/dist-types/endpoint/EndpointParameters.d.ts +1 -1
  59. package/dist-types/models/models_0.d.ts +62 -13
  60. package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +4 -1
  61. package/dist-types/ts3.4/models/models_0.d.ts +3 -0
  62. package/package.json +11 -11
package/dist-cjs/index.js CHANGED
@@ -829,6 +829,7 @@ var ConstraintViolationExceptionReason = {
829
829
  OU_NUMBER_LIMIT_EXCEEDED: "OU_NUMBER_LIMIT_EXCEEDED",
830
830
  POLICY_CONTENT_LIMIT_EXCEEDED: "POLICY_CONTENT_LIMIT_EXCEEDED",
831
831
  POLICY_NUMBER_LIMIT_EXCEEDED: "POLICY_NUMBER_LIMIT_EXCEEDED",
832
+ POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: "POLICY_TYPE_ENABLED_FOR_THIS_SERVICE",
832
833
  SERVICE_ACCESS_NOT_ENABLED: "SERVICE_ACCESS_NOT_ENABLED",
833
834
  TAG_POLICY_VIOLATION: "TAG_POLICY_VIOLATION",
834
835
  WAIT_PERIOD_ACTIVE: "WAIT_PERIOD_ACTIVE"
@@ -1056,6 +1057,7 @@ var PolicyType = {
1056
1057
  CHATBOT_POLICY: "CHATBOT_POLICY",
1057
1058
  DECLARATIVE_POLICY_EC2: "DECLARATIVE_POLICY_EC2",
1058
1059
  RESOURCE_CONTROL_POLICY: "RESOURCE_CONTROL_POLICY",
1060
+ SECURITYHUB_POLICY: "SECURITYHUB_POLICY",
1059
1061
  SERVICE_CONTROL_POLICY: "SERVICE_CONTROL_POLICY",
1060
1062
  TAG_POLICY: "TAG_POLICY"
1061
1063
  };
@@ -1284,6 +1286,7 @@ var EffectivePolicyType = {
1284
1286
  BACKUP_POLICY: "BACKUP_POLICY",
1285
1287
  CHATBOT_POLICY: "CHATBOT_POLICY",
1286
1288
  DECLARATIVE_POLICY_EC2: "DECLARATIVE_POLICY_EC2",
1289
+ SECURITYHUB_POLICY: "SECURITYHUB_POLICY",
1287
1290
  TAG_POLICY: "TAG_POLICY"
1288
1291
  };
1289
1292
  var EffectivePolicyNotFoundException = class _EffectivePolicyNotFoundException extends OrganizationsServiceException {
package/dist-es/models/models_0.js CHANGED
@@ -365,6 +365,7 @@ export const ConstraintViolationExceptionReason = {
365
365
  OU_NUMBER_LIMIT_EXCEEDED: "OU_NUMBER_LIMIT_EXCEEDED",
366
366
  POLICY_CONTENT_LIMIT_EXCEEDED: "POLICY_CONTENT_LIMIT_EXCEEDED",
367
367
  POLICY_NUMBER_LIMIT_EXCEEDED: "POLICY_NUMBER_LIMIT_EXCEEDED",
368
+ POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: "POLICY_TYPE_ENABLED_FOR_THIS_SERVICE",
368
369
  SERVICE_ACCESS_NOT_ENABLED: "SERVICE_ACCESS_NOT_ENABLED",
369
370
  TAG_POLICY_VIOLATION: "TAG_POLICY_VIOLATION",
370
371
  WAIT_PERIOD_ACTIVE: "WAIT_PERIOD_ACTIVE",
@@ -538,6 +539,7 @@ export const PolicyType = {
538
539
  CHATBOT_POLICY: "CHATBOT_POLICY",
539
540
  DECLARATIVE_POLICY_EC2: "DECLARATIVE_POLICY_EC2",
540
541
  RESOURCE_CONTROL_POLICY: "RESOURCE_CONTROL_POLICY",
542
+ SECURITYHUB_POLICY: "SECURITYHUB_POLICY",
541
543
  SERVICE_CONTROL_POLICY: "SERVICE_CONTROL_POLICY",
542
544
  TAG_POLICY: "TAG_POLICY",
543
545
  };
@@ -700,6 +702,7 @@ export const EffectivePolicyType = {
700
702
  BACKUP_POLICY: "BACKUP_POLICY",
701
703
  CHATBOT_POLICY: "CHATBOT_POLICY",
702
704
  DECLARATIVE_POLICY_EC2: "DECLARATIVE_POLICY_EC2",
705
+ SECURITYHUB_POLICY: "SECURITYHUB_POLICY",
703
706
  TAG_POLICY: "TAG_POLICY",
704
707
  };
705
708
  export class EffectivePolicyNotFoundException extends __BaseException {
package/dist-types/commands/AcceptHandshakeCommand.d.ts CHANGED
@@ -174,10 +174,8 @@ declare const AcceptHandshakeCommand_base: {
174
174
  * </li>
175
175
  * <li>
176
176
  * <p>ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD: The request failed because the
177
- * account is from a different marketplace than the accounts in the organization.
178
- * For example, accounts with India addresses must be associated with the AISPL
179
- * marketplace. All accounts in an organization must be from the same
180
- * marketplace.</p>
177
+ * account is from a different marketplace than the accounts in the
178
+ * organization.</p>
181
179
  * </li>
182
180
  * <li>
183
181
  * <p>ORGANIZATION_MEMBERSHIP_CHANGE_RATE_LIMIT_EXCEEDED: You attempted to change
@@ -253,7 +251,8 @@ declare const AcceptHandshakeCommand_base: {
253
251
  * the required pattern.</p>
254
252
  * </li>
255
253
  * <li>
256
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
254
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
255
+ * policy.</p>
257
256
  * </li>
258
257
  * <li>
259
258
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/AttachPolicyCommand.d.ts CHANGED
@@ -66,9 +66,14 @@ declare const AttachPolicyCommand_base: {
66
66
  * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html">AISERVICES_OPT_OUT_POLICY</a>
67
67
  * </p>
68
68
  * </li>
69
+ * <li>
70
+ * <p>
71
+ * <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_security_hub.html">SECURITYHUB_POLICY</a>
72
+ * </p>
73
+ * </li>
69
74
  * </ul>
70
75
  * <p>This operation can be called only from the organization's
71
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
76
+ * management account or by a member account that is a delegated administrator.</p>
72
77
  * @example
73
78
  * Use a bare-bones client and the command you need to make an API call.
74
79
  * ```javascript
@@ -154,9 +159,11 @@ declare const AttachPolicyCommand_base: {
154
159
  * </important>
155
160
  * </li>
156
161
  * <li>
157
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
158
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
159
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
162
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
163
+ * more than 5000 accounts, and you can only use the standard migration process for
164
+ * organizations with less than 5000 accounts. Use the assisted migration process
165
+ * to enable all features mode, or create a support case for assistance if you are
166
+ * unable to use assisted migration.</p>
160
167
  * </li>
161
168
  * <li>
162
169
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -291,17 +298,32 @@ declare const AttachPolicyCommand_base: {
291
298
  * that you can have in an organization.</p>
292
299
  * </li>
293
300
  * <li>
294
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
295
- * administrator before you enabled service access. Call the
296
- * <code>EnableAWSServiceAccess</code> API first.</p>
301
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
302
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
303
+ * complete this operation, you must first disable the policy type.</p>
304
+ * </li>
305
+ * <li>
306
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
307
+ * <ul>
308
+ * <li>
309
+ * <p>You attempted to register a delegated administrator before you enabled
310
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
311
+ * first.</p>
312
+ * </li>
313
+ * <li>
314
+ * <p>You attempted to enable a policy type before you enabled service
315
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
316
+ * </li>
317
+ * </ul>
297
318
  * </li>
298
319
  * <li>
299
320
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
300
321
  * that are not compliant with the tag policy requirements for this account.</p>
301
322
  * </li>
302
323
  * <li>
303
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
304
- * Invited accounts aren't subject to this waiting period.</p>
324
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
325
+ * least seven days after the account was created. Invited accounts aren't subject
326
+ * to this waiting period.</p>
305
327
  * </li>
306
328
  * </ul>
307
329
  *
@@ -363,7 +385,8 @@ declare const AttachPolicyCommand_base: {
363
385
  * the required pattern.</p>
364
386
  * </li>
365
387
  * <li>
366
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
388
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
389
+ * policy.</p>
367
390
  * </li>
368
391
  * <li>
369
392
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/CancelHandshakeCommand.d.ts CHANGED
@@ -159,7 +159,8 @@ declare const CancelHandshakeCommand_base: {
159
159
  * the required pattern.</p>
160
160
  * </li>
161
161
  * <li>
162
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
162
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
163
+ * policy.</p>
163
164
  * </li>
164
165
  * <li>
165
166
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/CloseAccountCommand.d.ts CHANGED
@@ -170,9 +170,11 @@ declare const CloseAccountCommand_base: {
170
170
  * </important>
171
171
  * </li>
172
172
  * <li>
173
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
174
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
175
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
173
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
174
+ * more than 5000 accounts, and you can only use the standard migration process for
175
+ * organizations with less than 5000 accounts. Use the assisted migration process
176
+ * to enable all features mode, or create a support case for assistance if you are
177
+ * unable to use assisted migration.</p>
176
178
  * </li>
177
179
  * <li>
178
180
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -307,17 +309,32 @@ declare const CloseAccountCommand_base: {
307
309
  * that you can have in an organization.</p>
308
310
  * </li>
309
311
  * <li>
310
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
311
- * administrator before you enabled service access. Call the
312
- * <code>EnableAWSServiceAccess</code> API first.</p>
312
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
313
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
314
+ * complete this operation, you must first disable the policy type.</p>
315
+ * </li>
316
+ * <li>
317
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
318
+ * <ul>
319
+ * <li>
320
+ * <p>You attempted to register a delegated administrator before you enabled
321
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
322
+ * first.</p>
323
+ * </li>
324
+ * <li>
325
+ * <p>You attempted to enable a policy type before you enabled service
326
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
327
+ * </li>
328
+ * </ul>
313
329
  * </li>
314
330
  * <li>
315
331
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
316
332
  * that are not compliant with the tag policy requirements for this account.</p>
317
333
  * </li>
318
334
  * <li>
319
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
320
- * Invited accounts aren't subject to this waiting period.</p>
335
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
336
+ * least seven days after the account was created. Invited accounts aren't subject
337
+ * to this waiting period.</p>
321
338
  * </li>
322
339
  * </ul>
323
340
  *
@@ -376,7 +393,8 @@ declare const CloseAccountCommand_base: {
376
393
  * the required pattern.</p>
377
394
  * </li>
378
395
  * <li>
379
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
396
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
397
+ * policy.</p>
380
398
  * </li>
381
399
  * <li>
382
400
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/CreateAccountCommand.d.ts CHANGED
@@ -203,9 +203,11 @@ declare const CreateAccountCommand_base: {
203
203
  * </important>
204
204
  * </li>
205
205
  * <li>
206
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
207
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
208
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
206
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
207
+ * more than 5000 accounts, and you can only use the standard migration process for
208
+ * organizations with less than 5000 accounts. Use the assisted migration process
209
+ * to enable all features mode, or create a support case for assistance if you are
210
+ * unable to use assisted migration.</p>
209
211
  * </li>
210
212
  * <li>
211
213
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -340,17 +342,32 @@ declare const CreateAccountCommand_base: {
340
342
  * that you can have in an organization.</p>
341
343
  * </li>
342
344
  * <li>
343
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
344
- * administrator before you enabled service access. Call the
345
- * <code>EnableAWSServiceAccess</code> API first.</p>
345
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
346
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
347
+ * complete this operation, you must first disable the policy type.</p>
348
+ * </li>
349
+ * <li>
350
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
351
+ * <ul>
352
+ * <li>
353
+ * <p>You attempted to register a delegated administrator before you enabled
354
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
355
+ * first.</p>
356
+ * </li>
357
+ * <li>
358
+ * <p>You attempted to enable a policy type before you enabled service
359
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
360
+ * </li>
361
+ * </ul>
346
362
  * </li>
347
363
  * <li>
348
364
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
349
365
  * that are not compliant with the tag policy requirements for this account.</p>
350
366
  * </li>
351
367
  * <li>
352
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
353
- * Invited accounts aren't subject to this waiting period.</p>
368
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
369
+ * least seven days after the account was created. Invited accounts aren't subject
370
+ * to this waiting period.</p>
354
371
  * </li>
355
372
  * </ul>
356
373
  *
@@ -414,7 +431,8 @@ declare const CreateAccountCommand_base: {
414
431
  * the required pattern.</p>
415
432
  * </li>
416
433
  * <li>
417
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
434
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
435
+ * policy.</p>
418
436
  * </li>
419
437
  * <li>
420
438
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/CreateGovCloudAccountCommand.d.ts CHANGED
@@ -257,9 +257,11 @@ declare const CreateGovCloudAccountCommand_base: {
257
257
  * </important>
258
258
  * </li>
259
259
  * <li>
260
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
261
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
262
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
260
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
261
+ * more than 5000 accounts, and you can only use the standard migration process for
262
+ * organizations with less than 5000 accounts. Use the assisted migration process
263
+ * to enable all features mode, or create a support case for assistance if you are
264
+ * unable to use assisted migration.</p>
263
265
  * </li>
264
266
  * <li>
265
267
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -394,17 +396,32 @@ declare const CreateGovCloudAccountCommand_base: {
394
396
  * that you can have in an organization.</p>
395
397
  * </li>
396
398
  * <li>
397
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
398
- * administrator before you enabled service access. Call the
399
- * <code>EnableAWSServiceAccess</code> API first.</p>
399
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
400
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
401
+ * complete this operation, you must first disable the policy type.</p>
402
+ * </li>
403
+ * <li>
404
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
405
+ * <ul>
406
+ * <li>
407
+ * <p>You attempted to register a delegated administrator before you enabled
408
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
409
+ * first.</p>
410
+ * </li>
411
+ * <li>
412
+ * <p>You attempted to enable a policy type before you enabled service
413
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
414
+ * </li>
415
+ * </ul>
400
416
  * </li>
401
417
  * <li>
402
418
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
403
419
  * that are not compliant with the tag policy requirements for this account.</p>
404
420
  * </li>
405
421
  * <li>
406
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
407
- * Invited accounts aren't subject to this waiting period.</p>
422
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
423
+ * least seven days after the account was created. Invited accounts aren't subject
424
+ * to this waiting period.</p>
408
425
  * </li>
409
426
  * </ul>
410
427
  *
@@ -468,7 +485,8 @@ declare const CreateGovCloudAccountCommand_base: {
468
485
  * the required pattern.</p>
469
486
  * </li>
470
487
  * <li>
471
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
488
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
489
+ * policy.</p>
472
490
  * </li>
473
491
  * <li>
474
492
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/CreateOrganizationCommand.d.ts CHANGED
@@ -59,7 +59,7 @@ declare const CreateOrganizationCommand_base: {
59
59
  * // MasterAccountEmail: "STRING_VALUE",
60
60
  * // AvailablePolicyTypes: [ // PolicyTypes
61
61
  * // { // PolicyTypeSummary
62
- * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2",
62
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY",
63
63
  * // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
64
64
  * // },
65
65
  * // ],
@@ -143,9 +143,11 @@ declare const CreateOrganizationCommand_base: {
143
143
  * </important>
144
144
  * </li>
145
145
  * <li>
146
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
147
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
148
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
146
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
147
+ * more than 5000 accounts, and you can only use the standard migration process for
148
+ * organizations with less than 5000 accounts. Use the assisted migration process
149
+ * to enable all features mode, or create a support case for assistance if you are
150
+ * unable to use assisted migration.</p>
149
151
  * </li>
150
152
  * <li>
151
153
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -280,17 +282,32 @@ declare const CreateOrganizationCommand_base: {
280
282
  * that you can have in an organization.</p>
281
283
  * </li>
282
284
  * <li>
283
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
284
- * administrator before you enabled service access. Call the
285
- * <code>EnableAWSServiceAccess</code> API first.</p>
285
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
286
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
287
+ * complete this operation, you must first disable the policy type.</p>
288
+ * </li>
289
+ * <li>
290
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
291
+ * <ul>
292
+ * <li>
293
+ * <p>You attempted to register a delegated administrator before you enabled
294
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
295
+ * first.</p>
296
+ * </li>
297
+ * <li>
298
+ * <p>You attempted to enable a policy type before you enabled service
299
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
300
+ * </li>
301
+ * </ul>
286
302
  * </li>
287
303
  * <li>
288
304
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
289
305
  * that are not compliant with the tag policy requirements for this account.</p>
290
306
  * </li>
291
307
  * <li>
292
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
293
- * Invited accounts aren't subject to this waiting period.</p>
308
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
309
+ * least seven days after the account was created. Invited accounts aren't subject
310
+ * to this waiting period.</p>
294
311
  * </li>
295
312
  * </ul>
296
313
  *
@@ -349,7 +366,8 @@ declare const CreateOrganizationCommand_base: {
349
366
  * the required pattern.</p>
350
367
  * </li>
351
368
  * <li>
352
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
369
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
370
+ * policy.</p>
353
371
  * </li>
354
372
  * <li>
355
373
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/CreateOrganizationalUnitCommand.d.ts CHANGED
@@ -134,9 +134,11 @@ declare const CreateOrganizationalUnitCommand_base: {
134
134
  * </important>
135
135
  * </li>
136
136
  * <li>
137
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
138
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
139
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
137
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
138
+ * more than 5000 accounts, and you can only use the standard migration process for
139
+ * organizations with less than 5000 accounts. Use the assisted migration process
140
+ * to enable all features mode, or create a support case for assistance if you are
141
+ * unable to use assisted migration.</p>
140
142
  * </li>
141
143
  * <li>
142
144
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -271,17 +273,32 @@ declare const CreateOrganizationalUnitCommand_base: {
271
273
  * that you can have in an organization.</p>
272
274
  * </li>
273
275
  * <li>
274
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
275
- * administrator before you enabled service access. Call the
276
- * <code>EnableAWSServiceAccess</code> API first.</p>
276
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
277
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
278
+ * complete this operation, you must first disable the policy type.</p>
279
+ * </li>
280
+ * <li>
281
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
282
+ * <ul>
283
+ * <li>
284
+ * <p>You attempted to register a delegated administrator before you enabled
285
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
286
+ * first.</p>
287
+ * </li>
288
+ * <li>
289
+ * <p>You attempted to enable a policy type before you enabled service
290
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
291
+ * </li>
292
+ * </ul>
277
293
  * </li>
278
294
  * <li>
279
295
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
280
296
  * that are not compliant with the tag policy requirements for this account.</p>
281
297
  * </li>
282
298
  * <li>
283
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
284
- * Invited accounts aren't subject to this waiting period.</p>
299
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
300
+ * least seven days after the account was created. Invited accounts aren't subject
301
+ * to this waiting period.</p>
285
302
  * </li>
286
303
  * </ul>
287
304
  *
@@ -343,7 +360,8 @@ declare const CreateOrganizationalUnitCommand_base: {
343
360
  * the required pattern.</p>
344
361
  * </li>
345
362
  * <li>
346
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
363
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
364
+ * policy.</p>
347
365
  * </li>
348
366
  * <li>
349
367
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/CreatePolicyCommand.d.ts CHANGED
@@ -34,7 +34,7 @@ declare const CreatePolicyCommand_base: {
34
34
  * <p>If the request includes tags, then the requester must have the
35
35
  * <code>organizations:TagResource</code> permission.</p>
36
36
  * <p>This operation can be called only from the organization's
37
- * management account or by a member account that is a delegated administrator for an Amazon Web Services service.</p>
37
+ * management account or by a member account that is a delegated administrator.</p>
38
38
  * @example
39
39
  * Use a bare-bones client and the command you need to make an API call.
40
40
  * ```javascript
@@ -45,7 +45,7 @@ declare const CreatePolicyCommand_base: {
45
45
  * Content: "STRING_VALUE", // required
46
46
  * Description: "STRING_VALUE", // required
47
47
  * Name: "STRING_VALUE", // required
48
- * Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2", // required
48
+ * Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY", // required
49
49
  * Tags: [ // Tags
50
50
  * { // Tag
51
51
  * Key: "STRING_VALUE", // required
@@ -62,7 +62,7 @@ declare const CreatePolicyCommand_base: {
62
62
  * // Arn: "STRING_VALUE",
63
63
  * // Name: "STRING_VALUE",
64
64
  * // Description: "STRING_VALUE",
65
- * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2",
65
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY" || "DECLARATIVE_POLICY_EC2" || "SECURITYHUB_POLICY",
66
66
  * // AwsManaged: true || false,
67
67
  * // },
68
68
  * // Content: "STRING_VALUE",
@@ -140,9 +140,11 @@ declare const CreatePolicyCommand_base: {
140
140
  * </important>
141
141
  * </li>
142
142
  * <li>
143
- * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED:
144
- * Your organization has more than 5000 accounts, and you can only use the standard migration process for organizations with less than 5000 accounts.
145
- * Use the assisted migration process to enable all features mode, or create a support case for assistance if you are unable to use assisted migration.</p>
143
+ * <p>ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has
144
+ * more than 5000 accounts, and you can only use the standard migration process for
145
+ * organizations with less than 5000 accounts. Use the assisted migration process
146
+ * to enable all features mode, or create a support case for assistance if you are
147
+ * unable to use assisted migration.</p>
146
148
  * </li>
147
149
  * <li>
148
150
  * <p>CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot
@@ -277,17 +279,32 @@ declare const CreatePolicyCommand_base: {
277
279
  * that you can have in an organization.</p>
278
280
  * </li>
279
281
  * <li>
280
- * <p>SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated
281
- * administrator before you enabled service access. Call the
282
- * <code>EnableAWSServiceAccess</code> API first.</p>
282
+ * <p>POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access
283
+ * before you disabled the policy type (for example, SECURITYHUB_POLICY). To
284
+ * complete this operation, you must first disable the policy type.</p>
285
+ * </li>
286
+ * <li>
287
+ * <p>SERVICE_ACCESS_NOT_ENABLED:</p>
288
+ * <ul>
289
+ * <li>
290
+ * <p>You attempted to register a delegated administrator before you enabled
291
+ * service access. Call the <code>EnableAWSServiceAccess</code> API
292
+ * first.</p>
293
+ * </li>
294
+ * <li>
295
+ * <p>You attempted to enable a policy type before you enabled service
296
+ * access. Call the <code>EnableAWSServiceAccess</code> API first.</p>
297
+ * </li>
298
+ * </ul>
283
299
  * </li>
284
300
  * <li>
285
301
  * <p>TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags
286
302
  * that are not compliant with the tag policy requirements for this account.</p>
287
303
  * </li>
288
304
  * <li>
289
- * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at least seven days after the account was created.
290
- * Invited accounts aren't subject to this waiting period.</p>
305
+ * <p>WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at
306
+ * least seven days after the account was created. Invited accounts aren't subject
307
+ * to this waiting period.</p>
291
308
  * </li>
292
309
  * </ul>
293
310
  *
@@ -349,7 +366,8 @@ declare const CreatePolicyCommand_base: {
349
366
  * the required pattern.</p>
350
367
  * </li>
351
368
  * <li>
352
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
369
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
370
+ * policy.</p>
353
371
  * </li>
354
372
  * <li>
355
373
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DeclineHandshakeCommand.d.ts CHANGED
@@ -160,7 +160,8 @@ declare const DeclineHandshakeCommand_base: {
160
160
  * the required pattern.</p>
161
161
  * </li>
162
162
  * <li>
163
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
163
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
164
+ * policy.</p>
164
165
  * </li>
165
166
  * <li>
166
167
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DeleteOrganizationCommand.d.ts CHANGED
@@ -116,7 +116,8 @@ declare const DeleteOrganizationCommand_base: {
116
116
  * the required pattern.</p>
117
117
  * </li>
118
118
  * <li>
119
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
119
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
120
+ * policy.</p>
120
121
  * </li>
121
122
  * <li>
122
123
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
package/dist-types/commands/DeleteOrganizationalUnitCommand.d.ts CHANGED
@@ -120,7 +120,8 @@ declare const DeleteOrganizationalUnitCommand_base: {
120
120
  * the required pattern.</p>
121
121
  * </li>
122
122
  * <li>
123
- * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
123
+ * <p>INVALID_PRINCIPAL: You specified an invalid principal element in the
124
+ * policy.</p>
124
125
  * </li>
125
126
  * <li>
126
127
  * <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name