package types

import "github.com/aws/aws-sdk-go-v2/service/organizations/types"

Index

Types

type AWSOrganizationsNotInUseException

type AWSOrganizationsNotInUseException struct {
	Message *string
}

Your account isn't a member of an organization. To make this request, you must use the credentials of an account that belongs to an organization.

func (*AWSOrganizationsNotInUseException) Error

func (*AWSOrganizationsNotInUseException) ErrorCode

func (*AWSOrganizationsNotInUseException) ErrorFault

func (*AWSOrganizationsNotInUseException) ErrorMessage

func (e *AWSOrganizationsNotInUseException) ErrorMessage() string

type AccessDeniedException

type AccessDeniedException struct {
	Message *string
}

You don't have permissions to perform the requested operation. The user or role that is making the request must have at least one IAM permissions policy attached that grants the required permissions. For more information, see Access Management (https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html) in the IAM User Guide.

func (*AccessDeniedException) Error

func (e *AccessDeniedException) Error() string

func (*AccessDeniedException) ErrorCode

func (e *AccessDeniedException) ErrorCode() string

func (*AccessDeniedException) ErrorFault

func (e *AccessDeniedException) ErrorFault() smithy.ErrorFault

func (*AccessDeniedException) ErrorMessage

func (e *AccessDeniedException) ErrorMessage() string

type AccessDeniedForDependencyException

type AccessDeniedForDependencyException struct {
	Message *string

	Reason AccessDeniedForDependencyExceptionReason
}

The operation that you attempted requires you to have the iam:CreateServiceLinkedRole for organizations.amazonaws.com permission so that AWS Organizations can create the required service-linked role. You don't have that permission.

func (*AccessDeniedForDependencyException) Error

func (*AccessDeniedForDependencyException) ErrorCode

func (*AccessDeniedForDependencyException) ErrorFault

func (*AccessDeniedForDependencyException) ErrorMessage

func (e *AccessDeniedForDependencyException) ErrorMessage() string

type AccessDeniedForDependencyExceptionReason

type AccessDeniedForDependencyExceptionReason string
const (
	AccessDeniedForDependencyExceptionReasonAccess_denied_during_create_service_linked_role AccessDeniedForDependencyExceptionReason = "ACCESS_DENIED_DURING_CREATE_SERVICE_LINKED_ROLE"
)

Enum values for AccessDeniedForDependencyExceptionReason

type Account

type Account struct {

	// The Amazon Resource Name (ARN) of the account. For more information about ARNs
	// in Organizations, see ARN Formats Supported by Organizations
	// (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns)
	// in the AWS Organizations User Guide.
	Arn *string

	// The email address associated with the AWS account. The regex pattern
	// (http://wikipedia.org/wiki/regex) for this parameter is a string of characters
	// that represents a standard internet email address.
	Email *string

	// The unique identifier (ID) of the account. The regex pattern
	// (http://wikipedia.org/wiki/regex) for an account ID string requires exactly 12
	// digits.
	Id *string

	// The method by which the account joined the organization.
	JoinedMethod AccountJoinedMethod

	// The date the account became a part of the organization.
	JoinedTimestamp *time.Time

	// The friendly name of the account. The regex pattern
	// (http://wikipedia.org/wiki/regex) that is used to validate this parameter is a
	// string of any of the characters in the ASCII character range.
	Name *string

	// The status of the account in the organization.
	Status AccountStatus
}

Contains information about an AWS account that is a member of an organization.

type AccountAlreadyRegisteredException

type AccountAlreadyRegisteredException struct {
	Message *string
}

The specified account is already a delegated administrator for this AWS service.

func (*AccountAlreadyRegisteredException) Error

func (*AccountAlreadyRegisteredException) ErrorCode

func (*AccountAlreadyRegisteredException) ErrorFault

func (*AccountAlreadyRegisteredException) ErrorMessage

func (e *AccountAlreadyRegisteredException) ErrorMessage() string

type AccountJoinedMethod

type AccountJoinedMethod string
const (
	AccountJoinedMethodInvited AccountJoinedMethod = "INVITED"
	AccountJoinedMethodCreated AccountJoinedMethod = "CREATED"
)

Enum values for AccountJoinedMethod

type AccountNotFoundException

type AccountNotFoundException struct {
	Message *string
}

We can't find an AWS account with the AccountId that you specified, or the account whose credentials you used to make this request isn't a member of an organization.

func (*AccountNotFoundException) Error

func (e *AccountNotFoundException) Error() string

func (*AccountNotFoundException) ErrorCode

func (e *AccountNotFoundException) ErrorCode() string

func (*AccountNotFoundException) ErrorFault

func (e *AccountNotFoundException) ErrorFault() smithy.ErrorFault

func (*AccountNotFoundException) ErrorMessage

func (e *AccountNotFoundException) ErrorMessage() string

type AccountNotRegisteredException

type AccountNotRegisteredException struct {
	Message *string
}

The specified account is not a delegated administrator for this AWS service.

func (*AccountNotRegisteredException) Error

func (*AccountNotRegisteredException) ErrorCode

func (e *AccountNotRegisteredException) ErrorCode() string

func (*AccountNotRegisteredException) ErrorFault

func (*AccountNotRegisteredException) ErrorMessage

func (e *AccountNotRegisteredException) ErrorMessage() string

type AccountOwnerNotVerifiedException

type AccountOwnerNotVerifiedException struct {
	Message *string
}

You can't invite an existing account to your organization until you verify that you own the email address associated with the master account. For more information, see Email Address Verification (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_create.html#about-email-verification) in the AWS Organizations User Guide.

func (*AccountOwnerNotVerifiedException) Error

func (*AccountOwnerNotVerifiedException) ErrorCode

func (*AccountOwnerNotVerifiedException) ErrorFault

func (*AccountOwnerNotVerifiedException) ErrorMessage

func (e *AccountOwnerNotVerifiedException) ErrorMessage() string

type AccountStatus

type AccountStatus string
const (
	AccountStatusActive    AccountStatus = "ACTIVE"
	AccountStatusSuspended AccountStatus = "SUSPENDED"
)

Enum values for AccountStatus

type ActionType

type ActionType string
const (
	ActionTypeInvite_account_to_organization        ActionType = "INVITE"
	ActionTypeEnable_all_features                   ActionType = "ENABLE_ALL_FEATURES"
	ActionTypeApprove_all_features                  ActionType = "APPROVE_ALL_FEATURES"
	ActionTypeAdd_organizations_service_linked_role ActionType = "ADD_ORGANIZATIONS_SERVICE_LINKED_ROLE"
)

Enum values for ActionType

type AlreadyInOrganizationException

type AlreadyInOrganizationException struct {
	Message *string
}

This account is already a member of an organization. An account can belong to only one organization at a time.

func (*AlreadyInOrganizationException) Error

func (*AlreadyInOrganizationException) ErrorCode

func (e *AlreadyInOrganizationException) ErrorCode() string

func (*AlreadyInOrganizationException) ErrorFault

func (*AlreadyInOrganizationException) ErrorMessage

func (e *AlreadyInOrganizationException) ErrorMessage() string

type Child

type Child struct {

	// The unique identifier (ID) of this child entity. The regex pattern
	// (http://wikipedia.org/wiki/regex) for a child ID string requires one of the
	// following:
	//
	//     * Account: A string that consists of exactly 12 digits.
	//
	//     *
	// Organizational unit (OU): A string that begins with "ou-" followed by from 4 to
	// 32 lower-case letters or digits (the ID of the root that contains the OU). This
	// string is followed by a second "-" dash and from 8 to 32 additional lower-case
	// letters or digits.
	Id *string

	// The type of this child entity.
	Type ChildType
}

Contains a list of child entities, either OUs or accounts.

type ChildNotFoundException

type ChildNotFoundException struct {
	Message *string
}

We can't find an organizational unit (OU) or AWS account with the ChildId that you specified.

func (*ChildNotFoundException) Error

func (e *ChildNotFoundException) Error() string

func (*ChildNotFoundException) ErrorCode

func (e *ChildNotFoundException) ErrorCode() string

func (*ChildNotFoundException) ErrorFault

func (e *ChildNotFoundException) ErrorFault() smithy.ErrorFault

func (*ChildNotFoundException) ErrorMessage

func (e *ChildNotFoundException) ErrorMessage() string

type ChildType

type ChildType string
const (
	ChildTypeAccount             ChildType = "ACCOUNT"
	ChildTypeOrganizational_unit ChildType = "ORGANIZATIONAL_UNIT"
)

Enum values for ChildType

type ConcurrentModificationException

type ConcurrentModificationException struct {
	Message *string
}

The target of the operation is currently being modified by a different request. Try again later.

func (*ConcurrentModificationException) Error

func (*ConcurrentModificationException) ErrorCode

func (e *ConcurrentModificationException) ErrorCode() string

func (*ConcurrentModificationException) ErrorFault

func (*ConcurrentModificationException) ErrorMessage

func (e *ConcurrentModificationException) ErrorMessage() string

type ConstraintViolationException

type ConstraintViolationException struct {
	Message *string

	Reason ConstraintViolationExceptionReason
}

Performing this operation violates a minimum or maximum value limit. For example, attempting to remove the last service control policy (SCP) from an OU or root, inviting or creating too many accounts to the organization, or attaching too many policies to an account, OU, or root. This exception includes a reason that contains additional information about the violated limit: Some of the reasons in the following list might not be applicable to this specific API or operation.

the master account from the organization. You can't remove the master account. Instead, after you remove all member accounts, delete the organization itself.

* ACCOUNT_CANNOT_LEAVE_WITHOUT_EULA: You attempted to remove an account from the organization that doesn't yet have enough information to exist as a standalone account. This account requires you to first agree to the AWS Customer Agreement. Follow the steps at Removing a member account from your organization (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#orgs_manage_accounts_remove-from-master)in the AWS Organizations User Guide.

*

ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION: You attempted to remove an account from the organization that doesn't yet have enough information to exist as a standalone account. This account requires you to first complete phone verification. Follow the steps at Removing a member account from your organization (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#orgs_manage_accounts_remove-from-master) in the AWS Organizations User Guide.

*

ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of accounts that you can create in one day.

You attempted to exceed the limit on the number of accounts in an organization. If you need more accounts, contact AWS Support (https://console.aws.amazon.com/support/home#/) to request an increase in your limit. Or the number of invitations that you tried to send would cause you to exceed the limit of accounts in your organization. Send fewer invitations or contact AWS Support to request an increase in the number of accounts. Deleted and closed accounts still count toward your limit. If you get this exception when running a command immediately after creating the organization, wait one hour and try again. After an hour, if the command continues to fail with this error, contact AWS Support (https://console.aws.amazon.com/support/home#/).

* CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR: You attempted to register the master account of the organization as a delegated administrator for an AWS service integrated with Organizations. You can designate only a member account as a delegated administrator.

*

CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG: You attempted to remove an account that is registered as a delegated administrator for a service integrated with your organization. To complete this operation, you must first deregister this account as a delegated administrator.

*

CREATE_ORGANIZATION_IN_BILLING_MODE_UNSUPPORTED_REGION: To create an organization in the specified region, you must enable all features mode.

*

DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE: You attempted to register an AWS account as a delegated administrator for an AWS service that already has a delegated administrator. To complete this operation, you must first deregister any existing delegated administrators for this service.

*

EMAIL_VERIFICATION_CODE_EXPIRED: The email verification code is only valid for a limited period of time. You must resubmit the request and generate a new verfication code.

the number of handshakes that you can send in one day.

*

MASTER_ACCOUNT_ADDRESS_DOES_NOT_MATCH_MARKETPLACE: To create an account in this organization, you first must migrate the organization's master account to the marketplace that corresponds to the master account's address. For example, accounts with India addresses must be associated with the AISPL marketplace. All accounts in an organization must be associated with the same marketplace.

*

MASTER_ACCOUNT_MISSING_BUSINESS_LICENSE: Applies only to the AWS Regions in China. To create an organization, the master must have an valid business license. For more information, contact customer support.

*

MASTER_ACCOUNT_MISSING_CONTACT_INFO: To complete this operation, you must first provide a valid contact address and phone number for the master account. Then try the operation again.

this operation, the master account must have an associated account in the AWS GovCloud (US-West) Region. For more information, see AWS Organizations (http://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html) in the AWS GovCloud User Guide.

*

MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To create an organization with this master account, you first must associate a valid payment instrument, such as a credit card, with the account. Follow the steps at To leave an organization when all required account information has not yet been provided (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info) in the AWS Organizations User Guide.

*

MAX_DELEGATED_ADMINISTRATORS_FOR_SERVICE_LIMIT_EXCEEDED: You attempted to register more delegated administrators than allowed for the service principal.

* MAX_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to exceed the number of policies of a certain type that can be attached to an entity at one time.

* MAX_TAG_LIMIT_EXCEEDED: You have exceeded the number of tags allowed on this resource.

operation with this member account, you first must associate a valid payment instrument, such as a credit card, with the account. Follow the steps at To leave an organization when all required account information has not yet been provided (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info) in the AWS Organizations User Guide.

*

MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to detach a policy from an entity that would cause the entity to have fewer than the minimum number of policies of a certain type required.

*

ORGANIZATION_NOT_IN_ALL_FEATURES_MODE: You attempted to perform an operation that requires the organization to be configured to support all features. An organization that supports only consolidated billing features can't perform this operation.

that is too many levels deep.

exceed the number of OUs that you can have in an organization.

*

POLICY_CONTENT_LIMIT_EXCEEDED: You attempted to create a policy that is larger than the maximum size.

exceed the number of policies that you can have in an organization.

*

TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags that are not compliant with the tag policy requirements for this account.

func (*ConstraintViolationException) Error

func (*ConstraintViolationException) ErrorCode

func (e *ConstraintViolationException) ErrorCode() string

func (*ConstraintViolationException) ErrorFault

func (*ConstraintViolationException) ErrorMessage

func (e *ConstraintViolationException) ErrorMessage() string

type ConstraintViolationExceptionReason

type ConstraintViolationExceptionReason string
const (
	ConstraintViolationExceptionReasonAccount_number_limit_exceeded                           ConstraintViolationExceptionReason = "ACCOUNT_NUMBER_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonHandshake_rate_limit_exceeded                           ConstraintViolationExceptionReason = "HANDSHAKE_RATE_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonOu_number_limit_exceeded                                ConstraintViolationExceptionReason = "OU_NUMBER_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonOu_depth_limit_exceeded                                 ConstraintViolationExceptionReason = "OU_DEPTH_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonPolicy_number_limit_exceeded                            ConstraintViolationExceptionReason = "POLICY_NUMBER_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonPolicy_content_limit_exceeded                           ConstraintViolationExceptionReason = "POLICY_CONTENT_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonMax_policy_type_attachment_limit_exceeded               ConstraintViolationExceptionReason = "MAX_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonMin_policy_type_attachment_limit_exceeded               ConstraintViolationExceptionReason = "MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonAccount_cannot_leave_organization                       ConstraintViolationExceptionReason = "ACCOUNT_CANNOT_LEAVE_ORGANIZATION"
	ConstraintViolationExceptionReasonAccount_cannot_leave_without_eula                       ConstraintViolationExceptionReason = "ACCOUNT_CANNOT_LEAVE_WITHOUT_EULA"
	ConstraintViolationExceptionReasonAccount_cannot_leave_without_phone_verification         ConstraintViolationExceptionReason = "ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION"
	ConstraintViolationExceptionReasonMaster_account_payment_instrument_required              ConstraintViolationExceptionReason = "MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED"
	ConstraintViolationExceptionReasonMember_account_payment_instrument_required              ConstraintViolationExceptionReason = "MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED"
	ConstraintViolationExceptionReasonAccount_creation_rate_limit_exceeded                    ConstraintViolationExceptionReason = "ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonMaster_account_address_does_not_match_marketplace       ConstraintViolationExceptionReason = "MASTER_ACCOUNT_ADDRESS_DOES_NOT_MATCH_MARKETPLACE"
	ConstraintViolationExceptionReasonMaster_account_missing_contact_info                     ConstraintViolationExceptionReason = "MASTER_ACCOUNT_MISSING_CONTACT_INFO"
	ConstraintViolationExceptionReasonMaster_account_not_govcloud_enabled                     ConstraintViolationExceptionReason = "MASTER_ACCOUNT_NOT_GOVCLOUD_ENABLED"
	ConstraintViolationExceptionReasonOrganization_not_in_all_features_mode                   ConstraintViolationExceptionReason = "ORGANIZATION_NOT_IN_ALL_FEATURES_MODE"
	ConstraintViolationExceptionReasonCreate_organization_in_billing_mode_unsupported_region  ConstraintViolationExceptionReason = "CREATE_ORGANIZATION_IN_BILLING_MODE_UNSUPPORTED_REGION"
	ConstraintViolationExceptionReasonEmail_verification_code_expired                         ConstraintViolationExceptionReason = "EMAIL_VERIFICATION_CODE_EXPIRED"
	ConstraintViolationExceptionReasonWait_period_active                                      ConstraintViolationExceptionReason = "WAIT_PERIOD_ACTIVE"
	ConstraintViolationExceptionReasonMax_tag_limit_exceeded                                  ConstraintViolationExceptionReason = "MAX_TAG_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonTag_policy_violation                                    ConstraintViolationExceptionReason = "TAG_POLICY_VIOLATION"
	ConstraintViolationExceptionReasonMax_delegated_administrators_for_service_limit_exceeded ConstraintViolationExceptionReason = "MAX_DELEGATED_ADMINISTRATORS_FOR_SERVICE_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonCannot_register_master_as_delegated_administrator       ConstraintViolationExceptionReason = "CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR"
	ConstraintViolationExceptionReasonCannot_remove_delegated_administrator_from_org          ConstraintViolationExceptionReason = "CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG"
	ConstraintViolationExceptionReasonDelegated_administrator_exists_for_this_service         ConstraintViolationExceptionReason = "DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE"
	ConstraintViolationExceptionReasonMaster_account_missing_business_license                 ConstraintViolationExceptionReason = "MASTER_ACCOUNT_MISSING_BUSINESS_LICENSE"
)

Enum values for ConstraintViolationExceptionReason

type CreateAccountFailureReason

type CreateAccountFailureReason string
const (
	CreateAccountFailureReasonAccount_limit_exceeded          CreateAccountFailureReason = "ACCOUNT_LIMIT_EXCEEDED"
	CreateAccountFailureReasonEmail_already_exists            CreateAccountFailureReason = "EMAIL_ALREADY_EXISTS"
	CreateAccountFailureReasonInvalid_address                 CreateAccountFailureReason = "INVALID_ADDRESS"
	CreateAccountFailureReasonInvalid_email                   CreateAccountFailureReason = "INVALID_EMAIL"
	CreateAccountFailureReasonConcurrent_account_modification CreateAccountFailureReason = "CONCURRENT_ACCOUNT_MODIFICATION"
	CreateAccountFailureReasonInternal_failure                CreateAccountFailureReason = "INTERNAL_FAILURE"
	CreateAccountFailureReasonGovcloud_account_already_exists CreateAccountFailureReason = "GOVCLOUD_ACCOUNT_ALREADY_EXISTS"
)

Enum values for CreateAccountFailureReason

type CreateAccountState

type CreateAccountState string
const (
	CreateAccountStateIn_progress CreateAccountState = "IN_PROGRESS"
	CreateAccountStateSucceeded   CreateAccountState = "SUCCEEDED"
	CreateAccountStateFailed      CreateAccountState = "FAILED"
)

Enum values for CreateAccountState

type CreateAccountStatus

type CreateAccountStatus struct {

	// If the account was created successfully, the unique identifier (ID) of the new
	// account. The regex pattern (http://wikipedia.org/wiki/regex) for an account ID
	// string requires exactly 12 digits.
	AccountId *string

	// The account name given to the account when it was created.
	AccountName *string

	// The date and time that the account was created and the request completed.
	CompletedTimestamp *time.Time

	// If the request failed, a description of the reason for the failure.
	//
	//     *
	// ACCOUNT_LIMIT_EXCEEDED: The account could not be created because you have
	// reached the limit on the number of accounts in your organization.
	//
	//     *
	// EMAIL_ALREADY_EXISTS: The account could not be created because another AWS
	// account with that email address already exists.
	//
	//     *
	// GOVCLOUD_ACCOUNT_ALREADY_EXISTS: The account in the AWS GovCloud (US) Region
	// could not be created because this Region already includes an account with that
	// email address.
	//
	//     * INVALID_ADDRESS: The account could not be created because
	// the address you provided is not valid.
	//
	//     * INVALID_EMAIL: The account could
	// not be created because the email address you provided is not valid.
	//
	//     *
	// INTERNAL_FAILURE: The account could not be created because of an internal
	// failure. Try again later. If the problem persists, contact Customer Support.
	FailureReason CreateAccountFailureReason

	// If the account was created successfully, the unique identifier (ID) of the new
	// account in the AWS GovCloud (US) Region.
	GovCloudAccountId *string

	// The unique identifier (ID) that references this request. You get this value from
	// the response of the initial CreateAccount request to create the account. The
	// regex pattern (http://wikipedia.org/wiki/regex) for a create account request ID
	// string requires "car-" followed by from 8 to 32 lower-case letters or digits.
	Id *string

	// The date and time that the request was made for the account creation.
	RequestedTimestamp *time.Time

	// The status of the request.
	State CreateAccountState
}

Contains the status about a CreateAccount or CreateGovCloudAccount request to create an AWS account or an AWS GovCloud (US) account in an organization.

type CreateAccountStatusNotFoundException

type CreateAccountStatusNotFoundException struct {
	Message *string
}

We can't find an create account request with the CreateAccountRequestId that you specified.

func (*CreateAccountStatusNotFoundException) Error

func (*CreateAccountStatusNotFoundException) ErrorCode

func (*CreateAccountStatusNotFoundException) ErrorFault

func (*CreateAccountStatusNotFoundException) ErrorMessage

func (e *CreateAccountStatusNotFoundException) ErrorMessage() string

type DelegatedAdministrator

type DelegatedAdministrator struct {

	// The Amazon Resource Name (ARN) of the delegated administrator's account.
	Arn *string

	// The date when the account was made a delegated administrator.
	DelegationEnabledDate *time.Time

	// The email address that is associated with the delegated administrator's AWS
	// account.
	Email *string

	// The unique identifier (ID) of the delegated administrator's account.
	Id *string

	// The method by which the delegated administrator's account joined the
	// organization.
	JoinedMethod AccountJoinedMethod

	// The date when the delegated administrator's account became a part of the
	// organization.
	JoinedTimestamp *time.Time

	// The friendly name of the delegated administrator's account.
	Name *string

	// The status of the delegated administrator's account in the organization.
	Status AccountStatus
}

Contains information about the delegated administrator.

type DelegatedService

type DelegatedService struct {

	// The date that the account became a delegated administrator for this service.
	DelegationEnabledDate *time.Time

	// The name of a service that can request an operation for the specified service.
	// This is typically in the form of a URL, such as:  servicename.amazonaws.com.
	ServicePrincipal *string
}

Contains information about the AWS service for which the account is a delegated administrator.

type DestinationParentNotFoundException

type DestinationParentNotFoundException struct {
	Message *string
}

We can't find the destination container (a root or OU) with the ParentId that you specified.

func (*DestinationParentNotFoundException) Error

func (*DestinationParentNotFoundException) ErrorCode

func (*DestinationParentNotFoundException) ErrorFault

func (*DestinationParentNotFoundException) ErrorMessage

func (e *DestinationParentNotFoundException) ErrorMessage() string

type DuplicateAccountException

type DuplicateAccountException struct {
	Message *string
}

That account is already present in the specified destination.

func (*DuplicateAccountException) Error

func (e *DuplicateAccountException) Error() string

func (*DuplicateAccountException) ErrorCode

func (e *DuplicateAccountException) ErrorCode() string

func (*DuplicateAccountException) ErrorFault

func (*DuplicateAccountException) ErrorMessage

func (e *DuplicateAccountException) ErrorMessage() string

type DuplicateHandshakeException

type DuplicateHandshakeException struct {
	Message *string
}

A handshake with the same action and target already exists. For example, if you invited an account to join your organization, the invited account might already have a pending invitation from this organization. If you intend to resend an invitation to an account, ensure that existing handshakes that might be considered duplicates are canceled or declined.

func (*DuplicateHandshakeException) Error

func (*DuplicateHandshakeException) ErrorCode

func (e *DuplicateHandshakeException) ErrorCode() string

func (*DuplicateHandshakeException) ErrorFault

func (*DuplicateHandshakeException) ErrorMessage

func (e *DuplicateHandshakeException) ErrorMessage() string

type DuplicateOrganizationalUnitException

type DuplicateOrganizationalUnitException struct {
	Message *string
}

An OU with the same name already exists.

func (*DuplicateOrganizationalUnitException) Error

func (*DuplicateOrganizationalUnitException) ErrorCode

func (*DuplicateOrganizationalUnitException) ErrorFault

func (*DuplicateOrganizationalUnitException) ErrorMessage

func (e *DuplicateOrganizationalUnitException) ErrorMessage() string

type DuplicatePolicyAttachmentException

type DuplicatePolicyAttachmentException struct {
	Message *string
}

The selected policy is already attached to the specified target.

func (*DuplicatePolicyAttachmentException) Error

func (*DuplicatePolicyAttachmentException) ErrorCode

func (*DuplicatePolicyAttachmentException) ErrorFault

func (*DuplicatePolicyAttachmentException) ErrorMessage

func (e *DuplicatePolicyAttachmentException) ErrorMessage() string

type DuplicatePolicyException

type DuplicatePolicyException struct {
	Message *string
}

A policy with the same name already exists.

func (*DuplicatePolicyException) Error

func (e *DuplicatePolicyException) Error() string

func (*DuplicatePolicyException) ErrorCode

func (e *DuplicatePolicyException) ErrorCode() string

func (*DuplicatePolicyException) ErrorFault

func (e *DuplicatePolicyException) ErrorFault() smithy.ErrorFault

func (*DuplicatePolicyException) ErrorMessage

func (e *DuplicatePolicyException) ErrorMessage() string

type EffectivePolicy

type EffectivePolicy struct {

	// The time of the last update to this policy.
	LastUpdatedTimestamp *time.Time

	// The text content of the policy.
	PolicyContent *string

	// The policy type.
	PolicyType EffectivePolicyType

	// The account ID of the policy target.
	TargetId *string
}

Contains rules to be applied to the affected accounts. The effective policy is the aggregation of any policies the account inherits, plus any policy directly attached to the account.

type EffectivePolicyNotFoundException

type EffectivePolicyNotFoundException struct {
	Message *string
}

If you ran this action on the master account, this policy type is not enabled. If you ran the action on a member account, the account doesn't have an effective policy of this type. Contact the administrator of your organization about attaching a policy of this type to the account.

func (*EffectivePolicyNotFoundException) Error

func (*EffectivePolicyNotFoundException) ErrorCode

func (*EffectivePolicyNotFoundException) ErrorFault

func (*EffectivePolicyNotFoundException) ErrorMessage

func (e *EffectivePolicyNotFoundException) ErrorMessage() string

type EffectivePolicyType

type EffectivePolicyType string
const (
	EffectivePolicyTypeTag_policy                EffectivePolicyType = "TAG_POLICY"
	EffectivePolicyTypeBackup_policy             EffectivePolicyType = "BACKUP_POLICY"
	EffectivePolicyTypeAiservices_opt_out_policy EffectivePolicyType = "AISERVICES_OPT_OUT_POLICY"
)

Enum values for EffectivePolicyType

type EnabledServicePrincipal

type EnabledServicePrincipal struct {

	// The date that the service principal was enabled for integration with AWS
	// Organizations.
	DateEnabled *time.Time

	// The name of the service principal. This is typically in the form of a URL, such
	// as:  servicename.amazonaws.com.
	ServicePrincipal *string
}

A structure that contains details of a service principal that represents an AWS service that is enabled to integrate with AWS Organizations.

type FinalizingOrganizationException

type FinalizingOrganizationException struct {
	Message *string
}

AWS Organizations couldn't perform the operation because your organization hasn't finished initializing. This can take up to an hour. Try again later. If after one hour you continue to receive this error, contact AWS Support (https://console.aws.amazon.com/support/home#/).

func (*FinalizingOrganizationException) Error

func (*FinalizingOrganizationException) ErrorCode

func (e *FinalizingOrganizationException) ErrorCode() string

func (*FinalizingOrganizationException) ErrorFault

func (*FinalizingOrganizationException) ErrorMessage

func (e *FinalizingOrganizationException) ErrorMessage() string

type Handshake

type Handshake struct {

	// The type of handshake, indicating what action occurs when the recipient accepts
	// the handshake. The following handshake types are supported:
	//
	//     * INVITE: This
	// type of handshake represents a request to join an organization. It is always
	// sent from the master account to only non-member accounts.
	//
	//     *
	// ENABLE_ALL_FEATURES: This type of handshake represents a request to enable all
	// features in an organization. It is always sent from the master account to only
	// invited member accounts. Created accounts do not receive this because those
	// accounts were created by the organization's master account and approval is
	// inferred.
	//
	//     * APPROVE_ALL_FEATURES: This type of handshake is sent from the
	// Organizations service when all member accounts have approved the
	// ENABLE_ALL_FEATURES invitation. It is sent only to the master account and
	// signals the master that it can finalize the process to enable all features.
	Action ActionType

	// The Amazon Resource Name (ARN) of a handshake. For more information about ARNs
	// in Organizations, see ARN Formats Supported by Organizations
	// (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns)
	// in the AWS Organizations User Guide.
	Arn *string

	// The date and time that the handshake expires. If the recipient of the handshake
	// request fails to respond before the specified date and time, the handshake
	// becomes inactive and is no longer valid.
	ExpirationTimestamp *time.Time

	// The unique identifier (ID) of a handshake. The originating account creates the
	// ID when it initiates the handshake. The regex pattern
	// (http://wikipedia.org/wiki/regex) for handshake ID string requires "h-" followed
	// by from 8 to 32 lower-case letters or digits.
	Id *string

	// Information about the two accounts that are participating in the handshake.
	Parties []*HandshakeParty

	// The date and time that the handshake request was made.
	RequestedTimestamp *time.Time

	// Additional information that is needed to process the handshake.
	Resources []*HandshakeResource

	// The current state of the handshake. Use the state to trace the flow of the
	// handshake through the process from its creation to its acceptance. The meaning
	// of each of the valid values is as follows:
	//
	//     * REQUESTED: This handshake was
	// sent to multiple recipients (applicable to only some handshake types) and not
	// all recipients have responded yet. The request stays in this state until all
	// recipients respond.
	//
	//     * OPEN: This handshake was sent to multiple recipients
	// (applicable to only some policy types) and all recipients have responded,
	// allowing the originator to complete the handshake action.
	//
	//     * CANCELED: This
	// handshake is no longer active because it was canceled by the originating
	// account.
	//
	//     * ACCEPTED: This handshake is complete because it has been
	// accepted by the recipient.
	//
	//     * DECLINED: This handshake is no longer active
	// because it was declined by the recipient account.
	//
	//     * EXPIRED: This handshake
	// is no longer active because the originator did not receive a response of any
	// kind from the recipient before the expiration time (15 days).
	State HandshakeState
}

Contains information that must be exchanged to securely establish a relationship between two accounts (an originator and a recipient). For example, when a master account (the originator) invites another account (the recipient) to join its organization, the two accounts exchange information as a series of handshake requests and responses. Note: Handshakes that are CANCELED, ACCEPTED, or DECLINED show up in lists for only 30 days after entering that state After that they are deleted.

type HandshakeAlreadyInStateException

type HandshakeAlreadyInStateException struct {
	Message *string
}

The specified handshake is already in the requested state. For example, you can't accept a handshake that was already accepted.

func (*HandshakeAlreadyInStateException) Error

func (*HandshakeAlreadyInStateException) ErrorCode

func (*HandshakeAlreadyInStateException) ErrorFault

func (*HandshakeAlreadyInStateException) ErrorMessage

func (e *HandshakeAlreadyInStateException) ErrorMessage() string

type HandshakeConstraintViolationException

type HandshakeConstraintViolationException struct {
	Message *string

	Reason HandshakeConstraintViolationExceptionReason
}

The requested operation would violate the constraint identified in the reason code. Some of the reasons in the following list might not be applicable to this specific API or operation:

to exceed the limit on the number of accounts in an organization. Note that deleted and closed accounts still count toward your limit. If you get this exception immediately after creating the organization, wait one hour and try again. If after an hour it continues to fail with this error, contact AWS Support (https://console.aws.amazon.com/support/home#/).

*

ALREADY_IN_AN_ORGANIZATION: The handshake request is invalid because the invited account is already a member of an organization.

*

HANDSHAKE_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of handshakes that you can send in one day.

You can't issue new invitations to join an organization while it's in the process of enabling all features. You can resume inviting accounts after you finalize the process when all accounts have agreed to the change.

*

ORGANIZATION_ALREADY_HAS_ALL_FEATURES: The handshake request is invalid because the organization has already enabled all features.

*

ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD: The request failed because the account is from a different marketplace than the accounts in the organization. For example, accounts with India addresses must be associated with the AISPL marketplace. All accounts in an organization must be from the same marketplace.

attempted to change the membership of an account too quickly after its previous change.

with an account that doesn't have a payment instrument, such as a credit card, associated with it.

func (*HandshakeConstraintViolationException) Error

func (*HandshakeConstraintViolationException) ErrorCode

func (*HandshakeConstraintViolationException) ErrorFault

func (*HandshakeConstraintViolationException) ErrorMessage

type HandshakeConstraintViolationExceptionReason

type HandshakeConstraintViolationExceptionReason string
const (
	HandshakeConstraintViolationExceptionReasonAccount_number_limit_exceeded                      HandshakeConstraintViolationExceptionReason = "ACCOUNT_NUMBER_LIMIT_EXCEEDED"
	HandshakeConstraintViolationExceptionReasonHandshake_rate_limit_exceeded                      HandshakeConstraintViolationExceptionReason = "HANDSHAKE_RATE_LIMIT_EXCEEDED"
	HandshakeConstraintViolationExceptionReasonAlready_in_an_organization                         HandshakeConstraintViolationExceptionReason = "ALREADY_IN_AN_ORGANIZATION"
	HandshakeConstraintViolationExceptionReasonOrganization_already_has_all_features              HandshakeConstraintViolationExceptionReason = "ORGANIZATION_ALREADY_HAS_ALL_FEATURES"
	HandshakeConstraintViolationExceptionReasonInvite_disabled_during_enable_all_features         HandshakeConstraintViolationExceptionReason = "INVITE_DISABLED_DURING_ENABLE_ALL_FEATURES"
	HandshakeConstraintViolationExceptionReasonPayment_instrument_required                        HandshakeConstraintViolationExceptionReason = "PAYMENT_INSTRUMENT_REQUIRED"
	HandshakeConstraintViolationExceptionReasonOrganization_from_different_seller_of_record       HandshakeConstraintViolationExceptionReason = "ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD"
	HandshakeConstraintViolationExceptionReasonOrganization_membership_change_rate_limit_exceeded HandshakeConstraintViolationExceptionReason = "ORGANIZATION_MEMBERSHIP_CHANGE_RATE_LIMIT_EXCEEDED"
)

Enum values for HandshakeConstraintViolationExceptionReason

type HandshakeFilter

type HandshakeFilter struct {

	// Specifies the type of handshake action. If you specify ActionType, you cannot
	// also specify ParentHandshakeId.
	ActionType ActionType

	// Specifies the parent handshake. Only used for handshake types that are a child
	// of another type. If you specify ParentHandshakeId, you cannot also specify
	// ActionType. The regex pattern (http://wikipedia.org/wiki/regex) for handshake ID
	// string requires "h-" followed by from 8 to 32 lower-case letters or digits.
	ParentHandshakeId *string
}

Specifies the criteria that are used to select the handshakes for the operation.

type HandshakeNotFoundException

type HandshakeNotFoundException struct {
	Message *string
}

We can't find a handshake with the HandshakeId that you specified.

func (*HandshakeNotFoundException) Error

func (*HandshakeNotFoundException) ErrorCode

func (e *HandshakeNotFoundException) ErrorCode() string

func (*HandshakeNotFoundException) ErrorFault

func (*HandshakeNotFoundException) ErrorMessage

func (e *HandshakeNotFoundException) ErrorMessage() string

type HandshakeParty

type HandshakeParty struct {

	// The unique identifier (ID) for the party. The regex pattern
	// (http://wikipedia.org/wiki/regex) for handshake ID string requires "h-" followed
	// by from 8 to 32 lower-case letters or digits.
	//
	// This member is required.
	Id *string

	// The type of party.
	//
	// This member is required.
	Type HandshakePartyType
}

Identifies a participant in a handshake.

type HandshakePartyType

type HandshakePartyType string
const (
	HandshakePartyTypeAccount      HandshakePartyType = "ACCOUNT"
	HandshakePartyTypeOrganization HandshakePartyType = "ORGANIZATION"
	HandshakePartyTypeEmail        HandshakePartyType = "EMAIL"
)

Enum values for HandshakePartyType

type HandshakeResource

type HandshakeResource struct {

	// When needed, contains an additional array of HandshakeResource objects.
	Resources []*HandshakeResource

	// The type of information being passed, specifying how the value is to be
	// interpreted by the other party:
	//
	//     * ACCOUNT - Specifies an AWS account ID
	// number.
	//
	//     * ORGANIZATION - Specifies an organization ID number.
	//
	//     * EMAIL
	// - Specifies the email address that is associated with the account that receives
	// the handshake.
	//
	//     * OWNER_EMAIL - Specifies the email address associated with
	// the master account. Included as information about an organization.
	//
	//     *
	// OWNER_NAME - Specifies the name associated with the master account. Included as
	// information about an organization.
	//
	//     * NOTES - Additional text provided by
	// the handshake initiator and intended for the recipient to read.
	Type HandshakeResourceType

	// The information that is passed to the other party in the handshake. The format
	// of the value string must match the requirements of the specified type.
	Value *string
}

Contains additional data that is needed to process a handshake.

type HandshakeResourceType

type HandshakeResourceType string
const (
	HandshakeResourceTypeAccount                  HandshakeResourceType = "ACCOUNT"
	HandshakeResourceTypeOrganization             HandshakeResourceType = "ORGANIZATION"
	HandshakeResourceTypeOrganization_feature_set HandshakeResourceType = "ORGANIZATION_FEATURE_SET"
	HandshakeResourceTypeEmail                    HandshakeResourceType = "EMAIL"
	HandshakeResourceTypeMaster_email             HandshakeResourceType = "MASTER_EMAIL"
	HandshakeResourceTypeMaster_name              HandshakeResourceType = "MASTER_NAME"
	HandshakeResourceTypeNotes                    HandshakeResourceType = "NOTES"
	HandshakeResourceTypeParent_handshake         HandshakeResourceType = "PARENT_HANDSHAKE"
)

Enum values for HandshakeResourceType

type HandshakeState

type HandshakeState string
const (
	HandshakeStateRequested HandshakeState = "REQUESTED"
	HandshakeStateOpen      HandshakeState = "OPEN"
	HandshakeStateCanceled  HandshakeState = "CANCELED"
	HandshakeStateAccepted  HandshakeState = "ACCEPTED"
	HandshakeStateDeclined  HandshakeState = "DECLINED"
	HandshakeStateExpired   HandshakeState = "EXPIRED"
)

Enum values for HandshakeState

type IAMUserAccessToBilling

type IAMUserAccessToBilling string
const (
	IAMUserAccessToBillingAllow IAMUserAccessToBilling = "ALLOW"
	IAMUserAccessToBillingDeny  IAMUserAccessToBilling = "DENY"
)

Enum values for IAMUserAccessToBilling

type InvalidHandshakeTransitionException

type InvalidHandshakeTransitionException struct {
	Message *string
}

You can't perform the operation on the handshake in its current state. For example, you can't cancel a handshake that was already accepted or accept a handshake that was already declined.

func (*InvalidHandshakeTransitionException) Error

func (*InvalidHandshakeTransitionException) ErrorCode

func (*InvalidHandshakeTransitionException) ErrorFault

func (*InvalidHandshakeTransitionException) ErrorMessage

func (e *InvalidHandshakeTransitionException) ErrorMessage() string

type InvalidInputException

type InvalidInputException struct {
	Message *string

	Reason InvalidInputExceptionReason
}

The requested operation failed because you provided invalid values for one or more of the request parameters. This exception includes a reason that contains additional information about the violated limit: Some of the reasons in the following list might not be applicable to this specific API or operation.

*

IMMUTABLE_POLICY: You specified a policy that is managed by AWS and can't be modified.

parameters.

INVALID_FULL_NAME_TARGET: You specified a full name that contains invalid characters.

contains at least one invalid value.

value for the NextToken parameter from the response to a previous call of the operation.

entity (account, organization, or email) as a party.

provided a value that doesn't match the required pattern.

*

INVALID_PATTERN_TARGET_ID: You specified a policy target ID that doesn't match the required pattern.

isn't valid. A role name can't begin with the reserved prefix AWSServiceRoleFor.

invalid Amazon Resource Name (ARN) for the organization.

*

INVALID_SYNTAX_POLICY_ID: You specified an invalid policy ID.

*

INVALID_SYSTEM_TAGS_PARAMETER: You specified a tag key that is a system tag. You can’t add, edit, or delete system tag keys because they're reserved for AWS use. System tags don’t count against your tags per resource limit.

*

MAX_FILTER_LIMIT_EXCEEDED: You can specify only one filter parameter for the operation.

longer than allowed.

that has a larger value than allowed.

string parameter that is shorter than allowed.

provided a numeric parameter that has a smaller value than allowed.

*

MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS: You can move an account only between entities in the same root.

func (*InvalidInputException) Error

func (e *InvalidInputException) Error() string

func (*InvalidInputException) ErrorCode

func (e *InvalidInputException) ErrorCode() string

func (*InvalidInputException) ErrorFault

func (e *InvalidInputException) ErrorFault() smithy.ErrorFault

func (*InvalidInputException) ErrorMessage

func (e *InvalidInputException) ErrorMessage() string

type InvalidInputExceptionReason

type InvalidInputExceptionReason string
const (
	InvalidInputExceptionReasonInvalid_party_type_target              InvalidInputExceptionReason = "INVALID_PARTY_TYPE_TARGET"
	InvalidInputExceptionReasonInvalid_syntax_organization            InvalidInputExceptionReason = "INVALID_SYNTAX_ORGANIZATION_ARN"
	InvalidInputExceptionReasonInvalid_syntax_policy                  InvalidInputExceptionReason = "INVALID_SYNTAX_POLICY_ID"
	InvalidInputExceptionReasonInvalid_enum                           InvalidInputExceptionReason = "INVALID_ENUM"
	InvalidInputExceptionReasonInvalid_enum_policy_type               InvalidInputExceptionReason = "INVALID_ENUM_POLICY_TYPE"
	InvalidInputExceptionReasonInvalid_list_member                    InvalidInputExceptionReason = "INVALID_LIST_MEMBER"
	InvalidInputExceptionReasonMax_length_exceeded                    InvalidInputExceptionReason = "MAX_LENGTH_EXCEEDED"
	InvalidInputExceptionReasonMax_value_exceeded                     InvalidInputExceptionReason = "MAX_VALUE_EXCEEDED"
	InvalidInputExceptionReasonMin_length_exceeded                    InvalidInputExceptionReason = "MIN_LENGTH_EXCEEDED"
	InvalidInputExceptionReasonMin_value_exceeded                     InvalidInputExceptionReason = "MIN_VALUE_EXCEEDED"
	InvalidInputExceptionReasonImmutable_policy                       InvalidInputExceptionReason = "IMMUTABLE_POLICY"
	InvalidInputExceptionReasonInvalid_pattern                        InvalidInputExceptionReason = "INVALID_PATTERN"
	InvalidInputExceptionReasonInvalid_pattern_target_id              InvalidInputExceptionReason = "INVALID_PATTERN_TARGET_ID"
	InvalidInputExceptionReasonInput_required                         InvalidInputExceptionReason = "INPUT_REQUIRED"
	InvalidInputExceptionReasonInvalid_pagination_token               InvalidInputExceptionReason = "INVALID_NEXT_TOKEN"
	InvalidInputExceptionReasonMax_filter_limit_exceeded              InvalidInputExceptionReason = "MAX_LIMIT_EXCEEDED_FILTER"
	InvalidInputExceptionReasonMoving_account_between_different_roots InvalidInputExceptionReason = "MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS"
	InvalidInputExceptionReasonInvalid_full_name_target               InvalidInputExceptionReason = "INVALID_FULL_NAME_TARGET"
	InvalidInputExceptionReasonUnrecognized_service_principal         InvalidInputExceptionReason = "UNRECOGNIZED_SERVICE_PRINCIPAL"
	InvalidInputExceptionReasonInvalid_role_name                      InvalidInputExceptionReason = "INVALID_ROLE_NAME"
	InvalidInputExceptionReasonInvalid_system_tags_parameter          InvalidInputExceptionReason = "INVALID_SYSTEM_TAGS_PARAMETER"
	InvalidInputExceptionReasonTarget_not_supported                   InvalidInputExceptionReason = "TARGET_NOT_SUPPORTED"
)

Enum values for InvalidInputExceptionReason

type MalformedPolicyDocumentException

type MalformedPolicyDocumentException struct {
	Message *string
}

The provided policy document doesn't meet the requirements of the specified policy type. For example, the syntax might be incorrect. For details about service control policy syntax, see Service Control Policy Syntax (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_scp-syntax.html) in the AWS Organizations User Guide.

func (*MalformedPolicyDocumentException) Error

func (*MalformedPolicyDocumentException) ErrorCode

func (*MalformedPolicyDocumentException) ErrorFault

func (*MalformedPolicyDocumentException) ErrorMessage

func (e *MalformedPolicyDocumentException) ErrorMessage() string

type MasterCannotLeaveOrganizationException

type MasterCannotLeaveOrganizationException struct {
	Message *string
}

You can't remove a master account from an organization. If you want the master account to become a member account in another organization, you must first delete the current organization of the master account.

func (*MasterCannotLeaveOrganizationException) Error

func (*MasterCannotLeaveOrganizationException) ErrorCode

func (*MasterCannotLeaveOrganizationException) ErrorFault

func (*MasterCannotLeaveOrganizationException) ErrorMessage

type Organization

type Organization struct {

	// The Amazon Resource Name (ARN) of an organization. For more information about
	// ARNs in Organizations, see ARN Formats Supported by Organizations
	// (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns)
	// in the AWS Organizations User Guide.
	Arn *string

	// Do not use. This field is deprecated and doesn't provide complete information
	// about the policies in your organization. To determine the policies that are
	// enabled and available for use in your organization, use the ListRoots operation
	// instead.
	AvailablePolicyTypes []*PolicyTypeSummary

	// Specifies the functionality that currently is available to the organization. If
	// set to "ALL", then all features are enabled and policies can be applied to
	// accounts in the organization. If set to "CONSOLIDATED_BILLING", then only
	// consolidated billing functionality is available. For more information, see
	// Enabling All Features in Your Organization
	// (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html)
	// in the AWS Organizations User Guide.
	FeatureSet OrganizationFeatureSet

	// The unique identifier (ID) of an organization. The regex pattern
	// (http://wikipedia.org/wiki/regex) for an organization ID string requires "o-"
	// followed by from 10 to 32 lower-case letters or digits.
	Id *string

	// The Amazon Resource Name (ARN) of the account that is designated as the master
	// account for the organization. For more information about ARNs in Organizations,
	// see ARN Formats Supported by Organizations
	// (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns)
	// in the AWS Organizations User Guide.
	MasterAccountArn *string

	// The email address that is associated with the AWS account that is designated as
	// the master account for the organization.
	MasterAccountEmail *string

	// The unique identifier (ID) of the master account of an organization. The regex
	// pattern (http://wikipedia.org/wiki/regex) for an account ID string requires
	// exactly 12 digits.
	MasterAccountId *string
}

Contains details about an organization. An organization is a collection of accounts that are centrally managed together using consolidated billing, organized hierarchically with organizational units (OUs), and controlled with policies .

type OrganizationFeatureSet

type OrganizationFeatureSet string
const (
	OrganizationFeatureSetAll                  OrganizationFeatureSet = "ALL"
	OrganizationFeatureSetConsolidated_billing OrganizationFeatureSet = "CONSOLIDATED_BILLING"
)

Enum values for OrganizationFeatureSet

type OrganizationNotEmptyException

type OrganizationNotEmptyException struct {
	Message *string
}

The organization isn't empty. To delete an organization, you must first remove all accounts except the master account, delete all OUs, and delete all policies.

func (*OrganizationNotEmptyException) Error

func (*OrganizationNotEmptyException) ErrorCode

func (e *OrganizationNotEmptyException) ErrorCode() string

func (*OrganizationNotEmptyException) ErrorFault

func (*OrganizationNotEmptyException) ErrorMessage

func (e *OrganizationNotEmptyException) ErrorMessage() string

type OrganizationalUnit

type OrganizationalUnit struct {

	// The Amazon Resource Name (ARN) of this OU. For more information about ARNs in
	// Organizations, see ARN Formats Supported by Organizations
	// (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns)
	// in the AWS Organizations User Guide.
	Arn *string

	// The unique identifier (ID) associated with this OU. The regex pattern
	// (http://wikipedia.org/wiki/regex) for an organizational unit ID string requires
	// "ou-" followed by from 4 to 32 lower-case letters or digits (the ID of the root
	// that contains the OU). This string is followed by a second "-" dash and from 8
	// to 32 additional lower-case letters or digits.
	Id *string

	// The friendly name of this OU. The regex pattern
	// (http://wikipedia.org/wiki/regex) that is used to validate this parameter is a
	// string of any of the characters in the ASCII character range.
	Name *string
}

Contains details about an organizational unit (OU). An OU is a container of AWS accounts within a root of an organization. Policies that are attached to an OU apply to all accounts contained in that OU and in any child OUs.

type OrganizationalUnitNotEmptyException

type OrganizationalUnitNotEmptyException struct {
	Message *string
}

The specified OU is not empty. Move all accounts to another root or to other OUs, remove all child OUs, and try the operation again.

func (*OrganizationalUnitNotEmptyException) Error

func (*OrganizationalUnitNotEmptyException) ErrorCode

func (*OrganizationalUnitNotEmptyException) ErrorFault

func (*OrganizationalUnitNotEmptyException) ErrorMessage

func (e *OrganizationalUnitNotEmptyException) ErrorMessage() string

type OrganizationalUnitNotFoundException

type OrganizationalUnitNotFoundException struct {
	Message *string
}

We can't find an OU with the OrganizationalUnitId that you specified.

func (*OrganizationalUnitNotFoundException) Error

func (*OrganizationalUnitNotFoundException) ErrorCode

func (*OrganizationalUnitNotFoundException) ErrorFault

func (*OrganizationalUnitNotFoundException) ErrorMessage

func (e *OrganizationalUnitNotFoundException) ErrorMessage() string

type Parent

type Parent struct {

	// The unique identifier (ID) of the parent entity. The regex pattern
	// (http://wikipedia.org/wiki/regex) for a parent ID string requires one of the
	// following:
	//
	//     * Root: A string that begins with "r-" followed by from 4 to 32
	// lower-case letters or digits.
	//
	//     * Organizational unit (OU): A string that
	// begins with "ou-" followed by from 4 to 32 lower-case letters or digits (the ID
	// of the root that the OU is in). This string is followed by a second "-" dash and
	// from 8 to 32 additional lower-case letters or digits.
	Id *string

	// The type of the parent entity.
	Type ParentType
}

Contains information about either a root or an organizational unit (OU) that can contain OUs or accounts in an organization.

type ParentNotFoundException

type ParentNotFoundException struct {
	Message *string
}

We can't find a root or OU with the ParentId that you specified.

func (*ParentNotFoundException) Error

func (e *ParentNotFoundException) Error() string

func (*ParentNotFoundException) ErrorCode

func (e *ParentNotFoundException) ErrorCode() string

func (*ParentNotFoundException) ErrorFault

func (e *ParentNotFoundException) ErrorFault() smithy.ErrorFault

func (*ParentNotFoundException) ErrorMessage

func (e *ParentNotFoundException) ErrorMessage() string

type ParentType

type ParentType string
const (
	ParentTypeRoot                ParentType = "ROOT"
	ParentTypeOrganizational_unit ParentType = "ORGANIZATIONAL_UNIT"
)

Enum values for ParentType

type Policy

type Policy struct {

	// The text content of the policy.
	Content *string

	// A structure that contains additional details about the policy.
	PolicySummary *PolicySummary
}

Contains rules to be applied to the affected accounts. Policies can be attached directly to accounts, or to roots and OUs to affect all accounts in those hierarchies.

type PolicyChangesInProgressException

type PolicyChangesInProgressException struct {
	Message *string
}

Changes to the effective policy are in progress, and its contents can't be returned. Try the operation again later.

func (*PolicyChangesInProgressException) Error

func (*PolicyChangesInProgressException) ErrorCode

func (*PolicyChangesInProgressException) ErrorFault

func (*PolicyChangesInProgressException) ErrorMessage

func (e *PolicyChangesInProgressException) ErrorMessage() string

type PolicyInUseException

type PolicyInUseException struct {
	Message *string
}

The policy is attached to one or more entities. You must detach it from all roots, OUs, and accounts before performing this operation.

func (*PolicyInUseException) Error

func (e *PolicyInUseException) Error() string

func (*PolicyInUseException) ErrorCode

func (e *PolicyInUseException) ErrorCode() string

func (*PolicyInUseException) ErrorFault

func (e *PolicyInUseException) ErrorFault() smithy.ErrorFault

func (*PolicyInUseException) ErrorMessage

func (e *PolicyInUseException) ErrorMessage() string

type PolicyNotAttachedException

type PolicyNotAttachedException struct {
	Message *string
}

The policy isn't attached to the specified target in the specified root.

func (*PolicyNotAttachedException) Error

func (*PolicyNotAttachedException) ErrorCode

func (e *PolicyNotAttachedException) ErrorCode() string

func (*PolicyNotAttachedException) ErrorFault

func (*PolicyNotAttachedException) ErrorMessage

func (e *PolicyNotAttachedException) ErrorMessage() string

type PolicyNotFoundException

type PolicyNotFoundException struct {
	Message *string
}

We can't find a policy with the PolicyId that you specified.

func (*PolicyNotFoundException) Error

func (e *PolicyNotFoundException) Error() string

func (*PolicyNotFoundException) ErrorCode

func (e *PolicyNotFoundException) ErrorCode() string

func (*PolicyNotFoundException) ErrorFault

func (e *PolicyNotFoundException) ErrorFault() smithy.ErrorFault

func (*PolicyNotFoundException) ErrorMessage

func (e *PolicyNotFoundException) ErrorMessage() string

type PolicySummary

type PolicySummary struct {

	// The Amazon Resource Name (ARN) of the policy. For more information about ARNs in
	// Organizations, see ARN Formats Supported by Organizations
	// (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns)
	// in the AWS Organizations User Guide.
	Arn *string

	// A boolean value that indicates whether the specified policy is an AWS managed
	// policy. If true, then you can attach the policy to roots, OUs, or accounts, but
	// you cannot edit it.
	AwsManaged *bool

	// The description of the policy.
	Description *string

	// The unique identifier (ID) of the policy. The regex pattern
	// (http://wikipedia.org/wiki/regex) for a policy ID string requires "p-" followed
	// by from 8 to 128 lower-case letters or digits.
	Id *string

	// The friendly name of the policy. The regex pattern
	// (http://wikipedia.org/wiki/regex) that is used to validate this parameter is a
	// string of any of the characters in the ASCII character range.
	Name *string

	// The type of policy.
	Type PolicyType
}

Contains information about a policy, but does not include the content. To see the content of a policy, see DescribePolicy.

type PolicyTargetSummary

type PolicyTargetSummary struct {

	// The Amazon Resource Name (ARN) of the policy target. For more information about
	// ARNs in Organizations, see ARN Formats Supported by Organizations
	// (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns)
	// in the AWS Organizations User Guide.
	Arn *string

	// The friendly name of the policy target. The regex pattern
	// (http://wikipedia.org/wiki/regex) that is used to validate this parameter is a
	// string of any of the characters in the ASCII character range.
	Name *string

	// The unique identifier (ID) of the policy target. The regex pattern
	// (http://wikipedia.org/wiki/regex) for a target ID string requires one of the
	// following:
	//
	//     * Root: A string that begins with "r-" followed by from 4 to 32
	// lower-case letters or digits.
	//
	//     * Account: A string that consists of exactly
	// 12 digits.
	//
	//     * Organizational unit (OU): A string that begins with "ou-"
	// followed by from 4 to 32 lower-case letters or digits (the ID of the root that
	// the OU is in). This string is followed by a second "-" dash and from 8 to 32
	// additional lower-case letters or digits.
	TargetId *string

	// The type of the policy target.
	Type TargetType
}

Contains information about a root, OU, or account that a policy is attached to.

type PolicyType

type PolicyType string
const (
	PolicyTypeService_control_policy    PolicyType = "SERVICE_CONTROL_POLICY"
	PolicyTypeTag_policy                PolicyType = "TAG_POLICY"
	PolicyTypeBackup_policy             PolicyType = "BACKUP_POLICY"
	PolicyTypeAiservices_opt_out_policy PolicyType = "AISERVICES_OPT_OUT_POLICY"
)

Enum values for PolicyType

type PolicyTypeAlreadyEnabledException

type PolicyTypeAlreadyEnabledException struct {
	Message *string
}

The specified policy type is already enabled in the specified root.

func (*PolicyTypeAlreadyEnabledException) Error

func (*PolicyTypeAlreadyEnabledException) ErrorCode

func (*PolicyTypeAlreadyEnabledException) ErrorFault

func (*PolicyTypeAlreadyEnabledException) ErrorMessage

func (e *PolicyTypeAlreadyEnabledException) ErrorMessage() string

type PolicyTypeNotAvailableForOrganizationException

type PolicyTypeNotAvailableForOrganizationException struct {
	Message *string
}

You can't use the specified policy type with the feature set currently enabled for this organization. For example, you can enable SCPs only after you enable all features in the organization. For more information, see Managing AWS Organizations Policies (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies.html#enable_policies_on_root)in the AWS Organizations User Guide.

func (*PolicyTypeNotAvailableForOrganizationException) Error

func (*PolicyTypeNotAvailableForOrganizationException) ErrorCode

func (*PolicyTypeNotAvailableForOrganizationException) ErrorFault

func (*PolicyTypeNotAvailableForOrganizationException) ErrorMessage

type PolicyTypeNotEnabledException

type PolicyTypeNotEnabledException struct {
	Message *string
}

The specified policy type isn't currently enabled in this root. You can't attach policies of the specified type to entities in a root until you enable that type in the root. For more information, see Enabling All Features in Your Organization (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html) in the AWS Organizations User Guide.

func (*PolicyTypeNotEnabledException) Error

func (*PolicyTypeNotEnabledException) ErrorCode

func (e *PolicyTypeNotEnabledException) ErrorCode() string

func (*PolicyTypeNotEnabledException) ErrorFault

func (*PolicyTypeNotEnabledException) ErrorMessage

func (e *PolicyTypeNotEnabledException) ErrorMessage() string

type PolicyTypeStatus

type PolicyTypeStatus string
const (
	PolicyTypeStatusEnabled         PolicyTypeStatus = "ENABLED"
	PolicyTypeStatusPending_enable  PolicyTypeStatus = "PENDING_ENABLE"
	PolicyTypeStatusPending_disable PolicyTypeStatus = "PENDING_DISABLE"
)

Enum values for PolicyTypeStatus

type PolicyTypeSummary

type PolicyTypeSummary struct {

	// The status of the policy type as it relates to the associated root. To attach a
	// policy of the specified type to a root or to an OU or account in that root, it
	// must be available in the organization and enabled for that root.
	Status PolicyTypeStatus

	// The name of the policy type.
	Type PolicyType
}

Contains information about a policy type and its status in the associated root.

type Root

type Root struct {

	// The Amazon Resource Name (ARN) of the root. For more information about ARNs in
	// Organizations, see ARN Formats Supported by Organizations
	// (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions.html#orgs-permissions-arns)
	// in the AWS Organizations User Guide.
	Arn *string

	// The unique identifier (ID) for the root. The regex pattern
	// (http://wikipedia.org/wiki/regex) for a root ID string requires "r-" followed by
	// from 4 to 32 lower-case letters or digits.
	Id *string

	// The friendly name of the root. The regex pattern
	// (http://wikipedia.org/wiki/regex) that is used to validate this parameter is a
	// string of any of the characters in the ASCII character range.
	Name *string

	// The types of policies that are currently enabled for the root and therefore can
	// be attached to the root or to its OUs or accounts. Even if a policy type is
	// shown as available in the organization, you can separately enable and disable
	// them at the root level by using EnablePolicyType and DisablePolicyType. Use
	// DescribeOrganization to see the availability of the policy types in that
	// organization.
	PolicyTypes []*PolicyTypeSummary
}

Contains details about a root. A root is a top-level parent node in the hierarchy of an organization that can contain organizational units (OUs) and accounts. Every root contains every AWS account in the organization. Each root enables the accounts to be organized in a different way and to have different policy types enabled for use in that root.

type RootNotFoundException

type RootNotFoundException struct {
	Message *string
}

We can't find a root with the RootId that you specified.

func (*RootNotFoundException) Error

func (e *RootNotFoundException) Error() string

func (*RootNotFoundException) ErrorCode

func (e *RootNotFoundException) ErrorCode() string

func (*RootNotFoundException) ErrorFault

func (e *RootNotFoundException) ErrorFault() smithy.ErrorFault

func (*RootNotFoundException) ErrorMessage

func (e *RootNotFoundException) ErrorMessage() string

type ServiceException

type ServiceException struct {
	Message *string
}

AWS Organizations can't complete your request because of an internal service error. Try again later.

func (*ServiceException) Error

func (e *ServiceException) Error() string

func (*ServiceException) ErrorCode

func (e *ServiceException) ErrorCode() string

func (*ServiceException) ErrorFault

func (e *ServiceException) ErrorFault() smithy.ErrorFault

func (*ServiceException) ErrorMessage

func (e *ServiceException) ErrorMessage() string

type SourceParentNotFoundException

type SourceParentNotFoundException struct {
	Message *string
}

We can't find a source root or OU with the ParentId that you specified.

func (*SourceParentNotFoundException) Error

func (*SourceParentNotFoundException) ErrorCode

func (e *SourceParentNotFoundException) ErrorCode() string

func (*SourceParentNotFoundException) ErrorFault

func (*SourceParentNotFoundException) ErrorMessage

func (e *SourceParentNotFoundException) ErrorMessage() string

type Tag

type Tag struct {

	// The key identifier, or name, of the tag.
	//
	// This member is required.
	Key *string

	// The string value that's associated with the key of the tag. You can set the
	// value of a tag to an empty string, but you can't set the value of a tag to null.
	//
	// This member is required.
	Value *string
}

A custom key-value pair associated with a resource such as an account within your organization.

type TargetNotFoundException

type TargetNotFoundException struct {
	Message *string
}

We can't find a root, OU, or account with the TargetId that you specified.

func (*TargetNotFoundException) Error

func (e *TargetNotFoundException) Error() string

func (*TargetNotFoundException) ErrorCode

func (e *TargetNotFoundException) ErrorCode() string

func (*TargetNotFoundException) ErrorFault

func (e *TargetNotFoundException) ErrorFault() smithy.ErrorFault

func (*TargetNotFoundException) ErrorMessage

func (e *TargetNotFoundException) ErrorMessage() string

type TargetType

type TargetType string
const (
	TargetTypeAccount             TargetType = "ACCOUNT"
	TargetTypeOrganizational_unit TargetType = "ORGANIZATIONAL_UNIT"
	TargetTypeRoot                TargetType = "ROOT"
)

Enum values for TargetType

type TooManyRequestsException

type TooManyRequestsException struct {
	Message *string

	Type *string
}

You have sent too many requests in too short a period of time. The quota helps protect against denial-of-service attacks. Try again later. For information about quotas that affect AWS Organizations, see Quotas for AWS Organizations (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html)in the AWS Organizations User Guide.

func (*TooManyRequestsException) Error

func (e *TooManyRequestsException) Error() string

func (*TooManyRequestsException) ErrorCode

func (e *TooManyRequestsException) ErrorCode() string

func (*TooManyRequestsException) ErrorFault

func (e *TooManyRequestsException) ErrorFault() smithy.ErrorFault

func (*TooManyRequestsException) ErrorMessage

func (e *TooManyRequestsException) ErrorMessage() string

type UnsupportedAPIEndpointException

type UnsupportedAPIEndpointException struct {
	Message *string
}

This action isn't available in the current AWS Region.

func (*UnsupportedAPIEndpointException) Error

func (*UnsupportedAPIEndpointException) ErrorCode

func (e *UnsupportedAPIEndpointException) ErrorCode() string

func (*UnsupportedAPIEndpointException) ErrorFault

func (*UnsupportedAPIEndpointException) ErrorMessage

func (e *UnsupportedAPIEndpointException) ErrorMessage() string

Source Files

enums.go errors.go types.go

Version
v0.28.0
Published
Oct 26, 2020
Platform
linux/amd64
Imports
3 packages
Last checked
3 weeks ago

Tools for package owners.