types

package
v1.27.3 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 29, 2024 License: Apache-2.0 Imports: 4 Imported by: 45

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AWSOrganizationsNotInUseException

type AWSOrganizationsNotInUseException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

Your account isn't a member of an organization. To make this request, you must use the credentials of an account that belongs to an organization.

func (*AWSOrganizationsNotInUseException) Error

func (*AWSOrganizationsNotInUseException) ErrorCode

func (*AWSOrganizationsNotInUseException) ErrorFault

func (*AWSOrganizationsNotInUseException) ErrorMessage

func (e *AWSOrganizationsNotInUseException) ErrorMessage() string

type AccessDeniedException

type AccessDeniedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

You don't have permissions to perform the requested operation. The user or role that is making the request must have at least one IAM permissions policy attached that grants the required permissions. For more information, see Access Management (https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html) in the IAM User Guide.

func (*AccessDeniedException) Error

func (e *AccessDeniedException) Error() string

func (*AccessDeniedException) ErrorCode

func (e *AccessDeniedException) ErrorCode() string

func (*AccessDeniedException) ErrorFault

func (e *AccessDeniedException) ErrorFault() smithy.ErrorFault

func (*AccessDeniedException) ErrorMessage

func (e *AccessDeniedException) ErrorMessage() string

type AccessDeniedForDependencyException

type AccessDeniedForDependencyException struct {
	Message *string

	ErrorCodeOverride *string

	Reason AccessDeniedForDependencyExceptionReason
	// contains filtered or unexported fields
}

The operation that you attempted requires you to have the iam:CreateServiceLinkedRole for organizations.amazonaws.com permission so that Organizations can create the required service-linked role. You don't have that permission.

func (*AccessDeniedForDependencyException) Error

func (*AccessDeniedForDependencyException) ErrorCode

func (*AccessDeniedForDependencyException) ErrorFault

func (*AccessDeniedForDependencyException) ErrorMessage

func (e *AccessDeniedForDependencyException) ErrorMessage() string

type AccessDeniedForDependencyExceptionReason

type AccessDeniedForDependencyExceptionReason string
const (
	AccessDeniedForDependencyExceptionReasonAccessDeniedDuringCreateServiceLinkedRole AccessDeniedForDependencyExceptionReason = "ACCESS_DENIED_DURING_CREATE_SERVICE_LINKED_ROLE"
)

Enum values for AccessDeniedForDependencyExceptionReason

func (AccessDeniedForDependencyExceptionReason) Values added in v0.29.0

Values returns all known values for AccessDeniedForDependencyExceptionReason. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type Account

type Account struct {

	// The Amazon Resource Name (ARN) of the account. For more information about ARNs
	// in Organizations, see ARN Formats Supported by Organizations (https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies)
	// in the Amazon Web Services Service Authorization Reference.
	Arn *string

	// The email address associated with the Amazon Web Services account. The regex
	// pattern (http://wikipedia.org/wiki/regex) for this parameter is a string of
	// characters that represents a standard internet email address.
	Email *string

	// The unique identifier (ID) of the account. The regex pattern (http://wikipedia.org/wiki/regex)
	// for an account ID string requires exactly 12 digits.
	Id *string

	// The method by which the account joined the organization.
	JoinedMethod AccountJoinedMethod

	// The date the account became a part of the organization.
	JoinedTimestamp *time.Time

	// The friendly name of the account. The regex pattern (http://wikipedia.org/wiki/regex)
	// that is used to validate this parameter is a string of any of the characters in
	// the ASCII character range.
	Name *string

	// The status of the account in the organization.
	Status AccountStatus
	// contains filtered or unexported fields
}

Contains information about an Amazon Web Services account that is a member of an organization.

type AccountAlreadyClosedException added in v1.15.0

type AccountAlreadyClosedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

You attempted to close an account that is already closed.

func (*AccountAlreadyClosedException) Error added in v1.15.0

func (*AccountAlreadyClosedException) ErrorCode added in v1.15.0

func (e *AccountAlreadyClosedException) ErrorCode() string

func (*AccountAlreadyClosedException) ErrorFault added in v1.15.0

func (*AccountAlreadyClosedException) ErrorMessage added in v1.15.0

func (e *AccountAlreadyClosedException) ErrorMessage() string

type AccountAlreadyRegisteredException

type AccountAlreadyRegisteredException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The specified account is already a delegated administrator for this Amazon Web Services service.

func (*AccountAlreadyRegisteredException) Error

func (*AccountAlreadyRegisteredException) ErrorCode

func (*AccountAlreadyRegisteredException) ErrorFault

func (*AccountAlreadyRegisteredException) ErrorMessage

func (e *AccountAlreadyRegisteredException) ErrorMessage() string

type AccountJoinedMethod

type AccountJoinedMethod string
const (
	AccountJoinedMethodInvited AccountJoinedMethod = "INVITED"
	AccountJoinedMethodCreated AccountJoinedMethod = "CREATED"
)

Enum values for AccountJoinedMethod

func (AccountJoinedMethod) Values added in v0.29.0

Values returns all known values for AccountJoinedMethod. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type AccountNotFoundException

type AccountNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find an Amazon Web Services account with the AccountId that you specified, or the account whose credentials you used to make this request isn't a member of an organization.

func (*AccountNotFoundException) Error

func (e *AccountNotFoundException) Error() string

func (*AccountNotFoundException) ErrorCode

func (e *AccountNotFoundException) ErrorCode() string

func (*AccountNotFoundException) ErrorFault

func (e *AccountNotFoundException) ErrorFault() smithy.ErrorFault

func (*AccountNotFoundException) ErrorMessage

func (e *AccountNotFoundException) ErrorMessage() string

type AccountNotRegisteredException

type AccountNotRegisteredException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The specified account is not a delegated administrator for this Amazon Web Services service.

func (*AccountNotRegisteredException) Error

func (*AccountNotRegisteredException) ErrorCode

func (e *AccountNotRegisteredException) ErrorCode() string

func (*AccountNotRegisteredException) ErrorFault

func (*AccountNotRegisteredException) ErrorMessage

func (e *AccountNotRegisteredException) ErrorMessage() string

type AccountOwnerNotVerifiedException

type AccountOwnerNotVerifiedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

You can't invite an existing account to your organization until you verify that you own the email address associated with the management account. For more information, see Email address verification (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_create.html#about-email-verification) in the Organizations User Guide.

func (*AccountOwnerNotVerifiedException) Error

func (*AccountOwnerNotVerifiedException) ErrorCode

func (*AccountOwnerNotVerifiedException) ErrorFault

func (*AccountOwnerNotVerifiedException) ErrorMessage

func (e *AccountOwnerNotVerifiedException) ErrorMessage() string

type AccountStatus

type AccountStatus string
const (
	AccountStatusActive         AccountStatus = "ACTIVE"
	AccountStatusSuspended      AccountStatus = "SUSPENDED"
	AccountStatusPendingClosure AccountStatus = "PENDING_CLOSURE"
)

Enum values for AccountStatus

func (AccountStatus) Values added in v0.29.0

func (AccountStatus) Values() []AccountStatus

Values returns all known values for AccountStatus. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type ActionType

type ActionType string
const (
	ActionTypeInviteAccountToOrganization       ActionType = "INVITE"
	ActionTypeEnableAllFeatures                 ActionType = "ENABLE_ALL_FEATURES"
	ActionTypeApproveAllFeatures                ActionType = "APPROVE_ALL_FEATURES"
	ActionTypeAddOrganizationsServiceLinkedRole ActionType = "ADD_ORGANIZATIONS_SERVICE_LINKED_ROLE"
)

Enum values for ActionType

func (ActionType) Values added in v0.29.0

func (ActionType) Values() []ActionType

Values returns all known values for ActionType. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type AlreadyInOrganizationException

type AlreadyInOrganizationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

This account is already a member of an organization. An account can belong to only one organization at a time.

func (*AlreadyInOrganizationException) Error

func (*AlreadyInOrganizationException) ErrorCode

func (e *AlreadyInOrganizationException) ErrorCode() string

func (*AlreadyInOrganizationException) ErrorFault

func (*AlreadyInOrganizationException) ErrorMessage

func (e *AlreadyInOrganizationException) ErrorMessage() string

type Child

type Child struct {

	// The unique identifier (ID) of this child entity. The regex pattern (http://wikipedia.org/wiki/regex)
	// for a child ID string requires one of the following:
	//   - Account - A string that consists of exactly 12 digits.
	//   - Organizational unit (OU) - A string that begins with "ou-" followed by from
	//   4 to 32 lowercase letters or digits (the ID of the root that contains the OU).
	//   This string is followed by a second "-" dash and from 8 to 32 additional
	//   lowercase letters or digits.
	Id *string

	// The type of this child entity.
	Type ChildType
	// contains filtered or unexported fields
}

Contains a list of child entities, either OUs or accounts.

type ChildNotFoundException

type ChildNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find an organizational unit (OU) or Amazon Web Services account with the ChildId that you specified.

func (*ChildNotFoundException) Error

func (e *ChildNotFoundException) Error() string

func (*ChildNotFoundException) ErrorCode

func (e *ChildNotFoundException) ErrorCode() string

func (*ChildNotFoundException) ErrorFault

func (e *ChildNotFoundException) ErrorFault() smithy.ErrorFault

func (*ChildNotFoundException) ErrorMessage

func (e *ChildNotFoundException) ErrorMessage() string

type ChildType

type ChildType string
const (
	ChildTypeAccount            ChildType = "ACCOUNT"
	ChildTypeOrganizationalUnit ChildType = "ORGANIZATIONAL_UNIT"
)

Enum values for ChildType

func (ChildType) Values added in v0.29.0

func (ChildType) Values() []ChildType

Values returns all known values for ChildType. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type ConcurrentModificationException

type ConcurrentModificationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The target of the operation is currently being modified by a different request. Try again later.

func (*ConcurrentModificationException) Error

func (*ConcurrentModificationException) ErrorCode

func (e *ConcurrentModificationException) ErrorCode() string

func (*ConcurrentModificationException) ErrorFault

func (*ConcurrentModificationException) ErrorMessage

func (e *ConcurrentModificationException) ErrorMessage() string

type ConflictException added in v1.15.0

type ConflictException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The request failed because it conflicts with the current state of the specified resource.

func (*ConflictException) Error added in v1.15.0

func (e *ConflictException) Error() string

func (*ConflictException) ErrorCode added in v1.15.0

func (e *ConflictException) ErrorCode() string

func (*ConflictException) ErrorFault added in v1.15.0

func (e *ConflictException) ErrorFault() smithy.ErrorFault

func (*ConflictException) ErrorMessage added in v1.15.0

func (e *ConflictException) ErrorMessage() string

type ConstraintViolationException

type ConstraintViolationException struct {
	Message *string

	ErrorCodeOverride *string

	Reason ConstraintViolationExceptionReason
	// contains filtered or unexported fields
}

Performing this operation violates a minimum or maximum value limit. For example, attempting to remove the last service control policy (SCP) from an OU or root, inviting or creating too many accounts to the organization, or attaching too many policies to an account, OU, or root. This exception includes a reason that contains additional information about the violated limit: Some of the reasons in the following list might not be applicable to this specific API or operation.

  • ACCOUNT_CANNOT_LEAVE_ORGANIZATION: You attempted to remove the management account from the organization. You can't remove the management account. Instead, after you remove all member accounts, delete the organization itself.
  • ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION: You attempted to remove an account from the organization that doesn't yet have enough information to exist as a standalone account. This account requires you to first complete phone verification. Follow the steps at Removing a member account from your organization (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#orgs_manage_accounts_remove-from-master) in the Organizations User Guide.
  • ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of accounts that you can create in one day.
  • ACCOUNT_CREATION_NOT_COMPLETE: Your account setup isn't complete or your account isn't fully active. You must complete the account setup before you create an organization.
  • ACCOUNT_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the limit on the number of accounts in an organization. If you need more accounts, contact Amazon Web Services Support (https://console.aws.amazon.com/support/home#/) to request an increase in your limit. Or the number of invitations that you tried to send would cause you to exceed the limit of accounts in your organization. Send fewer invitations or contact Amazon Web Services Support to request an increase in the number of accounts. Deleted and closed accounts still count toward your limit. If you get this exception when running a command immediately after creating the organization, wait one hour and try again. After an hour, if the command continues to fail with this error, contact Amazon Web Services Support (https://console.aws.amazon.com/support/home#/) .
  • CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot register a suspended account as a delegated administrator.
  • CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR: You attempted to register the management account of the organization as a delegated administrator for an Amazon Web Services service integrated with Organizations. You can designate only a member account as a delegated administrator.
  • CANNOT_CLOSE_MANAGEMENT_ACCOUNT: You attempted to close the management account. To close the management account for the organization, you must first either remove or close all member accounts in the organization. Follow standard account closure process using root credentials.
  • CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG: You attempted to remove an account that is registered as a delegated administrator for a service integrated with your organization. To complete this operation, you must first deregister this account as a delegated administrator.
  • CLOSE_ACCOUNT_QUOTA_EXCEEDED: You have exceeded close account quota for the past 30 days.
  • CLOSE_ACCOUNT_REQUESTS_LIMIT_EXCEEDED: You attempted to exceed the number of accounts that you can close at a time.
  • CREATE_ORGANIZATION_IN_BILLING_MODE_UNSUPPORTED_REGION: To create an organization in the specified region, you must enable all features mode.
  • DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE: You attempted to register an Amazon Web Services account as a delegated administrator for an Amazon Web Services service that already has a delegated administrator. To complete this operation, you must first deregister any existing delegated administrators for this service.
  • EMAIL_VERIFICATION_CODE_EXPIRED: The email verification code is only valid for a limited period of time. You must resubmit the request and generate a new verfication code.
  • HANDSHAKE_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of handshakes that you can send in one day.
  • INVALID_PAYMENT_INSTRUMENT: You cannot remove an account because no supported payment method is associated with the account. Amazon Web Services does not support cards issued by financial institutions in Russia or Belarus. For more information, see Managing your Amazon Web Services payments (https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-general.html) .
  • MASTER_ACCOUNT_ADDRESS_DOES_NOT_MATCH_MARKETPLACE: To create an account in this organization, you first must migrate the organization's management account to the marketplace that corresponds to the management account's address. For example, accounts with India addresses must be associated with the AISPL marketplace. All accounts in an organization must be associated with the same marketplace.
  • MASTER_ACCOUNT_MISSING_BUSINESS_LICENSE: Applies only to the Amazon Web Services Regions in China. To create an organization, the master must have a valid business license. For more information, contact customer support.
  • MASTER_ACCOUNT_MISSING_CONTACT_INFO: To complete this operation, you must first provide a valid contact address and phone number for the management account. Then try the operation again.
  • MASTER_ACCOUNT_NOT_GOVCLOUD_ENABLED: To complete this operation, the management account must have an associated account in the Amazon Web Services GovCloud (US-West) Region. For more information, see Organizations (https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html) in the Amazon Web Services GovCloud User Guide.
  • MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To create an organization with this management account, you first must associate a valid payment instrument, such as a credit card, with the account. For more information, see Considerations before removing an account from an organization (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_account-before-remove.html) in the Organizations User Guide.
  • MAX_DELEGATED_ADMINISTRATORS_FOR_SERVICE_LIMIT_EXCEEDED: You attempted to register more delegated administrators than allowed for the service principal.
  • MAX_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to exceed the number of policies of a certain type that can be attached to an entity at one time.
  • MAX_TAG_LIMIT_EXCEEDED: You have exceeded the number of tags allowed on this resource.
  • MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To complete this operation with this member account, you first must associate a valid payment instrument, such as a credit card, with the account. For more information, see Considerations before removing an account from an organization (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_account-before-remove.html) in the Organizations User Guide.
  • MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to detach a policy from an entity that would cause the entity to have fewer than the minimum number of policies of a certain type required.
  • ORGANIZATION_NOT_IN_ALL_FEATURES_MODE: You attempted to perform an operation that requires the organization to be configured to support all features. An organization that supports only consolidated billing features can't perform this operation.
  • OU_DEPTH_LIMIT_EXCEEDED: You attempted to create an OU tree that is too many levels deep.
  • OU_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the number of OUs that you can have in an organization.
  • POLICY_CONTENT_LIMIT_EXCEEDED: You attempted to create a policy that is larger than the maximum size.
  • POLICY_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the number of policies that you can have in an organization.
  • SERVICE_ACCESS_NOT_ENABLED: You attempted to register a delegated administrator before you enabled service access. Call the EnableAWSServiceAccess API first.
  • TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags that are not compliant with the tag policy requirements for this account.
  • WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, there is a waiting period before you can remove it from the organization. If you get an error that indicates that a wait period is required, try again in a few days.

func (*ConstraintViolationException) Error

func (*ConstraintViolationException) ErrorCode

func (e *ConstraintViolationException) ErrorCode() string

func (*ConstraintViolationException) ErrorFault

func (*ConstraintViolationException) ErrorMessage

func (e *ConstraintViolationException) ErrorMessage() string

type ConstraintViolationExceptionReason

type ConstraintViolationExceptionReason string
const (
	ConstraintViolationExceptionReasonAccountNumberLimitExceeded                        ConstraintViolationExceptionReason = "ACCOUNT_NUMBER_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonHandshakeRateLimitExceeded                        ConstraintViolationExceptionReason = "HANDSHAKE_RATE_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonOuNumberLimitExceeded                             ConstraintViolationExceptionReason = "OU_NUMBER_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonOuDepthLimitExceeded                              ConstraintViolationExceptionReason = "OU_DEPTH_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonPolicyNumberLimitExceeded                         ConstraintViolationExceptionReason = "POLICY_NUMBER_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonPolicyContentLimitExceeded                        ConstraintViolationExceptionReason = "POLICY_CONTENT_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonMaxPolicyTypeAttachmentLimitExceeded              ConstraintViolationExceptionReason = "MAX_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonMinPolicyTypeAttachmentLimitExceeded              ConstraintViolationExceptionReason = "MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonAccountCannotLeaveOrganization                    ConstraintViolationExceptionReason = "ACCOUNT_CANNOT_LEAVE_ORGANIZATION"
	ConstraintViolationExceptionReasonAccountCannotLeaveWithoutEula                     ConstraintViolationExceptionReason = "ACCOUNT_CANNOT_LEAVE_WITHOUT_EULA"
	ConstraintViolationExceptionReasonAccountCannotLeaveWithoutPhoneVerification        ConstraintViolationExceptionReason = "ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION"
	ConstraintViolationExceptionReasonMasterAccountPaymentInstrumentRequired            ConstraintViolationExceptionReason = "MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED"
	ConstraintViolationExceptionReasonMemberAccountPaymentInstrumentRequired            ConstraintViolationExceptionReason = "MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED"
	ConstraintViolationExceptionReasonAccountCreationRateLimitExceeded                  ConstraintViolationExceptionReason = "ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonMasterAccountAddressDoesNotMatchMarketplace       ConstraintViolationExceptionReason = "MASTER_ACCOUNT_ADDRESS_DOES_NOT_MATCH_MARKETPLACE"
	ConstraintViolationExceptionReasonMasterAccountMissingContactInfo                   ConstraintViolationExceptionReason = "MASTER_ACCOUNT_MISSING_CONTACT_INFO"
	ConstraintViolationExceptionReasonMasterAccountNotGovcloudEnabled                   ConstraintViolationExceptionReason = "MASTER_ACCOUNT_NOT_GOVCLOUD_ENABLED"
	ConstraintViolationExceptionReasonOrganizationNotInAllFeaturesMode                  ConstraintViolationExceptionReason = "ORGANIZATION_NOT_IN_ALL_FEATURES_MODE"
	ConstraintViolationExceptionReasonCreateOrganizationInBillingModeUnsupportedRegion  ConstraintViolationExceptionReason = "CREATE_ORGANIZATION_IN_BILLING_MODE_UNSUPPORTED_REGION"
	ConstraintViolationExceptionReasonEmailVerificationCodeExpired                      ConstraintViolationExceptionReason = "EMAIL_VERIFICATION_CODE_EXPIRED"
	ConstraintViolationExceptionReasonWaitPeriodActive                                  ConstraintViolationExceptionReason = "WAIT_PERIOD_ACTIVE"
	ConstraintViolationExceptionReasonMaxTagLimitExceeded                               ConstraintViolationExceptionReason = "MAX_TAG_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonTagPolicyViolation                                ConstraintViolationExceptionReason = "TAG_POLICY_VIOLATION"
	ConstraintViolationExceptionReasonMaxDelegatedAdministratorsForServiceLimitExceeded ConstraintViolationExceptionReason = "MAX_DELEGATED_ADMINISTRATORS_FOR_SERVICE_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonCannotRegisterMasterAsDelegatedAdministrator      ConstraintViolationExceptionReason = "CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR"
	ConstraintViolationExceptionReasonCannotRemoveDelegatedAdministratorFromOrg         ConstraintViolationExceptionReason = "CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG"
	ConstraintViolationExceptionReasonDelegatedAdministratorExistsForThisService        ConstraintViolationExceptionReason = "DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE"
	ConstraintViolationExceptionReasonMasterAccountMissingBusinessLicense               ConstraintViolationExceptionReason = "MASTER_ACCOUNT_MISSING_BUSINESS_LICENSE"
	ConstraintViolationExceptionReasonCannotCloseManagementAccount                      ConstraintViolationExceptionReason = "CANNOT_CLOSE_MANAGEMENT_ACCOUNT"
	ConstraintViolationExceptionReasonCloseAccountQuotaExceeded                         ConstraintViolationExceptionReason = "CLOSE_ACCOUNT_QUOTA_EXCEEDED"
	ConstraintViolationExceptionReasonCloseAccountRequestsLimitExceeded                 ConstraintViolationExceptionReason = "CLOSE_ACCOUNT_REQUESTS_LIMIT_EXCEEDED"
	ConstraintViolationExceptionReasonServiceAccessNotEnabled                           ConstraintViolationExceptionReason = "SERVICE_ACCESS_NOT_ENABLED"
	ConstraintViolationExceptionReasonInvalidPaymentInstrument                          ConstraintViolationExceptionReason = "INVALID_PAYMENT_INSTRUMENT"
	ConstraintViolationExceptionReasonAccountCreationNotComplete                        ConstraintViolationExceptionReason = "ACCOUNT_CREATION_NOT_COMPLETE"
)

Enum values for ConstraintViolationExceptionReason

func (ConstraintViolationExceptionReason) Values added in v0.29.0

Values returns all known values for ConstraintViolationExceptionReason. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type CreateAccountFailureReason

type CreateAccountFailureReason string
const (
	CreateAccountFailureReasonAccountLimitExceeded                             CreateAccountFailureReason = "ACCOUNT_LIMIT_EXCEEDED"
	CreateAccountFailureReasonEmailAlreadyExists                               CreateAccountFailureReason = "EMAIL_ALREADY_EXISTS"
	CreateAccountFailureReasonInvalidAddress                                   CreateAccountFailureReason = "INVALID_ADDRESS"
	CreateAccountFailureReasonInvalidEmail                                     CreateAccountFailureReason = "INVALID_EMAIL"
	CreateAccountFailureReasonConcurrentAccountModification                    CreateAccountFailureReason = "CONCURRENT_ACCOUNT_MODIFICATION"
	CreateAccountFailureReasonInternalFailure                                  CreateAccountFailureReason = "INTERNAL_FAILURE"
	CreateAccountFailureReasonGovcloudAccountAlreadyExists                     CreateAccountFailureReason = "GOVCLOUD_ACCOUNT_ALREADY_EXISTS"
	CreateAccountFailureReasonMissingBusinessValidation                        CreateAccountFailureReason = "MISSING_BUSINESS_VALIDATION"
	CreateAccountFailureReasonFailedBusinessValidation                         CreateAccountFailureReason = "FAILED_BUSINESS_VALIDATION"
	CreateAccountFailureReasonPendingBusinessVALIDATIONv                       CreateAccountFailureReason = "PENDING_BUSINESS_VALIDATION"
	CreateAccountFailureReasonInvalidIdentityForBusinessValidation             CreateAccountFailureReason = "INVALID_IDENTITY_FOR_BUSINESS_VALIDATION"
	CreateAccountFailureReasonUnknownBusinessValidation                        CreateAccountFailureReason = "UNKNOWN_BUSINESS_VALIDATION"
	CreateAccountFailureReasonMissingPaymentInstrument                         CreateAccountFailureReason = "MISSING_PAYMENT_INSTRUMENT"
	CreateAccountFailureReasonInvalidPaymentInstrument                         CreateAccountFailureReason = "INVALID_PAYMENT_INSTRUMENT"
	CreateAccountFailureReasonUpdateExistingResourcePolicyWithTagsNotSupported CreateAccountFailureReason = "UPDATE_EXISTING_RESOURCE_POLICY_WITH_TAGS_NOT_SUPPORTED"
)

Enum values for CreateAccountFailureReason

func (CreateAccountFailureReason) Values added in v0.29.0

Values returns all known values for CreateAccountFailureReason. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type CreateAccountState

type CreateAccountState string
const (
	CreateAccountStateInProgress CreateAccountState = "IN_PROGRESS"
	CreateAccountStateSucceeded  CreateAccountState = "SUCCEEDED"
	CreateAccountStateFailed     CreateAccountState = "FAILED"
)

Enum values for CreateAccountState

func (CreateAccountState) Values added in v0.29.0

Values returns all known values for CreateAccountState. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type CreateAccountStatus

type CreateAccountStatus struct {

	// If the account was created successfully, the unique identifier (ID) of the new
	// account. The regex pattern (http://wikipedia.org/wiki/regex) for an account ID
	// string requires exactly 12 digits.
	AccountId *string

	// The account name given to the account when it was created.
	AccountName *string

	// The date and time that the account was created and the request completed.
	CompletedTimestamp *time.Time

	// If the request failed, a description of the reason for the failure.
	//   - ACCOUNT_LIMIT_EXCEEDED: The account couldn't be created because you reached
	//   the limit on the number of accounts in your organization.
	//   - CONCURRENT_ACCOUNT_MODIFICATION: You already submitted a request with the
	//   same information.
	//   - EMAIL_ALREADY_EXISTS: The account could not be created because another
	//   Amazon Web Services account with that email address already exists.
	//   - FAILED_BUSINESS_VALIDATION: The Amazon Web Services account that owns your
	//   organization failed to receive business license validation.
	//   - GOVCLOUD_ACCOUNT_ALREADY_EXISTS: The account in the Amazon Web Services
	//   GovCloud (US) Region could not be created because this Region already includes
	//   an account with that email address.
	//   - IDENTITY_INVALID_BUSINESS_VALIDATION: The Amazon Web Services account that
	//   owns your organization can't complete business license validation because it
	//   doesn't have valid identity data.
	//   - INVALID_ADDRESS: The account could not be created because the address you
	//   provided is not valid.
	//   - INVALID_EMAIL: The account could not be created because the email address
	//   you provided is not valid.
	//   - INVALID_PAYMENT_INSTRUMENT: The Amazon Web Services account that owns your
	//   organization does not have a supported payment method associated with the
	//   account. Amazon Web Services does not support cards issued by financial
	//   institutions in Russia or Belarus. For more information, see Managing your
	//   Amazon Web Services payments (https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-general.html)
	//   .
	//   - INTERNAL_FAILURE: The account could not be created because of an internal
	//   failure. Try again later. If the problem persists, contact Amazon Web Services
	//   Customer Support.
	//   - MISSING_BUSINESS_VALIDATION: The Amazon Web Services account that owns your
	//   organization has not received Business Validation.
	//   - MISSING_PAYMENT_INSTRUMENT: You must configure the management account with
	//   a valid payment method, such as a credit card.
	//   - PENDING_BUSINESS_VALIDATION: The Amazon Web Services account that owns your
	//   organization is still in the process of completing business license validation.
	//   - UNKNOWN_BUSINESS_VALIDATION: The Amazon Web Services account that owns your
	//   organization has an unknown issue with business license validation.
	FailureReason CreateAccountFailureReason

	// If the account was created successfully, the unique identifier (ID) of the new
	// account in the Amazon Web Services GovCloud (US) Region.
	GovCloudAccountId *string

	// The unique identifier (ID) that references this request. You get this value
	// from the response of the initial CreateAccount request to create the account.
	// The regex pattern (http://wikipedia.org/wiki/regex) for a create account
	// request ID string requires "car-" followed by from 8 to 32 lowercase letters or
	// digits.
	Id *string

	// The date and time that the request was made for the account creation.
	RequestedTimestamp *time.Time

	// The status of the asynchronous request to create an Amazon Web Services account.
	State CreateAccountState
	// contains filtered or unexported fields
}

Contains the status about a CreateAccount or CreateGovCloudAccount request to create an Amazon Web Services account or an Amazon Web Services GovCloud (US) account in an organization.

type CreateAccountStatusNotFoundException

type CreateAccountStatusNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find an create account request with the CreateAccountRequestId that you specified.

func (*CreateAccountStatusNotFoundException) Error

func (*CreateAccountStatusNotFoundException) ErrorCode

func (*CreateAccountStatusNotFoundException) ErrorFault

func (*CreateAccountStatusNotFoundException) ErrorMessage

func (e *CreateAccountStatusNotFoundException) ErrorMessage() string

type DelegatedAdministrator

type DelegatedAdministrator struct {

	// The Amazon Resource Name (ARN) of the delegated administrator's account.
	Arn *string

	// The date when the account was made a delegated administrator.
	DelegationEnabledDate *time.Time

	// The email address that is associated with the delegated administrator's Amazon
	// Web Services account.
	Email *string

	// The unique identifier (ID) of the delegated administrator's account.
	Id *string

	// The method by which the delegated administrator's account joined the
	// organization.
	JoinedMethod AccountJoinedMethod

	// The date when the delegated administrator's account became a part of the
	// organization.
	JoinedTimestamp *time.Time

	// The friendly name of the delegated administrator's account.
	Name *string

	// The status of the delegated administrator's account in the organization.
	Status AccountStatus
	// contains filtered or unexported fields
}

Contains information about the delegated administrator.

type DelegatedService

type DelegatedService struct {

	// The date that the account became a delegated administrator for this service.
	DelegationEnabledDate *time.Time

	// The name of an Amazon Web Services service that can request an operation for
	// the specified service. This is typically in the form of a URL, such as:
	// servicename.amazonaws.com .
	ServicePrincipal *string
	// contains filtered or unexported fields
}

Contains information about the Amazon Web Services service for which the account is a delegated administrator.

type DestinationParentNotFoundException

type DestinationParentNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find the destination container (a root or OU) with the ParentId that you specified.

func (*DestinationParentNotFoundException) Error

func (*DestinationParentNotFoundException) ErrorCode

func (*DestinationParentNotFoundException) ErrorFault

func (*DestinationParentNotFoundException) ErrorMessage

func (e *DestinationParentNotFoundException) ErrorMessage() string

type DuplicateAccountException

type DuplicateAccountException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

That account is already present in the specified destination.

func (*DuplicateAccountException) Error

func (e *DuplicateAccountException) Error() string

func (*DuplicateAccountException) ErrorCode

func (e *DuplicateAccountException) ErrorCode() string

func (*DuplicateAccountException) ErrorFault

func (*DuplicateAccountException) ErrorMessage

func (e *DuplicateAccountException) ErrorMessage() string

type DuplicateHandshakeException

type DuplicateHandshakeException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

A handshake with the same action and target already exists. For example, if you invited an account to join your organization, the invited account might already have a pending invitation from this organization. If you intend to resend an invitation to an account, ensure that existing handshakes that might be considered duplicates are canceled or declined.

func (*DuplicateHandshakeException) Error

func (*DuplicateHandshakeException) ErrorCode

func (e *DuplicateHandshakeException) ErrorCode() string

func (*DuplicateHandshakeException) ErrorFault

func (*DuplicateHandshakeException) ErrorMessage

func (e *DuplicateHandshakeException) ErrorMessage() string

type DuplicateOrganizationalUnitException

type DuplicateOrganizationalUnitException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

An OU with the same name already exists.

func (*DuplicateOrganizationalUnitException) Error

func (*DuplicateOrganizationalUnitException) ErrorCode

func (*DuplicateOrganizationalUnitException) ErrorFault

func (*DuplicateOrganizationalUnitException) ErrorMessage

func (e *DuplicateOrganizationalUnitException) ErrorMessage() string

type DuplicatePolicyAttachmentException

type DuplicatePolicyAttachmentException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The selected policy is already attached to the specified target.

func (*DuplicatePolicyAttachmentException) Error

func (*DuplicatePolicyAttachmentException) ErrorCode

func (*DuplicatePolicyAttachmentException) ErrorFault

func (*DuplicatePolicyAttachmentException) ErrorMessage

func (e *DuplicatePolicyAttachmentException) ErrorMessage() string

type DuplicatePolicyException

type DuplicatePolicyException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

A policy with the same name already exists.

func (*DuplicatePolicyException) Error

func (e *DuplicatePolicyException) Error() string

func (*DuplicatePolicyException) ErrorCode

func (e *DuplicatePolicyException) ErrorCode() string

func (*DuplicatePolicyException) ErrorFault

func (e *DuplicatePolicyException) ErrorFault() smithy.ErrorFault

func (*DuplicatePolicyException) ErrorMessage

func (e *DuplicatePolicyException) ErrorMessage() string

type EffectivePolicy

type EffectivePolicy struct {

	// The time of the last update to this policy.
	LastUpdatedTimestamp *time.Time

	// The text content of the policy.
	PolicyContent *string

	// The policy type.
	PolicyType EffectivePolicyType

	// The account ID of the policy target.
	TargetId *string
	// contains filtered or unexported fields
}

Contains rules to be applied to the affected accounts. The effective policy is the aggregation of any policies the account inherits, plus any policy directly attached to the account.

type EffectivePolicyNotFoundException

type EffectivePolicyNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

If you ran this action on the management account, this policy type is not enabled. If you ran the action on a member account, the account doesn't have an effective policy of this type. Contact the administrator of your organization about attaching a policy of this type to the account.

func (*EffectivePolicyNotFoundException) Error

func (*EffectivePolicyNotFoundException) ErrorCode

func (*EffectivePolicyNotFoundException) ErrorFault

func (*EffectivePolicyNotFoundException) ErrorMessage

func (e *EffectivePolicyNotFoundException) ErrorMessage() string

type EffectivePolicyType

type EffectivePolicyType string
const (
	EffectivePolicyTypeTagPolicy              EffectivePolicyType = "TAG_POLICY"
	EffectivePolicyTypeBackupPolicy           EffectivePolicyType = "BACKUP_POLICY"
	EffectivePolicyTypeAiservicesOptOutPolicy EffectivePolicyType = "AISERVICES_OPT_OUT_POLICY"
)

Enum values for EffectivePolicyType

func (EffectivePolicyType) Values added in v0.29.0

Values returns all known values for EffectivePolicyType. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type EnabledServicePrincipal

type EnabledServicePrincipal struct {

	// The date that the service principal was enabled for integration with
	// Organizations.
	DateEnabled *time.Time

	// The name of the service principal. This is typically in the form of a URL, such
	// as: servicename.amazonaws.com .
	ServicePrincipal *string
	// contains filtered or unexported fields
}

A structure that contains details of a service principal that represents an Amazon Web Services service that is enabled to integrate with Organizations.

type FinalizingOrganizationException

type FinalizingOrganizationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

Organizations couldn't perform the operation because your organization hasn't finished initializing. This can take up to an hour. Try again later. If after one hour you continue to receive this error, contact Amazon Web Services Support (https://console.aws.amazon.com/support/home#/) .

func (*FinalizingOrganizationException) Error

func (*FinalizingOrganizationException) ErrorCode

func (e *FinalizingOrganizationException) ErrorCode() string

func (*FinalizingOrganizationException) ErrorFault

func (*FinalizingOrganizationException) ErrorMessage

func (e *FinalizingOrganizationException) ErrorMessage() string

type Handshake

type Handshake struct {

	// The type of handshake, indicating what action occurs when the recipient accepts
	// the handshake. The following handshake types are supported:
	//   - INVITE: This type of handshake represents a request to join an
	//   organization. It is always sent from the management account to only non-member
	//   accounts.
	//   - ENABLE_ALL_FEATURES: This type of handshake represents a request to enable
	//   all features in an organization. It is always sent from the management account
	//   to only invited member accounts. Created accounts do not receive this because
	//   those accounts were created by the organization's management account and
	//   approval is inferred.
	//   - APPROVE_ALL_FEATURES: This type of handshake is sent from the Organizations
	//   service when all member accounts have approved the ENABLE_ALL_FEATURES
	//   invitation. It is sent only to the management account and signals the master
	//   that it can finalize the process to enable all features.
	Action ActionType

	// The Amazon Resource Name (ARN) of a handshake. For more information about ARNs
	// in Organizations, see ARN Formats Supported by Organizations (https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies)
	// in the Amazon Web Services Service Authorization Reference.
	Arn *string

	// The date and time that the handshake expires. If the recipient of the handshake
	// request fails to respond before the specified date and time, the handshake
	// becomes inactive and is no longer valid.
	ExpirationTimestamp *time.Time

	// The unique identifier (ID) of a handshake. The originating account creates the
	// ID when it initiates the handshake. The regex pattern (http://wikipedia.org/wiki/regex)
	// for handshake ID string requires "h-" followed by from 8 to 32 lowercase letters
	// or digits.
	Id *string

	// Information about the two accounts that are participating in the handshake.
	Parties []HandshakeParty

	// The date and time that the handshake request was made.
	RequestedTimestamp *time.Time

	// Additional information that is needed to process the handshake.
	Resources []HandshakeResource

	// The current state of the handshake. Use the state to trace the flow of the
	// handshake through the process from its creation to its acceptance. The meaning
	// of each of the valid values is as follows:
	//   - REQUESTED: This handshake was sent to multiple recipients (applicable to
	//   only some handshake types) and not all recipients have responded yet. The
	//   request stays in this state until all recipients respond.
	//   - OPEN: This handshake was sent to multiple recipients (applicable to only
	//   some policy types) and all recipients have responded, allowing the originator to
	//   complete the handshake action.
	//   - CANCELED: This handshake is no longer active because it was canceled by the
	//   originating account.
	//   - ACCEPTED: This handshake is complete because it has been accepted by the
	//   recipient.
	//   - DECLINED: This handshake is no longer active because it was declined by the
	//   recipient account.
	//   - EXPIRED: This handshake is no longer active because the originator did not
	//   receive a response of any kind from the recipient before the expiration time (15
	//   days).
	State HandshakeState
	// contains filtered or unexported fields
}

Contains information that must be exchanged to securely establish a relationship between two accounts (an originator and a recipient). For example, when a management account (the originator) invites another account (the recipient) to join its organization, the two accounts exchange information as a series of handshake requests and responses. Note: Handshakes that are CANCELED , ACCEPTED , DECLINED , or EXPIRED show up in lists for only 30 days after entering that state After that they are deleted.

type HandshakeAlreadyInStateException

type HandshakeAlreadyInStateException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The specified handshake is already in the requested state. For example, you can't accept a handshake that was already accepted.

func (*HandshakeAlreadyInStateException) Error

func (*HandshakeAlreadyInStateException) ErrorCode

func (*HandshakeAlreadyInStateException) ErrorFault

func (*HandshakeAlreadyInStateException) ErrorMessage

func (e *HandshakeAlreadyInStateException) ErrorMessage() string

type HandshakeConstraintViolationException

type HandshakeConstraintViolationException struct {
	Message *string

	ErrorCodeOverride *string

	Reason HandshakeConstraintViolationExceptionReason
	// contains filtered or unexported fields
}

The requested operation would violate the constraint identified in the reason code. Some of the reasons in the following list might not be applicable to this specific API or operation:

  • ACCOUNT_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the limit on the number of accounts in an organization. Note that deleted and closed accounts still count toward your limit. If you get this exception immediately after creating the organization, wait one hour and try again. If after an hour it continues to fail with this error, contact Amazon Web Services Support (https://console.aws.amazon.com/support/home#/) .
  • ALREADY_IN_AN_ORGANIZATION: The handshake request is invalid because the invited account is already a member of an organization.
  • HANDSHAKE_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of handshakes that you can send in one day.
  • INVITE_DISABLED_DURING_ENABLE_ALL_FEATURES: You can't issue new invitations to join an organization while it's in the process of enabling all features. You can resume inviting accounts after you finalize the process when all accounts have agreed to the change.
  • ORGANIZATION_ALREADY_HAS_ALL_FEATURES: The handshake request is invalid because the organization has already enabled all features.
  • ORGANIZATION_IS_ALREADY_PENDING_ALL_FEATURES_MIGRATION: The handshake request is invalid because the organization has already started the process to enable all features.
  • ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD: The request failed because the account is from a different marketplace than the accounts in the organization. For example, accounts with India addresses must be associated with the AISPL marketplace. All accounts in an organization must be from the same marketplace.
  • ORGANIZATION_MEMBERSHIP_CHANGE_RATE_LIMIT_EXCEEDED: You attempted to change the membership of an account too quickly after its previous change.
  • PAYMENT_INSTRUMENT_REQUIRED: You can't complete the operation with an account that doesn't have a payment instrument, such as a credit card, associated with it.

func (*HandshakeConstraintViolationException) Error

func (*HandshakeConstraintViolationException) ErrorCode

func (*HandshakeConstraintViolationException) ErrorFault

func (*HandshakeConstraintViolationException) ErrorMessage

type HandshakeConstraintViolationExceptionReason

type HandshakeConstraintViolationExceptionReason string
const (
	HandshakeConstraintViolationExceptionReasonAccountNumberLimitExceeded                       HandshakeConstraintViolationExceptionReason = "ACCOUNT_NUMBER_LIMIT_EXCEEDED"
	HandshakeConstraintViolationExceptionReasonHandshakeRateLimitExceeded                       HandshakeConstraintViolationExceptionReason = "HANDSHAKE_RATE_LIMIT_EXCEEDED"
	HandshakeConstraintViolationExceptionReasonAlreadyInAnOrganization                          HandshakeConstraintViolationExceptionReason = "ALREADY_IN_AN_ORGANIZATION"
	HandshakeConstraintViolationExceptionReasonOrganizationAlreadyHasAllFeatures                HandshakeConstraintViolationExceptionReason = "ORGANIZATION_ALREADY_HAS_ALL_FEATURES"
	HandshakeConstraintViolationExceptionReasonOrganizationIsAlreadyPendingAllFeaturesMigration HandshakeConstraintViolationExceptionReason = "ORGANIZATION_IS_ALREADY_PENDING_ALL_FEATURES_MIGRATION"
	HandshakeConstraintViolationExceptionReasonInviteDisabledDuringEnableAllFeatures            HandshakeConstraintViolationExceptionReason = "INVITE_DISABLED_DURING_ENABLE_ALL_FEATURES"
	HandshakeConstraintViolationExceptionReasonPaymentInstrumentRequired                        HandshakeConstraintViolationExceptionReason = "PAYMENT_INSTRUMENT_REQUIRED"
	HandshakeConstraintViolationExceptionReasonOrganizationFromDifferentSellerOfRecord          HandshakeConstraintViolationExceptionReason = "ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD"
	HandshakeConstraintViolationExceptionReasonOrganizationMembershipChangeRateLimitExceeded    HandshakeConstraintViolationExceptionReason = "ORGANIZATION_MEMBERSHIP_CHANGE_RATE_LIMIT_EXCEEDED"
	HandshakeConstraintViolationExceptionReasonManagementAccountEmailNotVerified                HandshakeConstraintViolationExceptionReason = "MANAGEMENT_ACCOUNT_EMAIL_NOT_VERIFIED"
)

Enum values for HandshakeConstraintViolationExceptionReason

func (HandshakeConstraintViolationExceptionReason) Values added in v0.29.0

Values returns all known values for HandshakeConstraintViolationExceptionReason. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type HandshakeFilter

type HandshakeFilter struct {

	// Specifies the type of handshake action. If you specify ActionType , you cannot
	// also specify ParentHandshakeId .
	ActionType ActionType

	// Specifies the parent handshake. Only used for handshake types that are a child
	// of another type. If you specify ParentHandshakeId , you cannot also specify
	// ActionType . The regex pattern (http://wikipedia.org/wiki/regex) for handshake
	// ID string requires "h-" followed by from 8 to 32 lowercase letters or digits.
	ParentHandshakeId *string
	// contains filtered or unexported fields
}

Specifies the criteria that are used to select the handshakes for the operation.

type HandshakeNotFoundException

type HandshakeNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find a handshake with the HandshakeId that you specified.

func (*HandshakeNotFoundException) Error

func (*HandshakeNotFoundException) ErrorCode

func (e *HandshakeNotFoundException) ErrorCode() string

func (*HandshakeNotFoundException) ErrorFault

func (*HandshakeNotFoundException) ErrorMessage

func (e *HandshakeNotFoundException) ErrorMessage() string

type HandshakeParty

type HandshakeParty struct {

	// The unique identifier (ID) for the party. The regex pattern (http://wikipedia.org/wiki/regex)
	// for handshake ID string requires "h-" followed by from 8 to 32 lowercase letters
	// or digits.
	//
	// This member is required.
	Id *string

	// The type of party.
	//
	// This member is required.
	Type HandshakePartyType
	// contains filtered or unexported fields
}

Identifies a participant in a handshake.

type HandshakePartyType

type HandshakePartyType string
const (
	HandshakePartyTypeAccount      HandshakePartyType = "ACCOUNT"
	HandshakePartyTypeOrganization HandshakePartyType = "ORGANIZATION"
	HandshakePartyTypeEmail        HandshakePartyType = "EMAIL"
)

Enum values for HandshakePartyType

func (HandshakePartyType) Values added in v0.29.0

Values returns all known values for HandshakePartyType. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type HandshakeResource

type HandshakeResource struct {

	// When needed, contains an additional array of HandshakeResource objects.
	Resources []HandshakeResource

	// The type of information being passed, specifying how the value is to be
	// interpreted by the other party:
	//   - ACCOUNT - Specifies an Amazon Web Services account ID number.
	//   - ORGANIZATION - Specifies an organization ID number.
	//   - EMAIL - Specifies the email address that is associated with the account that
	//   receives the handshake.
	//   - OWNER_EMAIL - Specifies the email address associated with the management
	//   account. Included as information about an organization.
	//   - OWNER_NAME - Specifies the name associated with the management account.
	//   Included as information about an organization.
	//   - NOTES - Additional text provided by the handshake initiator and intended for
	//   the recipient to read.
	Type HandshakeResourceType

	// The information that is passed to the other party in the handshake. The format
	// of the value string must match the requirements of the specified type.
	Value *string
	// contains filtered or unexported fields
}

Contains additional data that is needed to process a handshake.

type HandshakeResourceType

type HandshakeResourceType string
const (
	HandshakeResourceTypeAccount                HandshakeResourceType = "ACCOUNT"
	HandshakeResourceTypeOrganization           HandshakeResourceType = "ORGANIZATION"
	HandshakeResourceTypeOrganizationFeatureSet HandshakeResourceType = "ORGANIZATION_FEATURE_SET"
	HandshakeResourceTypeEmail                  HandshakeResourceType = "EMAIL"
	HandshakeResourceTypeMasterEmail            HandshakeResourceType = "MASTER_EMAIL"
	HandshakeResourceTypeMasterName             HandshakeResourceType = "MASTER_NAME"
	HandshakeResourceTypeNotes                  HandshakeResourceType = "NOTES"
	HandshakeResourceTypeParentHandshake        HandshakeResourceType = "PARENT_HANDSHAKE"
)

Enum values for HandshakeResourceType

func (HandshakeResourceType) Values added in v0.29.0

Values returns all known values for HandshakeResourceType. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type HandshakeState

type HandshakeState string
const (
	HandshakeStateRequested HandshakeState = "REQUESTED"
	HandshakeStateOpen      HandshakeState = "OPEN"
	HandshakeStateCanceled  HandshakeState = "CANCELED"
	HandshakeStateAccepted  HandshakeState = "ACCEPTED"
	HandshakeStateDeclined  HandshakeState = "DECLINED"
	HandshakeStateExpired   HandshakeState = "EXPIRED"
)

Enum values for HandshakeState

func (HandshakeState) Values added in v0.29.0

func (HandshakeState) Values() []HandshakeState

Values returns all known values for HandshakeState. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type IAMUserAccessToBilling

type IAMUserAccessToBilling string
const (
	IAMUserAccessToBillingAllow IAMUserAccessToBilling = "ALLOW"
	IAMUserAccessToBillingDeny  IAMUserAccessToBilling = "DENY"
)

Enum values for IAMUserAccessToBilling

func (IAMUserAccessToBilling) Values added in v0.29.0

Values returns all known values for IAMUserAccessToBilling. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type InvalidHandshakeTransitionException

type InvalidHandshakeTransitionException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

You can't perform the operation on the handshake in its current state. For example, you can't cancel a handshake that was already accepted or accept a handshake that was already declined.

func (*InvalidHandshakeTransitionException) Error

func (*InvalidHandshakeTransitionException) ErrorCode

func (*InvalidHandshakeTransitionException) ErrorFault

func (*InvalidHandshakeTransitionException) ErrorMessage

func (e *InvalidHandshakeTransitionException) ErrorMessage() string

type InvalidInputException

type InvalidInputException struct {
	Message *string

	ErrorCodeOverride *string

	Reason InvalidInputExceptionReason
	// contains filtered or unexported fields
}

The requested operation failed because you provided invalid values for one or more of the request parameters. This exception includes a reason that contains additional information about the violated limit: Some of the reasons in the following list might not be applicable to this specific API or operation.

  • DUPLICATE_TAG_KEY: Tag keys must be unique among the tags attached to the same entity.
  • IMMUTABLE_POLICY: You specified a policy that is managed by Amazon Web Services and can't be modified.
  • INPUT_REQUIRED: You must include a value for all required parameters.
  • INVALID_EMAIL_ADDRESS_TARGET: You specified an invalid email address for the invited account owner.
  • INVALID_ENUM: You specified an invalid value.
  • INVALID_ENUM_POLICY_TYPE: You specified an invalid policy type string.
  • INVALID_FULL_NAME_TARGET: You specified a full name that contains invalid characters.
  • INVALID_LIST_MEMBER: You provided a list to a parameter that contains at least one invalid value.
  • INVALID_PAGINATION_TOKEN: Get the value for the NextToken parameter from the response to a previous call of the operation.
  • INVALID_PARTY_TYPE_TARGET: You specified the wrong type of entity (account, organization, or email) as a party.
  • INVALID_PATTERN: You provided a value that doesn't match the required pattern.
  • INVALID_PATTERN_TARGET_ID: You specified a policy target ID that doesn't match the required pattern.
  • INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name can't begin with the reserved prefix AWSServiceRoleFor .
  • INVALID_SYNTAX_ORGANIZATION_ARN: You specified an invalid Amazon Resource Name (ARN) for the organization.
  • INVALID_SYNTAX_POLICY_ID: You specified an invalid policy ID.
  • INVALID_SYSTEM_TAGS_PARAMETER: You specified a tag key that is a system tag. You can’t add, edit, or delete system tag keys because they're reserved for Amazon Web Services use. System tags don’t count against your tags per resource limit.
  • MAX_FILTER_LIMIT_EXCEEDED: You can specify only one filter parameter for the operation.
  • MAX_LENGTH_EXCEEDED: You provided a string parameter that is longer than allowed.
  • MAX_VALUE_EXCEEDED: You provided a numeric parameter that has a larger value than allowed.
  • MIN_LENGTH_EXCEEDED: You provided a string parameter that is shorter than allowed.
  • MIN_VALUE_EXCEEDED: You provided a numeric parameter that has a smaller value than allowed.
  • MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS: You can move an account only between entities in the same root.
  • TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target entity.
  • UNRECOGNIZED_SERVICE_PRINCIPAL: You specified a service principal that isn't recognized.

func (*InvalidInputException) Error

func (e *InvalidInputException) Error() string

func (*InvalidInputException) ErrorCode

func (e *InvalidInputException) ErrorCode() string

func (*InvalidInputException) ErrorFault

func (e *InvalidInputException) ErrorFault() smithy.ErrorFault

func (*InvalidInputException) ErrorMessage

func (e *InvalidInputException) ErrorMessage() string

type InvalidInputExceptionReason

type InvalidInputExceptionReason string
const (
	InvalidInputExceptionReasonInvalidPartyTypeTarget                InvalidInputExceptionReason = "INVALID_PARTY_TYPE_TARGET"
	InvalidInputExceptionReasonInvalidSyntaxOrganization             InvalidInputExceptionReason = "INVALID_SYNTAX_ORGANIZATION_ARN"
	InvalidInputExceptionReasonInvalidSyntaxPolicy                   InvalidInputExceptionReason = "INVALID_SYNTAX_POLICY_ID"
	InvalidInputExceptionReasonInvalidEnum                           InvalidInputExceptionReason = "INVALID_ENUM"
	InvalidInputExceptionReasonInvalidEnumPolicyType                 InvalidInputExceptionReason = "INVALID_ENUM_POLICY_TYPE"
	InvalidInputExceptionReasonInvalidListMember                     InvalidInputExceptionReason = "INVALID_LIST_MEMBER"
	InvalidInputExceptionReasonMaxLengthExceeded                     InvalidInputExceptionReason = "MAX_LENGTH_EXCEEDED"
	InvalidInputExceptionReasonMaxValueExceeded                      InvalidInputExceptionReason = "MAX_VALUE_EXCEEDED"
	InvalidInputExceptionReasonMinLengthExceeded                     InvalidInputExceptionReason = "MIN_LENGTH_EXCEEDED"
	InvalidInputExceptionReasonMinValueExceeded                      InvalidInputExceptionReason = "MIN_VALUE_EXCEEDED"
	InvalidInputExceptionReasonImmutablePolicy                       InvalidInputExceptionReason = "IMMUTABLE_POLICY"
	InvalidInputExceptionReasonInvalidPattern                        InvalidInputExceptionReason = "INVALID_PATTERN"
	InvalidInputExceptionReasonInvalidPatternTargetId                InvalidInputExceptionReason = "INVALID_PATTERN_TARGET_ID"
	InvalidInputExceptionReasonInputRequired                         InvalidInputExceptionReason = "INPUT_REQUIRED"
	InvalidInputExceptionReasonInvalidPaginationToken                InvalidInputExceptionReason = "INVALID_NEXT_TOKEN"
	InvalidInputExceptionReasonMaxFilterLimitExceeded                InvalidInputExceptionReason = "MAX_LIMIT_EXCEEDED_FILTER"
	InvalidInputExceptionReasonMovingAccountBetweenDifferentRoots    InvalidInputExceptionReason = "MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS"
	InvalidInputExceptionReasonInvalidFullNameTarget                 InvalidInputExceptionReason = "INVALID_FULL_NAME_TARGET"
	InvalidInputExceptionReasonUnrecognizedServicePrincipal          InvalidInputExceptionReason = "UNRECOGNIZED_SERVICE_PRINCIPAL"
	InvalidInputExceptionReasonInvalidRoleName                       InvalidInputExceptionReason = "INVALID_ROLE_NAME"
	InvalidInputExceptionReasonInvalidSystemTagsParameter            InvalidInputExceptionReason = "INVALID_SYSTEM_TAGS_PARAMETER"
	InvalidInputExceptionReasonDuplicateTagKey                       InvalidInputExceptionReason = "DUPLICATE_TAG_KEY"
	InvalidInputExceptionReasonTargetNotSupported                    InvalidInputExceptionReason = "TARGET_NOT_SUPPORTED"
	InvalidInputExceptionReasonInvalidEmailAddressTarget             InvalidInputExceptionReason = "INVALID_EMAIL_ADDRESS_TARGET"
	InvalidInputExceptionReasonInvalidResourcePolicyJson             InvalidInputExceptionReason = "INVALID_RESOURCE_POLICY_JSON"
	InvalidInputExceptionReasonUnsupportedActionInResourcePolicy     InvalidInputExceptionReason = "UNSUPPORTED_ACTION_IN_RESOURCE_POLICY"
	InvalidInputExceptionReasonUnsupportedPolicyTypeInResourcePolicy InvalidInputExceptionReason = "UNSUPPORTED_POLICY_TYPE_IN_RESOURCE_POLICY"
	InvalidInputExceptionReasonUnsupportedResourceInResourcePolicy   InvalidInputExceptionReason = "UNSUPPORTED_RESOURCE_IN_RESOURCE_POLICY"
)

Enum values for InvalidInputExceptionReason

func (InvalidInputExceptionReason) Values added in v0.29.0

Values returns all known values for InvalidInputExceptionReason. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type MalformedPolicyDocumentException

type MalformedPolicyDocumentException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The provided policy document doesn't meet the requirements of the specified policy type. For example, the syntax might be incorrect. For details about service control policy syntax, see SCP syntax (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_syntax.html) in the Organizations User Guide.

func (*MalformedPolicyDocumentException) Error

func (*MalformedPolicyDocumentException) ErrorCode

func (*MalformedPolicyDocumentException) ErrorFault

func (*MalformedPolicyDocumentException) ErrorMessage

func (e *MalformedPolicyDocumentException) ErrorMessage() string

type MasterCannotLeaveOrganizationException

type MasterCannotLeaveOrganizationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

You can't remove a management account from an organization. If you want the management account to become a member account in another organization, you must first delete the current organization of the management account.

func (*MasterCannotLeaveOrganizationException) Error

func (*MasterCannotLeaveOrganizationException) ErrorCode

func (*MasterCannotLeaveOrganizationException) ErrorFault

func (*MasterCannotLeaveOrganizationException) ErrorMessage

type Organization

type Organization struct {

	// The Amazon Resource Name (ARN) of an organization. For more information about
	// ARNs in Organizations, see ARN Formats Supported by Organizations (https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies)
	// in the Amazon Web Services Service Authorization Reference.
	Arn *string

	// Do not use. This field is deprecated and doesn't provide complete information
	// about the policies in your organization. To determine the policies that are
	// enabled and available for use in your organization, use the ListRoots operation
	// instead.
	AvailablePolicyTypes []PolicyTypeSummary

	// Specifies the functionality that currently is available to the organization. If
	// set to "ALL", then all features are enabled and policies can be applied to
	// accounts in the organization. If set to "CONSOLIDATED_BILLING", then only
	// consolidated billing functionality is available. For more information, see
	// Enabling all features in your organization (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html)
	// in the Organizations User Guide.
	FeatureSet OrganizationFeatureSet

	// The unique identifier (ID) of an organization. The regex pattern (http://wikipedia.org/wiki/regex)
	// for an organization ID string requires "o-" followed by from 10 to 32 lowercase
	// letters or digits.
	Id *string

	// The Amazon Resource Name (ARN) of the account that is designated as the
	// management account for the organization. For more information about ARNs in
	// Organizations, see ARN Formats Supported by Organizations (https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies)
	// in the Amazon Web Services Service Authorization Reference.
	MasterAccountArn *string

	// The email address that is associated with the Amazon Web Services account that
	// is designated as the management account for the organization.
	MasterAccountEmail *string

	// The unique identifier (ID) of the management account of an organization. The
	// regex pattern (http://wikipedia.org/wiki/regex) for an account ID string
	// requires exactly 12 digits.
	MasterAccountId *string
	// contains filtered or unexported fields
}

Contains details about an organization. An organization is a collection of accounts that are centrally managed together using consolidated billing, organized hierarchically with organizational units (OUs), and controlled with policies .

type OrganizationFeatureSet

type OrganizationFeatureSet string
const (
	OrganizationFeatureSetAll                 OrganizationFeatureSet = "ALL"
	OrganizationFeatureSetConsolidatedBilling OrganizationFeatureSet = "CONSOLIDATED_BILLING"
)

Enum values for OrganizationFeatureSet

func (OrganizationFeatureSet) Values added in v0.29.0

Values returns all known values for OrganizationFeatureSet. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type OrganizationNotEmptyException

type OrganizationNotEmptyException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The organization isn't empty. To delete an organization, you must first remove all accounts except the management account.

func (*OrganizationNotEmptyException) Error

func (*OrganizationNotEmptyException) ErrorCode

func (e *OrganizationNotEmptyException) ErrorCode() string

func (*OrganizationNotEmptyException) ErrorFault

func (*OrganizationNotEmptyException) ErrorMessage

func (e *OrganizationNotEmptyException) ErrorMessage() string

type OrganizationalUnit

type OrganizationalUnit struct {

	// The Amazon Resource Name (ARN) of this OU. For more information about ARNs in
	// Organizations, see ARN Formats Supported by Organizations (https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies)
	// in the Amazon Web Services Service Authorization Reference.
	Arn *string

	// The unique identifier (ID) associated with this OU. The ID is unique to the
	// organization only. The regex pattern (http://wikipedia.org/wiki/regex) for an
	// organizational unit ID string requires "ou-" followed by from 4 to 32 lowercase
	// letters or digits (the ID of the root that contains the OU). This string is
	// followed by a second "-" dash and from 8 to 32 additional lowercase letters or
	// digits.
	Id *string

	// The friendly name of this OU. The regex pattern (http://wikipedia.org/wiki/regex)
	// that is used to validate this parameter is a string of any of the characters in
	// the ASCII character range.
	Name *string
	// contains filtered or unexported fields
}

Contains details about an organizational unit (OU). An OU is a container of Amazon Web Services accounts within a root of an organization. Policies that are attached to an OU apply to all accounts contained in that OU and in any child OUs.

type OrganizationalUnitNotEmptyException

type OrganizationalUnitNotEmptyException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The specified OU is not empty. Move all accounts to another root or to other OUs, remove all child OUs, and try the operation again.

func (*OrganizationalUnitNotEmptyException) Error

func (*OrganizationalUnitNotEmptyException) ErrorCode

func (*OrganizationalUnitNotEmptyException) ErrorFault

func (*OrganizationalUnitNotEmptyException) ErrorMessage

func (e *OrganizationalUnitNotEmptyException) ErrorMessage() string

type OrganizationalUnitNotFoundException

type OrganizationalUnitNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find an OU with the OrganizationalUnitId that you specified.

func (*OrganizationalUnitNotFoundException) Error

func (*OrganizationalUnitNotFoundException) ErrorCode

func (*OrganizationalUnitNotFoundException) ErrorFault

func (*OrganizationalUnitNotFoundException) ErrorMessage

func (e *OrganizationalUnitNotFoundException) ErrorMessage() string

type Parent

type Parent struct {

	// The unique identifier (ID) of the parent entity. The regex pattern (http://wikipedia.org/wiki/regex)
	// for a parent ID string requires one of the following:
	//   - Root - A string that begins with "r-" followed by from 4 to 32 lowercase
	//   letters or digits.
	//   - Organizational unit (OU) - A string that begins with "ou-" followed by from
	//   4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This
	//   string is followed by a second "-" dash and from 8 to 32 additional lowercase
	//   letters or digits.
	Id *string

	// The type of the parent entity.
	Type ParentType
	// contains filtered or unexported fields
}

Contains information about either a root or an organizational unit (OU) that can contain OUs or accounts in an organization.

type ParentNotFoundException

type ParentNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find a root or OU with the ParentId that you specified.

func (*ParentNotFoundException) Error

func (e *ParentNotFoundException) Error() string

func (*ParentNotFoundException) ErrorCode

func (e *ParentNotFoundException) ErrorCode() string

func (*ParentNotFoundException) ErrorFault

func (e *ParentNotFoundException) ErrorFault() smithy.ErrorFault

func (*ParentNotFoundException) ErrorMessage

func (e *ParentNotFoundException) ErrorMessage() string

type ParentType

type ParentType string
const (
	ParentTypeRoot               ParentType = "ROOT"
	ParentTypeOrganizationalUnit ParentType = "ORGANIZATIONAL_UNIT"
)

Enum values for ParentType

func (ParentType) Values added in v0.29.0

func (ParentType) Values() []ParentType

Values returns all known values for ParentType. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type Policy

type Policy struct {

	// The text content of the policy.
	Content *string

	// A structure that contains additional details about the policy.
	PolicySummary *PolicySummary
	// contains filtered or unexported fields
}

Contains rules to be applied to the affected accounts. Policies can be attached directly to accounts, or to roots and OUs to affect all accounts in those hierarchies.

type PolicyChangesInProgressException

type PolicyChangesInProgressException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

Changes to the effective policy are in progress, and its contents can't be returned. Try the operation again later.

func (*PolicyChangesInProgressException) Error

func (*PolicyChangesInProgressException) ErrorCode

func (*PolicyChangesInProgressException) ErrorFault

func (*PolicyChangesInProgressException) ErrorMessage

func (e *PolicyChangesInProgressException) ErrorMessage() string

type PolicyInUseException

type PolicyInUseException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The policy is attached to one or more entities. You must detach it from all roots, OUs, and accounts before performing this operation.

func (*PolicyInUseException) Error

func (e *PolicyInUseException) Error() string

func (*PolicyInUseException) ErrorCode

func (e *PolicyInUseException) ErrorCode() string

func (*PolicyInUseException) ErrorFault

func (e *PolicyInUseException) ErrorFault() smithy.ErrorFault

func (*PolicyInUseException) ErrorMessage

func (e *PolicyInUseException) ErrorMessage() string

type PolicyNotAttachedException

type PolicyNotAttachedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The policy isn't attached to the specified target in the specified root.

func (*PolicyNotAttachedException) Error

func (*PolicyNotAttachedException) ErrorCode

func (e *PolicyNotAttachedException) ErrorCode() string

func (*PolicyNotAttachedException) ErrorFault

func (*PolicyNotAttachedException) ErrorMessage

func (e *PolicyNotAttachedException) ErrorMessage() string

type PolicyNotFoundException

type PolicyNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find a policy with the PolicyId that you specified.

func (*PolicyNotFoundException) Error

func (e *PolicyNotFoundException) Error() string

func (*PolicyNotFoundException) ErrorCode

func (e *PolicyNotFoundException) ErrorCode() string

func (*PolicyNotFoundException) ErrorFault

func (e *PolicyNotFoundException) ErrorFault() smithy.ErrorFault

func (*PolicyNotFoundException) ErrorMessage

func (e *PolicyNotFoundException) ErrorMessage() string

type PolicySummary

type PolicySummary struct {

	// The Amazon Resource Name (ARN) of the policy. For more information about ARNs
	// in Organizations, see ARN Formats Supported by Organizations (https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies)
	// in the Amazon Web Services Service Authorization Reference.
	Arn *string

	// A boolean value that indicates whether the specified policy is an Amazon Web
	// Services managed policy. If true, then you can attach the policy to roots, OUs,
	// or accounts, but you cannot edit it.
	AwsManaged bool

	// The description of the policy.
	Description *string

	// The unique identifier (ID) of the policy. The regex pattern (http://wikipedia.org/wiki/regex)
	// for a policy ID string requires "p-" followed by from 8 to 128 lowercase or
	// uppercase letters, digits, or the underscore character (_).
	Id *string

	// The friendly name of the policy. The regex pattern (http://wikipedia.org/wiki/regex)
	// that is used to validate this parameter is a string of any of the characters in
	// the ASCII character range.
	Name *string

	// The type of policy.
	Type PolicyType
	// contains filtered or unexported fields
}

Contains information about a policy, but does not include the content. To see the content of a policy, see DescribePolicy .

type PolicyTargetSummary

type PolicyTargetSummary struct {

	// The Amazon Resource Name (ARN) of the policy target. For more information about
	// ARNs in Organizations, see ARN Formats Supported by Organizations (https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies)
	// in the Amazon Web Services Service Authorization Reference.
	Arn *string

	// The friendly name of the policy target. The regex pattern (http://wikipedia.org/wiki/regex)
	// that is used to validate this parameter is a string of any of the characters in
	// the ASCII character range.
	Name *string

	// The unique identifier (ID) of the policy target. The regex pattern (http://wikipedia.org/wiki/regex)
	// for a target ID string requires one of the following:
	//   - Root - A string that begins with "r-" followed by from 4 to 32 lowercase
	//   letters or digits.
	//   - Account - A string that consists of exactly 12 digits.
	//   - Organizational unit (OU) - A string that begins with "ou-" followed by from
	//   4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This
	//   string is followed by a second "-" dash and from 8 to 32 additional lowercase
	//   letters or digits.
	TargetId *string

	// The type of the policy target.
	Type TargetType
	// contains filtered or unexported fields
}

Contains information about a root, OU, or account that a policy is attached to.

type PolicyType

type PolicyType string
const (
	PolicyTypeServiceControlPolicy   PolicyType = "SERVICE_CONTROL_POLICY"
	PolicyTypeTagPolicy              PolicyType = "TAG_POLICY"
	PolicyTypeBackupPolicy           PolicyType = "BACKUP_POLICY"
	PolicyTypeAiservicesOptOutPolicy PolicyType = "AISERVICES_OPT_OUT_POLICY"
)

Enum values for PolicyType

func (PolicyType) Values added in v0.29.0

func (PolicyType) Values() []PolicyType

Values returns all known values for PolicyType. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type PolicyTypeAlreadyEnabledException

type PolicyTypeAlreadyEnabledException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The specified policy type is already enabled in the specified root.

func (*PolicyTypeAlreadyEnabledException) Error

func (*PolicyTypeAlreadyEnabledException) ErrorCode

func (*PolicyTypeAlreadyEnabledException) ErrorFault

func (*PolicyTypeAlreadyEnabledException) ErrorMessage

func (e *PolicyTypeAlreadyEnabledException) ErrorMessage() string

type PolicyTypeNotAvailableForOrganizationException

type PolicyTypeNotAvailableForOrganizationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

You can't use the specified policy type with the feature set currently enabled for this organization. For example, you can enable SCPs only after you enable all features in the organization. For more information, see Managing Organizations policies (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies.html#enable_policies_on_root) in the Organizations User Guide.

func (*PolicyTypeNotAvailableForOrganizationException) Error

func (*PolicyTypeNotAvailableForOrganizationException) ErrorCode

func (*PolicyTypeNotAvailableForOrganizationException) ErrorFault

func (*PolicyTypeNotAvailableForOrganizationException) ErrorMessage

type PolicyTypeNotEnabledException

type PolicyTypeNotEnabledException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

The specified policy type isn't currently enabled in this root. You can't attach policies of the specified type to entities in a root until you enable that type in the root. For more information, see Enabling all features in your organization (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html) in the Organizations User Guide.

func (*PolicyTypeNotEnabledException) Error

func (*PolicyTypeNotEnabledException) ErrorCode

func (e *PolicyTypeNotEnabledException) ErrorCode() string

func (*PolicyTypeNotEnabledException) ErrorFault

func (*PolicyTypeNotEnabledException) ErrorMessage

func (e *PolicyTypeNotEnabledException) ErrorMessage() string

type PolicyTypeStatus

type PolicyTypeStatus string
const (
	PolicyTypeStatusEnabled        PolicyTypeStatus = "ENABLED"
	PolicyTypeStatusPendingEnable  PolicyTypeStatus = "PENDING_ENABLE"
	PolicyTypeStatusPendingDisable PolicyTypeStatus = "PENDING_DISABLE"
)

Enum values for PolicyTypeStatus

func (PolicyTypeStatus) Values added in v0.29.0

Values returns all known values for PolicyTypeStatus. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type PolicyTypeSummary

type PolicyTypeSummary struct {

	// The status of the policy type as it relates to the associated root. To attach a
	// policy of the specified type to a root or to an OU or account in that root, it
	// must be available in the organization and enabled for that root.
	Status PolicyTypeStatus

	// The name of the policy type.
	Type PolicyType
	// contains filtered or unexported fields
}

Contains information about a policy type and its status in the associated root.

type ResourcePolicy added in v1.17.0

type ResourcePolicy struct {

	// The policy text of the resource policy.
	Content *string

	// A structure that contains resource policy ID and Amazon Resource Name (ARN).
	ResourcePolicySummary *ResourcePolicySummary
	// contains filtered or unexported fields
}

A structure that contains details about a resource policy.

type ResourcePolicyNotFoundException added in v1.17.0

type ResourcePolicyNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find a resource policy request with the parameter that you specified.

func (*ResourcePolicyNotFoundException) Error added in v1.17.0

func (*ResourcePolicyNotFoundException) ErrorCode added in v1.17.0

func (e *ResourcePolicyNotFoundException) ErrorCode() string

func (*ResourcePolicyNotFoundException) ErrorFault added in v1.17.0

func (*ResourcePolicyNotFoundException) ErrorMessage added in v1.17.0

func (e *ResourcePolicyNotFoundException) ErrorMessage() string

type ResourcePolicySummary added in v1.17.0

type ResourcePolicySummary struct {

	// The Amazon Resource Name (ARN) of the resource policy.
	Arn *string

	// The unique identifier (ID) of the resource policy.
	Id *string
	// contains filtered or unexported fields
}

A structure that contains resource policy ID and Amazon Resource Name (ARN).

type Root

type Root struct {

	// The Amazon Resource Name (ARN) of the root. For more information about ARNs in
	// Organizations, see ARN Formats Supported by Organizations (https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html#awsorganizations-resources-for-iam-policies)
	// in the Amazon Web Services Service Authorization Reference.
	Arn *string

	// The unique identifier (ID) for the root. The ID is unique to the organization
	// only. The regex pattern (http://wikipedia.org/wiki/regex) for a root ID string
	// requires "r-" followed by from 4 to 32 lowercase letters or digits.
	Id *string

	// The friendly name of the root. The regex pattern (http://wikipedia.org/wiki/regex)
	// that is used to validate this parameter is a string of any of the characters in
	// the ASCII character range.
	Name *string

	// The types of policies that are currently enabled for the root and therefore can
	// be attached to the root or to its OUs or accounts. Even if a policy type is
	// shown as available in the organization, you can separately enable and disable
	// them at the root level by using EnablePolicyType and DisablePolicyType . Use
	// DescribeOrganization to see the availability of the policy types in that
	// organization.
	PolicyTypes []PolicyTypeSummary
	// contains filtered or unexported fields
}

Contains details about a root. A root is a top-level parent node in the hierarchy of an organization that can contain organizational units (OUs) and accounts. The root contains every Amazon Web Services account in the organization.

type RootNotFoundException

type RootNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find a root with the RootId that you specified.

func (*RootNotFoundException) Error

func (e *RootNotFoundException) Error() string

func (*RootNotFoundException) ErrorCode

func (e *RootNotFoundException) ErrorCode() string

func (*RootNotFoundException) ErrorFault

func (e *RootNotFoundException) ErrorFault() smithy.ErrorFault

func (*RootNotFoundException) ErrorMessage

func (e *RootNotFoundException) ErrorMessage() string

type ServiceException

type ServiceException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

Organizations can't complete your request because of an internal service error. Try again later.

func (*ServiceException) Error

func (e *ServiceException) Error() string

func (*ServiceException) ErrorCode

func (e *ServiceException) ErrorCode() string

func (*ServiceException) ErrorFault

func (e *ServiceException) ErrorFault() smithy.ErrorFault

func (*ServiceException) ErrorMessage

func (e *ServiceException) ErrorMessage() string

type SourceParentNotFoundException

type SourceParentNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find a source root or OU with the ParentId that you specified.

func (*SourceParentNotFoundException) Error

func (*SourceParentNotFoundException) ErrorCode

func (e *SourceParentNotFoundException) ErrorCode() string

func (*SourceParentNotFoundException) ErrorFault

func (*SourceParentNotFoundException) ErrorMessage

func (e *SourceParentNotFoundException) ErrorMessage() string

type Tag

type Tag struct {

	// The key identifier, or name, of the tag.
	//
	// This member is required.
	Key *string

	// The string value that's associated with the key of the tag. You can set the
	// value of a tag to an empty string, but you can't set the value of a tag to null.
	//
	// This member is required.
	Value *string
	// contains filtered or unexported fields
}

A custom key-value pair associated with a resource within your organization. You can attach tags to any of the following organization resources.

  • Amazon Web Services account
  • Organizational unit (OU)
  • Organization root
  • Policy

type TargetNotFoundException

type TargetNotFoundException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

We can't find a root, OU, account, or policy with the TargetId that you specified.

func (*TargetNotFoundException) Error

func (e *TargetNotFoundException) Error() string

func (*TargetNotFoundException) ErrorCode

func (e *TargetNotFoundException) ErrorCode() string

func (*TargetNotFoundException) ErrorFault

func (e *TargetNotFoundException) ErrorFault() smithy.ErrorFault

func (*TargetNotFoundException) ErrorMessage

func (e *TargetNotFoundException) ErrorMessage() string

type TargetType

type TargetType string
const (
	TargetTypeAccount            TargetType = "ACCOUNT"
	TargetTypeOrganizationalUnit TargetType = "ORGANIZATIONAL_UNIT"
	TargetTypeRoot               TargetType = "ROOT"
)

Enum values for TargetType

func (TargetType) Values added in v0.29.0

func (TargetType) Values() []TargetType

Values returns all known values for TargetType. Note that this can be expanded in the future, and so it is only as up to date as the client. The ordering of this slice is not guaranteed to be stable across updates.

type TooManyRequestsException

type TooManyRequestsException struct {
	Message *string

	ErrorCodeOverride *string

	Type *string
	// contains filtered or unexported fields
}

You have sent too many requests in too short a period of time. The quota helps protect against denial-of-service attacks. Try again later. For information about quotas that affect Organizations, see Quotas for Organizations (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html) in the Organizations User Guide.

func (*TooManyRequestsException) Error

func (e *TooManyRequestsException) Error() string

func (*TooManyRequestsException) ErrorCode

func (e *TooManyRequestsException) ErrorCode() string

func (*TooManyRequestsException) ErrorFault

func (e *TooManyRequestsException) ErrorFault() smithy.ErrorFault

func (*TooManyRequestsException) ErrorMessage

func (e *TooManyRequestsException) ErrorMessage() string

type UnsupportedAPIEndpointException

type UnsupportedAPIEndpointException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

This action isn't available in the current Amazon Web Services Region.

func (*UnsupportedAPIEndpointException) Error

func (*UnsupportedAPIEndpointException) ErrorCode

func (e *UnsupportedAPIEndpointException) ErrorCode() string

func (*UnsupportedAPIEndpointException) ErrorFault

func (*UnsupportedAPIEndpointException) ErrorMessage

func (e *UnsupportedAPIEndpointException) ErrorMessage() string

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL