AWS - Organizations

Manage Amazon Web Services accounts and their resources.

Identity and Access Management · AWS Organizations

Configuration parameters

  • role_arn — Role Arn
  • role_session_name — Role Session Name
  • role_session_duration — Role Session Duration
  • credentials — Access Key
  • timeout — Timeout
  • retries — Retries
  • sts_regional_endpoint — AWS STS Regional Endpoints
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (21)

  • aws-org-account-close

    Closes an AWS member account within an organization.

  • aws-org-account-create

    Creates an AWS Account that is automatically a member of the organization.

  • aws-org-account-list

    Lists all the accounts in the organization or a specific account by ID.

  • aws-org-account-move

    Moves an account from one parent to another.

  • aws-org-account-remove

    Removes an account from the organization. For more information on this action: https://docs.aws.amazon.com/organizations/latest/APIReference/API_RemoveAccountFromOrganization.html

  • aws-org-children-list

    List all of the organizational units (OUs) or accounts that are contained in the specified parent OU or root.

  • aws-org-organization-get

    Retrieves information about the organization that the user's account belongs to.

  • aws-org-organization-unit-create

    Creates an organizational unit (OU) within a root or parent OU. An OU is a container for accounts that enables the organization of accounts to apply policies according to business requirements. The number of levels deep that OUs can be nested is dependent upon the policy types enabled for that root. For service control policies, the limit is five.

  • aws-org-organization-unit-delete

    Deletes an organizational unit (OU) from a root or another OU. All accounts and child OUs must first be removed.

  • aws-org-organization-unit-get

    Retrieve information about an organizational unit (OU). This command can be called only from the organization's management account or by a member account that is a delegated administrator for an Amazon Web Services service.

  • aws-org-organization-unit-rename

    Renames the specified organizational unit (OU). The ID and ARN don't change. The child OUs and accounts remain in place, and any attached policies of the OU remain attached.

  • aws-org-parent-list

    Lists all of the organizational units (OUs) or accounts that are a parent OU or root of the specified child. This command returns only the immediate parents in the hierarchy.

  • aws-org-policy-attach

    Attaches a policy to a root, an organizational unit (OU), or an individual account.

  • aws-org-policy-delete

    Deletes the specified policy from the organization. Before performing this operation, the policy must be detached from all organizational units (OUs), roots, and accounts.

  • aws-org-policy-get

    Retrieves information about a policy.

  • aws-org-policy-list

    Retrieves the list of all policies in an organization of a specified type.

  • aws-org-policy-target-list

    Lists all the roots, organizational units (OUs), and accounts that the specified policy is attached to.

  • aws-org-resource-tag-add

    Adds one or more tags to the specified resource.

  • aws-org-resource-tag-list

    Lists tags that are attached to the specified resource.

  • aws-org-root-list

    List the roots that are defined in the current organization.

  • aws-org-target-policy-list

    Lists the policies that are directly attached to the specified target root, organizational unit (OU), or account.