aws-iam-policy-types
Version:
Autogenerated Typescript types for AWS IAM Policy and enums for all policy actions
374 lines (373 loc) • 16.5 kB
TypeScript
/**
* All IAM policy actions for AWS Organizations (ORGANIZATIONS)
*
* Extracted by `aws-iam-policy` from
* https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsorganizations.html
*
* 2025-02-24T21:49:07.496Z
*/
export declare enum AwsOrganizationsActions {
/**
* Grants permission to send a response to the originator of a handshake agreeing
* to the action proposed by the handshake request
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_AcceptHandshake.html
*/
AcceptHandshake = "organizations:AcceptHandshake",
/**
* Grants permission to attach a policy to a root, an organizational unit, or an i
* ndividual account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_AttachPolicy.html
*/
AttachPolicy = "organizations:AttachPolicy",
/**
* Grants permission to cancel a handshake
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_CancelHandshake.html
*/
CancelHandshake = "organizations:CancelHandshake",
/**
* Grants permission to close an AWS account that is now a part of an Organization
* s, either created within the organization, or invited to join the organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_CloseAccount.html
*/
CloseAccount = "organizations:CloseAccount",
/**
* Grants permission to create an AWS account that is automatically a member of th
* e organization with the credentials that made the request
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateAccount.html
*/
CreateAccount = "organizations:CreateAccount",
/**
* Grants permission to create an AWS GovCloud (US) account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateGovCloudAccount.html
*/
CreateGovCloudAccount = "organizations:CreateGovCloudAccount",
/**
* Grants permission to create an organization. The account with the credentials t
* hat calls the CreateOrganization operation automatically becomes the management
* account of the new organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateOrganization.html
*/
CreateOrganization = "organizations:CreateOrganization",
/**
* Grants permission to create an organizational unit (OU) within a root or parent
* OU
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateOrganizationalUnit.html
*/
CreateOrganizationalUnit = "organizations:CreateOrganizationalUnit",
/**
* Grants permission to create a policy that you can attach to a root, an organiza
* tional unit (OU), or an individual AWS account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreatePolicy.html
*/
CreatePolicy = "organizations:CreatePolicy",
/**
* Grants permission to decline a handshake request. This sets the handshake state
* to DECLINED and effectively deactivates the request
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeclineHandshake.html
*/
DeclineHandshake = "organizations:DeclineHandshake",
/**
* Grants permission to delete the organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeleteOrganization.html
*/
DeleteOrganization = "organizations:DeleteOrganization",
/**
* Grants permission to delete an organizational unit from a root or another OU
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeleteOrganizationalUnit.html
*/
DeleteOrganizationalUnit = "organizations:DeleteOrganizationalUnit",
/**
* Grants permission to delete a policy from your organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeletePolicy.html
*/
DeletePolicy = "organizations:DeletePolicy",
/**
* Grants permission to delete a resource policy from your organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeleteResourcePolicy.html
*/
DeleteResourcePolicy = "organizations:DeleteResourcePolicy",
/**
* Grants permission to deregister the specified member AWS account as a delegated
* administrator for the AWS service that is specified by ServicePrincipal
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeregisterDelegatedAdministrator.html
*/
DeregisterDelegatedAdministrator = "organizations:DeregisterDelegatedAdministrator",
/**
* Grants permission to retrieve Organizations-related details about the specified
* account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeAccount.html
*/
DescribeAccount = "organizations:DescribeAccount",
/**
* Grants permission to retrieve the current status of an asynchronous request to
* create an account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeCreateAccountStatus.html
*/
DescribeCreateAccountStatus = "organizations:DescribeCreateAccountStatus",
/**
* Grants permission to retrieve the effective policy for an account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeEffectivePolicy.html
*/
DescribeEffectivePolicy = "organizations:DescribeEffectivePolicy",
/**
* Grants permission to retrieve details about a previously requested handshake
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeHandshake.html
*/
DescribeHandshake = "organizations:DescribeHandshake",
/**
* Grants permission to retrieves details about the organization that the calling
* credentials belong to
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeOrganization.html
*/
DescribeOrganization = "organizations:DescribeOrganization",
/**
* Grants permission to retrieve details about an organizational unit (OU)
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeOrganizationalUnit.html
*/
DescribeOrganizationalUnit = "organizations:DescribeOrganizationalUnit",
/**
* Grants permission to retrieves details about a policy
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribePolicy.html
*/
DescribePolicy = "organizations:DescribePolicy",
/**
* Grants permission to retrieve information about a resource policy
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeResourcePolicy.html
*/
DescribeResourcePolicy = "organizations:DescribeResourcePolicy",
/**
* Grants permission to detach a policy from a target root, organizational unit, o
* r account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DetachPolicy.html
*/
DetachPolicy = "organizations:DetachPolicy",
/**
* Grants permission to disable integration of an AWS service (the service that is
* specified by ServicePrincipal) with AWS Organizations
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DisableAWSServiceAccess.html
*/
DisableAWSServiceAccess = "organizations:DisableAWSServiceAccess",
/**
* Grants permission to disable an organization policy type in a root
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_DisablePolicyType.html
*/
DisablePolicyType = "organizations:DisablePolicyType",
/**
* Grants permission to enable integration of an AWS service (the service that is
* specified by ServicePrincipal) with AWS Organizations
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAWSServiceAccess.html
*/
EnableAWSServiceAccess = "organizations:EnableAWSServiceAccess",
/**
* Grants permission to start the process to enable all features in an organizatio
* n, upgrading it from supporting only Consolidated Billing features
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAllFeatures.html
*/
EnableAllFeatures = "organizations:EnableAllFeatures",
/**
* Grants permission to enable a policy type in a root
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnablePolicyType.html
*/
EnablePolicyType = "organizations:EnablePolicyType",
/**
* Grants permission to send an invitation to another AWS account, asking it to jo
* in your organization as a member account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_InviteAccountToOrganization.html
*/
InviteAccountToOrganization = "organizations:InviteAccountToOrganization",
/**
* Grants permission to remove a member account from its parent organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_LeaveOrganization.html
*/
LeaveOrganization = "organizations:LeaveOrganization",
/**
* Grants permission to retrieve the list of the AWS services for which you enable
* d integration with your organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAWSServiceAccessForOrganization.html
*/
ListAWSServiceAccessForOrganization = "organizations:ListAWSServiceAccessForOrganization",
/**
* Grants permission to list all of the the accounts in the organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccounts.html
*/
ListAccounts = "organizations:ListAccounts",
/**
* Grants permission to list the accounts in an organization that are contained by
* a root or organizational unit (OU)
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccountsForParent.html
*/
ListAccountsForParent = "organizations:ListAccountsForParent",
/**
* Grants permission to list all of the OUs or accounts that are contained in a pa
* rent OU or root
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListChildren.html
*/
ListChildren = "organizations:ListChildren",
/**
* Grants permission to list the asynchronous account creation requests that are c
* urrently being tracked for the organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListCreateAccountStatus.html
*/
ListCreateAccountStatus = "organizations:ListCreateAccountStatus",
/**
* Grants permission to list the AWS accounts that are designated as delegated adm
* inistrators in this organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListDelegatedAdministrators.html
*/
ListDelegatedAdministrators = "organizations:ListDelegatedAdministrators",
/**
* Grants permission to list the AWS services for which the specified account is a
* delegated administrator in this organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListDelegatedServicesForAccount.html
*/
ListDelegatedServicesForAccount = "organizations:ListDelegatedServicesForAccount",
/**
* Grants permission to list all of the handshakes that are associated with an acc
* ount
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListHandshakesForAccount.html
*/
ListHandshakesForAccount = "organizations:ListHandshakesForAccount",
/**
* Grants permission to list the handshakes that are associated with the organizat
* ion
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListHandshakesForOrganization.html
*/
ListHandshakesForOrganization = "organizations:ListHandshakesForOrganization",
/**
* Grants permission to lists all of the organizational units (OUs) in a parent or
* ganizational unit or root
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListOrganizationalUnitsForParent.html
*/
ListOrganizationalUnitsForParent = "organizations:ListOrganizationalUnitsForParent",
/**
* Grants permission to list the root or organizational units (OUs) that serve as
* the immediate parent of a child OU or account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListParents.html
*/
ListParents = "organizations:ListParents",
/**
* Grants permission to list all of the policies in an organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListPolicies.html
*/
ListPolicies = "organizations:ListPolicies",
/**
* Grants permission to list all of the policies that are directly attached to a r
* oot, organizational unit (OU), or account
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListPoliciesForTarget.html
*/
ListPoliciesForTarget = "organizations:ListPoliciesForTarget",
/**
* Grants permission to list all of the roots that are defined in the organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html
*/
ListRoots = "organizations:ListRoots",
/**
* Grants permission to list all tags for the specified resource
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListTagsForResource.html
*/
ListTagsForResource = "organizations:ListTagsForResource",
/**
* Grants permission to list all the roots, OUs, and accounts to which a policy is
* attached
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListTargetsForPolicy.html
*/
ListTargetsForPolicy = "organizations:ListTargetsForPolicy",
/**
* Grants permission to move an account from its current root or OU to another par
* ent root or OU
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_MoveAccount.html
*/
MoveAccount = "organizations:MoveAccount",
/**
* Grants permission to create or update a resource policy
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_PutResourcePolicy.html
*/
PutResourcePolicy = "organizations:PutResourcePolicy",
/**
* Grants permission to register the specified member account to administer the Or
* ganizations features of the AWS service that is specified by ServicePrincipal
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_RegisterDelegatedAdministrator.html
*/
RegisterDelegatedAdministrator = "organizations:RegisterDelegatedAdministrator",
/**
* Grants permission to removes the specified account from the organization
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_RemoveAccountFromOrganization.html
*/
RemoveAccountFromOrganization = "organizations:RemoveAccountFromOrganization",
/**
* Grants permission to add one or more tags to the specified resource
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_TagResource.html
*/
TagResource = "organizations:TagResource",
/**
* Grants permission to remove one or more tags from the specified resource
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_UntagResource.html
*/
UntagResource = "organizations:UntagResource",
/**
* Grants permission to rename an organizational unit (OU)
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_UpdateOrganizationalUnit.html
*/
UpdateOrganizationalUnit = "organizations:UpdateOrganizationalUnit",
/**
* Grants permission to update an existing policy with a new name, description, or
* content
*
* See https://docs.aws.amazon.com/organizations/latest/APIReference/API_UpdatePolicy.html
*/
UpdatePolicy = "organizations:UpdatePolicy"
}