From d87a9848a201b59fa3a4e6ab18649c0dc75dd6e6 Mon Sep 17 00:00:00 2001
From: awstools
Date: Wed, 13 Nov 2024 23:18:58 +0000
Subject: [PATCH] feat(client-organizations): Add support for policy operations
on the Resource Control Polices.
---
.../src/commands/AcceptHandshakeCommand.ts | 6 ++++
.../src/commands/AttachPolicyCommand.ts | 11 ++++++
.../src/commands/CancelHandshakeCommand.ts | 6 ++++
.../src/commands/CloseAccountCommand.ts | 6 ++++
.../src/commands/CreateAccountCommand.ts | 6 ++++
.../commands/CreateGovCloudAccountCommand.ts | 6 ++++
.../src/commands/CreateOrganizationCommand.ts | 8 ++++-
.../CreateOrganizationalUnitCommand.ts | 6 ++++
.../src/commands/CreatePolicyCommand.ts | 10 ++++--
.../src/commands/DeclineHandshakeCommand.ts | 6 ++++
.../src/commands/DeleteOrganizationCommand.ts | 6 ++++
.../DeleteOrganizationalUnitCommand.ts | 6 ++++
.../src/commands/DeletePolicyCommand.ts | 6 ++++
...DeregisterDelegatedAdministratorCommand.ts | 6 ++++
.../src/commands/DescribeAccountCommand.ts | 6 ++++
.../DescribeCreateAccountStatusCommand.ts | 6 ++++
.../DescribeEffectivePolicyCommand.ts | 6 ++++
.../src/commands/DescribeHandshakeCommand.ts | 6 ++++
.../commands/DescribeOrganizationCommand.ts | 2 +-
.../DescribeOrganizationalUnitCommand.ts | 6 ++++
.../src/commands/DescribePolicyCommand.ts | 8 ++++-
.../src/commands/DetachPolicyCommand.ts | 6 ++++
.../DisableAWSServiceAccessCommand.ts | 6 ++++
.../src/commands/DisablePolicyTypeCommand.ts | 10 ++++--
.../commands/EnableAWSServiceAccessCommand.ts | 6 ++++
.../src/commands/EnableAllFeaturesCommand.ts | 6 ++++
.../src/commands/EnablePolicyTypeCommand.ts | 10 ++++--
.../InviteAccountToOrganizationCommand.ts | 6 ++++
.../src/commands/LeaveOrganizationCommand.ts | 6 ++++
...tAWSServiceAccessForOrganizationCommand.ts | 6 ++++
.../src/commands/ListAccountsCommand.ts | 6 ++++
.../commands/ListAccountsForParentCommand.ts | 6 ++++
.../src/commands/ListChildrenCommand.ts | 6 ++++
.../ListCreateAccountStatusCommand.ts | 6 ++++
.../ListDelegatedAdministratorsCommand.ts | 6 ++++
.../ListDelegatedServicesForAccountCommand.ts | 6 ++++
.../ListHandshakesForAccountCommand.ts | 6 ++++
.../ListHandshakesForOrganizationCommand.ts | 6 ++++
...ListOrganizationalUnitsForParentCommand.ts | 6 ++++
.../src/commands/ListParentsCommand.ts | 6 ++++
.../src/commands/ListPoliciesCommand.ts | 10 ++++--
.../commands/ListPoliciesForTargetCommand.ts | 10 ++++--
.../src/commands/ListRootsCommand.ts | 8 ++++-
.../commands/ListTagsForResourceCommand.ts | 6 ++++
.../commands/ListTargetsForPolicyCommand.ts | 6 ++++
.../src/commands/MoveAccountCommand.ts | 6 ++++
.../src/commands/PutResourcePolicyCommand.ts | 6 ++++
.../RegisterDelegatedAdministratorCommand.ts | 6 ++++
.../RemoveAccountFromOrganizationCommand.ts | 6 ++++
.../src/commands/TagResourceCommand.ts | 6 ++++
.../src/commands/UntagResourceCommand.ts | 6 ++++
.../UpdateOrganizationalUnitCommand.ts | 6 ++++
.../src/commands/UpdatePolicyCommand.ts | 8 ++++-
.../src/models/models_0.ts | 34 +++++++++++++++++++
.../sdk-codegen/aws-models/organizations.json | 32 +++++++++++++----
55 files changed, 391 insertions(+), 22 deletions(-)
diff --git a/clients/client-organizations/src/commands/AcceptHandshakeCommand.ts b/clients/client-organizations/src/commands/AcceptHandshakeCommand.ts
index 52302848ed199..150888b5779c6 100644
--- a/clients/client-organizations/src/commands/AcceptHandshakeCommand.ts
+++ b/clients/client-organizations/src/commands/AcceptHandshakeCommand.ts
@@ -258,6 +258,9 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -298,6 +301,9 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/AttachPolicyCommand.ts b/clients/client-organizations/src/commands/AttachPolicyCommand.ts
index 1bdcb3f5676e7..c039f9b4acade 100644
--- a/clients/client-organizations/src/commands/AttachPolicyCommand.ts
+++ b/clients/client-organizations/src/commands/AttachPolicyCommand.ts
@@ -39,6 +39,11 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {}
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -349,6 +354,9 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -389,6 +397,9 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CancelHandshakeCommand.ts b/clients/client-organizations/src/commands/CancelHandshakeCommand.ts
index b95206ddb011d..a4aa4ad596805 100644
--- a/clients/client-organizations/src/commands/CancelHandshakeCommand.ts
+++ b/clients/client-organizations/src/commands/CancelHandshakeCommand.ts
@@ -164,6 +164,9 @@ export interface CancelHandshakeCommandOutput extends CancelHandshakeResponse, _
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -204,6 +207,9 @@ export interface CancelHandshakeCommandOutput extends CancelHandshakeResponse, _
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CloseAccountCommand.ts b/clients/client-organizations/src/commands/CloseAccountCommand.ts
index 2fd0b1571c0e5..9c4ada33f6397 100644
--- a/clients/client-organizations/src/commands/CloseAccountCommand.ts
+++ b/clients/client-organizations/src/commands/CloseAccountCommand.ts
@@ -372,6 +372,9 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -412,6 +415,9 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreateAccountCommand.ts b/clients/client-organizations/src/commands/CreateAccountCommand.ts
index e4a0217347186..6e9ad7c8d6106 100644
--- a/clients/client-organizations/src/commands/CreateAccountCommand.ts
+++ b/clients/client-organizations/src/commands/CreateAccountCommand.ts
@@ -415,6 +415,9 @@ export interface CreateAccountCommandOutput extends CreateAccountResponse, __Met
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -455,6 +458,9 @@ export interface CreateAccountCommandOutput extends CreateAccountResponse, __Met
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreateGovCloudAccountCommand.ts b/clients/client-organizations/src/commands/CreateGovCloudAccountCommand.ts
index bc74050d366f2..a9fcd30556ce6 100644
--- a/clients/client-organizations/src/commands/CreateGovCloudAccountCommand.ts
+++ b/clients/client-organizations/src/commands/CreateGovCloudAccountCommand.ts
@@ -469,6 +469,9 @@ export interface CreateGovCloudAccountCommandOutput extends CreateGovCloudAccoun
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -509,6 +512,9 @@ export interface CreateGovCloudAccountCommandOutput extends CreateGovCloudAccoun
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreateOrganizationCommand.ts b/clients/client-organizations/src/commands/CreateOrganizationCommand.ts
index 2ab59fc48f8d8..4879210ab920f 100644
--- a/clients/client-organizations/src/commands/CreateOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/CreateOrganizationCommand.ts
@@ -64,7 +64,7 @@ export interface CreateOrganizationCommandOutput extends CreateOrganizationRespo
* // MasterAccountEmail: "STRING_VALUE",
* // AvailablePolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
@@ -349,6 +349,9 @@ export interface CreateOrganizationCommandOutput extends CreateOrganizationRespo
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -389,6 +392,9 @@ export interface CreateOrganizationCommandOutput extends CreateOrganizationRespo
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreateOrganizationalUnitCommand.ts b/clients/client-organizations/src/commands/CreateOrganizationalUnitCommand.ts
index 72069906deaba..b311d9b0ac62b 100644
--- a/clients/client-organizations/src/commands/CreateOrganizationalUnitCommand.ts
+++ b/clients/client-organizations/src/commands/CreateOrganizationalUnitCommand.ts
@@ -339,6 +339,9 @@ export interface CreateOrganizationalUnitCommandOutput extends CreateOrganizatio
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -379,6 +382,9 @@ export interface CreateOrganizationalUnitCommandOutput extends CreateOrganizatio
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreatePolicyCommand.ts b/clients/client-organizations/src/commands/CreatePolicyCommand.ts
index 7c7c2e0c2ce83..9818d105ac344 100644
--- a/clients/client-organizations/src/commands/CreatePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/CreatePolicyCommand.ts
@@ -46,7 +46,7 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
* Content: "STRING_VALUE", // required
* Description: "STRING_VALUE", // required
* Name: "STRING_VALUE", // required
- * Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* Tags: [ // Tags
* { // Tag
* Key: "STRING_VALUE", // required
@@ -63,7 +63,7 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // Content: "STRING_VALUE",
@@ -345,6 +345,9 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -385,6 +388,9 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeclineHandshakeCommand.ts b/clients/client-organizations/src/commands/DeclineHandshakeCommand.ts
index 92035618b92cd..f1d88539e7c42 100644
--- a/clients/client-organizations/src/commands/DeclineHandshakeCommand.ts
+++ b/clients/client-organizations/src/commands/DeclineHandshakeCommand.ts
@@ -165,6 +165,9 @@ export interface DeclineHandshakeCommandOutput extends DeclineHandshakeResponse,
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -205,6 +208,9 @@ export interface DeclineHandshakeCommandOutput extends DeclineHandshakeResponse,
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeleteOrganizationCommand.ts b/clients/client-organizations/src/commands/DeleteOrganizationCommand.ts
index 77488e8e2c36a..63c10aacae8a6 100644
--- a/clients/client-organizations/src/commands/DeleteOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/DeleteOrganizationCommand.ts
@@ -117,6 +117,9 @@ export interface DeleteOrganizationCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -157,6 +160,9 @@ export interface DeleteOrganizationCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeleteOrganizationalUnitCommand.ts b/clients/client-organizations/src/commands/DeleteOrganizationalUnitCommand.ts
index e3ce9b99b4b58..7612fae97254d 100644
--- a/clients/client-organizations/src/commands/DeleteOrganizationalUnitCommand.ts
+++ b/clients/client-organizations/src/commands/DeleteOrganizationalUnitCommand.ts
@@ -121,6 +121,9 @@ export interface DeleteOrganizationalUnitCommandOutput extends __MetadataBearer
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -161,6 +164,9 @@ export interface DeleteOrganizationalUnitCommandOutput extends __MetadataBearer
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeletePolicyCommand.ts b/clients/client-organizations/src/commands/DeletePolicyCommand.ts
index 165e21e98935e..e3677eeb0c70c 100644
--- a/clients/client-organizations/src/commands/DeletePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/DeletePolicyCommand.ts
@@ -123,6 +123,9 @@ export interface DeletePolicyCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -163,6 +166,9 @@ export interface DeletePolicyCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeregisterDelegatedAdministratorCommand.ts b/clients/client-organizations/src/commands/DeregisterDelegatedAdministratorCommand.ts
index c3a6268f490d5..d53e0f7c179b4 100644
--- a/clients/client-organizations/src/commands/DeregisterDelegatedAdministratorCommand.ts
+++ b/clients/client-organizations/src/commands/DeregisterDelegatedAdministratorCommand.ts
@@ -339,6 +339,9 @@ export interface DeregisterDelegatedAdministratorCommandOutput extends __Metadat
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -379,6 +382,9 @@ export interface DeregisterDelegatedAdministratorCommandOutput extends __Metadat
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeAccountCommand.ts b/clients/client-organizations/src/commands/DescribeAccountCommand.ts
index b7391399b8774..f05137b474af0 100644
--- a/clients/client-organizations/src/commands/DescribeAccountCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeAccountCommand.ts
@@ -136,6 +136,9 @@ export interface DescribeAccountCommandOutput extends DescribeAccountResponse, _
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -176,6 +179,9 @@ export interface DescribeAccountCommandOutput extends DescribeAccountResponse, _
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeCreateAccountStatusCommand.ts b/clients/client-organizations/src/commands/DescribeCreateAccountStatusCommand.ts
index b5ae2ca9a85f2..e267a146066e2 100644
--- a/clients/client-organizations/src/commands/DescribeCreateAccountStatusCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeCreateAccountStatusCommand.ts
@@ -138,6 +138,9 @@ export interface DescribeCreateAccountStatusCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -178,6 +181,9 @@ export interface DescribeCreateAccountStatusCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeEffectivePolicyCommand.ts b/clients/client-organizations/src/commands/DescribeEffectivePolicyCommand.ts
index 7c773b0a8f073..b44ab81c868fd 100644
--- a/clients/client-organizations/src/commands/DescribeEffectivePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeEffectivePolicyCommand.ts
@@ -333,6 +333,9 @@ export interface DescribeEffectivePolicyCommandOutput extends DescribeEffectiveP
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -373,6 +376,9 @@ export interface DescribeEffectivePolicyCommandOutput extends DescribeEffectiveP
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeHandshakeCommand.ts b/clients/client-organizations/src/commands/DescribeHandshakeCommand.ts
index e6817e4b85191..f74f20fc153dc 100644
--- a/clients/client-organizations/src/commands/DescribeHandshakeCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeHandshakeCommand.ts
@@ -156,6 +156,9 @@ export interface DescribeHandshakeCommandOutput extends DescribeHandshakeRespons
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -196,6 +199,9 @@ export interface DescribeHandshakeCommandOutput extends DescribeHandshakeRespons
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeOrganizationCommand.ts b/clients/client-organizations/src/commands/DescribeOrganizationCommand.ts
index 03a5352b1b6e4..0fc04295c8584 100644
--- a/clients/client-organizations/src/commands/DescribeOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeOrganizationCommand.ts
@@ -55,7 +55,7 @@ export interface DescribeOrganizationCommandOutput extends DescribeOrganizationR
* // MasterAccountEmail: "STRING_VALUE",
* // AvailablePolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
diff --git a/clients/client-organizations/src/commands/DescribeOrganizationalUnitCommand.ts b/clients/client-organizations/src/commands/DescribeOrganizationalUnitCommand.ts
index 2d59eef36d1f0..7e3de49989d11 100644
--- a/clients/client-organizations/src/commands/DescribeOrganizationalUnitCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeOrganizationalUnitCommand.ts
@@ -123,6 +123,9 @@ export interface DescribeOrganizationalUnitCommandOutput extends DescribeOrganiz
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -163,6 +166,9 @@ export interface DescribeOrganizationalUnitCommandOutput extends DescribeOrganiz
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribePolicyCommand.ts b/clients/client-organizations/src/commands/DescribePolicyCommand.ts
index a319a44d08052..f89319b7b2a6f 100644
--- a/clients/client-organizations/src/commands/DescribePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/DescribePolicyCommand.ts
@@ -49,7 +49,7 @@ export interface DescribePolicyCommandOutput extends DescribePolicyResponse, __M
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // Content: "STRING_VALUE",
@@ -129,6 +129,9 @@ export interface DescribePolicyCommandOutput extends DescribePolicyResponse, __M
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -169,6 +172,9 @@ export interface DescribePolicyCommandOutput extends DescribePolicyResponse, __M
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DetachPolicyCommand.ts b/clients/client-organizations/src/commands/DetachPolicyCommand.ts
index 695d8bc34f553..bef4f19274be8 100644
--- a/clients/client-organizations/src/commands/DetachPolicyCommand.ts
+++ b/clients/client-organizations/src/commands/DetachPolicyCommand.ts
@@ -330,6 +330,9 @@ export interface DetachPolicyCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -370,6 +373,9 @@ export interface DetachPolicyCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DisableAWSServiceAccessCommand.ts b/clients/client-organizations/src/commands/DisableAWSServiceAccessCommand.ts
index 832ebec8e99a6..85a3d82cc2de9 100644
--- a/clients/client-organizations/src/commands/DisableAWSServiceAccessCommand.ts
+++ b/clients/client-organizations/src/commands/DisableAWSServiceAccessCommand.ts
@@ -368,6 +368,9 @@ export interface DisableAWSServiceAccessCommandOutput extends __MetadataBearer {
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -408,6 +411,9 @@ export interface DisableAWSServiceAccessCommandOutput extends __MetadataBearer {
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DisablePolicyTypeCommand.ts b/clients/client-organizations/src/commands/DisablePolicyTypeCommand.ts
index 9a54b8c8e233b..0ce9454703c8c 100644
--- a/clients/client-organizations/src/commands/DisablePolicyTypeCommand.ts
+++ b/clients/client-organizations/src/commands/DisablePolicyTypeCommand.ts
@@ -48,7 +48,7 @@ export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeRespons
* const client = new OrganizationsClient(config);
* const input = { // DisablePolicyTypeRequest
* RootId: "STRING_VALUE", // required
- * PolicyType: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * PolicyType: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* };
* const command = new DisablePolicyTypeCommand(input);
* const response = await client.send(command);
@@ -59,7 +59,7 @@ export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeRespons
* // Name: "STRING_VALUE",
* // PolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
@@ -338,6 +338,9 @@ export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeRespons
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -378,6 +381,9 @@ export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeRespons
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/EnableAWSServiceAccessCommand.ts b/clients/client-organizations/src/commands/EnableAWSServiceAccessCommand.ts
index 523d6a425f925..18b3b598c35f8 100644
--- a/clients/client-organizations/src/commands/EnableAWSServiceAccessCommand.ts
+++ b/clients/client-organizations/src/commands/EnableAWSServiceAccessCommand.ts
@@ -333,6 +333,9 @@ export interface EnableAWSServiceAccessCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -373,6 +376,9 @@ export interface EnableAWSServiceAccessCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/EnableAllFeaturesCommand.ts b/clients/client-organizations/src/commands/EnableAllFeaturesCommand.ts
index 8446443be0c8c..8b7e6b7ce8c81 100644
--- a/clients/client-organizations/src/commands/EnableAllFeaturesCommand.ts
+++ b/clients/client-organizations/src/commands/EnableAllFeaturesCommand.ts
@@ -233,6 +233,9 @@ export interface EnableAllFeaturesCommandOutput extends EnableAllFeaturesRespons
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -273,6 +276,9 @@ export interface EnableAllFeaturesCommandOutput extends EnableAllFeaturesRespons
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/EnablePolicyTypeCommand.ts b/clients/client-organizations/src/commands/EnablePolicyTypeCommand.ts
index ce52e8a2c2c54..2c9b663aafd58 100644
--- a/clients/client-organizations/src/commands/EnablePolicyTypeCommand.ts
+++ b/clients/client-organizations/src/commands/EnablePolicyTypeCommand.ts
@@ -48,7 +48,7 @@ export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse,
* const client = new OrganizationsClient(config);
* const input = { // EnablePolicyTypeRequest
* RootId: "STRING_VALUE", // required
- * PolicyType: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * PolicyType: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* };
* const command = new EnablePolicyTypeCommand(input);
* const response = await client.send(command);
@@ -59,7 +59,7 @@ export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse,
* // Name: "STRING_VALUE",
* // PolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
@@ -338,6 +338,9 @@ export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse,
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -378,6 +381,9 @@ export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse,
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/InviteAccountToOrganizationCommand.ts b/clients/client-organizations/src/commands/InviteAccountToOrganizationCommand.ts
index a9544e6366f4c..e4a47d51829ec 100644
--- a/clients/client-organizations/src/commands/InviteAccountToOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/InviteAccountToOrganizationCommand.ts
@@ -462,6 +462,9 @@ export interface InviteAccountToOrganizationCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -502,6 +505,9 @@ export interface InviteAccountToOrganizationCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/LeaveOrganizationCommand.ts b/clients/client-organizations/src/commands/LeaveOrganizationCommand.ts
index e27c9f14e1a5b..f27158f555fc4 100644
--- a/clients/client-organizations/src/commands/LeaveOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/LeaveOrganizationCommand.ts
@@ -382,6 +382,9 @@ export interface LeaveOrganizationCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -422,6 +425,9 @@ export interface LeaveOrganizationCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListAWSServiceAccessForOrganizationCommand.ts b/clients/client-organizations/src/commands/ListAWSServiceAccessForOrganizationCommand.ts
index 0771b3ef54620..a00c8a2aa6773 100644
--- a/clients/client-organizations/src/commands/ListAWSServiceAccessForOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/ListAWSServiceAccessForOrganizationCommand.ts
@@ -334,6 +334,9 @@ export interface ListAWSServiceAccessForOrganizationCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -374,6 +377,9 @@ export interface ListAWSServiceAccessForOrganizationCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListAccountsCommand.ts b/clients/client-organizations/src/commands/ListAccountsCommand.ts
index d7c89b225a22e..4e73b5ec70bb6 100644
--- a/clients/client-organizations/src/commands/ListAccountsCommand.ts
+++ b/clients/client-organizations/src/commands/ListAccountsCommand.ts
@@ -140,6 +140,9 @@ export interface ListAccountsCommandOutput extends ListAccountsResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -180,6 +183,9 @@ export interface ListAccountsCommandOutput extends ListAccountsResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListAccountsForParentCommand.ts b/clients/client-organizations/src/commands/ListAccountsForParentCommand.ts
index 73db10889dc3c..141f5e16a2aa6 100644
--- a/clients/client-organizations/src/commands/ListAccountsForParentCommand.ts
+++ b/clients/client-organizations/src/commands/ListAccountsForParentCommand.ts
@@ -148,6 +148,9 @@ export interface ListAccountsForParentCommandOutput extends ListAccountsForParen
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -188,6 +191,9 @@ export interface ListAccountsForParentCommandOutput extends ListAccountsForParen
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListChildrenCommand.ts b/clients/client-organizations/src/commands/ListChildrenCommand.ts
index b11eea9304d6a..6bf94f1f74bd6 100644
--- a/clients/client-organizations/src/commands/ListChildrenCommand.ts
+++ b/clients/client-organizations/src/commands/ListChildrenCommand.ts
@@ -138,6 +138,9 @@ export interface ListChildrenCommandOutput extends ListChildrenResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -178,6 +181,9 @@ export interface ListChildrenCommandOutput extends ListChildrenResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListCreateAccountStatusCommand.ts b/clients/client-organizations/src/commands/ListCreateAccountStatusCommand.ts
index a4b4c5ff3cae9..fbedc9e6df474 100644
--- a/clients/client-organizations/src/commands/ListCreateAccountStatusCommand.ts
+++ b/clients/client-organizations/src/commands/ListCreateAccountStatusCommand.ts
@@ -148,6 +148,9 @@ export interface ListCreateAccountStatusCommandOutput extends ListCreateAccountS
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -188,6 +191,9 @@ export interface ListCreateAccountStatusCommandOutput extends ListCreateAccountS
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListDelegatedAdministratorsCommand.ts b/clients/client-organizations/src/commands/ListDelegatedAdministratorsCommand.ts
index 9ced4656957b2..a84361a02f785 100644
--- a/clients/client-organizations/src/commands/ListDelegatedAdministratorsCommand.ts
+++ b/clients/client-organizations/src/commands/ListDelegatedAdministratorsCommand.ts
@@ -335,6 +335,9 @@ export interface ListDelegatedAdministratorsCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -375,6 +378,9 @@ export interface ListDelegatedAdministratorsCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListDelegatedServicesForAccountCommand.ts b/clients/client-organizations/src/commands/ListDelegatedServicesForAccountCommand.ts
index 93096102bd073..dafaf4fdc3959 100644
--- a/clients/client-organizations/src/commands/ListDelegatedServicesForAccountCommand.ts
+++ b/clients/client-organizations/src/commands/ListDelegatedServicesForAccountCommand.ts
@@ -336,6 +336,9 @@ export interface ListDelegatedServicesForAccountCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -376,6 +379,9 @@ export interface ListDelegatedServicesForAccountCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListHandshakesForAccountCommand.ts b/clients/client-organizations/src/commands/ListHandshakesForAccountCommand.ts
index 7c2a2ef4fc7e3..39f763b90b3f2 100644
--- a/clients/client-organizations/src/commands/ListHandshakesForAccountCommand.ts
+++ b/clients/client-organizations/src/commands/ListHandshakesForAccountCommand.ts
@@ -169,6 +169,9 @@ export interface ListHandshakesForAccountCommandOutput extends ListHandshakesFor
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -209,6 +212,9 @@ export interface ListHandshakesForAccountCommandOutput extends ListHandshakesFor
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListHandshakesForOrganizationCommand.ts b/clients/client-organizations/src/commands/ListHandshakesForOrganizationCommand.ts
index 5956618098b0d..b730d8d47193a 100644
--- a/clients/client-organizations/src/commands/ListHandshakesForOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/ListHandshakesForOrganizationCommand.ts
@@ -181,6 +181,9 @@ export interface ListHandshakesForOrganizationCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -221,6 +224,9 @@ export interface ListHandshakesForOrganizationCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListOrganizationalUnitsForParentCommand.ts b/clients/client-organizations/src/commands/ListOrganizationalUnitsForParentCommand.ts
index 7c3fb72c33e1f..ccc74a95991df 100644
--- a/clients/client-organizations/src/commands/ListOrganizationalUnitsForParentCommand.ts
+++ b/clients/client-organizations/src/commands/ListOrganizationalUnitsForParentCommand.ts
@@ -141,6 +141,9 @@ export interface ListOrganizationalUnitsForParentCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -181,6 +184,9 @@ export interface ListOrganizationalUnitsForParentCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListParentsCommand.ts b/clients/client-organizations/src/commands/ListParentsCommand.ts
index 210c0198d02f4..84048194b348c 100644
--- a/clients/client-organizations/src/commands/ListParentsCommand.ts
+++ b/clients/client-organizations/src/commands/ListParentsCommand.ts
@@ -144,6 +144,9 @@ export interface ListParentsCommandOutput extends ListParentsResponse, __Metadat
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -184,6 +187,9 @@ export interface ListParentsCommandOutput extends ListParentsResponse, __Metadat
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListPoliciesCommand.ts b/clients/client-organizations/src/commands/ListPoliciesCommand.ts
index 9b52a083c5d81..53fcb2615fe12 100644
--- a/clients/client-organizations/src/commands/ListPoliciesCommand.ts
+++ b/clients/client-organizations/src/commands/ListPoliciesCommand.ts
@@ -46,7 +46,7 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
* // const { OrganizationsClient, ListPoliciesCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
* const client = new OrganizationsClient(config);
* const input = { // ListPoliciesRequest
- * Filter: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * Filter: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* NextToken: "STRING_VALUE",
* MaxResults: Number("int"),
* };
@@ -59,7 +59,7 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // ],
@@ -139,6 +139,9 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -179,6 +182,9 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListPoliciesForTargetCommand.ts b/clients/client-organizations/src/commands/ListPoliciesForTargetCommand.ts
index 9a0e9ee5bda4c..15b96fba7c6c9 100644
--- a/clients/client-organizations/src/commands/ListPoliciesForTargetCommand.ts
+++ b/clients/client-organizations/src/commands/ListPoliciesForTargetCommand.ts
@@ -49,7 +49,7 @@ export interface ListPoliciesForTargetCommandOutput extends ListPoliciesForTarge
* const client = new OrganizationsClient(config);
* const input = { // ListPoliciesForTargetRequest
* TargetId: "STRING_VALUE", // required
- * Filter: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * Filter: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* NextToken: "STRING_VALUE",
* MaxResults: Number("int"),
* };
@@ -62,7 +62,7 @@ export interface ListPoliciesForTargetCommandOutput extends ListPoliciesForTarge
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // ],
@@ -142,6 +142,9 @@ export interface ListPoliciesForTargetCommandOutput extends ListPoliciesForTarge
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -182,6 +185,9 @@ export interface ListPoliciesForTargetCommandOutput extends ListPoliciesForTarge
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListRootsCommand.ts b/clients/client-organizations/src/commands/ListRootsCommand.ts
index 7678dcdd0a456..0a7cb21b2d966 100644
--- a/clients/client-organizations/src/commands/ListRootsCommand.ts
+++ b/clients/client-organizations/src/commands/ListRootsCommand.ts
@@ -66,7 +66,7 @@ export interface ListRootsCommandOutput extends ListRootsResponse, __MetadataBea
* // Name: "STRING_VALUE",
* // PolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
@@ -148,6 +148,9 @@ export interface ListRootsCommandOutput extends ListRootsResponse, __MetadataBea
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -188,6 +191,9 @@ export interface ListRootsCommandOutput extends ListRootsResponse, __MetadataBea
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListTagsForResourceCommand.ts b/clients/client-organizations/src/commands/ListTagsForResourceCommand.ts
index adca3dca95baa..5f6afde87797b 100644
--- a/clients/client-organizations/src/commands/ListTagsForResourceCommand.ts
+++ b/clients/client-organizations/src/commands/ListTagsForResourceCommand.ts
@@ -141,6 +141,9 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -181,6 +184,9 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListTargetsForPolicyCommand.ts b/clients/client-organizations/src/commands/ListTargetsForPolicyCommand.ts
index cfe3f21a7f088..89837c50790ea 100644
--- a/clients/client-organizations/src/commands/ListTargetsForPolicyCommand.ts
+++ b/clients/client-organizations/src/commands/ListTargetsForPolicyCommand.ts
@@ -138,6 +138,9 @@ export interface ListTargetsForPolicyCommandOutput extends ListTargetsForPolicyR
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -178,6 +181,9 @@ export interface ListTargetsForPolicyCommandOutput extends ListTargetsForPolicyR
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/MoveAccountCommand.ts b/clients/client-organizations/src/commands/MoveAccountCommand.ts
index 47abf70ee5cbb..9360f1f1b0fe7 100644
--- a/clients/client-organizations/src/commands/MoveAccountCommand.ts
+++ b/clients/client-organizations/src/commands/MoveAccountCommand.ts
@@ -135,6 +135,9 @@ export interface MoveAccountCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -175,6 +178,9 @@ export interface MoveAccountCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/PutResourcePolicyCommand.ts b/clients/client-organizations/src/commands/PutResourcePolicyCommand.ts
index 7aeffc6cc1bad..a649b452481aa 100644
--- a/clients/client-organizations/src/commands/PutResourcePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/PutResourcePolicyCommand.ts
@@ -329,6 +329,9 @@ export interface PutResourcePolicyCommandOutput extends PutResourcePolicyRespons
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -369,6 +372,9 @@ export interface PutResourcePolicyCommandOutput extends PutResourcePolicyRespons
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/RegisterDelegatedAdministratorCommand.ts b/clients/client-organizations/src/commands/RegisterDelegatedAdministratorCommand.ts
index a36397e1d920e..0d701d2e8db75 100644
--- a/clients/client-organizations/src/commands/RegisterDelegatedAdministratorCommand.ts
+++ b/clients/client-organizations/src/commands/RegisterDelegatedAdministratorCommand.ts
@@ -335,6 +335,9 @@ export interface RegisterDelegatedAdministratorCommandOutput extends __MetadataB
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -375,6 +378,9 @@ export interface RegisterDelegatedAdministratorCommandOutput extends __MetadataB
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/RemoveAccountFromOrganizationCommand.ts b/clients/client-organizations/src/commands/RemoveAccountFromOrganizationCommand.ts
index 54d0b276dc0a6..b139048aeda7a 100644
--- a/clients/client-organizations/src/commands/RemoveAccountFromOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/RemoveAccountFromOrganizationCommand.ts
@@ -352,6 +352,9 @@ export interface RemoveAccountFromOrganizationCommandOutput extends __MetadataBe
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -392,6 +395,9 @@ export interface RemoveAccountFromOrganizationCommandOutput extends __MetadataBe
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/TagResourceCommand.ts b/clients/client-organizations/src/commands/TagResourceCommand.ts
index 1f1b6313711f6..e7ee9e0d0e270 100644
--- a/clients/client-organizations/src/commands/TagResourceCommand.ts
+++ b/clients/client-organizations/src/commands/TagResourceCommand.ts
@@ -337,6 +337,9 @@ export interface TagResourceCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -377,6 +380,9 @@ export interface TagResourceCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/UntagResourceCommand.ts b/clients/client-organizations/src/commands/UntagResourceCommand.ts
index ecbd80f0fef48..0ae7047929d10 100644
--- a/clients/client-organizations/src/commands/UntagResourceCommand.ts
+++ b/clients/client-organizations/src/commands/UntagResourceCommand.ts
@@ -334,6 +334,9 @@ export interface UntagResourceCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -374,6 +377,9 @@ export interface UntagResourceCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/UpdateOrganizationalUnitCommand.ts b/clients/client-organizations/src/commands/UpdateOrganizationalUnitCommand.ts
index fc10bda764d1d..ff6a3627ccc25 100644
--- a/clients/client-organizations/src/commands/UpdateOrganizationalUnitCommand.ts
+++ b/clients/client-organizations/src/commands/UpdateOrganizationalUnitCommand.ts
@@ -132,6 +132,9 @@ export interface UpdateOrganizationalUnitCommandOutput extends UpdateOrganizatio
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -172,6 +175,9 @@ export interface UpdateOrganizationalUnitCommandOutput extends UpdateOrganizatio
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/UpdatePolicyCommand.ts b/clients/client-organizations/src/commands/UpdatePolicyCommand.ts
index 4062da7518b02..dc67a3db54b22 100644
--- a/clients/client-organizations/src/commands/UpdatePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/UpdatePolicyCommand.ts
@@ -54,7 +54,7 @@ export interface UpdatePolicyCommandOutput extends UpdatePolicyResponse, __Metad
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // Content: "STRING_VALUE",
@@ -336,6 +336,9 @@ export interface UpdatePolicyCommandOutput extends UpdatePolicyResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -376,6 +379,9 @@ export interface UpdatePolicyCommandOutput extends UpdatePolicyResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/models/models_0.ts b/clients/client-organizations/src/models/models_0.ts
index 824732d697f03..5db8a253fae1e 100644
--- a/clients/client-organizations/src/models/models_0.ts
+++ b/clients/client-organizations/src/models/models_0.ts
@@ -407,6 +407,7 @@ export const InvalidInputExceptionReason = {
INVALID_PARTY_TYPE_TARGET: "INVALID_PARTY_TYPE_TARGET",
INVALID_PATTERN: "INVALID_PATTERN",
INVALID_PATTERN_TARGET_ID: "INVALID_PATTERN_TARGET_ID",
+ INVALID_PRINCIPAL: "INVALID_PRINCIPAL",
INVALID_RESOURCE_POLICY_JSON: "INVALID_RESOURCE_POLICY_JSON",
INVALID_ROLE_NAME: "INVALID_ROLE_NAME",
INVALID_SYNTAX_ORGANIZATION: "INVALID_SYNTAX_ORGANIZATION_ARN",
@@ -418,6 +419,7 @@ export const InvalidInputExceptionReason = {
MIN_LENGTH_EXCEEDED: "MIN_LENGTH_EXCEEDED",
MIN_VALUE_EXCEEDED: "MIN_VALUE_EXCEEDED",
MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS: "MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS",
+ NON_DETACHABLE_POLICY: "NON_DETACHABLE_POLICY",
TARGET_NOT_SUPPORTED: "TARGET_NOT_SUPPORTED",
UNRECOGNIZED_SERVICE_PRINCIPAL: "UNRECOGNIZED_SERVICE_PRINCIPAL",
UNSUPPORTED_ACTION_IN_RESOURCE_POLICY: "UNSUPPORTED_ACTION_IN_RESOURCE_POLICY",
@@ -486,6 +488,9 @@ export type InvalidInputExceptionReason =
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -526,6 +531,9 @@ export type InvalidInputExceptionReason =
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
@@ -1893,6 +1901,7 @@ export const PolicyType = {
AISERVICES_OPT_OUT_POLICY: "AISERVICES_OPT_OUT_POLICY",
BACKUP_POLICY: "BACKUP_POLICY",
CHATBOT_POLICY: "CHATBOT_POLICY",
+ RESOURCE_CONTROL_POLICY: "RESOURCE_CONTROL_POLICY",
SERVICE_CONTROL_POLICY: "SERVICE_CONTROL_POLICY",
TAG_POLICY: "TAG_POLICY",
} as const;
@@ -2178,6 +2187,11 @@ export interface CreatePolicyRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -2991,6 +3005,11 @@ export interface DisablePolicyTypeRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -3137,6 +3156,11 @@ export interface EnablePolicyTypeRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -4180,6 +4204,11 @@ export interface ListPoliciesRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -4289,6 +4318,11 @@ export interface ListPoliciesForTargetRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
diff --git a/codegen/sdk-codegen/aws-models/organizations.json b/codegen/sdk-codegen/aws-models/organizations.json
index 0ea13a02d5bfc..615c501b18c4a 100644
--- a/codegen/sdk-codegen/aws-models/organizations.json
+++ b/codegen/sdk-codegen/aws-models/organizations.json
@@ -1902,7 +1902,7 @@
}
],
"traits": {
- "smithy.api#documentation": "Attaches a policy to a root, an organizational unit (OU), or an individual account.\n How the policy affects accounts depends on the type of policy. Refer to the\n Organizations User Guide for information about each policy type:
\n \n This operation can be called only from the organization's\nmanagement account or by a member account that is a delegated administrator for an Amazon Web Services service.
",
+ "smithy.api#documentation": "Attaches a policy to a root, an organizational unit (OU), or an individual account.\n How the policy affects accounts depends on the type of policy. Refer to the\n Organizations User Guide for information about each policy type:
\n \n This operation can be called only from the organization's\nmanagement account or by a member account that is a delegated administrator for an Amazon Web Services service.
",
"smithy.api#examples": [
{
"title": "To attach a policy to an account",
@@ -3129,7 +3129,7 @@
"Type": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "The type of policy to create. You can specify one of the following values:
\n ",
+ "smithy.api#documentation": "The type of policy to create. You can specify one of the following values:
\n ",
"smithy.api#required": {}
}
},
@@ -4478,7 +4478,7 @@
"PolicyType": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "The policy type that you want to disable in this root. You can specify one of the\n following values:
\n ",
+ "smithy.api#documentation": "The policy type that you want to disable in this root. You can specify one of the\n following values:
\n ",
"smithy.api#required": {}
}
}
@@ -4873,7 +4873,7 @@
"PolicyType": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "The policy type that you want to enable. You can specify one of the following\n values:
\n ",
+ "smithy.api#documentation": "The policy type that you want to enable. You can specify one of the following\n values:
\n ",
"smithy.api#required": {}
}
}
@@ -5398,7 +5398,7 @@
}
},
"traits": {
- "smithy.api#documentation": "The requested operation failed because you provided invalid values for one or more of\n the request parameters. This exception includes a reason that contains additional\n information about the violated limit:
\n \n Some of the reasons in the following list might not be applicable to this specific\n API or operation.
\n \n \n - \n
DUPLICATE_TAG_KEY: Tag keys must be unique among the tags attached to the same\n entity.
\n \n - \n
IMMUTABLE_POLICY: You specified a policy that is managed by Amazon Web Services and can't be\n modified.
\n \n - \n
INPUT_REQUIRED: You must include a value for all required parameters.
\n \n - \n
INVALID_EMAIL_ADDRESS_TARGET: You specified an invalid email address for the\n invited account owner.
\n \n - \n
INVALID_ENUM: You specified an invalid value.
\n \n - \n
INVALID_ENUM_POLICY_TYPE: You specified an invalid policy type string.
\n \n - \n
INVALID_FULL_NAME_TARGET: You specified a full name that contains invalid\n characters.
\n \n - \n
INVALID_LIST_MEMBER: You provided a list to a parameter that contains at least\n one invalid value.
\n \n - \n
INVALID_PAGINATION_TOKEN: Get the value for the NextToken
\n parameter from the response to a previous call of the operation.
\n \n - \n
INVALID_PARTY_TYPE_TARGET: You specified the wrong type of entity (account,\n organization, or email) as a party.
\n \n - \n
INVALID_PATTERN: You provided a value that doesn't match the required\n pattern.
\n \n - \n
INVALID_PATTERN_TARGET_ID: You specified a policy target ID that doesn't match\n the required pattern.
\n \n - \n
INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name\n can't begin with the reserved prefix AWSServiceRoleFor
.
\n \n - \n
INVALID_SYNTAX_ORGANIZATION_ARN: You specified an invalid Amazon Resource Name\n (ARN) for the organization.
\n \n - \n
INVALID_SYNTAX_POLICY_ID: You specified an invalid policy ID.
\n \n - \n
INVALID_SYSTEM_TAGS_PARAMETER: You specified a tag key that is a system tag.\n You can’t add, edit, or delete system tag keys because they're reserved for\n Amazon Web Services use. System tags don’t count against your tags per resource limit.
\n \n - \n
MAX_FILTER_LIMIT_EXCEEDED: You can specify only one filter parameter for the\n operation.
\n \n - \n
MAX_LENGTH_EXCEEDED: You provided a string parameter that is longer than\n allowed.
\n \n - \n
MAX_VALUE_EXCEEDED: You provided a numeric parameter that has a larger value\n than allowed.
\n \n - \n
MIN_LENGTH_EXCEEDED: You provided a string parameter that is shorter than\n allowed.
\n \n - \n
MIN_VALUE_EXCEEDED: You provided a numeric parameter that has a smaller value\n than allowed.
\n \n - \n
MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS: You can move an account only between\n entities in the same root.
\n \n - \n
TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target\n entity.
\n \n - \n
UNRECOGNIZED_SERVICE_PRINCIPAL: You specified a service principal that isn't\n recognized.
\n \n
",
+ "smithy.api#documentation": "The requested operation failed because you provided invalid values for one or more of\n the request parameters. This exception includes a reason that contains additional\n information about the violated limit:
\n \n Some of the reasons in the following list might not be applicable to this specific\n API or operation.
\n \n \n - \n
DUPLICATE_TAG_KEY: Tag keys must be unique among the tags attached to the same\n entity.
\n \n - \n
IMMUTABLE_POLICY: You specified a policy that is managed by Amazon Web Services and can't be\n modified.
\n \n - \n
INPUT_REQUIRED: You must include a value for all required parameters.
\n \n - \n
INVALID_EMAIL_ADDRESS_TARGET: You specified an invalid email address for the\n invited account owner.
\n \n - \n
INVALID_ENUM: You specified an invalid value.
\n \n - \n
INVALID_ENUM_POLICY_TYPE: You specified an invalid policy type string.
\n \n - \n
INVALID_FULL_NAME_TARGET: You specified a full name that contains invalid\n characters.
\n \n - \n
INVALID_LIST_MEMBER: You provided a list to a parameter that contains at least\n one invalid value.
\n \n - \n
INVALID_PAGINATION_TOKEN: Get the value for the NextToken
\n parameter from the response to a previous call of the operation.
\n \n - \n
INVALID_PARTY_TYPE_TARGET: You specified the wrong type of entity (account,\n organization, or email) as a party.
\n \n - \n
INVALID_PATTERN: You provided a value that doesn't match the required\n pattern.
\n \n - \n
INVALID_PATTERN_TARGET_ID: You specified a policy target ID that doesn't match\n the required pattern.
\n \n - \n
INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
\n \n - \n
INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name\n can't begin with the reserved prefix AWSServiceRoleFor
.
\n \n - \n
INVALID_SYNTAX_ORGANIZATION_ARN: You specified an invalid Amazon Resource Name\n (ARN) for the organization.
\n \n - \n
INVALID_SYNTAX_POLICY_ID: You specified an invalid policy ID.
\n \n - \n
INVALID_SYSTEM_TAGS_PARAMETER: You specified a tag key that is a system tag.\n You can’t add, edit, or delete system tag keys because they're reserved for\n Amazon Web Services use. System tags don’t count against your tags per resource limit.
\n \n - \n
MAX_FILTER_LIMIT_EXCEEDED: You can specify only one filter parameter for the\n operation.
\n \n - \n
MAX_LENGTH_EXCEEDED: You provided a string parameter that is longer than\n allowed.
\n \n - \n
MAX_VALUE_EXCEEDED: You provided a numeric parameter that has a larger value\n than allowed.
\n \n - \n
MIN_LENGTH_EXCEEDED: You provided a string parameter that is shorter than\n allowed.
\n \n - \n
MIN_VALUE_EXCEEDED: You provided a numeric parameter that has a smaller value\n than allowed.
\n \n - \n
MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS: You can move an account only between\n entities in the same root.
\n \n - \n
NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
\n \n - \n
TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target\n entity.
\n \n - \n
UNRECOGNIZED_SERVICE_PRINCIPAL: You specified a service principal that isn't\n recognized.
\n \n
",
"smithy.api#error": "client",
"smithy.api#httpError": 400
}
@@ -5556,6 +5556,12 @@
"smithy.api#enumValue": "INVALID_RESOURCE_POLICY_JSON"
}
},
+ "INVALID_PRINCIPAL": {
+ "target": "smithy.api#Unit",
+ "traits": {
+ "smithy.api#enumValue": "INVALID_PRINCIPAL"
+ }
+ },
"UNSUPPORTED_ACTION_IN_RESOURCE_POLICY": {
"target": "smithy.api#Unit",
"traits": {
@@ -5573,6 +5579,12 @@
"traits": {
"smithy.api#enumValue": "UNSUPPORTED_RESOURCE_IN_RESOURCE_POLICY"
}
+ },
+ "NON_DETACHABLE_POLICY": {
+ "target": "smithy.api#Unit",
+ "traits": {
+ "smithy.api#enumValue": "NON_DETACHABLE_POLICY"
+ }
}
}
},
@@ -7118,7 +7130,7 @@
"Filter": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "The type of policy that you want to include in the returned list. You must specify one\n of the following values:
\n ",
+ "smithy.api#documentation": "The type of policy that you want to include in the returned list. You must specify one\n of the following values:
\n ",
"smithy.api#required": {}
}
},
@@ -7165,7 +7177,7 @@
"Filter": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "Specifies the type of policy that you want to include in the response. You must\n specify one of the following values:
\n ",
+ "smithy.api#documentation": "Specifies the type of policy that you want to include in the response. You must\n specify one of the following values:
\n ",
"smithy.api#required": {}
}
},
@@ -8092,6 +8104,12 @@
"smithy.api#enumValue": "SERVICE_CONTROL_POLICY"
}
},
+ "RESOURCE_CONTROL_POLICY": {
+ "target": "smithy.api#Unit",
+ "traits": {
+ "smithy.api#enumValue": "RESOURCE_CONTROL_POLICY"
+ }
+ },
"TAG_POLICY": {
"target": "smithy.api#Unit",
"traits": {