Skip to content

Commit d87a984

Browse files
author
awstools
committed
feat(client-organizations): Add support for policy operations on the Resource Control Polices.
1 parent 79297bb commit d87a984

File tree

55 files changed

+391
-22
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

55 files changed

+391
-22
lines changed

clients/client-organizations/src/commands/AcceptHandshakeCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -258,6 +258,9 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
258258
* the required pattern.</p>
259259
* </li>
260260
* <li>
261+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
262+
* </li>
263+
* <li>
261264
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
262265
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
263266
* </li>
@@ -298,6 +301,9 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
298301
* entities in the same root.</p>
299302
* </li>
300303
* <li>
304+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
305+
* </li>
306+
* <li>
301307
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
302308
* entity.</p>
303309
* </li>

clients/client-organizations/src/commands/AttachPolicyCommand.ts

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,11 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {}
3939
* </li>
4040
* <li>
4141
* <p>
42+
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_rcps.html">RESOURCE_CONTROL_POLICY</a>
43+
* </p>
44+
* </li>
45+
* <li>
46+
* <p>
4247
* <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html">BACKUP_POLICY</a>
4348
* </p>
4449
* </li>
@@ -349,6 +354,9 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {}
349354
* the required pattern.</p>
350355
* </li>
351356
* <li>
357+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
358+
* </li>
359+
* <li>
352360
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
353361
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
354362
* </li>
@@ -389,6 +397,9 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {}
389397
* entities in the same root.</p>
390398
* </li>
391399
* <li>
400+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
401+
* </li>
402+
* <li>
392403
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
393404
* entity.</p>
394405
* </li>

clients/client-organizations/src/commands/CancelHandshakeCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -164,6 +164,9 @@ export interface CancelHandshakeCommandOutput extends CancelHandshakeResponse, _
164164
* the required pattern.</p>
165165
* </li>
166166
* <li>
167+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
168+
* </li>
169+
* <li>
167170
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
168171
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
169172
* </li>
@@ -204,6 +207,9 @@ export interface CancelHandshakeCommandOutput extends CancelHandshakeResponse, _
204207
* entities in the same root.</p>
205208
* </li>
206209
* <li>
210+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
211+
* </li>
212+
* <li>
207213
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
208214
* entity.</p>
209215
* </li>

clients/client-organizations/src/commands/CloseAccountCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -372,6 +372,9 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {}
372372
* the required pattern.</p>
373373
* </li>
374374
* <li>
375+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
376+
* </li>
377+
* <li>
375378
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
376379
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
377380
* </li>
@@ -412,6 +415,9 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {}
412415
* entities in the same root.</p>
413416
* </li>
414417
* <li>
418+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
419+
* </li>
420+
* <li>
415421
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
416422
* entity.</p>
417423
* </li>

clients/client-organizations/src/commands/CreateAccountCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -415,6 +415,9 @@ export interface CreateAccountCommandOutput extends CreateAccountResponse, __Met
415415
* the required pattern.</p>
416416
* </li>
417417
* <li>
418+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
419+
* </li>
420+
* <li>
418421
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
419422
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
420423
* </li>
@@ -455,6 +458,9 @@ export interface CreateAccountCommandOutput extends CreateAccountResponse, __Met
455458
* entities in the same root.</p>
456459
* </li>
457460
* <li>
461+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
462+
* </li>
463+
* <li>
458464
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
459465
* entity.</p>
460466
* </li>

clients/client-organizations/src/commands/CreateGovCloudAccountCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -469,6 +469,9 @@ export interface CreateGovCloudAccountCommandOutput extends CreateGovCloudAccoun
469469
* the required pattern.</p>
470470
* </li>
471471
* <li>
472+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
473+
* </li>
474+
* <li>
472475
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
473476
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
474477
* </li>
@@ -509,6 +512,9 @@ export interface CreateGovCloudAccountCommandOutput extends CreateGovCloudAccoun
509512
* entities in the same root.</p>
510513
* </li>
511514
* <li>
515+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
516+
* </li>
517+
* <li>
512518
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
513519
* entity.</p>
514520
* </li>

clients/client-organizations/src/commands/CreateOrganizationCommand.ts

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ export interface CreateOrganizationCommandOutput extends CreateOrganizationRespo
6464
* // MasterAccountEmail: "STRING_VALUE",
6565
* // AvailablePolicyTypes: [ // PolicyTypes
6666
* // { // PolicyTypeSummary
67-
* // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
67+
* // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
6868
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
6969
* // },
7070
* // ],
@@ -349,6 +349,9 @@ export interface CreateOrganizationCommandOutput extends CreateOrganizationRespo
349349
* the required pattern.</p>
350350
* </li>
351351
* <li>
352+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
353+
* </li>
354+
* <li>
352355
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
353356
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
354357
* </li>
@@ -389,6 +392,9 @@ export interface CreateOrganizationCommandOutput extends CreateOrganizationRespo
389392
* entities in the same root.</p>
390393
* </li>
391394
* <li>
395+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
396+
* </li>
397+
* <li>
392398
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
393399
* entity.</p>
394400
* </li>

clients/client-organizations/src/commands/CreateOrganizationalUnitCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -339,6 +339,9 @@ export interface CreateOrganizationalUnitCommandOutput extends CreateOrganizatio
339339
* the required pattern.</p>
340340
* </li>
341341
* <li>
342+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
343+
* </li>
344+
* <li>
342345
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
343346
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
344347
* </li>
@@ -379,6 +382,9 @@ export interface CreateOrganizationalUnitCommandOutput extends CreateOrganizatio
379382
* entities in the same root.</p>
380383
* </li>
381384
* <li>
385+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
386+
* </li>
387+
* <li>
382388
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
383389
* entity.</p>
384390
* </li>

clients/client-organizations/src/commands/CreatePolicyCommand.ts

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
4646
* Content: "STRING_VALUE", // required
4747
* Description: "STRING_VALUE", // required
4848
* Name: "STRING_VALUE", // required
49-
* Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
49+
* Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
5050
* Tags: [ // Tags
5151
* { // Tag
5252
* Key: "STRING_VALUE", // required
@@ -63,7 +63,7 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
6363
* // Arn: "STRING_VALUE",
6464
* // Name: "STRING_VALUE",
6565
* // Description: "STRING_VALUE",
66-
* // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
66+
* // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
6767
* // AwsManaged: true || false,
6868
* // },
6969
* // Content: "STRING_VALUE",
@@ -345,6 +345,9 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
345345
* the required pattern.</p>
346346
* </li>
347347
* <li>
348+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
349+
* </li>
350+
* <li>
348351
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
349352
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
350353
* </li>
@@ -385,6 +388,9 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
385388
* entities in the same root.</p>
386389
* </li>
387390
* <li>
391+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
392+
* </li>
393+
* <li>
388394
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
389395
* entity.</p>
390396
* </li>

clients/client-organizations/src/commands/DeclineHandshakeCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -165,6 +165,9 @@ export interface DeclineHandshakeCommandOutput extends DeclineHandshakeResponse,
165165
* the required pattern.</p>
166166
* </li>
167167
* <li>
168+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
169+
* </li>
170+
* <li>
168171
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
169172
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
170173
* </li>
@@ -205,6 +208,9 @@ export interface DeclineHandshakeCommandOutput extends DeclineHandshakeResponse,
205208
* entities in the same root.</p>
206209
* </li>
207210
* <li>
211+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
212+
* </li>
213+
* <li>
208214
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
209215
* entity.</p>
210216
* </li>

clients/client-organizations/src/commands/DeleteOrganizationCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -117,6 +117,9 @@ export interface DeleteOrganizationCommandOutput extends __MetadataBearer {}
117117
* the required pattern.</p>
118118
* </li>
119119
* <li>
120+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
121+
* </li>
122+
* <li>
120123
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
121124
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
122125
* </li>
@@ -157,6 +160,9 @@ export interface DeleteOrganizationCommandOutput extends __MetadataBearer {}
157160
* entities in the same root.</p>
158161
* </li>
159162
* <li>
163+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
164+
* </li>
165+
* <li>
160166
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
161167
* entity.</p>
162168
* </li>

clients/client-organizations/src/commands/DeleteOrganizationalUnitCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -121,6 +121,9 @@ export interface DeleteOrganizationalUnitCommandOutput extends __MetadataBearer
121121
* the required pattern.</p>
122122
* </li>
123123
* <li>
124+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
125+
* </li>
126+
* <li>
124127
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
125128
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
126129
* </li>
@@ -161,6 +164,9 @@ export interface DeleteOrganizationalUnitCommandOutput extends __MetadataBearer
161164
* entities in the same root.</p>
162165
* </li>
163166
* <li>
167+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
168+
* </li>
169+
* <li>
164170
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
165171
* entity.</p>
166172
* </li>

clients/client-organizations/src/commands/DeletePolicyCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -123,6 +123,9 @@ export interface DeletePolicyCommandOutput extends __MetadataBearer {}
123123
* the required pattern.</p>
124124
* </li>
125125
* <li>
126+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
127+
* </li>
128+
* <li>
126129
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
127130
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
128131
* </li>
@@ -163,6 +166,9 @@ export interface DeletePolicyCommandOutput extends __MetadataBearer {}
163166
* entities in the same root.</p>
164167
* </li>
165168
* <li>
169+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
170+
* </li>
171+
* <li>
166172
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
167173
* entity.</p>
168174
* </li>

clients/client-organizations/src/commands/DeregisterDelegatedAdministratorCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -339,6 +339,9 @@ export interface DeregisterDelegatedAdministratorCommandOutput extends __Metadat
339339
* the required pattern.</p>
340340
* </li>
341341
* <li>
342+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
343+
* </li>
344+
* <li>
342345
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
343346
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
344347
* </li>
@@ -379,6 +382,9 @@ export interface DeregisterDelegatedAdministratorCommandOutput extends __Metadat
379382
* entities in the same root.</p>
380383
* </li>
381384
* <li>
385+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
386+
* </li>
387+
* <li>
382388
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
383389
* entity.</p>
384390
* </li>

clients/client-organizations/src/commands/DescribeAccountCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -136,6 +136,9 @@ export interface DescribeAccountCommandOutput extends DescribeAccountResponse, _
136136
* the required pattern.</p>
137137
* </li>
138138
* <li>
139+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
140+
* </li>
141+
* <li>
139142
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
140143
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
141144
* </li>
@@ -176,6 +179,9 @@ export interface DescribeAccountCommandOutput extends DescribeAccountResponse, _
176179
* entities in the same root.</p>
177180
* </li>
178181
* <li>
182+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
183+
* </li>
184+
* <li>
179185
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
180186
* entity.</p>
181187
* </li>

clients/client-organizations/src/commands/DescribeCreateAccountStatusCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -138,6 +138,9 @@ export interface DescribeCreateAccountStatusCommandOutput
138138
* the required pattern.</p>
139139
* </li>
140140
* <li>
141+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
142+
* </li>
143+
* <li>
141144
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
142145
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
143146
* </li>
@@ -178,6 +181,9 @@ export interface DescribeCreateAccountStatusCommandOutput
178181
* entities in the same root.</p>
179182
* </li>
180183
* <li>
184+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
185+
* </li>
186+
* <li>
181187
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
182188
* entity.</p>
183189
* </li>

clients/client-organizations/src/commands/DescribeEffectivePolicyCommand.ts

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -333,6 +333,9 @@ export interface DescribeEffectivePolicyCommandOutput extends DescribeEffectiveP
333333
* the required pattern.</p>
334334
* </li>
335335
* <li>
336+
* <p>INVALID_PRINCIPAL: You specified an invalid principal element in the policy.</p>
337+
* </li>
338+
* <li>
336339
* <p>INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
337340
* can't begin with the reserved prefix <code>AWSServiceRoleFor</code>.</p>
338341
* </li>
@@ -373,6 +376,9 @@ export interface DescribeEffectivePolicyCommandOutput extends DescribeEffectiveP
373376
* entities in the same root.</p>
374377
* </li>
375378
* <li>
379+
* <p>NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.</p>
380+
* </li>
381+
* <li>
376382
* <p>TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
377383
* entity.</p>
378384
* </li>

0 commit comments

Comments
 (0)