diff --git a/clients/client-organizations/src/commands/AcceptHandshakeCommand.ts b/clients/client-organizations/src/commands/AcceptHandshakeCommand.ts
index 52302848ed19..150888b5779c 100644
--- a/clients/client-organizations/src/commands/AcceptHandshakeCommand.ts
+++ b/clients/client-organizations/src/commands/AcceptHandshakeCommand.ts
@@ -258,6 +258,9 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -298,6 +301,9 @@ export interface AcceptHandshakeCommandOutput extends AcceptHandshakeResponse, _
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/AttachPolicyCommand.ts b/clients/client-organizations/src/commands/AttachPolicyCommand.ts
index 1bdcb3f5676e..c039f9b4acad 100644
--- a/clients/client-organizations/src/commands/AttachPolicyCommand.ts
+++ b/clients/client-organizations/src/commands/AttachPolicyCommand.ts
@@ -39,6 +39,11 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {}
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -349,6 +354,9 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -389,6 +397,9 @@ export interface AttachPolicyCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CancelHandshakeCommand.ts b/clients/client-organizations/src/commands/CancelHandshakeCommand.ts
index b95206ddb011..a4aa4ad59680 100644
--- a/clients/client-organizations/src/commands/CancelHandshakeCommand.ts
+++ b/clients/client-organizations/src/commands/CancelHandshakeCommand.ts
@@ -164,6 +164,9 @@ export interface CancelHandshakeCommandOutput extends CancelHandshakeResponse, _
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -204,6 +207,9 @@ export interface CancelHandshakeCommandOutput extends CancelHandshakeResponse, _
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CloseAccountCommand.ts b/clients/client-organizations/src/commands/CloseAccountCommand.ts
index 2fd0b1571c0e..9c4ada33f639 100644
--- a/clients/client-organizations/src/commands/CloseAccountCommand.ts
+++ b/clients/client-organizations/src/commands/CloseAccountCommand.ts
@@ -372,6 +372,9 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -412,6 +415,9 @@ export interface CloseAccountCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreateAccountCommand.ts b/clients/client-organizations/src/commands/CreateAccountCommand.ts
index e4a021734718..6e9ad7c8d610 100644
--- a/clients/client-organizations/src/commands/CreateAccountCommand.ts
+++ b/clients/client-organizations/src/commands/CreateAccountCommand.ts
@@ -415,6 +415,9 @@ export interface CreateAccountCommandOutput extends CreateAccountResponse, __Met
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -455,6 +458,9 @@ export interface CreateAccountCommandOutput extends CreateAccountResponse, __Met
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreateGovCloudAccountCommand.ts b/clients/client-organizations/src/commands/CreateGovCloudAccountCommand.ts
index bc74050d366f..a9fcd30556ce 100644
--- a/clients/client-organizations/src/commands/CreateGovCloudAccountCommand.ts
+++ b/clients/client-organizations/src/commands/CreateGovCloudAccountCommand.ts
@@ -469,6 +469,9 @@ export interface CreateGovCloudAccountCommandOutput extends CreateGovCloudAccoun
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -509,6 +512,9 @@ export interface CreateGovCloudAccountCommandOutput extends CreateGovCloudAccoun
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreateOrganizationCommand.ts b/clients/client-organizations/src/commands/CreateOrganizationCommand.ts
index 2ab59fc48f8d..4879210ab920 100644
--- a/clients/client-organizations/src/commands/CreateOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/CreateOrganizationCommand.ts
@@ -64,7 +64,7 @@ export interface CreateOrganizationCommandOutput extends CreateOrganizationRespo
* // MasterAccountEmail: "STRING_VALUE",
* // AvailablePolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
@@ -349,6 +349,9 @@ export interface CreateOrganizationCommandOutput extends CreateOrganizationRespo
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -389,6 +392,9 @@ export interface CreateOrganizationCommandOutput extends CreateOrganizationRespo
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreateOrganizationalUnitCommand.ts b/clients/client-organizations/src/commands/CreateOrganizationalUnitCommand.ts
index 72069906deab..b311d9b0ac62 100644
--- a/clients/client-organizations/src/commands/CreateOrganizationalUnitCommand.ts
+++ b/clients/client-organizations/src/commands/CreateOrganizationalUnitCommand.ts
@@ -339,6 +339,9 @@ export interface CreateOrganizationalUnitCommandOutput extends CreateOrganizatio
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -379,6 +382,9 @@ export interface CreateOrganizationalUnitCommandOutput extends CreateOrganizatio
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/CreatePolicyCommand.ts b/clients/client-organizations/src/commands/CreatePolicyCommand.ts
index 7c7c2e0c2ce8..9818d105ac34 100644
--- a/clients/client-organizations/src/commands/CreatePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/CreatePolicyCommand.ts
@@ -46,7 +46,7 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
* Content: "STRING_VALUE", // required
* Description: "STRING_VALUE", // required
* Name: "STRING_VALUE", // required
- * Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* Tags: [ // Tags
* { // Tag
* Key: "STRING_VALUE", // required
@@ -63,7 +63,7 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // Content: "STRING_VALUE",
@@ -345,6 +345,9 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -385,6 +388,9 @@ export interface CreatePolicyCommandOutput extends CreatePolicyResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeclineHandshakeCommand.ts b/clients/client-organizations/src/commands/DeclineHandshakeCommand.ts
index 92035618b92c..f1d88539e7c4 100644
--- a/clients/client-organizations/src/commands/DeclineHandshakeCommand.ts
+++ b/clients/client-organizations/src/commands/DeclineHandshakeCommand.ts
@@ -165,6 +165,9 @@ export interface DeclineHandshakeCommandOutput extends DeclineHandshakeResponse,
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -205,6 +208,9 @@ export interface DeclineHandshakeCommandOutput extends DeclineHandshakeResponse,
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeleteOrganizationCommand.ts b/clients/client-organizations/src/commands/DeleteOrganizationCommand.ts
index 77488e8e2c36..63c10aacae8a 100644
--- a/clients/client-organizations/src/commands/DeleteOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/DeleteOrganizationCommand.ts
@@ -117,6 +117,9 @@ export interface DeleteOrganizationCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -157,6 +160,9 @@ export interface DeleteOrganizationCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeleteOrganizationalUnitCommand.ts b/clients/client-organizations/src/commands/DeleteOrganizationalUnitCommand.ts
index e3ce9b99b4b5..7612fae97254 100644
--- a/clients/client-organizations/src/commands/DeleteOrganizationalUnitCommand.ts
+++ b/clients/client-organizations/src/commands/DeleteOrganizationalUnitCommand.ts
@@ -121,6 +121,9 @@ export interface DeleteOrganizationalUnitCommandOutput extends __MetadataBearer
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -161,6 +164,9 @@ export interface DeleteOrganizationalUnitCommandOutput extends __MetadataBearer
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeletePolicyCommand.ts b/clients/client-organizations/src/commands/DeletePolicyCommand.ts
index 165e21e98935..e3677eeb0c70 100644
--- a/clients/client-organizations/src/commands/DeletePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/DeletePolicyCommand.ts
@@ -123,6 +123,9 @@ export interface DeletePolicyCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -163,6 +166,9 @@ export interface DeletePolicyCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DeregisterDelegatedAdministratorCommand.ts b/clients/client-organizations/src/commands/DeregisterDelegatedAdministratorCommand.ts
index c3a6268f490d..d53e0f7c179b 100644
--- a/clients/client-organizations/src/commands/DeregisterDelegatedAdministratorCommand.ts
+++ b/clients/client-organizations/src/commands/DeregisterDelegatedAdministratorCommand.ts
@@ -339,6 +339,9 @@ export interface DeregisterDelegatedAdministratorCommandOutput extends __Metadat
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -379,6 +382,9 @@ export interface DeregisterDelegatedAdministratorCommandOutput extends __Metadat
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeAccountCommand.ts b/clients/client-organizations/src/commands/DescribeAccountCommand.ts
index b7391399b877..f05137b474af 100644
--- a/clients/client-organizations/src/commands/DescribeAccountCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeAccountCommand.ts
@@ -136,6 +136,9 @@ export interface DescribeAccountCommandOutput extends DescribeAccountResponse, _
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -176,6 +179,9 @@ export interface DescribeAccountCommandOutput extends DescribeAccountResponse, _
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeCreateAccountStatusCommand.ts b/clients/client-organizations/src/commands/DescribeCreateAccountStatusCommand.ts
index b5ae2ca9a85f..e267a146066e 100644
--- a/clients/client-organizations/src/commands/DescribeCreateAccountStatusCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeCreateAccountStatusCommand.ts
@@ -138,6 +138,9 @@ export interface DescribeCreateAccountStatusCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -178,6 +181,9 @@ export interface DescribeCreateAccountStatusCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeEffectivePolicyCommand.ts b/clients/client-organizations/src/commands/DescribeEffectivePolicyCommand.ts
index 7c773b0a8f07..b44ab81c868f 100644
--- a/clients/client-organizations/src/commands/DescribeEffectivePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeEffectivePolicyCommand.ts
@@ -333,6 +333,9 @@ export interface DescribeEffectivePolicyCommandOutput extends DescribeEffectiveP
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -373,6 +376,9 @@ export interface DescribeEffectivePolicyCommandOutput extends DescribeEffectiveP
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeHandshakeCommand.ts b/clients/client-organizations/src/commands/DescribeHandshakeCommand.ts
index e6817e4b8519..f74f20fc153d 100644
--- a/clients/client-organizations/src/commands/DescribeHandshakeCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeHandshakeCommand.ts
@@ -156,6 +156,9 @@ export interface DescribeHandshakeCommandOutput extends DescribeHandshakeRespons
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -196,6 +199,9 @@ export interface DescribeHandshakeCommandOutput extends DescribeHandshakeRespons
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribeOrganizationCommand.ts b/clients/client-organizations/src/commands/DescribeOrganizationCommand.ts
index 03a5352b1b6e..0fc04295c858 100644
--- a/clients/client-organizations/src/commands/DescribeOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeOrganizationCommand.ts
@@ -55,7 +55,7 @@ export interface DescribeOrganizationCommandOutput extends DescribeOrganizationR
* // MasterAccountEmail: "STRING_VALUE",
* // AvailablePolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
diff --git a/clients/client-organizations/src/commands/DescribeOrganizationalUnitCommand.ts b/clients/client-organizations/src/commands/DescribeOrganizationalUnitCommand.ts
index 2d59eef36d1f..7e3de49989d1 100644
--- a/clients/client-organizations/src/commands/DescribeOrganizationalUnitCommand.ts
+++ b/clients/client-organizations/src/commands/DescribeOrganizationalUnitCommand.ts
@@ -123,6 +123,9 @@ export interface DescribeOrganizationalUnitCommandOutput extends DescribeOrganiz
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -163,6 +166,9 @@ export interface DescribeOrganizationalUnitCommandOutput extends DescribeOrganiz
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DescribePolicyCommand.ts b/clients/client-organizations/src/commands/DescribePolicyCommand.ts
index a319a44d0805..f89319b7b2a6 100644
--- a/clients/client-organizations/src/commands/DescribePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/DescribePolicyCommand.ts
@@ -49,7 +49,7 @@ export interface DescribePolicyCommandOutput extends DescribePolicyResponse, __M
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // Content: "STRING_VALUE",
@@ -129,6 +129,9 @@ export interface DescribePolicyCommandOutput extends DescribePolicyResponse, __M
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -169,6 +172,9 @@ export interface DescribePolicyCommandOutput extends DescribePolicyResponse, __M
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DetachPolicyCommand.ts b/clients/client-organizations/src/commands/DetachPolicyCommand.ts
index 695d8bc34f55..bef4f19274be 100644
--- a/clients/client-organizations/src/commands/DetachPolicyCommand.ts
+++ b/clients/client-organizations/src/commands/DetachPolicyCommand.ts
@@ -330,6 +330,9 @@ export interface DetachPolicyCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -370,6 +373,9 @@ export interface DetachPolicyCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DisableAWSServiceAccessCommand.ts b/clients/client-organizations/src/commands/DisableAWSServiceAccessCommand.ts
index 832ebec8e99a..85a3d82cc2de 100644
--- a/clients/client-organizations/src/commands/DisableAWSServiceAccessCommand.ts
+++ b/clients/client-organizations/src/commands/DisableAWSServiceAccessCommand.ts
@@ -368,6 +368,9 @@ export interface DisableAWSServiceAccessCommandOutput extends __MetadataBearer {
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -408,6 +411,9 @@ export interface DisableAWSServiceAccessCommandOutput extends __MetadataBearer {
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/DisablePolicyTypeCommand.ts b/clients/client-organizations/src/commands/DisablePolicyTypeCommand.ts
index 9a54b8c8e233..0ce9454703c8 100644
--- a/clients/client-organizations/src/commands/DisablePolicyTypeCommand.ts
+++ b/clients/client-organizations/src/commands/DisablePolicyTypeCommand.ts
@@ -48,7 +48,7 @@ export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeRespons
* const client = new OrganizationsClient(config);
* const input = { // DisablePolicyTypeRequest
* RootId: "STRING_VALUE", // required
- * PolicyType: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * PolicyType: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* };
* const command = new DisablePolicyTypeCommand(input);
* const response = await client.send(command);
@@ -59,7 +59,7 @@ export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeRespons
* // Name: "STRING_VALUE",
* // PolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
@@ -338,6 +338,9 @@ export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeRespons
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -378,6 +381,9 @@ export interface DisablePolicyTypeCommandOutput extends DisablePolicyTypeRespons
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/EnableAWSServiceAccessCommand.ts b/clients/client-organizations/src/commands/EnableAWSServiceAccessCommand.ts
index 523d6a425f92..18b3b598c35f 100644
--- a/clients/client-organizations/src/commands/EnableAWSServiceAccessCommand.ts
+++ b/clients/client-organizations/src/commands/EnableAWSServiceAccessCommand.ts
@@ -333,6 +333,9 @@ export interface EnableAWSServiceAccessCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -373,6 +376,9 @@ export interface EnableAWSServiceAccessCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/EnableAllFeaturesCommand.ts b/clients/client-organizations/src/commands/EnableAllFeaturesCommand.ts
index 8446443be0c8..8b7e6b7ce8c8 100644
--- a/clients/client-organizations/src/commands/EnableAllFeaturesCommand.ts
+++ b/clients/client-organizations/src/commands/EnableAllFeaturesCommand.ts
@@ -233,6 +233,9 @@ export interface EnableAllFeaturesCommandOutput extends EnableAllFeaturesRespons
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -273,6 +276,9 @@ export interface EnableAllFeaturesCommandOutput extends EnableAllFeaturesRespons
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/EnablePolicyTypeCommand.ts b/clients/client-organizations/src/commands/EnablePolicyTypeCommand.ts
index ce52e8a2c2c5..2c9b663aafd5 100644
--- a/clients/client-organizations/src/commands/EnablePolicyTypeCommand.ts
+++ b/clients/client-organizations/src/commands/EnablePolicyTypeCommand.ts
@@ -48,7 +48,7 @@ export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse,
* const client = new OrganizationsClient(config);
* const input = { // EnablePolicyTypeRequest
* RootId: "STRING_VALUE", // required
- * PolicyType: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * PolicyType: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* };
* const command = new EnablePolicyTypeCommand(input);
* const response = await client.send(command);
@@ -59,7 +59,7 @@ export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse,
* // Name: "STRING_VALUE",
* // PolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
@@ -338,6 +338,9 @@ export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse,
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -378,6 +381,9 @@ export interface EnablePolicyTypeCommandOutput extends EnablePolicyTypeResponse,
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/InviteAccountToOrganizationCommand.ts b/clients/client-organizations/src/commands/InviteAccountToOrganizationCommand.ts
index a9544e6366f4..e4a47d51829e 100644
--- a/clients/client-organizations/src/commands/InviteAccountToOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/InviteAccountToOrganizationCommand.ts
@@ -462,6 +462,9 @@ export interface InviteAccountToOrganizationCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -502,6 +505,9 @@ export interface InviteAccountToOrganizationCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/LeaveOrganizationCommand.ts b/clients/client-organizations/src/commands/LeaveOrganizationCommand.ts
index e27c9f14e1a5..f27158f555fc 100644
--- a/clients/client-organizations/src/commands/LeaveOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/LeaveOrganizationCommand.ts
@@ -382,6 +382,9 @@ export interface LeaveOrganizationCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -422,6 +425,9 @@ export interface LeaveOrganizationCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListAWSServiceAccessForOrganizationCommand.ts b/clients/client-organizations/src/commands/ListAWSServiceAccessForOrganizationCommand.ts
index 0771b3ef5462..a00c8a2aa677 100644
--- a/clients/client-organizations/src/commands/ListAWSServiceAccessForOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/ListAWSServiceAccessForOrganizationCommand.ts
@@ -334,6 +334,9 @@ export interface ListAWSServiceAccessForOrganizationCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -374,6 +377,9 @@ export interface ListAWSServiceAccessForOrganizationCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListAccountsCommand.ts b/clients/client-organizations/src/commands/ListAccountsCommand.ts
index d7c89b225a22..4e73b5ec70bb 100644
--- a/clients/client-organizations/src/commands/ListAccountsCommand.ts
+++ b/clients/client-organizations/src/commands/ListAccountsCommand.ts
@@ -140,6 +140,9 @@ export interface ListAccountsCommandOutput extends ListAccountsResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -180,6 +183,9 @@ export interface ListAccountsCommandOutput extends ListAccountsResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListAccountsForParentCommand.ts b/clients/client-organizations/src/commands/ListAccountsForParentCommand.ts
index 73db10889dc3..141f5e16a2aa 100644
--- a/clients/client-organizations/src/commands/ListAccountsForParentCommand.ts
+++ b/clients/client-organizations/src/commands/ListAccountsForParentCommand.ts
@@ -148,6 +148,9 @@ export interface ListAccountsForParentCommandOutput extends ListAccountsForParen
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -188,6 +191,9 @@ export interface ListAccountsForParentCommandOutput extends ListAccountsForParen
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListChildrenCommand.ts b/clients/client-organizations/src/commands/ListChildrenCommand.ts
index b11eea9304d6..6bf94f1f74bd 100644
--- a/clients/client-organizations/src/commands/ListChildrenCommand.ts
+++ b/clients/client-organizations/src/commands/ListChildrenCommand.ts
@@ -138,6 +138,9 @@ export interface ListChildrenCommandOutput extends ListChildrenResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -178,6 +181,9 @@ export interface ListChildrenCommandOutput extends ListChildrenResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListCreateAccountStatusCommand.ts b/clients/client-organizations/src/commands/ListCreateAccountStatusCommand.ts
index a4b4c5ff3cae..fbedc9e6df47 100644
--- a/clients/client-organizations/src/commands/ListCreateAccountStatusCommand.ts
+++ b/clients/client-organizations/src/commands/ListCreateAccountStatusCommand.ts
@@ -148,6 +148,9 @@ export interface ListCreateAccountStatusCommandOutput extends ListCreateAccountS
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -188,6 +191,9 @@ export interface ListCreateAccountStatusCommandOutput extends ListCreateAccountS
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListDelegatedAdministratorsCommand.ts b/clients/client-organizations/src/commands/ListDelegatedAdministratorsCommand.ts
index 9ced4656957b..a84361a02f78 100644
--- a/clients/client-organizations/src/commands/ListDelegatedAdministratorsCommand.ts
+++ b/clients/client-organizations/src/commands/ListDelegatedAdministratorsCommand.ts
@@ -335,6 +335,9 @@ export interface ListDelegatedAdministratorsCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -375,6 +378,9 @@ export interface ListDelegatedAdministratorsCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListDelegatedServicesForAccountCommand.ts b/clients/client-organizations/src/commands/ListDelegatedServicesForAccountCommand.ts
index 93096102bd07..dafaf4fdc395 100644
--- a/clients/client-organizations/src/commands/ListDelegatedServicesForAccountCommand.ts
+++ b/clients/client-organizations/src/commands/ListDelegatedServicesForAccountCommand.ts
@@ -336,6 +336,9 @@ export interface ListDelegatedServicesForAccountCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -376,6 +379,9 @@ export interface ListDelegatedServicesForAccountCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListHandshakesForAccountCommand.ts b/clients/client-organizations/src/commands/ListHandshakesForAccountCommand.ts
index 7c2a2ef4fc7e..39f763b90b3f 100644
--- a/clients/client-organizations/src/commands/ListHandshakesForAccountCommand.ts
+++ b/clients/client-organizations/src/commands/ListHandshakesForAccountCommand.ts
@@ -169,6 +169,9 @@ export interface ListHandshakesForAccountCommandOutput extends ListHandshakesFor
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -209,6 +212,9 @@ export interface ListHandshakesForAccountCommandOutput extends ListHandshakesFor
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListHandshakesForOrganizationCommand.ts b/clients/client-organizations/src/commands/ListHandshakesForOrganizationCommand.ts
index 5956618098b0..b730d8d47193 100644
--- a/clients/client-organizations/src/commands/ListHandshakesForOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/ListHandshakesForOrganizationCommand.ts
@@ -181,6 +181,9 @@ export interface ListHandshakesForOrganizationCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -221,6 +224,9 @@ export interface ListHandshakesForOrganizationCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListOrganizationalUnitsForParentCommand.ts b/clients/client-organizations/src/commands/ListOrganizationalUnitsForParentCommand.ts
index 7c3fb72c33e1..ccc74a95991d 100644
--- a/clients/client-organizations/src/commands/ListOrganizationalUnitsForParentCommand.ts
+++ b/clients/client-organizations/src/commands/ListOrganizationalUnitsForParentCommand.ts
@@ -141,6 +141,9 @@ export interface ListOrganizationalUnitsForParentCommandOutput
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -181,6 +184,9 @@ export interface ListOrganizationalUnitsForParentCommandOutput
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListParentsCommand.ts b/clients/client-organizations/src/commands/ListParentsCommand.ts
index 210c0198d02f..84048194b348 100644
--- a/clients/client-organizations/src/commands/ListParentsCommand.ts
+++ b/clients/client-organizations/src/commands/ListParentsCommand.ts
@@ -144,6 +144,9 @@ export interface ListParentsCommandOutput extends ListParentsResponse, __Metadat
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -184,6 +187,9 @@ export interface ListParentsCommandOutput extends ListParentsResponse, __Metadat
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListPoliciesCommand.ts b/clients/client-organizations/src/commands/ListPoliciesCommand.ts
index 9b52a083c5d8..53fcb2615fe1 100644
--- a/clients/client-organizations/src/commands/ListPoliciesCommand.ts
+++ b/clients/client-organizations/src/commands/ListPoliciesCommand.ts
@@ -46,7 +46,7 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
* // const { OrganizationsClient, ListPoliciesCommand } = require("@aws-sdk/client-organizations"); // CommonJS import
* const client = new OrganizationsClient(config);
* const input = { // ListPoliciesRequest
- * Filter: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * Filter: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* NextToken: "STRING_VALUE",
* MaxResults: Number("int"),
* };
@@ -59,7 +59,7 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // ],
@@ -139,6 +139,9 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -179,6 +182,9 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListPoliciesForTargetCommand.ts b/clients/client-organizations/src/commands/ListPoliciesForTargetCommand.ts
index 9a0e9ee5bda4..15b96fba7c6c 100644
--- a/clients/client-organizations/src/commands/ListPoliciesForTargetCommand.ts
+++ b/clients/client-organizations/src/commands/ListPoliciesForTargetCommand.ts
@@ -49,7 +49,7 @@ export interface ListPoliciesForTargetCommandOutput extends ListPoliciesForTarge
* const client = new OrganizationsClient(config);
* const input = { // ListPoliciesForTargetRequest
* TargetId: "STRING_VALUE", // required
- * Filter: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
+ * Filter: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY", // required
* NextToken: "STRING_VALUE",
* MaxResults: Number("int"),
* };
@@ -62,7 +62,7 @@ export interface ListPoliciesForTargetCommandOutput extends ListPoliciesForTarge
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // ],
@@ -142,6 +142,9 @@ export interface ListPoliciesForTargetCommandOutput extends ListPoliciesForTarge
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -182,6 +185,9 @@ export interface ListPoliciesForTargetCommandOutput extends ListPoliciesForTarge
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListRootsCommand.ts b/clients/client-organizations/src/commands/ListRootsCommand.ts
index 7678dcdd0a45..0a7cb21b2d96 100644
--- a/clients/client-organizations/src/commands/ListRootsCommand.ts
+++ b/clients/client-organizations/src/commands/ListRootsCommand.ts
@@ -66,7 +66,7 @@ export interface ListRootsCommandOutput extends ListRootsResponse, __MetadataBea
* // Name: "STRING_VALUE",
* // PolicyTypes: [ // PolicyTypes
* // { // PolicyTypeSummary
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // Status: "ENABLED" || "PENDING_ENABLE" || "PENDING_DISABLE",
* // },
* // ],
@@ -148,6 +148,9 @@ export interface ListRootsCommandOutput extends ListRootsResponse, __MetadataBea
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -188,6 +191,9 @@ export interface ListRootsCommandOutput extends ListRootsResponse, __MetadataBea
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListTagsForResourceCommand.ts b/clients/client-organizations/src/commands/ListTagsForResourceCommand.ts
index adca3dca95ba..5f6afde87797 100644
--- a/clients/client-organizations/src/commands/ListTagsForResourceCommand.ts
+++ b/clients/client-organizations/src/commands/ListTagsForResourceCommand.ts
@@ -141,6 +141,9 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -181,6 +184,9 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/ListTargetsForPolicyCommand.ts b/clients/client-organizations/src/commands/ListTargetsForPolicyCommand.ts
index cfe3f21a7f08..89837c50790e 100644
--- a/clients/client-organizations/src/commands/ListTargetsForPolicyCommand.ts
+++ b/clients/client-organizations/src/commands/ListTargetsForPolicyCommand.ts
@@ -138,6 +138,9 @@ export interface ListTargetsForPolicyCommandOutput extends ListTargetsForPolicyR
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -178,6 +181,9 @@ export interface ListTargetsForPolicyCommandOutput extends ListTargetsForPolicyR
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/MoveAccountCommand.ts b/clients/client-organizations/src/commands/MoveAccountCommand.ts
index 47abf70ee5cb..9360f1f1b0fe 100644
--- a/clients/client-organizations/src/commands/MoveAccountCommand.ts
+++ b/clients/client-organizations/src/commands/MoveAccountCommand.ts
@@ -135,6 +135,9 @@ export interface MoveAccountCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -175,6 +178,9 @@ export interface MoveAccountCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/PutResourcePolicyCommand.ts b/clients/client-organizations/src/commands/PutResourcePolicyCommand.ts
index 7aeffc6cc1ba..a649b452481a 100644
--- a/clients/client-organizations/src/commands/PutResourcePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/PutResourcePolicyCommand.ts
@@ -329,6 +329,9 @@ export interface PutResourcePolicyCommandOutput extends PutResourcePolicyRespons
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -369,6 +372,9 @@ export interface PutResourcePolicyCommandOutput extends PutResourcePolicyRespons
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/RegisterDelegatedAdministratorCommand.ts b/clients/client-organizations/src/commands/RegisterDelegatedAdministratorCommand.ts
index a36397e1d920..0d701d2e8db7 100644
--- a/clients/client-organizations/src/commands/RegisterDelegatedAdministratorCommand.ts
+++ b/clients/client-organizations/src/commands/RegisterDelegatedAdministratorCommand.ts
@@ -335,6 +335,9 @@ export interface RegisterDelegatedAdministratorCommandOutput extends __MetadataB
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -375,6 +378,9 @@ export interface RegisterDelegatedAdministratorCommandOutput extends __MetadataB
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/RemoveAccountFromOrganizationCommand.ts b/clients/client-organizations/src/commands/RemoveAccountFromOrganizationCommand.ts
index 54d0b276dc0a..b139048aeda7 100644
--- a/clients/client-organizations/src/commands/RemoveAccountFromOrganizationCommand.ts
+++ b/clients/client-organizations/src/commands/RemoveAccountFromOrganizationCommand.ts
@@ -352,6 +352,9 @@ export interface RemoveAccountFromOrganizationCommandOutput extends __MetadataBe
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -392,6 +395,9 @@ export interface RemoveAccountFromOrganizationCommandOutput extends __MetadataBe
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/TagResourceCommand.ts b/clients/client-organizations/src/commands/TagResourceCommand.ts
index 1f1b6313711f..e7ee9e0d0e27 100644
--- a/clients/client-organizations/src/commands/TagResourceCommand.ts
+++ b/clients/client-organizations/src/commands/TagResourceCommand.ts
@@ -337,6 +337,9 @@ export interface TagResourceCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -377,6 +380,9 @@ export interface TagResourceCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/UntagResourceCommand.ts b/clients/client-organizations/src/commands/UntagResourceCommand.ts
index ecbd80f0fef4..0ae7047929d1 100644
--- a/clients/client-organizations/src/commands/UntagResourceCommand.ts
+++ b/clients/client-organizations/src/commands/UntagResourceCommand.ts
@@ -334,6 +334,9 @@ export interface UntagResourceCommandOutput extends __MetadataBearer {}
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -374,6 +377,9 @@ export interface UntagResourceCommandOutput extends __MetadataBearer {}
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/UpdateOrganizationalUnitCommand.ts b/clients/client-organizations/src/commands/UpdateOrganizationalUnitCommand.ts
index fc10bda764d1..ff6a3627ccc2 100644
--- a/clients/client-organizations/src/commands/UpdateOrganizationalUnitCommand.ts
+++ b/clients/client-organizations/src/commands/UpdateOrganizationalUnitCommand.ts
@@ -132,6 +132,9 @@ export interface UpdateOrganizationalUnitCommandOutput extends UpdateOrganizatio
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -172,6 +175,9 @@ export interface UpdateOrganizationalUnitCommandOutput extends UpdateOrganizatio
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/commands/UpdatePolicyCommand.ts b/clients/client-organizations/src/commands/UpdatePolicyCommand.ts
index 4062da7518b0..dc67a3db54b2 100644
--- a/clients/client-organizations/src/commands/UpdatePolicyCommand.ts
+++ b/clients/client-organizations/src/commands/UpdatePolicyCommand.ts
@@ -54,7 +54,7 @@ export interface UpdatePolicyCommandOutput extends UpdatePolicyResponse, __Metad
* // Arn: "STRING_VALUE",
* // Name: "STRING_VALUE",
* // Description: "STRING_VALUE",
- * // Type: "SERVICE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
+ * // Type: "SERVICE_CONTROL_POLICY" || "RESOURCE_CONTROL_POLICY" || "TAG_POLICY" || "BACKUP_POLICY" || "AISERVICES_OPT_OUT_POLICY" || "CHATBOT_POLICY",
* // AwsManaged: true || false,
* // },
* // Content: "STRING_VALUE",
@@ -336,6 +336,9 @@ export interface UpdatePolicyCommandOutput extends UpdatePolicyResponse, __Metad
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -376,6 +379,9 @@ export interface UpdatePolicyCommandOutput extends UpdatePolicyResponse, __Metad
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
diff --git a/clients/client-organizations/src/models/models_0.ts b/clients/client-organizations/src/models/models_0.ts
index 824732d697f0..5db8a253fae1 100644
--- a/clients/client-organizations/src/models/models_0.ts
+++ b/clients/client-organizations/src/models/models_0.ts
@@ -407,6 +407,7 @@ export const InvalidInputExceptionReason = {
INVALID_PARTY_TYPE_TARGET: "INVALID_PARTY_TYPE_TARGET",
INVALID_PATTERN: "INVALID_PATTERN",
INVALID_PATTERN_TARGET_ID: "INVALID_PATTERN_TARGET_ID",
+ INVALID_PRINCIPAL: "INVALID_PRINCIPAL",
INVALID_RESOURCE_POLICY_JSON: "INVALID_RESOURCE_POLICY_JSON",
INVALID_ROLE_NAME: "INVALID_ROLE_NAME",
INVALID_SYNTAX_ORGANIZATION: "INVALID_SYNTAX_ORGANIZATION_ARN",
@@ -418,6 +419,7 @@ export const InvalidInputExceptionReason = {
MIN_LENGTH_EXCEEDED: "MIN_LENGTH_EXCEEDED",
MIN_VALUE_EXCEEDED: "MIN_VALUE_EXCEEDED",
MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS: "MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS",
+ NON_DETACHABLE_POLICY: "NON_DETACHABLE_POLICY",
TARGET_NOT_SUPPORTED: "TARGET_NOT_SUPPORTED",
UNRECOGNIZED_SERVICE_PRINCIPAL: "UNRECOGNIZED_SERVICE_PRINCIPAL",
UNSUPPORTED_ACTION_IN_RESOURCE_POLICY: "UNSUPPORTED_ACTION_IN_RESOURCE_POLICY",
@@ -486,6 +488,9 @@ export type InvalidInputExceptionReason =
* the required pattern.
*
*
+ * INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
+ *
+ *
* INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name
* can't begin with the reserved prefix AWSServiceRoleFor
.
*
@@ -526,6 +531,9 @@ export type InvalidInputExceptionReason =
* entities in the same root.
*
*
+ * NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
+ *
+ *
* TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target
* entity.
*
@@ -1893,6 +1901,7 @@ export const PolicyType = {
AISERVICES_OPT_OUT_POLICY: "AISERVICES_OPT_OUT_POLICY",
BACKUP_POLICY: "BACKUP_POLICY",
CHATBOT_POLICY: "CHATBOT_POLICY",
+ RESOURCE_CONTROL_POLICY: "RESOURCE_CONTROL_POLICY",
SERVICE_CONTROL_POLICY: "SERVICE_CONTROL_POLICY",
TAG_POLICY: "TAG_POLICY",
} as const;
@@ -2178,6 +2187,11 @@ export interface CreatePolicyRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -2991,6 +3005,11 @@ export interface DisablePolicyTypeRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -3137,6 +3156,11 @@ export interface EnablePolicyTypeRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -4180,6 +4204,11 @@ export interface ListPoliciesRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
@@ -4289,6 +4318,11 @@ export interface ListPoliciesForTargetRequest {
*
*
*
+ * RESOURCE_CONTROL_POLICY
+ *
+ *
+ *
+ *
* BACKUP_POLICY
*
*
diff --git a/codegen/sdk-codegen/aws-models/organizations.json b/codegen/sdk-codegen/aws-models/organizations.json
index 0ea13a02d5bf..615c501b18c4 100644
--- a/codegen/sdk-codegen/aws-models/organizations.json
+++ b/codegen/sdk-codegen/aws-models/organizations.json
@@ -1902,7 +1902,7 @@
}
],
"traits": {
- "smithy.api#documentation": "Attaches a policy to a root, an organizational unit (OU), or an individual account.\n How the policy affects accounts depends on the type of policy. Refer to the\n Organizations User Guide for information about each policy type:
\n \n This operation can be called only from the organization's\nmanagement account or by a member account that is a delegated administrator for an Amazon Web Services service.
",
+ "smithy.api#documentation": "Attaches a policy to a root, an organizational unit (OU), or an individual account.\n How the policy affects accounts depends on the type of policy. Refer to the\n Organizations User Guide for information about each policy type:
\n \n This operation can be called only from the organization's\nmanagement account or by a member account that is a delegated administrator for an Amazon Web Services service.
",
"smithy.api#examples": [
{
"title": "To attach a policy to an account",
@@ -3129,7 +3129,7 @@
"Type": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "The type of policy to create. You can specify one of the following values:
\n ",
+ "smithy.api#documentation": "The type of policy to create. You can specify one of the following values:
\n ",
"smithy.api#required": {}
}
},
@@ -4478,7 +4478,7 @@
"PolicyType": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "The policy type that you want to disable in this root. You can specify one of the\n following values:
\n ",
+ "smithy.api#documentation": "The policy type that you want to disable in this root. You can specify one of the\n following values:
\n ",
"smithy.api#required": {}
}
}
@@ -4873,7 +4873,7 @@
"PolicyType": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "The policy type that you want to enable. You can specify one of the following\n values:
\n ",
+ "smithy.api#documentation": "The policy type that you want to enable. You can specify one of the following\n values:
\n ",
"smithy.api#required": {}
}
}
@@ -5398,7 +5398,7 @@
}
},
"traits": {
- "smithy.api#documentation": "The requested operation failed because you provided invalid values for one or more of\n the request parameters. This exception includes a reason that contains additional\n information about the violated limit:
\n \n Some of the reasons in the following list might not be applicable to this specific\n API or operation.
\n \n \n - \n
DUPLICATE_TAG_KEY: Tag keys must be unique among the tags attached to the same\n entity.
\n \n - \n
IMMUTABLE_POLICY: You specified a policy that is managed by Amazon Web Services and can't be\n modified.
\n \n - \n
INPUT_REQUIRED: You must include a value for all required parameters.
\n \n - \n
INVALID_EMAIL_ADDRESS_TARGET: You specified an invalid email address for the\n invited account owner.
\n \n - \n
INVALID_ENUM: You specified an invalid value.
\n \n - \n
INVALID_ENUM_POLICY_TYPE: You specified an invalid policy type string.
\n \n - \n
INVALID_FULL_NAME_TARGET: You specified a full name that contains invalid\n characters.
\n \n - \n
INVALID_LIST_MEMBER: You provided a list to a parameter that contains at least\n one invalid value.
\n \n - \n
INVALID_PAGINATION_TOKEN: Get the value for the NextToken
\n parameter from the response to a previous call of the operation.
\n \n - \n
INVALID_PARTY_TYPE_TARGET: You specified the wrong type of entity (account,\n organization, or email) as a party.
\n \n - \n
INVALID_PATTERN: You provided a value that doesn't match the required\n pattern.
\n \n - \n
INVALID_PATTERN_TARGET_ID: You specified a policy target ID that doesn't match\n the required pattern.
\n \n - \n
INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name\n can't begin with the reserved prefix AWSServiceRoleFor
.
\n \n - \n
INVALID_SYNTAX_ORGANIZATION_ARN: You specified an invalid Amazon Resource Name\n (ARN) for the organization.
\n \n - \n
INVALID_SYNTAX_POLICY_ID: You specified an invalid policy ID.
\n \n - \n
INVALID_SYSTEM_TAGS_PARAMETER: You specified a tag key that is a system tag.\n You can’t add, edit, or delete system tag keys because they're reserved for\n Amazon Web Services use. System tags don’t count against your tags per resource limit.
\n \n - \n
MAX_FILTER_LIMIT_EXCEEDED: You can specify only one filter parameter for the\n operation.
\n \n - \n
MAX_LENGTH_EXCEEDED: You provided a string parameter that is longer than\n allowed.
\n \n - \n
MAX_VALUE_EXCEEDED: You provided a numeric parameter that has a larger value\n than allowed.
\n \n - \n
MIN_LENGTH_EXCEEDED: You provided a string parameter that is shorter than\n allowed.
\n \n - \n
MIN_VALUE_EXCEEDED: You provided a numeric parameter that has a smaller value\n than allowed.
\n \n - \n
MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS: You can move an account only between\n entities in the same root.
\n \n - \n
TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target\n entity.
\n \n - \n
UNRECOGNIZED_SERVICE_PRINCIPAL: You specified a service principal that isn't\n recognized.
\n \n
",
+ "smithy.api#documentation": "The requested operation failed because you provided invalid values for one or more of\n the request parameters. This exception includes a reason that contains additional\n information about the violated limit:
\n \n Some of the reasons in the following list might not be applicable to this specific\n API or operation.
\n \n \n - \n
DUPLICATE_TAG_KEY: Tag keys must be unique among the tags attached to the same\n entity.
\n \n - \n
IMMUTABLE_POLICY: You specified a policy that is managed by Amazon Web Services and can't be\n modified.
\n \n - \n
INPUT_REQUIRED: You must include a value for all required parameters.
\n \n - \n
INVALID_EMAIL_ADDRESS_TARGET: You specified an invalid email address for the\n invited account owner.
\n \n - \n
INVALID_ENUM: You specified an invalid value.
\n \n - \n
INVALID_ENUM_POLICY_TYPE: You specified an invalid policy type string.
\n \n - \n
INVALID_FULL_NAME_TARGET: You specified a full name that contains invalid\n characters.
\n \n - \n
INVALID_LIST_MEMBER: You provided a list to a parameter that contains at least\n one invalid value.
\n \n - \n
INVALID_PAGINATION_TOKEN: Get the value for the NextToken
\n parameter from the response to a previous call of the operation.
\n \n - \n
INVALID_PARTY_TYPE_TARGET: You specified the wrong type of entity (account,\n organization, or email) as a party.
\n \n - \n
INVALID_PATTERN: You provided a value that doesn't match the required\n pattern.
\n \n - \n
INVALID_PATTERN_TARGET_ID: You specified a policy target ID that doesn't match\n the required pattern.
\n \n - \n
INVALID_PRINCIPAL: You specified an invalid principal element in the policy.
\n \n - \n
INVALID_ROLE_NAME: You provided a role name that isn't valid. A role name\n can't begin with the reserved prefix AWSServiceRoleFor
.
\n \n - \n
INVALID_SYNTAX_ORGANIZATION_ARN: You specified an invalid Amazon Resource Name\n (ARN) for the organization.
\n \n - \n
INVALID_SYNTAX_POLICY_ID: You specified an invalid policy ID.
\n \n - \n
INVALID_SYSTEM_TAGS_PARAMETER: You specified a tag key that is a system tag.\n You can’t add, edit, or delete system tag keys because they're reserved for\n Amazon Web Services use. System tags don’t count against your tags per resource limit.
\n \n - \n
MAX_FILTER_LIMIT_EXCEEDED: You can specify only one filter parameter for the\n operation.
\n \n - \n
MAX_LENGTH_EXCEEDED: You provided a string parameter that is longer than\n allowed.
\n \n - \n
MAX_VALUE_EXCEEDED: You provided a numeric parameter that has a larger value\n than allowed.
\n \n - \n
MIN_LENGTH_EXCEEDED: You provided a string parameter that is shorter than\n allowed.
\n \n - \n
MIN_VALUE_EXCEEDED: You provided a numeric parameter that has a smaller value\n than allowed.
\n \n - \n
MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS: You can move an account only between\n entities in the same root.
\n \n - \n
NON_DETACHABLE_POLICY: You can't detach this Amazon Web Services Managed Policy.
\n \n - \n
TARGET_NOT_SUPPORTED: You can't perform the specified operation on that target\n entity.
\n \n - \n
UNRECOGNIZED_SERVICE_PRINCIPAL: You specified a service principal that isn't\n recognized.
\n \n
",
"smithy.api#error": "client",
"smithy.api#httpError": 400
}
@@ -5556,6 +5556,12 @@
"smithy.api#enumValue": "INVALID_RESOURCE_POLICY_JSON"
}
},
+ "INVALID_PRINCIPAL": {
+ "target": "smithy.api#Unit",
+ "traits": {
+ "smithy.api#enumValue": "INVALID_PRINCIPAL"
+ }
+ },
"UNSUPPORTED_ACTION_IN_RESOURCE_POLICY": {
"target": "smithy.api#Unit",
"traits": {
@@ -5573,6 +5579,12 @@
"traits": {
"smithy.api#enumValue": "UNSUPPORTED_RESOURCE_IN_RESOURCE_POLICY"
}
+ },
+ "NON_DETACHABLE_POLICY": {
+ "target": "smithy.api#Unit",
+ "traits": {
+ "smithy.api#enumValue": "NON_DETACHABLE_POLICY"
+ }
}
}
},
@@ -7118,7 +7130,7 @@
"Filter": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "The type of policy that you want to include in the returned list. You must specify one\n of the following values:
\n ",
+ "smithy.api#documentation": "The type of policy that you want to include in the returned list. You must specify one\n of the following values:
\n ",
"smithy.api#required": {}
}
},
@@ -7165,7 +7177,7 @@
"Filter": {
"target": "com.amazonaws.organizations#PolicyType",
"traits": {
- "smithy.api#documentation": "Specifies the type of policy that you want to include in the response. You must\n specify one of the following values:
\n ",
+ "smithy.api#documentation": "Specifies the type of policy that you want to include in the response. You must\n specify one of the following values:
\n ",
"smithy.api#required": {}
}
},
@@ -8092,6 +8104,12 @@
"smithy.api#enumValue": "SERVICE_CONTROL_POLICY"
}
},
+ "RESOURCE_CONTROL_POLICY": {
+ "target": "smithy.api#Unit",
+ "traits": {
+ "smithy.api#enumValue": "RESOURCE_CONTROL_POLICY"
+ }
+ },
"TAG_POLICY": {
"target": "smithy.api#Unit",
"traits": {