Organization

class Organization : KotlinCustomResource

Provides a resource to create an organization. !>WARNING: When migrating from a feature_set of CONSOLIDATED_BILLING to ALL, the Organization account owner will received an email stating the following: "You started the process to enable all features for your AWS organization. As part of that process, all member accounts that joined your organization by invitation must approve the change. You don’t need approval from member accounts that you directly created from within your AWS organization." After all member accounts have accepted the invitation, the Organization account owner must then finalize the changes via the AWS Console. Until these steps are performed, the provider will perpetually show a difference, and the DescribeOrganization API will continue to show the FeatureSet as CONSOLIDATED_BILLING. See the AWS Organizations documentation for more information. !>WARNING: Warning from the AWS Docs: "We recommend that you enable integration between AWS Organizations and the specified AWS service by using the console or commands that are provided by the specified service. Doing so ensures that the service is aware that it can create the resources that are required for the integration. How the service creates those resources in the organization's accounts depends on that service. For more information, see the documentation for the other AWS service."

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.organizations.Organization;
import com.pulumi.aws.organizations.OrganizationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var org = new Organization("org", OrganizationArgs.builder()
.awsServiceAccessPrincipals(
"cloudtrail.amazonaws.com",
"config.amazonaws.com")
.featureSet("ALL")
.build());
}
}

Import

The AWS organization can be imported by using the id, e.g.,

$ pulumi import aws:organizations/organization:Organization my_org o-1234567

Properties

Link copied to clipboard

List of organization accounts including the master account. For a list excluding the master account, see the non_master_accounts attribute. All elements have these attributes:

Link copied to clipboard
val arn: Output<String>

ARN of the root

Link copied to clipboard

List of AWS service principal names for which you want to enable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com. Organization must have feature_set set to ALL. Some services do not support enablement via this endpoint, see warning in aws docs.

Link copied to clipboard

List of Organizations policy types to enable in the Organization Root. Organization must have feature_set set to ALL. For additional information about valid policy types (e.g., AISERVICES_OPT_OUT_POLICY, BACKUP_POLICY, SERVICE_CONTROL_POLICY, and TAG_POLICY), see the AWS Organizations API Reference.

Link copied to clipboard
val featureSet: Output<String>?

Specify "ALL" (default) or "CONSOLIDATED_BILLING".

Link copied to clipboard
val id: Output<String>
Link copied to clipboard

ARN of the master account

Link copied to clipboard

Email address of the master account

Link copied to clipboard
val masterAccountId: Output<String>

Identifier of the master account

Link copied to clipboard

List of organization accounts excluding the master account. For a list including the master account, see the accounts attribute. All elements have these attributes:

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard

List of organization roots. All elements have these attributes:

Link copied to clipboard
val urn: Output<String>