Organization
Provides a resource to create an organization. !>WARNING: When migrating from a feature_set
of CONSOLIDATED_BILLING
to ALL
, the Organization account owner will received an email stating the following: "You started the process to enable all features for your AWS organization. As part of that process, all member accounts that joined your organization by invitation must approve the change. You don’t need approval from member accounts that you directly created from within your AWS organization." After all member accounts have accepted the invitation, the Organization account owner must then finalize the changes via the AWS Console. Until these steps are performed, the provider will perpetually show a difference, and the DescribeOrganization
API will continue to show the FeatureSet
as CONSOLIDATED_BILLING
. See the AWS Organizations documentation for more information. !>WARNING: Warning from the AWS Docs: "We recommend that you enable integration between AWS Organizations and the specified AWS service by using the console or commands that are provided by the specified service. Doing so ensures that the service is aware that it can create the resources that are required for the integration. How the service creates those resources in the organization's accounts depends on that service. For more information, see the documentation for the other AWS service."
Example Usage
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.organizations.Organization;
import com.pulumi.aws.organizations.OrganizationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var org = new Organization("org", OrganizationArgs.builder()
.awsServiceAccessPrincipals(
"cloudtrail.amazonaws.com",
"config.amazonaws.com")
.featureSet("ALL")
.build());
}
}
Import
The AWS organization can be imported by using the id
, e.g.,
$ pulumi import aws:organizations/organization:Organization my_org o-1234567
Properties
List of organization accounts including the master account. For a list excluding the master account, see the non_master_accounts
attribute. All elements have these attributes:
List of AWS service principal names for which you want to enable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com. Organization must have feature_set
set to ALL
. Some services do not support enablement via this endpoint, see warning in aws docs.
List of Organizations policy types to enable in the Organization Root. Organization must have feature_set
set to ALL
. For additional information about valid policy types (e.g., AISERVICES_OPT_OUT_POLICY
, BACKUP_POLICY
, SERVICE_CONTROL_POLICY
, and TAG_POLICY
), see the AWS Organizations API Reference.
Specify "ALL" (default) or "CONSOLIDATED_BILLING".
ARN of the master account
Email address of the master account
Identifier of the master account
List of organization accounts excluding the master account. For a list including the master account, see the accounts
attribute. All elements have these attributes:
List of organization roots. All elements have these attributes: