Package com.pulumi.aws.organizations

Class OrganizationArgs

  • public final class OrganizationArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • awsServiceAccessPrincipals

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> awsServiceAccessPrincipals()
        Returns:
        List of AWS service principal names for which you want to enable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com. Organization must have `featureSet` set to `ALL`. Some services do not support enablement via this endpoint, see [warning in aws docs](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAWSServiceAccess.html).

      • enabledPolicyTypes

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> enabledPolicyTypes()
        Returns:
        List of Organizations policy types to enable in the Organization Root. Organization must have `featureSet` set to `ALL`. For additional information about valid policy types (e.g., `AISERVICES_OPT_OUT_POLICY`, `BACKUP_POLICY`, `BEDROCK_POLICY`, `CHATBOT_POLICY`, `DECLARATIVE_POLICY_EC2`, `INSPECTOR_POLICY`, `RESOURCE_CONTROL_POLICY`, `S3_POLICY`, `SECURITYHUB_POLICY`, `SERVICE_CONTROL_POLICY`, `TAG_POLICY` and `UPGRADE_ROLLOUT_POLICY`), see the [AWS Organizations API Reference](https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnablePolicyType.html). To enable `INSPECTOR_POLICY`, `awsServiceAccessPrincipals` must include `inspector2.amazonaws.com`. To enable `SECURITYHUB_POLICY`, `awsServiceAccessPrincipals` must include `securityhub.amazonaws.com`.

      • featureSet

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> featureSet()
        Returns:
        Specify `ALL` (default) or `CONSOLIDATED_BILLING`.

      • returnOrganizationOnly

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> returnOrganizationOnly()
        Returns:
        Return (as attributes) only the results of the [`DescribeOrganization`](https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeOrganization.html) API to avoid [API limits](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html#throttling-limits). When configured to `true` only the `arn`, `featureSet`, `masterAccountArn`, `masterAccountEmail` and `masterAccountId` attributes will be returned. All others will be empty. Default: `false`.