aws-organizations 命令

常用示例

说明

aws organizations is a subcommand of the AWS CLI that manages AWS Organizations, a service for centrally managing multiple AWS accounts. It enables consolidated billing, account creation, and policy-based governance. Organizations have a hierarchical structure: a root containing organizational units (OUs) and accounts. Service Control Policies (SCPs) set permission guardrails that apply to all principals in target accounts or OUs, restricting what actions can be performed. The management account (formerly master) creates and controls the organization. Member accounts can be created within the organization or invited from existing accounts.

参数

describe-organization

Get organization details and features.

list-accounts

List all accounts in the organization.

list-roots

List organization roots.

list-organizational-units-for-parent

List OUs under a parent.

list-accounts-for-parent

List accounts directly in an OU.

create-account

Create a new member account.

create-organizational-unit

Create a new OU.

move-account

Move account between OUs.

list-policies

List policies of a given type.

create-policy

Create a new policy.

attach-policy

Attach policy to a target.

detach-policy

Remove policy from a target.

describe-account

Get account details.

--parent-id _id_

Root or OU identifier.

--account-id _id_

12-digit AWS account ID.

--policy-id _id_

Policy identifier.

--target-id _id_

Account, OU, or root to target.

--filter _type_

Policy type filter: SERVICE_CONTROL_POLICY, TAG_POLICY, BACKUP_POLICY, AISERVICES_OPT_OUT_POLICY.