Skip to content

Commit 86c0d21

Browse files
This release includes support for five new APIs and changes to existing APIs that give AWS Organizations customers the ability to use temporary root credentials, targeted to member accounts in the organization.
1 parent 8ac92bb commit 86c0d21

File tree

49 files changed

+6169
-93
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

49 files changed

+6169
-93
lines changed

docgenerator/AWSSDKDocSamples/IdentityManagement.GeneratedSamples.extra.xml

Lines changed: 95 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -513,6 +513,82 @@
513513
</example>
514514
</value>
515515
</doc>
516+
<doc>
517+
<members>
518+
<member name="M:Amazon.IdentityManagement.IAmazonIdentityManagementService.DisableOrganizationsRootCredentialsManagement(Amazon.IdentityManagement.Model.DisableOrganizationsRootCredentialsManagementRequest)" />
519+
<member name="M:Amazon.IdentityManagement.AmazonIdentityManagementServiceClient.DisableOrganizationsRootCredentialsManagement(Amazon.IdentityManagement.Model.DisableOrganizationsRootCredentialsManagementRequest)" />
520+
<member name="T:Amazon.IdentityManagement.Model.DisableOrganizationsRootCredentialsManagementRequest" />
521+
<member name="T:Amazon.IdentityManagement.Model.DisableOrganizationsRootCredentialsManagementResponse" />
522+
</members>
523+
<value>
524+
<example>
525+
<para>
526+
The following command disables the management of privileged root user credentials across member accounts in your organization.
527+
</para>
528+
<code
529+
title="To disable the RootCredentialsManagement feature in your organization"
530+
source=".\AWSSDKDocSamples\IdentityManagement\IdentityManagement.GeneratedSamples.cs"
531+
region="to-disable-the-rootcredentialsmanagement-feature-in-your-organization-1730908292211" />
532+
</example>
533+
</value>
534+
</doc>
535+
<doc>
536+
<members>
537+
<member name="M:Amazon.IdentityManagement.IAmazonIdentityManagementService.DisableOrganizationsRootSessions(Amazon.IdentityManagement.Model.DisableOrganizationsRootSessionsRequest)" />
538+
<member name="M:Amazon.IdentityManagement.AmazonIdentityManagementServiceClient.DisableOrganizationsRootSessions(Amazon.IdentityManagement.Model.DisableOrganizationsRootSessionsRequest)" />
539+
<member name="T:Amazon.IdentityManagement.Model.DisableOrganizationsRootSessionsRequest" />
540+
<member name="T:Amazon.IdentityManagement.Model.DisableOrganizationsRootSessionsResponse" />
541+
</members>
542+
<value>
543+
<example>
544+
<para>
545+
The following command disables root user sessions for privileged tasks across member accounts in your organization.
546+
</para>
547+
<code
548+
title="To disable the RootSessions feature in your organization"
549+
source=".\AWSSDKDocSamples\IdentityManagement\IdentityManagement.GeneratedSamples.cs"
550+
region="to-disable-the-rootsessions-feature-in-your-organization-1730908495962" />
551+
</example>
552+
</value>
553+
</doc>
554+
<doc>
555+
<members>
556+
<member name="M:Amazon.IdentityManagement.IAmazonIdentityManagementService.EnableOrganizationsRootCredentialsManagement(Amazon.IdentityManagement.Model.EnableOrganizationsRootCredentialsManagementRequest)" />
557+
<member name="M:Amazon.IdentityManagement.AmazonIdentityManagementServiceClient.EnableOrganizationsRootCredentialsManagement(Amazon.IdentityManagement.Model.EnableOrganizationsRootCredentialsManagementRequest)" />
558+
<member name="T:Amazon.IdentityManagement.Model.EnableOrganizationsRootCredentialsManagementRequest" />
559+
<member name="T:Amazon.IdentityManagement.Model.EnableOrganizationsRootCredentialsManagementResponse" />
560+
</members>
561+
<value>
562+
<example>
563+
<para>
564+
The following command enables the management of privileged root user credentials across member accounts in your organization.
565+
</para>
566+
<code
567+
title="To enable the RootCredentialsManagement feature in your organization"
568+
source=".\AWSSDKDocSamples\IdentityManagement\IdentityManagement.GeneratedSamples.cs"
569+
region="to-enable-the-rootcredentialsmanagement-feature-in-your-organization-1730908602395" />
570+
</example>
571+
</value>
572+
</doc>
573+
<doc>
574+
<members>
575+
<member name="M:Amazon.IdentityManagement.IAmazonIdentityManagementService.EnableOrganizationsRootSessions(Amazon.IdentityManagement.Model.EnableOrganizationsRootSessionsRequest)" />
576+
<member name="M:Amazon.IdentityManagement.AmazonIdentityManagementServiceClient.EnableOrganizationsRootSessions(Amazon.IdentityManagement.Model.EnableOrganizationsRootSessionsRequest)" />
577+
<member name="T:Amazon.IdentityManagement.Model.EnableOrganizationsRootSessionsRequest" />
578+
<member name="T:Amazon.IdentityManagement.Model.EnableOrganizationsRootSessionsResponse" />
579+
</members>
580+
<value>
581+
<example>
582+
<para>
583+
The following command allows the management account or delegated administrator to perform privileged tasks on member accounts in your organization.
584+
</para>
585+
<code
586+
title="To enable the RootSessions feature in your organization"
587+
source=".\AWSSDKDocSamples\IdentityManagement\IdentityManagement.GeneratedSamples.cs"
588+
region="to-enable-the-rootsessions-feature-in-your-organization-1730908736611" />
589+
</example>
590+
</value>
591+
</doc>
516592
<doc>
517593
<members>
518594
<member name="M:Amazon.IdentityManagement.IAmazonIdentityManagementService.GenerateOrganizationsAccessReport(Amazon.IdentityManagement.Model.GenerateOrganizationsAccessReportRequest)" />
@@ -817,6 +893,25 @@
817893
</example>
818894
</value>
819895
</doc>
896+
<doc>
897+
<members>
898+
<member name="M:Amazon.IdentityManagement.IAmazonIdentityManagementService.ListOrganizationsFeatures(Amazon.IdentityManagement.Model.ListOrganizationsFeaturesRequest)" />
899+
<member name="M:Amazon.IdentityManagement.AmazonIdentityManagementServiceClient.ListOrganizationsFeatures(Amazon.IdentityManagement.Model.ListOrganizationsFeaturesRequest)" />
900+
<member name="T:Amazon.IdentityManagement.Model.ListOrganizationsFeaturesRequest" />
901+
<member name="T:Amazon.IdentityManagement.Model.ListOrganizationsFeaturesResponse" />
902+
</members>
903+
<value>
904+
<example>
905+
<para>
906+
he following command lists the centralized root access features enabled for your organization.
907+
</para>
908+
<code
909+
title="To list the centralized root access features enabled for your organization"
910+
source=".\AWSSDKDocSamples\IdentityManagement\IdentityManagement.GeneratedSamples.cs"
911+
region="to-list-the-centralized-root-access-features-enabled-for-your-organization-1730908832557" />
912+
</example>
913+
</value>
914+
</doc>
820915
<doc>
821916
<members>
822917
<member name="M:Amazon.IdentityManagement.IAmazonIdentityManagementService.ListPoliciesGrantingServiceAccess(Amazon.IdentityManagement.Model.ListPoliciesGrantingServiceAccessRequest)" />

docgenerator/AWSSDKDocSamples/IdentityManagement/IdentityManagement.GeneratedSamples.cs

Lines changed: 75 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -417,6 +417,66 @@ public void IdentityManagementServiceDeleteVirtualMFADevice()
417417
#endregion
418418
}
419419

420+
public void IdentityManagementServiceDisableOrganizationsRootCredentialsManagement()
421+
{
422+
#region to-disable-the-rootcredentialsmanagement-feature-in-your-organization-1730908292211
423+
424+
var client = new AmazonIdentityManagementServiceClient();
425+
var response = client.DisableOrganizationsRootCredentialsManagement(new DisableOrganizationsRootCredentialsManagementRequest
426+
{
427+
});
428+
429+
List<string> enabledFeatures = response.EnabledFeatures;
430+
string organizationId = response.OrganizationId;
431+
432+
#endregion
433+
}
434+
435+
public void IdentityManagementServiceDisableOrganizationsRootSessions()
436+
{
437+
#region to-disable-the-rootsessions-feature-in-your-organization-1730908495962
438+
439+
var client = new AmazonIdentityManagementServiceClient();
440+
var response = client.DisableOrganizationsRootSessions(new DisableOrganizationsRootSessionsRequest
441+
{
442+
});
443+
444+
List<string> enabledFeatures = response.EnabledFeatures;
445+
string organizationId = response.OrganizationId;
446+
447+
#endregion
448+
}
449+
450+
public void IdentityManagementServiceEnableOrganizationsRootCredentialsManagement()
451+
{
452+
#region to-enable-the-rootcredentialsmanagement-feature-in-your-organization-1730908602395
453+
454+
var client = new AmazonIdentityManagementServiceClient();
455+
var response = client.EnableOrganizationsRootCredentialsManagement(new EnableOrganizationsRootCredentialsManagementRequest
456+
{
457+
});
458+
459+
List<string> enabledFeatures = response.EnabledFeatures;
460+
string organizationId = response.OrganizationId;
461+
462+
#endregion
463+
}
464+
465+
public void IdentityManagementServiceEnableOrganizationsRootSessions()
466+
{
467+
#region to-enable-the-rootsessions-feature-in-your-organization-1730908736611
468+
469+
var client = new AmazonIdentityManagementServiceClient();
470+
var response = client.EnableOrganizationsRootSessions(new EnableOrganizationsRootSessionsRequest
471+
{
472+
});
473+
474+
List<string> enabledFeatures = response.EnabledFeatures;
475+
string organizationId = response.OrganizationId;
476+
477+
#endregion
478+
}
479+
420480
public void IdentityManagementServiceGenerateOrganizationsAccessReport()
421481
{
422482
#region generateorganizationsaccessreport-ou
@@ -668,6 +728,21 @@ public void IdentityManagementServiceListGroupsForUser()
668728
#endregion
669729
}
670730

731+
public void IdentityManagementServiceListOrganizationsFeatures()
732+
{
733+
#region to-list-the-centralized-root-access-features-enabled-for-your-organization-1730908832557
734+
735+
var client = new AmazonIdentityManagementServiceClient();
736+
var response = client.ListOrganizationsFeatures(new ListOrganizationsFeaturesRequest
737+
{
738+
});
739+
740+
List<string> enabledFeatures = response.EnabledFeatures;
741+
string organizationId = response.OrganizationId;
742+
743+
#endregion
744+
}
745+
671746
public void IdentityManagementServiceListPoliciesGrantingServiceAccess()
672747
{
673748
#region listpoliciesaccess-user-1541698749508

0 commit comments

Comments
 (0)