Amazon Organizations

Amazon Organizations Organizations Aws Service Access API

The Organizations Aws Service Access API from Amazon Organizations — 3 operation(s) for organizations aws service access.

GitHub OpenAPI

Operations 3

POST /#DisableAWSServiceAccess Disable AWSService Access #
POST /#EnableAWSServiceAccess Enable AWSService Access #
POST /#ListAWSServiceAccessForOrganization List AWSService Access For Organization #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/amazon-organizations/openapi/amazon-organizations-aws-service-access-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/amazon-organizations:amazon-organizations-aws-service-access-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

amazon-organizations-aws-service-access-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: AWS Organizations Aws Service Access API
  version: '2016-11-28'
  description: Generated from AWS's published Smithy model for AWS Organizations. 3 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://organizations.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
tags:
- name: Aws Service Access
paths:
  /#DisableAWSServiceAccess:
    post:
      operationId: DisableAWSServiceAccess
      summary: Disable AWSService Access
      description: Disables the integration of an Amazon Web Services service (the service that is specified by ServicePrincipal) with Organizations. When you disable integration, the specified service no longer can create a service-linked role in new accounts in your organization. This means the service can't perform operations on your behalf on any new accounts in your organization. The service can still perform operations in older accounts until the service completes its clean-up from Organizations. We strongly recommend that you don't use this command to disable integration between Organizations and the specified Amazon Web Services service. Instead, use the console or commands that are provided by the specified service. This lets the trusted service perform any required initialization when enabling trusted access, such as creating any required resources and any required clean up of resources when disabling trusted access. For information about how to disable trusted service access to your organization using the trusted service, see the Learn more link under the Supports Trusted Access column at Amazon Web Services services that you can use with Organizations. on this page. If you disable access
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                type: string
        '403':
          description: AccessDeniedException; UnsupportedAPIEndpointException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '404':
          description: AWSOrganizationsNotInUseException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AWSOrganizationsNotInUseException'
        '409':
          description: ConcurrentModificationException; ConstraintViolationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConcurrentModificationException'
        '400':
          description: InvalidInputException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.DisableAWSServiceAccess
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/DisableAWSServiceAccessRequest'
      tags:
      - Aws Service Access
  /#EnableAWSServiceAccess:
    post:
      operationId: EnableAWSServiceAccess
      summary: Enable AWSService Access
      description: Provides an Amazon Web Services service (the service that is specified by ServicePrincipal) with permissions to view the structure of an organization, create a service-linked role in all the accounts in the organization, and allow the service to perform operations on behalf of the organization and its accounts. Establishing these permissions can be a first step in enabling the integration of an Amazon Web Services service with Organizations. We recommend that you enable integration between Organizations and the specified Amazon Web Services service by using the console or commands that are provided by the specified service. Doing so ensures that the service is aware that it can create the resources that are required for the integration. How the service creates those resources in the organization's accounts depends on that service. For more information, see the documentation for the other Amazon Web Services service. For more information about enabling services to integrate with Organizations, see Using Organizations with other Amazon Web Services services in the Organizations User Guide. You can only call this operation from the management account.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                type: string
        '403':
          description: AccessDeniedException; UnsupportedAPIEndpointException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '404':
          description: AWSOrganizationsNotInUseException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AWSOrganizationsNotInUseException'
        '409':
          description: ConcurrentModificationException; ConstraintViolationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConcurrentModificationException'
        '400':
          description: InvalidInputException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.EnableAWSServiceAccess
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/EnableAWSServiceAccessRequest'
      tags:
      - Aws Service Access
  /#ListAWSServiceAccessForOrganization:
    post:
      operationId: ListAWSServiceAccessForOrganization
      summary: List AWSService Access For Organization
      description: Returns a list of the Amazon Web Services services that you enabled to integrate with your organization. After a service on this list creates the resources that it requires for the integration, it can perform operations on your organization and its accounts. For more information about integrating other services with Organizations, including the list of services that currently work with Organizations, see Using Organizations with other Amazon Web Services services in the Organizations User Guide. You can only call this operation from the management account or a member account that is a delegated administrator.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ListAWSServiceAccessForOrganizationResponse'
        '403':
          description: AccessDeniedException; UnsupportedAPIEndpointException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '404':
          description: AWSOrganizationsNotInUseException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AWSOrganizationsNotInUseException'
        '409':
          description: ConstraintViolationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConstraintViolationException'
        '400':
          description: InvalidInputException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.ListAWSServiceAccessForOrganization
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/ListAWSServiceAccessForOrganizationRequest'
      tags:
      - Aws Service Access
components:
  schemas:
    InvalidInputException:
      type: object
      properties:
        Message:
          type: string
        Reason:
          type: string
          enum:
          - INVALID_PARTY_TYPE_TARGET
          - INVALID_SYNTAX_ORGANIZATION_ARN
          - INVALID_SYNTAX_POLICY_ID
          - INVALID_ENUM
          - INVALID_ENUM_POLICY_TYPE
          - INVALID_LIST_MEMBER
          - MAX_LENGTH_EXCEEDED
          - MAX_VALUE_EXCEEDED
          - MIN_LENGTH_EXCEEDED
          - MIN_VALUE_EXCEEDED
          - IMMUTABLE_POLICY
          - INVALID_PATTERN
          - INVALID_PATTERN_TARGET_ID
          - INPUT_REQUIRED
          - INVALID_NEXT_TOKEN
          - MAX_LIMIT_EXCEEDED_FILTER
          - MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS
          - INVALID_FULL_NAME_TARGET
          - UNRECOGNIZED_SERVICE_PRINCIPAL
          - INVALID_ROLE_NAME
          - INVALID_SYSTEM_TAGS_PARAMETER
          - DUPLICATE_TAG_KEY
          - TARGET_NOT_SUPPORTED
          - INVALID_EMAIL_ADDRESS_TARGET
          - INVALID_RESOURCE_POLICY_JSON
          - INVALID_PRINCIPAL
          - UNSUPPORTED_ACTION_IN_RESOURCE_POLICY
          - UNSUPPORTED_POLICY_TYPE_IN_RESOURCE_POLICY
          - UNSUPPORTED_RESOURCE_IN_RESOURCE_POLICY
          - NON_DETACHABLE_POLICY
          - CALLER_REQUIRED_FIELD_MISSING
          - UNSUPPORTED_ACTION_IN_RESPONSIBILITY_TRANSFER
          - START_DATE_NOT_BEGINNING_OF_MONTH
          - START_DATE_NOT_BEGINNING_OF_DAY
          - START_DATE_TOO_EARLY
          - START_DATE_TOO_LATE
          - INVALID_START_DATE
          - END_DATE_NOT_END_OF_MONTH
          - END_DATE_TOO_EARLY
          - END_DATE_TOO_LATE
          - INVALID_END_DATE
    ListAWSServiceAccessForOrganizationResponse:
      type: object
      properties:
        EnabledServicePrincipals:
          type: array
          items:
            $ref: '#/components/schemas/EnabledServicePrincipal'
          description: A list of the service principals for the services that are enabled to integrate with your organization. Each principal is a structure that includes the name and the date that it was enabled for integration with Organizations.
        NextToken:
          type: string
          description: If present, indicates that more output is available than is included in the current response. Use this value in the NextToken request parameter in a subsequent call to the operation to get the next part of the output. You should repeat this until the NextToken response element comes back as null.
    AWSOrganizationsNotInUseException:
      type: object
      properties:
        Message:
          type: string
    EnabledServicePrincipal:
      type: object
      properties:
        ServicePrincipal:
          type: string
          description: 'The name of the service principal. This is typically in the form of a URL, such as: servicename.amazonaws.com.'
        DateEnabled:
          type: string
          format: date-time
          description: The date that the service principal was enabled for integration with Organizations.
    ConstraintViolationException:
      type: object
      properties:
        Message:
          type: string
        Reason:
          type: string
          enum:
          - ACCOUNT_NUMBER_LIMIT_EXCEEDED
          - HANDSHAKE_RATE_LIMIT_EXCEEDED
          - OU_NUMBER_LIMIT_EXCEEDED
          - OU_DEPTH_LIMIT_EXCEEDED
          - POLICY_NUMBER_LIMIT_EXCEEDED
          - POLICY_CONTENT_LIMIT_EXCEEDED
          - MAX_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED
          - MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED
          - ACCOUNT_CANNOT_LEAVE_ORGANIZATION
          - ACCOUNT_CANNOT_LEAVE_WITHOUT_EULA
          - ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION
          - MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED
          - MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED
          - ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED
          - MASTER_ACCOUNT_ADDRESS_DOES_NOT_MATCH_MARKETPLACE
          - MASTER_ACCOUNT_MISSING_CONTACT_INFO
          - MASTER_ACCOUNT_NOT_GOVCLOUD_ENABLED
          - ORGANIZATION_NOT_IN_ALL_FEATURES_MODE
          - CREATE_ORGANIZATION_IN_BILLING_MODE_UNSUPPORTED_REGION
          - EMAIL_VERIFICATION_CODE_EXPIRED
          - WAIT_PERIOD_ACTIVE
          - MAX_TAG_LIMIT_EXCEEDED
          - TAG_POLICY_VIOLATION
          - MAX_DELEGATED_ADMINISTRATORS_FOR_SERVICE_LIMIT_EXCEEDED
          - CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR
          - CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG
          - DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE
          - POLICY_TYPE_ENABLED_FOR_THIS_SERVICE
          - MASTER_ACCOUNT_MISSING_BUSINESS_LICENSE
          - CANNOT_CLOSE_MANAGEMENT_ACCOUNT
          - CLOSE_ACCOUNT_QUOTA_EXCEEDED
          - CLOSE_ACCOUNT_REQUESTS_LIMIT_EXCEEDED
          - SERVICE_ACCESS_NOT_ENABLED
          - INVALID_PAYMENT_INSTRUMENT
          - ACCOUNT_CREATION_NOT_COMPLETE
          - CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR
          - ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED
          - RESPONSIBILITY_TRANSFER_MAX_LEVEL_VIOLATION
          - RESPONSIBILITY_TRANSFER_MAX_INBOUND_QUOTA_VIOLATION
          - RESPONSIBILITY_TRANSFER_MAX_OUTBOUND_QUOTA_VIOLATION
          - RESPONSIBILITY_TRANSFER_MAX_TRANSFERS_QUOTA_VIOLATION
          - ACTIVE_RESPONSIBILITY_TRANSFER_PROCESS
          - TRANSFER_RESPONSIBILITY_TARGET_DELETION_IN_PROGRESS
          - TRANSFER_RESPONSIBILITY_SOURCE_DELETION_IN_PROGRESS
          - UNSUPPORTED_PRICING
          - UNMET_BILLING_PREREQUISITE
          - ACCOUNT_NOT_ACTIVE_FOR_TRANSFER_RESPONSIBILITY
          - TRANSFER_RESPONSIBILITY_UPDATE_NOT_ALLOWED
    TooManyRequestsException:
      type: object
      properties:
        Type:
          type: string
        Message:
          type: string
    AccessDeniedException:
      type: object
      properties:
        Message:
          type: string
    ConcurrentModificationException:
      type: object
      properties:
        Message:
          type: string
    DisableAWSServiceAccessRequest:
      type: object
      properties:
        ServicePrincipal:
          type: string
          description: The service principal name of the Amazon Web Services service for which you want to disable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com.
      required:
      - ServicePrincipal
    ListAWSServiceAccessForOrganizationRequest:
      type: object
      properties:
        NextToken:
          type: string
          description: The parameter for receiving additional results if you receive a NextToken response in a previous request. A NextToken response indicates that more output is available. Set this parameter to the value of the previous call's NextToken response to indicate where the output should continue from.
        MaxResults:
          type: integer
          description: The maximum number of items to return in the response. If more results exist than the specified MaxResults value, a token is included in the response so that you can retrieve the remaining results.
    EnableAWSServiceAccessRequest:
      type: object
      properties:
        ServicePrincipal:
          type: string
          description: The service principal name of the Amazon Web Services service for which you want to enable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com.
      required:
      - ServicePrincipal
    ServiceException:
      type: object
      properties:
        Message:
          type: string
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: organizations
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/organizations/service/2016-11-28/organizations-2016-11-28.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)