Amazon Organizations Organizations Handshake API

openapi: 3.2.0
info:
  title: AWS Organizations Handshake API
  version: '2016-11-28'
  description: Generated from AWS's published Smithy model for AWS Organizations. 5 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://organizations.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
tags:
- name: Handshake
paths:
  /#AcceptHandshake:
    post:
      operationId: AcceptHandshake
      summary: Accept Handshake
      description: 'Accepts a handshake by sending an ACCEPTED response to the sender. You can view accepted handshakes in API responses for 30 days before they are deleted. Only the management account can accept the following handshakes: Enable all features final confirmation (APPROVE_ALL_FEATURES) Billing transfer (TRANSFER_RESPONSIBILITY) For more information, see Enabling all features and Responding to a billing transfer invitation in the Organizations User Guide. Only a member account can accept the following handshakes: Invitation to join (INVITE) Approve all features request (ENABLE_ALL_FEATURES) For more information, see Responding to invitations and Enabling all features in the Organizations User Guide. When a handshake is accepted, Organizations logs membership events in CloudTrail, available only in the management account''s event history. If the account was standalone and joined a new organization, an AccountJoinedOrganization event is logged with joinedMethod:INVITED and joinedTime fields. If the account departed one organization and joined another, both an AccountDepartedOrganization event with departureMethod:LEFT and departureTime and an AccountJoinedOrganization event with joinedMethod'
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AcceptHandshakeResponse'
        '403':
          description: AccessDeniedException; AccessDeniedForDependencyException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '404':
          description: AWSOrganizationsNotInUseException; HandshakeNotFoundException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AWSOrganizationsNotInUseException'
        '409':
          description: ConcurrentModificationException; ConstraintViolationException; HandshakeAlreadyInStateException; HandshakeConstraintViolationException; InvalidHandshakeTransitionException; MasterCannotLeaveOrganizationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConcurrentModificationException'
        '400':
          description: InvalidInputException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.AcceptHandshake
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/AcceptHandshakeRequest'
      tags:
      - Handshake
  /#CancelHandshake:
    post:
      operationId: CancelHandshake
      summary: Cancel Handshake
      description: Cancels a Handshake. Only the account that sent a handshake can call this operation. The recipient of the handshake can't cancel it, but can use DeclineHandshake to decline. After a handshake is canceled, the recipient can no longer respond to the handshake. You can view canceled handshakes in API responses for 30 days before they are deleted.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/CancelHandshakeResponse'
        '403':
          description: AccessDeniedException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '409':
          description: ConcurrentModificationException; HandshakeAlreadyInStateException; InvalidHandshakeTransitionException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConcurrentModificationException'
        '404':
          description: HandshakeNotFoundException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/HandshakeNotFoundException'
        '400':
          description: InvalidInputException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.CancelHandshake
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/CancelHandshakeRequest'
      tags:
      - Handshake
  /#DescribeHandshake:
    post:
      operationId: DescribeHandshake
      summary: Describe Handshake
      description: 'Returns details for a handshake. A handshake is the secure exchange of information between two Amazon Web Services accounts: a sender and a recipient. You can view ACCEPTED, DECLINED, or CANCELED handshakes in API Responses for 30 days before they are deleted. You can call this operation from any account in a organization.'
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/DescribeHandshakeResponse'
              example:
                Handshake:
                  Id: h-examplehandshakeid111
                  State: OPEN
                  Resources:
                  - Type: ORGANIZATION
                    Value: o-exampleorgid
                    Resources:
                    - Type: MASTER_EMAIL
                      Value: bill@example.com
                    - Type: MASTER_NAME
                      Value: Master Account
                  - Type: ACCOUNT
                    Value: '333333333333'
                  Parties:
                  - Type: ORGANIZATION
                    Id: o-exampleorgid
                  - Type: ACCOUNT
                    Id: '333333333333'
                  Action: INVITE
                  RequestedTimestamp: '2016-11-30T17:24:58.046Z'
                  ExpirationTimestamp: '2016-11-30T17:24:58.046Z'
                  Arn: arn:aws:organizations::111111111111:handshake/o-exampleorgid/invite/h-examplehandshakeid111
        '403':
          description: AccessDeniedException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '409':
          description: ConcurrentModificationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConcurrentModificationException'
        '404':
          description: HandshakeNotFoundException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/HandshakeNotFoundException'
        '400':
          description: InvalidInputException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.DescribeHandshake
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/DescribeHandshakeRequest'
            example:
              HandshakeId: h-examplehandshakeid111
      tags:
      - Handshake
  /#ListHandshakesForAccount:
    post:
      operationId: ListHandshakesForAccount
      summary: List Handshakes For Account
      description: Lists the recent handshakes that you have received. You can view CANCELED, ACCEPTED, DECLINED, or EXPIRED handshakes in API responses for 30 days before they are deleted. You can call this operation from any account in a organization. When calling List* operations, always check the NextToken response parameter value, even if you receive an empty result set. These operations can occasionally return an empty set of results even when more results are available. Continue making requests until NextToken returns null. A null NextToken value indicates that you have retrieved all available results.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ListHandshakesForAccountResponse'
              example:
                Handshakes:
                - Action: INVITE
                  Arn: arn:aws:organizations::111111111111:handshake/o-exampleorgid/invite/h-examplehandshakeid111
                  ExpirationTimestamp: '2017-01-28T14:35:23.3Z'
                  Id: h-examplehandshakeid111
                  Parties:
                  - Id: o-exampleorgid
                    Type: ORGANIZATION
                  - Id: juan@example.com
                    Type: EMAIL
                  RequestedTimestamp: '2017-01-13T14:35:23.3Z'
                  Resources:
                  - Resources:
                    - Type: MASTER_EMAIL
                      Value: bill@amazon.com
                    - Type: MASTER_NAME
                      Value: Org Master Account
                    - Type: ORGANIZATION_FEATURE_SET
                      Value: FULL
                    Type: ORGANIZATION
                    Value: o-exampleorgid
                  - Type: EMAIL
                    Value: juan@example.com
                  State: OPEN
        '403':
          description: AccessDeniedException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '409':
          description: ConcurrentModificationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConcurrentModificationException'
        '400':
          description: InvalidInputException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.ListHandshakesForAccount
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/ListHandshakesForAccountRequest'
      tags:
      - Handshake
  /#ListHandshakesForOrganization:
    post:
      operationId: ListHandshakesForOrganization
      summary: List Handshakes For Organization
      description: Lists the recent handshakes that you have sent. You can view CANCELED, ACCEPTED, DECLINED, or EXPIRED handshakes in API responses for 30 days before they are deleted. You can only call this operation from the management account or a member account that is a delegated administrator. When calling List* operations, always check the NextToken response parameter value, even if you receive an empty result set. These operations can occasionally return an empty set of results even when more results are available. Continue making requests until NextToken returns null. A null NextToken value indicates that you have retrieved all available results.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ListHandshakesForOrganizationResponse'
              example:
                Handshakes:
                - Action: INVITE
                  Arn: arn:aws:organizations::111111111111:handshake/o-exampleorgid/invite/h-examplehandshakeid111
                  ExpirationTimestamp: '2017-01-28T14:35:23.3Z'
                  Id: h-examplehandshakeid111
                  Parties:
                  - Id: o-exampleorgid
                    Type: ORGANIZATION
                  - Id: juan@example.com
                    Type: EMAIL
                  RequestedTimestamp: '2017-01-13T14:35:23.3Z'
                  Resources:
                  - Resources:
                    - Type: MASTER_EMAIL
                      Value: bill@amazon.com
                    - Type: MASTER_NAME
                      Value: Org Master Account
                    - Type: ORGANIZATION_FEATURE_SET
                      Value: FULL
                    Type: ORGANIZATION
                    Value: o-exampleorgid
                  - Type: EMAIL
                    Value: juan@example.com
                  State: OPEN
                - Action: INVITE
                  State: ACCEPTED
                  Arn: arn:aws:organizations::111111111111:handshake/o-exampleorgid/invite/h-examplehandshakeid111
                  ExpirationTimestamp: '2017-01-28T14:35:23.3Z'
                  Id: h-examplehandshakeid222
                  Parties:
                  - Id: o-exampleorgid
                    Type: ORGANIZATION
                  - Id: anika@example.com
                    Type: EMAIL
                  RequestedTimestamp: '2017-01-13T14:35:23.3Z'
                  Resources:
                  - Resources:
                    - Type: MASTER_EMAIL
                      Value: bill@example.com
                    - Type: MASTER_NAME
                      Value: Master Account
                    Type: ORGANIZATION
                    Value: o-exampleorgid
                  - Type: EMAIL
                    Value: anika@example.com
                  - Type: NOTES
                    Value: This is an invitation to Anika's account to join Bill's organization.
        '403':
          description: AccessDeniedException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '404':
          description: AWSOrganizationsNotInUseException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AWSOrganizationsNotInUseException'
        '409':
          description: ConcurrentModificationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConcurrentModificationException'
        '400':
          description: InvalidInputException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.ListHandshakesForOrganization
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/ListHandshakesForOrganizationRequest'
      tags:
      - Handshake
components:
  schemas:
    AcceptHandshakeResponse:
      type: object
      properties:
        Handshake:
          $ref: '#/components/schemas/Handshake'
    Handshake:
      type: object
      properties:
        Id:
          type: string
          description: ID for the handshake. The regex pattern for handshake ID string requires "h-" followed by from 8 to 32 lowercase letters or digits.
        Arn:
          type: string
          description: Amazon Resource Name (ARN) for the handshake. For more information about ARNs in Organizations, see ARN Formats Supported by Organizations in the Amazon Web Services Service Authorization Reference.
        Parties:
          type: array
          items:
            $ref: '#/components/schemas/HandshakeParty'
          description: An array of HandshakeParty objects. Contains details for participant in a handshake.
        State:
          type: string
          enum:
          - REQUESTED
          - OPEN
          - CANCELED
          - ACCEPTED
          - DECLINED
          - EXPIRED
          description: 'Current state for the handshake. REQUESTED: Handshake awaiting a response from the recipient. OPEN: Handshake sent to multiple recipients and all recipients have responded. The sender can now complete the handshake action. CANCELED: Handshake canceled by the sender. ACCEPTED: Handshake accepted by the recipient. DECLINED: Handshake declined by the recipient. EXPIRED: Handshake has expired.'
        RequestedTimestamp:
          type: string
          format: date-time
          description: Timestamp when the handshake request was made.
        ExpirationTimestamp:
          type: string
          format: date-time
          description: Timestamp when the handshake expires.
        Action:
          type: string
          enum:
          - INVITE
          - ENABLE_ALL_FEATURES
          - APPROVE_ALL_FEATURES
          - ADD_ORGANIZATIONS_SERVICE_LINKED_ROLE
          - TRANSFER_RESPONSIBILITY
          description: 'The type of handshake: INVITE: Handshake sent to a standalone account requesting that it to join the sender''s organization. ENABLE_ALL_FEATURES: Handshake sent to invited member accounts to enable all features for the organization. APPROVE_ALL_FEATURES: Handshake sent to the management account when all invited member accounts have approved to enable all features. TRANSFER_RESPONSIBILITY: Handshake sent to another organization''s management account requesting that it designate the sender with the specified responsibilities for recipient''s organization.'
        Resources:
          type: array
          items:
            $ref: '#/components/schemas/HandshakeResource'
          description: An array of HandshakeResource objects. When needed, contains additional details for a handshake. For example, the email address for the sender.
    ServiceException:
      type: object
      properties:
        Message:
          type: string
    ListHandshakesForAccountResponse:
      type: object
      properties:
        Handshakes:
          type: array
          items:
            $ref: '#/components/schemas/Handshake'
          description: An array of Handshakeobjects. Contains details for a handshake.
        NextToken:
          type: string
          description: If present, indicates that more output is available than is included in the current response. Use this value in the NextToken request parameter in a subsequent call to the operation to get the next part of the output. You should repeat this until the NextToken response element comes back as null.
    ListHandshakesForOrganizationResponse:
      type: object
      properties:
        Handshakes:
          type: array
          items:
            $ref: '#/components/schemas/Handshake'
          description: An array of Handshakeobjects. Contains details for a handshake.
        NextToken:
          type: string
          description: If present, indicates that more output is available than is included in the current response. Use this value in the NextToken request parameter in a subsequent call to the operation to get the next part of the output. You should repeat this until the NextToken response element comes back as null.
    HandshakeResource:
      type: object
      properties:
        Value:
          type: string
          description: Additional information for the handshake. The format of the value string must match the requirements of the specified type.
        Type:
          type: string
          enum:
          - ACCOUNT
          - ORGANIZATION
          - ORGANIZATION_FEATURE_SET
          - EMAIL
          - MASTER_EMAIL
          - MASTER_NAME
          - NOTES
          - PARENT_HANDSHAKE
          - RESPONSIBILITY_TRANSFER
          - TRANSFER_START_TIMESTAMP
          - TRANSFER_TYPE
          - MANAGEMENT_ACCOUNT
          - MANAGEMENT_EMAIL
          - MANAGEMENT_NAME
          description: 'The type of information being passed, specifying how the value is to be interpreted by the other party: ACCOUNT: ID for an Amazon Web Services account. ORGANIZATION: ID for an organization. EMAIL: Email address for the recipient. OWNER_EMAIL: Email address for the sender. OWNER_NAME: Name of the sender. NOTES: Additional text included by the sender for the recipient.'
        Resources:
          type: array
          items:
            $ref: '#/components/schemas/HandshakeResource'
          description: An array of HandshakeResource objects. When needed, contains additional details for a handshake. For example, the email address for the sender.
    HandshakeNotFoundException:
      type: object
      properties:
        Message:
          type: string
    TooManyRequestsException:
      type: object
      properties:
        Type:
          type: string
        Message:
          type: string
    AccessDeniedException:
      type: object
      properties:
        Message:
          type: string
    ConcurrentModificationException:
      type: object
      properties:
        Message:
          type: string
    CancelHandshakeRequest:
      type: object
      properties:
        HandshakeId:
          type: string
          description: ID for the handshake that you want to cancel. You can get the ID from the ListHandshakesForOrganization operation. The regex pattern for handshake ID string requires "h-" followed by from 8 to 32 lowercase letters or digits.
      required:
      - HandshakeId
    CancelHandshakeResponse:
      type: object
      properties:
        Handshake:
          $ref: '#/components/schemas/Handshake'
    InvalidInputException:
      type: object
      properties:
        Message:
          type: string
        Reason:
          type: string
          enum:
          - INVALID_PARTY_TYPE_TARGET
          - INVALID_SYNTAX_ORGANIZATION_ARN
          - INVALID_SYNTAX_POLICY_ID
          - INVALID_ENUM
          - INVALID_ENUM_POLICY_TYPE
          - INVALID_LIST_MEMBER
          - MAX_LENGTH_EXCEEDED
          - MAX_VALUE_EXCEEDED
          - MIN_LENGTH_EXCEEDED
          - MIN_VALUE_EXCEEDED
          - IMMUTABLE_POLICY
          - INVALID_PATTERN
          - INVALID_PATTERN_TARGET_ID
          - INPUT_REQUIRED
          - INVALID_NEXT_TOKEN
          - MAX_LIMIT_EXCEEDED_FILTER
          - MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS
          - INVALID_FULL_NAME_TARGET
          - UNRECOGNIZED_SERVICE_PRINCIPAL
          - INVALID_ROLE_NAME
          - INVALID_SYSTEM_TAGS_PARAMETER
          - DUPLICATE_TAG_KEY
          - TARGET_NOT_SUPPORTED
          - INVALID_EMAIL_ADDRESS_TARGET
          - INVALID_RESOURCE_POLICY_JSON
          - INVALID_PRINCIPAL
          - UNSUPPORTED_ACTION_IN_RESOURCE_POLICY
          - UNSUPPORTED_POLICY_TYPE_IN_RESOURCE_POLICY
          - UNSUPPORTED_RESOURCE_IN_RESOURCE_POLICY
          - NON_DETACHABLE_POLICY
          - CALLER_REQUIRED_FIELD_MISSING
          - UNSUPPORTED_ACTION_IN_RESPONSIBILITY_TRANSFER
          - START_DATE_NOT_BEGINNING_OF_MONTH
          - START_DATE_NOT_BEGINNING_OF_DAY
          - START_DATE_TOO_EARLY
          - START_DATE_TOO_LATE
          - INVALID_START_DATE
          - END_DATE_NOT_END_OF_MONTH
          - END_DATE_TOO_EARLY
          - END_DATE_TOO_LATE
          - INVALID_END_DATE
    DescribeHandshakeResponse:
      type: object
      properties:
        Handshake:
          $ref: '#/components/schemas/Handshake'
    AWSOrganizationsNotInUseException:
      type: object
      properties:
        Message:
          type: string
    ListHandshakesForAccountRequest:
      type: object
      properties:
        Filter:
          $ref: '#/components/schemas/HandshakeFilter'
        NextToken:
          type: string
          description: The parameter for receiving additional results if you receive a NextToken response in a previous request. A NextToken response indicates that more output is available. Set this parameter to the value of the previous call's NextToken response to indicate where the output should continue from.
        MaxResults:
          type: integer
          description: The maximum number of items to return in the response. If more results exist than the specified MaxResults value, a token is included in the response so that you can retrieve the remaining results.
    AcceptHandshakeRequest:
      type: object
      properties:
        HandshakeId:
          type: string
          description: ID for the handshake that you want to accept. The regex pattern for handshake ID string requires "h-" followed by from 8 to 32 lowercase letters or digits.
      required:
      - HandshakeId
    DescribeHandshakeRequest:
      type: object
      properties:
        HandshakeId:
          type: string
          description: ID for the handshake that you want information about. The regex pattern for handshake ID string requires "h-" followed by from 8 to 32 lowercase letters or digits.
      required:
      - HandshakeId
    ListHandshakesForOrganizationRequest:
      type: object
      properties:
        Filter:
          $ref: '#/components/schemas/HandshakeFilter'
        NextToken:
          type: string
          description: The parameter for receiving additional results if you receive a NextToken response in a previous request. A NextToken response indicates that more output is available. Set this parameter to the value of the previous call's NextToken response to indicate where the output should continue from.
        MaxResults:
          type: integer
          description: The maximum number of items to return in the response. If more results exist than the specified MaxResults value, a token is included in the response so that you can retrieve the remaining results.
    HandshakeParty:
      type: object
      properties:
        Id:
          type: string
          description: 'ID for the participant: Acccount ID, organization ID, or email address. The regex pattern for handshake ID string requires "h-" followed by from 8 to 32 lowercase letters or digits.'
        Type:
          type: string
          enum:
          - ACCOUNT
          - ORGANIZATION
          - EMAIL
          description: The type of ID for the participant. ORGANIZATION is valid only in the response context (identifying the inviting organization). Valid input values for the Target parameter are ACCOUNT and EMAIL only.
      required:
      - Id
      - Type
    HandshakeFilter:
      type: object
      properties:
        ActionType:
          type: string
          enum:
          - INVITE
          - ENABLE_ALL_FEATURES
          - APPROVE_ALL_FEATURES
          - ADD_ORGANIZATIONS_SERVICE_LINKED_ROLE
          - TRANSFER_RESPONSIBILITY
          description: The type of handshake. If you specify ActionType, you cannot also specify ParentHandshakeId.
        ParentHandshakeId:
          type: string
          description: The parent handshake. Only used for handshake types that are a child of another type. If you specify ParentHandshakeId, you cannot also specify ActionType. The regex pattern for handshake ID string requires "h-" followed by from 8 to 32 lowercase letters or digits.
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: organizations
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/organizations/service/2016-11-28/organizations-2016-11-28.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)