Amazon Organizations

Amazon Organizations Organizations Resource Policy API

The Organizations Resource Policy API from Amazon Organizations — 3 operation(s) for organizations resource policy.

GitHub OpenAPI

Operations 3

POST /#DeleteResourcePolicy Delete Resource Policy #
POST /#DescribeResourcePolicy Describe Resource Policy #
POST /#PutResourcePolicy Put Resource Policy #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/amazon-organizations/openapi/amazon-organizations-resource-policy-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/amazon-organizations:amazon-organizations-resource-policy-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

amazon-organizations-resource-policy-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: AWS Organizations Resource Policy API
  version: '2016-11-28'
  description: Generated from AWS's published Smithy model for AWS Organizations. 3 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://organizations.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
tags:
- name: Resource Policy
paths:
  /#DeleteResourcePolicy:
    post:
      operationId: DeleteResourcePolicy
      summary: Delete Resource Policy
      description: Deletes the resource policy from your organization. You can only call this operation from the management account.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                type: string
        '403':
          description: AccessDeniedException; UnsupportedAPIEndpointException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '404':
          description: AWSOrganizationsNotInUseException; ResourcePolicyNotFoundException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AWSOrganizationsNotInUseException'
        '409':
          description: ConcurrentModificationException; ConstraintViolationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConcurrentModificationException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.DeleteResourcePolicy
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              type: string
      tags:
      - Resource Policy
  /#DescribeResourcePolicy:
    post:
      operationId: DescribeResourcePolicy
      summary: Describe Resource Policy
      description: Retrieves information about a resource policy. You can only call this operation from the management account or a member account that is a delegated administrator.
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/DescribeResourcePolicyResponse'
        '403':
          description: AccessDeniedException; UnsupportedAPIEndpointException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '404':
          description: AWSOrganizationsNotInUseException; ResourcePolicyNotFoundException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AWSOrganizationsNotInUseException'
        '409':
          description: ConstraintViolationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConstraintViolationException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.DescribeResourcePolicy
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              type: string
      tags:
      - Resource Policy
  /#PutResourcePolicy:
    post:
      operationId: PutResourcePolicy
      summary: Put Resource Policy
      description: Creates or updates a resource policy. You can only call this operation from the management account..
      responses:
        '200':
          description: Success
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/PutResourcePolicyResponse'
        '403':
          description: AccessDeniedException; UnsupportedAPIEndpointException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AccessDeniedException'
        '404':
          description: AWSOrganizationsNotInUseException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/AWSOrganizationsNotInUseException'
        '409':
          description: ConcurrentModificationException; ConstraintViolationException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ConcurrentModificationException'
        '400':
          description: InvalidInputException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/InvalidInputException'
        '500':
          description: ServiceException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '429':
          description: TooManyRequestsException
          content:
            application/x-amz-json-1.1:
              schema:
                $ref: '#/components/schemas/TooManyRequestsException'
      parameters:
      - name: X-Amz-Target
        in: header
        required: true
        schema:
          type: string
          enum:
          - AWSOrganizationsV20161128.PutResourcePolicy
      requestBody:
        required: true
        content:
          application/x-amz-json-1.1:
            schema:
              $ref: '#/components/schemas/PutResourcePolicyRequest'
      tags:
      - Resource Policy
components:
  schemas:
    InvalidInputException:
      type: object
      properties:
        Message:
          type: string
        Reason:
          type: string
          enum:
          - INVALID_PARTY_TYPE_TARGET
          - INVALID_SYNTAX_ORGANIZATION_ARN
          - INVALID_SYNTAX_POLICY_ID
          - INVALID_ENUM
          - INVALID_ENUM_POLICY_TYPE
          - INVALID_LIST_MEMBER
          - MAX_LENGTH_EXCEEDED
          - MAX_VALUE_EXCEEDED
          - MIN_LENGTH_EXCEEDED
          - MIN_VALUE_EXCEEDED
          - IMMUTABLE_POLICY
          - INVALID_PATTERN
          - INVALID_PATTERN_TARGET_ID
          - INPUT_REQUIRED
          - INVALID_NEXT_TOKEN
          - MAX_LIMIT_EXCEEDED_FILTER
          - MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS
          - INVALID_FULL_NAME_TARGET
          - UNRECOGNIZED_SERVICE_PRINCIPAL
          - INVALID_ROLE_NAME
          - INVALID_SYSTEM_TAGS_PARAMETER
          - DUPLICATE_TAG_KEY
          - TARGET_NOT_SUPPORTED
          - INVALID_EMAIL_ADDRESS_TARGET
          - INVALID_RESOURCE_POLICY_JSON
          - INVALID_PRINCIPAL
          - UNSUPPORTED_ACTION_IN_RESOURCE_POLICY
          - UNSUPPORTED_POLICY_TYPE_IN_RESOURCE_POLICY
          - UNSUPPORTED_RESOURCE_IN_RESOURCE_POLICY
          - NON_DETACHABLE_POLICY
          - CALLER_REQUIRED_FIELD_MISSING
          - UNSUPPORTED_ACTION_IN_RESPONSIBILITY_TRANSFER
          - START_DATE_NOT_BEGINNING_OF_MONTH
          - START_DATE_NOT_BEGINNING_OF_DAY
          - START_DATE_TOO_EARLY
          - START_DATE_TOO_LATE
          - INVALID_START_DATE
          - END_DATE_NOT_END_OF_MONTH
          - END_DATE_TOO_EARLY
          - END_DATE_TOO_LATE
          - INVALID_END_DATE
    PutResourcePolicyRequest:
      type: object
      properties:
        Content:
          type: string
          description: If provided, the new content for the resource policy. The text must be correctly formatted JSON that complies with the syntax for the resource policy's type. For more information, see SCP syntax in the Organizations User Guide.
        Tags:
          type: array
          items:
            $ref: '#/components/schemas/Tag'
          description: A list of tags that you want to attach to the newly created resource policy. For each tag in the list, you must specify both a tag key and a value. You can set the value to an empty string, but you can't set it to null. For more information about tagging, see Tagging Organizations resources in the Organizations User Guide. Calls with tags apply to the initial creation of the resource policy, otherwise an exception is thrown. If any one of the tags is not valid or if you exceed the allowed number of tags for the resource policy, then the entire request fails and the resource policy is not creat
      required:
      - Content
    Tag:
      type: object
      properties:
        Key:
          type: string
          description: The key identifier, or name, of the tag.
        Value:
          type: string
          description: The string value that's associated with the key of the tag. You can set the value of a tag to an empty string, but you can't set the value of a tag to null.
      required:
      - Key
      - Value
    ResourcePolicySummary:
      type: object
      properties:
        Id:
          type: string
          description: The unique identifier (ID) of the resource policy.
        Arn:
          type: string
          description: The Amazon Resource Name (ARN) of the resource policy.
    AWSOrganizationsNotInUseException:
      type: object
      properties:
        Message:
          type: string
    PutResourcePolicyResponse:
      type: object
      properties:
        ResourcePolicy:
          $ref: '#/components/schemas/ResourcePolicy'
    ConstraintViolationException:
      type: object
      properties:
        Message:
          type: string
        Reason:
          type: string
          enum:
          - ACCOUNT_NUMBER_LIMIT_EXCEEDED
          - HANDSHAKE_RATE_LIMIT_EXCEEDED
          - OU_NUMBER_LIMIT_EXCEEDED
          - OU_DEPTH_LIMIT_EXCEEDED
          - POLICY_NUMBER_LIMIT_EXCEEDED
          - POLICY_CONTENT_LIMIT_EXCEEDED
          - MAX_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED
          - MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED
          - ACCOUNT_CANNOT_LEAVE_ORGANIZATION
          - ACCOUNT_CANNOT_LEAVE_WITHOUT_EULA
          - ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION
          - MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED
          - MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED
          - ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED
          - MASTER_ACCOUNT_ADDRESS_DOES_NOT_MATCH_MARKETPLACE
          - MASTER_ACCOUNT_MISSING_CONTACT_INFO
          - MASTER_ACCOUNT_NOT_GOVCLOUD_ENABLED
          - ORGANIZATION_NOT_IN_ALL_FEATURES_MODE
          - CREATE_ORGANIZATION_IN_BILLING_MODE_UNSUPPORTED_REGION
          - EMAIL_VERIFICATION_CODE_EXPIRED
          - WAIT_PERIOD_ACTIVE
          - MAX_TAG_LIMIT_EXCEEDED
          - TAG_POLICY_VIOLATION
          - MAX_DELEGATED_ADMINISTRATORS_FOR_SERVICE_LIMIT_EXCEEDED
          - CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR
          - CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG
          - DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE
          - POLICY_TYPE_ENABLED_FOR_THIS_SERVICE
          - MASTER_ACCOUNT_MISSING_BUSINESS_LICENSE
          - CANNOT_CLOSE_MANAGEMENT_ACCOUNT
          - CLOSE_ACCOUNT_QUOTA_EXCEEDED
          - CLOSE_ACCOUNT_REQUESTS_LIMIT_EXCEEDED
          - SERVICE_ACCESS_NOT_ENABLED
          - INVALID_PAYMENT_INSTRUMENT
          - ACCOUNT_CREATION_NOT_COMPLETE
          - CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR
          - ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED
          - RESPONSIBILITY_TRANSFER_MAX_LEVEL_VIOLATION
          - RESPONSIBILITY_TRANSFER_MAX_INBOUND_QUOTA_VIOLATION
          - RESPONSIBILITY_TRANSFER_MAX_OUTBOUND_QUOTA_VIOLATION
          - RESPONSIBILITY_TRANSFER_MAX_TRANSFERS_QUOTA_VIOLATION
          - ACTIVE_RESPONSIBILITY_TRANSFER_PROCESS
          - TRANSFER_RESPONSIBILITY_TARGET_DELETION_IN_PROGRESS
          - TRANSFER_RESPONSIBILITY_SOURCE_DELETION_IN_PROGRESS
          - UNSUPPORTED_PRICING
          - UNMET_BILLING_PREREQUISITE
          - ACCOUNT_NOT_ACTIVE_FOR_TRANSFER_RESPONSIBILITY
          - TRANSFER_RESPONSIBILITY_UPDATE_NOT_ALLOWED
    ResourcePolicy:
      type: object
      properties:
        ResourcePolicySummary:
          $ref: '#/components/schemas/ResourcePolicySummary'
        Content:
          type: string
          description: The policy text of the resource policy.
    AccessDeniedException:
      type: object
      properties:
        Message:
          type: string
    TooManyRequestsException:
      type: object
      properties:
        Type:
          type: string
        Message:
          type: string
    ConcurrentModificationException:
      type: object
      properties:
        Message:
          type: string
    ServiceException:
      type: object
      properties:
        Message:
          type: string
    DescribeResourcePolicyResponse:
      type: object
      properties:
        ResourcePolicy:
          $ref: '#/components/schemas/ResourcePolicy'
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: organizations
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/organizations/service/2016-11-28/organizations-2016-11-28.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)