- Navigation GuideYou are on a Command (operation) page with structural examples. Use the navigation breadcrumb if you would like to return to the Client landing page.
DisableOrganizationsRootCredentialsManagementCommand
Disables the management of privileged root user credentials across member accounts in your organization. When you disable this feature, the management account and the delegated administrator for IAM can no longer manage root user credentials for member accounts in your organization.
Example Syntax
Use a bare-bones client and the command you need to make an API call.
import { IAMClient, DisableOrganizationsRootCredentialsManagementCommand } from "@aws-sdk/client-iam"; // ES Modules import
// const { IAMClient, DisableOrganizationsRootCredentialsManagementCommand } = require("@aws-sdk/client-iam"); // CommonJS import
const client = new IAMClient(config);
const input = {};
const command = new DisableOrganizationsRootCredentialsManagementCommand(input);
const response = await client.send(command);
// { // DisableOrganizationsRootCredentialsManagementResponse
// OrganizationId: "STRING_VALUE",
// EnabledFeatures: [ // FeaturesListType
// "RootCredentialsManagement" || "RootSessions",
// ],
// };
Example Usage
DisableOrganizationsRootCredentialsManagementCommand Input
DisableOrganizationsRootCredentialsManagementCommandInput extends DisableOrganizationsRootCredentialsManagementRequest
DisableOrganizationsRootCredentialsManagementCommand Output
Parameter | Type | Description |
---|
Parameter | Type | Description |
---|---|---|
$metadata Required | ResponseMetadata | Metadata pertaining to this request. |
EnabledFeatures | FeatureType[] | undefined | The features enabled for centralized root access for member accounts in your organization. |
OrganizationId | string | undefined | The unique identifier (ID) of an organization. |
Throws
Name | Fault | Details |
---|
Name | Fault | Details |
---|---|---|
AccountNotManagementOrDelegatedAdministratorException | client | The request was rejected because the account making the request is not the management account or delegated administrator account for centralized root access . |
OrganizationNotFoundException | client | The request was rejected because no organization is associated with your account. |
OrganizationNotInAllFeaturesModeException | client | The request was rejected because your organization does not have All features enabled. For more information, see Available feature sets in the Organizations User Guide. |
ServiceAccessNotEnabledException | client | The request was rejected because trusted access is not enabled for IAM in Organizations. For details, see IAM and Organizations in the Organizations User Guide. |
IAMServiceException | Base exception class for all service exceptions from IAM service. |