DisableOrganizationsRootCredentialsManagementCommand

Disables the management of privileged root user credentials across member accounts in your organization. When you disable this feature, the management account and the delegated administrator for IAM can no longer manage root user credentials for member accounts in your organization.

Example Syntax

Use a bare-bones client and the command you need to make an API call.

import { IAMClient, DisableOrganizationsRootCredentialsManagementCommand } from "@aws-sdk/client-iam"; // ES Modules import
// const { IAMClient, DisableOrganizationsRootCredentialsManagementCommand } = require("@aws-sdk/client-iam"); // CommonJS import
const client = new IAMClient(config);
const input = {};
const command = new DisableOrganizationsRootCredentialsManagementCommand(input);
const response = await client.send(command);
// { // DisableOrganizationsRootCredentialsManagementResponse
//   OrganizationId: "STRING_VALUE",
//   EnabledFeatures: [ // FeaturesListType
//     "RootCredentialsManagement" || "RootSessions",
//   ],
// };

Example Usage

 There was an error loading the code editor. Retry

DisableOrganizationsRootCredentialsManagementCommand Input

See DisableOrganizationsRootCredentialsManagementCommandInput for more details
DisableOrganizationsRootCredentialsManagementCommandInput extends DisableOrganizationsRootCredentialsManagementRequest 

DisableOrganizationsRootCredentialsManagementCommand Output

Parameter
Type
Description
$metadata
Required
ResponseMetadata
Metadata pertaining to this request.
EnabledFeatures
FeatureType[] | undefined

The features enabled for centralized root access for member accounts in your organization.

OrganizationId
string | undefined

The unique identifier (ID) of an organization.

Throws

Name
Fault
Details
AccountNotManagementOrDelegatedAdministratorException
client

The request was rejected because the account making the request is not the management account or delegated administrator account for centralized root access .

OrganizationNotFoundException
client

The request was rejected because no organization is associated with your account.

OrganizationNotInAllFeaturesModeException
client

The request was rejected because your organization does not have All features enabled. For more information, see Available feature sets  in the Organizations User Guide.

ServiceAccessNotEnabledException
client

The request was rejected because trusted access is not enabled for IAM in Organizations. For details, see IAM and Organizations in the Organizations User Guide.

IAMServiceException
Base exception class for all service exceptions from IAM service.