Managing an agreement for multiple accounts in AWS Artifact - AWS Artifact

Managing an agreement for multiple accounts in AWS Artifact

If you are the owner of the management account of an AWS Organizations organization, you can accept an agreement on behalf of all accounts in your organization. You must be signed in to the master account with the correct AWS Artifact permissions to accept or terminate organization agreements. Users of member accounts with describeOrganizations permissions can view the organization agreements that are accepted on their behalf.

If your account is not part of an organization, you can create or join an organization by following the instructions in Creating and managing an organization in the AWS Organizations User Guide.

AWS Organizations has two available feature sets: consolidated billing features and all features. To use AWS Artifact for your organization, the organization that you belong to must be enabled for all features. If your organization is configured only for consolidated billing, see Enabling all features in your organization in the AWS Organizations User Guide.

If a member account is removed from an organization, that member account will no longer be covered by organization agreements. Management account administrators should communicate this to member accounts before removing member accounts from the organization, so that member accounts can put new agreements in place if necessary. A list of active organization agreements can be viewed in AWS Artifact Organization agreements.

For more information, see Managing the AWS accounts in your organization in the AWS Organizations User Guide.

Accepting an agreement for your organization

You can accept an agreement on behalf of all member accounts in your organization in AWS Organizations. Before you accept an agreement, we recommend that you consult with your legal, privacy, and compliance team.

Required permissions

To accept an agreement, the owner of the management account must have the following permissions:

artifact:DownloadAgreement artifact:AcceptAgreement organizations:DescribeOrganization organizations:EnableAWSServiceAccess organizations:ListAWSServiceAccessForOrganization iam:ListRoles iam:CreateRole iam:AttachRolePolicy

For more information, see Identity and access management.

To accept an agreement for an organization

  1. Open the AWS Artifact console at https://console.aws.amazon.com/artifact/.

  2. On the AWS Artifact dashboard, choose Agreements.

  3. Choose the Organization agreements tab.

  4. Expand the section of the agreement.

  5. Choose Download and review.

  6. Read the Terms and Conditions. When you are finished, choose Accept and download.

  7. Review the agreement and then select the check boxes to indicate that you agree.

  8. Choose Accept to accept the agreement for all existing and future accounts in your organization..

Terminating an organization agreement

If you used the AWS Artifact console to accept an agreement on behalf of all member accounts in an organization, you can use the console to terminate that agreement. Otherwise, see Offline agreements.

Required permissions

To terminate an agreement, the owner of the management account must have the following permissions:

artifact:DownloadAgreement artifact:TerminateAgreement organizations:DescribeOrganization organizations:EnableAWSServiceAccess organizations:ListAWSServiceAccessForOrganization iam:ListRoles iam:CreateRole iam:AttachRolePolicy

For more information, see Identity and access management.

To terminate your online organization agreement with AWS

  1. Open the AWS Artifact console at https://console.aws.amazon.com/artifact/.

  2. On the AWS Artifact dashboard, choose Agreements.

  3. Choose the Organization agreements tab.

  4. Select the agreement and choose Terminate agreement.

  5. Select all check boxes to indicate that you agree to terminate the agreement.

  6. Choose Terminate. When prompted for confirmation, choose Terminate.