Managing an agreement for multiple accounts in AWS Artifact
If you are the owner of the management account of an AWS Organizations organization, you can accept an
agreement on behalf of all accounts in your organization. You must be signed in to the
management account with the correct AWS Artifact permissions to accept or terminate organization agreements.
Users of member accounts with organizations:DescribeOrganization permissions can view the
organization agreements that are accepted on their behalf.
If your account is not part of an organization, you can create or join an organization by following the instructions in Creating and managing an organization in the AWS Organizations User Guide.
AWS Organizations has two available feature sets: consolidated billing features and all features. To use AWS Artifact for your organization, the organization that you belong to must be enabled for all features. If your organization is configured only for consolidated billing, see Enabling all features in your organization in the AWS Organizations User Guide.
If a member account is removed from an organization, that member account will no
longer be covered by organization agreements. Management account administrators should
communicate this to member accounts before removing member accounts from the
organization, so that member accounts can put new agreements in place if necessary. A
list of active organization agreements can be viewed in AWS Artifact Organization agreements
For more information, see Managing the AWS accounts in your organization in the AWS Organizations User Guide.
Accepting an agreement for your organization
You can accept an agreement on behalf of all member accounts in your organization in AWS Organizations. Before you accept an agreement, we recommend that you consult with your legal, privacy, and compliance team.
Required permissions
To accept an agreement, the owner of the management account must have the following permissions:
artifact:DownloadAgreement artifact:AcceptAgreement organizations:DescribeOrganization organizations:EnableAWSServiceAccess organizations:ListAWSServiceAccessForOrganization iam:ListRoles iam:CreateServiceLinkedRole
For more information, see Identity and access management.
To accept an agreement for an organization
Open the AWS Artifact console at https://console.aws.amazon.com/artifact/
. -
On the AWS Artifact dashboard, choose Agreements.
-
Choose the Organization agreements tab.
-
Expand the section of the agreement.
-
Choose Download and review.
-
Read the Terms and conditions. When you are finished, choose Accept and download.
-
Review the agreement and then select the check boxes to indicate that you agree.
-
Choose Accept to accept the agreement for all existing and future accounts in your organization..
Terminating an organization agreement
If you used the AWS Artifact console to accept an agreement on behalf of all member accounts in an organization, you can use the console to terminate that agreement. Otherwise, see Offline agreements.
Required permissions
To terminate an agreement, the owner of the management account must have the following permissions:
artifact:DownloadAgreement artifact:TerminateAgreement organizations:DescribeOrganization organizations:EnableAWSServiceAccess organizations:ListAWSServiceAccessForOrganization iam:ListRoles iam:CreateServiceLinkedRole
For more information, see Identity and access management.
To terminate your online organization agreement with AWS
Open the AWS Artifact console at https://console.aws.amazon.com/artifact/
. -
On the AWS Artifact dashboard, choose Agreements.
-
Choose the Organization agreements tab.
-
Select the agreement and choose Terminate agreement.
-
Select all check boxes to indicate that you agree to terminate the agreement.
-
Choose Terminate. When prompted for confirmation, choose Terminate.
