Reference: API operations by account

This page lists all AWS Organizations API operations, grouped by the account that can call them. Choose any API operation to learn more about using it.

Operations you can call from only the organization's management account

• CancelHandshake

• CreateAccount

• CreateGovCloudAccount (only under specific conditions)

• CreateOrganization (the AWS account that calls this operation becomes the management account of the organization after the operation completes)

• CreateOrganizationalUnit

• DeleteOrganization

• DeleteOrganizationalUnit

• DeregisterDelegatedAdministrator

• DisableAWSServiceAccess

• EnableAllFeatures

• EnableAWSServiceAccess

• InviteAccountToOrganization

• MoveAccount

• RegisterDelegatedAdministrator

• RemoveAccountFromOrganization

• UpdateOrganizationalUnit

Operations you can call from only the organization's management account or a member account designated as a delegated administrator

• AttachPolicy

• CreatePolicy

• DeletePolicy

• DescribeAccount

• DescribeCreateAccountStatus

• DescribeEffectivePolicy

• DescribeOrganization

• DescribeOrganizationalUnit

• DescribePolicy

• DescribeResourcePolicy

• DetachPolicy

• DisablePolicyType

• EnablePolicyType

• ListAccounts

• ListAccountsForParent

• ListAWSServiceAccessForOrganization

• ListChildren

• ListCreateAccountStatus

• ListDelegatedAdministrators

• ListDelegatedServicesForAccount

• ListHandshakesForOrganization

• ListOrganizationalUnitsForParent

• ListParents

• ListPolicies

• ListPoliciesForTarget

• ListRoots

• ListTagsForResource

• ListTargetsForPolicy

• TagResource

• UntagResource

• UpdatePolicy

Operations you can call from only a member account in the organization

• AcceptHandshake (can be called from only the account that received the handshake/invitation)

• DeclineHandshake (can be called from only the account that received the handshake/invitation)

• LeaveOrganization

Operations you can call from any account in the organization

These operations can be called from any account in the organization.

• DescribeHandshake

• DescribeEffectivePolicy (A member account can call this operation only if the TargetId parameter is set to the member account's own ID - it can't target another account.)

• DescribeOrganization

• ListHandshakesForAccount