Deleting the organization by removing the management account
When you no longer need your organization, you can delete it. This removes the management account from the organization and deletes the organization itself. The former management account becomes a standalone AWS account. You then have three options: You can continue to use it as a standalone account, you can use it to create a different organization, or you can accept an invitation from another organization to add the account to that organization as a member account.
-
If you delete an organization, you can't recover it. If you created any policies inside of the organization, they're also deleted and you can't recover them.
-
You can delete an organization only after you remove all member accounts from the organization. If you created some of your member accounts using AWS Organizations, you might be blocked from removing those accounts. You can remove a member account only if it has all the information that's required to operate as a standalone AWS account. For more information about how to provide that information and then remove the account, see Leaving an organization as a member account.
-
If you closed a member account before you remove it from the organization, it enters a 'suspended' state for a period of time and you can't remove the account from the organization until it is finally closed. This can take up to 90 days and can prevent you from deleting the organization until all member accounts are completely closed.
When you remove the management account from an organization by deleting the organization, it can affect the account in the following ways:
-
The account is responsible for paying only its own charges and is no longer responsible for the charges incurred by any other account.
-
Integration with other services might be disabled. For example, AWS IAM Identity Center (successor to AWS Single Sign-On) requires an organization to operate, so if you remove an account from an organization that supports IAM Identity Center, the users in that account can no longer use that service.
The management account of an organization is never affected by service control policies (SCPs), so there is no change in permissions after SCPs are no longer available.
To delete an organization, you must sign in as a user or role in the management account, and you must have the following permissions:
-
organizations:DeleteOrganization
-
organizations:DescribeOrganization
– required only when using the Organizations console