amazonka-organizations 1.6.1 → 2.0

raw patch · 180 files changed

+22542/−10043 lines, 180 filesdep +case-insensitivedep ~amazonka-coredep ~amazonka-testdep ~basesetup-changedPVP ok

version bump matches the API change (PVP)

Dependencies added: case-insensitive

Dependency ranges changed: amazonka-core, amazonka-test, base

API changes (from Hackage documentation)

Files

• README.md +3/−4
• Setup.hs +0/−2
• amazonka-organizations.cabal +165/−116
• fixture/CloseAccount.yaml +10/−0
• fixture/CloseAccountResponse.proto +0/−0
• fixture/CreateGovCloudAccount.yaml +10/−0
• fixture/CreateGovCloudAccountResponse.proto +0/−0
• fixture/DeleteResourcePolicy.yaml +10/−0
• fixture/DeleteResourcePolicyResponse.proto +0/−0
• fixture/DeregisterDelegatedAdministrator.yaml +10/−0
• fixture/DeregisterDelegatedAdministratorResponse.proto +0/−0
• fixture/DescribeEffectivePolicy.yaml +10/−0
• fixture/DescribeEffectivePolicyResponse.proto +0/−0
• fixture/DescribeResourcePolicy.yaml +10/−0
• fixture/DescribeResourcePolicyResponse.proto +0/−0
• fixture/ListDelegatedAdministrators.yaml +10/−0
• fixture/ListDelegatedAdministratorsResponse.proto +0/−0
• fixture/ListDelegatedServicesForAccount.yaml +10/−0
• fixture/ListDelegatedServicesForAccountResponse.proto +0/−0
• fixture/ListTagsForResource.yaml +10/−0
• fixture/ListTagsForResourceResponse.proto +0/−0
• fixture/PutResourcePolicy.yaml +10/−0
• fixture/PutResourcePolicyResponse.proto +0/−0
• fixture/RegisterDelegatedAdministrator.yaml +10/−0
• fixture/RegisterDelegatedAdministratorResponse.proto +0/−0
• fixture/TagResource.yaml +10/−0
• fixture/TagResourceResponse.proto +0/−0
• fixture/UntagResource.yaml +10/−0
• fixture/UntagResourceResponse.proto +0/−0
• gen/Amazonka/Organizations.hs +792/−0
• gen/Amazonka/Organizations/AcceptHandshake.hs +209/−0
• gen/Amazonka/Organizations/AttachPolicy.hs +226/−0
• gen/Amazonka/Organizations/CancelHandshake.hs +192/−0
• gen/Amazonka/Organizations/CloseAccount.hs +172/−0
• gen/Amazonka/Organizations/CreateAccount.hs +536/−0
• gen/Amazonka/Organizations/CreateGovCloudAccount.hs +592/−0
• gen/Amazonka/Organizations/CreateOrganization.hs +232/−0
• gen/Amazonka/Organizations/CreateOrganizationalUnit.hs +278/−0
• gen/Amazonka/Organizations/CreatePolicy.hs +310/−0
• gen/Amazonka/Organizations/DeclineHandshake.hs +195/−0
• gen/Amazonka/Organizations/DeleteOrganization.hs +115/−0
• gen/Amazonka/Organizations/DeleteOrganizationalUnit.hs +174/−0
• gen/Amazonka/Organizations/DeletePolicy.hs +152/−0
• gen/Amazonka/Organizations/DeleteResourcePolicy.hs +116/−0
• gen/Amazonka/Organizations/DeregisterDelegatedAdministrator.hs +217/−0
• gen/Amazonka/Organizations/DescribeAccount.hs +186/−0
• gen/Amazonka/Organizations/DescribeCreateAccountStatus.hs +209/−0
• gen/Amazonka/Organizations/DescribeEffectivePolicy.hs +231/−0
• gen/Amazonka/Organizations/DescribeHandshake.hs +197/−0
• gen/Amazonka/Organizations/DescribeOrganization.hs +173/−0
• gen/Amazonka/Organizations/DescribeOrganizationalUnit.hs +207/−0
• gen/Amazonka/Organizations/DescribePolicy.hs +189/−0
• gen/Amazonka/Organizations/DescribeResourcePolicy.hs +155/−0
• gen/Amazonka/Organizations/DetachPolicy.hs +229/−0
• gen/Amazonka/Organizations/DisableAWSServiceAccess.hs +215/−0
• gen/Amazonka/Organizations/DisablePolicyType.hs +248/−0
• gen/Amazonka/Organizations/EnableAWSServiceAccess.hs +174/−0
• gen/Amazonka/Organizations/EnableAllFeatures.hs +184/−0
• gen/Amazonka/Organizations/EnablePolicyType.hs +244/−0
• gen/Amazonka/Organizations/InviteAccountToOrganization.hs +336/−0
• gen/Amazonka/Organizations/LeaveOrganization.hs +167/−0
• gen/Amazonka/Organizations/Lens.hs +540/−0
• gen/Amazonka/Organizations/ListAWSServiceAccessForOrganization.hs +327/−0
• gen/Amazonka/Organizations/ListAccounts.hs +280/−0
• gen/Amazonka/Organizations/ListAccountsForParent.hs +305/−0
• gen/Amazonka/Organizations/ListChildren.hs +347/−0
• gen/Amazonka/Organizations/ListCreateAccountStatus.hs +314/−0
• gen/Amazonka/Organizations/ListDelegatedAdministrators.hs +309/−0
• gen/Amazonka/Organizations/ListDelegatedServicesForAccount.hs +319/−0
• gen/Amazonka/Organizations/ListHandshakesForAccount.hs +322/−0
• gen/Amazonka/Organizations/ListHandshakesForOrganization.hs +332/−0
• gen/Amazonka/Organizations/ListOrganizationalUnitsForParent.hs +362/−0
• gen/Amazonka/Organizations/ListParents.hs +331/−0
• gen/Amazonka/Organizations/ListPolicies.hs +327/−0
• gen/Amazonka/Organizations/ListPoliciesForTarget.hs +383/−0
• gen/Amazonka/Organizations/ListRoots.hs +285/−0
• gen/Amazonka/Organizations/ListTagsForResource.hs +299/−0
• gen/Amazonka/Organizations/ListTargetsForPolicy.hs +315/−0
• gen/Amazonka/Organizations/MoveAccount.hs +254/−0
• gen/Amazonka/Organizations/PutResourcePolicy.hs +230/−0
• gen/Amazonka/Organizations/RegisterDelegatedAdministrator.hs +194/−0
• gen/Amazonka/Organizations/RemoveAccountFromOrganization.hs +196/−0
• gen/Amazonka/Organizations/TagResource.hs +218/−0
• gen/Amazonka/Organizations/Types.hs +1093/−0
• gen/Amazonka/Organizations/Types/Account.hs +192/−0
• gen/Amazonka/Organizations/Types/AccountJoinedMethod.hs +71/−0
• gen/Amazonka/Organizations/Types/AccountStatus.hs +76/−0
• gen/Amazonka/Organizations/Types/ActionType.hs +81/−0
• gen/Amazonka/Organizations/Types/Child.hs +114/−0
• gen/Amazonka/Organizations/Types/ChildType.hs +71/−0
• gen/Amazonka/Organizations/Types/CreateAccountFailureReason.hs +136/−0
• gen/Amazonka/Organizations/Types/CreateAccountState.hs +76/−0
• gen/Amazonka/Organizations/Types/CreateAccountStatus.hs +358/−0
• gen/Amazonka/Organizations/Types/DelegatedAdministrator.hs +173/−0
• gen/Amazonka/Organizations/Types/DelegatedService.hs +95/−0
• gen/Amazonka/Organizations/Types/EffectivePolicy.hs +112/−0
• gen/Amazonka/Organizations/Types/EffectivePolicyType.hs +76/−0
• gen/Amazonka/Organizations/Types/EnabledServicePrincipal.hs +93/−0
• gen/Amazonka/Organizations/Types/Handshake.hs +327/−0
• gen/Amazonka/Organizations/Types/HandshakeFilter.hs +119/−0
• gen/Amazonka/Organizations/Types/HandshakeParty.hs +109/−0
• gen/Amazonka/Organizations/Types/HandshakePartyType.hs +76/−0
• gen/Amazonka/Organizations/Types/HandshakeResource.hs +157/−0
• gen/Amazonka/Organizations/Types/HandshakeResourceType.hs +101/−0
• gen/Amazonka/Organizations/Types/HandshakeState.hs +91/−0
• gen/Amazonka/Organizations/Types/IAMUserAccessToBilling.hs +71/−0
• gen/Amazonka/Organizations/Types/Organization.hs +236/−0
• gen/Amazonka/Organizations/Types/OrganizationFeatureSet.hs +71/−0
• gen/Amazonka/Organizations/Types/OrganizationalUnit.hs +141/−0
• gen/Amazonka/Organizations/Types/Parent.hs +118/−0
• gen/Amazonka/Organizations/Types/ParentType.hs +71/−0
• gen/Amazonka/Organizations/Types/Policy.hs +87/−0
• gen/Amazonka/Organizations/Types/PolicySummary.hs +176/−0
• gen/Amazonka/Organizations/Types/PolicyTargetSummary.hs +173/−0
• gen/Amazonka/Organizations/Types/PolicyType.hs +81/−0
• gen/Amazonka/Organizations/Types/PolicyTypeStatus.hs +76/−0
• gen/Amazonka/Organizations/Types/PolicyTypeSummary.hs +95/−0
• gen/Amazonka/Organizations/Types/ResourcePolicy.hs +88/−0
• gen/Amazonka/Organizations/Types/ResourcePolicySummary.hs +84/−0
• gen/Amazonka/Organizations/Types/Root.hs +163/−0
• gen/Amazonka/Organizations/Types/Tag.hs +110/−0
• gen/Amazonka/Organizations/Types/TargetType.hs +76/−0
• gen/Amazonka/Organizations/UntagResource.hs +202/−0
• gen/Amazonka/Organizations/UpdateOrganizationalUnit.hs +233/−0
• gen/Amazonka/Organizations/UpdatePolicy.hs +253/−0
• gen/Amazonka/Organizations/Waiters.hs +24/−0
• gen/Network/AWS/Organizations.hs +0/−570
• gen/Network/AWS/Organizations/AcceptHandshake.hs +0/−147
• gen/Network/AWS/Organizations/AttachPolicy.hs +0/−140
• gen/Network/AWS/Organizations/CancelHandshake.hs +0/−137
• gen/Network/AWS/Organizations/CreateAccount.hs +0/−183
• gen/Network/AWS/Organizations/CreateOrganization.hs +0/−136
• gen/Network/AWS/Organizations/CreateOrganizationalUnit.hs +0/−152
• gen/Network/AWS/Organizations/CreatePolicy.hs +0/−172
• gen/Network/AWS/Organizations/DeclineHandshake.hs +0/−137
• gen/Network/AWS/Organizations/DeleteOrganization.hs +0/−97
• gen/Network/AWS/Organizations/DeleteOrganizationalUnit.hs +0/−116
• gen/Network/AWS/Organizations/DeletePolicy.hs +0/−110
• gen/Network/AWS/Organizations/DescribeAccount.hs +0/−134
• gen/Network/AWS/Organizations/DescribeCreateAccountStatus.hs +0/−144
• gen/Network/AWS/Organizations/DescribeHandshake.hs +0/−137
• gen/Network/AWS/Organizations/DescribeOrganization.hs +0/−123
• gen/Network/AWS/Organizations/DescribeOrganizationalUnit.hs +0/−143
• gen/Network/AWS/Organizations/DescribePolicy.hs +0/−134
• gen/Network/AWS/Organizations/DetachPolicy.hs +0/−124
• gen/Network/AWS/Organizations/DisableAWSServiceAccess.hs +0/−122
• gen/Network/AWS/Organizations/DisablePolicyType.hs +0/−146
• gen/Network/AWS/Organizations/EnableAWSServiceAccess.hs +0/−118
• gen/Network/AWS/Organizations/EnableAllFeatures.hs +0/−130
• gen/Network/AWS/Organizations/EnablePolicyType.hs +0/−150
• gen/Network/AWS/Organizations/InviteAccountToOrganization.hs +0/−151
• gen/Network/AWS/Organizations/LeaveOrganization.hs +0/−106
• gen/Network/AWS/Organizations/ListAWSServiceAccessForOrganization.hs +0/−185
• gen/Network/AWS/Organizations/ListAccounts.hs +0/−165
• gen/Network/AWS/Organizations/ListAccountsForParent.hs +0/−181
• gen/Network/AWS/Organizations/ListChildren.hs +0/−191
• gen/Network/AWS/Organizations/ListCreateAccountStatus.hs +0/−178
• gen/Network/AWS/Organizations/ListHandshakesForAccount.hs +0/−181
• gen/Network/AWS/Organizations/ListHandshakesForOrganization.hs +0/−183
• gen/Network/AWS/Organizations/ListOrganizationalUnitsForParent.hs +0/−192
• gen/Network/AWS/Organizations/ListParents.hs +0/−177
• gen/Network/AWS/Organizations/ListPolicies.hs +0/−177
• gen/Network/AWS/Organizations/ListPoliciesForTarget.hs +0/−192
• gen/Network/AWS/Organizations/ListRoots.hs +0/−165
• gen/Network/AWS/Organizations/ListTargetsForPolicy.hs +0/−181
• gen/Network/AWS/Organizations/MoveAccount.hs +0/−137
• gen/Network/AWS/Organizations/RemoveAccountFromOrganization.hs +0/−124
• gen/Network/AWS/Organizations/Types.hs +0/−674
• gen/Network/AWS/Organizations/Types/Product.hs +0/−1005
• gen/Network/AWS/Organizations/Types/Sum.hs +0/−500
• gen/Network/AWS/Organizations/UpdateOrganizationalUnit.hs +0/−152
• gen/Network/AWS/Organizations/UpdatePolicy.hs +0/−168
• gen/Network/AWS/Organizations/Waiters.hs +0/−21
• test/Main.hs +11/−9
• test/Test/AWS/Gen/Organizations.hs +0/−795
• test/Test/AWS/Organizations.hs +0/−20
• test/Test/AWS/Organizations/Internal.hs +0/−9
• test/Test/Amazonka/Gen/Organizations.hs +1138/−0
• test/Test/Amazonka/Organizations.hs +20/−0
• test/Test/Amazonka/Organizations/Internal.hs +8/−0

@@ -7,9 +7,8 @@   ## Version--`1.6.1`-+ +`2.0` - Derived from API version @2016-11-28@ of the AWS service descriptions, licensed under Apache 2.0.  ## Description @@ -26,7 +25,7 @@ The provided lenses should be compatible with any of the major lens libraries [lens](http://hackage.haskell.org/package/lens) or [lens-family-core](http://hackage.haskell.org/package/lens-family-core). -See [Network.AWS.Organizations](http://hackage.haskell.org/package/amazonka-organizations/docs/Network-AWS-Organizations.html)+See [Amazonka.Organizations](http://hackage.haskell.org/package/amazonka-organizations/docs/Amazonka-Organizations.html) or [the AWS documentation](https://aws.amazon.com/documentation/) to get started.  

@@ -1,2 +0,0 @@-import           Distribution.Simple-main = defaultMain

@@ -1,127 +1,176 @@-name:                  amazonka-organizations-version:               1.6.1-synopsis:              Amazon Organizations SDK.-homepage:              https://github.com/brendanhay/amazonka-bug-reports:           https://github.com/brendanhay/amazonka/issues-license:               MPL-2.0-license-file:          LICENSE-author:                Brendan Hay-maintainer:            Brendan Hay <brendan.g.hay+amazonka@gmail.com>-copyright:             Copyright (c) 2013-2018 Brendan Hay-category:              Network, AWS, Cloud, Distributed Computing-build-type:            Simple-cabal-version:         >= 1.10-extra-source-files:    README.md fixture/*.yaml fixture/*.proto src/.gitkeep+cabal-version:      2.2+name:               amazonka-organizations+version:            2.0+synopsis:           Amazon Organizations SDK.+homepage:           https://github.com/brendanhay/amazonka+bug-reports:        https://github.com/brendanhay/amazonka/issues+license:            MPL-2.0+license-file:       LICENSE+author:             Brendan Hay+maintainer:+  Brendan Hay <brendan.g.hay+amazonka@gmail.com>, Jack Kelly <jack@jackkelly.name>++copyright:          Copyright (c) 2013-2023 Brendan Hay+category:           AWS+build-type:         Simple+extra-source-files:+  fixture/*.proto+  fixture/*.yaml+  README.md+  src/.gitkeep+ description:-    The types from this library are intended to be used with-    <http://hackage.haskell.org/package/amazonka amazonka>, which provides-    mechanisms for specifying AuthN/AuthZ information, sending requests,-    and receiving responses.-    .-    Lenses are used for constructing and manipulating types,-    due to the depth of nesting of AWS types and transparency regarding-    de/serialisation into more palatable Haskell values.-    The provided lenses should be compatible with any of the major lens libraries-    such as <http://hackage.haskell.org/package/lens lens> or-    <http://hackage.haskell.org/package/lens-family-core lens-family-core>.-    .-    See "Network.AWS.Organizations" or <https://aws.amazon.com/documentation/ the AWS documentation>-    to get started.+  Derived from API version @2016-11-28@ of the AWS service descriptions, licensed under Apache 2.0.+  .+  The types from this library are intended to be used with <http://hackage.haskell.org/package/amazonka amazonka>,+  which provides mechanisms for specifying AuthN/AuthZ information, sending requests, and receiving responses.+  .+  It is recommended to use generic lenses or optics from packages such as <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify optional fields and deconstruct responses.+  .+  Generated lenses can be found in "Amazonka.Organizations.Lens" and are+  suitable for use with a lens package such as <http://hackage.haskell.org/package/lens lens> or <http://hackage.haskell.org/package/lens-family-core lens-family-core>.+  .+  See "Amazonka.Organizations" and the <https://aws.amazon.com/documentation/ AWS documentation> to get started.  source-repository head-    type:              git-    location:          git://github.com/brendanhay/amazonka.git-    subdir:            amazonka-organizations+  type:     git+  location: git://github.com/brendanhay/amazonka.git+  subdir:   amazonka-organizations  library-    default-language:  Haskell2010-    hs-source-dirs:    src gen--    ghc-options:-        -Wall-        -fwarn-incomplete-uni-patterns-        -fwarn-incomplete-record-updates-        -funbox-strict-fields--    exposed-modules:-          Network.AWS.Organizations-        , Network.AWS.Organizations.AcceptHandshake-        , Network.AWS.Organizations.AttachPolicy-        , Network.AWS.Organizations.CancelHandshake-        , Network.AWS.Organizations.CreateAccount-        , Network.AWS.Organizations.CreateOrganization-        , Network.AWS.Organizations.CreateOrganizationalUnit-        , Network.AWS.Organizations.CreatePolicy-        , Network.AWS.Organizations.DeclineHandshake-        , Network.AWS.Organizations.DeleteOrganization-        , Network.AWS.Organizations.DeleteOrganizationalUnit-        , Network.AWS.Organizations.DeletePolicy-        , Network.AWS.Organizations.DescribeAccount-        , Network.AWS.Organizations.DescribeCreateAccountStatus-        , Network.AWS.Organizations.DescribeHandshake-        , Network.AWS.Organizations.DescribeOrganization-        , Network.AWS.Organizations.DescribeOrganizationalUnit-        , Network.AWS.Organizations.DescribePolicy-        , Network.AWS.Organizations.DetachPolicy-        , Network.AWS.Organizations.DisableAWSServiceAccess-        , Network.AWS.Organizations.DisablePolicyType-        , Network.AWS.Organizations.EnableAWSServiceAccess-        , Network.AWS.Organizations.EnableAllFeatures-        , Network.AWS.Organizations.EnablePolicyType-        , Network.AWS.Organizations.InviteAccountToOrganization-        , Network.AWS.Organizations.LeaveOrganization-        , Network.AWS.Organizations.ListAWSServiceAccessForOrganization-        , Network.AWS.Organizations.ListAccounts-        , Network.AWS.Organizations.ListAccountsForParent-        , Network.AWS.Organizations.ListChildren-        , Network.AWS.Organizations.ListCreateAccountStatus-        , Network.AWS.Organizations.ListHandshakesForAccount-        , Network.AWS.Organizations.ListHandshakesForOrganization-        , Network.AWS.Organizations.ListOrganizationalUnitsForParent-        , Network.AWS.Organizations.ListParents-        , Network.AWS.Organizations.ListPolicies-        , Network.AWS.Organizations.ListPoliciesForTarget-        , Network.AWS.Organizations.ListRoots-        , Network.AWS.Organizations.ListTargetsForPolicy-        , Network.AWS.Organizations.MoveAccount-        , Network.AWS.Organizations.RemoveAccountFromOrganization-        , Network.AWS.Organizations.Types-        , Network.AWS.Organizations.UpdateOrganizationalUnit-        , Network.AWS.Organizations.UpdatePolicy-        , Network.AWS.Organizations.Waiters+  default-language: Haskell2010+  hs-source-dirs:   src gen+  ghc-options:+    -Wall -fwarn-incomplete-uni-patterns+    -fwarn-incomplete-record-updates -funbox-strict-fields -    other-modules:-          Network.AWS.Organizations.Types.Product-        , Network.AWS.Organizations.Types.Sum+  exposed-modules:+    Amazonka.Organizations+    Amazonka.Organizations.AcceptHandshake+    Amazonka.Organizations.AttachPolicy+    Amazonka.Organizations.CancelHandshake+    Amazonka.Organizations.CloseAccount+    Amazonka.Organizations.CreateAccount+    Amazonka.Organizations.CreateGovCloudAccount+    Amazonka.Organizations.CreateOrganization+    Amazonka.Organizations.CreateOrganizationalUnit+    Amazonka.Organizations.CreatePolicy+    Amazonka.Organizations.DeclineHandshake+    Amazonka.Organizations.DeleteOrganization+    Amazonka.Organizations.DeleteOrganizationalUnit+    Amazonka.Organizations.DeletePolicy+    Amazonka.Organizations.DeleteResourcePolicy+    Amazonka.Organizations.DeregisterDelegatedAdministrator+    Amazonka.Organizations.DescribeAccount+    Amazonka.Organizations.DescribeCreateAccountStatus+    Amazonka.Organizations.DescribeEffectivePolicy+    Amazonka.Organizations.DescribeHandshake+    Amazonka.Organizations.DescribeOrganization+    Amazonka.Organizations.DescribeOrganizationalUnit+    Amazonka.Organizations.DescribePolicy+    Amazonka.Organizations.DescribeResourcePolicy+    Amazonka.Organizations.DetachPolicy+    Amazonka.Organizations.DisableAWSServiceAccess+    Amazonka.Organizations.DisablePolicyType+    Amazonka.Organizations.EnableAllFeatures+    Amazonka.Organizations.EnableAWSServiceAccess+    Amazonka.Organizations.EnablePolicyType+    Amazonka.Organizations.InviteAccountToOrganization+    Amazonka.Organizations.LeaveOrganization+    Amazonka.Organizations.Lens+    Amazonka.Organizations.ListAccounts+    Amazonka.Organizations.ListAccountsForParent+    Amazonka.Organizations.ListAWSServiceAccessForOrganization+    Amazonka.Organizations.ListChildren+    Amazonka.Organizations.ListCreateAccountStatus+    Amazonka.Organizations.ListDelegatedAdministrators+    Amazonka.Organizations.ListDelegatedServicesForAccount+    Amazonka.Organizations.ListHandshakesForAccount+    Amazonka.Organizations.ListHandshakesForOrganization+    Amazonka.Organizations.ListOrganizationalUnitsForParent+    Amazonka.Organizations.ListParents+    Amazonka.Organizations.ListPolicies+    Amazonka.Organizations.ListPoliciesForTarget+    Amazonka.Organizations.ListRoots+    Amazonka.Organizations.ListTagsForResource+    Amazonka.Organizations.ListTargetsForPolicy+    Amazonka.Organizations.MoveAccount+    Amazonka.Organizations.PutResourcePolicy+    Amazonka.Organizations.RegisterDelegatedAdministrator+    Amazonka.Organizations.RemoveAccountFromOrganization+    Amazonka.Organizations.TagResource+    Amazonka.Organizations.Types+    Amazonka.Organizations.Types.Account+    Amazonka.Organizations.Types.AccountJoinedMethod+    Amazonka.Organizations.Types.AccountStatus+    Amazonka.Organizations.Types.ActionType+    Amazonka.Organizations.Types.Child+    Amazonka.Organizations.Types.ChildType+    Amazonka.Organizations.Types.CreateAccountFailureReason+    Amazonka.Organizations.Types.CreateAccountState+    Amazonka.Organizations.Types.CreateAccountStatus+    Amazonka.Organizations.Types.DelegatedAdministrator+    Amazonka.Organizations.Types.DelegatedService+    Amazonka.Organizations.Types.EffectivePolicy+    Amazonka.Organizations.Types.EffectivePolicyType+    Amazonka.Organizations.Types.EnabledServicePrincipal+    Amazonka.Organizations.Types.Handshake+    Amazonka.Organizations.Types.HandshakeFilter+    Amazonka.Organizations.Types.HandshakeParty+    Amazonka.Organizations.Types.HandshakePartyType+    Amazonka.Organizations.Types.HandshakeResource+    Amazonka.Organizations.Types.HandshakeResourceType+    Amazonka.Organizations.Types.HandshakeState+    Amazonka.Organizations.Types.IAMUserAccessToBilling+    Amazonka.Organizations.Types.Organization+    Amazonka.Organizations.Types.OrganizationalUnit+    Amazonka.Organizations.Types.OrganizationFeatureSet+    Amazonka.Organizations.Types.Parent+    Amazonka.Organizations.Types.ParentType+    Amazonka.Organizations.Types.Policy+    Amazonka.Organizations.Types.PolicySummary+    Amazonka.Organizations.Types.PolicyTargetSummary+    Amazonka.Organizations.Types.PolicyType+    Amazonka.Organizations.Types.PolicyTypeStatus+    Amazonka.Organizations.Types.PolicyTypeSummary+    Amazonka.Organizations.Types.ResourcePolicy+    Amazonka.Organizations.Types.ResourcePolicySummary+    Amazonka.Organizations.Types.Root+    Amazonka.Organizations.Types.Tag+    Amazonka.Organizations.Types.TargetType+    Amazonka.Organizations.UntagResource+    Amazonka.Organizations.UpdateOrganizationalUnit+    Amazonka.Organizations.UpdatePolicy+    Amazonka.Organizations.Waiters -    build-depends:-          amazonka-core == 1.6.1.*-        , base          >= 4.7     && < 5+  build-depends:+    , amazonka-core  >=2.0  && <2.1+    , base           >=4.12 && <5  test-suite amazonka-organizations-test-    type:              exitcode-stdio-1.0-    default-language:  Haskell2010-    hs-source-dirs:    test-    main-is:           Main.hs--    ghc-options:       -Wall -threaded+  type:             exitcode-stdio-1.0+  default-language: Haskell2010+  hs-source-dirs:   test+  main-is:          Main.hs+  ghc-options:      -Wall -threaded -    -- This section is encoded by the template and any modules added by-    -- hand outside these namespaces will not correctly be added to the-    -- distribution package.-    other-modules:-          Test.AWS.Organizations-        , Test.AWS.Gen.Organizations-        , Test.AWS.Organizations.Internal+  -- This section is encoded by the template and any modules added by+  -- hand outside these namespaces will not correctly be added to the+  -- distribution package.+  other-modules:+    Test.Amazonka.Gen.Organizations+    Test.Amazonka.Organizations+    Test.Amazonka.Organizations.Internal -    build-depends:-          amazonka-core == 1.6.1.*-        , amazonka-test == 1.6.1.*-        , amazonka-organizations-        , base-        , bytestring-        , tasty-        , tasty-hunit-        , text-        , time-        , unordered-containers+  build-depends:+    , amazonka-core           >=2.0 && <2.1+    , amazonka-organizations+    , amazonka-test           >=2.0 && <2.1+    , base+    , bytestring+    , case-insensitive+    , tasty+    , tasty-hunit+    , text+    , time+    , unordered-containers

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/organizations/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  organizations.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,792 @@+{-# OPTIONS_GHC -fno-warn-duplicate-exports #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}++-- |+-- Module      : Amazonka.Organizations+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Derived from API version @2016-11-28@ of the AWS service descriptions, licensed under Apache 2.0.+--+-- Organizations is a web service that enables you to consolidate your+-- multiple Amazon Web Services accounts into an /organization/ and+-- centrally manage your accounts and their resources.+--+-- This guide provides descriptions of the Organizations operations. For+-- more information about using this service, see the+-- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html Organizations User Guide>.+--+-- __Support and feedback for Organizations__+--+-- We welcome your feedback. Send your comments to+-- <mailto:feedback-awsorganizations@amazon.com feedback-awsorganizations\@amazon.com>+-- or post your feedback and questions in the+-- <http://forums.aws.amazon.com/forum.jspa?forumID=219 Organizations support forum>.+-- For more information about the Amazon Web Services support forums, see+-- <http://forums.aws.amazon.com/help.jspa Forums Help>.+--+-- __Endpoint to call When using the CLI or the Amazon Web Services SDK__+--+-- For the current release of Organizations, specify the @us-east-1@ region+-- for all Amazon Web Services API and CLI calls made from the commercial+-- Amazon Web Services Regions outside of China. If calling from one of the+-- Amazon Web Services Regions in China, then specify @cn-northwest-1@. You+-- can do this in the CLI by using these parameters and commands:+--+-- -   Use the following parameter with each command to specify both the+--     endpoint and its region:+--+--     @--endpoint-url https:\/\/organizations.us-east-1.amazonaws.com@+--     /(from commercial Amazon Web Services Regions outside of China)/+--+--     or+--+--     @--endpoint-url https:\/\/organizations.cn-northwest-1.amazonaws.com.cn@+--     /(from Amazon Web Services Regions in China)/+--+-- -   Use the default endpoint, but configure your default region with+--     this command:+--+--     @aws configure set default.region us-east-1@ /(from commercial+--     Amazon Web Services Regions outside of China)/+--+--     or+--+--     @aws configure set default.region cn-northwest-1@ /(from Amazon Web+--     Services Regions in China)/+--+-- -   Use the following parameter with each command to specify the+--     endpoint:+--+--     @--region us-east-1@ /(from commercial Amazon Web Services Regions+--     outside of China)/+--+--     or+--+--     @--region cn-northwest-1@ /(from Amazon Web Services Regions in+--     China)/+--+-- __Recording API Requests__+--+-- Organizations supports CloudTrail, a service that records Amazon Web+-- Services API calls for your Amazon Web Services account and delivers log+-- files to an Amazon S3 bucket. By using information collected by+-- CloudTrail, you can determine which requests the Organizations service+-- received, who made the request and when, and so on. For more about+-- Organizations and its support for CloudTrail, see+-- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_incident-response.html#orgs_cloudtrail-integration Logging Organizations Events with CloudTrail>+-- in the /Organizations User Guide/. To learn more about CloudTrail,+-- including how to turn it on and find your log files, see the+-- <https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html CloudTrail User Guide>.+module Amazonka.Organizations+  ( -- * Service Configuration+    defaultService,++    -- * Errors+    -- $errors++    -- ** AWSOrganizationsNotInUseException+    _AWSOrganizationsNotInUseException,++    -- ** AccessDeniedException+    _AccessDeniedException,++    -- ** AccessDeniedForDependencyException+    _AccessDeniedForDependencyException,++    -- ** AccountAlreadyClosedException+    _AccountAlreadyClosedException,++    -- ** AccountAlreadyRegisteredException+    _AccountAlreadyRegisteredException,++    -- ** AccountNotFoundException+    _AccountNotFoundException,++    -- ** AccountNotRegisteredException+    _AccountNotRegisteredException,++    -- ** AccountOwnerNotVerifiedException+    _AccountOwnerNotVerifiedException,++    -- ** AlreadyInOrganizationException+    _AlreadyInOrganizationException,++    -- ** ChildNotFoundException+    _ChildNotFoundException,++    -- ** ConcurrentModificationException+    _ConcurrentModificationException,++    -- ** ConflictException+    _ConflictException,++    -- ** ConstraintViolationException+    _ConstraintViolationException,++    -- ** CreateAccountStatusNotFoundException+    _CreateAccountStatusNotFoundException,++    -- ** DestinationParentNotFoundException+    _DestinationParentNotFoundException,++    -- ** DuplicateAccountException+    _DuplicateAccountException,++    -- ** DuplicateHandshakeException+    _DuplicateHandshakeException,++    -- ** DuplicateOrganizationalUnitException+    _DuplicateOrganizationalUnitException,++    -- ** DuplicatePolicyAttachmentException+    _DuplicatePolicyAttachmentException,++    -- ** DuplicatePolicyException+    _DuplicatePolicyException,++    -- ** EffectivePolicyNotFoundException+    _EffectivePolicyNotFoundException,++    -- ** FinalizingOrganizationException+    _FinalizingOrganizationException,++    -- ** HandshakeAlreadyInStateException+    _HandshakeAlreadyInStateException,++    -- ** HandshakeConstraintViolationException+    _HandshakeConstraintViolationException,++    -- ** HandshakeNotFoundException+    _HandshakeNotFoundException,++    -- ** InvalidHandshakeTransitionException+    _InvalidHandshakeTransitionException,++    -- ** InvalidInputException+    _InvalidInputException,++    -- ** MalformedPolicyDocumentException+    _MalformedPolicyDocumentException,++    -- ** MasterCannotLeaveOrganizationException+    _MasterCannotLeaveOrganizationException,++    -- ** OrganizationNotEmptyException+    _OrganizationNotEmptyException,++    -- ** OrganizationalUnitNotEmptyException+    _OrganizationalUnitNotEmptyException,++    -- ** OrganizationalUnitNotFoundException+    _OrganizationalUnitNotFoundException,++    -- ** ParentNotFoundException+    _ParentNotFoundException,++    -- ** PolicyChangesInProgressException+    _PolicyChangesInProgressException,++    -- ** PolicyInUseException+    _PolicyInUseException,++    -- ** PolicyNotAttachedException+    _PolicyNotAttachedException,++    -- ** PolicyNotFoundException+    _PolicyNotFoundException,++    -- ** PolicyTypeAlreadyEnabledException+    _PolicyTypeAlreadyEnabledException,++    -- ** PolicyTypeNotAvailableForOrganizationException+    _PolicyTypeNotAvailableForOrganizationException,++    -- ** PolicyTypeNotEnabledException+    _PolicyTypeNotEnabledException,++    -- ** ResourcePolicyNotFoundException+    _ResourcePolicyNotFoundException,++    -- ** RootNotFoundException+    _RootNotFoundException,++    -- ** ServiceException+    _ServiceException,++    -- ** SourceParentNotFoundException+    _SourceParentNotFoundException,++    -- ** TargetNotFoundException+    _TargetNotFoundException,++    -- ** TooManyRequestsException+    _TooManyRequestsException,++    -- ** UnsupportedAPIEndpointException+    _UnsupportedAPIEndpointException,++    -- * Waiters+    -- $waiters++    -- * Operations+    -- $operations++    -- ** AcceptHandshake+    AcceptHandshake (AcceptHandshake'),+    newAcceptHandshake,+    AcceptHandshakeResponse (AcceptHandshakeResponse'),+    newAcceptHandshakeResponse,++    -- ** AttachPolicy+    AttachPolicy (AttachPolicy'),+    newAttachPolicy,+    AttachPolicyResponse (AttachPolicyResponse'),+    newAttachPolicyResponse,++    -- ** CancelHandshake+    CancelHandshake (CancelHandshake'),+    newCancelHandshake,+    CancelHandshakeResponse (CancelHandshakeResponse'),+    newCancelHandshakeResponse,++    -- ** CloseAccount+    CloseAccount (CloseAccount'),+    newCloseAccount,+    CloseAccountResponse (CloseAccountResponse'),+    newCloseAccountResponse,++    -- ** CreateAccount+    CreateAccount (CreateAccount'),+    newCreateAccount,+    CreateAccountResponse (CreateAccountResponse'),+    newCreateAccountResponse,++    -- ** CreateGovCloudAccount+    CreateGovCloudAccount (CreateGovCloudAccount'),+    newCreateGovCloudAccount,+    CreateGovCloudAccountResponse (CreateGovCloudAccountResponse'),+    newCreateGovCloudAccountResponse,++    -- ** CreateOrganization+    CreateOrganization (CreateOrganization'),+    newCreateOrganization,+    CreateOrganizationResponse (CreateOrganizationResponse'),+    newCreateOrganizationResponse,++    -- ** CreateOrganizationalUnit+    CreateOrganizationalUnit (CreateOrganizationalUnit'),+    newCreateOrganizationalUnit,+    CreateOrganizationalUnitResponse (CreateOrganizationalUnitResponse'),+    newCreateOrganizationalUnitResponse,++    -- ** CreatePolicy+    CreatePolicy (CreatePolicy'),+    newCreatePolicy,+    CreatePolicyResponse (CreatePolicyResponse'),+    newCreatePolicyResponse,++    -- ** DeclineHandshake+    DeclineHandshake (DeclineHandshake'),+    newDeclineHandshake,+    DeclineHandshakeResponse (DeclineHandshakeResponse'),+    newDeclineHandshakeResponse,++    -- ** DeleteOrganization+    DeleteOrganization (DeleteOrganization'),+    newDeleteOrganization,+    DeleteOrganizationResponse (DeleteOrganizationResponse'),+    newDeleteOrganizationResponse,++    -- ** DeleteOrganizationalUnit+    DeleteOrganizationalUnit (DeleteOrganizationalUnit'),+    newDeleteOrganizationalUnit,+    DeleteOrganizationalUnitResponse (DeleteOrganizationalUnitResponse'),+    newDeleteOrganizationalUnitResponse,++    -- ** DeletePolicy+    DeletePolicy (DeletePolicy'),+    newDeletePolicy,+    DeletePolicyResponse (DeletePolicyResponse'),+    newDeletePolicyResponse,++    -- ** DeleteResourcePolicy+    DeleteResourcePolicy (DeleteResourcePolicy'),+    newDeleteResourcePolicy,+    DeleteResourcePolicyResponse (DeleteResourcePolicyResponse'),+    newDeleteResourcePolicyResponse,++    -- ** DeregisterDelegatedAdministrator+    DeregisterDelegatedAdministrator (DeregisterDelegatedAdministrator'),+    newDeregisterDelegatedAdministrator,+    DeregisterDelegatedAdministratorResponse (DeregisterDelegatedAdministratorResponse'),+    newDeregisterDelegatedAdministratorResponse,++    -- ** DescribeAccount+    DescribeAccount (DescribeAccount'),+    newDescribeAccount,+    DescribeAccountResponse (DescribeAccountResponse'),+    newDescribeAccountResponse,++    -- ** DescribeCreateAccountStatus+    DescribeCreateAccountStatus (DescribeCreateAccountStatus'),+    newDescribeCreateAccountStatus,+    DescribeCreateAccountStatusResponse (DescribeCreateAccountStatusResponse'),+    newDescribeCreateAccountStatusResponse,++    -- ** DescribeEffectivePolicy+    DescribeEffectivePolicy (DescribeEffectivePolicy'),+    newDescribeEffectivePolicy,+    DescribeEffectivePolicyResponse (DescribeEffectivePolicyResponse'),+    newDescribeEffectivePolicyResponse,++    -- ** DescribeHandshake+    DescribeHandshake (DescribeHandshake'),+    newDescribeHandshake,+    DescribeHandshakeResponse (DescribeHandshakeResponse'),+    newDescribeHandshakeResponse,++    -- ** DescribeOrganization+    DescribeOrganization (DescribeOrganization'),+    newDescribeOrganization,+    DescribeOrganizationResponse (DescribeOrganizationResponse'),+    newDescribeOrganizationResponse,++    -- ** DescribeOrganizationalUnit+    DescribeOrganizationalUnit (DescribeOrganizationalUnit'),+    newDescribeOrganizationalUnit,+    DescribeOrganizationalUnitResponse (DescribeOrganizationalUnitResponse'),+    newDescribeOrganizationalUnitResponse,++    -- ** DescribePolicy+    DescribePolicy (DescribePolicy'),+    newDescribePolicy,+    DescribePolicyResponse (DescribePolicyResponse'),+    newDescribePolicyResponse,++    -- ** DescribeResourcePolicy+    DescribeResourcePolicy (DescribeResourcePolicy'),+    newDescribeResourcePolicy,+    DescribeResourcePolicyResponse (DescribeResourcePolicyResponse'),+    newDescribeResourcePolicyResponse,++    -- ** DetachPolicy+    DetachPolicy (DetachPolicy'),+    newDetachPolicy,+    DetachPolicyResponse (DetachPolicyResponse'),+    newDetachPolicyResponse,++    -- ** DisableAWSServiceAccess+    DisableAWSServiceAccess (DisableAWSServiceAccess'),+    newDisableAWSServiceAccess,+    DisableAWSServiceAccessResponse (DisableAWSServiceAccessResponse'),+    newDisableAWSServiceAccessResponse,++    -- ** DisablePolicyType+    DisablePolicyType (DisablePolicyType'),+    newDisablePolicyType,+    DisablePolicyTypeResponse (DisablePolicyTypeResponse'),+    newDisablePolicyTypeResponse,++    -- ** EnableAWSServiceAccess+    EnableAWSServiceAccess (EnableAWSServiceAccess'),+    newEnableAWSServiceAccess,+    EnableAWSServiceAccessResponse (EnableAWSServiceAccessResponse'),+    newEnableAWSServiceAccessResponse,++    -- ** EnableAllFeatures+    EnableAllFeatures (EnableAllFeatures'),+    newEnableAllFeatures,+    EnableAllFeaturesResponse (EnableAllFeaturesResponse'),+    newEnableAllFeaturesResponse,++    -- ** EnablePolicyType+    EnablePolicyType (EnablePolicyType'),+    newEnablePolicyType,+    EnablePolicyTypeResponse (EnablePolicyTypeResponse'),+    newEnablePolicyTypeResponse,++    -- ** InviteAccountToOrganization+    InviteAccountToOrganization (InviteAccountToOrganization'),+    newInviteAccountToOrganization,+    InviteAccountToOrganizationResponse (InviteAccountToOrganizationResponse'),+    newInviteAccountToOrganizationResponse,++    -- ** LeaveOrganization+    LeaveOrganization (LeaveOrganization'),+    newLeaveOrganization,+    LeaveOrganizationResponse (LeaveOrganizationResponse'),+    newLeaveOrganizationResponse,++    -- ** ListAWSServiceAccessForOrganization (Paginated)+    ListAWSServiceAccessForOrganization (ListAWSServiceAccessForOrganization'),+    newListAWSServiceAccessForOrganization,+    ListAWSServiceAccessForOrganizationResponse (ListAWSServiceAccessForOrganizationResponse'),+    newListAWSServiceAccessForOrganizationResponse,++    -- ** ListAccounts (Paginated)+    ListAccounts (ListAccounts'),+    newListAccounts,+    ListAccountsResponse (ListAccountsResponse'),+    newListAccountsResponse,++    -- ** ListAccountsForParent (Paginated)+    ListAccountsForParent (ListAccountsForParent'),+    newListAccountsForParent,+    ListAccountsForParentResponse (ListAccountsForParentResponse'),+    newListAccountsForParentResponse,++    -- ** ListChildren (Paginated)+    ListChildren (ListChildren'),+    newListChildren,+    ListChildrenResponse (ListChildrenResponse'),+    newListChildrenResponse,++    -- ** ListCreateAccountStatus (Paginated)+    ListCreateAccountStatus (ListCreateAccountStatus'),+    newListCreateAccountStatus,+    ListCreateAccountStatusResponse (ListCreateAccountStatusResponse'),+    newListCreateAccountStatusResponse,++    -- ** ListDelegatedAdministrators (Paginated)+    ListDelegatedAdministrators (ListDelegatedAdministrators'),+    newListDelegatedAdministrators,+    ListDelegatedAdministratorsResponse (ListDelegatedAdministratorsResponse'),+    newListDelegatedAdministratorsResponse,++    -- ** ListDelegatedServicesForAccount (Paginated)+    ListDelegatedServicesForAccount (ListDelegatedServicesForAccount'),+    newListDelegatedServicesForAccount,+    ListDelegatedServicesForAccountResponse (ListDelegatedServicesForAccountResponse'),+    newListDelegatedServicesForAccountResponse,++    -- ** ListHandshakesForAccount (Paginated)+    ListHandshakesForAccount (ListHandshakesForAccount'),+    newListHandshakesForAccount,+    ListHandshakesForAccountResponse (ListHandshakesForAccountResponse'),+    newListHandshakesForAccountResponse,++    -- ** ListHandshakesForOrganization (Paginated)+    ListHandshakesForOrganization (ListHandshakesForOrganization'),+    newListHandshakesForOrganization,+    ListHandshakesForOrganizationResponse (ListHandshakesForOrganizationResponse'),+    newListHandshakesForOrganizationResponse,++    -- ** ListOrganizationalUnitsForParent (Paginated)+    ListOrganizationalUnitsForParent (ListOrganizationalUnitsForParent'),+    newListOrganizationalUnitsForParent,+    ListOrganizationalUnitsForParentResponse (ListOrganizationalUnitsForParentResponse'),+    newListOrganizationalUnitsForParentResponse,++    -- ** ListParents (Paginated)+    ListParents (ListParents'),+    newListParents,+    ListParentsResponse (ListParentsResponse'),+    newListParentsResponse,++    -- ** ListPolicies (Paginated)+    ListPolicies (ListPolicies'),+    newListPolicies,+    ListPoliciesResponse (ListPoliciesResponse'),+    newListPoliciesResponse,++    -- ** ListPoliciesForTarget (Paginated)+    ListPoliciesForTarget (ListPoliciesForTarget'),+    newListPoliciesForTarget,+    ListPoliciesForTargetResponse (ListPoliciesForTargetResponse'),+    newListPoliciesForTargetResponse,++    -- ** ListRoots (Paginated)+    ListRoots (ListRoots'),+    newListRoots,+    ListRootsResponse (ListRootsResponse'),+    newListRootsResponse,++    -- ** ListTagsForResource (Paginated)+    ListTagsForResource (ListTagsForResource'),+    newListTagsForResource,+    ListTagsForResourceResponse (ListTagsForResourceResponse'),+    newListTagsForResourceResponse,++    -- ** ListTargetsForPolicy (Paginated)+    ListTargetsForPolicy (ListTargetsForPolicy'),+    newListTargetsForPolicy,+    ListTargetsForPolicyResponse (ListTargetsForPolicyResponse'),+    newListTargetsForPolicyResponse,++    -- ** MoveAccount+    MoveAccount (MoveAccount'),+    newMoveAccount,+    MoveAccountResponse (MoveAccountResponse'),+    newMoveAccountResponse,++    -- ** PutResourcePolicy+    PutResourcePolicy (PutResourcePolicy'),+    newPutResourcePolicy,+    PutResourcePolicyResponse (PutResourcePolicyResponse'),+    newPutResourcePolicyResponse,++    -- ** RegisterDelegatedAdministrator+    RegisterDelegatedAdministrator (RegisterDelegatedAdministrator'),+    newRegisterDelegatedAdministrator,+    RegisterDelegatedAdministratorResponse (RegisterDelegatedAdministratorResponse'),+    newRegisterDelegatedAdministratorResponse,++    -- ** RemoveAccountFromOrganization+    RemoveAccountFromOrganization (RemoveAccountFromOrganization'),+    newRemoveAccountFromOrganization,+    RemoveAccountFromOrganizationResponse (RemoveAccountFromOrganizationResponse'),+    newRemoveAccountFromOrganizationResponse,++    -- ** TagResource+    TagResource (TagResource'),+    newTagResource,+    TagResourceResponse (TagResourceResponse'),+    newTagResourceResponse,++    -- ** UntagResource+    UntagResource (UntagResource'),+    newUntagResource,+    UntagResourceResponse (UntagResourceResponse'),+    newUntagResourceResponse,++    -- ** UpdateOrganizationalUnit+    UpdateOrganizationalUnit (UpdateOrganizationalUnit'),+    newUpdateOrganizationalUnit,+    UpdateOrganizationalUnitResponse (UpdateOrganizationalUnitResponse'),+    newUpdateOrganizationalUnitResponse,++    -- ** UpdatePolicy+    UpdatePolicy (UpdatePolicy'),+    newUpdatePolicy,+    UpdatePolicyResponse (UpdatePolicyResponse'),+    newUpdatePolicyResponse,++    -- * Types++    -- ** AccountJoinedMethod+    AccountJoinedMethod (..),++    -- ** AccountStatus+    AccountStatus (..),++    -- ** ActionType+    ActionType (..),++    -- ** ChildType+    ChildType (..),++    -- ** CreateAccountFailureReason+    CreateAccountFailureReason (..),++    -- ** CreateAccountState+    CreateAccountState (..),++    -- ** EffectivePolicyType+    EffectivePolicyType (..),++    -- ** HandshakePartyType+    HandshakePartyType (..),++    -- ** HandshakeResourceType+    HandshakeResourceType (..),++    -- ** HandshakeState+    HandshakeState (..),++    -- ** IAMUserAccessToBilling+    IAMUserAccessToBilling (..),++    -- ** OrganizationFeatureSet+    OrganizationFeatureSet (..),++    -- ** ParentType+    ParentType (..),++    -- ** PolicyType+    PolicyType (..),++    -- ** PolicyTypeStatus+    PolicyTypeStatus (..),++    -- ** TargetType+    TargetType (..),++    -- ** Account+    Account (Account'),+    newAccount,++    -- ** Child+    Child (Child'),+    newChild,++    -- ** CreateAccountStatus+    CreateAccountStatus (CreateAccountStatus'),+    newCreateAccountStatus,++    -- ** DelegatedAdministrator+    DelegatedAdministrator (DelegatedAdministrator'),+    newDelegatedAdministrator,++    -- ** DelegatedService+    DelegatedService (DelegatedService'),+    newDelegatedService,++    -- ** EffectivePolicy+    EffectivePolicy (EffectivePolicy'),+    newEffectivePolicy,++    -- ** EnabledServicePrincipal+    EnabledServicePrincipal (EnabledServicePrincipal'),+    newEnabledServicePrincipal,++    -- ** Handshake+    Handshake (Handshake'),+    newHandshake,++    -- ** HandshakeFilter+    HandshakeFilter (HandshakeFilter'),+    newHandshakeFilter,++    -- ** HandshakeParty+    HandshakeParty (HandshakeParty'),+    newHandshakeParty,++    -- ** HandshakeResource+    HandshakeResource (HandshakeResource'),+    newHandshakeResource,++    -- ** Organization+    Organization (Organization'),+    newOrganization,++    -- ** OrganizationalUnit+    OrganizationalUnit (OrganizationalUnit'),+    newOrganizationalUnit,++    -- ** Parent+    Parent (Parent'),+    newParent,++    -- ** Policy+    Policy (Policy'),+    newPolicy,++    -- ** PolicySummary+    PolicySummary (PolicySummary'),+    newPolicySummary,++    -- ** PolicyTargetSummary+    PolicyTargetSummary (PolicyTargetSummary'),+    newPolicyTargetSummary,++    -- ** PolicyTypeSummary+    PolicyTypeSummary (PolicyTypeSummary'),+    newPolicyTypeSummary,++    -- ** ResourcePolicy+    ResourcePolicy (ResourcePolicy'),+    newResourcePolicy,++    -- ** ResourcePolicySummary+    ResourcePolicySummary (ResourcePolicySummary'),+    newResourcePolicySummary,++    -- ** Root+    Root (Root'),+    newRoot,++    -- ** Tag+    Tag (Tag'),+    newTag,+  )+where++import Amazonka.Organizations.AcceptHandshake+import Amazonka.Organizations.AttachPolicy+import Amazonka.Organizations.CancelHandshake+import Amazonka.Organizations.CloseAccount+import Amazonka.Organizations.CreateAccount+import Amazonka.Organizations.CreateGovCloudAccount+import Amazonka.Organizations.CreateOrganization+import Amazonka.Organizations.CreateOrganizationalUnit+import Amazonka.Organizations.CreatePolicy+import Amazonka.Organizations.DeclineHandshake+import Amazonka.Organizations.DeleteOrganization+import Amazonka.Organizations.DeleteOrganizationalUnit+import Amazonka.Organizations.DeletePolicy+import Amazonka.Organizations.DeleteResourcePolicy+import Amazonka.Organizations.DeregisterDelegatedAdministrator+import Amazonka.Organizations.DescribeAccount+import Amazonka.Organizations.DescribeCreateAccountStatus+import Amazonka.Organizations.DescribeEffectivePolicy+import Amazonka.Organizations.DescribeHandshake+import Amazonka.Organizations.DescribeOrganization+import Amazonka.Organizations.DescribeOrganizationalUnit+import Amazonka.Organizations.DescribePolicy+import Amazonka.Organizations.DescribeResourcePolicy+import Amazonka.Organizations.DetachPolicy+import Amazonka.Organizations.DisableAWSServiceAccess+import Amazonka.Organizations.DisablePolicyType+import Amazonka.Organizations.EnableAWSServiceAccess+import Amazonka.Organizations.EnableAllFeatures+import Amazonka.Organizations.EnablePolicyType+import Amazonka.Organizations.InviteAccountToOrganization+import Amazonka.Organizations.LeaveOrganization+import Amazonka.Organizations.Lens+import Amazonka.Organizations.ListAWSServiceAccessForOrganization+import Amazonka.Organizations.ListAccounts+import Amazonka.Organizations.ListAccountsForParent+import Amazonka.Organizations.ListChildren+import Amazonka.Organizations.ListCreateAccountStatus+import Amazonka.Organizations.ListDelegatedAdministrators+import Amazonka.Organizations.ListDelegatedServicesForAccount+import Amazonka.Organizations.ListHandshakesForAccount+import Amazonka.Organizations.ListHandshakesForOrganization+import Amazonka.Organizations.ListOrganizationalUnitsForParent+import Amazonka.Organizations.ListParents+import Amazonka.Organizations.ListPolicies+import Amazonka.Organizations.ListPoliciesForTarget+import Amazonka.Organizations.ListRoots+import Amazonka.Organizations.ListTagsForResource+import Amazonka.Organizations.ListTargetsForPolicy+import Amazonka.Organizations.MoveAccount+import Amazonka.Organizations.PutResourcePolicy+import Amazonka.Organizations.RegisterDelegatedAdministrator+import Amazonka.Organizations.RemoveAccountFromOrganization+import Amazonka.Organizations.TagResource+import Amazonka.Organizations.Types+import Amazonka.Organizations.UntagResource+import Amazonka.Organizations.UpdateOrganizationalUnit+import Amazonka.Organizations.UpdatePolicy+import Amazonka.Organizations.Waiters++-- $errors+-- Error matchers are designed for use with the functions provided by+-- <http://hackage.haskell.org/package/lens/docs/Control-Exception-Lens.html Control.Exception.Lens>.+-- This allows catching (and rethrowing) service specific errors returned+-- by 'Organizations'.++-- $operations+-- Some AWS operations return results that are incomplete and require subsequent+-- requests in order to obtain the entire result set. The process of sending+-- subsequent requests to continue where a previous request left off is called+-- pagination. For example, the 'ListObjects' operation of Amazon S3 returns up to+-- 1000 objects at a time, and you must send subsequent requests with the+-- appropriate Marker in order to retrieve the next page of results.+--+-- Operations that have an 'AWSPager' instance can transparently perform subsequent+-- requests, correctly setting Markers and other request facets to iterate through+-- the entire result set of a truncated API operation. Operations which support+-- this have an additional note in the documentation.+--+-- Many operations have the ability to filter results on the server side. See the+-- individual operation parameters for details.++-- $waiters+-- Waiters poll by repeatedly sending a request until some remote success condition+-- configured by the 'Wait' specification is fulfilled. The 'Wait' specification+-- determines how many attempts should be made, in addition to delay and retry strategies.

@@ -0,0 +1,209 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.Organizations.AcceptHandshake+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Sends a response to the originator of a handshake agreeing to the action+-- proposed by the handshake request.+--+-- You can only call this operation by the following principals when they+-- also have the relevant IAM permissions:+--+-- -   __Invitation to join__ or __Approve all features request__+--     handshakes: only a principal from the member account.+--+--     The user who calls the API for an invitation to join must have the+--     @organizations:AcceptHandshake@ permission. If you enabled all+--     features in the organization, the user must also have the+--     @iam:CreateServiceLinkedRole@ permission so that Organizations can+--     create the required service-linked role named+--     @AWSServiceRoleForOrganizations@. For more information, see+--     <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integration_services.html#orgs_integration_service-linked-roles Organizations and Service-Linked Roles>+--     in the /Organizations User Guide/.+--+-- -   __Enable all features final confirmation__ handshake: only a+--     principal from the management account.+--+--     For more information about invitations, see+--     <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_invites.html Inviting an Amazon Web Services account to join your organization>+--     in the /Organizations User Guide./ For more information about+--     requests to enable all features in the organization, see+--     <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html Enabling all features in your organization>+--     in the /Organizations User Guide./+--+-- After you accept a handshake, it continues to appear in the results of+-- relevant APIs for only 30 days. After that, it\'s deleted.+module Amazonka.Organizations.AcceptHandshake+  ( -- * Creating a Request+    AcceptHandshake (..),+    newAcceptHandshake,++    -- * Request Lenses+    acceptHandshake_handshakeId,++    -- * Destructuring the Response+    AcceptHandshakeResponse (..),+    newAcceptHandshakeResponse,++    -- * Response Lenses+    acceptHandshakeResponse_handshake,+    acceptHandshakeResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import Amazonka.Organizations.Types+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newAcceptHandshake' smart constructor.+data AcceptHandshake = AcceptHandshake'+  { -- | The unique identifier (ID) of the handshake that you want to accept.+    --+    -- The <http://wikipedia.org/wiki/regex regex pattern> for handshake ID+    -- string requires \"h-\" followed by from 8 to 32 lowercase letters or+    -- digits.+    handshakeId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'AcceptHandshake' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'handshakeId', 'acceptHandshake_handshakeId' - The unique identifier (ID) of the handshake that you want to accept.+--+-- The <http://wikipedia.org/wiki/regex regex pattern> for handshake ID+-- string requires \"h-\" followed by from 8 to 32 lowercase letters or+-- digits.+newAcceptHandshake ::+  -- | 'handshakeId'+  Prelude.Text ->+  AcceptHandshake+newAcceptHandshake pHandshakeId_ =+  AcceptHandshake' {handshakeId = pHandshakeId_}++-- | The unique identifier (ID) of the handshake that you want to accept.+--+-- The <http://wikipedia.org/wiki/regex regex pattern> for handshake ID+-- string requires \"h-\" followed by from 8 to 32 lowercase letters or+-- digits.+acceptHandshake_handshakeId :: Lens.Lens' AcceptHandshake Prelude.Text+acceptHandshake_handshakeId = Lens.lens (\AcceptHandshake' {handshakeId} -> handshakeId) (\s@AcceptHandshake' {} a -> s {handshakeId = a} :: AcceptHandshake)++instance Core.AWSRequest AcceptHandshake where+  type+    AWSResponse AcceptHandshake =+      AcceptHandshakeResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          AcceptHandshakeResponse'+            Prelude.<$> (x Data..?> "Handshake")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable AcceptHandshake where+  hashWithSalt _salt AcceptHandshake' {..} =+    _salt `Prelude.hashWithSalt` handshakeId++instance Prelude.NFData AcceptHandshake where+  rnf AcceptHandshake' {..} = Prelude.rnf handshakeId++instance Data.ToHeaders AcceptHandshake where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSOrganizationsV20161128.AcceptHandshake" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON AcceptHandshake where+  toJSON AcceptHandshake' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("HandshakeId" Data..= handshakeId)]+      )++instance Data.ToPath AcceptHandshake where+  toPath = Prelude.const "/"++instance Data.ToQuery AcceptHandshake where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newAcceptHandshakeResponse' smart constructor.+data AcceptHandshakeResponse = AcceptHandshakeResponse'+  { -- | A structure that contains details about the accepted handshake.+    handshake :: Prelude.Maybe Handshake,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'AcceptHandshakeResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'handshake', 'acceptHandshakeResponse_handshake' - A structure that contains details about the accepted handshake.+--+-- 'httpStatus', 'acceptHandshakeResponse_httpStatus' - The response's http status code.+newAcceptHandshakeResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  AcceptHandshakeResponse+newAcceptHandshakeResponse pHttpStatus_ =+  AcceptHandshakeResponse'+    { handshake =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | A structure that contains details about the accepted handshake.+acceptHandshakeResponse_handshake :: Lens.Lens' AcceptHandshakeResponse (Prelude.Maybe Handshake)+acceptHandshakeResponse_handshake = Lens.lens (\AcceptHandshakeResponse' {handshake} -> handshake) (\s@AcceptHandshakeResponse' {} a -> s {handshake = a} :: AcceptHandshakeResponse)++-- | The response's http status code.+acceptHandshakeResponse_httpStatus :: Lens.Lens' AcceptHandshakeResponse Prelude.Int+acceptHandshakeResponse_httpStatus = Lens.lens (\AcceptHandshakeResponse' {httpStatus} -> httpStatus) (\s@AcceptHandshakeResponse' {} a -> s {httpStatus = a} :: AcceptHandshakeResponse)++instance Prelude.NFData AcceptHandshakeResponse where+  rnf AcceptHandshakeResponse' {..} =+    Prelude.rnf handshake+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,226 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.Organizations.AttachPolicy+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Attaches a policy to a root, an organizational unit (OU), or an+-- individual account. How the policy affects accounts depends on the type+-- of policy. Refer to the /Organizations User Guide/ for information about+-- each policy type:+--+-- -   <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html AISERVICES_OPT_OUT_POLICY>+--+-- -   <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html BACKUP_POLICY>+--+-- -   <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html SERVICE_CONTROL_POLICY>+--+-- -   <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html TAG_POLICY>+--+-- This operation can be called only from the organization\'s management+-- account.+module Amazonka.Organizations.AttachPolicy+  ( -- * Creating a Request+    AttachPolicy (..),+    newAttachPolicy,++    -- * Request Lenses+    attachPolicy_policyId,+    attachPolicy_targetId,++    -- * Destructuring the Response+    AttachPolicyResponse (..),+    newAttachPolicyResponse,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import Amazonka.Organizations.Types+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newAttachPolicy' smart constructor.+data AttachPolicy = AttachPolicy'+  { -- | The unique identifier (ID) of the policy that you want to attach to the+    -- target. You can get the ID for the policy by calling the ListPolicies+    -- operation.+    --+    -- The <http://wikipedia.org/wiki/regex regex pattern> for a policy ID+    -- string requires \"p-\" followed by from 8 to 128 lowercase or uppercase+    -- letters, digits, or the underscore character (_).+    policyId :: Prelude.Text,+    -- | The unique identifier (ID) of the root, OU, or account that you want to+    -- attach the policy to. You can get the ID by calling the ListRoots,+    -- ListOrganizationalUnitsForParent, or ListAccounts operations.+    --+    -- The <http://wikipedia.org/wiki/regex regex pattern> for a target ID+    -- string requires one of the following:+    --+    -- -   __Root__ - A string that begins with \"r-\" followed by from 4 to 32+    --     lowercase letters or digits.+    --+    -- -   __Account__ - A string that consists of exactly 12 digits.+    --+    -- -   __Organizational unit (OU)__ - A string that begins with \"ou-\"+    --     followed by from 4 to 32 lowercase letters or digits (the ID of the+    --     root that the OU is in). This string is followed by a second \"-\"+    --     dash and from 8 to 32 additional lowercase letters or digits.+    targetId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'AttachPolicy' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'policyId', 'attachPolicy_policyId' - The unique identifier (ID) of the policy that you want to attach to the+-- target. You can get the ID for the policy by calling the ListPolicies+-- operation.+--+-- The <http://wikipedia.org/wiki/regex regex pattern> for a policy ID+-- string requires \"p-\" followed by from 8 to 128 lowercase or uppercase+-- letters, digits, or the underscore character (_).+--+-- 'targetId', 'attachPolicy_targetId' - The unique identifier (ID) of the root, OU, or account that you want to+-- attach the policy to. You can get the ID by calling the ListRoots,+-- ListOrganizationalUnitsForParent, or ListAccounts operations.+--+-- The <http://wikipedia.org/wiki/regex regex pattern> for a target ID+-- string requires one of the following:+--+-- -   __Root__ - A string that begins with \"r-\" followed by from 4 to 32+--     lowercase letters or digits.+--+-- -   __Account__ - A string that consists of exactly 12 digits.+--+-- -   __Organizational unit (OU)__ - A string that begins with \"ou-\"+--     followed by from 4 to 32 lowercase letters or digits (the ID of the+--     root that the OU is in). This string is followed by a second \"-\"+--     dash and from 8 to 32 additional lowercase letters or digits.+newAttachPolicy ::+  -- | 'policyId'+  Prelude.Text ->+  -- | 'targetId'+  Prelude.Text ->+  AttachPolicy+newAttachPolicy pPolicyId_ pTargetId_ =+  AttachPolicy'+    { policyId = pPolicyId_,+      targetId = pTargetId_+    }++-- | The unique identifier (ID) of the policy that you want to attach to the+-- target. You can get the ID for the policy by calling the ListPolicies+-- operation.+--+-- The <http://wikipedia.org/wiki/regex regex pattern> for a policy ID+-- string requires \"p-\" followed by from 8 to 128 lowercase or uppercase+-- letters, digits, or the underscore character (_).+attachPolicy_policyId :: Lens.Lens' AttachPolicy Prelude.Text+attachPolicy_policyId = Lens.lens (\AttachPolicy' {policyId} -> policyId) (\s@AttachPolicy' {} a -> s {policyId = a} :: AttachPolicy)++-- | The unique identifier (ID) of the root, OU, or account that you want to+-- attach the policy to. You can get the ID by calling the ListRoots,+-- ListOrganizationalUnitsForParent, or ListAccounts operations.+--+-- The <http://wikipedia.org/wiki/regex regex pattern> for a target ID+-- string requires one of the following:+--+-- -   __Root__ - A string that begins with \"r-\" followed by from 4 to 32+--     lowercase letters or digits.+--+-- -   __Account__ - A string that consists of exactly 12 digits.+--+-- -   __Organizational unit (OU)__ - A string that begins with \"ou-\"+--     followed by from 4 to 32 lowercase letters or digits (the ID of the+--     root that the OU is in). This string is followed by a second \"-\"+--     dash and from 8 to 32 additional lowercase letters or digits.+attachPolicy_targetId :: Lens.Lens' AttachPolicy Prelude.Text+attachPolicy_targetId = Lens.lens (\AttachPolicy' {targetId} -> targetId) (\s@AttachPolicy' {} a -> s {targetId = a} :: AttachPolicy)++instance Core.AWSRequest AttachPolicy where+  type AWSResponse AttachPolicy = AttachPolicyResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response = Response.receiveNull AttachPolicyResponse'++instance Prelude.Hashable AttachPolicy where+  hashWithSalt _salt AttachPolicy' {..} =+    _salt+      `Prelude.hashWithSalt` policyId+      `Prelude.hashWithSalt` targetId++instance Prelude.NFData AttachPolicy where+  rnf AttachPolicy' {..} =+    Prelude.rnf policyId+      `Prelude.seq` Prelude.rnf targetId++instance Data.ToHeaders AttachPolicy where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSOrganizationsV20161128.AttachPolicy" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON AttachPolicy where+  toJSON AttachPolicy' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just ("PolicyId" Data..= policyId),+            Prelude.Just ("TargetId" Data..= targetId)+          ]+      )++instance Data.ToPath AttachPolicy where+  toPath = Prelude.const "/"++instance Data.ToQuery AttachPolicy where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newAttachPolicyResponse' smart constructor.+data AttachPolicyResponse = AttachPolicyResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'AttachPolicyResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newAttachPolicyResponse ::+  AttachPolicyResponse+newAttachPolicyResponse = AttachPolicyResponse'++instance Prelude.NFData AttachPolicyResponse where+  rnf _ = ()

@@ -0,0 +1,192 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.Organizations.CancelHandshake+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Cancels a handshake. Canceling a handshake sets the handshake state to+-- @CANCELED@.+--+-- This operation can be called only from the account that originated the+-- handshake. The recipient of the handshake can\'t cancel it, but can use+-- DeclineHandshake instead. After a handshake is canceled, the recipient+-- can no longer respond to that handshake.+--+-- After you cancel a handshake, it continues to appear in the results of+-- relevant APIs for only 30 days. After that, it\'s deleted.+module Amazonka.Organizations.CancelHandshake+  ( -- * Creating a Request+    CancelHandshake (..),+    newCancelHandshake,++    -- * Request Lenses+    cancelHandshake_handshakeId,++    -- * Destructuring the Response+    CancelHandshakeResponse (..),+    newCancelHandshakeResponse,++    -- * Response Lenses+    cancelHandshakeResponse_handshake,+    cancelHandshakeResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import Amazonka.Organizations.Types+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newCancelHandshake' smart constructor.+data CancelHandshake = CancelHandshake'+  { -- | The unique identifier (ID) of the handshake that you want to cancel. You+    -- can get the ID from the ListHandshakesForOrganization operation.+    --+    -- The <http://wikipedia.org/wiki/regex regex pattern> for handshake ID+    -- string requires \"h-\" followed by from 8 to 32 lowercase letters or+    -- digits.+    handshakeId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CancelHandshake' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'handshakeId', 'cancelHandshake_handshakeId' - The unique identifier (ID) of the handshake that you want to cancel. You+-- can get the ID from the ListHandshakesForOrganization operation.+--+-- The <http://wikipedia.org/wiki/regex regex pattern> for handshake ID+-- string requires \"h-\" followed by from 8 to 32 lowercase letters or+-- digits.+newCancelHandshake ::+  -- | 'handshakeId'+  Prelude.Text ->+  CancelHandshake+newCancelHandshake pHandshakeId_ =+  CancelHandshake' {handshakeId = pHandshakeId_}++-- | The unique identifier (ID) of the handshake that you want to cancel. You+-- can get the ID from the ListHandshakesForOrganization operation.+--+-- The <http://wikipedia.org/wiki/regex regex pattern> for handshake ID+-- string requires \"h-\" followed by from 8 to 32 lowercase letters or+-- digits.+cancelHandshake_handshakeId :: Lens.Lens' CancelHandshake Prelude.Text+cancelHandshake_handshakeId = Lens.lens (\CancelHandshake' {handshakeId} -> handshakeId) (\s@CancelHandshake' {} a -> s {handshakeId = a} :: CancelHandshake)++instance Core.AWSRequest CancelHandshake where+  type+    AWSResponse CancelHandshake =+      CancelHandshakeResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          CancelHandshakeResponse'+            Prelude.<$> (x Data..?> "Handshake")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable CancelHandshake where+  hashWithSalt _salt CancelHandshake' {..} =+    _salt `Prelude.hashWithSalt` handshakeId++instance Prelude.NFData CancelHandshake where+  rnf CancelHandshake' {..} = Prelude.rnf handshakeId++instance Data.ToHeaders CancelHandshake where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSOrganizationsV20161128.CancelHandshake" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON CancelHandshake where+  toJSON CancelHandshake' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("HandshakeId" Data..= handshakeId)]+      )++instance Data.ToPath CancelHandshake where+  toPath = Prelude.const "/"++instance Data.ToQuery CancelHandshake where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newCancelHandshakeResponse' smart constructor.+data CancelHandshakeResponse = CancelHandshakeResponse'+  { -- | A structure that contains details about the handshake that you canceled.+    handshake :: Prelude.Maybe Handshake,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CancelHandshakeResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'handshake', 'cancelHandshakeResponse_handshake' - A structure that contains details about the handshake that you canceled.+--+-- 'httpStatus', 'cancelHandshakeResponse_httpStatus' - The response's http status code.+newCancelHandshakeResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  CancelHandshakeResponse+newCancelHandshakeResponse pHttpStatus_ =+  CancelHandshakeResponse'+    { handshake =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | A structure that contains details about the handshake that you canceled.+cancelHandshakeResponse_handshake :: Lens.Lens' CancelHandshakeResponse (Prelude.Maybe Handshake)+cancelHandshakeResponse_handshake = Lens.lens (\CancelHandshakeResponse' {handshake} -> handshake) (\s@CancelHandshakeResponse' {} a -> s {handshake = a} :: CancelHandshakeResponse)++-- | The response's http status code.+cancelHandshakeResponse_httpStatus :: Lens.Lens' CancelHandshakeResponse Prelude.Int+cancelHandshakeResponse_httpStatus = Lens.lens (\CancelHandshakeResponse' {httpStatus} -> httpStatus) (\s@CancelHandshakeResponse' {} a -> s {httpStatus = a} :: CancelHandshakeResponse)++instance Prelude.NFData CancelHandshakeResponse where+  rnf CancelHandshakeResponse' {..} =+    Prelude.rnf handshake+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,172 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.Organizations.CloseAccount+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Closes an Amazon Web Services member account within an organization. You+-- can\'t close the management account with this API. This is an+-- asynchronous request that Amazon Web Services performs in the+-- background. Because @CloseAccount@ operates asynchronously, it can+-- return a successful completion message even though account closure might+-- still be in progress. You need to wait a few minutes before the account+-- is fully closed. To check the status of the request, do one of the+-- following:+--+-- -   Use the @AccountId@ that you sent in the @CloseAccount@ request to+--     provide as a parameter to the DescribeAccount operation.+--+--     While the close account request is in progress, Account status will+--     indicate PENDING_CLOSURE. When the close account request completes,+--     the status will change to SUSPENDED.+--+-- -   Check the CloudTrail log for the @CloseAccountResult@ event that+--     gets published after the account closes successfully. For+--     information on using CloudTrail with Organizations, see+--     <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_security_incident-response.html#orgs_cloudtrail-integration Logging and monitoring in Organizations>+--     in the /Organizations User Guide./+--+-- -   You can only close 10% of active member accounts within a rolling 30+--     day period. This quota is not bound by a calendar month, but starts+--     when you close an account. Within 30 days of that initial account+--     closure, you can\'t exceed the 10% account closure limit.+--+-- -   To reinstate a closed account, contact Amazon Web Services Support+--     within the 90-day grace period while the account is in SUSPENDED+--     status.+--+-- -   If the Amazon Web Services account you attempt to close is linked to+--     an Amazon Web Services GovCloud (US) account, the @CloseAccount@+--     request will close both accounts. To learn important pre-closure+--     details, see+--     <https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/Closing-govcloud-account.html Closing an Amazon Web Services GovCloud (US) account>+--     in the /Amazon Web Services GovCloud User Guide/.+--+-- For more information about closing accounts, see+-- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html Closing an Amazon Web Services account>+-- in the /Organizations User Guide./+module Amazonka.Organizations.CloseAccount+  ( -- * Creating a Request+    CloseAccount (..),+    newCloseAccount,++    -- * Request Lenses+    closeAccount_accountId,++    -- * Destructuring the Response+    CloseAccountResponse (..),+    newCloseAccountResponse,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import Amazonka.Organizations.Types+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newCloseAccount' smart constructor.+data CloseAccount = CloseAccount'+  { -- | Retrieves the Amazon Web Services account Id for the current+    -- @CloseAccount@ API request.+    accountId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CloseAccount' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'accountId', 'closeAccount_accountId' - Retrieves the Amazon Web Services account Id for the current+-- @CloseAccount@ API request.+newCloseAccount ::+  -- | 'accountId'+  Prelude.Text ->+  CloseAccount+newCloseAccount pAccountId_ =+  CloseAccount' {accountId = pAccountId_}++-- | Retrieves the Amazon Web Services account Id for the current+-- @CloseAccount@ API request.+closeAccount_accountId :: Lens.Lens' CloseAccount Prelude.Text+closeAccount_accountId = Lens.lens (\CloseAccount' {accountId} -> accountId) (\s@CloseAccount' {} a -> s {accountId = a} :: CloseAccount)++instance Core.AWSRequest CloseAccount where+  type AWSResponse CloseAccount = CloseAccountResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response = Response.receiveNull CloseAccountResponse'++instance Prelude.Hashable CloseAccount where+  hashWithSalt _salt CloseAccount' {..} =+    _salt `Prelude.hashWithSalt` accountId++instance Prelude.NFData CloseAccount where+  rnf CloseAccount' {..} = Prelude.rnf accountId++instance Data.ToHeaders CloseAccount where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSOrganizationsV20161128.CloseAccount" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON CloseAccount where+  toJSON CloseAccount' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("AccountId" Data..= accountId)]+      )++instance Data.ToPath CloseAccount where+  toPath = Prelude.const "/"++instance Data.ToQuery CloseAccount where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newCloseAccountResponse' smart constructor.+data CloseAccountResponse = CloseAccountResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CloseAccountResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newCloseAccountResponse ::+  CloseAccountResponse+newCloseAccountResponse = CloseAccountResponse'++instance Prelude.NFData CloseAccountResponse where+  rnf _ = ()

@@ -0,0 +1,536 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.Organizations.CreateAccount+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Creates an Amazon Web Services account that is automatically a member of+-- the organization whose credentials made the request. This is an+-- asynchronous request that Amazon Web Services performs in the+-- background. Because @CreateAccount@ operates asynchronously, it can+-- return a successful completion message even though account+-- initialization might still be in progress. You might need to wait a few+-- minutes before you can successfully access the account. To check the+-- status of the request, do one of the following:+--+-- -   Use the @Id@ value of the @CreateAccountStatus@ response element+--     from this operation to provide as a parameter to the+--     DescribeCreateAccountStatus operation.+--+-- -   Check the CloudTrail log for the @CreateAccountResult@ event. For+--     information on using CloudTrail with Organizations, see+--     <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_security_incident-response.html#orgs_cloudtrail-integration Logging and monitoring in Organizations>+--     in the /Organizations User Guide./+--+-- The user who calls the API to create an account must have the+-- @organizations:CreateAccount@ permission. If you enabled all features in+-- the organization, Organizations creates the required service-linked role+-- named @AWSServiceRoleForOrganizations@. For more information, see+-- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html#orgs_integrate_services-using_slrs Organizations and Service-Linked Roles>+-- in the /Organizations User Guide/.+--+-- If the request includes tags, then the requester must have the+-- @organizations:TagResource@ permission.+--+-- Organizations preconfigures the new member account with a role (named+-- @OrganizationAccountAccessRole@ by default) that grants users in the+-- management account administrator permissions in the new member account.+-- Principals in the management account can assume the role. Organizations+-- clones the company name and address information for the new account from+-- the organization\'s management account.+--+-- This operation can be called only from the organization\'s management+-- account.+--+-- For more information about creating accounts, see+-- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_create.html Creating an Amazon Web Services account in Your Organization>+-- in the /Organizations User Guide./+--+-- -   When you create an account in an organization using the+--     Organizations console, API, or CLI commands, the information+--     required for the account to operate as a standalone account, such as+--     a payment method and signing the end user license agreement (EULA)+--     is /not/ automatically collected. If you must remove an account from+--     your organization later, you can do so only after you provide the+--     missing information. Follow the steps at+--     <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info To leave an organization as a member account>+--     in the /Organizations User Guide/.+--+-- -   If you get an exception that indicates that you exceeded your+--     account limits for the organization, contact+--     <https://console.aws.amazon.com/support/home#/ Amazon Web Services Support>.+--+-- -   If you get an exception that indicates that the operation failed+--     because your organization is still initializing, wait one hour and+--     then try again. If the error persists, contact+--     <https://console.aws.amazon.com/support/home#/ Amazon Web Services Support>.+--+-- -   Using @CreateAccount@ to create multiple temporary accounts isn\'t+--     recommended. You can only close an account from the Billing and Cost+--     Management console, and you must be signed in as the root user. For+--     information on the requirements and process for closing an account,+--     see+--     <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html Closing an Amazon Web Services account>+--     in the /Organizations User Guide/.+--+-- When you create a member account with this operation, you can choose+-- whether to create the account with the __IAM User and Role Access to+-- Billing Information__ switch enabled. If you enable it, IAM users and+-- roles that have appropriate permissions can view billing information for+-- the account. If you disable it, only the account root user can access+-- billing information. For information about how to disable this switch+-- for an account, see+-- <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html Granting Access to Your Billing Information and Tools>.+module Amazonka.Organizations.CreateAccount+  ( -- * Creating a Request+    CreateAccount (..),+    newCreateAccount,++    -- * Request Lenses+    createAccount_iamUserAccessToBilling,+    createAccount_roleName,+    createAccount_tags,+    createAccount_email,+    createAccount_accountName,++    -- * Destructuring the Response+    CreateAccountResponse (..),+    newCreateAccountResponse,++    -- * Response Lenses+    createAccountResponse_createAccountStatus,+    createAccountResponse_httpStatus,+  )+where++import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import Amazonka.Organizations.Types+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newCreateAccount' smart constructor.+data CreateAccount = CreateAccount'+  { -- | If set to @ALLOW@, the new account enables IAM users to access account+    -- billing information /if/ they have the required permissions. If set to+    -- @DENY@, only the root user of the new account can access account billing+    -- information. For more information, see+    -- <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate Activating Access to the Billing and Cost Management Console>+    -- in the /Amazon Web Services Billing and Cost Management User Guide/.+    --+    -- If you don\'t specify this parameter, the value defaults to @ALLOW@, and+    -- IAM users and roles with the required permissions can access billing+    -- information for the new account.+    iamUserAccessToBilling :: Prelude.Maybe IAMUserAccessToBilling,+    -- | The name of an IAM role that Organizations automatically preconfigures+    -- in the new member account. This role trusts the management account,+    -- allowing users in the management account to assume the role, as+    -- permitted by the management account administrator. The role has+    -- administrator permissions in the new member account.+    --+    -- If you don\'t specify this parameter, the role name defaults to+    -- @OrganizationAccountAccessRole@.+    --+    -- For more information about how to use this role to access the member+    -- account, see the following links:+    --+    -- -   <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html#orgs_manage_accounts_create-cross-account-role Accessing and Administering the Member Accounts in Your Organization>+    --     in the /Organizations User Guide/+    --+    -- -   Steps 2 and 3 in+    --     <https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html Tutorial: Delegate Access Across Amazon Web Services accounts Using IAM Roles>+    --     in the /IAM User Guide/+    --+    -- The <http://wikipedia.org/wiki/regex regex pattern> that is used to+    -- validate this parameter. The pattern can include uppercase letters,+    -- lowercase letters, digits with no spaces, and any of the following+    -- characters: =,.\@-+    roleName :: Prelude.Maybe Prelude.Text,+    -- | A list of tags that you want to attach to the newly created account. For+    -- each tag in the list, you must specify both a tag key and a value. You+    -- can set the value to an empty string, but you can\'t set it to @null@.+    -- For more information about tagging, see+    -- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html Tagging Organizations resources>+    -- in the Organizations User Guide.+    --+    -- If any one of the tags is invalid or if you exceed the maximum allowed+    -- number of tags for an account, then the entire request fails and the+    -- account is not created.+    tags :: Prelude.Maybe [Tag],+    -- | The email address of the owner to assign to the new member account. This+    -- email address must not already be associated with another Amazon Web+    -- Services account. You must use a valid email address to complete account+    -- creation.+    --+    -- The rules for a valid email address:+    --+    -- -   The address must be a minimum of 6 and a maximum of 64 characters+    --     long.+    --+    -- -   All characters must be 7-bit ASCII characters.+    --+    -- -   There must be one and only one \@ symbol, which separates the local+    --     name from the domain name.+    --+    -- -   The local name can\'t contain any of the following characters:+    --+    --     whitespace, \" \' ( ) \< > [ ] : ; , \\ | % &+    --+    -- -   The local name can\'t begin with a dot (.)+    --+    -- -   The domain name can consist of only the characters+    --     [a-z],[A-Z],[0-9], hyphen (-), or dot (.)+    --+    -- -   The domain name can\'t begin or end with a hyphen (-) or dot (.)+    --+    -- -   The domain name must contain at least one dot+    --+    -- You can\'t access the root user of the account or remove an account that+    -- was created with an invalid email address.+    email :: Data.Sensitive Prelude.Text,+    -- | The friendly name of the member account.+    accountName :: Data.Sensitive Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CreateAccount' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'iamUserAccessToBilling', 'createAccount_iamUserAccessToBilling' - If set to @ALLOW@, the new account enables IAM users to access account+-- billing information /if/ they have the required permissions. If set to+-- @DENY@, only the root user of the new account can access account billing+-- information. For more information, see+-- <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate Activating Access to the Billing and Cost Management Console>+-- in the /Amazon Web Services Billing and Cost Management User Guide/.+--+-- If you don\'t specify this parameter, the value defaults to @ALLOW@, and+-- IAM users and roles with the required permissions can access billing+-- information for the new account.+--+-- 'roleName', 'createAccount_roleName' - The name of an IAM role that Organizations automatically preconfigures+-- in the new member account. This role trusts the management account,+-- allowing users in the management account to assume the role, as+-- permitted by the management account administrator. The role has+-- administrator permissions in the new member account.+--+-- If you don\'t specify this parameter, the role name defaults to+-- @OrganizationAccountAccessRole@.+--+-- For more information about how to use this role to access the member+-- account, see the following links:+--+-- -   <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html#orgs_manage_accounts_create-cross-account-role Accessing and Administering the Member Accounts in Your Organization>+--     in the /Organizations User Guide/+--+-- -   Steps 2 and 3 in+--     <https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html Tutorial: Delegate Access Across Amazon Web Services accounts Using IAM Roles>+--     in the /IAM User Guide/+--+-- The <http://wikipedia.org/wiki/regex regex pattern> that is used to+-- validate this parameter. The pattern can include uppercase letters,+-- lowercase letters, digits with no spaces, and any of the following+-- characters: =,.\@-+--+-- 'tags', 'createAccount_tags' - A list of tags that you want to attach to the newly created account. For+-- each tag in the list, you must specify both a tag key and a value. You+-- can set the value to an empty string, but you can\'t set it to @null@.+-- For more information about tagging, see+-- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html Tagging Organizations resources>+-- in the Organizations User Guide.+--+-- If any one of the tags is invalid or if you exceed the maximum allowed+-- number of tags for an account, then the entire request fails and the+-- account is not created.+--+-- 'email', 'createAccount_email' - The email address of the owner to assign to the new member account. This+-- email address must not already be associated with another Amazon Web+-- Services account. You must use a valid email address to complete account+-- creation.+--+-- The rules for a valid email address:+--+-- -   The address must be a minimum of 6 and a maximum of 64 characters+--     long.+--+-- -   All characters must be 7-bit ASCII characters.+--+-- -   There must be one and only one \@ symbol, which separates the local+--     name from the domain name.+--+-- -   The local name can\'t contain any of the following characters:+--+--     whitespace, \" \' ( ) \< > [ ] : ; , \\ | % &+--+-- -   The local name can\'t begin with a dot (.)+--+-- -   The domain name can consist of only the characters+--     [a-z],[A-Z],[0-9], hyphen (-), or dot (.)+--+-- -   The domain name can\'t begin or end with a hyphen (-) or dot (.)+--+-- -   The domain name must contain at least one dot+--+-- You can\'t access the root user of the account or remove an account that+-- was created with an invalid email address.+--+-- 'accountName', 'createAccount_accountName' - The friendly name of the member account.+newCreateAccount ::+  -- | 'email'+  Prelude.Text ->+  -- | 'accountName'+  Prelude.Text ->+  CreateAccount+newCreateAccount pEmail_ pAccountName_ =+  CreateAccount'+    { iamUserAccessToBilling =+        Prelude.Nothing,+      roleName = Prelude.Nothing,+      tags = Prelude.Nothing,+      email = Data._Sensitive Lens.# pEmail_,+      accountName = Data._Sensitive Lens.# pAccountName_+    }++-- | If set to @ALLOW@, the new account enables IAM users to access account+-- billing information /if/ they have the required permissions. If set to+-- @DENY@, only the root user of the new account can access account billing+-- information. For more information, see+-- <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/grantaccess.html#ControllingAccessWebsite-Activate Activating Access to the Billing and Cost Management Console>+-- in the /Amazon Web Services Billing and Cost Management User Guide/.+--+-- If you don\'t specify this parameter, the value defaults to @ALLOW@, and+-- IAM users and roles with the required permissions can access billing+-- information for the new account.+createAccount_iamUserAccessToBilling :: Lens.Lens' CreateAccount (Prelude.Maybe IAMUserAccessToBilling)+createAccount_iamUserAccessToBilling = Lens.lens (\CreateAccount' {iamUserAccessToBilling} -> iamUserAccessToBilling) (\s@CreateAccount' {} a -> s {iamUserAccessToBilling = a} :: CreateAccount)++-- | The name of an IAM role that Organizations automatically preconfigures+-- in the new member account. This role trusts the management account,+-- allowing users in the management account to assume the role, as+-- permitted by the management account administrator. The role has+-- administrator permissions in the new member account.+--+-- If you don\'t specify this parameter, the role name defaults to+-- @OrganizationAccountAccessRole@.+--+-- For more information about how to use this role to access the member+-- account, see the following links:+--+-- -   <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html#orgs_manage_accounts_create-cross-account-role Accessing and Administering the Member Accounts in Your Organization>+--     in the /Organizations User Guide/+--+-- -   Steps 2 and 3 in+--     <https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html Tutorial: Delegate Access Across Amazon Web Services accounts Using IAM Roles>+--     in the /IAM User Guide/+--+-- The <http://wikipedia.org/wiki/regex regex pattern> that is used to+-- validate this parameter. The pattern can include uppercase letters,+-- lowercase letters, digits with no spaces, and any of the following+-- characters: =,.\@-+createAccount_roleName :: Lens.Lens' CreateAccount (Prelude.Maybe Prelude.Text)+createAccount_roleName = Lens.lens (\CreateAccount' {roleName} -> roleName) (\s@CreateAccount' {} a -> s {roleName = a} :: CreateAccount)++-- | A list of tags that you want to attach to the newly created account. For+-- each tag in the list, you must specify both a tag key and a value. You+-- can set the value to an empty string, but you can\'t set it to @null@.+-- For more information about tagging, see+-- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_tagging.html Tagging Organizations resources>+-- in the Organizations User Guide.+--+-- If any one of the tags is invalid or if you exceed the maximum allowed+-- number of tags for an account, then the entire request fails and the+-- account is not created.+createAccount_tags :: Lens.Lens' CreateAccount (Prelude.Maybe [Tag])+createAccount_tags = Lens.lens (\CreateAccount' {tags} -> tags) (\s@CreateAccount' {} a -> s {tags = a} :: CreateAccount) Prelude.. Lens.mapping Lens.coerced++-- | The email address of the owner to assign to the new member account. This+-- email address must not already be associated with another Amazon Web+-- Services account. You must use a valid email address to complete account+-- creation.+--+-- The rules for a valid email address:+--+-- -   The address must be a minimum of 6 and a maximum of 64 characters+--     long.+--+-- -   All characters must be 7-bit ASCII characters.+--+-- -   There must be one and only one \@ symbol, which separates the local+--     name from the domain name.+--+-- -   The local name can\'t contain any of the following characters:+--+--     whitespace, \" \' ( ) \< > [ ] : ; , \\ | % &+--+-- -   The local name can\'t begin with a dot (.)+--+-- -   The domain name can consist of only the characters+--     [a-z],[A-Z],[0-9], hyphen (-), or dot (.)+--+-- -   The domain name can\'t begin or end with a hyphen (-) or dot (.)+--+-- -   The domain name must contain at least one dot+--+-- You can\'t access the root user of the account or remove an account that+-- was created with an invalid email address.+createAccount_email :: Lens.Lens' CreateAccount Prelude.Text+createAccount_email = Lens.lens (\CreateAccount' {email} -> email) (\s@CreateAccount' {} a -> s {email = a} :: CreateAccount) Prelude.. Data._Sensitive++-- | The friendly name of the member account.+createAccount_accountName :: Lens.Lens' CreateAccount Prelude.Text+createAccount_accountName = Lens.lens (\CreateAccount' {accountName} -> accountName) (\s@CreateAccount' {} a -> s {accountName = a} :: CreateAccount) Prelude.. Data._Sensitive++instance Core.AWSRequest CreateAccount where+  type+    AWSResponse CreateAccount =+      CreateAccountResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          CreateAccountResponse'+            Prelude.<$> (x Data..?> "CreateAccountStatus")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable CreateAccount where+  hashWithSalt _salt CreateAccount' {..} =+    _salt+      `Prelude.hashWithSalt` iamUserAccessToBilling+      `Prelude.hashWithSalt` roleName+      `Prelude.hashWithSalt` tags+      `Prelude.hashWithSalt` email+      `Prelude.hashWithSalt` accountName++instance Prelude.NFData CreateAccount where+  rnf CreateAccount' {..} =+    Prelude.rnf iamUserAccessToBilling+      `Prelude.seq` Prelude.rnf roleName+      `Prelude.seq` Prelude.rnf tags+      `Prelude.seq` Prelude.rnf email+      `Prelude.seq` Prelude.rnf accountName++instance Data.ToHeaders CreateAccount where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSOrganizationsV20161128.CreateAccount" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON CreateAccount where+  toJSON CreateAccount' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("IamUserAccessToBilling" Data..=)+              Prelude.<$> iamUserAccessToBilling,+            ("RoleName" Data..=) Prelude.<$> roleName,+            ("Tags" Data..=) Prelude.<$> tags,+            Prelude.Just ("Email" Data..= email),+            Prelude.Just ("AccountName" Data..= accountName)+          ]+      )++instance Data.ToPath CreateAccount where+  toPath = Prelude.const "/"++instance Data.ToQuery CreateAccount where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newCreateAccountResponse' smart constructor.+data CreateAccountResponse = CreateAccountResponse'+  { -- | A structure that contains details about the request to create an+    -- account. This response structure might not be fully populated when you+    -- first receive it because account creation is an asynchronous process.+    -- You can pass the returned @CreateAccountStatus@ ID as a parameter to+    -- DescribeCreateAccountStatus to get status about the progress of the+    -- request at later times. You can also check the CloudTrail log for the+    -- @CreateAccountResult@ event. For more information, see+    -- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_monitoring.html Monitoring the Activity in Your Organization>+    -- in the /Organizations User Guide/.+    createAccountStatus :: Prelude.Maybe CreateAccountStatus,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CreateAccountResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'createAccountStatus', 'createAccountResponse_createAccountStatus' - A structure that contains details about the request to create an+-- account. This response structure might not be fully populated when you+-- first receive it because account creation is an asynchronous process.+-- You can pass the returned @CreateAccountStatus@ ID as a parameter to+-- DescribeCreateAccountStatus to get status about the progress of the+-- request at later times. You can also check the CloudTrail log for the+-- @CreateAccountResult@ event. For more information, see+-- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_monitoring.html Monitoring the Activity in Your Organization>+-- in the /Organizations User Guide/.+--+-- 'httpStatus', 'createAccountResponse_httpStatus' - The response's http status code.+newCreateAccountResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  CreateAccountResponse+newCreateAccountResponse pHttpStatus_ =+  CreateAccountResponse'+    { createAccountStatus =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | A structure that contains details about the request to create an+-- account. This response structure might not be fully populated when you+-- first receive it because account creation is an asynchronous process.+-- You can pass the returned @CreateAccountStatus@ ID as a parameter to+-- DescribeCreateAccountStatus to get status about the progress of the+-- request at later times. You can also check the CloudTrail log for the+-- @CreateAccountResult@ event. For more information, see+-- <https://docs.aws.amazon.com/organizations/latest/userguide/orgs_monitoring.html Monitoring the Activity in Your Organization>+-- in the /Organizations User Guide/.+createAccountResponse_createAccountStatus :: Lens.Lens' CreateAccountResponse (Prelude.Maybe CreateAccountStatus)+createAccountResponse_createAccountStatus = Lens.lens (\CreateAccountResponse' {createAccountStatus} -> createAccountStatus) (\s@CreateAccountResponse' {} a -> s {createAccountStatus = a} :: CreateAccountResponse)++-- | The response's http status code.+createAccountResponse_httpStatus :: Lens.Lens' CreateAccountResponse Prelude.Int+createAccountResponse_httpStatus = Lens.lens (\CreateAccountResponse' {httpStatus} -> httpStatus) (\s@CreateAccountResponse' {} a -> s {httpStatus = a} :: CreateAccountResponse)++instance Prelude.NFData CreateAccountResponse where+  rnf CreateAccountResponse' {..} =+    Prelude.rnf createAccountStatus+      `Prelude.seq` Prelude.rnf httpStatus