import type { MetadataBearer as __MetadataBearer } from "@smithy/types"; import type { DescribeResourcePolicyResponse } from "../models/models_0"; /** * @public */ export type { __MetadataBearer }; /** * @public * * The input for {@link DescribeResourcePolicyCommand}. */ export interface DescribeResourcePolicyCommandInput { } /** * @public * * The output of {@link DescribeResourcePolicyCommand}. */ export interface DescribeResourcePolicyCommandOutput extends DescribeResourcePolicyResponse, __MetadataBearer { } declare const DescribeResourcePolicyCommand_base: { new (input: DescribeResourcePolicyCommandInput): import("@smithy/core/client").CommandImpl; new (...[input]: [] | [DescribeResourcePolicyCommandInput]): import("@smithy/core/client").CommandImpl; getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions; }; /** *

Retrieves information about a resource policy.

You can only call this operation from the management account or a member account that is a delegated administrator.

* @example * Use a bare-bones client and the command you need to make an API call. * ```javascript * import { OrganizationsClient, DescribeResourcePolicyCommand } from "@aws-sdk/client-organizations"; // ES Modules import * // const { OrganizationsClient, DescribeResourcePolicyCommand } = require("@aws-sdk/client-organizations"); // CommonJS import * // import type { OrganizationsClientConfig } from "@aws-sdk/client-organizations"; * const config = {}; // type is OrganizationsClientConfig * const client = new OrganizationsClient(config); * const input = {}; * const command = new DescribeResourcePolicyCommand(input); * const response = await client.send(command); * // { // DescribeResourcePolicyResponse * // ResourcePolicy: { // ResourcePolicy * // ResourcePolicySummary: { // ResourcePolicySummary * // Id: "STRING_VALUE", * // Arn: "STRING_VALUE", * // }, * // Content: "STRING_VALUE", * // }, * // }; * * ``` * * @param DescribeResourcePolicyCommandInput - {@link DescribeResourcePolicyCommandInput} * @returns {@link DescribeResourcePolicyCommandOutput} * @see {@link DescribeResourcePolicyCommandInput} for command's `input` shape. * @see {@link DescribeResourcePolicyCommandOutput} for command's `response` shape. * @see {@link OrganizationsClientResolvedConfig | config} for OrganizationsClient's `config` shape. * * @throws {@link AccessDeniedException} (client fault) *

You don't have permissions to perform the requested operation. The user or role that * is making the request must have at least one IAM permissions policy attached that * grants the required permissions. For more information, see Access Management in the * IAM User Guide.

* * @throws {@link AWSOrganizationsNotInUseException} (client fault) *

Your account isn't a member of an organization. To make this request, you must use the * credentials of an account that belongs to an organization.

* * @throws {@link ConstraintViolationException} (client fault) *

Performing this operation violates a minimum or maximum value limit. For example, * attempting to remove the last service control policy (SCP) from an OU or root, inviting * or creating too many accounts to the organization, or attaching too many policies to an * account, OU, or root. This exception includes a reason that contains additional * information about the violated limit:

* *

Some of the reasons in the following list might not be applicable to this specific * API or operation.

* *

*
ACCOUNT_CANNOT_LEAVE_ORGANIZATION: You attempted to remove the management * account from the organization. You can't remove the management account. Instead, * after you remove all member accounts, delete the organization itself.
*
*
ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION: You attempted to remove an * account from the organization that doesn't yet have enough information to exist * as a standalone account. This account requires you to first complete phone * verification. Follow the steps at Removing a member account from your organization in the * Organizations User Guide.
*
*
ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of * accounts that can be in progress at a time.
*
*
ACCOUNT_CREATION_NOT_COMPLETE: Your account setup isn't complete or your * account isn't fully active. You must complete the account setup before you * create an organization.
*
*
ACCOUNT_NOT_ACTIVE_FOR_TRANSFER_RESPONSIBILITY: Your account setup isn't * complete or your account isn't fully active to invite or accept a Billing * Transfer invitation.
*
*
ACTIVE_RESPONSIBILITY_TRANSFER_PROCESS: You cannot delete organization due to an ongoing responsibility transfer process. For example, a pending invitation or an in-progress transfer. To delete the organization, you must resolve the current transfer process.
*
*
ACCOUNT_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the limit on the number * of accounts in an organization. If you need more accounts, contact Amazon Web Services Support to * request an increase in your limit.
*
Or the number of invitations that you tried to send would cause you to exceed * the limit of accounts in your organization. Send fewer invitations or contact * Amazon Web Services Support to request an increase in the number of accounts.
* *
Deleted and closed accounts still count toward your limit.
* * *
If you get this exception when running a command immediately after * creating the organization, wait one hour and try again. After an hour, if * the command continues to fail with this error, contact Amazon Web Services Support.
* *
*
ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED: Your organization has * more than 5000 accounts, and you can only use the standard migration process for * organizations with less than 5000 accounts. Use the assisted migration process * to enable all features mode, or create a support case for assistance if you are * unable to use assisted migration.
*
*
CANNOT_REGISTER_SUSPENDED_ACCOUNT_AS_DELEGATED_ADMINISTRATOR: You cannot * register a suspended account as a delegated administrator.
*
*
CANNOT_REGISTER_MASTER_AS_DELEGATED_ADMINISTRATOR: You attempted to register * the management account of the organization as a delegated administrator for an * Amazon Web Services service integrated with Organizations. You can designate only a member account as a * delegated administrator.
*
*
CANNOT_CLOSE_MANAGEMENT_ACCOUNT: You attempted to close the management * account. To close the management account for the organization, you must first * either remove or close all member accounts in the organization. Follow standard * account closure process using root credentials.
*
*
CANNOT_REMOVE_DELEGATED_ADMINISTRATOR_FROM_ORG: You attempted to remove an * account that is registered as a delegated administrator for a service integrated * with your organization. To complete this operation, you must first deregister * this account as a delegated administrator.
*
*
CLOSE_ACCOUNT_QUOTA_EXCEEDED: You have exceeded close account quota for the * past 30 days.
*
*
CLOSE_ACCOUNT_REQUESTS_LIMIT_EXCEEDED: You attempted to exceed the number of * accounts that you can close at a time.
*
*
CREATE_ORGANIZATION_IN_BILLING_MODE_UNSUPPORTED_REGION: To create an * organization in the specified region, you must enable all features mode.
*
*
DELEGATED_ADMINISTRATOR_EXISTS_FOR_THIS_SERVICE: You attempted to register an * Amazon Web Services account as a delegated administrator for an Amazon Web Services service that already has * a delegated administrator. To complete this operation, you must first deregister * any existing delegated administrators for this service.
*
*
EMAIL_VERIFICATION_CODE_EXPIRED: The email verification code is only valid for * a limited period of time. You must resubmit the request and generate a new * verification code.
*
*
HANDSHAKE_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of * handshakes that you can send in one day.
*
*
INVALID_PAYMENT_INSTRUMENT: You cannot remove an account because no supported * payment method is associated with the account. Amazon Web Services does not support cards * issued by financial institutions in Russia or Belarus. For more information, see * Managing your * Amazon Web Services payments.
*
*
MASTER_ACCOUNT_ADDRESS_DOES_NOT_MATCH_MARKETPLACE: To create an account in * this organization, you first must migrate the organization's management account * to the marketplace that corresponds to the management account's address. All * accounts in an organization must be associated with the same marketplace.
*
*
MASTER_ACCOUNT_MISSING_BUSINESS_LICENSE: Applies only to the Amazon Web Services Regions in * China. To create an organization, the master must have a valid business license. * For more information, contact customer support.
*
*
MASTER_ACCOUNT_MISSING_CONTACT_INFO: To complete this operation, you must * first provide a valid contact address and phone number for the management * account. Then try the operation again.
*
*
MASTER_ACCOUNT_NOT_GOVCLOUD_ENABLED: To complete this operation, the * management account must have an associated account in the Amazon Web Services GovCloud * (US-West) Region. For more information, see Organizations * in the * Amazon Web Services GovCloud User Guide.
*
*
MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To create an organization with * this management account, you first must associate a valid payment instrument, * such as a credit card, with the account. For more information, see Considerations before removing an account from an organization in * the Organizations User Guide.
*
*
MAX_DELEGATED_ADMINISTRATORS_FOR_SERVICE_LIMIT_EXCEEDED: You attempted to * register more delegated administrators than allowed for the service principal. *
*
*
MAX_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to exceed the number * of policies of a certain type that can be attached to an entity at one * time.
*
*
MAX_TAG_LIMIT_EXCEEDED: You have exceeded the number of tags allowed on this * resource.
*
*
MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To complete this operation with * this member account, you first must associate a valid payment instrument, such * as a credit card, with the account. For more information, see Considerations before removing an account from an organization in * the Organizations User Guide.
*
*
MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to detach a policy * from an entity that would cause the entity to have fewer than the minimum number * of policies of a certain type required.
*
*
ORGANIZATION_NOT_IN_ALL_FEATURES_MODE: You attempted to perform an operation * that requires the organization to be configured to support all features. An * organization that supports only consolidated billing features can't perform this * operation.
*
*
OU_DEPTH_LIMIT_EXCEEDED: You attempted to create an OU tree that is too many * levels deep.
*
*
OU_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the number of OUs that you * can have in an organization.
*
*
POLICY_CONTENT_LIMIT_EXCEEDED: You attempted to create a policy that is larger * than the maximum size.
*
*
POLICY_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the number of policies * that you can have in an organization.
*
*
POLICY_TYPE_ENABLED_FOR_THIS_SERVICE: You attempted to disable service access * before you disabled the policy type (for example, SECURITYHUB_POLICY). To * complete this operation, you must first disable the policy type.
*
*
RESPONSIBILITY_TRANSFER_MAX_INBOUND_QUOTA_VIOLATION: You have exceeded your inbound * transfers limit.
*
*
RESPONSIBILITY_TRANSFER_MAX_LEVEL_VIOLATION: You have exceeded the maximum length of your * transfer chain.
*
*
RESPONSIBILITY_TRANSFER_MAX_OUTBOUND_QUOTA_VIOLATION: You have exceeded your outbound * transfers limit.
*
*
RESPONSIBILITY_TRANSFER_MAX_TRANSFERS_QUOTA_VIOLATION: You have exceeded the maximum * number of inbound transfers allowed in a transfer chain.
*
*
SERVICE_ACCESS_NOT_ENABLED:
*
- *
  You attempted to register a delegated administrator before you enabled * service access. Call the EnableAWSServiceAccess API * first.
  *
- *
  You attempted to enable a policy type before you enabled service * access. Call the EnableAWSServiceAccess API first.
  *
*
*
TAG_POLICY_VIOLATION: You attempted to create or update a resource with tags * that are not compliant with the tag policy requirements for this account.
*
*
TRANSFER_RESPONSIBILITY_SOURCE_DELETION_IN_PROGRESS: The source organization cannot accept * this transfer invitation because it is marked for deletion.
*
*
TRANSFER_RESPONSIBILITY_TARGET_DELETION_IN_PROGRESS: The source organization cannot accept * this transfer invitation because target organization is marked for deletion.
*
*
TRANSFER_RESPONSIBILITY_UPDATE_NOT_ALLOWED: You cannot update this transfer * because it is no longer active. Transfers that have been withdrawn, declined, * expired, or cancelled cannot be modified.
*
*
UNMET_BILLING_PREREQUISITE: Your current billing configuration is unsupported. * Contact Amazon Web Services Support for assistance.
*
*
UNSUPPORTED_PRICING: Ineligible for Billing Transfer. Your organization is * subject to a pricing agreement with Amazon Web Services that Billing Transfer does not * support.
*
*
WAIT_PERIOD_ACTIVE: After you create an Amazon Web Services account, you must wait until at * least four days after the account was created. Invited accounts aren't subject * to this waiting period.
*

* * @throws {@link ResourcePolicyNotFoundException} (client fault) *

We can't find a resource policy request with the parameter that you specified.

* * @throws {@link ServiceException} (server fault) *

Organizations can't complete your request because of an internal service error. Try again * later.

* * @throws {@link TooManyRequestsException} (client fault) *

You have sent too many requests in too short a period of time. The quota helps protect * against denial-of-service attacks. Try again later.

For information about quotas that affect Organizations, see Quotas for Organizations in the * Organizations User Guide.

* * @throws {@link UnsupportedAPIEndpointException} (client fault) *

This action isn't available in the current Amazon Web Services Region.

* * @throws {@link OrganizationsServiceException} *

Base exception class for all service exceptions from Organizations service.

* * * @public */ export declare class DescribeResourcePolicyCommand extends DescribeResourcePolicyCommand_base { /** @internal type navigation helper, not in runtime. */ protected static __types: { api: { input: {}; output: DescribeResourcePolicyResponse; }; sdk: { input: DescribeResourcePolicyCommandInput; output: DescribeResourcePolicyCommandOutput; }; }; }