AwsOrganizationsAccountCapabilityArgs
interface AwsOrganizationsAccountCapabilityArgs extends Omit<aws.organizations.AccountArgs, 'createGovcloud' | 'parentId'> {
closeOnDeletion?: Input<boolean>;
email: Input<string>;
iamUserAccessToBilling?: Input<string | undefined>;
moveToSuspendedOnDelete?: Input<boolean>;
name?: Input<string | undefined>;
parentOrganizationalUnit?: OrganizationalUnit;
roleName?: Input<string | undefined>;
suspendedOuPath?: Input<string>;
tags?: Input<{ [key: string]: Input<string> } | undefined>;
}Account capability arguments.
Hierarchy
AccountArgs, "createGovcloud" | "parentId">AwsOrganizationsAccountCapabilityArgs
Properties
closeOnDeletion: Input<boolean>
Overrides closeOnDeletion
Whether to close the account on deletion. Defaults to false.
email: Input<string>
Inherited from email
Email address of the owner to assign to the new member account. This email address must not already be associated with another AWS account.
iamUserAccessToBilling: Input<string | undefined>
Inherited from iamUserAccessToBilling
If set to ALLOW, the new account enables IAM users and roles to access account billing information if they have the required permissions. If set to DENY, then only the root user (and no roles) of the new account can access account billing information. If this is unset, the AWS API will default this to ALLOW. If the resource is created and this option is changed, it will try to recreate the account.
moveToSuspendedOnDelete: Input<boolean>
Whether to move the account to the suspended OU when deleted. Currently disabled.
name: Input<string | undefined>
Inherited from name
Friendly name for the member account.
The following arguments are optional:
parentOrganizationalUnit: OrganizationalUnit
Parent organisational unit resource reference.
roleName: Input<string | undefined>
Inherited from roleName
The name of an IAM role that Organizations automatically preconfigures in the new member account. This role trusts the root account, allowing users in the root account to assume the role, as permitted by the root account administrator. The role has administrator permissions in the new member account. The Organizations API provides no method for reading this information after account creation, so the provider cannot perform drift detection on its value and will always show a difference for a configured value after import unless ignoreChanges is used.
suspendedOuPath: Input<string>
Organisational unit path for suspended accounts under the organisation root. Currently unused.
tags: Input<{ [key: string]: Input<string> } | undefined>
Inherited from tags
Key-value map of resource tags. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.