1// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
2
3package organizations
4
5const (
6
7	// ErrCodeAWSOrganizationsNotInUseException for service response error code
8	// "AWSOrganizationsNotInUseException".
9	//
10	// Your account isn't a member of an organization. To make this request, you
11	// must use the credentials of an account that belongs to an organization.
12	ErrCodeAWSOrganizationsNotInUseException = "AWSOrganizationsNotInUseException"
13
14	// ErrCodeAccessDeniedException for service response error code
15	// "AccessDeniedException".
16	//
17	// You don't have permissions to perform the requested operation. The user or
18	// role that is making the request must have at least one IAM permissions policy
19	// attached that grants the required permissions. For more information, see
20	// Access Management (https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html)
21	// in the IAM User Guide.
22	ErrCodeAccessDeniedException = "AccessDeniedException"
23
24	// ErrCodeAccessDeniedForDependencyException for service response error code
25	// "AccessDeniedForDependencyException".
26	//
27	// The operation that you attempted requires you to have the iam:CreateServiceLinkedRole
28	// for organizations.amazonaws.com permission so that AWS Organizations can
29	// create the required service-linked role. You don't have that permission.
30	ErrCodeAccessDeniedForDependencyException = "AccessDeniedForDependencyException"
31
32	// ErrCodeAccountNotFoundException for service response error code
33	// "AccountNotFoundException".
34	//
35	// We can't find an AWS account with the AccountId that you specified. Or the
36	// account whose credentials you used to make this request isn't a member of
37	// an organization.
38	ErrCodeAccountNotFoundException = "AccountNotFoundException"
39
40	// ErrCodeAccountOwnerNotVerifiedException for service response error code
41	// "AccountOwnerNotVerifiedException".
42	//
43	// You can't invite an existing account to your organization until you verify
44	// that you own the email address associated with the master account. For more
45	// information, see Email Address Verification (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_create.html#about-email-verification)
46	// in the AWS Organizations User Guide.
47	ErrCodeAccountOwnerNotVerifiedException = "AccountOwnerNotVerifiedException"
48
49	// ErrCodeAlreadyInOrganizationException for service response error code
50	// "AlreadyInOrganizationException".
51	//
52	// This account is already a member of an organization. An account can belong
53	// to only one organization at a time.
54	ErrCodeAlreadyInOrganizationException = "AlreadyInOrganizationException"
55
56	// ErrCodeChildNotFoundException for service response error code
57	// "ChildNotFoundException".
58	//
59	// We can't find an organizational unit (OU) or AWS account with the ChildId
60	// that you specified.
61	ErrCodeChildNotFoundException = "ChildNotFoundException"
62
63	// ErrCodeConcurrentModificationException for service response error code
64	// "ConcurrentModificationException".
65	//
66	// The target of the operation is currently being modified by a different request.
67	// Try again later.
68	ErrCodeConcurrentModificationException = "ConcurrentModificationException"
69
70	// ErrCodeConstraintViolationException for service response error code
71	// "ConstraintViolationException".
72	//
73	// Performing this operation violates a minimum or maximum value limit. Examples
74	// include attempting to remove the last service control policy (SCP) from an
75	// OU or root, or attaching too many policies to an account, OU, or root. This
76	// exception includes a reason that contains additional information about the
77	// violated limit.
78	//
79	// Some of the reasons in the following list might not be applicable to this
80	// specific API or operation:
81	//
82	//    * ACCOUNT_CANNOT_LEAVE_WITHOUT_EULA: You attempted to remove an account
83	//    from the organization that doesn't yet have enough information to exist
84	//    as a standalone account. This account requires you to first agree to the
85	//    AWS Customer Agreement. Follow the steps at To leave an organization when
86	//    all required account information has not yet been provided (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info)
87	//    in the AWS Organizations User Guide.
88	//
89	//    * ACCOUNT_CANNOT_LEAVE_WITHOUT_PHONE_VERIFICATION: You attempted to remove
90	//    an account from the organization that doesn't yet have enough information
91	//    to exist as a standalone account. This account requires you to first complete
92	//    phone verification. Follow the steps at To leave an organization when
93	//    all required account information has not yet been provided (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info)
94	//    in the AWS Organizations User Guide.
95	//
96	//    * ACCOUNT_CREATION_RATE_LIMIT_EXCEEDED: You attempted to exceed the number
97	//    of accounts that you can create in one day.
98	//
99	//    * ACCOUNT_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the limit on
100	//    the number of accounts in an organization. If you need more accounts,
101	//    contact AWS Support (https://console.aws.amazon.com/support/home#/) to
102	//    request an increase in your limit. Or the number of invitations that you
103	//    tried to send would cause you to exceed the limit of accounts in your
104	//    organization. Send fewer invitations or contact AWS Support to request
105	//    an increase in the number of accounts. Deleted and closed accounts still
106	//    count toward your limit. If you get receive this exception when running
107	//    a command immediately after creating the organization, wait one hour and
108	//    try again. If after an hour it continues to fail with this error, contact
109	//    AWS Support (https://console.aws.amazon.com/support/home#/).
110	//
111	//    * HANDSHAKE_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of
112	//    handshakes that you can send in one day.
113	//
114	//    * MASTER_ACCOUNT_ADDRESS_DOES_NOT_MATCH_MARKETPLACE: To create an account
115	//    in this organization, you first must migrate the organization's master
116	//    account to the marketplace that corresponds to the master account's address.
117	//    For example, accounts with India addresses must be associated with the
118	//    AISPL marketplace. All accounts in an organization must be associated
119	//    with the same marketplace.
120	//
121	//    * MASTER_ACCOUNT_MISSING_CONTACT_INFO: To complete this operation, you
122	//    must first provide contact a valid address and phone number for the master
123	//    account. Then try the operation again.
124	//
125	//    * MASTER_ACCOUNT_NOT_GOVCLOUD_ENABLED: To complete this operation, the
126	//    master account must have an associated account in the AWS GovCloud (US-West)
127	//    Region. For more information, see AWS Organizations (http://docs.aws.amazon.com/govcloud-us/latest/UserGuide/govcloud-organizations.html)
128	//    in the AWS GovCloud User Guide.
129	//
130	//    * MASTER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To create an organization
131	//    with this master account, you first must associate a valid payment instrument,
132	//    such as a credit card, with the account. Follow the steps at To leave
133	//    an organization when all required account information has not yet been
134	//    provided (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info)
135	//    in the AWS Organizations User Guide.
136	//
137	//    * MAX_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to exceed the
138	//    number of policies of a certain type that can be attached to an entity
139	//    at one time.
140	//
141	//    * MAX_TAG_LIMIT_EXCEEDED: You have exceeded the number of tags allowed
142	//    on this resource.
143	//
144	//    * MEMBER_ACCOUNT_PAYMENT_INSTRUMENT_REQUIRED: To complete this operation
145	//    with this member account, you first must associate a valid payment instrument,
146	//    such as a credit card, with the account. Follow the steps at To leave
147	//    an organization when all required account information has not yet been
148	//    provided (http://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_remove.html#leave-without-all-info)
149	//    in the AWS Organizations User Guide.
150	//
151	//    * MIN_POLICY_TYPE_ATTACHMENT_LIMIT_EXCEEDED: You attempted to detach a
152	//    policy from an entity, which would cause the entity to have fewer than
153	//    the minimum number of policies of the required type.
154	//
155	//    * OU_DEPTH_LIMIT_EXCEEDED: You attempted to create an OU tree that is
156	//    too many levels deep.
157	//
158	//    * ORGANIZATION_NOT_IN_ALL_FEATURES_MODE: You attempted to perform an operation
159	//    that requires the organization to be configured to support all features.
160	//    An organization that supports only consolidated billing features can't
161	//    perform this operation.
162	//
163	//    * OU_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the number of OUs
164	//    that you can have in an organization.
165	//
166	//    * POLICY_NUMBER_LIMIT_EXCEEDED. You attempted to exceed the number of
167	//    policies that you can have in an organization.
168	ErrCodeConstraintViolationException = "ConstraintViolationException"
169
170	// ErrCodeCreateAccountStatusNotFoundException for service response error code
171	// "CreateAccountStatusNotFoundException".
172	//
173	// We can't find a create account request with the CreateAccountRequestId that
174	// you specified.
175	ErrCodeCreateAccountStatusNotFoundException = "CreateAccountStatusNotFoundException"
176
177	// ErrCodeDestinationParentNotFoundException for service response error code
178	// "DestinationParentNotFoundException".
179	//
180	// We can't find the destination container (a root or OU) with the ParentId
181	// that you specified.
182	ErrCodeDestinationParentNotFoundException = "DestinationParentNotFoundException"
183
184	// ErrCodeDuplicateAccountException for service response error code
185	// "DuplicateAccountException".
186	//
187	// That account is already present in the specified destination.
188	ErrCodeDuplicateAccountException = "DuplicateAccountException"
189
190	// ErrCodeDuplicateHandshakeException for service response error code
191	// "DuplicateHandshakeException".
192	//
193	// A handshake with the same action and target already exists. For example,
194	// if you invited an account to join your organization, the invited account
195	// might already have a pending invitation from this organization. If you intend
196	// to resend an invitation to an account, ensure that existing handshakes that
197	// might be considered duplicates are canceled or declined.
198	ErrCodeDuplicateHandshakeException = "DuplicateHandshakeException"
199
200	// ErrCodeDuplicateOrganizationalUnitException for service response error code
201	// "DuplicateOrganizationalUnitException".
202	//
203	// An OU with the same name already exists.
204	ErrCodeDuplicateOrganizationalUnitException = "DuplicateOrganizationalUnitException"
205
206	// ErrCodeDuplicatePolicyAttachmentException for service response error code
207	// "DuplicatePolicyAttachmentException".
208	//
209	// The selected policy is already attached to the specified target.
210	ErrCodeDuplicatePolicyAttachmentException = "DuplicatePolicyAttachmentException"
211
212	// ErrCodeDuplicatePolicyException for service response error code
213	// "DuplicatePolicyException".
214	//
215	// A policy with the same name already exists.
216	ErrCodeDuplicatePolicyException = "DuplicatePolicyException"
217
218	// ErrCodeEffectivePolicyNotFoundException for service response error code
219	// "EffectivePolicyNotFoundException".
220	//
221	// If you ran this action on the master account, this policy type is not enabled.
222	// If you ran the action on a member account, the account doesn't have an effective
223	// policy of this type. Contact the administrator of your organization about
224	// attaching a policy of this type to the account.
225	ErrCodeEffectivePolicyNotFoundException = "EffectivePolicyNotFoundException"
226
227	// ErrCodeFinalizingOrganizationException for service response error code
228	// "FinalizingOrganizationException".
229	//
230	// AWS Organizations couldn't perform the operation because your organization
231	// hasn't finished initializing. This can take up to an hour. Try again later.
232	// If after one hour you continue to receive this error, contact AWS Support
233	// (https://console.aws.amazon.com/support/home#/).
234	ErrCodeFinalizingOrganizationException = "FinalizingOrganizationException"
235
236	// ErrCodeHandshakeAlreadyInStateException for service response error code
237	// "HandshakeAlreadyInStateException".
238	//
239	// The specified handshake is already in the requested state. For example, you
240	// can't accept a handshake that was already accepted.
241	ErrCodeHandshakeAlreadyInStateException = "HandshakeAlreadyInStateException"
242
243	// ErrCodeHandshakeConstraintViolationException for service response error code
244	// "HandshakeConstraintViolationException".
245	//
246	// The requested operation would violate the constraint identified in the reason
247	// code.
248	//
249	// Some of the reasons in the following list might not be applicable to this
250	// specific API or operation:
251	//
252	//    * ACCOUNT_NUMBER_LIMIT_EXCEEDED: You attempted to exceed the limit on
253	//    the number of accounts in an organization. Note that deleted and closed
254	//    accounts still count toward your limit. If you get this exception immediately
255	//    after creating the organization, wait one hour and try again. If after
256	//    an hour it continues to fail with this error, contact AWS Support (https://console.aws.amazon.com/support/home#/).
257	//
258	//    * ALREADY_IN_AN_ORGANIZATION: The handshake request is invalid because
259	//    the invited account is already a member of an organization.
260	//
261	//    * HANDSHAKE_RATE_LIMIT_EXCEEDED: You attempted to exceed the number of
262	//    handshakes that you can send in one day.
263	//
264	//    * INVITE_DISABLED_DURING_ENABLE_ALL_FEATURES: You can't issue new invitations
265	//    to join an organization while it's in the process of enabling all features.
266	//    You can resume inviting accounts after you finalize the process when all
267	//    accounts have agreed to the change.
268	//
269	//    * ORGANIZATION_ALREADY_HAS_ALL_FEATURES: The handshake request is invalid
270	//    because the organization has already enabled all features.
271	//
272	//    * ORGANIZATION_FROM_DIFFERENT_SELLER_OF_RECORD: The request failed because
273	//    the account is from a different marketplace than the accounts in the organization.
274	//    For example, accounts with India addresses must be associated with the
275	//    AISPL marketplace. All accounts in an organization must be from the same
276	//    marketplace.
277	//
278	//    * ORGANIZATION_MEMBERSHIP_CHANGE_RATE_LIMIT_EXCEEDED: You attempted to
279	//    change the membership of an account too quickly after its previous change.
280	//
281	//    * PAYMENT_INSTRUMENT_REQUIRED: You can't complete the operation with an
282	//    account that doesn't have a payment instrument, such as a credit card,
283	//    associated with it.
284	ErrCodeHandshakeConstraintViolationException = "HandshakeConstraintViolationException"
285
286	// ErrCodeHandshakeNotFoundException for service response error code
287	// "HandshakeNotFoundException".
288	//
289	// We can't find a handshake with the HandshakeId that you specified.
290	ErrCodeHandshakeNotFoundException = "HandshakeNotFoundException"
291
292	// ErrCodeInvalidHandshakeTransitionException for service response error code
293	// "InvalidHandshakeTransitionException".
294	//
295	// You can't perform the operation on the handshake in its current state. For
296	// example, you can't cancel a handshake that was already accepted or accept
297	// a handshake that was already declined.
298	ErrCodeInvalidHandshakeTransitionException = "InvalidHandshakeTransitionException"
299
300	// ErrCodeInvalidInputException for service response error code
301	// "InvalidInputException".
302	//
303	// The requested operation failed because you provided invalid values for one
304	// or more of the request parameters. This exception includes a reason that
305	// contains additional information about the violated limit:
306	//
307	// Some of the reasons in the following list might not be applicable to this
308	// specific API or operation:
309	//
310	//    * IMMUTABLE_POLICY: You specified a policy that is managed by AWS and
311	//    can't be modified.
312	//
313	//    * INPUT_REQUIRED: You must include a value for all required parameters.
314	//
315	//    * INVALID_ENUM: You specified an invalid value.
316	//
317	//    * INVALID_ENUM_POLICY_TYPE: You specified an invalid policy type.
318	//
319	//    * INVALID_FULL_NAME_TARGET: You specified a full name that contains invalid
320	//    characters.
321	//
322	//    * INVALID_LIST_MEMBER: You provided a list to a parameter that contains
323	//    at least one invalid value.
324	//
325	//    * INVALID_PAGINATION_TOKEN: Get the value for the NextToken parameter
326	//    from the response to a previous call of the operation.
327	//
328	//    * INVALID_PARTY_TYPE_TARGET: You specified the wrong type of entity (account,
329	//    organization, or email) as a party.
330	//
331	//    * INVALID_PATTERN: You provided a value that doesn't match the required
332	//    pattern.
333	//
334	//    * INVALID_PATTERN_TARGET_ID: You specified a policy target ID that doesn't
335	//    match the required pattern.
336	//
337	//    * INVALID_ROLE_NAME: You provided a role name that isn't valid. A role
338	//    name can't begin with the reserved prefix AWSServiceRoleFor.
339	//
340	//    * INVALID_SYNTAX_ORGANIZATION_ARN: You specified an invalid Amazon Resource
341	//    Name (ARN) for the organization.
342	//
343	//    * INVALID_SYNTAX_POLICY_ID: You specified an invalid policy ID.
344	//
345	//    * INVALID_SYSTEM_TAGS_PARAMETER: You specified a tag key that is a system
346	//    tag. You can’t add, edit, or delete system tag keys because they're
347	//    reserved for AWS use. System tags don’t count against your tags per
348	//    resource limit.
349	//
350	//    * MAX_FILTER_LIMIT_EXCEEDED: You can specify only one filter parameter
351	//    for the operation.
352	//
353	//    * MAX_LENGTH_EXCEEDED: You provided a string parameter that is longer
354	//    than allowed.
355	//
356	//    * MAX_VALUE_EXCEEDED: You provided a numeric parameter that has a larger
357	//    value than allowed.
358	//
359	//    * MIN_LENGTH_EXCEEDED: You provided a string parameter that is shorter
360	//    than allowed.
361	//
362	//    * MIN_VALUE_EXCEEDED: You provided a numeric parameter that has a smaller
363	//    value than allowed.
364	//
365	//    * MOVING_ACCOUNT_BETWEEN_DIFFERENT_ROOTS: You can move an account only
366	//    between entities in the same root.
367	ErrCodeInvalidInputException = "InvalidInputException"
368
369	// ErrCodeMalformedPolicyDocumentException for service response error code
370	// "MalformedPolicyDocumentException".
371	//
372	// The provided policy document doesn't meet the requirements of the specified
373	// policy type. For example, the syntax might be incorrect. For details about
374	// service control policy syntax, see Service Control Policy Syntax (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_scp-syntax.html)
375	// in the AWS Organizations User Guide.
376	ErrCodeMalformedPolicyDocumentException = "MalformedPolicyDocumentException"
377
378	// ErrCodeMasterCannotLeaveOrganizationException for service response error code
379	// "MasterCannotLeaveOrganizationException".
380	//
381	// You can't remove a master account from an organization. If you want the master
382	// account to become a member account in another organization, you must first
383	// delete the current organization of the master account.
384	ErrCodeMasterCannotLeaveOrganizationException = "MasterCannotLeaveOrganizationException"
385
386	// ErrCodeOrganizationNotEmptyException for service response error code
387	// "OrganizationNotEmptyException".
388	//
389	// The organization isn't empty. To delete an organization, you must first remove
390	// all accounts except the master account, delete all OUs, and delete all policies.
391	ErrCodeOrganizationNotEmptyException = "OrganizationNotEmptyException"
392
393	// ErrCodeOrganizationalUnitNotEmptyException for service response error code
394	// "OrganizationalUnitNotEmptyException".
395	//
396	// The specified OU is not empty. Move all accounts to another root or to other
397	// OUs, remove all child OUs, and try the operation again.
398	ErrCodeOrganizationalUnitNotEmptyException = "OrganizationalUnitNotEmptyException"
399
400	// ErrCodeOrganizationalUnitNotFoundException for service response error code
401	// "OrganizationalUnitNotFoundException".
402	//
403	// We can't find an OU with the OrganizationalUnitId that you specified.
404	ErrCodeOrganizationalUnitNotFoundException = "OrganizationalUnitNotFoundException"
405
406	// ErrCodeParentNotFoundException for service response error code
407	// "ParentNotFoundException".
408	//
409	// We can't find a root or OU with the ParentId that you specified.
410	ErrCodeParentNotFoundException = "ParentNotFoundException"
411
412	// ErrCodePolicyChangesInProgressException for service response error code
413	// "PolicyChangesInProgressException".
414	//
415	// Changes to the effective policy are in progress, and its contents can't be
416	// returned. Try the operation again later.
417	ErrCodePolicyChangesInProgressException = "PolicyChangesInProgressException"
418
419	// ErrCodePolicyInUseException for service response error code
420	// "PolicyInUseException".
421	//
422	// The policy is attached to one or more entities. You must detach it from all
423	// roots, OUs, and accounts before performing this operation.
424	ErrCodePolicyInUseException = "PolicyInUseException"
425
426	// ErrCodePolicyNotAttachedException for service response error code
427	// "PolicyNotAttachedException".
428	//
429	// The policy isn't attached to the specified target in the specified root.
430	ErrCodePolicyNotAttachedException = "PolicyNotAttachedException"
431
432	// ErrCodePolicyNotFoundException for service response error code
433	// "PolicyNotFoundException".
434	//
435	// We can't find a policy with the PolicyId that you specified.
436	ErrCodePolicyNotFoundException = "PolicyNotFoundException"
437
438	// ErrCodePolicyTypeAlreadyEnabledException for service response error code
439	// "PolicyTypeAlreadyEnabledException".
440	//
441	// The specified policy type is already enabled in the specified root.
442	ErrCodePolicyTypeAlreadyEnabledException = "PolicyTypeAlreadyEnabledException"
443
444	// ErrCodePolicyTypeNotAvailableForOrganizationException for service response error code
445	// "PolicyTypeNotAvailableForOrganizationException".
446	//
447	// You can't use the specified policy type with the feature set currently enabled
448	// for this organization. For example, you can enable SCPs only after you enable
449	// all features in the organization. For more information, see Enabling and
450	// Disabling a Policy Type on a Root (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies.html#enable_policies_on_root)
451	// in the AWS Organizations User Guide.
452	ErrCodePolicyTypeNotAvailableForOrganizationException = "PolicyTypeNotAvailableForOrganizationException"
453
454	// ErrCodePolicyTypeNotEnabledException for service response error code
455	// "PolicyTypeNotEnabledException".
456	//
457	// The specified policy type isn't currently enabled in this root. You can't
458	// attach policies of the specified type to entities in a root until you enable
459	// that type in the root. For more information, see Enabling All Features in
460	// Your Organization (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org_support-all-features.html)
461	// in the AWS Organizations User Guide.
462	ErrCodePolicyTypeNotEnabledException = "PolicyTypeNotEnabledException"
463
464	// ErrCodeRootNotFoundException for service response error code
465	// "RootNotFoundException".
466	//
467	// We can't find a root with the RootId that you specified.
468	ErrCodeRootNotFoundException = "RootNotFoundException"
469
470	// ErrCodeServiceException for service response error code
471	// "ServiceException".
472	//
473	// AWS Organizations can't complete your request because of an internal service
474	// error. Try again later.
475	ErrCodeServiceException = "ServiceException"
476
477	// ErrCodeSourceParentNotFoundException for service response error code
478	// "SourceParentNotFoundException".
479	//
480	// We can't find a source root or OU with the ParentId that you specified.
481	ErrCodeSourceParentNotFoundException = "SourceParentNotFoundException"
482
483	// ErrCodeTargetNotFoundException for service response error code
484	// "TargetNotFoundException".
485	//
486	// We can't find a root, OU, or account with the TargetId that you specified.
487	ErrCodeTargetNotFoundException = "TargetNotFoundException"
488
489	// ErrCodeTooManyRequestsException for service response error code
490	// "TooManyRequestsException".
491	//
492	// You have sent too many requests in too short a period of time. The limit
493	// helps protect against denial-of-service attacks. Try again later.
494	//
495	// For information on limits that affect AWS Organizations, see Limits of AWS
496	// Organizations (https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html)
497	// in the AWS Organizations User Guide.
498	ErrCodeTooManyRequestsException = "TooManyRequestsException"
499
500	// ErrCodeUnsupportedAPIEndpointException for service response error code
501	// "UnsupportedAPIEndpointException".
502	//
503	// This action isn't available in the current Region.
504	ErrCodeUnsupportedAPIEndpointException = "UnsupportedAPIEndpointException"
505)
506