2023/02/13 - AWS Account - 4 new api methods
Changes This release of the Account Management API enables customers to view and manage whether AWS Opt-In Regions are enabled or disabled for their Account. For more information, see https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html
Retrieves the opt-in status of a particular Region.
See also: AWS API Documentation
Request Syntax
client.get_region_opt_status(
AccountId='string',
RegionName='string'
)
string
Specifies the 12-digit account ID number of the Amazon Web Services account that you want to access or modify with this operation. If you don't specify this parameter, it defaults to the Amazon Web Services account of the identity used to call the operation. To use this parameter, the caller must be an identity in the organization's management account or a delegated administrator account. The specified account ID must also be a member account in the same organization. The organization must have all features enabled , and the organization must have trusted access enabled for the Account Management service, and optionally a delegated admin account assigned.
Note
The management account can't specify its own AccountId . It must call the operation in standalone context by not including the AccountId parameter.
To call this operation on an account that is not a member of an organization, don't specify this parameter. Instead, call the operation using an identity belonging to the account whose contacts you wish to retrieve or modify.
string
[REQUIRED]
Specifies the Region-code for a given Region name (for example, af-south-1 ). This function will return the status of whatever Region you pass into this parameter.
dict
Response Syntax
{
'RegionName': 'string',
'RegionOptStatus': 'ENABLED'|'ENABLING'|'DISABLING'|'DISABLED'|'ENABLED_BY_DEFAULT'
}
Response Structure
(dict) --
RegionName (string) --
The Region code that was passed in.
RegionOptStatus (string) --
One of the potential statuses a Region can undergo (Enabled, Enabling, Disabled, Disabling, Enabled_By_Default).
Disables (opts-out) a particular Region for an account.
See also: AWS API Documentation
Request Syntax
client.disable_region(
AccountId='string',
RegionName='string'
)
string
Specifies the 12-digit account ID number of the Amazon Web Services account that you want to access or modify with this operation. If you don't specify this parameter, it defaults to the Amazon Web Services account of the identity used to call the operation. To use this parameter, the caller must be an identity in the organization's management account or a delegated administrator account. The specified account ID must also be a member account in the same organization. The organization must have all features enabled , and the organization must have trusted access enabled for the Account Management service, and optionally a delegated admin account assigned.
Note
The management account can't specify its own AccountId . It must call the operation in standalone context by not including the AccountId parameter.
To call this operation on an account that is not a member of an organization, don't specify this parameter. Instead, call the operation using an identity belonging to the account whose contacts you wish to retrieve or modify.
string
[REQUIRED]
Specifies the Region-code for a given Region name (for example, af-south-1 ). When you disable a Region, AWS performs actions to deactivate that Region in your account, such as destroying IAM resources in the Region. This process takes a few minutes for most accounts, but this can take several hours. You cannot enable the Region until the disabling process is fully completed.
None
Lists all the Regions for a given account and their respective opt-in statuses. Optionally, this list can be filtered by the region-opt-status-contains parameter.
See also: AWS API Documentation
Request Syntax
client.list_regions(
AccountId='string',
MaxResults=123,
NextToken='string',
RegionOptStatusContains=[
'ENABLED'|'ENABLING'|'DISABLING'|'DISABLED'|'ENABLED_BY_DEFAULT',
]
)
string
Specifies the 12-digit account ID number of the Amazon Web Services account that you want to access or modify with this operation. If you don't specify this parameter, it defaults to the Amazon Web Services account of the identity used to call the operation. To use this parameter, the caller must be an identity in the organization's management account or a delegated administrator account. The specified account ID must also be a member account in the same organization. The organization must have all features enabled , and the organization must have trusted access enabled for the Account Management service, and optionally a delegated admin account assigned.
Note
The management account can't specify its own AccountId . It must call the operation in standalone context by not including the AccountId parameter.
To call this operation on an account that is not a member of an organization, don't specify this parameter. Instead, call the operation using an identity belonging to the account whose contacts you wish to retrieve or modify.
integer
The total number of items to return in the command’s output. If the total number of items available is more than the value specified, a NextToken is provided in the command’s output. To resume pagination, provide the NextToken value in the starting-token argument of a subsequent command. Do not use the NextToken response element directly outside of the Amazon Web Services CLI. For usage examples, see Pagination in the Amazon Web Services Command Line Interface User Guide .
string
A token used to specify where to start paginating. This is the NextToken from a previously truncated response. For usage examples, see Pagination in the Amazon Web Services Command Line Interface User Guide .
list
A list of Region statuses (Enabling, Enabled, Disabling, Disabled, Enabled_by_default) to use to filter the list of Regions for a given account. For example, passing in a value of ENABLING will only return a list of Regions with a Region status of ENABLING.
(string) --
dict
Response Syntax
{
'NextToken': 'string',
'Regions': [
{
'RegionName': 'string',
'RegionOptStatus': 'ENABLED'|'ENABLING'|'DISABLING'|'DISABLED'|'ENABLED_BY_DEFAULT'
},
]
}
Response Structure
(dict) --
NextToken (string) --
If there is more data to be returned, this will be populated. It should be passed into the next-token request parameter of list-regions .
Regions (list) --
This is a list of Regions for a given account, or if the filtered parameter was used, a list of Regions that match the filter criteria set in the filter parameter.
(dict) --
This is a structure that expresses the Region for a given account, consisting of a name and opt-in status.
RegionName (string) --
The Region code of a given Region (for example, us-east-1 ).
RegionOptStatus (string) --
One of potential statuses a Region can undergo (Enabled, Enabling, Disabled, Disabling, Enabled_By_Default).
Enables (opts-in) a particular Region for an account.
See also: AWS API Documentation
Request Syntax
client.enable_region(
AccountId='string',
RegionName='string'
)
string
Specifies the 12-digit account ID number of the Amazon Web Services account that you want to access or modify with this operation. If you don't specify this parameter, it defaults to the Amazon Web Services account of the identity used to call the operation. To use this parameter, the caller must be an identity in the organization's management account or a delegated administrator account. The specified account ID must also be a member account in the same organization. The organization must have all features enabled , and the organization must have trusted access enabled for the Account Management service, and optionally a delegated admin account assigned.
Note
The management account can't specify its own AccountId . It must call the operation in standalone context by not including the AccountId parameter.
To call this operation on an account that is not a member of an organization, don't specify this parameter. Instead, call the operation using an identity belonging to the account whose contacts you wish to retrieve or modify.
string
[REQUIRED]
Specifies the Region-code for a given Region name (for example, af-south-1 ). When you enable a Region, AWS performs actions to prepare your account in that Region, such as distributing your IAM resources to the Region. This process takes a few minutes for most accounts, but it can take several hours. You cannot use the Region until this process is complete. Furthermore, you cannot disable the Region until the enabling process is fully completed.
None