Changes This release introduces delegated administrator for AWS Organizations, a new feature to help you delegate the management of your Organizations policies, enabling you to govern your AWS organization in a decentralized way. You can now allow member accounts to manage Organizations policies.
Changes This release adds the INVALID_PAYMENT_INSTRUMENT as a fail reason and an error message.
Changes This release provides the new CloseAccount API that enables principals in the management account to close any member account within an organization.
Changes Added support for a few additional exception codes for some AWS Organizations APIs.
Changes AWS Organizations now enables you to add tags to the AWS accounts, organizational units, organization root, and policies in your organization.
Changes Documentation updates for some new error reasons.
Changes AI services opt out policies enable you to control what AI service data is collected and stored for the accounts in your organization. By default, AWS artificial intelligence (AI) services collect and store data as part of operating and supporting the continuous improvement life cycle for each service. You can use these policies to opt out of this process for all of your AWS accounts to ensure that your data is not persisted within AWS AI service data stores or used for service improvements.
Changes This release adds support for a new backup policy type for AWS Organizations.
Changes Introduces actions for giving a member account administrative Organizations permissions for an AWS service. You can run this action only for AWS services that support this feature.
Changes Introduces the DescribeEffectivePolicy action, which returns the contents of the policy that's in effect for the account.
Changes You can tag and untag accounts in your organization and view tags on an account in your organization.
Changes AWS Organizations is now available in the AWS GovCloud (US) Regions, and we added a new API action for creating accounts in those Regions. For more information, see CreateGovCloudAccount in the AWS Organizations API Reference.
Changes This release adds APIs that you can use to enable and disable integration with AWS services designed to work with AWS Organizations. This integration allows the AWS service to perform operations on your behalf on all of the accounts in your organization. Although you can use these APIs yourself, we recommend that you instead use the commands provided in the other AWS service to enable integration with AWS Organizations.
Changes This release supports integrating other AWS services with AWS Organizations through the use of an IAM service-linked role called AWSServiceRoleForOrganizations. Certain operations automatically create that role if it does not already exist.
Changes AWS Organizations APIs that return an Account object now include the email address associated with the account’s root user.
Changes AWS Organizations is a web service that enables you to consolidate your multiple AWS accounts into an organization and centrally manage your accounts and their resources.