{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_organizations.html",
  "name": "AWS Organizations",
  "prefix": "organizations",
  "timestamp": "1784505606",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_AcceptHandshake.html",
      "name": "AcceptHandshake",
      "description": "Grants permission to send a response to the originator of a handshake agreeing to the action proposed by the handshake request",
      "access": "Write",
      "resources": [
        {
          "name": "handshake",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_AttachPolicy.html",
      "name": "AttachPolicy",
      "description": "Grants permission to attach a policy to a root, an organizational unit, or an individual account",
      "access": "Write",
      "resources": [
        {
          "name": "account",
          "is_required": false
        },
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "policy",
          "is_required": true
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_CancelHandshake.html",
      "name": "CancelHandshake",
      "description": "Grants permission to cancel a handshake",
      "access": "Write",
      "resources": [
        {
          "name": "handshake",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_CloseAccount.html",
      "name": "CloseAccount",
      "description": "Grants permission to close an AWS account that is now a part of an Organizations, either created within the organization, or invited to join the organization",
      "access": "Write",
      "resources": [
        {
          "name": "account",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateAccount.html",
      "name": "CreateAccount",
      "description": "Grants permission to create an AWS account that is automatically a member of the organization with the credentials that made the request",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateGovCloudAccount.html",
      "name": "CreateGovCloudAccount",
      "description": "Grants permission to create an AWS GovCloud (US) account",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateOrganization.html",
      "name": "CreateOrganization",
      "description": "Grants permission to create an organization. The account with the credentials that calls the CreateOrganization operation automatically becomes the management account of the new organization",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateOrganizationalUnit.html",
      "name": "CreateOrganizationalUnit",
      "description": "Grants permission to create an organizational unit (OU) within a root or parent OU",
      "access": "Write",
      "resources": [
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreatePolicy.html",
      "name": "CreatePolicy",
      "description": "Grants permission to create a policy that you can attach to a root, an organizational unit (OU), or an individual AWS account",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:ResourceTag/${TagKey}",
        "aws:TagKeys",
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeclineHandshake.html",
      "name": "DeclineHandshake",
      "description": "Grants permission to decline a handshake request. This sets the handshake state to DECLINED and effectively deactivates the request",
      "access": "Write",
      "resources": [
        {
          "name": "handshake",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeleteOrganization.html",
      "name": "DeleteOrganization",
      "description": "Grants permission to delete the organization",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeleteOrganizationalUnit.html",
      "name": "DeleteOrganizationalUnit",
      "description": "Grants permission to delete an organizational unit from a root or another OU",
      "access": "Write",
      "resources": [
        {
          "name": "organizationalunit",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeletePolicy.html",
      "name": "DeletePolicy",
      "description": "Grants permission to delete a policy from your organization",
      "access": "Write",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeleteResourcePolicy.html",
      "name": "DeleteResourcePolicy",
      "description": "Grants permission to delete a resource policy from your organization",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DeregisterDelegatedAdministrator.html",
      "name": "DeregisterDelegatedAdministrator",
      "description": "Grants permission to deregister the specified member AWS account as a delegated administrator for the AWS service that is specified by ServicePrincipal",
      "access": "Write",
      "resources": [
        {
          "name": "account",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:ServicePrincipal"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeAccount.html",
      "name": "DescribeAccount",
      "description": "Grants permission to retrieve Organizations-related details about the specified account",
      "access": "Read",
      "resources": [
        {
          "name": "account",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeCreateAccountStatus.html",
      "name": "DescribeCreateAccountStatus",
      "description": "Grants permission to retrieve the current status of an asynchronous request to create an account",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeEffectivePolicy.html",
      "name": "DescribeEffectivePolicy",
      "description": "Grants permission to retrieve the effective policy for an account",
      "access": "Read",
      "resources": [
        {
          "name": "account",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeHandshake.html",
      "name": "DescribeHandshake",
      "description": "Grants permission to retrieve details about a previously requested handshake",
      "access": "Read",
      "resources": [
        {
          "name": "handshake",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeOrganization.html",
      "name": "DescribeOrganization",
      "description": "Grants permission to retrieve details about the organization that the calling credentials belong to",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeOrganizationalUnit.html",
      "name": "DescribeOrganizationalUnit",
      "description": "Grants permission to retrieve details about an organizational unit (OU)",
      "access": "Read",
      "resources": [
        {
          "name": "organizationalunit",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribePolicy.html",
      "name": "DescribePolicy",
      "description": "Grants permission to retrieve details about a policy",
      "access": "Read",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeResourcePolicy.html",
      "name": "DescribeResourcePolicy",
      "description": "Grants permission to retrieve information about a resource policy",
      "access": "Read",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeResponsibilityTransfer.html",
      "name": "DescribeResponsibilityTransfer",
      "description": "Grants permission to retrieve details about a previously responsibility transfer",
      "access": "Read",
      "resources": [
        {
          "name": "responsibilitytransfer",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:TransferDirection",
        "organizations:TransferType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DetachPolicy.html",
      "name": "DetachPolicy",
      "description": "Grants permission to detach a policy from a target root, organizational unit, or account",
      "access": "Write",
      "resources": [
        {
          "name": "account",
          "is_required": false
        },
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "policy",
          "is_required": true
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DisableAWSServiceAccess.html",
      "name": "DisableAWSServiceAccess",
      "description": "Grants permission to disable integration of an AWS service (the service that is specified by ServicePrincipal) with AWS Organizations",
      "access": "Write",
      "resources": [],
      "conditions": [
        "organizations:ServicePrincipal"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_DisablePolicyType.html",
      "name": "DisablePolicyType",
      "description": "Grants permission to disable an organization policy type in a root",
      "access": "Write",
      "resources": [
        {
          "name": "root",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAWSServiceAccess.html",
      "name": "EnableAWSServiceAccess",
      "description": "Grants permission to enable integration of an AWS service (the service that is specified by ServicePrincipal) with AWS Organizations",
      "access": "Write",
      "resources": [],
      "conditions": [
        "organizations:ServicePrincipal"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAllFeatures.html",
      "name": "EnableAllFeatures",
      "description": "Grants permission to start the process to enable all features in an organization, upgrading it from supporting only Consolidated Billing features",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_EnablePolicyType.html",
      "name": "EnablePolicyType",
      "description": "Grants permission to enable a policy type in a root",
      "access": "Write",
      "resources": [
        {
          "name": "root",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_InviteAccountToOrganization.html",
      "name": "InviteAccountToOrganization",
      "description": "Grants permission to send an invitation to another AWS account, asking it to join your organization as a member account",
      "access": "Write",
      "resources": [
        {
          "name": "account",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_InviteOrganizationToTransferResponsibility.html",
      "name": "InviteOrganizationToTransferResponsibility",
      "description": "Grants permission to send an invitation to another AWS account, asking it to transfer a particular responsibility to your organization",
      "access": "Write",
      "resources": [
        {
          "name": "account",
          "is_required": false
        }
      ],
      "conditions": [
        "organizations:TransferDirection",
        "organizations:TransferType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_LeaveOrganization.html",
      "name": "LeaveOrganization",
      "description": "Grants permission to remove a member account from its parent organization",
      "access": "Write",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAWSServiceAccessForOrganization.html",
      "name": "ListAWSServiceAccessForOrganization",
      "description": "Grants permission to retrieve the list of the AWS services for which you enabled integration with your organization",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccounts.html",
      "name": "ListAccounts",
      "description": "Grants permission to list all of the accounts in the organization",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccountsForParent.html",
      "name": "ListAccountsForParent",
      "description": "Grants permission to list the accounts in an organization that are contained by a root or organizational unit (OU)",
      "access": "List",
      "resources": [
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccountsWithInvalidEffectivePolicy.html",
      "name": "ListAccountsWithInvalidEffectivePolicy",
      "description": "Grants permission to list accounts that have invalid effective policies for a specified policy type",
      "access": "List",
      "resources": [],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListChildren.html",
      "name": "ListChildren",
      "description": "Grants permission to list all of the OUs or accounts that are contained in a parent OU or root",
      "access": "List",
      "resources": [
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListCreateAccountStatus.html",
      "name": "ListCreateAccountStatus",
      "description": "Grants permission to list the asynchronous account creation requests that are currently being tracked for the organization",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListDelegatedAdministrators.html",
      "name": "ListDelegatedAdministrators",
      "description": "Grants permission to list the AWS accounts that are designated as delegated administrators in this organization",
      "access": "List",
      "resources": [],
      "conditions": [
        "organizations:ServicePrincipal"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListDelegatedServicesForAccount.html",
      "name": "ListDelegatedServicesForAccount",
      "description": "Grants permission to list the AWS services for which the specified account is a delegated administrator in this organization",
      "access": "List",
      "resources": [
        {
          "name": "account",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListEffectivePolicyValidationErrors.html",
      "name": "ListEffectivePolicyValidationErrors",
      "description": "Grants permission to list validation errors found in the effective policy for a specific account and policy type",
      "access": "List",
      "resources": [
        {
          "name": "account",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListHandshakesForAccount.html",
      "name": "ListHandshakesForAccount",
      "description": "Grants permission to list all of the handshakes that are associated with an account",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListHandshakesForOrganization.html",
      "name": "ListHandshakesForOrganization",
      "description": "Grants permission to list the handshakes that are associated with the organization",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListInboundResponsibilityTransfers.html",
      "name": "ListInboundResponsibilityTransfers",
      "description": "Grants permission to list all responsibilities of a particular type transfered to your organization",
      "access": "List",
      "resources": [],
      "conditions": [
        "organizations:TransferDirection",
        "organizations:TransferType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListOrganizationalUnitsForParent.html",
      "name": "ListOrganizationalUnitsForParent",
      "description": "Grants permission to list all of the organizational units (OUs) in a parent organizational unit or root",
      "access": "List",
      "resources": [
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListOutboundResponsibilityTransfers.html",
      "name": "ListOutboundResponsibilityTransfers",
      "description": "Grants permission to list all responsibilities of a particular type transfered to another organization",
      "access": "List",
      "resources": [],
      "conditions": [
        "organizations:TransferDirection",
        "organizations:TransferType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListParents.html",
      "name": "ListParents",
      "description": "Grants permission to list the root or organizational units (OUs) that serve as the immediate parent of a child OU or account",
      "access": "List",
      "resources": [
        {
          "name": "account",
          "is_required": false
        },
        {
          "name": "organizationalunit",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListPolicies.html",
      "name": "ListPolicies",
      "description": "Grants permission to list all of the policies in an organization",
      "access": "List",
      "resources": [],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListPoliciesForTarget.html",
      "name": "ListPoliciesForTarget",
      "description": "Grants permission to list all of the policies that are directly attached to a root, organizational unit (OU), or account",
      "access": "List",
      "resources": [
        {
          "name": "account",
          "is_required": false
        },
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html",
      "name": "ListRoots",
      "description": "Grants permission to list all of the roots that are defined in the organization",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list all tags for the specified resource",
      "access": "List",
      "resources": [
        {
          "name": "account",
          "is_required": false
        },
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "policy",
          "is_required": false
        },
        {
          "name": "resourcepolicy",
          "is_required": false
        },
        {
          "name": "responsibilitytransfer",
          "is_required": false
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListTargetsForPolicy.html",
      "name": "ListTargetsForPolicy",
      "description": "Grants permission to list all the roots, OUs, and accounts to which a policy is attached",
      "access": "List",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_MoveAccount.html",
      "name": "MoveAccount",
      "description": "Grants permission to move an account from its current root or OU to another parent root or OU",
      "access": "Write",
      "resources": [
        {
          "name": "account",
          "is_required": true
        },
        {
          "name": "organizationalunit",
          "is_required": true
        },
        {
          "name": "root",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_PutResourcePolicy.html",
      "name": "PutResourcePolicy",
      "description": "Grants permission to create or update a resource policy",
      "access": "Write",
      "resources": [
        {
          "name": "resourcepolicy",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_RegisterDelegatedAdministrator.html",
      "name": "RegisterDelegatedAdministrator",
      "description": "Grants permission to register the specified member account to administer the Organizations features of the AWS service that is specified by ServicePrincipal",
      "access": "Write",
      "resources": [
        {
          "name": "account",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:ServicePrincipal"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_RemoveAccountFromOrganization.html",
      "name": "RemoveAccountFromOrganization",
      "description": "Grants permission to remove the specified account from the organization",
      "access": "Write",
      "resources": [
        {
          "name": "account",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to add one or more tags to the specified resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "account",
          "is_required": false
        },
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "policy",
          "is_required": false
        },
        {
          "name": "resourcepolicy",
          "is_required": false
        },
        {
          "name": "responsibilitytransfer",
          "is_required": false
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys",
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_TerminateResponsibilityTransfer.html",
      "name": "TerminateResponsibilityTransfer",
      "description": "Grants permission to end the transfer for a responsibility to or from your organization",
      "access": "Write",
      "resources": [
        {
          "name": "responsibilitytransfer",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:TransferDirection",
        "organizations:TransferType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to remove one or more tags from the specified resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "account",
          "is_required": false
        },
        {
          "name": "organizationalunit",
          "is_required": false
        },
        {
          "name": "policy",
          "is_required": false
        },
        {
          "name": "resourcepolicy",
          "is_required": false
        },
        {
          "name": "responsibilitytransfer",
          "is_required": false
        },
        {
          "name": "root",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys",
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_UpdateOrganizationalUnit.html",
      "name": "UpdateOrganizationalUnit",
      "description": "Grants permission to rename an organizational unit (OU)",
      "access": "Write",
      "resources": [
        {
          "name": "organizationalunit",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_UpdatePolicy.html",
      "name": "UpdatePolicy",
      "description": "Grants permission to update an existing policy with a new name, description, or content",
      "access": "Write",
      "resources": [
        {
          "name": "policy",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:PolicyType"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/APIReference/API_UpdateResponsibilityTransfer.html",
      "name": "UpdateResponsibilityTransfer",
      "description": "Grants permission to rename a responsibility transfer to or from your organization",
      "access": "Write",
      "resources": [
        {
          "name": "responsibilitytransfer",
          "is_required": true
        }
      ],
      "conditions": [
        "organizations:TransferDirection",
        "organizations:TransferType"
      ]
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
      "name": "account",
      "arn": "arn:${Partition}:organizations::${Account}:account/o-${OrganizationId}/${AccountId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
      "name": "awspolicy",
      "arn": "arn:${Partition}:organizations::aws:policy/${PolicyType}/p-${PolicyId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
      "name": "handshake",
      "arn": "arn:${Partition}:organizations::${Account}:handshake/o-${OrganizationId}/${HandshakeType}/h-${HandshakeId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
      "name": "organization",
      "arn": "arn:${Partition}:organizations::${Account}:organization/o-${OrganizationId}",
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
      "name": "organizationalunit",
      "arn": "arn:${Partition}:organizations::${Account}:ou/o-${OrganizationId}/ou-${OrganizationalUnitId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
      "name": "policy",
      "arn": "arn:${Partition}:organizations::${Account}:policy/o-${OrganizationId}/${PolicyType}/p-${PolicyId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
      "name": "resourcepolicy",
      "arn": "arn:${Partition}:organizations::${Account}:resourcepolicy/o-${OrganizationId}/rp-${ResourcePolicyId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
      "name": "responsibilitytransfer",
      "arn": "arn:${Partition}:organizations::${Account}:transfer/o-${OrganizationId}/${TransferType}/${TransferDirection}/rt-${ResponsibilityTransferId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html",
      "name": "root",
      "arn": "arn:${Partition}:organizations::${Account}:root/o-${OrganizationId}/r-${RootId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by the tags that are passed in the request",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-resourcetag",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by the tags associated with the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys",
      "name": "aws:TagKeys",
      "description": "Filters access by the tag keys that are passed in the request",
      "type": "ArrayOfString"
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html#orgs_permissions_conditionkeys",
      "name": "organizations:PolicyType",
      "description": "Filters access by the specified policy type names",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html#orgs_permissions_conditionkeys",
      "name": "organizations:ServicePrincipal",
      "description": "Filters access by the specified service principal names",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html#orgs_permissions_conditionkeys",
      "name": "organizations:TransferDirection",
      "description": "Filters access by the specified responsibility transfer by the direction",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/organizations/latest/userguide/orgs_permissions_overview.html#orgs_permissions_conditionkeys",
      "name": "organizations:TransferType",
      "description": "Filters access by the specified responsibility transfer type names",
      "type": "String"
    }
  ]
}