Group Attributes
The following table describes the supported attributes for the group schema:
Attributes |
Type |
Description |
Object Type: Group |
||
GroupName |
String |
Friendly name of the group. |
GroupId |
String |
Unique ID of the group. |
Path |
String |
Path to the group. |
ARN |
String |
Amazon Resource Name of the group. This is an Account ID which must not be changed. |
Create |
String |
Creation date of the group. |
AWSManagedPolicies |
AWSManagedPolicy |
AWS Managed Policies directly assigned to the group. |
CustomerManagedPolicies |
CustomerManagedPolicy |
Customer Managed Policies directly assigned to the group. |
InlinePolicies |
InlinePolicy |
Inline Policies directly assigned to the group. |
Object Type: AWSManagedPolicy |
||
PolicyName |
String |
The friendly name of the AWS managed policy. |
PolicyId |
String |
The unique ID of the AWS managed policy. |
Description |
String |
A friendly description of the AWS managed policy. |
ARN |
String |
Amazon Resource Name of the AWS managed policy. This is an Account ID which must not be changed. |
Path |
String |
The path to the AWS managed policy. |
CreateDate |
String |
The creation date of the AWS managed policy. |
UpdateDate |
String |
The last update date of the AWS managed policy. |
DefaultVersionId |
String |
The currently enabled version ID of the AWS managed policy. |
PolicyJSON |
String |
The JSON document for the AWS managed policy. |
Object Type: Customer Managed Policy |
||
PolicyName |
String |
The friendly name of the customer managed policy. |
PolicyId |
String |
The unique ID of the customer managed policy. |
Description |
String |
A friendly description of the customer managed policy. |
CreateDate |
String |
The creation date of the customer managed policy. |
UpdateDate |
String |
The last update date of the customer managed policy. |
ARN |
String |
Amazon Resource Name of the customer managed policy. This is an Account ID which must not be changed. |
Path |
String |
The path to the customer managed policy. |
DefaultVersionId |
String |
The currently enabled version ID of the customer managed policy. |
PolicyJSON |
String |
The JSON document for the customer managed policy. |
PolicyGroups |
String |
Groups attached to the customer managed policy. |
PolicyRoles |
String |
Roles attached to the customer managed policy. |
Tags |
String |
Tag list in the format TatKey~TagValue pair |
Object Type: InlinePolicy |
||
Name |
String |
The friendly name of the policy. |
Id |
String |
The unique ID of the policy. This is an Account ID which must not be changed. |
PolicyJSON |
String |
The JSON document for the policy. |
Object Type: Role |
||
RoleName |
String |
The friendly name of the role. |
RoleId |
String |
The unique ID of the role. |
Path |
String |
Path to the Role. |
ARN |
String |
Amazon Resource Name of the role. This is an Account ID which must not be changed. |
Description |
String |
Role Description. |
CreateDate |
String |
Creation date of the role. |
AWSManagedPolicies |
AWSManagedPolicy |
AWS Managed Policies directly assigned to the role. |
CustomerManagedPolicies |
CustomerManagedPolicy |
Customer Managed Policies directly assigned to the role. |
InlinePolicies |
InlinePolicy |
Inline Policies directly assigned to the role. |
TrustPolicyJSON |
String |
Trust Relationship Policy JSON. |
MaxSessionDuration |
String |
Maximum CLI/API session duration. |
Tags |
String |
Tag list in the format TagKey~TagValue pair |
Object Type: SCP |
||
SCPName |
String |
The friendly name of the Service Control Policy. |
SCPId |
String |
The unique ID of the Service Control Policy. |
ARN |
String |
Amazon Resource Name of the Service Control Policy. This is an Account ID which must not be changed. |
Description |
String |
A friendly description of the Service Control Policy. |
AWSManaged |
String |
A boolean value that indicates whether the Service Control Policy is an AWS managed policy. |
PolicyJSON |
String |
The JSON document for the Service Control Policy. |
Tags |
String |
Tag list in the format TagKey~TagValue pair |
Object Type: AWSAccount |
||
AWSAccountName |
String |
The friendly name of the AWS account. |
AWSAccountId |
String |
The unique ID of the AWS account. |
ARN |
String |
Amazon Resource Name of the AWS account. This is an Account ID which must not be changed. |
|
String |
The email address associated with the AWS account. |
Status |
String |
The status of the AWS account in the organization. |
JoinedMethod |
String |
The method by which the AWS account joined the organization. |
JoinedTimestamp |
String |
The date the AWS account became a part of the organization. |
OrganizationUnit |
OrganizationUnit |
Organization unit holding the AWS Account. |
Tags |
String |
Tag list in the format TagKey~TagValue pair |
Object Type: OrganizationUnit |
||
OUName |
String |
The friendly name of the Organization Unit. |
OUId |
String |
The unique ID of the Organization Unit. |
ARN |
String |
Amazon Resource Name of the Organization Unit. This is an Account ID which must not be changed. |
ServiceControlPolicies |
SCP |
Service Control Policies attached to the Organization Unit. |
Parent |
OrganizationUnit |
Parent Organization Unit. |
AWSAccounts |
AWSAccount |
AWS Accounts attached to the Organization Unit. |
Tags |
String |
Tag list in the format TagKey~TagValue pair |