Group Attributes

The following table describes the supported attributes for the group schema:

Attributes

Type

Description

Object Type: Group

GroupName

String

Friendly name of the group.

GroupId

String

Unique ID of the group.

Path

String

Path to the group.

ARN

String

Amazon Resource Name of the group.

This is an Account ID which must not be changed.

Create

String

Creation date of the group.

AWSManagedPolicies

AWSManagedPolicy

AWS Managed Policies directly assigned to the group.

CustomerManagedPolicies

CustomerManagedPolicy

Customer Managed Policies directly assigned to the group.

InlinePolicies

InlinePolicy

Inline Policies directly assigned to the group.

Object Type: AWSManagedPolicy

PolicyName

String

The friendly name of the AWS managed policy.

PolicyId

String

The unique ID of the AWS managed policy.

Description

String

A friendly description of the AWS managed policy.

ARN

String

Amazon Resource Name of the AWS managed policy.

This is an Account ID which must not be changed.

Path

String

The path to the AWS managed policy.

CreateDate

String

The creation date of the AWS managed policy.

UpdateDate

String

The last update date of the AWS managed policy.

DefaultVersionId

String

The currently enabled version ID of the AWS managed policy.

PolicyJSON

String

The JSON document for the AWS managed policy.

Object Type: Customer Managed Policy

PolicyName

String

The friendly name of the customer managed policy.

PolicyId

String

The unique ID of the customer managed policy.

Description

String

A friendly description of the customer managed policy.

CreateDate

String

The creation date of the customer managed policy.

UpdateDate

String

The last update date of the customer managed policy.

ARN

String

Amazon Resource Name of the customer managed policy.

This is an Account ID which must not be changed.

Path

String

The path to the customer managed policy.

DefaultVersionId

String

The currently enabled version ID of the customer managed policy.

PolicyJSON

String

The JSON document for the customer managed policy.

PolicyGroups

String

Groups attached to the customer managed policy.

PolicyRoles

String

Roles attached to the customer managed policy.

Tags

String

Tag list in the format TatKey~TagValue pair

Object Type: InlinePolicy

Name

String

The friendly name of the policy.

Id

String

The unique ID of the policy.

This is an Account ID which must not be changed.

PolicyJSON

String

The JSON document for the policy.

Object Type: Role

RoleName

String

The friendly name of the role.

RoleId

String

The unique ID of the role.

Path

String

Path to the Role.

ARN

String

Amazon Resource Name of the role.

This is an Account ID which must not be changed.

Description

String

Role Description.

CreateDate

String

Creation date of the role.

AWSManagedPolicies

AWSManagedPolicy

AWS Managed Policies directly assigned to the role.

CustomerManagedPolicies

CustomerManagedPolicy

Customer Managed Policies directly assigned to the role.

InlinePolicies

InlinePolicy

Inline Policies directly assigned to the role.

TrustPolicyJSON

String

Trust Relationship Policy JSON.

MaxSessionDuration

String

Maximum CLI/API session duration.

Tags

String

Tag list in the format TagKey~TagValue pair

Object Type: SCP

SCPName

String

The friendly name of the Service Control Policy.

SCPId

String

The unique ID of the Service Control Policy.

ARN

String

Amazon Resource Name of the Service Control Policy.

This is an Account ID which must not be changed.

Description

String

A friendly description of the Service Control Policy.

AWSManaged

String

A boolean value that indicates whether the Service Control Policy is an AWS managed policy.

PolicyJSON

String

The JSON document for the Service Control Policy.

Tags

String

Tag list in the format TagKey~TagValue pair

Object Type: AWSAccount

AWSAccountName

String

The friendly name of the AWS account.

AWSAccountId

String

The unique ID of the AWS account.

ARN

String

Amazon Resource Name of the AWS account.

This is an Account ID which must not be changed.

Email

String

The email address associated with the AWS account.

Status

String

The status of the AWS account in the organization.

JoinedMethod

String

The method by which the AWS account joined the organization.

JoinedTimestamp

String

The date the AWS account became a part of the organization.

OrganizationUnit

OrganizationUnit

Organization unit holding the AWS Account.

Tags

String

Tag list in the format TagKey~TagValue pair

Object Type: OrganizationUnit

OUName

String

The friendly name of the Organization Unit.

OUId

String

The unique ID of the Organization Unit.

ARN

String

Amazon Resource Name of the Organization Unit.

This is an Account ID which must not be changed.

ServiceControlPolicies

SCP

Service Control Policies attached to the Organization Unit.

Parent

OrganizationUnit

Parent Organization Unit.

AWSAccounts

AWSAccount

AWS Accounts attached to the Organization Unit.

Tags

String

Tag list in the format TagKey~TagValue pair