Lists all the accounts in an organization that have invalid effective policies¶

Description¶

Lists all the accounts in an organization that have invalid effective policies. An invalid effective policy is an effective policy that fails validation checks, resulting in the effective policy not being fully enforced on all the intended accounts within an organization.

You can only call this operation from the management account or a member account that is a delegated administrator.

Usage¶

organizations_list_accounts_with_invalid_effective_policy(PolicyType,
  NextToken, MaxResults)

Arguments¶

• PolicyType

  [required] The type of policy that you want information about. You can specify one of the following values:

  • DECLARATIVE_POLICY_EC2
  • BACKUP_POLICY
  • TAG_POLICY
  • CHATBOT_POLICY
  • AISERVICES_OPT_OUT_POLICY
  • SECURITYHUB_POLICY
  • UPGRADE_ROLLOUT_POLICY
  • INSPECTOR_POLICY
  • BEDROCK_POLICY
  • S3_POLICY
  • NETWORK_SECURITY_DIRECTOR_POLICY
  • GUARDDUTY_POLICY

• NextToken

  The parameter for receiving additional results if you receive a NextToken response in a previous request. A NextToken response indicates that more output is available. Set this parameter to the value of the previous call's NextToken response to indicate where the output should continue from.

• MaxResults

  The maximum number of items to return in the response. If more results exist than the specified MaxResults value, a token is included in the response so that you can retrieve the remaining results.

Value¶

A list with the following syntax:

list(
  Accounts = list(
    list(
      Id = "string",
      Arn = "string",
      Email = "string",
      Name = "string",
      Status = "ACTIVE"|"SUSPENDED"|"PENDING_CLOSURE",
      State = "PENDING_ACTIVATION"|"ACTIVE"|"SUSPENDED"|"PENDING_CLOSURE"|"CLOSED",
      Paths = list(
        "string"
      ),
      JoinedMethod = "INVITED"|"CREATED",
      JoinedTimestamp = as.POSIXct(
        "2015-01-01"
      )
    )
  ),
  PolicyType = "TAG_POLICY"|"BACKUP_POLICY"|"AISERVICES_OPT_OUT_POLICY"|"CHATBOT_POLICY"|"DECLARATIVE_POLICY_EC2"|"SECURITYHUB_POLICY"|"INSPECTOR_POLICY"|"UPGRADE_ROLLOUT_POLICY"|"BEDROCK_POLICY"|"S3_POLICY"|"NETWORK_SECURITY_DIRECTOR_POLICY"|"GUARDDUTY_POLICY",
  NextToken = "string"
)

Request syntax¶

svc$list_accounts_with_invalid_effective_policy(
  PolicyType = "TAG_POLICY"|"BACKUP_POLICY"|"AISERVICES_OPT_OUT_POLICY"|"CHATBOT_POLICY"|"DECLARATIVE_POLICY_EC2"|"SECURITYHUB_POLICY"|"INSPECTOR_POLICY"|"UPGRADE_ROLLOUT_POLICY"|"BEDROCK_POLICY"|"S3_POLICY"|"NETWORK_SECURITY_DIRECTOR_POLICY"|"GUARDDUTY_POLICY",
  NextToken = "string",
  MaxResults = 123
)