GetOrganization

Get information about the organization that the user’s account belongs to

Example Usage

List all account IDs for the organization

using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

class MyStack : Stack
{
    public MyStack()
    {
        var example = Output.Create(Aws.Organizations.GetOrganization.InvokeAsync());
        this.AccountIds = example.Apply(example => example.Accounts.Select(__item => __item.Id).ToList());
    }

    [Output("accountIds")]
    public Output<string> AccountIds { get; set; }
}

package main

import (
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/organizations"
    "github.com/pulumi/pulumi/sdk/v2/go/pulumi"
)

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        example, err := organizations.LookupOrganization(ctx, nil, nil)
        if err != nil {
            return err
        }
        var splat0 []string
        for _, val0 := range example.Accounts {
            splat0 = append(splat0, val0.Id)
        }
        ctx.Export("accountIds", splat0)
        return nil
    })
}

import pulumi
import pulumi_aws as aws

example = aws.organizations.get_organization()
pulumi.export("accountIds", [__item["id"] for __item in example.accounts])

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = aws.organizations.getOrganization({});
export const accountIds = example.then(example => example.accounts.map(__item => __item.id));

using Pulumi;
using Aws = Pulumi.Aws;

class MyStack : Stack
{
    public MyStack()
    {
        var example = Output.Create(Aws.Organizations.GetOrganization.InvokeAsync());
        var snsTopic = new Aws.Sns.Topic("snsTopic", new Aws.Sns.TopicArgs
        {
        });
        var snsTopicPolicyPolicyDocument = Output.Tuple(example, snsTopic.Arn).Apply(values =>
        {
            var example = values.Item1;
            var arn = values.Item2;
            return Aws.Iam.GetPolicyDocument.InvokeAsync(new Aws.Iam.GetPolicyDocumentArgs
            {
                Statements = 
                {
                    new Aws.Iam.Inputs.GetPolicyDocumentStatementArgs
                    {
                        Actions = 
                        {
                            "SNS:Subscribe",
                            "SNS:Publish",
                        },
                        Conditions = 
                        {
                            new Aws.Iam.Inputs.GetPolicyDocumentStatementConditionArgs
                            {
                                Test = "StringEquals",
                                Values = 
                                {
                                    example.Id,
                                },
                                Variable = "aws:PrincipalOrgID",
                            },
                        },
                        Effect = "Allow",
                        Principals = 
                        {
                            new Aws.Iam.Inputs.GetPolicyDocumentStatementPrincipalArgs
                            {
                                Identifiers = 
                                {
                                    "*",
                                },
                                Type = "AWS",
                            },
                        },
                        Resources = 
                        {
                            arn,
                        },
                    },
                },
            });
        });
        var snsTopicPolicyTopicPolicy = new Aws.Sns.TopicPolicy("snsTopicPolicyTopicPolicy", new Aws.Sns.TopicPolicyArgs
        {
            Arn = snsTopic.Arn,
            Policy = snsTopicPolicyPolicyDocument.Apply(snsTopicPolicyPolicyDocument => snsTopicPolicyPolicyDocument.Json),
        });
    }

}

package main

import (
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/iam"
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/organizations"
    "github.com/pulumi/pulumi-aws/sdk/v2/go/aws/sns"
    "github.com/pulumi/pulumi/sdk/v2/go/pulumi"
)

func main() {
    pulumi.Run(func(ctx *pulumi.Context) error {
        example, err := organizations.LookupOrganization(ctx, nil, nil)
        if err != nil {
            return err
        }
        snsTopic, err := sns.NewTopic(ctx, "snsTopic", nil)
        if err != nil {
            return err
        }
        _, err = sns.NewTopicPolicy(ctx, "snsTopicPolicyTopicPolicy", &sns.TopicPolicyArgs{
            Arn:    snsTopic.Arn,
            Policy: pulumi.String(snsTopicPolicyPolicyDocument.Json),
        })
        if err != nil {
            return err
        }
        return nil
    })
}

import pulumi
import pulumi_aws as aws

example = aws.organizations.get_organization()
sns_topic = aws.sns.Topic("snsTopic")
sns_topic_policy_policy_document = sns_topic.arn.apply(lambda arn: aws.iam.get_policy_document(statements=[{
    "actions": [
        "SNS:Subscribe",
        "SNS:Publish",
    ],
    "conditions": [{
        "test": "StringEquals",
        "values": [example.id],
        "variable": "aws:PrincipalOrgID",
    }],
    "effect": "Allow",
    "principals": [{
        "identifiers": ["*"],
        "type": "AWS",
    }],
    "resources": [arn],
}]))
sns_topic_policy_topic_policy = aws.sns.TopicPolicy("snsTopicPolicyTopicPolicy",
    arn=sns_topic.arn,
    policy=sns_topic_policy_policy_document.json)

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const example = pulumi.output(aws.organizations.getOrganization({ async: true }));
const snsTopic = new aws.sns.Topic("sns_topic", {});
const snsTopicPolicyPolicyDocument = pulumi.all([example, snsTopic.arn]).apply(([example, arn]) => aws.iam.getPolicyDocument({
    statements: [{
        actions: [
            "SNS:Subscribe",
            "SNS:Publish",
        ],
        conditions: [{
            test: "StringEquals",
            values: [example.id],
            variable: "aws:PrincipalOrgID",
        }],
        effect: "Allow",
        principals: [{
            identifiers: ["*"],
            type: "AWS",
        }],
        resources: [arn],
    }],
}, { async: true }));
const snsTopicPolicyTopicPolicy = new aws.sns.TopicPolicy("sns_topic_policy", {
    arn: snsTopic.arn,
    policy: snsTopicPolicyPolicyDocument.json,
});

Using GetOrganization

function getOrganization(opts?: InvokeOptions): Promise<GetOrganizationResult>

function  get_organization(opts=None)

func LookupOrganization(ctx *Context, opts ...InvokeOption) (*LookupOrganizationResult, error)

Note: This function is named LookupOrganization in the Go SDK.

public static class GetOrganization {
    public static Task<GetOrganizationResult> InvokeAsync(InvokeOptions? opts = null)
}

GetOrganization Result

The following output properties are available:

Accounts List<GetOrganizationAccount>: List of organization accounts including the master account. For a list excluding the master account, see the non_master_accounts attribute. All elements have these attributes:
Arn string: ARN of the root
AwsServiceAccessPrincipals List<string>: A list of AWS service principal names that have integration enabled with your organization. Organization must have feature_set set to ALL. For additional information, see the AWS Organizations User Guide.
EnabledPolicyTypes List<string>: A list of Organizations policy types that are enabled in the Organization Root. Organization must have feature_set set to ALL. For additional information about valid policy types (e.g. SERVICE_CONTROL_POLICY), see the AWS Organizations API Reference.
FeatureSet string: The FeatureSet of the organization.
Id string: The provider-assigned unique ID for this managed resource.
MasterAccountArn string: The Amazon Resource Name (ARN) of the account that is designated as the master account for the organization.
MasterAccountEmail string: The email address that is associated with the AWS account that is designated as the master account for the organization.
MasterAccountId string: The unique identifier (ID) of the master account of an organization.
NonMasterAccounts List<GetOrganizationNonMasterAccount>: List of organization accounts excluding the master account. For a list including the master account, see the accounts attribute. All elements have these attributes:
Roots List<GetOrganizationRoot>: List of organization roots. All elements have these attributes:

Accounts []GetOrganizationAccount: List of organization accounts including the master account. For a list excluding the master account, see the non_master_accounts attribute. All elements have these attributes:
Arn string: ARN of the root
AwsServiceAccessPrincipals []string: A list of AWS service principal names that have integration enabled with your organization. Organization must have feature_set set to ALL. For additional information, see the AWS Organizations User Guide.
EnabledPolicyTypes []string: A list of Organizations policy types that are enabled in the Organization Root. Organization must have feature_set set to ALL. For additional information about valid policy types (e.g. SERVICE_CONTROL_POLICY), see the AWS Organizations API Reference.
FeatureSet string: The FeatureSet of the organization.
Id string: The provider-assigned unique ID for this managed resource.
MasterAccountArn string: The Amazon Resource Name (ARN) of the account that is designated as the master account for the organization.
MasterAccountEmail string: The email address that is associated with the AWS account that is designated as the master account for the organization.
MasterAccountId string: The unique identifier (ID) of the master account of an organization.
NonMasterAccounts []GetOrganizationNonMasterAccount: List of organization accounts excluding the master account. For a list including the master account, see the accounts attribute. All elements have these attributes:
Roots []GetOrganizationRoot: List of organization roots. All elements have these attributes:

accounts GetOrganizationAccount[]: List of organization accounts including the master account. For a list excluding the master account, see the non_master_accounts attribute. All elements have these attributes:
arn string: ARN of the root
awsServiceAccessPrincipals string[]: A list of AWS service principal names that have integration enabled with your organization. Organization must have feature_set set to ALL. For additional information, see the AWS Organizations User Guide.
enabledPolicyTypes string[]: A list of Organizations policy types that are enabled in the Organization Root. Organization must have feature_set set to ALL. For additional information about valid policy types (e.g. SERVICE_CONTROL_POLICY), see the AWS Organizations API Reference.
featureSet string: The FeatureSet of the organization.
id string: The provider-assigned unique ID for this managed resource.
masterAccountArn string: The Amazon Resource Name (ARN) of the account that is designated as the master account for the organization.
masterAccountEmail string: The email address that is associated with the AWS account that is designated as the master account for the organization.
masterAccountId string: The unique identifier (ID) of the master account of an organization.
nonMasterAccounts GetOrganizationNonMasterAccount[]: List of organization accounts excluding the master account. For a list including the master account, see the accounts attribute. All elements have these attributes:
roots GetOrganizationRoot[]: List of organization roots. All elements have these attributes:

accounts List[GetOrganizationAccount]: List of organization accounts including the master account. For a list excluding the master account, see the non_master_accounts attribute. All elements have these attributes:
arn str: ARN of the root
aws_service_access_principals List[str]: A list of AWS service principal names that have integration enabled with your organization. Organization must have feature_set set to ALL. For additional information, see the AWS Organizations User Guide.
enabled_policy_types List[str]: A list of Organizations policy types that are enabled in the Organization Root. Organization must have feature_set set to ALL. For additional information about valid policy types (e.g. SERVICE_CONTROL_POLICY), see the AWS Organizations API Reference.
feature_set str: The FeatureSet of the organization.
id str: The provider-assigned unique ID for this managed resource.
master_account_arn str: The Amazon Resource Name (ARN) of the account that is designated as the master account for the organization.
master_account_email str: The email address that is associated with the AWS account that is designated as the master account for the organization.
master_account_id str: The unique identifier (ID) of the master account of an organization.
non_master_accounts List[GetOrganizationNonMasterAccount]: List of organization accounts excluding the master account. For a list including the master account, see the accounts attribute. All elements have these attributes:
roots List[GetOrganizationRoot]: List of organization roots. All elements have these attributes:

Supporting Types

GetOrganizationAccount

See the output API doc for this type.

Arn string: ARN of the root
Email string: Email of the account
Id string: Identifier of the root
Name string: The name of the policy type
Status string: The status of the policy type as it relates to the associated root

Arn string: ARN of the root
Email string: Email of the account
Id string: Identifier of the root
Name string: The name of the policy type
Status string: The status of the policy type as it relates to the associated root

arn string: ARN of the root
email string: Email of the account
id string: Identifier of the root
name string: The name of the policy type
status string: The status of the policy type as it relates to the associated root

arn str: ARN of the root
email str: Email of the account
id str: Identifier of the root
name str: The name of the policy type
status str: The status of the policy type as it relates to the associated root

GetOrganizationNonMasterAccount

See the output API doc for this type.

Arn string: ARN of the root
Email string: Email of the account
Id string: Identifier of the root
Name string: The name of the policy type
Status string: The status of the policy type as it relates to the associated root

Arn string: ARN of the root
Email string: Email of the account
Id string: Identifier of the root
Name string: The name of the policy type
Status string: The status of the policy type as it relates to the associated root

arn string: ARN of the root
email string: Email of the account
id string: Identifier of the root
name string: The name of the policy type
status string: The status of the policy type as it relates to the associated root

arn str: ARN of the root
email str: Email of the account
id str: Identifier of the root
name str: The name of the policy type
status str: The status of the policy type as it relates to the associated root

GetOrganizationRoot

See the output API doc for this type.

Arn string: ARN of the root
Id string: Identifier of the root
Name string: The name of the policy type
PolicyTypes List<GetOrganizationRootPolicyTypeArgs>: List of policy types enabled for this root. All elements have these attributes:

Arn string: ARN of the root
Id string: Identifier of the root
Name string: The name of the policy type
PolicyTypes []GetOrganizationRootPolicyType: List of policy types enabled for this root. All elements have these attributes:

arn string: ARN of the root
id string: Identifier of the root
name string: The name of the policy type
policyTypes GetOrganizationRootPolicyType[]: List of policy types enabled for this root. All elements have these attributes:

arn str: ARN of the root
id str: Identifier of the root
name str: The name of the policy type
policyTypes List[GetOrganizationRootPolicyType]: List of policy types enabled for this root. All elements have these attributes:

GetOrganizationRootPolicyType

See the output API doc for this type.

Status string: The status of the policy type as it relates to the associated root
Type string

Status string: The status of the policy type as it relates to the associated root
Type string

status string: The status of the policy type as it relates to the associated root
type string

status str: The status of the policy type as it relates to the associated root
type str

Package Details

Repository: https://github.com/pulumi/pulumi-aws
License: Apache-2.0
Notes: This Pulumi package is based on the aws Terraform Provider.

The Pulumi Platform

Get Started

Migrate to Pulumi

Solutions for All Teams and Engineers

Any Code

Any Cloud

GetOrganization

Example Usage

List all account IDs for the organization

Using GetOrganization

GetOrganization Result

Supporting Types

GetOrganizationAccount

GetOrganizationNonMasterAccount

GetOrganizationRoot

GetOrganizationRootPolicyType

Package Details

On This Page

The Pulumi Platform

Get Started

Migrate to Pulumi

Solutions for All Teams and Engineers

Any Code

Any Cloud

GetOrganization

Example Usage

List all account IDs for the organization

SNS topic that can be interacted by the organization only

Using GetOrganization

GetOrganization Result

Supporting Types

GetOrganizationAccount

GetOrganizationNonMasterAccount

GetOrganizationRoot

GetOrganizationRootPolicyType

Package Details

On This Page