Network.AWS.Organizations.DisableAWSServiceAccess

Disables the integration of an AWS service (the service that is specified by ServicePrincipal ) with AWS Organizations. When you disable integration, the specified service no longer can create a service-linked role in new accounts in your organization. This means the service can't perform operations on your behalf on any new accounts in your organization. The service can still perform operations in older accounts until the service completes its clean-up from AWS Organizations.

Important: We recommend that you disable integration between AWS Organizations and the specified AWS service by using the console or commands that are provided by the specified service. Doing so ensures that the other service is aware that it can clean up any resources that are required only for the integration. How the service cleans up its resources in the organization's accounts depends on that service. For more information, see the documentation for the other AWS service.

After you perform the DisableAWSServiceAccess operation, the specified service can no longer perform operations in your organization's accounts unless the operations are explicitly permitted by the IAM policies that are attached to your roles.

For more information about integrating other services with AWS Organizations, including the list of services that work with Organizations, see Integrating AWS Organizations with Other AWS Services in the AWS Organizations User Guide .

This operation can be called only from the organization's master account.

Creating a Request

disableAWSServiceAccess

Arguments

:: Text

dasaServicePrincipal

-> DisableAWSServiceAccess

Creates a value of DisableAWSServiceAccess with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• dasaServicePrincipal - The service principal name of the AWS service for which you want to disable integration with your organization. This is typically in the form of a URL, such as service-abbreviation .amazonaws.com .

data DisableAWSServiceAccess

See: disableAWSServiceAccess smart constructor.

Instances

Eq DisableAWSServiceAccess

Methods

(==) :: DisableAWSServiceAccess -> DisableAWSServiceAccess -> Bool

(/=) :: DisableAWSServiceAccess -> DisableAWSServiceAccess -> Bool

Data DisableAWSServiceAccess

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> DisableAWSServiceAccess -> c DisableAWSServiceAccess

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c DisableAWSServiceAccess

toConstr :: DisableAWSServiceAccess -> Constr

dataTypeOf :: DisableAWSServiceAccess -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c DisableAWSServiceAccess)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c DisableAWSServiceAccess)

gmapT :: (forall b. Data b => b -> b) -> DisableAWSServiceAccess -> DisableAWSServiceAccess

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> DisableAWSServiceAccess -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> DisableAWSServiceAccess -> r

gmapQ :: (forall d. Data d => d -> u) -> DisableAWSServiceAccess -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> DisableAWSServiceAccess -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> DisableAWSServiceAccess -> m DisableAWSServiceAccess

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> DisableAWSServiceAccess -> m DisableAWSServiceAccess

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> DisableAWSServiceAccess -> m DisableAWSServiceAccess

Read DisableAWSServiceAccess

Methods

readsPrec :: Int -> ReadS DisableAWSServiceAccess

readList :: ReadS [DisableAWSServiceAccess]

readPrec :: ReadPrec DisableAWSServiceAccess

readListPrec :: ReadPrec [DisableAWSServiceAccess]

Show DisableAWSServiceAccess

Methods

showsPrec :: Int -> DisableAWSServiceAccess -> ShowS

show :: DisableAWSServiceAccess -> String

showList :: [DisableAWSServiceAccess] -> ShowS

Generic DisableAWSServiceAccess

Associated Types

type Rep DisableAWSServiceAccess :: * -> *

Methods

from :: DisableAWSServiceAccess -> Rep DisableAWSServiceAccess x

to :: Rep DisableAWSServiceAccess x -> DisableAWSServiceAccess

Hashable DisableAWSServiceAccess

Methods

hashWithSalt :: Int -> DisableAWSServiceAccess -> Int

hash :: DisableAWSServiceAccess -> Int

ToJSON DisableAWSServiceAccess

Methods

toJSON :: DisableAWSServiceAccess -> Value

toEncoding :: DisableAWSServiceAccess -> Encoding

toJSONList :: [DisableAWSServiceAccess] -> Value

toEncodingList :: [DisableAWSServiceAccess] -> Encoding

NFData DisableAWSServiceAccess

Methods

rnf :: DisableAWSServiceAccess -> ()

AWSRequest DisableAWSServiceAccess

Associated Types

type Rs DisableAWSServiceAccess :: *

Methods

request :: DisableAWSServiceAccess -> Request DisableAWSServiceAccess

response :: (MonadResource m, MonadThrow m) => Logger -> Service -> Proxy * DisableAWSServiceAccess -> ClientResponse -> m (Response DisableAWSServiceAccess)

ToHeaders DisableAWSServiceAccess

Methods

toHeaders :: DisableAWSServiceAccess -> [Header]

ToPath DisableAWSServiceAccess

Methods

toPath :: DisableAWSServiceAccess -> ByteString

ToQuery DisableAWSServiceAccess

Methods

toQuery :: DisableAWSServiceAccess -> QueryString

type Rep DisableAWSServiceAccess

type Rep DisableAWSServiceAccess = D1 * (MetaData "DisableAWSServiceAccess" "Network.AWS.Organizations.DisableAWSServiceAccess" "amazonka-organizations-1.6.0-rHxjcIb8Bn6XT7VgZWDi9" True) (C1 * (MetaCons "DisableAWSServiceAccess'" PrefixI True) (S1 * (MetaSel (Just Symbol "_dasaServicePrincipal") NoSourceUnpackedness NoSourceStrictness DecidedLazy) (Rec0 * Text)))

type Rs DisableAWSServiceAccess

type Rs DisableAWSServiceAccess = DisableAWSServiceAccessResponse

Request Lenses

dasaServicePrincipal :: Lens' DisableAWSServiceAccess Text

The service principal name of the AWS service for which you want to disable integration with your organization. This is typically in the form of a URL, such as service-abbreviation .amazonaws.com .

Destructuring the Response

disableAWSServiceAccessResponse :: DisableAWSServiceAccessResponse

Creates a value of DisableAWSServiceAccessResponse with the minimum fields required to make a request.

data DisableAWSServiceAccessResponse

See: disableAWSServiceAccessResponse smart constructor.

Instances

Eq DisableAWSServiceAccessResponse

Methods

(==) :: DisableAWSServiceAccessResponse -> DisableAWSServiceAccessResponse -> Bool

(/=) :: DisableAWSServiceAccessResponse -> DisableAWSServiceAccessResponse -> Bool

Data DisableAWSServiceAccessResponse

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> DisableAWSServiceAccessResponse -> c DisableAWSServiceAccessResponse

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c DisableAWSServiceAccessResponse

toConstr :: DisableAWSServiceAccessResponse -> Constr

dataTypeOf :: DisableAWSServiceAccessResponse -> DataType

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c DisableAWSServiceAccessResponse)

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c DisableAWSServiceAccessResponse)

gmapT :: (forall b. Data b => b -> b) -> DisableAWSServiceAccessResponse -> DisableAWSServiceAccessResponse

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> DisableAWSServiceAccessResponse -> r

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> DisableAWSServiceAccessResponse -> r

gmapQ :: (forall d. Data d => d -> u) -> DisableAWSServiceAccessResponse -> [u]

gmapQi :: Int -> (forall d. Data d => d -> u) -> DisableAWSServiceAccessResponse -> u

gmapM :: Monad m => (forall d. Data d => d -> m d) -> DisableAWSServiceAccessResponse -> m DisableAWSServiceAccessResponse

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> DisableAWSServiceAccessResponse -> m DisableAWSServiceAccessResponse

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> DisableAWSServiceAccessResponse -> m DisableAWSServiceAccessResponse

Read DisableAWSServiceAccessResponse

Methods

readsPrec :: Int -> ReadS DisableAWSServiceAccessResponse

readList :: ReadS [DisableAWSServiceAccessResponse]

readPrec :: ReadPrec DisableAWSServiceAccessResponse

readListPrec :: ReadPrec [DisableAWSServiceAccessResponse]

Show DisableAWSServiceAccessResponse

Methods

showsPrec :: Int -> DisableAWSServiceAccessResponse -> ShowS

show :: DisableAWSServiceAccessResponse -> String

showList :: [DisableAWSServiceAccessResponse] -> ShowS

Generic DisableAWSServiceAccessResponse

Associated Types

type Rep DisableAWSServiceAccessResponse :: * -> *

Methods

from :: DisableAWSServiceAccessResponse -> Rep DisableAWSServiceAccessResponse x

to :: Rep DisableAWSServiceAccessResponse x -> DisableAWSServiceAccessResponse

NFData DisableAWSServiceAccessResponse

Methods

rnf :: DisableAWSServiceAccessResponse -> ()

type Rep DisableAWSServiceAccessResponse

type Rep DisableAWSServiceAccessResponse = D1 * (MetaData "DisableAWSServiceAccessResponse" "Network.AWS.Organizations.DisableAWSServiceAccess" "amazonka-organizations-1.6.0-rHxjcIb8Bn6XT7VgZWDi9" False) (C1 * (MetaCons "DisableAWSServiceAccessResponse'" PrefixI False) (U1 *))