Amazonka.Organizations.DisableAWSServiceAccess

Disables the integration of an Amazon Web Services service (the service that is specified by ServicePrincipal) with Organizations. When you disable integration, the specified service no longer can create a service-linked role in new accounts in your organization. This means the service can't perform operations on your behalf on any new accounts in your organization. The service can still perform operations in older accounts until the service completes its clean-up from Organizations.

We strongly recommend that you don't use this command to disable integration between Organizations and the specified Amazon Web Services service. Instead, use the console or commands that are provided by the specified service. This lets the trusted service perform any required initialization when enabling trusted access, such as creating any required resources and any required clean up of resources when disabling trusted access.

For information about how to disable trusted service access to your organization using the trusted service, see the Learn more link under the Supports Trusted Access column at Amazon Web Services services that you can use with Organizations. on this page.

If you disable access by using this command, it causes the following actions to occur:

• The service can no longer create a service-linked role in the accounts in your organization. This means that the service can't perform operations on your behalf on any new accounts in your organization. The service can still perform operations in older accounts until the service completes its clean-up from Organizations.
• The service can no longer perform tasks in the member accounts in the organization, unless those operations are explicitly permitted by the IAM policies that are attached to your roles. This includes any data aggregation from the member accounts to the management account, or to a delegated administrator account, where relevant.
• Some services detect this and clean up any remaining data or resources related to the integration, while other services stop accessing the organization but leave any historical data and configuration in place to support a possible re-enabling of the integration.

Using the other service's console or commands to disable the integration ensures that the other service is aware that it can clean up any resources that are required only for the integration. How the service cleans up its resources in the organization's accounts depends on that service. For more information, see the documentation for the other Amazon Web Services service.

After you perform the DisableAWSServiceAccess operation, the specified service can no longer perform operations in your organization's accounts

For more information about integrating other services with Organizations, including the list of services that work with Organizations, see Integrating Organizations with Other Amazon Web Services Services in the Organizations User Guide.

This operation can be called only from the organization's management account.

Creating a Request

data DisableAWSServiceAccess

See: newDisableAWSServiceAccess smart constructor.

Constructors

DisableAWSServiceAccess'

Fields

• servicePrincipal :: Text

  The service principal name of the Amazon Web Services service for which you want to disable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com.

Instances

ToJSON DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

toJSON :: DisableAWSServiceAccess -> Value

toEncoding :: DisableAWSServiceAccess -> Encoding

toJSONList :: [DisableAWSServiceAccess] -> Value

toEncodingList :: [DisableAWSServiceAccess] -> Encoding

ToHeaders DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

toHeaders :: DisableAWSServiceAccess -> [Header]

ToPath DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

toPath :: DisableAWSServiceAccess -> ByteString

ToQuery DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

toQuery :: DisableAWSServiceAccess -> QueryString

AWSRequest DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Associated Types

type AWSResponse DisableAWSServiceAccess

Methods

request :: (Service -> Service) -> DisableAWSServiceAccess -> Request DisableAWSServiceAccess

response :: MonadResource m => (ByteStringLazy -> IO ByteStringLazy) -> Service -> Proxy DisableAWSServiceAccess -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse DisableAWSServiceAccess)))

Generic DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Associated Types

type Rep DisableAWSServiceAccess :: Type -> Type

Methods

from :: DisableAWSServiceAccess -> Rep DisableAWSServiceAccess x

to :: Rep DisableAWSServiceAccess x -> DisableAWSServiceAccess

Read DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

readsPrec :: Int -> ReadS DisableAWSServiceAccess

readList :: ReadS [DisableAWSServiceAccess]

readPrec :: ReadPrec DisableAWSServiceAccess

readListPrec :: ReadPrec [DisableAWSServiceAccess]

Show DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

showsPrec :: Int -> DisableAWSServiceAccess -> ShowS

show :: DisableAWSServiceAccess -> String

showList :: [DisableAWSServiceAccess] -> ShowS

NFData DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

rnf :: DisableAWSServiceAccess -> ()

Eq DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

(==) :: DisableAWSServiceAccess -> DisableAWSServiceAccess -> Bool

(/=) :: DisableAWSServiceAccess -> DisableAWSServiceAccess -> Bool

Hashable DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

hashWithSalt :: Int -> DisableAWSServiceAccess -> Int

hash :: DisableAWSServiceAccess -> Int

type AWSResponse DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

type AWSResponse DisableAWSServiceAccess = DisableAWSServiceAccessResponse

type Rep DisableAWSServiceAccess

Defined in Amazonka.Organizations.DisableAWSServiceAccess

type Rep DisableAWSServiceAccess = D1 ('MetaData "DisableAWSServiceAccess" "Amazonka.Organizations.DisableAWSServiceAccess" "amazonka-organizations-2.0-JONpdX4PtttLcKxQshpOlA" 'False) (C1 ('MetaCons "DisableAWSServiceAccess'" 'PrefixI 'True) (S1 ('MetaSel ('Just "servicePrincipal") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))

newDisableAWSServiceAccess

Arguments

:: Text

DisableAWSServiceAccess

-> DisableAWSServiceAccess

Create a value of DisableAWSServiceAccess with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

DisableAWSServiceAccess, disableAWSServiceAccess_servicePrincipal - The service principal name of the Amazon Web Services service for which you want to disable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com.

Request Lenses

disableAWSServiceAccess_servicePrincipal :: Lens' DisableAWSServiceAccess Text

The service principal name of the Amazon Web Services service for which you want to disable integration with your organization. This is typically in the form of a URL, such as service-abbreviation.amazonaws.com.

Destructuring the Response

data DisableAWSServiceAccessResponse

See: newDisableAWSServiceAccessResponse smart constructor.

Constructors

DisableAWSServiceAccessResponse'

Instances

Generic DisableAWSServiceAccessResponse

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Associated Types

type Rep DisableAWSServiceAccessResponse :: Type -> Type

Methods

from :: DisableAWSServiceAccessResponse -> Rep DisableAWSServiceAccessResponse x

to :: Rep DisableAWSServiceAccessResponse x -> DisableAWSServiceAccessResponse

Read DisableAWSServiceAccessResponse

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

readsPrec :: Int -> ReadS DisableAWSServiceAccessResponse

readList :: ReadS [DisableAWSServiceAccessResponse]

readPrec :: ReadPrec DisableAWSServiceAccessResponse

readListPrec :: ReadPrec [DisableAWSServiceAccessResponse]

Show DisableAWSServiceAccessResponse

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

showsPrec :: Int -> DisableAWSServiceAccessResponse -> ShowS

show :: DisableAWSServiceAccessResponse -> String

showList :: [DisableAWSServiceAccessResponse] -> ShowS

NFData DisableAWSServiceAccessResponse

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

rnf :: DisableAWSServiceAccessResponse -> ()

Eq DisableAWSServiceAccessResponse

Defined in Amazonka.Organizations.DisableAWSServiceAccess

Methods

(==) :: DisableAWSServiceAccessResponse -> DisableAWSServiceAccessResponse -> Bool

(/=) :: DisableAWSServiceAccessResponse -> DisableAWSServiceAccessResponse -> Bool

type Rep DisableAWSServiceAccessResponse

Defined in Amazonka.Organizations.DisableAWSServiceAccess

type Rep DisableAWSServiceAccessResponse = D1 ('MetaData "DisableAWSServiceAccessResponse" "Amazonka.Organizations.DisableAWSServiceAccess" "amazonka-organizations-2.0-JONpdX4PtttLcKxQshpOlA" 'False) (C1 ('MetaCons "DisableAWSServiceAccessResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newDisableAWSServiceAccessResponse :: DisableAWSServiceAccessResponse

Create a value of DisableAWSServiceAccessResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.