/* * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. * * Licensed under the Apache License, Version 2.0 (the "License"). * You may not use this file except in compliance with the License. * A copy of the License is located at * * http://aws.amazon.com/apache2.0 * * or in the "license" file accompanying this file. This file is distributed * on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either * express or implied. See the License for the specific language governing * permissions and limitations under the License. */ /* * Do not modify this file. This file is generated from the organizations-2016-11-28.normal.json service model. */ using System; using System.Collections.Generic; using System.Xml.Serialization; using System.Text; using System.IO; using System.Net; using Amazon.Runtime; using Amazon.Runtime.Internal; namespace Amazon.Organizations.Model { /// /// Container for the parameters to the CreateGovCloudAccount operation. /// This action is available if all of the following are true: /// /// /// /// Organizations automatically creates the required service-linked role named AWSServiceRoleForOrganizations. /// For more information, see Organizations /// and Service-Linked Roles in the Organizations User Guide. /// /// /// /// Amazon Web Services automatically enables CloudTrail for Amazon Web Services GovCloud /// (US) accounts, but you should also do the following: /// /// /// /// If the request includes tags, then the requester must have the organizations:TagResource /// permission. The tags are attached to the commercial account associated with the GovCloud /// account, rather than the GovCloud account itself. To add tags to the GovCloud account, /// call the TagResource operation in the GovCloud Region after the new GovCloud /// account exists. /// /// /// /// You call this action from the management account of your organization in the commercial /// Region to create a standalone Amazon Web Services account in the Amazon Web Services /// GovCloud (US) Region. After the account is created, the management account of an organization /// in the Amazon Web Services GovCloud (US) Region can invite it to that organization. /// For more information on inviting standalone accounts in the Amazon Web Services GovCloud /// (US) to join an organization, see Organizations /// in the Amazon Web Services GovCloud User Guide. /// /// /// /// Calling CreateGovCloudAccount is an asynchronous request that Amazon /// Web Services performs in the background. Because CreateGovCloudAccount /// operates asynchronously, it can return a successful completion message even though /// account initialization might still be in progress. You might need to wait a few minutes /// before you can successfully access the account. To check the status of the request, /// do one of the following: /// /// /// /// When you call the CreateGovCloudAccount action, you create two accounts: /// a standalone account in the Amazon Web Services GovCloud (US) Region and an associated /// account in the commercial Region for billing and support purposes. The account in /// the commercial Region is automatically a member of the organization whose credentials /// made the request. Both accounts are associated with the same email address. /// /// /// /// A role is created in the new account in the commercial Region that allows the management /// account in the organization in the commercial Region to assume it. An Amazon Web Services /// GovCloud (US) account is then created and associated with the commercial account that /// you just created. A role is also created in the new Amazon Web Services GovCloud (US) /// account that can be assumed by the Amazon Web Services GovCloud (US) account that /// is associated with the management account of the commercial organization. For more /// information and to view a diagram that explains how account access works, see Organizations /// in the Amazon Web Services GovCloud User Guide. /// /// /// /// For more information about creating accounts, see Creating /// an Amazon Web Services account in Your Organization in the Organizations User /// Guide. /// /// /// /// When you create a member account with this operation, you can choose whether to create /// the account with the IAM User and Role Access to Billing Information switch /// enabled. If you enable it, IAM users and roles that have appropriate permissions can /// view billing information for the account. If you disable it, only the account root /// user can access billing information. For information about how to disable this switch /// for an account, see Granting /// Access to Your Billing Information and Tools. /// /// /// public partial class CreateGovCloudAccountRequest : AmazonOrganizationsRequest { private string _accountName; private string _email; private IAMUserAccessToBilling _iamUserAccessToBilling; private string _roleName; private List _tags = new List(); /// /// Gets and sets the property AccountName. /// /// The friendly name of the member account. /// /// /// /// The account name can consist of only the characters [a-z],[A-Z],[0-9], hyphen (-), /// or dot (.) You can't separate characters with a dash (–). /// /// [AWSProperty(Required=true, Sensitive=true, Min=1, Max=50)] public string AccountName { get { return this._accountName; } set { this._accountName = value; } } // Check to see if AccountName property is set internal bool IsSetAccountName() { return this._accountName != null; } /// /// Gets and sets the property Email. /// /// Specifies the email address of the owner to assign to the new member account in the /// commercial Region. This email address must not already be associated with another /// Amazon Web Services account. You must use a valid email address to complete account /// creation. /// /// /// /// The rules for a valid email address: /// ///
  • /// /// The address must be a minimum of 6 and a maximum of 64 characters long. /// ///
  • /// /// All characters must be 7-bit ASCII characters. /// ///
  • /// /// There must be one and only one @ symbol, which separates the local name from the domain /// name. /// ///
  • /// /// The local name can't contain any of the following characters: /// /// /// /// whitespace, " ' ( ) < > [ ] : ; , \ | % & /// ///
  • /// /// The local name can't begin with a dot (.) /// ///
  • /// /// The domain name can consist of only the characters [a-z],[A-Z],[0-9], hyphen (-), /// or dot (.) /// ///
  • /// /// The domain name can't begin or end with a hyphen (-) or dot (.) /// ///
  • /// /// The domain name must contain at least one dot /// ///
/// /// You can't access the root user of the account or remove an account that was created /// with an invalid email address. Like all request parameters for CreateGovCloudAccount, /// the request for the email address for the Amazon Web Services GovCloud (US) account /// originates from the commercial Region, not from the Amazon Web Services GovCloud (US) /// Region. /// /// [AWSProperty(Required=true, Sensitive=true, Min=6, Max=64)] public string Email { get { return this._email; } set { this._email = value; } } // Check to see if Email property is set internal bool IsSetEmail() { return this._email != null; } /// /// Gets and sets the property IamUserAccessToBilling. /// /// If set to ALLOW, the new linked account in the commercial Region enables /// IAM users to access account billing information if they have the required permissions. /// If set to DENY, only the root user of the new account can access account /// billing information. For more information, see Activating /// Access to the Billing and Cost Management Console in the Amazon Web Services /// Billing and Cost Management User Guide. /// /// /// /// If you don't specify this parameter, the value defaults to ALLOW, and /// IAM users and roles with the required permissions can access billing information for /// the new account. /// /// public IAMUserAccessToBilling IamUserAccessToBilling { get { return this._iamUserAccessToBilling; } set { this._iamUserAccessToBilling = value; } } // Check to see if IamUserAccessToBilling property is set internal bool IsSetIamUserAccessToBilling() { return this._iamUserAccessToBilling != null; } /// /// Gets and sets the property RoleName. /// /// (Optional) /// /// /// /// The name of an IAM role that Organizations automatically preconfigures in the new /// member accounts in both the Amazon Web Services GovCloud (US) Region and in the commercial /// Region. This role trusts the management account, allowing users in the management /// account to assume the role, as permitted by the management account administrator. /// The role has administrator permissions in the new member account. /// /// /// /// If you don't specify this parameter, the role name defaults to OrganizationAccountAccessRole. /// /// /// /// For more information about how to use this role to access the member account, see /// Accessing /// and Administering the Member Accounts in Your Organization in the Organizations /// User Guide and steps 2 and 3 in Tutorial: /// Delegate Access Across Amazon Web Services accounts Using IAM Roles in the IAM /// User Guide. /// /// /// /// The regex pattern that is used to validate /// this parameter. The pattern can include uppercase letters, lowercase letters, digits /// with no spaces, and any of the following characters: =,.@- /// /// [AWSProperty(Max=64)] public string RoleName { get { return this._roleName; } set { this._roleName = value; } } // Check to see if RoleName property is set internal bool IsSetRoleName() { return this._roleName != null; } /// /// Gets and sets the property Tags. /// /// A list of tags that you want to attach to the newly created account. These tags are /// attached to the commercial account associated with the GovCloud account, and not to /// the GovCloud account itself. To add tags to the actual GovCloud account, call the /// TagResource operation in the GovCloud region after the new GovCloud account /// exists. /// /// /// /// For each tag in the list, you must specify both a tag key and a value. You can set /// the value to an empty string, but you can't set it to null. For more /// information about tagging, see Tagging /// Organizations resources in the Organizations User Guide. /// /// /// /// If any one of the tags is not valid or if you exceed the maximum allowed number of /// tags for an account, then the entire request fails and the account is not created. /// /// /// public List Tags { get { return this._tags; } set { this._tags = value; } } // Check to see if Tags property is set internal bool IsSetTags() { return this._tags != null && this._tags.Count > 0; } } }