register_organization_delegated_admin
async
¶
register_organization_delegated_admin(
member_account_id: AccountId,
*,
config_overrides: Optional[AsyncCloudTrailClientConfig] = None,
) -> RegisterOrganizationDelegatedAdminResponse
Registers an organization’s member account as the CloudTrail delegated administrator.
Parameters:
-
member_account_id(AccountId) –An organization member account ID that you want to designate as a delegated administrator.
Raises:
-
AccountNotFoundException–This exception is thrown when the specified account is not found or not part of an organization.
-
AccountRegisteredException–This exception is thrown when the account is already registered as the CloudTrail delegated administrator.
-
CannotDelegateManagementAccountException–This exception is thrown when the management account of an organization is registered as the CloudTrail delegated administrator.
-
CloudTrailAccessNotEnabledException–This exception is thrown when trusted access has not been enabled between CloudTrail and Organizations. For more information, see How to enable or disable trusted access in the Organizations User Guide and Prepare For Creating a Trail For Your Organization in the CloudTrail User Guide.
-
ConflictException–This exception is thrown when the specified resource is not ready for an operation. This can occur when you try to run an operation on a resource before CloudTrail has time to fully load the resource, or because another operation is modifying the resource. If this exception occurs, wait a few minutes, and then try the operation again.
-
DelegatedAdminAccountLimitExceededException–This exception is thrown when the maximum number of CloudTrail delegated administrators is reached.
-
InsufficientDependencyServiceAccessPermissionException–This exception is thrown when the IAM identity that is used to create the organization resource lacks one or more required permissions for creating an organization resource in a required service.
-
InsufficientIAMAccessPermissionException–The task can't be completed because you are signed in with an account that lacks permissions to view or create a service-linked role. Sign in with an account that has the required permissions and then try again.
-
InvalidParameterException–The request includes a parameter that is not valid.
-
NotOrganizationManagementAccountException–This exception is thrown when the account making the request is not the organization's management account.
-
OperationNotPermittedException–This exception is thrown when the requested operation is not permitted.
-
OrganizationNotInAllFeaturesModeException–This exception is thrown when Organizations is not configured to support all features. All features must be enabled in Organizations to support creating an organization trail or event data store.
-
OrganizationsNotInUseException–This exception is thrown when the request is made from an Amazon Web Services account that is not a member of an organization. To make this request, sign in using the credentials of an account that belongs to an organization.
-
UnsupportedOperationException–This exception is thrown when the requested operation is not supported.
-
UnknownServiceError–The service returned an error code this client does not model.