Skip to content

enable_organizations_root_credentials_management async 

enable_organizations_root_credentials_management(
    *, config_overrides: Optional[AsyncIAMClientConfig] = None
) -> EnableOrganizationsRootCredentialsManagementResponse

Enables the management of privileged root user credentials across member accounts in your organization. When you enable root credentials management for centralized root access, the management account and the delegated administrator for IAM can manage root user credentials for member accounts in your organization.

Before you enable centralized root access, you must have an account configured with the following settings:

  • You must manage your Amazon Web Services accounts in Organizations.

  • Enable trusted access for Identity and Access Management in Organizations. For details, see IAM and Organizations in the Organizations User Guide.

Raises:

Examples:

To enable the RootCredentialsManagement feature in your organization The following command enables the management of privileged root user credentials across member accounts in your organization.

>>> await client.enable_organizations_root_credentials_management()
Source code in docs_src/capo_iam/_services/async_iam.py 
3680
3681
3682
3683
3684
3685
3686
3687
3688
3689
3690
3691
3692
3693
3694
3695
3696
3697
3698
3699
3700
3701
3702
3703
3704
3705
3706
3707
3708
3709
3710
3711
3712
3713
3714
3715
3716
3717
3718
3719
3720
3721
3722
3723
3724
3725
3726
3727
async def enable_organizations_root_credentials_management(
    self, *, config_overrides: Optional[AsyncIAMClientConfig] = None
) -> "capo_iam.types.enable_organizations_root_credentials_management_response.EnableOrganizationsRootCredentialsManagementResponse":
    """<p>Enables the management of privileged root user credentials across member accounts in your organization. When you enable root credentials management for <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#id_root-user-access-management">centralized root access</a>, the management account and the delegated administrator for IAM can manage root user credentials for member accounts in your organization.</p> <p>Before you enable centralized root access, you must have an account configured with the following settings:</p> <ul> <li> <p>You must manage your Amazon Web Services accounts in <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html">Organizations</a>.</p> </li> <li> <p>Enable trusted access for Identity and Access Management in Organizations. For details, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-iam.html">IAM and Organizations</a> in the <i>Organizations User Guide</i>.</p> </li> </ul>

    Raises:
        capo_iam.errors.account_not_management_or_delegated_administrator_exception.AccountNotManagementOrDelegatedAdministratorException: <p>The request was rejected because the account making the request is not the management account or delegated administrator account for <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#id_root-user-access-management">centralized root access</a>.</p>
        capo_iam.errors.caller_is_not_management_account_exception.CallerIsNotManagementAccountException: <p>The request was rejected because the account making the request is not the management account for the organization.</p>
        capo_iam.errors.organization_not_found_exception.OrganizationNotFoundException: <p>The request was rejected because no organization is associated with your account.</p>
        capo_iam.errors.organization_not_in_all_features_mode_exception.OrganizationNotInAllFeaturesModeException: <p>The request was rejected because your organization does not have All features enabled. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set">Available feature sets</a> in the <i>Organizations User Guide</i>.</p>
        capo_iam.errors.service_access_not_enabled_exception.ServiceAccessNotEnabledException: <p>The request was rejected because trusted access is not enabled for IAM in Organizations. For details, see IAM and Organizations in the <i>Organizations User Guide</i>.</p>
        capo_iam.errors.UnknownServiceError: The service returned an error code this client does not model.

    Examples:
        To enable the RootCredentialsManagement feature in your organization
        The following command enables the management of privileged root user credentials across member accounts in your organization.

        >>> await client.enable_organizations_root_credentials_management()
    """

    async def _handler(
        req: "AsyncOperationRequest[capo_iam.types.enable_organizations_root_credentials_management_request.EnableOrganizationsRootCredentialsManagementRequest]",
    ) -> AsyncOperationResponse[
        "capo_iam.types.enable_organizations_root_credentials_management_response.EnableOrganizationsRootCredentialsManagementResponse"
    ]:
        import capo_iam._operations.aws_identity_management_v20100508.enable_organizations_root_credentials_management

        (
            output,
            http_response,
        ) = await capo_iam._operations.aws_identity_management_v20100508.enable_organizations_root_credentials_management.async_enable_organizations_root_credentials_management(
            req.options, req.input
        )
        return AsyncOperationResponse(output=output, response=http_response)

    interceptors_, options_ = self.operation_options(
        config_overrides,
        OperationLogging("EnableOrganizationsRootCredentialsManagement"),
    )
    input_: capo_iam.types.enable_organizations_root_credentials_management_request.EnableOrganizationsRootCredentialsManagementRequest = {}

    response = await aexecute_pipeline(
        AsyncOperationRequest(input=input_, options=options_),
        handler=_handler,
        interceptors=list(interceptors_),
    )
    await response.response.aclose()
    return response.output