{"slug":"iam-aws-organizations","cloud":"aws","service":"organizations","title":"AWS Organizations (IAM)","description":"AWS Organizations helps you centrally govern your environment as you grow and scale your AWS resources.","category":"management","common_permissions":["organizations:ListAccounts","organizations:ListRoots","organizations:ListOrganizationalUnitsForParent","organizations:DescribeOrganization","organizations:ListPolicies","organizations:ListTagsForResource","organizations:TagResource","organizations:UntagResource"],"least_privilege_example":"{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Effect\": \"Allow\",\n      \"Action\": [\n        \"organizations:ListAccounts\",\n        \"organizations:ListRoots\",\n        \"organizations:ListOrganizationalUnitsForParent\",\n        \"organizations:DescribeOrganization\",\n        \"organizations:ListPolicies\",\n        \"organizations:ListTagsForResource\",\n        \"organizations:TagResource\",\n        \"organizations:UntagResource\"\n      ],\n      \"Resource\": \"*\"\n    }\n  ]\n}","warnings":["Avoid organizations:* — grants full control including account creation and policy management","Avoid organizations:CreateAccount and organizations:DeleteOrganization — can lead to account sprawl or accidental deletion"],"docs":"https://servicereference.us-east-1.amazonaws.com/v1/organizations/organizations.json","tags":["iam","aws"],"last_verified":"2026-06-14T00:00:00.000Z","next_check":"2026-12-11T00:00:00.000Z","created_at":"2026-06-14T04:49:42.270Z","updated_at":"2026-06-14T04:49:42.270Z"}