organizations:CreateOrganization is a Write access-level action in the organizations service. Grants permission to create an organization. The account with the credentials that calls the CreateOrganization operation automatically becomes the management account of the new organization
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
To use organizations:CreateOrganization you may also need to grant:
A minimal policy that allows organizations:CreateOrganization. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowOrganizationsCreateOrganization",
"Effect": "Allow",
"Action": "organizations:CreateOrganization",
"Resource": "*"
}
]
}