organizations:DisableAWSServiceAccess

Write

organizations:DisableAWSServiceAccess is a Write access-level action in the organizations service. Grants permission to disable integration of an AWS service (the service that is specified by ServicePrincipal) with AWS Organizations

Resource types

This action does not support resource-level permissions; use "Resource": "*" in your policy.

Condition keys

Keys you can use in the Condition block of a policy that grants organizations:DisableAWSServiceAccess.

organizations:ServicePrincipal String

Filters access by the specified service principal names

Example IAM policy

A minimal policy that allows organizations:DisableAWSServiceAccess. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowOrganizationsDisableAWSServiceAccess",
      "Effect": "Allow",
      "Action": "organizations:DisableAWSServiceAccess",
      "Resource": "*"
    }
  ]
}

Related actions in organizations

organizations:AcceptHandshake Write organizations:AttachPolicy Permissions management organizations:CancelHandshake Write organizations:CloseAccount Write organizations:CreateAccount Write organizations:CreateGovCloudAccount Write organizations:CreateOrganization Write organizations:CreateOrganizationalUnit Write organizations:CreatePolicy Write organizations:DeclineHandshake Write organizations:DeleteOrganization Write organizations:DeleteOrganizationalUnit Write

View all organizations actions →