organizations:InviteAccountToOrganization is a Write access-level action in the organizations service. Grants permission to send an invitation to another AWS account, asking it to join your organization as a member account
ARNs that organizations:InviteAccountToOrganization can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants organizations:InviteAccountToOrganization.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the tags associated with the resource
A minimal policy that allows organizations:InviteAccountToOrganization. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowOrganizationsInviteAccountToOrganization",
"Effect": "Allow",
"Action": "organizations:InviteAccountToOrganization",
"Resource": "*"
}
]
}