使用 管理待定帳戶邀請 AWS Organizations - AWS Organizations

本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

使用 管理待定帳戶邀請 AWS Organizations

登入到您的管理帳戶時，您可以檢視組織中的所有連結的 AWS 帳戶 ，以及取消任何等待中 (開啟) 的邀請。若要執行此動作，請執行下列步驟。

最低許可

若要管理組織的等待中邀請，您必須擁有以下許可：

  • organizations:DescribeOrganization – 僅在使用 Organizations 主控台時才需要

  • organizations:ListHandshakesForOrganization

  • organizations:CancelHandshake

AWS Management Console
檢視或取消從您的組織傳送到其他帳戶的邀請

  1. 登入 AWS Organizations 主控台。您必須以 IAM 使用者登入、擔任 IAM 角色，或是以組織管理帳戶中的根使用者 (不建議) 身分登入。

  2. 導覽至邀請頁面。

    此頁面顯示從您的組織傳送的所有邀請及其目前狀態。

    如果您看不到邀請，請檢查受邀帳戶是否為另一個組織的管理帳戶。只有成員帳戶和獨立帳戶才能接收邀請。管理帳戶無法接收邀請。

    如果您想要邀請另一個組織中管理帳戶的帳戶，建議您將該帳戶設為獨立帳戶。

    注意

    已接受、已取消和已拒絕的邀請會繼續在清單中顯示 30 天。之後便會刪除它們，不再顯示在清單中。

  3. 選擇您希望取消邀請旁邊的選項按鈕 Blue circular icon with a white checkmark symbol in the center. ，然後選擇 Cancel invitation (取消邀請)。如果選項按鈕呈現灰色，則無法取消該邀請。

    邀請的狀態會從 Open (開啟) 變更為 Canceled (已取消)。

    AWS 會傳送電子郵件訊息給帳戶擁有者，說明您已取消邀請。除非您傳送新的邀請，否則該帳戶不再可以加入組織。

AWS CLI & AWS SDKs
檢視或取消從您的組織傳送到其他帳戶的邀請

您可以使用以下命令來檢視或取消邀請：

  • AWS CLI: list-handshakes-for-organization, cancel-handshake

  • 下列範例顯示此組織傳送給其他帳戶的邀請。

    $ aws organizations list-handshakes-for-organization
{
    "Handshakes": [
        {
            "Action": "INVITE",
            "Arn": "arn:aws:organizations::111111111111:handshake/o-exampleorgid/invite/h-examplehandshakeid111",
            "ExpirationTimestamp": 1482952459.257,
            "Id": "h-examplehandshakeid111",
            "Parties": [
                {
                    "Id": "o-exampleorgid",
                    "Type": "ORGANIZATION"
                },
                {
                    "Id": "juan@example.com",
                    "Type": "EMAIL"
                }
            ],
            "RequestedTimestamp": 1481656459.257,
            "Resources": [
                {
                    "Resources": [
                        {
                            "Type": "MASTER_EMAIL",
                            "Value": "bill@amazon.com"
                        },
                        {
                            "Type": "MASTER_NAME",
                            "Value": "Management Account"
                        },
                        {
                            "Type": "ORGANIZATION_FEATURE_SET",
                            "Value": "FULL"
                        }
                    ],
                    "Type": "ORGANIZATION",
                    "Value": "o-exampleorgid"
                },
                {
                    "Type": "EMAIL",
                    "Value": "juan@example.com"
                },
                {
                    "Type":"NOTES",
                    "Value":"This is an invitation to Juan's account to join Bill's organization."
                }
            ],
            "State": "OPEN"
        },
        {
            "Action": "INVITE",
            "State":"ACCEPTED",
            "Arn": "arn:aws:organizations::111111111111:handshake/o-exampleorgid/invite/h-examplehandshakeid111",
            "ExpirationTimestamp": 1.471797437427E9,
            "Id": "h-examplehandshakeid222",
            "Parties": [
                {
                    "Id": "o-exampleorgid",
                    "Type": "ORGANIZATION"
                },
                {
                    "Id": "anika@example.com",
                    "Type": "EMAIL"
                }
            ],
            "RequestedTimestamp": 1.469205437427E9,
            "Resources": [
                {
                    "Resources": [
                        {
                            "Type":"MASTER_EMAIL",
                             "Value":"bill@example.com"
                        },
                        {
                            "Type":"MASTER_NAME",
                            "Value":"Management Account"
                        }
                    ],
                    "Type":"ORGANIZATION",
                    "Value":"o-exampleorgid"
                },
                {
                    "Type":"EMAIL",
                    "Value":"anika@example.com"
                },
                {
                    "Type":"NOTES",
                    "Value":"This is an invitation to Anika's account to join Bill's organization."
                }
            ]
        }
    ]
}

    下列範例顯示如何取消對帳戶的邀請。

    $ aws organizations cancel-handshake --handshake-id h-examplehandshakeid111
{
    "Handshake": {
        "Id": "h-examplehandshakeid111",
        "State":"CANCELED",
        "Action": "INVITE",
        "Arn": "arn:aws:organizations::111111111111:handshake/o-exampleorgid/invite/h-examplehandshakeid111",
        "Parties": [
            {
                "Id": "o-exampleorgid",
                "Type": "ORGANIZATION"
            },
            {
                "Id": "susan@example.com",
                "Type": "EMAIL"
            }
        ],
        "Resources": [
            {
                "Type": "ORGANIZATION",
                "Value": "o-exampleorgid",
                "Resources": [
                    {
                        "Type": "MASTER_EMAIL",
                        "Value": "bill@example.com"
                    },
                    {
                        "Type": "MASTER_NAME",
                        "Value": "Management Account"
                    },
                    {
                        "Type": "ORGANIZATION_FEATURE_SET",
                        "Value": "CONSOLIDATED_BILLING"
                    }
                ]
            },
            {
                "Type": "EMAIL",
                "Value": "anika@example.com"
            },
            {
                "Type": "NOTES",
                "Value": "This is a request for Susan's account to join Bob's organization."
            }
        ],
        "RequestedTimestamp": 1.47008383521E9,
        "ExpirationTimestamp": 1.47137983521E9
    }
}

  • AWS SDKs：ListHandshakesForOrganization、CancelHandshake