Post x amz targetawsorganizationsv20161128.listpoliciesfortarget

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1455233317.4 KB

Lists the policies that are directly attached to the specified target root, organizational unit (OU), or account. You must specify the policy type that you want included in the returned list.

Always check the NextToken response parameter for a null value when calling a List* operation. These operations can occasionally return an empty set of results even when there are more results available. The NextToken response parameter value is null only when there are no more results to display.

This operation can be called only from the organization's management account or by a member account that is a delegated administrator for an Amazon Web Services service.

post/#X-Amz-Target=AWSOrganizationsV20161128.ListPoliciesForTarget

Query parameters

MaxResultsstring

Pagination limit

NextTokenstring

Pagination token

Headers

X-Amz-Target'AWSOrganizationsV20161128.ListPoliciesForTarget' required

Request body

TargetIdstring required

The unique identifier (ID) of the root, organizational unit, or account whose policies you want to list. The <a href="http://wikipedia.org/wiki/regex">regex pattern</a> for a target ID string requires one of the following: <ul> <li> Root - A string that begins with "r-" followed by from 4 to 32 lowercase letters or digits. </li> <li> Account - A string that consists of exactly 12 digits. </li> <li> Organizational unit (OU) - A string that begins with "ou-" followed by from 4 to 32 lowercase letters or digits (the ID of the root that the OU is in). This string is followed by a second "-" dash and from 8 to 32 additional lowercase letters or digits. </li> </ul>

Filter'SERVICE_CONTROL_POLICY' | 'TAG_POLICY' | 'BACKUP_POLICY' | 'AISERVICES_OPT_OUT_POLICY' required

The type of policy that you want to include in the returned list. You must specify one of the following values: <ul> <li> <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_ai-opt-out.html">AISERVICES_OPT_OUT_POLICY</a> </li> <li> <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_backup.html">BACKUP_POLICY</a> </li> <li> <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.html">SERVICE_CONTROL_POLICY</a> </li> <li> <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html">TAG_POLICY</a> </li> </ul>

NextTokenstring

The parameter for receiving additional results if you receive a <code>NextToken</code> response in a previous request. A <code>NextToken</code> response indicates that more output is available. Set this parameter to the value of the previous call's <code>NextToken</code> response to indicate where the output should continue from.

MaxResultsinteger

The total number of results that you want included on each page of the response. If you do not include this parameter, it defaults to a value that is specific to the operation. If additional items exist beyond the maximum you specify, the <code>NextToken</code> response element is present and has a value (is not null). Include that value as the <code>NextToken</code> request parameter in the next call to the operation to get the next part of the results. Note that Organizations might return fewer results than the maximum even when there are more results available. You should check <code>NextToken</code> after every operation to ensure that you receive all of the results.

Response

Success

NextTokenstring

If present, indicates that more output is available than is included in the current response. Use this value in the <code>NextToken</code> request parameter in a subsequent call to the operation to get the next part of the output. You should repeat this until the <code>NextToken</code> response element comes back as <code>null</code>.

Example response

{
  "Policies": [
    {
      "Arn": "arn:aws:organizations::111111111111:policy/o-exampleorgid/service_control_policy/p-examplepolicyid222",
      "AwsManaged": false,
      "Description": "Enables account admins to delegate permissions for any EC2 actions to users and roles in their accounts.",
      "Id": "p-examplepolicyid222",
      "Name": "AllowAllEC2Actions",
      "Type": "SERVICE_CONTROL_POLICY"
    }
  ]
}