AWS Organizations - list accounts for role [boto3]

Hi,

We are planning to support for AWS Organizations in our product. We will need to retrieve very often the list of AWS accounts belonging to a given organization. Instead of frequently traversing the organization tree to discover new/deleted accounts (it may be slow), I wonder if there is any boto3 binding or api endpoint to list all organization accounts (and ideally filter by role). Thanks in advance.

Regards

주제

관리 및 거버넌스

태그

AWS 조직

언어

English

Roberto

질문됨 5달 전205회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

수락된 답변

Hello.

You can get a list of accounts in Organizations by using list_accounts() described in the following document.
However, this cannot display a list of accounts across organizations, so if you want to cross organizations, you will need to set up cross-account roles, etc.
https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/organizations/client/list_accounts.html

I think list_children() can be used to list by OU.
https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/organizations/client/list_children.html

전문가

Riku_Kobayashi

답변함 5달 전

전문가

Oleksii Bebych

검토됨 15시간 전

전문가

Didier_Durand

검토됨 5달 전

Roberto
5달 전
Thank you @Riku - I wonder how the heck I went over this endpoint without noticing... Thanks!

to list by OU I have found list_accounts_for_parent()

AWS Organizations - list accounts for role [boto3]

관련 콘텐츠