Deleting member account created via Terraform

Question

Hello, 
I've created an AWS organization and one member account under this organization with a secondary e-mail address.
However, because this was a trial run, I've performed `terraform destroy` to delete everything.
This only suspended the account, however it is still there under the organization and it is preventing me from deleting the organization.
I've tried AWS CLI and Console, however I cannot delete the member as none of the options are available to me.
Does anyone know how exactly to solve this issue? Do I have to disassociate the account by making it standalone?

Best,
Onur

Accepted Answer

To properly close an account under an organization, please follow the steps below:

1. Activate the Account: If the account is currently suspended, you need to reactivate it before proceeding with the closure process. Contact AWS Support for assistance in reactivating the account.

2. Remove from the Organization: Once the account is active, navigate to the AWS Organizations console and remove the account from the organization. This step detaches the account from the organization's management and control.

3. Review Dependencies: Before closing the account, ensure that there are no dependencies or resources tied to the account that may be required by other accounts or services. Review any cross-account roles, shared resources, or integrations and make the necessary adjustments.

4. Communicate with Organization Members: Inform the members of the organization about the impending account closure. Notify them of any changes or actions they need to take, such as updating cross-account access or transferring resources.

5. Close the Account: Once you have verified that the account is no longer needed and has been appropriately detached from the organization, you can proceed with closing the account. Follow the AWS documentation or contact AWS Support for guidance on the account closure process.

It's important to note that closing an account permanently deletes all associated data and resources, so ensure that you have backed up any necessary information before initiating the closure.

Please consult the official AWS documentation or contact AWS Support for detailed instructions and assistance in closing an account under an organization.

Answer

As described in this document, "close_on_deletion" must be set to true in order to delete the file.  
Is "close_on_deletion" set to true?  
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/organizations_account  
> By default, deleting this Terraform resource will only remove an AWS account from an organization. You must set the close_on_deletion flag to true to close the account. It is worth noting that quotas are enforced when using the close_on_deletion argument, which can produce a CLOSE_ACCOUNT_QUOTA_EXCEEDED error, and require you to close the account manually.

Answer

Yes, it is. My terraform resources looks something like this

```
resource "aws_organizations_account" "account" {
  name  = var.AccountName
  email = var.myEmail
  close_on_deletion = true
  iam_user_access_to_billing = "DENY"
  parent_id = aws_organizations_organizational_unit.example_ou.id
}
```

Deleting member account created via Terraform

相关内容