aws_sdk_iam/operation/
enable_organizations_root_credentials_management.rs

1// Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
2/// Orchestration and serialization glue logic for `EnableOrganizationsRootCredentialsManagement`.
3#[derive(::std::clone::Clone, ::std::default::Default, ::std::fmt::Debug)]
4#[non_exhaustive]
5pub struct EnableOrganizationsRootCredentialsManagement;
6impl EnableOrganizationsRootCredentialsManagement {
7    /// Creates a new `EnableOrganizationsRootCredentialsManagement`
8    pub fn new() -> Self {
9        Self
10    }
11    pub(crate) async fn orchestrate(
12        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
13        input: crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementInput,
14    ) -> ::std::result::Result<
15        crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementOutput,
16        ::aws_smithy_runtime_api::client::result::SdkError<
17            crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementError,
18            ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
19        >,
20    > {
21        let map_err = |err: ::aws_smithy_runtime_api::client::result::SdkError<
22            ::aws_smithy_runtime_api::client::interceptors::context::Error,
23            ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
24        >| {
25            err.map_service_error(|err| {
26                err.downcast::<crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementError>(
27                )
28                .expect("correct error type")
29            })
30        };
31        let context = Self::orchestrate_with_stop_point(runtime_plugins, input, ::aws_smithy_runtime::client::orchestrator::StopPoint::None)
32            .await
33            .map_err(map_err)?;
34        let output = context.finalize().map_err(map_err)?;
35        ::std::result::Result::Ok(
36            output
37                .downcast::<crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementOutput>()
38                .expect("correct output type"),
39        )
40    }
41
42    pub(crate) async fn orchestrate_with_stop_point(
43        runtime_plugins: &::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
44        input: crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementInput,
45        stop_point: ::aws_smithy_runtime::client::orchestrator::StopPoint,
46    ) -> ::std::result::Result<
47        ::aws_smithy_runtime_api::client::interceptors::context::InterceptorContext,
48        ::aws_smithy_runtime_api::client::result::SdkError<
49            ::aws_smithy_runtime_api::client::interceptors::context::Error,
50            ::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
51        >,
52    > {
53        let input = ::aws_smithy_runtime_api::client::interceptors::context::Input::erase(input);
54        use ::tracing::Instrument;
55        ::aws_smithy_runtime::client::orchestrator::invoke_with_stop_point(
56            "IAM",
57            "EnableOrganizationsRootCredentialsManagement",
58            input,
59            runtime_plugins,
60            stop_point,
61        )
62        // Create a parent span for the entire operation. Includes a random, internal-only,
63        // seven-digit ID for the operation orchestration so that it can be correlated in the logs.
64        .instrument(::tracing::debug_span!(
65            "IAM.EnableOrganizationsRootCredentialsManagement",
66            "rpc.service" = "IAM",
67            "rpc.method" = "EnableOrganizationsRootCredentialsManagement",
68            "sdk_invocation_id" = ::fastrand::u32(1_000_000..10_000_000),
69            "rpc.system" = "aws-api",
70        ))
71        .await
72    }
73
74    pub(crate) fn operation_runtime_plugins(
75        client_runtime_plugins: ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins,
76        client_config: &crate::config::Config,
77        config_override: ::std::option::Option<crate::config::Builder>,
78    ) -> ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugins {
79        let mut runtime_plugins = client_runtime_plugins.with_operation_plugin(Self::new());
80
81        if let ::std::option::Option::Some(config_override) = config_override {
82            for plugin in config_override.runtime_plugins.iter().cloned() {
83                runtime_plugins = runtime_plugins.with_operation_plugin(plugin);
84            }
85            runtime_plugins = runtime_plugins.with_operation_plugin(crate::config::ConfigOverrideRuntimePlugin::new(
86                config_override,
87                client_config.config.clone(),
88                &client_config.runtime_components,
89            ));
90        }
91        runtime_plugins
92    }
93}
94impl ::aws_smithy_runtime_api::client::runtime_plugin::RuntimePlugin for EnableOrganizationsRootCredentialsManagement {
95    fn config(&self) -> ::std::option::Option<::aws_smithy_types::config_bag::FrozenLayer> {
96        let mut cfg = ::aws_smithy_types::config_bag::Layer::new("EnableOrganizationsRootCredentialsManagement");
97
98        cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedRequestSerializer::new(
99            EnableOrganizationsRootCredentialsManagementRequestSerializer,
100        ));
101        cfg.store_put(::aws_smithy_runtime_api::client::ser_de::SharedResponseDeserializer::new(
102            EnableOrganizationsRootCredentialsManagementResponseDeserializer,
103        ));
104
105        cfg.store_put(::aws_smithy_runtime_api::client::auth::AuthSchemeOptionResolverParams::new(
106            crate::config::auth::Params::builder()
107                .operation_name("EnableOrganizationsRootCredentialsManagement")
108                .build()
109                .expect("required fields set"),
110        ));
111
112        cfg.store_put(::aws_smithy_runtime_api::client::orchestrator::Metadata::new(
113            "EnableOrganizationsRootCredentialsManagement",
114            "IAM",
115        ));
116        let mut signing_options = ::aws_runtime::auth::SigningOptions::default();
117        signing_options.double_uri_encode = true;
118        signing_options.content_sha256_header = false;
119        signing_options.normalize_uri_path = true;
120        signing_options.payload_override = None;
121
122        cfg.store_put(::aws_runtime::auth::SigV4OperationSigningConfig {
123            signing_options,
124            ..::std::default::Default::default()
125        });
126
127        ::std::option::Option::Some(cfg.freeze())
128    }
129
130    fn runtime_components(
131        &self,
132        _: &::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder,
133    ) -> ::std::borrow::Cow<'_, ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder> {
134        #[allow(unused_mut)]
135        let mut rcb =
136            ::aws_smithy_runtime_api::client::runtime_components::RuntimeComponentsBuilder::new("EnableOrganizationsRootCredentialsManagement")
137                .with_interceptor(::aws_smithy_runtime::client::stalled_stream_protection::StalledStreamProtectionInterceptor::default())
138                .with_interceptor(EnableOrganizationsRootCredentialsManagementEndpointParamsInterceptor)
139                .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::TransientErrorClassifier::<
140                    crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementError,
141                >::new())
142                .with_retry_classifier(::aws_smithy_runtime::client::retries::classifiers::ModeledAsRetryableClassifier::<
143                    crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementError,
144                >::new())
145                .with_retry_classifier(::aws_runtime::retries::classifiers::AwsErrorCodeClassifier::<
146                    crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementError,
147                >::new());
148
149        ::std::borrow::Cow::Owned(rcb)
150    }
151}
152
153#[derive(Debug)]
154struct EnableOrganizationsRootCredentialsManagementResponseDeserializer;
155impl ::aws_smithy_runtime_api::client::ser_de::DeserializeResponse for EnableOrganizationsRootCredentialsManagementResponseDeserializer {
156    fn deserialize_nonstreaming(
157        &self,
158        response: &::aws_smithy_runtime_api::client::orchestrator::HttpResponse,
159    ) -> ::aws_smithy_runtime_api::client::interceptors::context::OutputOrError {
160        let (success, status) = (response.status().is_success(), response.status().as_u16());
161        let headers = response.headers();
162        let body = response.body().bytes().expect("body loaded");
163        #[allow(unused_mut)]
164        let mut force_error = false;
165        ::tracing::debug!(request_id = ?::aws_types::request_id::RequestId::request_id(response));
166        let parse_result = if !success && status != 200 || force_error {
167            crate::protocol_serde::shape_enable_organizations_root_credentials_management::de_enable_organizations_root_credentials_management_http_error(status, headers, body)
168        } else {
169            crate::protocol_serde::shape_enable_organizations_root_credentials_management::de_enable_organizations_root_credentials_management_http_response(status, headers, body)
170        };
171        crate::protocol_serde::type_erase_result(parse_result)
172    }
173}
174#[derive(Debug)]
175struct EnableOrganizationsRootCredentialsManagementRequestSerializer;
176impl ::aws_smithy_runtime_api::client::ser_de::SerializeRequest for EnableOrganizationsRootCredentialsManagementRequestSerializer {
177    #[allow(unused_mut, clippy::let_and_return, clippy::needless_borrow, clippy::useless_conversion)]
178    fn serialize_input(
179        &self,
180        input: ::aws_smithy_runtime_api::client::interceptors::context::Input,
181        _cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
182    ) -> ::std::result::Result<::aws_smithy_runtime_api::client::orchestrator::HttpRequest, ::aws_smithy_runtime_api::box_error::BoxError> {
183        let input = input
184            .downcast::<crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementInput>()
185            .expect("correct type");
186        let _header_serialization_settings = _cfg
187            .load::<crate::serialization_settings::HeaderSerializationSettings>()
188            .cloned()
189            .unwrap_or_default();
190        let mut request_builder = {
191            fn uri_base(
192                _input: &crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementInput,
193                output: &mut ::std::string::String,
194            ) -> ::std::result::Result<(), ::aws_smithy_types::error::operation::BuildError> {
195                use ::std::fmt::Write as _;
196                ::std::write!(output, "/").expect("formatting should succeed");
197                ::std::result::Result::Ok(())
198            }
199            #[allow(clippy::unnecessary_wraps)]
200            fn update_http_builder(
201                input: &crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementInput,
202                builder: ::http::request::Builder,
203            ) -> ::std::result::Result<::http::request::Builder, ::aws_smithy_types::error::operation::BuildError> {
204                let mut uri = ::std::string::String::new();
205                uri_base(input, &mut uri)?;
206                ::std::result::Result::Ok(builder.method("POST").uri(uri))
207            }
208            let mut builder = update_http_builder(&input, ::http::request::Builder::new())?;
209            builder = _header_serialization_settings.set_default_header(builder, ::http::header::CONTENT_TYPE, "application/x-www-form-urlencoded");
210            builder
211        };
212        let body = ::aws_smithy_types::body::SdkBody::from(crate::protocol_serde::shape_enable_organizations_root_credentials_management_input::ser_enable_organizations_root_credentials_management_input_input_input(&input)?);
213
214        ::std::result::Result::Ok(request_builder.body(body).expect("valid request").try_into().unwrap())
215    }
216}
217#[derive(Debug)]
218struct EnableOrganizationsRootCredentialsManagementEndpointParamsInterceptor;
219
220impl ::aws_smithy_runtime_api::client::interceptors::Intercept for EnableOrganizationsRootCredentialsManagementEndpointParamsInterceptor {
221    fn name(&self) -> &'static str {
222        "EnableOrganizationsRootCredentialsManagementEndpointParamsInterceptor"
223    }
224
225    fn read_before_execution(
226        &self,
227        context: &::aws_smithy_runtime_api::client::interceptors::context::BeforeSerializationInterceptorContextRef<
228            '_,
229            ::aws_smithy_runtime_api::client::interceptors::context::Input,
230            ::aws_smithy_runtime_api::client::interceptors::context::Output,
231            ::aws_smithy_runtime_api::client::interceptors::context::Error,
232        >,
233        cfg: &mut ::aws_smithy_types::config_bag::ConfigBag,
234    ) -> ::std::result::Result<(), ::aws_smithy_runtime_api::box_error::BoxError> {
235        let _input = context
236            .input()
237            .downcast_ref::<EnableOrganizationsRootCredentialsManagementInput>()
238            .ok_or("failed to downcast to EnableOrganizationsRootCredentialsManagementInput")?;
239
240        let params = crate::config::endpoint::Params::builder()
241            .set_use_dual_stack(cfg.load::<::aws_types::endpoint_config::UseDualStack>().map(|ty| ty.0))
242            .set_use_fips(cfg.load::<::aws_types::endpoint_config::UseFips>().map(|ty| ty.0))
243            .set_endpoint(cfg.load::<::aws_types::endpoint_config::EndpointUrl>().map(|ty| ty.0.clone()))
244            .set_region(cfg.load::<::aws_types::region::Region>().map(|r| r.as_ref().to_owned()))
245            .build()
246            .map_err(|err| {
247                ::aws_smithy_runtime_api::client::interceptors::error::ContextAttachedError::new("endpoint params could not be built", err)
248            })?;
249        cfg.interceptor_state()
250            .store_put(::aws_smithy_runtime_api::client::endpoint::EndpointResolverParams::new(params));
251        ::std::result::Result::Ok(())
252    }
253}
254
255// The get_* functions below are generated from JMESPath expressions in the
256// operationContextParams trait. They target the operation's input shape.
257
258/// Error type for the `EnableOrganizationsRootCredentialsManagementError` operation.
259#[non_exhaustive]
260#[derive(::std::fmt::Debug)]
261pub enum EnableOrganizationsRootCredentialsManagementError {
262    /// <p>The request was rejected because the account making the request is not the management account or delegated administrator account for <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#id_root-user-access-management">centralized root access</a>.</p>
263    AccountNotManagementOrDelegatedAdministratorException(crate::types::error::AccountNotManagementOrDelegatedAdministratorException),
264    /// <p>The request was rejected because the account making the request is not the management account for the organization.</p>
265    CallerIsNotManagementAccountException(crate::types::error::CallerIsNotManagementAccountException),
266    /// <p>The request was rejected because no organization is associated with your account.</p>
267    OrganizationNotFoundException(crate::types::error::OrganizationNotFoundException),
268    /// <p>The request was rejected because your organization does not have All features enabled. For more information, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#feature-set">Available feature sets</a> in the <i>Organizations User Guide</i>.</p>
269    OrganizationNotInAllFeaturesModeException(crate::types::error::OrganizationNotInAllFeaturesModeException),
270    /// <p>The request was rejected because trusted access is not enabled for IAM in Organizations. For details, see IAM and Organizations in the <i>Organizations User Guide</i>.</p>
271    ServiceAccessNotEnabledException(crate::types::error::ServiceAccessNotEnabledException),
272    /// An unexpected error occurred (e.g., invalid JSON returned by the service or an unknown error code).
273    #[deprecated(note = "Matching `Unhandled` directly is not forwards compatible. Instead, match using a \
274    variable wildcard pattern and check `.code()`:
275     \
276    &nbsp;&nbsp;&nbsp;`err if err.code() == Some(\"SpecificExceptionCode\") => { /* handle the error */ }`
277     \
278    See [`ProvideErrorMetadata`](#impl-ProvideErrorMetadata-for-EnableOrganizationsRootCredentialsManagementError) for what information is available for the error.")]
279    Unhandled(crate::error::sealed_unhandled::Unhandled),
280}
281impl EnableOrganizationsRootCredentialsManagementError {
282    /// Creates the `EnableOrganizationsRootCredentialsManagementError::Unhandled` variant from any error type.
283    pub fn unhandled(
284        err: impl ::std::convert::Into<::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>>,
285    ) -> Self {
286        Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
287            source: err.into(),
288            meta: ::std::default::Default::default(),
289        })
290    }
291
292    /// Creates the `EnableOrganizationsRootCredentialsManagementError::Unhandled` variant from an [`ErrorMetadata`](::aws_smithy_types::error::ErrorMetadata).
293    pub fn generic(err: ::aws_smithy_types::error::ErrorMetadata) -> Self {
294        Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
295            source: err.clone().into(),
296            meta: err,
297        })
298    }
299    ///
300    /// Returns error metadata, which includes the error code, message,
301    /// request ID, and potentially additional information.
302    ///
303    pub fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
304        match self {
305            Self::AccountNotManagementOrDelegatedAdministratorException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
306            Self::CallerIsNotManagementAccountException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
307            Self::OrganizationNotFoundException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
308            Self::OrganizationNotInAllFeaturesModeException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
309            Self::ServiceAccessNotEnabledException(e) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(e),
310            Self::Unhandled(e) => &e.meta,
311        }
312    }
313    /// Returns `true` if the error kind is `EnableOrganizationsRootCredentialsManagementError::AccountNotManagementOrDelegatedAdministratorException`.
314    pub fn is_account_not_management_or_delegated_administrator_exception(&self) -> bool {
315        matches!(self, Self::AccountNotManagementOrDelegatedAdministratorException(_))
316    }
317    /// Returns `true` if the error kind is `EnableOrganizationsRootCredentialsManagementError::CallerIsNotManagementAccountException`.
318    pub fn is_caller_is_not_management_account_exception(&self) -> bool {
319        matches!(self, Self::CallerIsNotManagementAccountException(_))
320    }
321    /// Returns `true` if the error kind is `EnableOrganizationsRootCredentialsManagementError::OrganizationNotFoundException`.
322    pub fn is_organization_not_found_exception(&self) -> bool {
323        matches!(self, Self::OrganizationNotFoundException(_))
324    }
325    /// Returns `true` if the error kind is `EnableOrganizationsRootCredentialsManagementError::OrganizationNotInAllFeaturesModeException`.
326    pub fn is_organization_not_in_all_features_mode_exception(&self) -> bool {
327        matches!(self, Self::OrganizationNotInAllFeaturesModeException(_))
328    }
329    /// Returns `true` if the error kind is `EnableOrganizationsRootCredentialsManagementError::ServiceAccessNotEnabledException`.
330    pub fn is_service_access_not_enabled_exception(&self) -> bool {
331        matches!(self, Self::ServiceAccessNotEnabledException(_))
332    }
333}
334impl ::std::error::Error for EnableOrganizationsRootCredentialsManagementError {
335    fn source(&self) -> ::std::option::Option<&(dyn ::std::error::Error + 'static)> {
336        match self {
337            Self::AccountNotManagementOrDelegatedAdministratorException(_inner) => ::std::option::Option::Some(_inner),
338            Self::CallerIsNotManagementAccountException(_inner) => ::std::option::Option::Some(_inner),
339            Self::OrganizationNotFoundException(_inner) => ::std::option::Option::Some(_inner),
340            Self::OrganizationNotInAllFeaturesModeException(_inner) => ::std::option::Option::Some(_inner),
341            Self::ServiceAccessNotEnabledException(_inner) => ::std::option::Option::Some(_inner),
342            Self::Unhandled(_inner) => ::std::option::Option::Some(&*_inner.source),
343        }
344    }
345}
346impl ::std::fmt::Display for EnableOrganizationsRootCredentialsManagementError {
347    fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> ::std::fmt::Result {
348        match self {
349            Self::AccountNotManagementOrDelegatedAdministratorException(_inner) => _inner.fmt(f),
350            Self::CallerIsNotManagementAccountException(_inner) => _inner.fmt(f),
351            Self::OrganizationNotFoundException(_inner) => _inner.fmt(f),
352            Self::OrganizationNotInAllFeaturesModeException(_inner) => _inner.fmt(f),
353            Self::ServiceAccessNotEnabledException(_inner) => _inner.fmt(f),
354            Self::Unhandled(_inner) => {
355                if let ::std::option::Option::Some(code) = ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self) {
356                    write!(f, "unhandled error ({code})")
357                } else {
358                    f.write_str("unhandled error")
359                }
360            }
361        }
362    }
363}
364impl ::aws_smithy_types::retry::ProvideErrorKind for EnableOrganizationsRootCredentialsManagementError {
365    fn code(&self) -> ::std::option::Option<&str> {
366        ::aws_smithy_types::error::metadata::ProvideErrorMetadata::code(self)
367    }
368    fn retryable_error_kind(&self) -> ::std::option::Option<::aws_smithy_types::retry::ErrorKind> {
369        ::std::option::Option::None
370    }
371}
372impl ::aws_smithy_types::error::metadata::ProvideErrorMetadata for EnableOrganizationsRootCredentialsManagementError {
373    fn meta(&self) -> &::aws_smithy_types::error::ErrorMetadata {
374        match self {
375            Self::AccountNotManagementOrDelegatedAdministratorException(_inner) => {
376                ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner)
377            }
378            Self::CallerIsNotManagementAccountException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
379            Self::OrganizationNotFoundException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
380            Self::OrganizationNotInAllFeaturesModeException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
381            Self::ServiceAccessNotEnabledException(_inner) => ::aws_smithy_types::error::metadata::ProvideErrorMetadata::meta(_inner),
382            Self::Unhandled(_inner) => &_inner.meta,
383        }
384    }
385}
386impl ::aws_smithy_runtime_api::client::result::CreateUnhandledError for EnableOrganizationsRootCredentialsManagementError {
387    fn create_unhandled_error(
388        source: ::std::boxed::Box<dyn ::std::error::Error + ::std::marker::Send + ::std::marker::Sync + 'static>,
389        meta: ::std::option::Option<::aws_smithy_types::error::ErrorMetadata>,
390    ) -> Self {
391        Self::Unhandled(crate::error::sealed_unhandled::Unhandled {
392            source,
393            meta: meta.unwrap_or_default(),
394        })
395    }
396}
397impl ::aws_types::request_id::RequestId
398    for crate::operation::enable_organizations_root_credentials_management::EnableOrganizationsRootCredentialsManagementError
399{
400    fn request_id(&self) -> Option<&str> {
401        self.meta().request_id()
402    }
403}
404
405pub use crate::operation::enable_organizations_root_credentials_management::_enable_organizations_root_credentials_management_output::EnableOrganizationsRootCredentialsManagementOutput;
406
407pub use crate::operation::enable_organizations_root_credentials_management::_enable_organizations_root_credentials_management_input::EnableOrganizationsRootCredentialsManagementInput;
408
409mod _enable_organizations_root_credentials_management_input;
410
411mod _enable_organizations_root_credentials_management_output;
412
413/// Builders
414pub mod builders;
aws_sdk_iam/operation/enable_organizations_root_credentials_management.rs

aws_sdk_iam/operation/
enable_organizations_root_credentials_management.rs
