List organization accounts for parent organization unit from member account

Question

Hi,

I have setup organization with multiple organization units. I have a multiple member accounts in OU1 and I would like to list all accounts from OU1 from within the member account which is member of the OU1.

I tried following CLI command:

```bash
aws organizations list-accounts-for-parent --parent-id ou-OU1
```

Of course ou-OU1 is made up and I am using existing ID here.

I tried this inline policy with my user:

```json
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "organizations:ListAccountsForParent",
            "Resource": "*"
        }
    ]
}
```

I have IAM user created in Account1 which is under OU1.

Is this even possible? If so how can I achieve this?

Riku_Kobayashi · Accepted Answer

Hello.

Normally, Account1 is not the root account that manages AWS Organizations, so you cannot check member account information using the "list-accounts-for-parent" command.  
If you configure Account1 as a delegated account in AWS Organizations, you should be able to use "list-accounts-for-parent".  
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_delegated_admin.html

rkmanoj · Answer

Hello,

You can use below command from member account of same organization unit for which you are trying to list all aws accounts.
Just authenticate yourself with member account from same organization and you must be able to do it.
Use below command:
**#aws organizations list-accounts**

**Policy:**
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "organizations:ListAccounts",
            "Resource": "*"
        }
    ]
}

Hope this helps !!

Thanks,
Manoj Kumar

List organization accounts for parent organization unit from member account

Add your answer

Relevant content