Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Closing a member account in your organization

If you no longer need a member account in your organization, you can close it from the Amazon Organizations console following the instructions in this section. You can only close a member account using the Amazon Organizations console if your organization is in All features mode.

You can also close an Amazon Web Services account directly from the Account page in the Amazon Web Services Management Console after signing in as the root user. For step-by-step instructions, see Close an Amazon Web Services account in the Amazon Account Management Guide.

To close a management account, see Closing a management account in your organization.

How to close a member account

When you sign in to the organization's management account, you can close member accounts that are part of your organization. To do this, complete the following steps.

Amazon Management Console

To close a member account from the Amazon Organizations console

2. On the Amazon Web Services accounts page, find and choose the name of the member account you want to close. You can navigate the OU hierarchy, or look at a flat list of accounts without the OU structure.

3. Choose Close next to the account name at the top of the page. Organizations in Consolidated billing mode won't be able to see the Close button in the console. To close an account in consolidated billing mode, follow the steps in the Standalone account tab from How to close your account in the Amazon Account Management Guide.

4. Select each check box to acknowledge all required account closure statements.

5. Enter the member account ID, and then choose Close account.

Note

Any member account that you close will display a SUSPENDED label next to its account name in the Amazon Organizations console.

To close a member account from the Accounts page

Optionally, you can close an Amazon member account directly from the Accounts page in the Amazon Web Services Management Console. For step-by-step guidance, follow the instructions in Close an Amazon Web Services account in the Amazon Account Management Guide.

Amazon CLI & Amazon SDKs

To close an Amazon Web Services account

You can use one of the following commands to close an Amazon account:

• Amazon CLI: close-account

  $ aws organizations close-account \
      --account-id 123456789012

  This command produces no output when successful.

• Amazon SDKs: CloseAccount

Protecting member accounts from closure

If you want to protect a member account from accidental closure, you can create an IAM policy to specify which accounts are exempt from closure. Any member account protected with these policies can’t be closed. This can't be accomplished with an SCP, because they don't affect principals in the management account.

You can create an IAM policy that denies closing accounts in either of two ways:

Example IAM policies that prevent member account closures

The following code examples show two different methods you can use to restrict member accounts from closing their account.

Prevent member accounts with tags from getting closed

You can attach the following policy to an identity in your management account. This policy prevents principals in the management account from closing any member account that is tagged with the aws:ResourceTag tag global condition key, the AccountType key and the Critical tag value.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PreventCloseAccountForTaggedAccts",
            "Effect": "Deny",
            "Action": "organizations:CloseAccount",
            "Resource": "*",
            "Condition": {
                "StringEquals": {"aws:ResourceTag/AccountType": "Critical"}
            }
        }
    ]
}

Prevent member accounts listed in this policy from getting closed

You can attach the following policy to an identity in your management account. This policy prevents principals in the management account from closing member accounts explicitly specified in the Resource element.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PreventCloseAccount",
            "Effect": "Deny",
            "Action": "organizations:CloseAccount",
            "Resource": [
                "arn:aws:organizations::555555555555:account/o-12345abcdef/123456789012",
                "arn:aws:organizations::555555555555:account/o-12345abcdef/123456789014"
            ]
        }
    ]
}