Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Managing policies in Amazon Organizations

Policies in Amazon Organizations enable you to apply additional types of management to the Amazon Web Services accounts in your organization. You can use policies when all features are enabled in your organization.

The Amazon Organizations console displays the enabled or disabled status for each policy type. On the Organize accounts tab, choose the Root in the left navigation pane. The details pane on the right side of the screen shows all of the available policy types. The list indicates which are enabled and which are disabled in that organization root. If the option to Enable a type is present, that type is currently disabled. If the option to Disable a type is present, that type is currently enabled.

Policy types

Organizations offers policy types in the following two broad categories:

Authorization policies

Authorization policies help you to centrally manage the security of the Amazon Web Services accounts in your organization.

Management policies

Management policies enable you to centrally configure and manage Amazon services and their features.

The following table summarizes some of the characteristics of each policy type. For additional characteristics about these policy types, see Quotas for Amazon Organizations.

Using policies in your organization