AWS cli documentation change
Summary
Updated AWS CLI version reference and added CloudTrail logging documentation for account removal events
Security assessment
Documented AccountDepartedOrganization CloudTrail events for administrative removals, enhancing security visibility. No security issue resolved.
Diff
diff --git a/cli/latest/reference/organizations/remove-account-from-organization.md b/cli/latest/reference/organizations/remove-account-from-organization.md index dac4fe390..e4f578cbe 100644 --- a//cli/latest/reference/organizations/remove-account-from-organization.md +++ b//cli/latest/reference/organizations/remove-account-from-organization.md @@ -15 +15 @@ - * [AWS CLI 2.34.53 Command Reference](../../index.html) » + * [AWS CLI 2.34.55 Command Reference](../../index.html) » @@ -65,0 +66,2 @@ You can only call this operation from the management account. Member accounts ca +When an account is removed from an organization, Organizations logs a membership event in CloudTrail. The event is an `AccountDepartedOrganization` event with `departedMethod:Removed` and `departedTime` . This event is available only in the management account’s event history. + @@ -260 +262 @@ None - * [AWS CLI 2.34.53 Command Reference](../../index.html) » + * [AWS CLI 2.34.55 Command Reference](../../index.html) »