Error Codes

If an error code starting with APIGW is returned after you call an API, rectify the fault by referring to the instructions provided in Error Codes.

Status Code	Error Code	Error Message	Description	Solution
401	Organizations.1001	This operation can be called only from the management account of an organization.	Failed to verify permissions.	Check whether the API is called by the management account.
401	Organizations.1002	This operation can be called only from the management account of an organization or by a member account that is a delegated administrator for a service.	Failed to verify permissions.	Check whether the API is called by the management account or the account registered as a delegated administrator.
409	Organizations.1003	Concurrent modification.	Concurrent modification.	Try again later.
400	Organizations.1004	Bad request for generating Organizations service management token.	An error occurred when generating the administrator token.	Try again later. If the operation fails again, contact the administrator.
400	Organizations.1005	Bad request for querying cbc em info.	Failed to query the enterprise accounts.	Check whether the account is the master account or a member account of the enterprise.
400	Organizations.1006	Bad request for generating assume-role token.	Failed to upgrade the permission.	Try again later. If the operation fails again, contact the administrator.
403	Organizations.1007	Policy does not allow '{0}' to be performed.	Fine-grained authentication failed.	Check whether the user has the access permission.
400	Organizations.1008	Bad request for checking permission.	Bad request for a fine-grained authentication.	Contact the administrator.
400	Organizations.1009	Bad request for impersonating.	Bad request for a role switching.	Contact the administrator.
404	Organizations.1010	Http header not found.	Request header not found.	Check whether all request headers required for calling the API are available.
400	Organizations.1011	Bad request for invalid user profile.	Bad request for invalid user profile.	Contact the administrator.
400	Organizations.1012	Bad request for invalid context attributes.	Bad request for invalid context attributes.	Contact the administrator.
400	Organizations.1013	Bad request for invalid marker.	Invalid marker.	Enter a valid marker value.
400	Organizations.1014	Bad request for request proof.	Invalid proof request header.	Ensure that proof request header is valid.
401	Organizations.1015	This operation can be called from any account in the organization.	Failed to verify permissions.	Check whether the API is called by a member account.
400	Organizations.1016	Bad request for domain tags.	Failed to obtain tags.	Contact the administrator.
400	Organizations.1017	Bad request for getting projects.	Failed to obtain information about the project.	Contact the administrator.
401	Organizations.1018	This operation can be called only from the organization's member account.	Failed to verify permissions.	Check whether the API is called by a member account.
400	Organizations.1019	Bad request for querying IAM domain info.	Failed to obtain the user information.	Contact the administrator.
400	Organizations.1020	SSL check failed.	Failed to verify the certificate.	Contact the administrator.
400	Organizations.1021	Bad request for authorization header pattern.	Invalid token request header.	Ensure that authorization request header is valid.
400	Organizations.1022	Bad request for querying the restricted list.	Failed to query the restricted list.	Contact the administrator.
400	Organizations.1023	Bad request for querying the frozen list.	Failed to query the frozen list.	Contact the administrator.
404	Organizations.1100	Organization not found.	Organization not found.	Check whether the Organizations service is enabled for the current account.
409	Organizations.1101	Conflict for creating an organization. This account is already a member of an organization.	A conflict occurred when creating an organization.	Check whether the current account is already a member account of the organization.
400	Organizations.1102	To delete the organization, you must first remove all member accounts, all organizational units, and all policies.	Failed to delete an organization.	Check whether all member accounts, OUs, and policies have been removed from the organization.
400	Organizations.1103	Failed to create an organization. Only for the enterprise master account.	Failed to create an organization (for the enterprise master account).	Check whether the current account is the master enterprise account.
403	Organizations.1104	The current operation has been restricted.	The operation is restricted and access is not allowed.	Check whether the account is restricted.
403	Organizations.1105	The current operation has been frozen.	The operation is frozen and access is not allowed.	Check whether the account is frozen.
404	Organizations.1200	Organizational unit not found.	OU not found.	Check whether the OU is available.
404	Organizations.1201	A root or organizational unit with the ParentId not found.	Root or OU not found based on a parent OU ID.	Check whether the parent OU ID is available.
400	Organizations.1202	The organizational unit is not empty.	OU not empty	Check whether the OU is empty of accounts and child OUs.
400	Organizations.1203	Quota exceeded for an organizational unit tree level.	Maximum levels for an OU exceeded.	Check whether the levels for an OU exceed the maximum allowed.
400	Organizations.1204	Quota exceeded for organizational unit.	Maximum number of OUs exceeded.	Check whether the number of OUs exceeds the maximum allowed.
409	Organizations.1205	Conflict for organizational unit. An organizational unit name must be unique within a parent organizational unit.	Duplicate OU names.	Check whether each OU name is unique under its parent OU.
404	Organizations.1300	Account not found.	Account not found.	Check whether the account is valid.
404	Organizations.1301	Account creation status not found.	Account creation status not found.	Check whether the input create_account_status_id is correct.
400	Organizations.1302	Bad request for wrong source parent id.	Incorrect source_parent_id.	Check whether the input source_parent_id is correct.
400	Organizations.1303	Bad request for wrong destination parent id.	Incorrect destination_parent_id.	Check whether the input destination_parent_id is correct.
400	Organizations.1304	The management account of the organization or the organization administrator cannot leave an organization.	Management account or administrator account not allowed to leave an organization.	Check whether the account that attempts to leave an organization is the management account or administrator account of the organization.
400	Organizations.1305	Quota exceeded for account.	Maximum number of accounts in an organization exceeded.	Check whether the number of accounts in the organization exceeds the maximum.
409	Organizations.1306	This account is already a member of an organization. An account can belong to only one organization at a time.	Account already being a member of an organization.	Check whether the account is already a member of the organization.
409	Organizations.1307	This account is already invited.	Account already invited.	Check whether the account has been invited.
400	Organizations.1308	Accounts cannot be invited (only for enterprise member accounts).	Accounts cannot be invited (only for enterprise member accounts).	Check whether the account is a member account of the master account used by the organization administrator.
400	Organizations.1309	This account cannot be invited because it is at a site different from your organization.	The account cannot be invited because it is at a site different from the current organization.	Ensure that the management account and the invited account are at the same site.
400	Organizations.1310	This account cannot be invited because its type is currently not supported.	This account cannot be invited because its type is currently not supported.	Ensure that the account is a member account.
404	Organizations.1400	Handshake not found.	Handshake not found.	Check whether the handshake is correct.
400	Organizations.1401	Bad request for wrong handshake status. This operation can only be performed to a pending handshake.	Incorrect handshake state (This operation should be performed only when the handshake is in the pending state).	Check whether the handshake state is the required one.
400	Organizations.1402	Quota exceeded for cancelled handshake per day.	Daily handshake cancellations exceeding the maximum.	Check whether the number of daily attempts to cancel handshakes exceeds the maximum.
404	Organizations.1500	Delegated administrator not found.	Delegated administrator not found.	Check whether there is a delegated administrator.
409	Organizations.1501	Conflict for delegated administrator.	Delegated administrators in conflict.	Check whether there is already a delegated administrator.
404	Organizations.1600	Policy not found.	Policy not found.	Check whether the policy is available.
404	Organizations.1601	Policy attachment not found.	Policy not attached.	Check whether the policy is attached to any principal.
404	Organizations.1602	Policy attachment entity not found.	Principal not available for policy attachment.	Check whether the principal to which the policy will be attached is available.
409	Organizations.1603	Conflict for policy attachment.	Conflict for policy attachment.	Check whether the policy has been attached to the principal.
400	Organizations.1604	Bad request for existing policy attachment.	No principal attached to the policy.	Check whether the policy is attached to any principal.
400	Organizations.1605	Bad request for modifying a built-in policy.	Modification not allowed for a built-in policy.	Check whether the policy you are modifying is a built-in policy.
400	Organizations.1606	Policy quota exceeded.	Maximum number of policies exceeded.	Check whether the number of attempts to create policies exceeds the maximum.
400	Organizations.1607	Quota exceeded for service control policy per entity.	Maximum number of policies attached to a principal exceeded.	Check whether the number of policies attached to the principal exceeds the maximum.
400	Organizations.1608	Wrong format for policy content.	Invalid policy format.	Check whether the format of the policy content is correct.
404	Organizations.1609	Root not found.	Root not found.	Check whether the ID of the root is correct.
404	Organizations.1610	Root policy type not found.	Policy type of the root OU not found.	Check whether the input parameter is correct.
400	Organizations.1611	Bad request for wrong root policy type status.	Incorrect state of the policy type for the root OU.	Check whether the input parameter is correct.
409	Organizations.1612	Policy conflict. The policy name must be unique within an organization.	Duplicate policy names found in the same organization.	Check whether the policy name is unique in the organization.
400	Organizations.1613	Bad request for service control policy disabled.	Service control policy disabled.	Check whether the service control policy is disabled.
400	Organizations.1614	Detaching the last policy not allowed.	Detaching the last policy not allowed.	Check whether the policy to be detached is the last one for the principal.
400	Organizations.1615	The policy name does not allow all space.	Policy name cannot contain only white spaces	Check whether the policy name is valid.
400	Organizations.1616	Policy changes in progress.	Policy being modified.	Try again later.
400	Organizations.1617	Scheduler runtime exception.	Failed to enable or disable the policy type.	Try again later.
400	Organizations.1618	Policy type not supported.	The policy type is not supported.	Check whether the policy type is correct.
400	Organizations.1619	You provided a string parameter that is longer than allowed.	The parameter length exceeds the allowed limit.	Enter a maximum of 5120 characters.
404	Organizations.1700	Tag not found.	Tag not found.	Check whether the tag is available.
404	Organizations.1701	Resource with the tag not found.	Resource with the tag not found.	Check whether the resource which the tag is attached is available.
409	Organizations.1702	Tag conflict.	Tag already exists.	Check whether the resource already has the tag.
400	Organizations.1703	Tag quota exceeded.	Tag quota exceeded.	Check whether the number of tags exceeds the maximum allowed on the resource.
400	Organizations.1800	Invalid quota value.	Invalid quota value.	Check whether the input quota value is correct.
404	Organizations.1900	Trusted service not found.	Trusted service not found.	Check whether the input parameter is correct.
409	Organizations.1901	Conflict for trusted service.	Conflict for trusted service.	Check whether the trusted service already exists.
400	Organizations.1902	Delegated administrator is not empty for this service.	The delegated administrator is not specified.	Specify a delegated administrator for the current service.
400	Organizations.2000	Bad request for creating the service-linked agency.	Failed to create the service-linked agency.	Check whether the input parameter is correct.
400	Organizations.2001	Bad request for missing app_name.	App name missing.	Check whether the app name is missing.
409	Organizations.2002	Conflict for the service-linked agency. It is already created.	Conflict for the service-linked agency.	Check whether the service-linked agency already exists.
400	Organizations.2003	Bad request for deleting the service-linked agency.	Failed to delete the service-linked delegated administrator.	Check whether the input parameter is correct.
404	Organizations.2004	Service-linked agency not found.	Service-linked agency not found.	Check whether there is a service-linked agency.
404	Organizations.2005	Service request for service_principal not found.	App name not found.	Check whether the app name is correct.
400	Organizations.2006	Bad request for authorization header. JWT token is malformed.	JWT token malformed.	Check whether the JSON Web Token (JWT) token is correct.
400	Organizations.2100	Either parent OU ID or child OU ID should be provided.	Either parent OU ID or child OU ID required.	Verify that either parent OU ID or child OU ID is provided.
409	Organizations.2101	Service conflict. The names of service_principal and app_name must be unique.	Conflict for service_principal or app_name.	Check whether service_principal or app_name already exists.
404	Organizations.2102	Service not found.	Service not found.	Check whether the input service_principal is correct.
400	Organizations.2103	Bad request for listing the service principal.	Failed to obtain the service_principal.	Check whether the input parameter is correct.
404	Organizations.2104	Entity not found.	Entity not found.	Check whether the principal ID is correct. If the principal is newly created, try again later.
400	Organizations.2105	Policy type is invalid.	The policy type is invalid.	Check the policy type (tag_policy).
404	Organizations.2106	Service principal from IAM not found. It must be registered with IAM.	service_principal not registered with IAM.	Check whether service_principal has been registered with IAM.
400	Organizations.2200	Time format or range error.	Incorrect time format or range.	Check whether the input parameter is correct.
400	Organizations.2201	Bad request for changing customer relation.	Failed to change account association.	Contact the administrator.
400	Organizations.2202	The relation of domain ID has been changed too many times.	Master-member account associations have been changed too many times.	Do not frequently change the master-member account associations. (A member account is allowed to change its association with the master account for ten times or less per month.)
403	Organizations.2007	Bad Request: {0}.	Failed to create the service-linked agency.	Check whether the required permission is granted based on the error cause.