Error Codes

If an error code starting with APIGW is returned after you call an API, rectify the fault by referring to the instructions provided in Error Codes.

Status Code	Error Code	Error Message	Description	Solution
401	Organizations.1001	this operation can be called only from the management account of an organization.	Failed to verify permissions.	Check whether the API is called by the management account.
401	Organizations.1002	this operation can be called only from the management account of an organization or by a member account that is a delegated administrator for an service.	Failed to verify permissions.	Check whether the API is called by the management account or the account registered as a delegated administrator.
409	Organizations.1003	concurrent modification.	Concurrent modification	Try again later.
400	Organizations.1004	bad request for generate organizations service management token.	An error occurred when generating the administrator token.	Try again later. If the operation fails again, contact the administrator.
400	Organizations.1005	bad request for query cbc em info.	Failed to query the enterprise accounts.	Check whether the account is the master account or a member account of the enterprise.
400	Organizations.1006	bad request for generate assume-role token.	Failed to upgrade the permission.	Try again later. If the operation fails again, contact the administrator.
403	Organizations.1007	Policy doesn't allow '{0}' to be performed.	Fine-grained authentication failed.	Check whether the user has the access permission.
400	Organizations.1008	bad request for checking permission.	Bad request for a fine-grained authentication.	Contact the administrator.
400	Organizations.1009	bad request for impersonate.	Bad request for a role switching.	Contact the administrator.
404	Organizations.1010	not found for http header.	Request header not found.	Check whether all request headers required for calling the API are available.
400	Organizations.1011	bad request for invalid user profile.	Bad request for invalid user profile.	Contact the administrator.
400	Organizations.1012	bad request for invalid context attributes.	Bad request for invalid context attributes.	Contact the administrator.
400	Organizations.1013	bad request for invalid marker.	Invalid marker.	Enter a valid marker value.
400	Organizations.1014	bad request for request proof.	Invalid proof request header.	Ensure that proof request header is valid.
401	Organizations.1015	this operation can be called from any account in the organization.	Failed to verify permissions.	Check whether the API is called by a member account.
400	Organizations.1016	bad request for domain tags.	Failed to obtain tags.	Contact the administrator.
400	Organizations.1017	bad request for get projects.	Failed to obtain information about the project.	Contact the administrator.
401	Organizations.1018	this operation can be called only from the organization''s member account.	Failed to verify permissions.	Check whether the API is called by a member account.
400	Organizations.1019	bad request for query iam domain info.	Failed to obtain the user information.	Contact the administrator.
400	Organizations.1020	ssl check failed.	Failed to verify the certificate.	Contact the administrator.
400	Organizations.1021	bad request for authorization header pattern.	Invalid token request header.	Ensure that authorization request header is valid.
400	Organizations.1022	bad request for query restricted list.	Failed to query the restricted list.	Contact the administrator.
400	Organizations.1023	bad request for query frozen list.	Failed to query the frozen list.	Contact the administrator.
404	Organizations.1100	not found for organization.	Organization not found.	Check whether the Organizations service is enabled for the current account.
409	Organizations.1101	conflict for create organization, this account is already a member of an organization.	A conflict occurred when creating an organization.	Check whether the current account is already a member account of the organization.
400	Organizations.1102	deletes the organization, you must first remove all member accounts and all organizational units and all policies.	Failed to delete an organization.	Check whether all member accounts, OUs, and policies have been removed from the organization.
400	Organizations.1103	can not create organization, only for primary account of EM.	Failed to create an organization (for the enterprise master account).	Check whether the current account is the master enterprise account.
403	Organizations.1104	the current operation has been restricted.	The operation is restricted and access is not allowed.	Check whether the account is restricted.
403	Organizations.1105	the current operation has been frozen.	The operation is frozen and access is not allowed.	Check whether the account is frozen.
404	Organizations.1200	not found for organizational unit.	OU not found.	Check whether the OU is available.
404	Organizations.1201	not found for a root or organizational unit with the ParentId.	Root or OU not found based on a parent OU ID.	Check whether the parent OU ID is available.
400	Organizations.1202	the organizational unit is not empty.	OU not empty	Check whether the OU is empty of accounts and child OUs.
400	Organizations.1203	quota exceeded for an organizational unit tree level.	Maximum levels for an OU exceeded.	Check whether the levels for an OU exceed the maximum allowed.
400	Organizations.1204	quota exceeded for organizational unit.	Maximum number of OUs exceeded.	Check whether the number of OUs exceeds the maximum allowed.
409	Organizations.1205	conflict for organizational unit, an organizational unit names must be unique within a parent.	Duplicate OU names.	Check whether each OU name is unique under its parent OU.
404	Organizations.1300	not found for account.	Account not found.	Check whether the account is valid.
404	Organizations.1301	not found for create account status.	Account creation status not found.	Check whether the input create_account_status_id is correct.
400	Organizations.1302	bad request for wrong source parent id.	Incorrect source_parent_id.	Check whether the input source_parent_id is correct.
400	Organizations.1303	bad request for wrong destination parent id.	Incorrect destination_parent_id.	Check whether the input destination_parent_id is correct.
400	Organizations.1304	the management account of the organization or the organization administrator could not leave organization.	Management account or administrator account not allowed to leave an organization.	Check whether the account that attempts to leave an organization is the management account or administrator account of the organization.
400	Organizations.1305	quota exceeded for account.	Maximum number of accounts in an organization exceeded.	Check whether the number of accounts in the organization exceeds the maximum.
409	Organizations.1306	this account is already a member of an organization. An account can belong to only one organization at a time.	Account already being a member of an organization.	Check whether the account is already a member of the organization.
409	Organizations.1307	this account is already invited.	Account already invited.	Check whether the account has been invited.
400	Organizations.1308	can not invite account, only for sub-account of EM.	Accounts cannot be invited (only for enterprise member accounts).	Check whether the account is a member account of the master account used by the organization administrator.
400	Organizations.1309	This account cannot be invited because it is at a site different from your organization.	The account cannot be invited because it is at a site different from the current organization.	Ensure that the management account and the invited account are at the same site.
400	Organizations.1310	This account cannot be invited because its type is currently not supported.	This account cannot be invited because its type is currently not supported.	Ensure that the account is a member account.
404	Organizations.1400	not found for handshake.	Handshake not found.	Check whether the handshake is correct.
400	Organizations.1401	bad request for wrong handshake status, this operation can only be applied to a pending handshake.	Incorrect handshake state (This operation should be performed only when the handshake is in the pending state).	Check whether the handshake state is the required one.
400	Organizations.1402	quota exceeded for cancelled handshake per day.	Daily handshake cancellations exceeding the maximum.	Check whether the number of daily attempts to cancel handshakes exceeds the maximum.
404	Organizations.1500	not found for delegated administrator.	Delegated administrator not found.	Check whether there are delegated administrators.
409	Organizations.1501	conflict for delegated administrator.	Delegated administrators in conflict.	Check whether there is already a delegated administrator.
404	Organizations.1600	not found for policy.	Policy not found.	Check whether the policy is available.
404	Organizations.1601	not found for policy attachment.	Policy not attached.	Check whether the policy is attached to any principal.
404	Organizations.1602	not found for policy attachment entity.	Principal not available for policy attachment.	Check whether the principal to which the policy will be attached is available.
409	Organizations.1603	conflict for policy attachment.	Conflict for policy attachment.	Check whether the policy has been attached to the principal.
400	Organizations.1604	bad request for existing policy attachment.	No principal attached to the policy.	Check whether the policy is attached to any principal.
400	Organizations.1605	bad request for modify builtin policy.	Modification not allowed for a built-in policy.	Check whether the policy you are modifying is a built-in policy.
400	Organizations.1606	quota exceeded for policy.	Maximum number of policies exceeded.	Check whether the number of attempts to create policies exceeds the maximum.
400	Organizations.1607	quota exceeded for service control policy per entity.	Maximum number of policies attached to a principal exceeded.	Check whether the number of policies attached to the principal exceeds the maximum.
400	Organizations.1608	wrong format for policy content.	Invalid policy format.	Check whether the format of the policy content is correct.
404	Organizations.1609	not found for root.	Root not found.	Check whether the ID of the root is correct.
404	Organizations.1610	not found for root policy type.	Policy type of the root OU not found.	Check whether the input parameter is correct.
400	Organizations.1611	bad request for wrong root policy type status.	Incorrect state of the policy type for the root OU.	Check whether the input parameter is correct.
409	Organizations.1612	conflict for policy, policy names must be unique within an organization.	Duplicate policy names found in the same organization.	Check whether the policy name is unique in the organization.
400	Organizations.1613	bad request for service control policy disabled.	Service control policy disabled.	Check whether the service control policy is disabled.
400	Organizations.1614	the last policy not allow detach.	Detaching the last policy not allowed.	Check whether the policy to be detached is the last one for the principal.
400	Organizations.1615	the policy name not allow all space.	Policy name cannot contain only white spaces	Check whether the policy name is valid.
400	Organizations.1616	policy changes in progress.	Policy being modified.	Try again later.
400	Organizations.1617	scheduler runtime exception.	Failed to enable or disable the policy type.	Try again later.
400	Organizations.1618	not supported policy type.	The policy type is not supported.	Check whether the policy type is correct.
400	Organizations.1619	You provided a string parameter that is longer than allowed.	The parameter length exceeds the allowed limit.	Enter a maximum of 5120 characters.
404	Organizations.1700	not found for tag.	Tag not found.	Check whether the tag is available.
404	Organizations.1701	not found for tag resource.	Resource with the tag not found.	Check whether the resource which the tag is attached is available.
409	Organizations.1702	conflict for tag.	Tag already exists.	Check whether the resource already has the tag.
400	Organizations.1703	quota exceeded for tag.	Tag quota exceeded.	Check whether the number of tags exceeds the maximum allowed on the resource.
400	Organizations.1800	invalid quota value.	Invalid quota value.	Check whether the input quota value is correct.
404	Organizations.1900	not found for trusted service.	Trusted service not found.	Check whether the input parameter is correct.
409	Organizations.1901	conflict for trusted service.	Conflict for trusted service.	Check whether the trusted service already exists.
400	Organizations.1902	delegated administrator is not empty for this service.	The delegated administrator is not specified.	Specify a delegated administrator for the current service.
400	Organizations.2000	bad request for create service linked agency.	Failed to create the service-linked agency.	Check whether the input parameter is correct.
409	Organizations.2002	conflict for service linked agency, already created.	Conflict for the service-linked agency.	Check whether the service-linked agency already exists.
400	Organizations.2003	bad request for delete service linked agency.	Failed to delete the service-linked delegated administrator.	Check whether the input parameter is correct.
404	Organizations.2004	not found for service linked agency.	Service-linked agency not found.	Check whether the service-linked agency is available.
400	Organizations.2006	bad request for authorization header, jwt token is malformed.	JWT token malformed.	Check whether the JSON Web Token (JWT) token is correct.
400	Organizations.2100	exactly one of parent id and child id should be provided.	Either parent OU ID or child OU ID required.	Verify that either parent OU ID or child OU ID is provided.
404	Organizations.2102	not found for service.	Service not found.	Check whether the input service_principal is correct.
400	Organizations.2103	bad request for list service principal.	Failed to obtain the service_principal.	Check whether the input parameter is correct.
404	Organizations.2104	not found for entity.	Entity not found.	Check whether the principal ID is correct. If the principal is newly created, try again later.
400	Organizations.2105	policy type is invalid.	The policy type is invalid.	Check the policy type (tag_policy).
404	Organizations.2106	not found for service principal from iam, must register at IAM.	service_principal not registered with IAM.	Check whether service_principal has been registered with IAM.
400	Organizations.2200	time format or range error.	Incorrect time format or range.	Check whether the input parameter is correct.
400	Organizations.2201	bad request for change customer relation.	Failed to change account association.	Contact the administrator.
400	Organizations.2202	The relation of domain ID has changed too many times.	Master-member account associations have been changed too many times.	Do not frequently change the master-member account associations. (A member account is allowed to change its association with the master account for ten times or less per month.)
403	Organizations.2007	Bad Request: {0}.	Failed to create the service-linked agency.	Check whether the required permission is granted based on the error cause.