Periodic update - 06/10/2022

Author: kinclay

doc_source/.DS_Store

@@ -1,8 +1,8 @@
 # AddPermission<a name="API_AddPermission"></a>
 
-Grants an AWS service or another account permission to use a function\. You can apply the policy at the function level, or specify a qualifier to restrict access to a single version or alias\. If you use a qualifier, the invoker must use the full Amazon Resource Name \(ARN\) of that version or alias to invoke the function\. Note: Lambda does not support adding policies to version $LATEST\.
+Grants an AWS service, account, or organization permission to use a function\. You can apply the policy at the function level, or specify a qualifier to restrict access to a single version or alias\. If you use a qualifier, the invoker must use the full Amazon Resource Name \(ARN\) of that version or alias to invoke the function\. Note: Lambda does not support adding policies to version $LATEST\.
 
-To grant permission to another account, specify the account ID as the `Principal`\. For AWS services, the principal is a domain\-style identifier defined by the service, like `s3.amazonaws.com` or `sns.amazonaws.com`\. For AWS services, you can also specify the ARN of the associated resource as the `SourceArn`\. If you grant permission to a service principal without specifying the source, other accounts could potentially configure resources in their account to invoke your Lambda function\.
+To grant permission to another account, specify the account ID as the `Principal`\. To grant permission to an organization defined in AWS Organizations, specify the organization ID as the `PrincipalOrgID`\. For AWS services, the principal is a domain\-style identifier defined by the service, like `s3.amazonaws.com` or `sns.amazonaws.com`\. For AWS services, you can also specify the ARN of the associated resource as the `SourceArn`\. If you grant permission to a service principal without specifying the source, other accounts could potentially configure resources in their account to invoke your Lambda function\.
 
 This action adds a statement to a resource\-based permissions policy for the function\. For more information about function policies, see [Lambda Function Policies](https://docs.aws.amazon.com/lambda/latest/dg/access-control-resource-based.html)\. 
 
@@ -15,7 +15,9 @@ Content-type: application/json
 {
    "Action": "string",
    "EventSourceToken": "string",
+   "FunctionUrlAuthType": "string",
    "Principal": "string",
+   "PrincipalOrgID": "string",
    "RevisionId": "string",
    "SourceAccount": "string",
    "SourceArn": "string",
@@ -59,6 +61,12 @@ For Alexa Smart Home functions, a token that must be supplied by the invoker\.
 Type: String  
 Length Constraints: Minimum length of 0\. Maximum length of 256\.  
 Pattern: `[a-zA-Z0-9._\-]+`   
+Required: No
+
+ ** [FunctionUrlAuthType](#API_AddPermission_RequestSyntax) **   <a name="SSS-AddPermission-request-FunctionUrlAuthType"></a>
+The type of authentication that your function URL uses\. Set to `AWS_IAM` if you want to restrict access to authenticated `IAM` users only\. Set to `NONE` if you want to bypass IAM authentication to create a public endpoint\. For more information, see [ Security and auth model for Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html)\.  
+Type: String  
+Valid Values:` NONE | AWS_IAM`   
 Required: No
 
  ** [Principal](#API_AddPermission_RequestSyntax) **   <a name="SSS-AddPermission-request-Principal"></a>
@@ -67,6 +75,13 @@ Type: String
 Pattern: `[^\s]+`   
 Required: Yes
 
+ ** [PrincipalOrgID](#API_AddPermission_RequestSyntax) **   <a name="SSS-AddPermission-request-PrincipalOrgID"></a>
+The identifier for your organization in AWS Organizations\. Use this to grant permissions to all the AWS accounts under this organization\.  
+Type: String  
+Length Constraints: Minimum length of 12\. Maximum length of 34\.  
+Pattern: `^o-[a-z0-9]{10,32}$`   
+Required: No
+
  ** [RevisionId](#API_AddPermission_RequestSyntax) **   <a name="SSS-AddPermission-request-RevisionId"></a>
 Only update the policy if the revision ID matches the ID that's specified\. Use this option to avoid modifying a policy that has changed since you last read it\.  
 Type: String