> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/aws-entities/aws-organization.md).

# AWS Organization

### AWS Organization Fields

| Field              | Type   | Possible Operators                                             | Description                                                                                                                                |
| ------------------ | ------ | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ |
| Guid               | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of the GUID of the selected Scan and the AWS Organization ID.                                    |
| FSName             | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier derived from the Organization ID and master account ID.                                                        |
| OrganizationId     | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The unique identifier (ID) of the AWS Organization (e.g., `o-xxxxxxxxxx`).                                                                 |
| MasterAccountId    | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The unique identifier (ID) of the master account of the organization.                                                                      |
| MasterAccountEmail | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The email address associated with the root user of the master account.                                                                     |
| FeatureSet         | TEXT   | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The feature set supported by the organization. Can be `ALL` (all features enabled) or `CONSOLIDATED_BILLING` (only billing consolidation). |
| ExposurePoint      | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | A numerical value indicating the level of exposure based on attack paths reaching this organization.                                       |
| risk               | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The risk score of the organization calculated based on vulnerability counts and severities.                                                |