> For the complete documentation index, see [llms.txt](https://docs.forestall.io/fsprotect/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/fsprotect/search-and-reports/aws-entities/aws-organization.md).

# Organization

### AWS Organization Fields

| Field                 | Type    | Possible Operators                                             | Description                                                                                                                                |
| --------------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ |
| Guid                  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of the GUID of the selected Scan and the AWS Organization ID.                                    |
| FSName                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier derived from the Organization ID and master account ID.                                                        |
| Arn                   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Amazon Resource Name that uniquely identifies this AWS Organization.                                                                       |
| OrganizationId        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The unique identifier (ID) of the AWS Organization (e.g., `o-xxxxxxxxxx`).                                                                 |
| MasterAccountId       | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The unique identifier (ID) of the master account of the organization.                                                                      |
| MasterAccountEmail    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The email address associated with the root user of the master account.                                                                     |
| FeatureSet            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The feature set supported by the organization. Can be `ALL` (all features enabled) or `CONSOLIDATED_BILLING` (only billing consolidation). |
| RootMfaEnabled        | BOOLEAN | N/A                                                            | Indicates whether MFA is enabled on the root user of the master account.                                                                   |
| RootAccessKeysPresent | BOOLEAN | N/A                                                            | Indicates whether access keys exist for the root user of the master account. Root access keys are a security risk and should not exist.    |
| ExposurePoint         | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | A numerical value indicating the level of exposure based on attack paths reaching this organization.                                       |
| risk                  | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The risk score of the organization calculated based on vulnerability counts and severities.                                                |