output "id" {
  description = "Organization ID"
  value       = aws_organizations_organization.this.id
}

output "arn" {
  description = "Organization ARN"
  value       = aws_organizations_organization.this.arn
}

output "master_account_id" {
  description = "Management account ID"
  value       = aws_organizations_organization.this.master_account_id
}

output "master_account_arn" {
  description = "Management account ARN"
  value       = aws_organizations_organization.this.master_account_arn
}

output "roots" {
  description = "List of organization roots"
  value       = aws_organizations_organization.this.roots
}

output "non_master_accounts" {
  description = "Non-management accounts in the organization"
  value       = aws_organizations_organization.this.non_master_accounts
}

output "guardduty_organization_admin_account_id" {
  description = "GuardDuty delegated administrator account ID enabled in the provider region, if configured"
  value       = try(aws_guardduty_organization_admin_account.guardduty[0].admin_account_id, null)
}