get-billing-transfer-program-management-accounts-status
dci get-billing-transfer-program-management-accounts-status
Lightweight polling surface for the onboarding wizard: returns each of the caller's PMAs with only its IAM status/diff and timestamps — no tenant fan-out, no handshake aggregation, no pagination. Distributor-only.
Output
OK
By default dci renders the result as a table. Use --output json to get the full structure described below — see Output formats.
| Field | Type | Description |
|---|---|---|
items | array of object | |
items[].dpmaId | string | |
items[].accountId | string | 12-digit AWS account ID of the program management account. |
items[].iamStatus | string | |
items[].iamDiff | object | Present when iamStatus indicates drift. null when the deployed IAM matches expectations. |
items[].iamDiff.missing | array of string | |
items[].iamDiff.extra | array of string | |
items[].createdAt | string (date-time) | |
items[].updatedAt | string (date-time) | When this account's root record was last updated. null if never updated. |
Raw JSON schema
{
"type": "object",
"additionalProperties": false,
"required": [
"items"
],
"properties": {
"items": {
"type": "array",
"items": {
"type": "object",
"additionalProperties": false,
"required": [
"dpmaId",
"accountId",
"iamStatus",
"createdAt"
],
"properties": {
"dpmaId": {
"type": "string"
},
"accountId": {
"type": "string",
"description": "12-digit AWS account ID of the program management account.",
"example": "123456789012"
},
"iamStatus": {
"type": "string"
},
"iamDiff": {
"allOf": [
{
"type": "object",
"additionalProperties": false,
"properties": {
"missing": {
"type": "array",
"items": {
"type": "string"
}
},
"extra": {
"type": "array",
"items": {
"type": "string"
}
}
}
}
],
"nullable": true,
"description": "Present when `iamStatus` indicates drift. `null` when the deployed IAM matches expectations."
},
"createdAt": {
"type": "string",
"format": "date-time"
},
"updatedAt": {
"type": "string",
"format": "date-time",
"nullable": true,
"description": "When this account's root record was last updated. `null` if never updated."
}
}
}
}
}
}
Errors
On failure, dci prints a single error message — with a hint when one is available — and exits with a typed code your scripts can branch on. See Errors and exit codes for the full contract.
| HTTP status | Exit code | Error code | Meaning |
|---|---|---|---|
| 400 | 30 | VALIDATION_ERROR | The arguments or request body were rejected. Review the command's flags and payload. |
| 401 | 10 | AUTHENTICATION_FAILED | Not signed in, or the API token is invalid. Run dci login or check DCI_API_KEY. |
| 403 | 11 | PERMISSION_DENIED | The DoiT user or the active customer context does not have access. |
| 500 | 40 | API_SERVER_ERROR | The API failed to process the request. Retryable; contact DoiT support if it persists. |
Aliases: getbillingtransferprogrammanagementaccountsstatus