aws-sdk-auditmanager 1.22.0 → 1.25.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 77cdb0fb314c81b34daa050c6f9fcf3bd133344441782f20796590dc1f0a4970
4
- data.tar.gz: 54ab6346c4c761e570e2e411b4e0d3cded0c2d6ad54f5c0dca60b93c16c2f5d1
3
+ metadata.gz: a0735abba5c1d862b6b91cf899c4bee8f5db2c1422c155cbf2f0cf2a835deb2e
4
+ data.tar.gz: 28b425c78598800e366c9e92e46b91723cb83ddfe7c8fdd99e8c6807942a83b8
5
5
  SHA512:
6
- metadata.gz: 9c9c8d880450ea25c9c271a5d5875588a3d1d96a41e047d1303bf5c8752a3d6a8674fa8a1beebb7090acafde34615fe05419ebb9d256f7a911d23b0a07b92bd5
7
- data.tar.gz: 38bebb76e9b53efbdb4454a7aab5e28356313192d97ef22eb59903cb240c2ffbcef7419251c4358ca8d4ac1d512d5d9d8f6f7fbea2f7da413bfad60a88fd261b
6
+ metadata.gz: fefb30248da4ebca805dd6cbc451137f9605ff6de53eb6b4fedfc5c2b47cd37e0b6e83f8611dcdd308c29c5843e51ccf374b3f2de643031b54171464e69455ae
7
+ data.tar.gz: cc75e8e7786910896dd6fdb487c46bab32559fd7b4418742d7b4ba2463503371d1c3e58993d5b736af4acb5f46902ca03bda9afff495e1c137b746dfa2615170
data/CHANGELOG.md CHANGED
@@ -1,6 +1,21 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.25.0 (2022-06-07)
5
+ ------------------
6
+
7
+ * Feature - This release introduces 2 updates to the Audit Manager API. The roleType and roleArn attributes are now required when you use the CreateAssessment or UpdateAssessment operation. We also added a throttling exception to the RegisterAccount API operation.
8
+
9
+ 1.24.0 (2022-04-28)
10
+ ------------------
11
+
12
+ * Feature - This release adds documentation updates for Audit Manager. We provided examples of how to use the Custom_ prefix for the keywordValue attribute. We also provided more details about the DeleteAssessmentReport operation.
13
+
14
+ 1.23.0 (2022-03-31)
15
+ ------------------
16
+
17
+ * Feature - This release adds documentation updates for Audit Manager. The updates provide data deletion guidance when a customer deregisters Audit Manager or deregisters a delegated administrator.
18
+
4
19
  1.22.0 (2022-03-23)
5
20
  ------------------
6
21
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.22.0
1
+ 1.25.0
@@ -660,8 +660,8 @@ module Aws::AuditManager
660
660
  # },
661
661
  # roles: [ # required
662
662
  # {
663
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
664
- # role_arn: "IamArn",
663
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
664
+ # role_arn: "IamArn", # required
665
665
  # },
666
666
  # ],
667
667
  # framework_id: "UUID", # required
@@ -1063,7 +1063,35 @@ module Aws::AuditManager
1063
1063
  req.send_request(options)
1064
1064
  end
1065
1065
 
1066
- # Deletes an assessment report from an assessment in Audit Manager.
1066
+ # Deletes an assessment report in Audit Manager.
1067
+ #
1068
+ # When you run the `DeleteAssessmentReport` operation, Audit Manager
1069
+ # attempts to delete the following data:
1070
+ #
1071
+ # 1. The specified assessment report that’s stored in your S3 bucket
1072
+ #
1073
+ # 2. The associated metadata that’s stored in Audit Manager
1074
+ #
1075
+ # If Audit Manager can’t access the assessment report in your S3 bucket,
1076
+ # the report isn’t deleted. In this event, the `DeleteAssessmentReport`
1077
+ # operation doesn’t fail. Instead, it proceeds to delete the associated
1078
+ # metadata only. You must then delete the assessment report from the S3
1079
+ # bucket yourself.
1080
+ #
1081
+ # This scenario happens when Audit Manager receives a `403 (Forbidden)`
1082
+ # or `404 (Not Found)` error from Amazon S3. To avoid this, make sure
1083
+ # that your S3 bucket is available, and that you configured the correct
1084
+ # permissions for Audit Manager to delete resources in your S3 bucket.
1085
+ # For an example permissions policy that you can use, see [Assessment
1086
+ # report destination permissions][1] in the *Audit Manager User Guide*.
1087
+ # For information about the issues that could cause a `403 (Forbidden)`
1088
+ # or `404 (Not Found`) error from Amazon S3, see [List of Error
1089
+ # Codes][2] in the *Amazon Simple Storage Service API Reference*.
1090
+ #
1091
+ #
1092
+ #
1093
+ # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/security_iam_id-based-policy-examples.html#full-administrator-access-assessment-report-destination
1094
+ # [2]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#ErrorCodeList
1067
1095
  #
1068
1096
  # @option params [required, String] :assessment_id
1069
1097
  # The unique identifier for the assessment.
@@ -1113,6 +1141,48 @@ module Aws::AuditManager
1113
1141
 
1114
1142
  # Deregisters an account in Audit Manager.
1115
1143
  #
1144
+ # <note markdown="1"> When you deregister your account from Audit Manager, your data isn’t
1145
+ # deleted. If you want to delete your resource data, you must perform
1146
+ # that task separately before you deregister your account. Either, you
1147
+ # can do this in the Audit Manager console. Or, you can use one of the
1148
+ # delete API operations that are provided by Audit Manager.
1149
+ #
1150
+ # To delete your Audit Manager resource data, see the following
1151
+ # instructions:
1152
+ #
1153
+ # * [DeleteAssessment][1] (see also: [Deleting an assessment][2] in the
1154
+ # *Audit Manager User Guide*)
1155
+ #
1156
+ # * [DeleteAssessmentFramework][3] (see also: [Deleting a custom
1157
+ # framework][4] in the *Audit Manager User Guide*)
1158
+ #
1159
+ # * [DeleteAssessmentFrameworkShare][5] (see also: [Deleting a share
1160
+ # request][6] in the *Audit Manager User Guide*)
1161
+ #
1162
+ # * [DeleteAssessmentReport][7] (see also: [Deleting an assessment
1163
+ # report][8] in the *Audit Manager User Guide*)
1164
+ #
1165
+ # * [DeleteControl][9] (see also: [Deleting a custom control][10] in the
1166
+ # *Audit Manager User Guide*)
1167
+ #
1168
+ # At this time, Audit Manager doesn't provide an option to delete
1169
+ # evidence. All available delete operations are listed above.
1170
+ #
1171
+ # </note>
1172
+ #
1173
+ #
1174
+ #
1175
+ # [1]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessment.html
1176
+ # [2]: https://docs.aws.amazon.com/audit-manager/latest/userguide/delete-assessment.html
1177
+ # [3]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentFramework.html
1178
+ # [4]: https://docs.aws.amazon.com/audit-manager/latest/userguide/delete-custom-framework.html
1179
+ # [5]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentFrameworkShare.html
1180
+ # [6]: https://docs.aws.amazon.com/audit-manager/latest/userguide/deleting-shared-framework-requests.html
1181
+ # [7]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentReport.html
1182
+ # [8]: https://docs.aws.amazon.com/audit-manager/latest/userguide/generate-assessment-report.html#delete-assessment-report-steps
1183
+ # [9]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteControl.html
1184
+ # [10]: https://docs.aws.amazon.com/audit-manager/latest/userguide/delete-controls.html
1185
+ #
1116
1186
  # @return [Types::DeregisterAccountResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1117
1187
  #
1118
1188
  # * {Types::DeregisterAccountResponse#status #status} => String
@@ -1130,16 +1200,59 @@ module Aws::AuditManager
1130
1200
  req.send_request(options)
1131
1201
  end
1132
1202
 
1133
- # Removes the specified member Amazon Web Services account as a
1134
- # delegated administrator for Audit Manager.
1203
+ # Removes the specified Amazon Web Services account as a delegated
1204
+ # administrator for Audit Manager.
1135
1205
  #
1136
1206
  # When you remove a delegated administrator from your Audit Manager
1137
1207
  # settings, you continue to have access to the evidence that you
1138
1208
  # previously collected under that account. This is also the case when
1139
- # you deregister a delegated administrator from Audit Manager. However,
1209
+ # you deregister a delegated administrator from Organizations. However,
1140
1210
  # Audit Manager will stop collecting and attaching evidence to that
1141
1211
  # delegated administrator account moving forward.
1142
1212
  #
1213
+ # <note markdown="1"> When you deregister a delegated administrator account for Audit
1214
+ # Manager, the data for that account isn’t deleted. If you want to
1215
+ # delete resource data for a delegated administrator account, you must
1216
+ # perform that task separately before you deregister the account.
1217
+ # Either, you can do this in the Audit Manager console. Or, you can use
1218
+ # one of the delete API operations that are provided by Audit Manager.
1219
+ #
1220
+ # To delete your Audit Manager resource data, see the following
1221
+ # instructions:
1222
+ #
1223
+ # * [DeleteAssessment][1] (see also: [Deleting an assessment][2] in the
1224
+ # *Audit Manager User Guide*)
1225
+ #
1226
+ # * [DeleteAssessmentFramework][3] (see also: [Deleting a custom
1227
+ # framework][4] in the *Audit Manager User Guide*)
1228
+ #
1229
+ # * [DeleteAssessmentFrameworkShare][5] (see also: [Deleting a share
1230
+ # request][6] in the *Audit Manager User Guide*)
1231
+ #
1232
+ # * [DeleteAssessmentReport][7] (see also: [Deleting an assessment
1233
+ # report][8] in the *Audit Manager User Guide*)
1234
+ #
1235
+ # * [DeleteControl][9] (see also: [Deleting a custom control][10] in the
1236
+ # *Audit Manager User Guide*)
1237
+ #
1238
+ # At this time, Audit Manager doesn't provide an option to delete
1239
+ # evidence. All available delete operations are listed above.
1240
+ #
1241
+ # </note>
1242
+ #
1243
+ #
1244
+ #
1245
+ # [1]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessment.html
1246
+ # [2]: https://docs.aws.amazon.com/audit-manager/latest/userguide/delete-assessment.html
1247
+ # [3]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentFramework.html
1248
+ # [4]: https://docs.aws.amazon.com/audit-manager/latest/userguide/delete-custom-framework.html
1249
+ # [5]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentFrameworkShare.html
1250
+ # [6]: https://docs.aws.amazon.com/audit-manager/latest/userguide/deleting-shared-framework-requests.html
1251
+ # [7]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteAssessmentReport.html
1252
+ # [8]: https://docs.aws.amazon.com/audit-manager/latest/userguide/generate-assessment-report.html#delete-assessment-report-steps
1253
+ # [9]: https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_DeleteControl.html
1254
+ # [10]: https://docs.aws.amazon.com/audit-manager/latest/userguide/delete-controls.html
1255
+ #
1143
1256
  # @option params [String] :admin_account_id
1144
1257
  # The identifier for the administrator account.
1145
1258
  #
@@ -1954,8 +2067,8 @@ module Aws::AuditManager
1954
2067
  req.send_request(options)
1955
2068
  end
1956
2069
 
1957
- # Returns a list of the in-scope Amazon Web Services services for the
1958
- # specified assessment.
2070
+ # Returns a list of the in-scope Amazon Web Services for the specified
2071
+ # assessment.
1959
2072
  #
1960
2073
  # @return [Types::GetServicesInScopeResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1961
2074
  #
@@ -2691,6 +2804,32 @@ module Aws::AuditManager
2691
2804
  # custom framework is available. Recipients have 120 days to accept or
2692
2805
  # decline the request. If no action is taken, the share request expires.
2693
2806
  #
2807
+ # When you create a share request, Audit Manager stores a snapshot of
2808
+ # your custom framework in the US East (N. Virginia) Amazon Web Services
2809
+ # Region. Audit Manager also stores a backup of the same snapshot in the
2810
+ # US West (Oregon) Amazon Web Services Region.
2811
+ #
2812
+ # Audit Manager deletes the snapshot and the backup snapshot when one of
2813
+ # the following events occurs:
2814
+ #
2815
+ # * The sender revokes the share request.
2816
+ #
2817
+ # * The recipient declines the share request.
2818
+ #
2819
+ # * The recipient encounters an error and doesn't successfully accept
2820
+ # the share request.
2821
+ #
2822
+ # * The share request expires before the recipient responds to the
2823
+ # request.
2824
+ #
2825
+ # When a sender [resends a share request][1], the snapshot is replaced
2826
+ # with an updated version that corresponds with the latest version of
2827
+ # the custom framework.
2828
+ #
2829
+ # When a recipient accepts a share request, the snapshot is replicated
2830
+ # into their Amazon Web Services account under the Amazon Web Services
2831
+ # Region that was specified in the share request.
2832
+ #
2694
2833
  # When you invoke the `StartAssessmentFrameworkShare` API, you are about
2695
2834
  # to share a custom framework with another Amazon Web Services account.
2696
2835
  # You may not share a custom framework that is derived from a standard
@@ -2698,11 +2837,12 @@ module Aws::AuditManager
2698
2837
  # sharing by Amazon Web Services, unless you have obtained permission to
2699
2838
  # do so from the owner of the standard framework. To learn more about
2700
2839
  # which standard frameworks are eligible for sharing, see [Framework
2701
- # sharing eligibility][1] in the *Audit Manager User Guide*.
2840
+ # sharing eligibility][2] in the *Audit Manager User Guide*.
2702
2841
  #
2703
2842
  #
2704
2843
  #
2705
- # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/share-custom-framework-concepts-and-terminology.html#eligibility
2844
+ # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/framework-sharing.html#framework-sharing-resend
2845
+ # [2]: https://docs.aws.amazon.com/audit-manager/latest/userguide/share-custom-framework-concepts-and-terminology.html#eligibility
2706
2846
  #
2707
2847
  # @option params [required, String] :framework_id
2708
2848
  # The unique identifier for the custom framework to be shared.
@@ -2861,8 +3001,8 @@ module Aws::AuditManager
2861
3001
  # },
2862
3002
  # roles: [
2863
3003
  # {
2864
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
2865
- # role_arn: "IamArn",
3004
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
3005
+ # role_arn: "IamArn", # required
2866
3006
  # },
2867
3007
  # ],
2868
3008
  # })
@@ -3460,8 +3600,8 @@ module Aws::AuditManager
3460
3600
  # },
3461
3601
  # default_process_owners: [
3462
3602
  # {
3463
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
3464
- # role_arn: "IamArn",
3603
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
3604
+ # role_arn: "IamArn", # required
3465
3605
  # },
3466
3606
  # ],
3467
3607
  # kms_key: "KmsKey",
@@ -3538,7 +3678,7 @@ module Aws::AuditManager
3538
3678
  params: params,
3539
3679
  config: config)
3540
3680
  context[:gem_name] = 'aws-sdk-auditmanager'
3541
- context[:gem_version] = '1.22.0'
3681
+ context[:gem_version] = '1.25.0'
3542
3682
  Seahorse::Client::Request.new(handlers, context)
3543
3683
  end
3544
3684
 
@@ -281,6 +281,7 @@ module Aws::AuditManager
281
281
  TagResourceResponse = Shapes::StructureShape.new(name: 'TagResourceResponse')
282
282
  TagValue = Shapes::StringShape.new(name: 'TagValue')
283
283
  TestingInformation = Shapes::StringShape.new(name: 'TestingInformation')
284
+ ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
284
285
  Timestamp = Shapes::TimestampShape.new(name: 'Timestamp')
285
286
  TimestampUUID = Shapes::StringShape.new(name: 'TimestampUUID')
286
287
  Token = Shapes::StringShape.new(name: 'Token')
@@ -1135,8 +1136,8 @@ module Aws::AuditManager
1135
1136
 
1136
1137
  Resources.member = Shapes::ShapeRef.new(shape: Resource)
1137
1138
 
1138
- Role.add_member(:role_type, Shapes::ShapeRef.new(shape: RoleType, location_name: "roleType"))
1139
- Role.add_member(:role_arn, Shapes::ShapeRef.new(shape: IamArn, location_name: "roleArn"))
1139
+ Role.add_member(:role_type, Shapes::ShapeRef.new(shape: RoleType, required: true, location_name: "roleType"))
1140
+ Role.add_member(:role_arn, Shapes::ShapeRef.new(shape: IamArn, required: true, location_name: "roleArn"))
1140
1141
  Role.struct_class = Types::Role
1141
1142
 
1142
1143
  Roles.member = Shapes::ShapeRef.new(shape: Role)
@@ -1184,6 +1185,9 @@ module Aws::AuditManager
1184
1185
 
1185
1186
  TagResourceResponse.struct_class = Types::TagResourceResponse
1186
1187
 
1188
+ ThrottlingException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
1189
+ ThrottlingException.struct_class = Types::ThrottlingException
1190
+
1187
1191
  URL.add_member(:hyperlink_name, Shapes::ShapeRef.new(shape: HyperlinkName, location_name: "hyperlinkName"))
1188
1192
  URL.add_member(:link, Shapes::ShapeRef.new(shape: UrlLink, location_name: "link"))
1189
1193
  URL.struct_class = Types::URL
@@ -1971,6 +1975,7 @@ module Aws::AuditManager
1971
1975
  o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
1972
1976
  o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
1973
1977
  o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
1978
+ o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
1974
1979
  end)
1975
1980
 
1976
1981
  api.add_operation(:register_organization_admin_account, Seahorse::Model::Operation.new.tap do |o|
@@ -30,6 +30,7 @@ module Aws::AuditManager
30
30
  # * {AccessDeniedException}
31
31
  # * {InternalServerException}
32
32
  # * {ResourceNotFoundException}
33
+ # * {ThrottlingException}
33
34
  # * {ValidationException}
34
35
  #
35
36
  # Additionally, error classes are dynamically generated for service errors based on the error code
@@ -93,6 +94,21 @@ module Aws::AuditManager
93
94
  end
94
95
  end
95
96
 
97
+ class ThrottlingException < ServiceError
98
+
99
+ # @param [Seahorse::Client::RequestContext] context
100
+ # @param [String] message
101
+ # @param [Aws::AuditManager::Types::ThrottlingException] data
102
+ def initialize(context, message, data = Aws::EmptyStructure.new)
103
+ super(context, message, data)
104
+ end
105
+
106
+ # @return [String]
107
+ def message
108
+ @message || @data[:message]
109
+ end
110
+ end
111
+
96
112
  class ValidationException < ServiceError
97
113
 
98
114
  # @param [Seahorse::Client::RequestContext] context
@@ -278,8 +278,7 @@ module Aws::AuditManager
278
278
  # @!attribute [rw] evidence_by_type_configuration_data_count
279
279
  # The number of evidence that falls under the configuration data
280
280
  # category. This evidence is collected from configuration snapshots of
281
- # other Amazon Web Services services such as Amazon EC2, Amazon S3, or
282
- # IAM.
281
+ # other Amazon Web Services such as Amazon EC2, Amazon S3, or IAM.
283
282
  # @return [Integer]
284
283
  #
285
284
  # @!attribute [rw] evidence_by_type_manual_count
@@ -1747,8 +1746,8 @@ module Aws::AuditManager
1747
1746
  # },
1748
1747
  # roles: [ # required
1749
1748
  # {
1750
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
1751
- # role_arn: "IamArn",
1749
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
1750
+ # role_arn: "IamArn", # required
1752
1751
  # },
1753
1752
  # ],
1754
1753
  # framework_id: "UUID", # required
@@ -4174,8 +4173,8 @@ module Aws::AuditManager
4174
4173
  # data as a hash:
4175
4174
  #
4176
4175
  # {
4177
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
4178
- # role_arn: "IamArn",
4176
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
4177
+ # role_arn: "IamArn", # required
4179
4178
  # }
4180
4179
  #
4181
4180
  # @!attribute [rw] role_type
@@ -4321,13 +4320,61 @@ module Aws::AuditManager
4321
4320
  # }
4322
4321
  #
4323
4322
  # @!attribute [rw] keyword_input_type
4324
- # The method of input for the keyword.
4323
+ # The input method for the keyword.
4325
4324
  # @return [String]
4326
4325
  #
4327
4326
  # @!attribute [rw] keyword_value
4328
- # The value of the keyword that's used to search CloudTrail logs,
4329
- # Config rules, Security Hub checks, and Amazon Web Services API names
4330
- # when mapping a control data source.
4327
+ # The value of the keyword that's used when mapping a control data
4328
+ # source. For example, this can be a CloudTrail event name, a rule
4329
+ # name for Config, a Security Hub control, or the name of an Amazon
4330
+ # Web Services API call.
4331
+ #
4332
+ # If you’re mapping a data source to a rule in Config, the
4333
+ # `keywordValue` that you specify depends on the type of rule:
4334
+ #
4335
+ # * For [managed rules][1], you can use the rule identifier as the
4336
+ # `keywordValue`. You can find the rule identifier from the [list of
4337
+ # Config managed rules][2].
4338
+ #
4339
+ # * Managed rule name: [s3-bucket-acl-prohibited][3]
4340
+ #
4341
+ # `keywordValue`\: `S3_BUCKET_ACL_PROHIBITED`
4342
+ #
4343
+ # * For [custom rules][4], you form the `keywordValue` by adding the
4344
+ # `Custom_` prefix to the rule name. This prefix distinguishes the
4345
+ # rule from a managed rule.
4346
+ #
4347
+ # * Custom rule name: my-custom-config-rule
4348
+ #
4349
+ # `keywordValue`\: `Custom_my-custom-config-rule`
4350
+ #
4351
+ # * For [service-linked rules][5], you form the `keywordValue` by
4352
+ # adding the `Custom_` prefix to the rule name. In addition, you
4353
+ # remove the suffix ID that appears at the end of the rule name.
4354
+ #
4355
+ # * Service-linked rule name:
4356
+ # CustomRuleForAccount-conformance-pack-szsm1uv0w
4357
+ #
4358
+ # `keywordValue`\: `Custom_CustomRuleForAccount-conformance-pack`
4359
+ #
4360
+ # * Service-linked rule name:
4361
+ # securityhub-api-gw-cache-encrypted-101104e1
4362
+ #
4363
+ # `keywordValue`\: `Custom_securityhub-api-gw-cache-encrypted`
4364
+ #
4365
+ # * Service-linked rule name:
4366
+ # OrgConfigRule-s3-bucket-versioning-enabled-dbgzf8ba
4367
+ #
4368
+ # `keywordValue`\:
4369
+ # `Custom_OrgConfigRule-s3-bucket-versioning-enabled`
4370
+ #
4371
+ #
4372
+ #
4373
+ # [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html
4374
+ # [2]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
4375
+ # [3]: https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-acl-prohibited.html
4376
+ # [4]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html
4377
+ # [5]: https://docs.aws.amazon.com/config/latest/developerguide/service-linked-awsconfig-rules.html
4331
4378
  # @return [String]
4332
4379
  #
4333
4380
  # @see http://docs.aws.amazon.com/goto/WebAPI/auditmanager-2017-07-25/SourceKeyword AWS API Documentation
@@ -4420,6 +4467,19 @@ module Aws::AuditManager
4420
4467
  #
4421
4468
  class TagResourceResponse < Aws::EmptyStructure; end
4422
4469
 
4470
+ # The request was denied due to request throttling.
4471
+ #
4472
+ # @!attribute [rw] message
4473
+ # @return [String]
4474
+ #
4475
+ # @see http://docs.aws.amazon.com/goto/WebAPI/auditmanager-2017-07-25/ThrottlingException AWS API Documentation
4476
+ #
4477
+ class ThrottlingException < Struct.new(
4478
+ :message)
4479
+ SENSITIVE = []
4480
+ include Aws::Structure
4481
+ end
4482
+
4423
4483
  # Short for uniform resource locator. A URL is used as a unique
4424
4484
  # identifier to locate a resource on the internet.
4425
4485
  #
@@ -4751,8 +4811,8 @@ module Aws::AuditManager
4751
4811
  # },
4752
4812
  # roles: [
4753
4813
  # {
4754
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
4755
- # role_arn: "IamArn",
4814
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
4815
+ # role_arn: "IamArn", # required
4756
4816
  # },
4757
4817
  # ],
4758
4818
  # }
@@ -4940,8 +5000,8 @@ module Aws::AuditManager
4940
5000
  # },
4941
5001
  # default_process_owners: [
4942
5002
  # {
4943
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
4944
- # role_arn: "IamArn",
5003
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
5004
+ # role_arn: "IamArn", # required
4945
5005
  # },
4946
5006
  # ],
4947
5007
  # kms_key: "KmsKey",
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-auditmanager/customizations'
48
48
  # @!group service
49
49
  module Aws::AuditManager
50
50
 
51
- GEM_VERSION = '1.22.0'
51
+ GEM_VERSION = '1.25.0'
52
52
 
53
53
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-auditmanager
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.22.0
4
+ version: 1.25.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-03-23 00:00:00.000000000 Z
11
+ date: 2022-06-07 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core