aws-sdk-auditmanager 1.23.0 → 1.26.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 545887e7ff7d3cfab9914a0b4896fca1945e8a6cdd78ddd9b5c8850ed40cce98
4
- data.tar.gz: 7e6c3523ea7ffe73be8e6efabde34747355caf52ca46fb217f9b93c67a52a5a5
3
+ metadata.gz: 85293e710b9fde06bc424368aedd260eba403da7e2ad96071c25303749becc72
4
+ data.tar.gz: 8e3cea7674bcd05eab13df691f5a34273ee08d6ce435b11c82d6ddd746424d6f
5
5
  SHA512:
6
- metadata.gz: 0de7543344de9099b1d6179354e83f9d5d2f17651a7f65ad108220cab1e4280b7585b72148923ff0fb0be4ff48f0f78ef178bd4d1224b57adc357a1803b6a2e8
7
- data.tar.gz: 74e8965a6b8630f6bf4358d4867859227cb649d8cd9615b76d3fa869253d6962df5cbe47480a61229054a02c20e8c15cd769d3470ac2c7284c43bad741b936af
6
+ metadata.gz: e0d3c2bd3224884f3e73aa29f0ade496dfbe545442c9ba22b29070f5ff77b8fdbc1d4ab28bdd1bf736d10dcf64eaa63d7474ddd1c380eea3e473390360a3cd8b
7
+ data.tar.gz: 607ef3f41f13ac29557a612a8cb81f14396e88cb94e166c6a2a7354e3db10cdbad4a5baea50122134fe9c8a3fdf8854b8d807a01cb86285026d9ff48d4bcdd4b
data/CHANGELOG.md CHANGED
@@ -1,6 +1,21 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.26.0 (2022-07-27)
5
+ ------------------
6
+
7
+ * Feature - This release adds an exceeded quota exception to several APIs. We added a ServiceQuotaExceededException for the following operations: CreateAssessment, CreateControl, CreateAssessmentFramework, and UpdateAssessmentStatus.
8
+
9
+ 1.25.0 (2022-06-07)
10
+ ------------------
11
+
12
+ * Feature - This release introduces 2 updates to the Audit Manager API. The roleType and roleArn attributes are now required when you use the CreateAssessment or UpdateAssessment operation. We also added a throttling exception to the RegisterAccount API operation.
13
+
14
+ 1.24.0 (2022-04-28)
15
+ ------------------
16
+
17
+ * Feature - This release adds documentation updates for Audit Manager. We provided examples of how to use the Custom_ prefix for the keywordValue attribute. We also provided more details about the DeleteAssessmentReport operation.
18
+
4
19
  1.23.0 (2022-03-31)
5
20
  ------------------
6
21
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.23.0
1
+ 1.26.0
@@ -660,8 +660,8 @@ module Aws::AuditManager
660
660
  # },
661
661
  # roles: [ # required
662
662
  # {
663
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
664
- # role_arn: "IamArn",
663
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
664
+ # role_arn: "IamArn", # required
665
665
  # },
666
666
  # ],
667
667
  # framework_id: "UUID", # required
@@ -1063,7 +1063,35 @@ module Aws::AuditManager
1063
1063
  req.send_request(options)
1064
1064
  end
1065
1065
 
1066
- # Deletes an assessment report from an assessment in Audit Manager.
1066
+ # Deletes an assessment report in Audit Manager.
1067
+ #
1068
+ # When you run the `DeleteAssessmentReport` operation, Audit Manager
1069
+ # attempts to delete the following data:
1070
+ #
1071
+ # 1. The specified assessment report that’s stored in your S3 bucket
1072
+ #
1073
+ # 2. The associated metadata that’s stored in Audit Manager
1074
+ #
1075
+ # If Audit Manager can’t access the assessment report in your S3 bucket,
1076
+ # the report isn’t deleted. In this event, the `DeleteAssessmentReport`
1077
+ # operation doesn’t fail. Instead, it proceeds to delete the associated
1078
+ # metadata only. You must then delete the assessment report from the S3
1079
+ # bucket yourself.
1080
+ #
1081
+ # This scenario happens when Audit Manager receives a `403 (Forbidden)`
1082
+ # or `404 (Not Found)` error from Amazon S3. To avoid this, make sure
1083
+ # that your S3 bucket is available, and that you configured the correct
1084
+ # permissions for Audit Manager to delete resources in your S3 bucket.
1085
+ # For an example permissions policy that you can use, see [Assessment
1086
+ # report destination permissions][1] in the *Audit Manager User Guide*.
1087
+ # For information about the issues that could cause a `403 (Forbidden)`
1088
+ # or `404 (Not Found`) error from Amazon S3, see [List of Error
1089
+ # Codes][2] in the *Amazon Simple Storage Service API Reference*.
1090
+ #
1091
+ #
1092
+ #
1093
+ # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/security_iam_id-based-policy-examples.html#full-administrator-access-assessment-report-destination
1094
+ # [2]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#ErrorCodeList
1067
1095
  #
1068
1096
  # @option params [required, String] :assessment_id
1069
1097
  # The unique identifier for the assessment.
@@ -2039,8 +2067,8 @@ module Aws::AuditManager
2039
2067
  req.send_request(options)
2040
2068
  end
2041
2069
 
2042
- # Returns a list of the in-scope Amazon Web Services services for the
2043
- # specified assessment.
2070
+ # Returns a list of the in-scope Amazon Web Services for the specified
2071
+ # assessment.
2044
2072
  #
2045
2073
  # @return [Types::GetServicesInScopeResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
2046
2074
  #
@@ -2776,6 +2804,32 @@ module Aws::AuditManager
2776
2804
  # custom framework is available. Recipients have 120 days to accept or
2777
2805
  # decline the request. If no action is taken, the share request expires.
2778
2806
  #
2807
+ # When you create a share request, Audit Manager stores a snapshot of
2808
+ # your custom framework in the US East (N. Virginia) Amazon Web Services
2809
+ # Region. Audit Manager also stores a backup of the same snapshot in the
2810
+ # US West (Oregon) Amazon Web Services Region.
2811
+ #
2812
+ # Audit Manager deletes the snapshot and the backup snapshot when one of
2813
+ # the following events occurs:
2814
+ #
2815
+ # * The sender revokes the share request.
2816
+ #
2817
+ # * The recipient declines the share request.
2818
+ #
2819
+ # * The recipient encounters an error and doesn't successfully accept
2820
+ # the share request.
2821
+ #
2822
+ # * The share request expires before the recipient responds to the
2823
+ # request.
2824
+ #
2825
+ # When a sender [resends a share request][1], the snapshot is replaced
2826
+ # with an updated version that corresponds with the latest version of
2827
+ # the custom framework.
2828
+ #
2829
+ # When a recipient accepts a share request, the snapshot is replicated
2830
+ # into their Amazon Web Services account under the Amazon Web Services
2831
+ # Region that was specified in the share request.
2832
+ #
2779
2833
  # When you invoke the `StartAssessmentFrameworkShare` API, you are about
2780
2834
  # to share a custom framework with another Amazon Web Services account.
2781
2835
  # You may not share a custom framework that is derived from a standard
@@ -2783,11 +2837,12 @@ module Aws::AuditManager
2783
2837
  # sharing by Amazon Web Services, unless you have obtained permission to
2784
2838
  # do so from the owner of the standard framework. To learn more about
2785
2839
  # which standard frameworks are eligible for sharing, see [Framework
2786
- # sharing eligibility][1] in the *Audit Manager User Guide*.
2840
+ # sharing eligibility][2] in the *Audit Manager User Guide*.
2787
2841
  #
2788
2842
  #
2789
2843
  #
2790
- # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/share-custom-framework-concepts-and-terminology.html#eligibility
2844
+ # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/framework-sharing.html#framework-sharing-resend
2845
+ # [2]: https://docs.aws.amazon.com/audit-manager/latest/userguide/share-custom-framework-concepts-and-terminology.html#eligibility
2791
2846
  #
2792
2847
  # @option params [required, String] :framework_id
2793
2848
  # The unique identifier for the custom framework to be shared.
@@ -2946,8 +3001,8 @@ module Aws::AuditManager
2946
3001
  # },
2947
3002
  # roles: [
2948
3003
  # {
2949
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
2950
- # role_arn: "IamArn",
3004
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
3005
+ # role_arn: "IamArn", # required
2951
3006
  # },
2952
3007
  # ],
2953
3008
  # })
@@ -3545,8 +3600,8 @@ module Aws::AuditManager
3545
3600
  # },
3546
3601
  # default_process_owners: [
3547
3602
  # {
3548
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
3549
- # role_arn: "IamArn",
3603
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
3604
+ # role_arn: "IamArn", # required
3550
3605
  # },
3551
3606
  # ],
3552
3607
  # kms_key: "KmsKey",
@@ -3623,7 +3678,7 @@ module Aws::AuditManager
3623
3678
  params: params,
3624
3679
  config: config)
3625
3680
  context[:gem_name] = 'aws-sdk-auditmanager'
3626
- context[:gem_version] = '1.23.0'
3681
+ context[:gem_version] = '1.26.0'
3627
3682
  Seahorse::Client::Request.new(handlers, context)
3628
3683
  end
3629
3684
 
@@ -258,6 +258,7 @@ module Aws::AuditManager
258
258
  Scope = Shapes::StructureShape.new(name: 'Scope')
259
259
  ServiceMetadata = Shapes::StructureShape.new(name: 'ServiceMetadata')
260
260
  ServiceMetadataList = Shapes::ListShape.new(name: 'ServiceMetadataList')
261
+ ServiceQuotaExceededException = Shapes::StructureShape.new(name: 'ServiceQuotaExceededException')
261
262
  SettingAttribute = Shapes::StringShape.new(name: 'SettingAttribute')
262
263
  Settings = Shapes::StructureShape.new(name: 'Settings')
263
264
  ShareRequestAction = Shapes::StringShape.new(name: 'ShareRequestAction')
@@ -281,6 +282,7 @@ module Aws::AuditManager
281
282
  TagResourceResponse = Shapes::StructureShape.new(name: 'TagResourceResponse')
282
283
  TagValue = Shapes::StringShape.new(name: 'TagValue')
283
284
  TestingInformation = Shapes::StringShape.new(name: 'TestingInformation')
285
+ ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
284
286
  Timestamp = Shapes::TimestampShape.new(name: 'Timestamp')
285
287
  TimestampUUID = Shapes::StringShape.new(name: 'TimestampUUID')
286
288
  Token = Shapes::StringShape.new(name: 'Token')
@@ -1135,8 +1137,8 @@ module Aws::AuditManager
1135
1137
 
1136
1138
  Resources.member = Shapes::ShapeRef.new(shape: Resource)
1137
1139
 
1138
- Role.add_member(:role_type, Shapes::ShapeRef.new(shape: RoleType, location_name: "roleType"))
1139
- Role.add_member(:role_arn, Shapes::ShapeRef.new(shape: IamArn, location_name: "roleArn"))
1140
+ Role.add_member(:role_type, Shapes::ShapeRef.new(shape: RoleType, required: true, location_name: "roleType"))
1141
+ Role.add_member(:role_arn, Shapes::ShapeRef.new(shape: IamArn, required: true, location_name: "roleArn"))
1140
1142
  Role.struct_class = Types::Role
1141
1143
 
1142
1144
  Roles.member = Shapes::ShapeRef.new(shape: Role)
@@ -1153,6 +1155,9 @@ module Aws::AuditManager
1153
1155
 
1154
1156
  ServiceMetadataList.member = Shapes::ShapeRef.new(shape: ServiceMetadata)
1155
1157
 
1158
+ ServiceQuotaExceededException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
1159
+ ServiceQuotaExceededException.struct_class = Types::ServiceQuotaExceededException
1160
+
1156
1161
  Settings.add_member(:is_aws_org_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "isAwsOrgEnabled"))
1157
1162
  Settings.add_member(:sns_topic, Shapes::ShapeRef.new(shape: SNSTopic, location_name: "snsTopic"))
1158
1163
  Settings.add_member(:default_assessment_reports_destination, Shapes::ShapeRef.new(shape: AssessmentReportsDestination, location_name: "defaultAssessmentReportsDestination"))
@@ -1184,6 +1189,9 @@ module Aws::AuditManager
1184
1189
 
1185
1190
  TagResourceResponse.struct_class = Types::TagResourceResponse
1186
1191
 
1192
+ ThrottlingException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
1193
+ ThrottlingException.struct_class = Types::ThrottlingException
1194
+
1187
1195
  URL.add_member(:hyperlink_name, Shapes::ShapeRef.new(shape: HyperlinkName, location_name: "hyperlinkName"))
1188
1196
  URL.add_member(:link, Shapes::ShapeRef.new(shape: UrlLink, location_name: "link"))
1189
1197
  URL.struct_class = Types::URL
@@ -1400,6 +1408,7 @@ module Aws::AuditManager
1400
1408
  o.errors << Shapes::ShapeRef.new(shape: ValidationException)
1401
1409
  o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
1402
1410
  o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
1411
+ o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
1403
1412
  end)
1404
1413
 
1405
1414
  api.add_operation(:create_assessment_framework, Seahorse::Model::Operation.new.tap do |o|
@@ -1412,6 +1421,7 @@ module Aws::AuditManager
1412
1421
  o.errors << Shapes::ShapeRef.new(shape: ValidationException)
1413
1422
  o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
1414
1423
  o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
1424
+ o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
1415
1425
  end)
1416
1426
 
1417
1427
  api.add_operation(:create_assessment_report, Seahorse::Model::Operation.new.tap do |o|
@@ -1436,6 +1446,7 @@ module Aws::AuditManager
1436
1446
  o.errors << Shapes::ShapeRef.new(shape: ValidationException)
1437
1447
  o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
1438
1448
  o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
1449
+ o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
1439
1450
  end)
1440
1451
 
1441
1452
  api.add_operation(:delete_assessment, Seahorse::Model::Operation.new.tap do |o|
@@ -1971,6 +1982,7 @@ module Aws::AuditManager
1971
1982
  o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
1972
1983
  o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
1973
1984
  o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
1985
+ o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
1974
1986
  end)
1975
1987
 
1976
1988
  api.add_operation(:register_organization_admin_account, Seahorse::Model::Operation.new.tap do |o|
@@ -2089,6 +2101,7 @@ module Aws::AuditManager
2089
2101
  o.errors << Shapes::ShapeRef.new(shape: ValidationException)
2090
2102
  o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
2091
2103
  o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
2104
+ o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
2092
2105
  end)
2093
2106
 
2094
2107
  api.add_operation(:update_control, Seahorse::Model::Operation.new.tap do |o|
@@ -30,6 +30,8 @@ module Aws::AuditManager
30
30
  # * {AccessDeniedException}
31
31
  # * {InternalServerException}
32
32
  # * {ResourceNotFoundException}
33
+ # * {ServiceQuotaExceededException}
34
+ # * {ThrottlingException}
33
35
  # * {ValidationException}
34
36
  #
35
37
  # Additionally, error classes are dynamically generated for service errors based on the error code
@@ -93,6 +95,36 @@ module Aws::AuditManager
93
95
  end
94
96
  end
95
97
 
98
+ class ServiceQuotaExceededException < ServiceError
99
+
100
+ # @param [Seahorse::Client::RequestContext] context
101
+ # @param [String] message
102
+ # @param [Aws::AuditManager::Types::ServiceQuotaExceededException] data
103
+ def initialize(context, message, data = Aws::EmptyStructure.new)
104
+ super(context, message, data)
105
+ end
106
+
107
+ # @return [String]
108
+ def message
109
+ @message || @data[:message]
110
+ end
111
+ end
112
+
113
+ class ThrottlingException < ServiceError
114
+
115
+ # @param [Seahorse::Client::RequestContext] context
116
+ # @param [String] message
117
+ # @param [Aws::AuditManager::Types::ThrottlingException] data
118
+ def initialize(context, message, data = Aws::EmptyStructure.new)
119
+ super(context, message, data)
120
+ end
121
+
122
+ # @return [String]
123
+ def message
124
+ @message || @data[:message]
125
+ end
126
+ end
127
+
96
128
  class ValidationException < ServiceError
97
129
 
98
130
  # @param [Seahorse::Client::RequestContext] context
@@ -278,8 +278,7 @@ module Aws::AuditManager
278
278
  # @!attribute [rw] evidence_by_type_configuration_data_count
279
279
  # The number of evidence that falls under the configuration data
280
280
  # category. This evidence is collected from configuration snapshots of
281
- # other Amazon Web Services services such as Amazon EC2, Amazon S3, or
282
- # IAM.
281
+ # other Amazon Web Services such as Amazon EC2, Amazon S3, or IAM.
283
282
  # @return [Integer]
284
283
  #
285
284
  # @!attribute [rw] evidence_by_type_manual_count
@@ -1463,6 +1462,25 @@ module Aws::AuditManager
1463
1462
  # @!attribute [rw] source_keyword
1464
1463
  # The keyword to search for in CloudTrail logs, Config rules, Security
1465
1464
  # Hub checks, and Amazon Web Services API names.
1465
+ #
1466
+ # To learn more about the supported keywords that you can use when
1467
+ # mapping a control data source, see the following pages in the *Audit
1468
+ # Manager User Guide*\:
1469
+ #
1470
+ # * [Config rules supported by Audit Manager][1]
1471
+ #
1472
+ # * [Security Hub controls supported by Audit Manager][2]
1473
+ #
1474
+ # * [API calls supported by Audit Manager][3]
1475
+ #
1476
+ # * [CloudTrail event names supported by Audit Manager][4]
1477
+ #
1478
+ #
1479
+ #
1480
+ # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-ash.html
1481
+ # [2]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-config.html
1482
+ # [3]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-api.html
1483
+ # [4]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-cloudtrail.html
1466
1484
  # @return [Types::SourceKeyword]
1467
1485
  #
1468
1486
  # @!attribute [rw] source_frequency
@@ -1747,8 +1765,8 @@ module Aws::AuditManager
1747
1765
  # },
1748
1766
  # roles: [ # required
1749
1767
  # {
1750
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
1751
- # role_arn: "IamArn",
1768
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
1769
+ # role_arn: "IamArn", # required
1752
1770
  # },
1753
1771
  # ],
1754
1772
  # framework_id: "UUID", # required
@@ -1858,6 +1876,25 @@ module Aws::AuditManager
1858
1876
  # @!attribute [rw] source_keyword
1859
1877
  # The keyword to search for in CloudTrail logs, Config rules, Security
1860
1878
  # Hub checks, and Amazon Web Services API names.
1879
+ #
1880
+ # To learn more about the supported keywords that you can use when
1881
+ # mapping a control data source, see the following pages in the *Audit
1882
+ # Manager User Guide*\:
1883
+ #
1884
+ # * [Config rules supported by Audit Manager][1]
1885
+ #
1886
+ # * [Security Hub controls supported by Audit Manager][2]
1887
+ #
1888
+ # * [API calls supported by Audit Manager][3]
1889
+ #
1890
+ # * [CloudTrail event names supported by Audit Manager][4]
1891
+ #
1892
+ #
1893
+ #
1894
+ # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-ash.html
1895
+ # [2]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-config.html
1896
+ # [3]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-api.html
1897
+ # [4]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-cloudtrail.html
1861
1898
  # @return [Types::SourceKeyword]
1862
1899
  #
1863
1900
  # @!attribute [rw] source_frequency
@@ -4174,8 +4211,8 @@ module Aws::AuditManager
4174
4211
  # data as a hash:
4175
4212
  #
4176
4213
  # {
4177
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
4178
- # role_arn: "IamArn",
4214
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
4215
+ # role_arn: "IamArn", # required
4179
4216
  # }
4180
4217
  #
4181
4218
  # @!attribute [rw] role_type
@@ -4274,6 +4311,28 @@ module Aws::AuditManager
4274
4311
  include Aws::Structure
4275
4312
  end
4276
4313
 
4314
+ # You've reached your account quota for this resource type. To perform
4315
+ # the requested action, delete some existing resources or [request a
4316
+ # quota increase][1] from the Service Quotas console. For a list of
4317
+ # Audit Manager service quotas, see [Quotas and restrictions for Audit
4318
+ # Manager][2].
4319
+ #
4320
+ #
4321
+ #
4322
+ # [1]: https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html
4323
+ # [2]: https://docs.aws.amazon.com/audit-manager/latest/userguide/service-quotas.html
4324
+ #
4325
+ # @!attribute [rw] message
4326
+ # @return [String]
4327
+ #
4328
+ # @see http://docs.aws.amazon.com/goto/WebAPI/auditmanager-2017-07-25/ServiceQuotaExceededException AWS API Documentation
4329
+ #
4330
+ class ServiceQuotaExceededException < Struct.new(
4331
+ :message)
4332
+ SENSITIVE = []
4333
+ include Aws::Structure
4334
+ end
4335
+
4277
4336
  # The settings object that holds all supported Audit Manager settings.
4278
4337
  #
4279
4338
  # @!attribute [rw] is_aws_org_enabled
@@ -4312,6 +4371,25 @@ module Aws::AuditManager
4312
4371
  # The keyword to search for in CloudTrail logs, Config rules, Security
4313
4372
  # Hub checks, and Amazon Web Services API names.
4314
4373
  #
4374
+ # To learn more about the supported keywords that you can use when
4375
+ # mapping a control data source, see the following pages in the *Audit
4376
+ # Manager User Guide*\:
4377
+ #
4378
+ # * [Config rules supported by Audit Manager][1]
4379
+ #
4380
+ # * [Security Hub controls supported by Audit Manager][2]
4381
+ #
4382
+ # * [API calls supported by Audit Manager][3]
4383
+ #
4384
+ # * [CloudTrail event names supported by Audit Manager][4]
4385
+ #
4386
+ #
4387
+ #
4388
+ # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-ash.html
4389
+ # [2]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-config.html
4390
+ # [3]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-api.html
4391
+ # [4]: https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-cloudtrail.html
4392
+ #
4315
4393
  # @note When making an API call, you may pass SourceKeyword
4316
4394
  # data as a hash:
4317
4395
  #
@@ -4321,13 +4399,61 @@ module Aws::AuditManager
4321
4399
  # }
4322
4400
  #
4323
4401
  # @!attribute [rw] keyword_input_type
4324
- # The method of input for the keyword.
4402
+ # The input method for the keyword.
4325
4403
  # @return [String]
4326
4404
  #
4327
4405
  # @!attribute [rw] keyword_value
4328
- # The value of the keyword that's used to search CloudTrail logs,
4329
- # Config rules, Security Hub checks, and Amazon Web Services API names
4330
- # when mapping a control data source.
4406
+ # The value of the keyword that's used when mapping a control data
4407
+ # source. For example, this can be a CloudTrail event name, a rule
4408
+ # name for Config, a Security Hub control, or the name of an Amazon
4409
+ # Web Services API call.
4410
+ #
4411
+ # If you’re mapping a data source to a rule in Config, the
4412
+ # `keywordValue` that you specify depends on the type of rule:
4413
+ #
4414
+ # * For [managed rules][1], you can use the rule identifier as the
4415
+ # `keywordValue`. You can find the rule identifier from the [list of
4416
+ # Config managed rules][2].
4417
+ #
4418
+ # * Managed rule name: [s3-bucket-acl-prohibited][3]
4419
+ #
4420
+ # `keywordValue`\: `S3_BUCKET_ACL_PROHIBITED`
4421
+ #
4422
+ # * For [custom rules][4], you form the `keywordValue` by adding the
4423
+ # `Custom_` prefix to the rule name. This prefix distinguishes the
4424
+ # rule from a managed rule.
4425
+ #
4426
+ # * Custom rule name: my-custom-config-rule
4427
+ #
4428
+ # `keywordValue`\: `Custom_my-custom-config-rule`
4429
+ #
4430
+ # * For [service-linked rules][5], you form the `keywordValue` by
4431
+ # adding the `Custom_` prefix to the rule name. In addition, you
4432
+ # remove the suffix ID that appears at the end of the rule name.
4433
+ #
4434
+ # * Service-linked rule name:
4435
+ # CustomRuleForAccount-conformance-pack-szsm1uv0w
4436
+ #
4437
+ # `keywordValue`\: `Custom_CustomRuleForAccount-conformance-pack`
4438
+ #
4439
+ # * Service-linked rule name:
4440
+ # securityhub-api-gw-cache-encrypted-101104e1
4441
+ #
4442
+ # `keywordValue`\: `Custom_securityhub-api-gw-cache-encrypted`
4443
+ #
4444
+ # * Service-linked rule name:
4445
+ # OrgConfigRule-s3-bucket-versioning-enabled-dbgzf8ba
4446
+ #
4447
+ # `keywordValue`\:
4448
+ # `Custom_OrgConfigRule-s3-bucket-versioning-enabled`
4449
+ #
4450
+ #
4451
+ #
4452
+ # [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html
4453
+ # [2]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
4454
+ # [3]: https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-acl-prohibited.html
4455
+ # [4]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html
4456
+ # [5]: https://docs.aws.amazon.com/config/latest/developerguide/service-linked-awsconfig-rules.html
4331
4457
  # @return [String]
4332
4458
  #
4333
4459
  # @see http://docs.aws.amazon.com/goto/WebAPI/auditmanager-2017-07-25/SourceKeyword AWS API Documentation
@@ -4420,6 +4546,19 @@ module Aws::AuditManager
4420
4546
  #
4421
4547
  class TagResourceResponse < Aws::EmptyStructure; end
4422
4548
 
4549
+ # The request was denied due to request throttling.
4550
+ #
4551
+ # @!attribute [rw] message
4552
+ # @return [String]
4553
+ #
4554
+ # @see http://docs.aws.amazon.com/goto/WebAPI/auditmanager-2017-07-25/ThrottlingException AWS API Documentation
4555
+ #
4556
+ class ThrottlingException < Struct.new(
4557
+ :message)
4558
+ SENSITIVE = []
4559
+ include Aws::Structure
4560
+ end
4561
+
4423
4562
  # Short for uniform resource locator. A URL is used as a unique
4424
4563
  # identifier to locate a resource on the internet.
4425
4564
  #
@@ -4751,8 +4890,8 @@ module Aws::AuditManager
4751
4890
  # },
4752
4891
  # roles: [
4753
4892
  # {
4754
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
4755
- # role_arn: "IamArn",
4893
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
4894
+ # role_arn: "IamArn", # required
4756
4895
  # },
4757
4896
  # ],
4758
4897
  # }
@@ -4940,8 +5079,8 @@ module Aws::AuditManager
4940
5079
  # },
4941
5080
  # default_process_owners: [
4942
5081
  # {
4943
- # role_type: "PROCESS_OWNER", # accepts PROCESS_OWNER, RESOURCE_OWNER
4944
- # role_arn: "IamArn",
5082
+ # role_type: "PROCESS_OWNER", # required, accepts PROCESS_OWNER, RESOURCE_OWNER
5083
+ # role_arn: "IamArn", # required
4945
5084
  # },
4946
5085
  # ],
4947
5086
  # kms_key: "KmsKey",
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-auditmanager/customizations'
48
48
  # @!group service
49
49
  module Aws::AuditManager
50
50
 
51
- GEM_VERSION = '1.23.0'
51
+ GEM_VERSION = '1.26.0'
52
52
 
53
53
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-auditmanager
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.23.0
4
+ version: 1.26.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-03-31 00:00:00.000000000 Z
11
+ date: 2022-07-27 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core