aws-sdk-auditmanager 1.23.0 → 1.24.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 545887e7ff7d3cfab9914a0b4896fca1945e8a6cdd78ddd9b5c8850ed40cce98
-  data.tar.gz: 7e6c3523ea7ffe73be8e6efabde34747355caf52ca46fb217f9b93c67a52a5a5
+  metadata.gz: b2463985326c4e8f2e362e77a9427fc47072173b9ff279ba09f10e5fc458ebf0
+  data.tar.gz: 81b1223019962a51db9853a74406b7d09b91753abf0d9c014be6ac885340c280
 SHA512:
-  metadata.gz: 0de7543344de9099b1d6179354e83f9d5d2f17651a7f65ad108220cab1e4280b7585b72148923ff0fb0be4ff48f0f78ef178bd4d1224b57adc357a1803b6a2e8
-  data.tar.gz: 74e8965a6b8630f6bf4358d4867859227cb649d8cd9615b76d3fa869253d6962df5cbe47480a61229054a02c20e8c15cd769d3470ac2c7284c43bad741b936af
+  metadata.gz: dd22a0016bb1472f297fee2d9d4530a976d1de27ebfc73383f22efbbdaf1539d8094a755a4124975e6ef6db007429c56ad9c3802553d674b8fa704600f84ebe0
+  data.tar.gz: faefb73fb6f656552d28939ae0a6b7e2b75f4a0f7bb44f6bf53009b9b7adb8f5939d5e4ac29f7e71e6f0e7fdc776c01d05acef588a39caf8cfa94c0162dbf1f8

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.24.0 (2022-04-28)
+------------------
+
+* Feature - This release adds documentation updates for Audit Manager. We provided examples of how to use the Custom_ prefix for the keywordValue attribute. We also provided more details about the DeleteAssessmentReport operation.
+
 1.23.0 (2022-03-31)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.23.0
+1.24.0

data/lib/aws-sdk-auditmanager/client.rb

@@ -1063,7 +1063,35 @@ module Aws::AuditManager
       req.send_request(options)
     end
 
-    # Deletes an assessment report from an assessment in Audit Manager.
+    # Deletes an assessment report in Audit Manager.
+    #
+    # When you run the `DeleteAssessmentReport` operation, Audit Manager
+    # attempts to delete the following data:
+    #
+    # 1.  The specified assessment report that’s stored in your S3 bucket
+    #
+    # 2.  The associated metadata that’s stored in Audit Manager
+    #
+    # If Audit Manager can’t access the assessment report in your S3 bucket,
+    # the report isn’t deleted. In this event, the `DeleteAssessmentReport`
+    # operation doesn’t fail. Instead, it proceeds to delete the associated
+    # metadata only. You must then delete the assessment report from the S3
+    # bucket yourself.
+    #
+    # This scenario happens when Audit Manager receives a `403 (Forbidden)`
+    # or `404 (Not Found)` error from Amazon S3. To avoid this, make sure
+    # that your S3 bucket is available, and that you configured the correct
+    # permissions for Audit Manager to delete resources in your S3 bucket.
+    # For an example permissions policy that you can use, see [Assessment
+    # report destination permissions][1] in the *Audit Manager User Guide*.
+    # For information about the issues that could cause a `403 (Forbidden)`
+    # or `404 (Not Found`) error from Amazon S3, see [List of Error
+    # Codes][2] in the *Amazon Simple Storage Service API Reference*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/audit-manager/latest/userguide/security_iam_id-based-policy-examples.html#full-administrator-access-assessment-report-destination
+    # [2]: https://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html#ErrorCodeList
     #
     # @option params [required, String] :assessment_id
     #   The unique identifier for the assessment.
@@ -3623,7 +3651,7 @@ module Aws::AuditManager
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-auditmanager'
-      context[:gem_version] = '1.23.0'
+      context[:gem_version] = '1.24.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-auditmanager/types.rb

@@ -4321,13 +4321,61 @@ module Aws::AuditManager
     #       }
     #
     # @!attribute [rw] keyword_input_type
-    #   The method of input for the keyword.
+    #   The input method for the keyword.
     #   @return [String]
     #
     # @!attribute [rw] keyword_value
-    #   The value of the keyword that's used to search CloudTrail logs,
-    #   Config rules, Security Hub checks, and Amazon Web Services API names
-    #   when mapping a control data source.
+    #   The value of the keyword that's used when mapping a control data
+    #   source. For example, this can be a CloudTrail event name, a rule
+    #   name for Config, a Security Hub control, or the name of an Amazon
+    #   Web Services API call.
+    #
+    #   If you’re mapping a data source to a rule in Config, the
+    #   `keywordValue` that you specify depends on the type of rule:
+    #
+    #   * For [managed rules][1], you can use the rule identifier as the
+    #     `keywordValue`. You can find the rule identifier from the [list of
+    #     Config managed rules][2].
+    #
+    #     * Managed rule name: [s3-bucket-acl-prohibited][3]
+    #
+    #       `keywordValue`\: `S3_BUCKET_ACL_PROHIBITED`
+    #
+    #   * For [custom rules][4], you form the `keywordValue` by adding the
+    #     `Custom_` prefix to the rule name. This prefix distinguishes the
+    #     rule from a managed rule.
+    #
+    #     * Custom rule name: my-custom-config-rule
+    #
+    #       `keywordValue`\: `Custom_my-custom-config-rule`
+    #
+    #   * For [service-linked rules][5], you form the `keywordValue` by
+    #     adding the `Custom_` prefix to the rule name. In addition, you
+    #     remove the suffix ID that appears at the end of the rule name.
+    #
+    #     * Service-linked rule name:
+    #       CustomRuleForAccount-conformance-pack-szsm1uv0w
+    #
+    #       `keywordValue`\: `Custom_CustomRuleForAccount-conformance-pack`
+    #
+    #     * Service-linked rule name:
+    #       securityhub-api-gw-cache-encrypted-101104e1
+    #
+    #       `keywordValue`\: `Custom_securityhub-api-gw-cache-encrypted`
+    #
+    #     * Service-linked rule name:
+    #       OrgConfigRule-s3-bucket-versioning-enabled-dbgzf8ba
+    #
+    #       `keywordValue`\:
+    #       `Custom_OrgConfigRule-s3-bucket-versioning-enabled`
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html
+    #   [2]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
+    #   [3]: https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-acl-prohibited.html
+    #   [4]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html
+    #   [5]: https://docs.aws.amazon.com/config/latest/developerguide/service-linked-awsconfig-rules.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/auditmanager-2017-07-25/SourceKeyword AWS API Documentation

data/lib/aws-sdk-auditmanager.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-auditmanager/customizations'
 # @!group service
 module Aws::AuditManager
 
-  GEM_VERSION = '1.23.0'
+  GEM_VERSION = '1.24.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-auditmanager
 version: !ruby/object:Gem::Version
-  version: 1.23.0
+  version: 1.24.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-03-31 00:00:00.000000000 Z
+date: 2022-04-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core