aws-sdk-configservice 1.129.0 → 1.130.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 65f30d5306c2a05eb21f1991d06017bfcd2f376a91705a619a1db03a5d5d7da8
-  data.tar.gz: 8f22725c32eaf3a4d93b566ad8837743a162818d23a4a4ed1f239a27682d8071
+  metadata.gz: 9961690d3db8f9d1b7c07f37ca63dcc5eace4a711a0211d8c7ad0ce35356df59
+  data.tar.gz: b96f36f19d5677fabcc74baf72b28f58ab0e69518f9d6a837e1cd33a0f5c0429
 SHA512:
-  metadata.gz: 0a02f66c4449fdeb4296aac37a96b486aa1b5108c659a4f3c5a0294a2feeff2cb47ba836b9c278925c43eaaf496a4e5b825017ffc8557d11bb06aca50cf2a4f7
-  data.tar.gz: 8532fff7a5bb562a5c51e538f758f4ccfab115541e4453e1a8c8a5caa124dcd2a1b8feb67332c34e14f474c4dd3f5405ad02e71bcdb2209b4dc14543f38494e5
+  metadata.gz: d79808ba443711aa3f35b1736fe549d54ab0c1be926d65efd123265bf1c66016dc90d37950a1f7556d0f83340427ce883b5ad98b3dfa33db0e30132becc17058
+  data.tar.gz: 1c037f40e7292168c4b8d8b8fdc115c14e145cac58f4deddc6825dc8e43e4d4e30c49fc676da69ed9939f1d042d88f478b3e6c1534dafb6a52dc784841b158a1

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.130.0 (2025-06-27)
+------------------
+
+* Feature - Added important considerations to the PutConformancePack and PutOrganizationConformancPack APIs.
+
 1.129.0 (2025-06-02)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.129.0
+1.130.0

data/lib/aws-sdk-configservice/client.rb

@@ -716,31 +716,27 @@ module Aws::ConfigService
     # You can check the state of a rule by using the `DescribeConfigRules`
     # request.
     #
-    # <note markdown="1"> **Recommendation: Stop recording resource compliance before deleting
-    # rules**
+    # <note markdown="1"> **Recommendation: Consider excluding the
+    # `AWS::Config::ResourceCompliance` resource type from recording before
+    # deleting rules**
     #
-    #  It is highly recommended that you stop recording for the
-    # `AWS::Config::ResourceCompliance` resource type before you delete
-    # rules in your account. Deleting rules creates CIs for
-    # `AWS::Config::ResourceCompliance` and can affect your Config
-    # [configuration recorder][1] costs. If you are deleting rules which
-    # evaluate a large number of resource types, this can lead to a spike in
-    # the number of CIs recorded.
+    #  Deleting rules creates configuration items (CIs) for
+    # `AWS::Config::ResourceCompliance` that can affect your costs for the
+    # configuration recorder. If you are deleting rules which evaluate a
+    # large number of resource types, this can lead to a spike in the number
+    # of CIs recorded.
     #
-    #  Best practice:
+    #  To avoid the associated costs, you can opt to disable recording for
+    # the `AWS::Config::ResourceCompliance` resource type before deleting
+    # rules, and re-enable recording after the rules have been deleted.
     #
-    #  1.  Stop recording `AWS::Config::ResourceCompliance`
-    #
-    # 2.  Delete rule(s)
-    #
-    # 3.  Turn on recording for `AWS::Config::ResourceCompliance`
+    #  However, since deleting rules is an asynchronous process, it might
+    # take an hour or more to complete. During the time when recording is
+    # disabled for `AWS::Config::ResourceCompliance`, rule evaluations will
+    # not be recorded in the associated resource’s history.
     #
     #  </note>
     #
-    #
-    #
-    # [1]: https://docs.aws.amazon.com/config/latest/developerguide/stop-start-recorder.html
-    #
     # @option params [required, String] :config_rule_name
     #   The name of the Config rule that you want to delete.
     #
@@ -831,6 +827,27 @@ module Aws::ConfigService
     # deletion is complete. You cannot update a conformance pack while it is
     # in this state.
     #
+    # <note markdown="1"> **Recommendation: Consider excluding the
+    # `AWS::Config::ResourceCompliance` resource type from recording before
+    # deleting rules**
+    #
+    #  Deleting rules creates configuration items (CIs) for
+    # `AWS::Config::ResourceCompliance` that can affect your costs for the
+    # configuration recorder. If you are deleting rules which evaluate a
+    # large number of resource types, this can lead to a spike in the number
+    # of CIs recorded.
+    #
+    #  To avoid the associated costs, you can opt to disable recording for
+    # the `AWS::Config::ResourceCompliance` resource type before deleting
+    # rules, and re-enable recording after the rules have been deleted.
+    #
+    #  However, since deleting rules is an asynchronous process, it might
+    # take an hour or more to complete. During the time when recording is
+    # disabled for `AWS::Config::ResourceCompliance`, rule evaluations will
+    # not be recorded in the associated resource’s history.
+    #
+    #  </note>
+    #
     # @option params [required, String] :conformance_pack_name
     #   Name of the conformance pack you want to delete.
     #
@@ -916,6 +933,27 @@ module Aws::ConfigService
     # deletion is complete. You cannot update a rule while it is in this
     # state.
     #
+    # <note markdown="1"> **Recommendation: Consider excluding the
+    # `AWS::Config::ResourceCompliance` resource type from recording before
+    # deleting rules**
+    #
+    #  Deleting rules creates configuration items (CIs) for
+    # `AWS::Config::ResourceCompliance` that can affect your costs for the
+    # configuration recorder. If you are deleting rules which evaluate a
+    # large number of resource types, this can lead to a spike in the number
+    # of CIs recorded.
+    #
+    #  To avoid the associated costs, you can opt to disable recording for
+    # the `AWS::Config::ResourceCompliance` resource type before deleting
+    # rules, and re-enable recording after the rules have been deleted.
+    #
+    #  However, since deleting rules is an asynchronous process, it might
+    # take an hour or more to complete. During the time when recording is
+    # disabled for `AWS::Config::ResourceCompliance`, rule evaluations will
+    # not be recorded in the associated resource’s history.
+    #
+    #  </note>
+    #
     # @option params [required, String] :organization_config_rule_name
     #   The name of organization Config rule that you want to delete.
     #
@@ -949,6 +987,27 @@ module Aws::ConfigService
     # until the deletion is complete. You cannot update a conformance pack
     # while it is in this state.
     #
+    # <note markdown="1"> **Recommendation: Consider excluding the
+    # `AWS::Config::ResourceCompliance` resource type from recording before
+    # deleting rules**
+    #
+    #  Deleting rules creates configuration items (CIs) for
+    # `AWS::Config::ResourceCompliance` that can affect your costs for the
+    # configuration recorder. If you are deleting rules which evaluate a
+    # large number of resource types, this can lead to a spike in the number
+    # of CIs recorded.
+    #
+    #  To avoid the associated costs, you can opt to disable recording for
+    # the `AWS::Config::ResourceCompliance` resource type before deleting
+    # rules, and re-enable recording after the rules have been deleted.
+    #
+    #  However, since deleting rules is an asynchronous process, it might
+    # take an hour or more to complete. During the time when recording is
+    # disabled for `AWS::Config::ResourceCompliance`, rule evaluations will
+    # not be recorded in the associated resource’s history.
+    #
+    #  </note>
+    #
     # @option params [required, String] :organization_conformance_pack_name
     #   The name of organization conformance pack that you want to delete.
     #
@@ -3842,15 +3901,23 @@ module Aws::ConfigService
     end
 
     # For accurate reporting on the compliance status, you must record the
-    # `AWS::Config::ResourceCompliance` resource type. For more information,
-    # see [Selecting Which Resources Config Records][1].
+    # `AWS::Config::ResourceCompliance` resource type.
+    #
+    #  For more information, see [Recording Amazon Web Services
+    # Resources][1]
+    # in the *Config Resources Developer Guide*.
+    #
+    # Returns a list of configurations items (CIs) for the specified
+    # resource.
     #
-    # Returns a list of `ConfigurationItems` for the specified resource. The
-    # list contains details about each state of the resource during the
+    # **Contents**
+    #
+    # The list contains details about each state of the resource during the
     # specified time interval. If you specified a retention period to retain
-    # your `ConfigurationItems` between a minimum of 30 days and a maximum
-    # of 7 years (2557 days), Config returns the `ConfigurationItems` for
-    # the specified retention period.
+    # your CIs between a minimum of 30 days and a maximum of 7 years (2557
+    # days), Config returns the CIs for the specified retention period.
+    #
+    # **Pagination**
     #
     # The response is paginated. By default, Config returns a limit of 10
     # configuration items per page. You can customize this number with the
@@ -4262,24 +4329,44 @@ module Aws::ConfigService
       req.send_request(options)
     end
 
-    # Accepts a resource type and returns a list of resource identifiers for
-    # the resources of that type. A resource identifier includes the
-    # resource type, ID, and (if available) the custom resource name. The
-    # results consist of resources that Config has discovered, including
-    # those that Config is not currently recording. You can narrow the
-    # results to include only resources that have specific resource IDs or a
-    # resource name.
+    # Returns a list of resource resource identifiers for the specified
+    # resource types for the resources of that type. A *resource identifier*
+    # includes the resource type, ID, and (if available) the custom resource
+    # name.
+    #
+    # The results consist of resources that Config has *discovered*,
+    # including those that Config is not currently recording. You can narrow
+    # the results to include only resources that have specific resource IDs
+    # or a resource name.
     #
     # <note markdown="1"> You can specify either resource IDs or a resource name, but not both,
     # in the same request.
     #
     #  </note>
     #
-    # The response is paginated. By default, Config lists 100 resource
-    # identifiers on each page. You can customize this number with the
-    # `limit` parameter. The response includes a `nextToken` string. To get
-    # the next page of results, run the request again and specify the string
-    # for the `nextToken` parameter.
+    # *CloudFormation stack recording behavior in Config*
+    #
+    #  When a CloudFormation stack fails to create (for example, it enters
+    # the `ROLLBACK_FAILED` state), Config does not record a configuration
+    # item (CI) for that stack. Configuration items are only recorded for
+    # stacks that reach the following states:
+    #
+    #  * `CREATE_COMPLETE`
+    #
+    # * `UPDATE_COMPLETE`
+    #
+    # * `UPDATE_ROLLBACK_COMPLETE`
+    #
+    # * `UPDATE_ROLLBACK_FAILED`
+    #
+    # * `DELETE_FAILED`
+    #
+    # * `DELETE_COMPLETE`
+    #
+    #  Because no CI is created for a failed stack creation, you won't see
+    # configuration history for that stack in Config, even after the stack
+    # is deleted. This helps make sure that Config only tracks resources
+    # that were successfully provisioned.
     #
     # @option params [required, String] :resource_type
     #   The type of resources that you want Config to list in the response.
@@ -4943,6 +5030,18 @@ module Aws::ConfigService
     # conformance packs you can have per account, see [ **Service Limits**
     # ][1] in the *Config Developer Guide*.
     #
+    # When you use `PutConformancePack` to deploy conformance packs in your
+    # account, the operation can create Config rules and remediation actions
+    # without requiring `config:PutConfigRule` or
+    # `config:PutRemediationConfigurations` permissions in your account IAM
+    # policies.
+    #
+    #  This API uses the `AWSServiceRoleForConfigConforms` service-linked
+    # role in your account to create conformance pack resources. This
+    # service-linked role includes the permissions to create Config rules
+    # and remediation configurations, even if your account IAM policies
+    # explicitly deny these actions.
+    #
     # This API creates a service-linked role
     # `AWSServiceRoleForConfigConforms` in your account. The service-linked
     # role is created only when the role does not exist in your account.
@@ -4976,7 +5075,7 @@ module Aws::ConfigService
     #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html
     #
     # @option params [String] :template_body
-    #   A string containing the full conformance pack template body. The
+    #   A string that contains the full conformance pack template body. The
     #   structure containing the template body has a minimum length of 1 byte
     #   and a maximum length of 51,200 bytes.
     #
@@ -5362,6 +5461,18 @@ module Aws::ConfigService
     # ensure Organizations `ListDelegatedAdministrator` permissions are
     # added. An organization can have up to 3 delegated administrators.
     #
+    # When you use `PutOrganizationConformancePack` to deploy conformance
+    # packs across member accounts, the operation can create Config rules
+    # and remediation actions without requiring `config:PutConfigRule` or
+    # `config:PutRemediationConfigurations` permissions in member account
+    # IAM policies.
+    #
+    #  This API uses the `AWSServiceRoleForConfigConforms` service-linked
+    # role in each member account to create conformance pack resources. This
+    # service-linked role includes the permissions to create Config rules
+    # and remediation configurations, even if member account IAM policies
+    # explicitly deny these actions.
+    #
     # This API enables organization service access for
     # `config-multiaccountsetup.amazonaws.com` through the
     # `EnableAWSServiceAccess` action and creates a service-linked role
@@ -5409,9 +5520,9 @@ module Aws::ConfigService
     #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html
     #
     # @option params [String] :template_body
-    #   A string containing full conformance pack template body. Structure
-    #   containing the template body with a minimum length of 1 byte and a
-    #   maximum length of 51,200 bytes.
+    #   A string that contains the full conformance pack template body.
+    #   Structure containing the template body with a minimum length of 1 byte
+    #   and a maximum length of 51,200 bytes.
     #
     # @option params [String] :delivery_s3_bucket
     #   The name of the Amazon S3 bucket where Config stores conformance pack
@@ -5850,8 +5961,9 @@ module Aws::ConfigService
     # `recordingMode`, and `recordingScope` is set by the service that is
     # linked to the configuration recorder.
     #
-    # For more information, see [ **Working with the Configuration
-    # Recorder** ][1] in the *Config Developer Guide*.
+    # For more information and a list of supported services/service
+    # principals, see [ **Working with the Configuration Recorder** ][1] in
+    # the *Config Developer Guide*.
     #
     # This API creates a service-linked role `AWSServiceRoleForConfig` in
     # your account. The service-linked role is created only when the role
@@ -6485,7 +6597,7 @@ module Aws::ConfigService
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-configservice'
-      context[:gem_version] = '1.129.0'
+      context[:gem_version] = '1.130.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-configservice/types.rb

@@ -611,18 +611,36 @@ module Aws::ConfigService
     #   @return [Time]
     #
     # @!attribute [rw] configuration
-    #   The description of the resource configuration.
+    #   A JSON-encoded string that contains the contents for the resource
+    #   configuration. This string needs to be deserialized using
+    #   `json.loads()` before you can access the contents.
     #   @return [String]
     #
     # @!attribute [rw] supplementary_configuration
-    #   Configuration attributes that Config returns for certain resource
-    #   types to supplement the information returned for the configuration
-    #   parameter.
+    #   A string to string map that contains additional contents for the
+    #   resource configuration.Config returns this field for certain
+    #   resource types to supplement the information returned for the
+    #   `configuration` field.
+    #
+    #   This string needs to be deserialized using `json.loads()` before you
+    #   can access the contents.
     #   @return [Hash<String,String>]
     #
     # @!attribute [rw] recording_frequency
     #   The recording frequency that Config uses to record configuration
     #   changes for the resource.
+    #
+    #   <note markdown="1"> This field only appears in the API response when `DAILY` recording
+    #   is enabled for a resource type. If this field is not present,
+    #   `CONTINUOUS` recording is enabled for that resource type. For more
+    #   information on daily recording and continuous recording, see
+    #   [Recording Frequency][1] in the *Config Developer Guide*.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html#select-resources-recording-frequency
     #   @return [String]
     #
     # @!attribute [rw] configuration_item_delivery_time
@@ -1001,10 +1019,6 @@ module Aws::ConfigService
     #   an evaluation for the rule. If you do not specify a scope,
     #   evaluations are triggered when any resource in the recording group
     #   changes.
-    #
-    #   <note markdown="1"> The scope can be empty.
-    #
-    #    </note>
     #   @return [Types::Scope]
     #
     # @!attribute [rw] source
@@ -1490,18 +1504,36 @@ module Aws::ConfigService
     #   @return [Array<Types::Relationship>]
     #
     # @!attribute [rw] configuration
-    #   The description of the resource configuration.
+    #   A JSON-encoded string that contains the contents for the resource
+    #   configuration. This string needs to be deserialized using
+    #   `json.loads()` before you can access the contents.
     #   @return [String]
     #
     # @!attribute [rw] supplementary_configuration
-    #   Configuration attributes that Config returns for certain resource
-    #   types to supplement the information returned for the `configuration`
-    #   parameter.
+    #   A string to string map that contains additional contents for the
+    #   resource configuration.Config returns this field for certain
+    #   resource types to supplement the information returned for the
+    #   `configuration` field.
+    #
+    #   This string to string map needs to be deserialized using
+    #   `json.loads()` before you can accessing the contents.
     #   @return [Hash<String,String>]
     #
     # @!attribute [rw] recording_frequency
     #   The recording frequency that Config uses to record configuration
     #   changes for the resource.
+    #
+    #   <note markdown="1"> This field only appears in the API response when `DAILY` recording
+    #   is enabled for a resource type. If this field is not present,
+    #   `CONTINUOUS` recording is enabled for that resource type. For more
+    #   information on daily recording and continuous recording, see
+    #   [Recording Frequency][1] in the *Config Developer Guide*.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html#select-resources-recording-frequency
     #   @return [String]
     #
     # @!attribute [rw] configuration_item_delivery_time
@@ -1511,9 +1543,10 @@ module Aws::ConfigService
     #   configuration item (CI). If you are using daily recording, this
     #   field will be populated. However, if you are using continuous
     #   recording, this field will be omitted since the delivery time is
-    #   instantaneous as the CI is available right away. For more
-    #   information on daily recording and continuous recording, see
-    #   [Recording Frequency][1] in the *Config Developer Guide*.
+    #   instantaneous as the CI is available right away.
+    #
+    #    For more information on daily recording and continuous recording,
+    #   see [Recording Frequency][1] in the *Config Developer Guide*.
     #
     #    </note>
     #
@@ -1572,8 +1605,8 @@ module Aws::ConfigService
     #   recorder if you do not specify a name at creation time.
     #
     #   For service-linked configuration recorders, Config automatically
-    #   assigns a name that has the prefix "`AWS`" to a new service-linked
-    #   configuration recorder.
+    #   assigns a name that has the prefix "`AWSConfigurationRecorderFor`"
+    #   to a new service-linked configuration recorder.
     #
     #   <note markdown="1"> **Changing the name of a configuration recorder**
     #
@@ -5088,8 +5121,8 @@ module Aws::ConfigService
     # The output for the GetResourceConfigHistory action.
     #
     # @!attribute [rw] configuration_items
-    #   A list that contains the configuration history of one or more
-    #   resources.
+    #   An array of `ConfigurationItems` Objects. Contatins the
+    #   configuration history for one or more resources.
     #   @return [Array<Types::ConfigurationItem>]
     #
     # @!attribute [rw] next_token
@@ -5268,8 +5301,9 @@ module Aws::ConfigService
     #
     class InsufficientPermissionsException < Aws::EmptyStructure; end
 
-    # You have provided a name for the customer managed configuration
-    # recorder that is not valid.
+    # The configuration recorder name is not valid. The prefix
+    # "`AWSConfigurationRecorderFor`" is reserved for service-linked
+    # configuration recorders.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidConfigurationRecorderNameException AWS API Documentation
     #
@@ -7016,7 +7050,7 @@ module Aws::ConfigService
     #   @return [String]
     #
     # @!attribute [rw] template_body
-    #   A string containing the full conformance pack template body. The
+    #   A string that contains the full conformance pack template body. The
     #   structure containing the template body has a minimum length of 1
     #   byte and a maximum length of 51,200 bytes.
     #
@@ -7245,9 +7279,9 @@ module Aws::ConfigService
     #   @return [String]
     #
     # @!attribute [rw] template_body
-    #   A string containing full conformance pack template body. Structure
-    #   containing the template body with a minimum length of 1 byte and a
-    #   maximum length of 51,200 bytes.
+    #   A string that contains the full conformance pack template body.
+    #   Structure containing the template body with a minimum length of 1
+    #   byte and a maximum length of 51,200 bytes.
     #   @return [String]
     #
     # @!attribute [rw] delivery_s3_bucket
@@ -7484,8 +7518,8 @@ module Aws::ConfigService
     #   The name of the specified configuration recorder.
     #
     #   For service-linked configuration recorders, Config automatically
-    #   assigns a name that has the prefix "`AWS`" to the new
-    #   service-linked configuration recorder.
+    #   assigns a name that has the prefix "`AWSConfigurationRecorderFor`"
+    #   to the new service-linked configuration recorder.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutServiceLinkedConfigurationRecorderResponse AWS API Documentation

data/lib/aws-sdk-configservice.rb

@@ -54,7 +54,7 @@ module Aws::ConfigService
   autoload :EndpointProvider, 'aws-sdk-configservice/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-configservice/endpoints'
 
-  GEM_VERSION = '1.129.0'
+  GEM_VERSION = '1.130.0'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-configservice
 version: !ruby/object:Gem::Version
-  version: 1.129.0
+  version: 1.130.0
 platform: ruby
 authors:
 - Amazon Web Services