aws-sdk-configservice 1.152.0 → 1.154.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cb762b6f0f1fcadf0f865143842223cbdacedc39a9f909e9ce5e74053d693351
-  data.tar.gz: cc86a42483b4dfdd841b46e7eeb938e0a8e1057bc68c679fb3daec7d6aff3c80
+  metadata.gz: d32fb85edb6e2d97b9ef68bf3fb52077d98df82393241d4db6c9cf0a86d1cca3
+  data.tar.gz: e6cddcbd5e35c440ab8faccd3b8d1dc5dd5f656ae1571464ae591188b4d69076
 SHA512:
-  metadata.gz: b82e099af7fb5b5623e3885fe7df2e13650d79348589146caaea295f2015595878efcc950654732305ea47fe37e966f38c9bb5d90354873ff7f1cd5eaa0b8cdf
-  data.tar.gz: 83dd727cf167d32079d484bc41f4a2ad5a267aa545be94aa55fb913a1383b0097159485a24d1cf815c2940f6b1b29cf6b945a9b11ebef970b1e13a2bde7ef638
+  metadata.gz: 9e2263c4d20b959c5733afb5ab457acb4d9f2fb4586f257edf8cbc23adcec1e012901b3d9a95609dd72a51f9f41a2bbc937205a8ae59803ae0dcfbc39717c7f0
+  data.tar.gz: c657fd23b8abf75444e4d0b5494669cbeca2806b0166be4b4c7fb2df6162ec3369cae482b4ad0c03af69ee5909654138b24c8a1f02d3fcb02c5771daef5a72dc

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.154.0 (2026-07-02)
+------------------
+
+* Feature - AWS Config now supports tag-on-create for organization-managed Config rules and conformance packs through the PutOrganizationConfigRule and PutOrganizationConformancePack APIs.
+
+1.153.0 (2026-06-04)
+------------------
+
+* Feature - AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features.
+
 1.152.0 (2026-06-01)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.152.0
+1.154.0

data/lib/aws-sdk-configservice/client.rb

@@ -1739,6 +1739,7 @@ module Aws::ConfigService
     #     next_token: "String",
     #     filters: {
     #       evaluation_mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
+    #       rule_evaluation_visibility: "EXTERNAL", # accepts EXTERNAL, INTERNAL
     #     },
     #   })
     #
@@ -1754,6 +1755,8 @@ module Aws::ConfigService
     #   resp.config_rules[0].scope.tag_key #=> String
     #   resp.config_rules[0].scope.tag_value #=> String
     #   resp.config_rules[0].scope.compliance_resource_id #=> String
+    #   resp.config_rules[0].scope.service_principals #=> Array
+    #   resp.config_rules[0].scope.service_principals[0] #=> String
     #   resp.config_rules[0].source.owner #=> String, one of "CUSTOM_LAMBDA", "AWS", "CUSTOM_POLICY"
     #   resp.config_rules[0].source.source_identifier #=> String
     #   resp.config_rules[0].source.source_details #=> Array
@@ -1769,6 +1772,7 @@ module Aws::ConfigService
     #   resp.config_rules[0].created_by #=> String
     #   resp.config_rules[0].evaluation_modes #=> Array
     #   resp.config_rules[0].evaluation_modes[0].mode #=> String, one of "DETECTIVE", "PROACTIVE"
+    #   resp.config_rules[0].rule_evaluation_visibility #=> String, one of "EXTERNAL", "INTERNAL"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/DescribeConfigRules AWS API Documentation
@@ -4750,6 +4754,7 @@ module Aws::ConfigService
     #         tag_key: "StringWithCharLimit128",
     #         tag_value: "StringWithCharLimit256",
     #         compliance_resource_id: "BaseResourceId",
+    #         service_principals: ["StringWithCharLimit128"],
     #       },
     #       source: { # required
     #         owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
@@ -4776,6 +4781,7 @@ module Aws::ConfigService
     #           mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
     #         },
     #       ],
+    #       rule_evaluation_visibility: "EXTERNAL", # accepts EXTERNAL, INTERNAL
     #     },
     #     tags: [
     #       {
@@ -5429,6 +5435,10 @@ module Aws::ConfigService
     #   organization trigger types that initiate Config to evaluate Amazon Web
     #   Services resources against a rule.
     #
+    # @option params [Array<Types::Tag>] :tags
+    #   The tags for the organization Config rule. Each tag consists of a key
+    #   and an optional value, both of which you define.
+    #
     # @return [Types::PutOrganizationConfigRuleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::PutOrganizationConfigRuleResponse#organization_config_rule_arn #organization_config_rule_arn} => String
@@ -5472,6 +5482,12 @@ module Aws::ConfigService
     #       policy_text: "PolicyText", # required
     #       debug_log_delivery_accounts: ["AccountId"],
     #     },
+    #     tags: [
+    #       {
+    #         key: "TagKey",
+    #         value: "TagValue",
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -5583,6 +5599,10 @@ module Aws::ConfigService
     #   A list of Amazon Web Services accounts to be excluded from an
     #   organization conformance pack while deploying a conformance pack.
     #
+    # @option params [Array<Types::Tag>] :tags
+    #   The tags for the organization conformance pack. Each tag consists of a
+    #   key and an optional value, both of which you define.
+    #
     # @return [Types::PutOrganizationConformancePackResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::PutOrganizationConformancePackResponse#organization_conformance_pack_arn #organization_conformance_pack_arn} => String
@@ -5602,6 +5622,12 @@ module Aws::ConfigService
     #       },
     #     ],
     #     excluded_accounts: ["AccountId"],
+    #     tags: [
+    #       {
+    #         key: "TagKey",
+    #         value: "TagValue",
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -6636,7 +6662,7 @@ module Aws::ConfigService
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-configservice'
-      context[:gem_version] = '1.152.0'
+      context[:gem_version] = '1.154.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-configservice/client_api.rb

@@ -534,6 +534,7 @@ module Aws::ConfigService
     RetentionConfigurationName = Shapes::StringShape.new(name: 'RetentionConfigurationName')
     RetentionConfigurationNameList = Shapes::ListShape.new(name: 'RetentionConfigurationNameList')
     RetentionPeriodInDays = Shapes::IntegerShape.new(name: 'RetentionPeriodInDays')
+    RuleEvaluationVisibility = Shapes::StringShape.new(name: 'RuleEvaluationVisibility')
     RuleLimit = Shapes::IntegerShape.new(name: 'RuleLimit')
     SSMDocumentName = Shapes::StringShape.new(name: 'SSMDocumentName')
     SSMDocumentVersion = Shapes::StringShape.new(name: 'SSMDocumentVersion')
@@ -546,6 +547,7 @@ module Aws::ConfigService
     ServicePrincipal = Shapes::StringShape.new(name: 'ServicePrincipal')
     ServicePrincipalValue = Shapes::StringShape.new(name: 'ServicePrincipalValue')
     ServicePrincipalValueList = Shapes::ListShape.new(name: 'ServicePrincipalValueList')
+    ServicePrincipals = Shapes::ListShape.new(name: 'ServicePrincipals')
     SortBy = Shapes::StringShape.new(name: 'SortBy')
     SortOrder = Shapes::StringShape.new(name: 'SortOrder')
     Source = Shapes::StructureShape.new(name: 'Source')
@@ -804,6 +806,7 @@ module Aws::ConfigService
     ConfigRule.add_member(:config_rule_state, Shapes::ShapeRef.new(shape: ConfigRuleState, location_name: "ConfigRuleState"))
     ConfigRule.add_member(:created_by, Shapes::ShapeRef.new(shape: StringWithCharLimit256, location_name: "CreatedBy"))
     ConfigRule.add_member(:evaluation_modes, Shapes::ShapeRef.new(shape: EvaluationModes, location_name: "EvaluationModes"))
+    ConfigRule.add_member(:rule_evaluation_visibility, Shapes::ShapeRef.new(shape: RuleEvaluationVisibility, location_name: "RuleEvaluationVisibility"))
     ConfigRule.struct_class = Types::ConfigRule
 
     ConfigRuleComplianceFilters.add_member(:config_rule_name, Shapes::ShapeRef.new(shape: ConfigRuleName, location_name: "ConfigRuleName"))
@@ -1175,6 +1178,7 @@ module Aws::ConfigService
     DescribeConfigRuleEvaluationStatusResponse.struct_class = Types::DescribeConfigRuleEvaluationStatusResponse
 
     DescribeConfigRulesFilters.add_member(:evaluation_mode, Shapes::ShapeRef.new(shape: EvaluationMode, location_name: "EvaluationMode"))
+    DescribeConfigRulesFilters.add_member(:rule_evaluation_visibility, Shapes::ShapeRef.new(shape: RuleEvaluationVisibility, location_name: "RuleEvaluationVisibility"))
     DescribeConfigRulesFilters.struct_class = Types::DescribeConfigRulesFilters
 
     DescribeConfigRulesRequest.add_member(:config_rule_names, Shapes::ShapeRef.new(shape: ConfigRuleNames, location_name: "ConfigRuleNames"))
@@ -1967,6 +1971,7 @@ module Aws::ConfigService
     PutOrganizationConfigRuleRequest.add_member(:organization_custom_rule_metadata, Shapes::ShapeRef.new(shape: OrganizationCustomRuleMetadata, location_name: "OrganizationCustomRuleMetadata"))
     PutOrganizationConfigRuleRequest.add_member(:excluded_accounts, Shapes::ShapeRef.new(shape: ExcludedAccounts, location_name: "ExcludedAccounts"))
     PutOrganizationConfigRuleRequest.add_member(:organization_custom_policy_rule_metadata, Shapes::ShapeRef.new(shape: OrganizationCustomPolicyRuleMetadata, location_name: "OrganizationCustomPolicyRuleMetadata"))
+    PutOrganizationConfigRuleRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagsList, location_name: "Tags"))
     PutOrganizationConfigRuleRequest.struct_class = Types::PutOrganizationConfigRuleRequest
 
     PutOrganizationConfigRuleResponse.add_member(:organization_config_rule_arn, Shapes::ShapeRef.new(shape: StringWithCharLimit256, location_name: "OrganizationConfigRuleArn"))
@@ -1979,6 +1984,7 @@ module Aws::ConfigService
     PutOrganizationConformancePackRequest.add_member(:delivery_s3_key_prefix, Shapes::ShapeRef.new(shape: DeliveryS3KeyPrefix, location_name: "DeliveryS3KeyPrefix"))
     PutOrganizationConformancePackRequest.add_member(:conformance_pack_input_parameters, Shapes::ShapeRef.new(shape: ConformancePackInputParameters, location_name: "ConformancePackInputParameters"))
     PutOrganizationConformancePackRequest.add_member(:excluded_accounts, Shapes::ShapeRef.new(shape: ExcludedAccounts, location_name: "ExcludedAccounts"))
+    PutOrganizationConformancePackRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagsList, location_name: "Tags"))
     PutOrganizationConformancePackRequest.struct_class = Types::PutOrganizationConformancePackRequest
 
     PutOrganizationConformancePackResponse.add_member(:organization_conformance_pack_arn, Shapes::ShapeRef.new(shape: StringWithCharLimit256, location_name: "OrganizationConformancePackArn"))
@@ -2211,6 +2217,7 @@ module Aws::ConfigService
     Scope.add_member(:tag_key, Shapes::ShapeRef.new(shape: StringWithCharLimit128, location_name: "TagKey"))
     Scope.add_member(:tag_value, Shapes::ShapeRef.new(shape: StringWithCharLimit256, location_name: "TagValue"))
     Scope.add_member(:compliance_resource_id, Shapes::ShapeRef.new(shape: BaseResourceId, location_name: "ComplianceResourceId"))
+    Scope.add_member(:service_principals, Shapes::ShapeRef.new(shape: ServicePrincipals, location_name: "ServicePrincipals"))
     Scope.struct_class = Types::Scope
 
     SelectAggregateResourceConfigRequest.add_member(:expression, Shapes::ShapeRef.new(shape: Expression, required: true, location_name: "Expression"))
@@ -2237,6 +2244,8 @@ module Aws::ConfigService
 
     ServicePrincipalValueList.member = Shapes::ShapeRef.new(shape: ServicePrincipalValue)
 
+    ServicePrincipals.member = Shapes::ShapeRef.new(shape: StringWithCharLimit128)
+
     Source.add_member(:owner, Shapes::ShapeRef.new(shape: Owner, required: true, location_name: "Owner"))
     Source.add_member(:source_identifier, Shapes::ShapeRef.new(shape: StringWithCharLimit256, location_name: "SourceIdentifier"))
     Source.add_member(:source_details, Shapes::ShapeRef.new(shape: SourceDetails, location_name: "SourceDetails"))

data/lib/aws-sdk-configservice/types.rb

@@ -1086,6 +1086,13 @@ module Aws::ConfigService
     #   only.
     #   @return [Array<Types::EvaluationModeConfiguration>]
     #
+    # @!attribute [rw] rule_evaluation_visibility
+    #   Indicates whether you can get Evaluations for the Config rule. You
+    #   can get Evaluations for the Amazon Web Services Config rule if this
+    #   value is `EXTERNAL`. You cannot get Evaluations for the Amazon Web
+    #   Services Config rule if this value is `INTERNAL`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConfigRule AWS API Documentation
     #
     class ConfigRule < Struct.new(
@@ -1099,7 +1106,8 @@ module Aws::ConfigService
       :maximum_execution_frequency,
       :config_rule_state,
       :created_by,
-      :evaluation_modes)
+      :evaluation_modes,
+      :rule_evaluation_visibility)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3034,10 +3042,15 @@ module Aws::ConfigService
     #   Proactive.
     #   @return [String]
     #
+    # @!attribute [rw] rule_evaluation_visibility
+    #   Filters the results by `RuleEvaluationVisibility`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/DescribeConfigRulesFilters AWS API Documentation
     #
     class DescribeConfigRulesFilters < Struct.new(
-      :evaluation_mode)
+      :evaluation_mode,
+      :rule_evaluation_visibility)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7245,6 +7258,11 @@ module Aws::ConfigService
     #   Amazon Web Services resources against a rule.
     #   @return [Types::OrganizationCustomPolicyRuleMetadata]
     #
+    # @!attribute [rw] tags
+    #   The tags for the organization Config rule. Each tag consists of a
+    #   key and an optional value, both of which you define.
+    #   @return [Array<Types::Tag>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutOrganizationConfigRuleRequest AWS API Documentation
     #
     class PutOrganizationConfigRuleRequest < Struct.new(
@@ -7252,7 +7270,8 @@ module Aws::ConfigService
       :organization_managed_rule_metadata,
       :organization_custom_rule_metadata,
       :excluded_accounts,
-      :organization_custom_policy_rule_metadata)
+      :organization_custom_policy_rule_metadata,
+      :tags)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7321,6 +7340,11 @@ module Aws::ConfigService
     #   organization conformance pack while deploying a conformance pack.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] tags
+    #   The tags for the organization conformance pack. Each tag consists of
+    #   a key and an optional value, both of which you define.
+    #   @return [Array<Types::Tag>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutOrganizationConformancePackRequest AWS API Documentation
     #
     class PutOrganizationConformancePackRequest < Struct.new(
@@ -7330,7 +7354,8 @@ module Aws::ConfigService
       :delivery_s3_bucket,
       :delivery_s3_key_prefix,
       :conformance_pack_input_parameters,
-      :excluded_accounts)
+      :excluded_accounts,
+      :tags)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8736,13 +8761,24 @@ module Aws::ConfigService
     #   you must specify one resource type for `ComplianceResourceTypes`.
     #   @return [String]
     #
+    # @!attribute [rw] service_principals
+    #   The service principals of the Amazon Web Services services for the
+    #   rule.
+    #
+    #   <note markdown="1"> The field is populated only if the service-linked rule is created by
+    #   a service. The field is empty if you create your own rule.
+    #
+    #    </note>
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/Scope AWS API Documentation
     #
     class Scope < Struct.new(
       :compliance_resource_types,
       :tag_key,
       :tag_value,
-      :compliance_resource_id)
+      :compliance_resource_id,
+      :service_principals)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-configservice.rb

@@ -54,7 +54,7 @@ module Aws::ConfigService
   autoload :EndpointProvider, 'aws-sdk-configservice/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-configservice/endpoints'
 
-  GEM_VERSION = '1.152.0'
+  GEM_VERSION = '1.154.0'
 
 end
 

data/sig/client.rbs

@@ -361,7 +361,8 @@ module Aws
                                    ?config_rule_names: Array[::String],
                                    ?next_token: ::String,
                                    ?filters: {
-                                     evaluation_mode: ("DETECTIVE" | "PROACTIVE")?
+                                     evaluation_mode: ("DETECTIVE" | "PROACTIVE")?,
+                                     rule_evaluation_visibility: ("EXTERNAL" | "INTERNAL")?
                                    }
                                  ) -> _DescribeConfigRulesResponseSuccess
                                | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeConfigRulesResponseSuccess
@@ -1044,7 +1045,8 @@ module Aws
                                  compliance_resource_types: Array[::String]?,
                                  tag_key: ::String?,
                                  tag_value: ::String?,
-                                 compliance_resource_id: ::String?
+                                 compliance_resource_id: ::String?,
+                                 service_principals: Array[::String]?
                                }?,
                                source: {
                                  owner: ("CUSTOM_LAMBDA" | "AWS" | "CUSTOM_POLICY"),
@@ -1070,7 +1072,8 @@ module Aws
                                  {
                                    mode: ("DETECTIVE" | "PROACTIVE")?
                                  }
-                               ]?
+                               ]?,
+                               rule_evaluation_visibility: ("EXTERNAL" | "INTERNAL")?
                              },
                              ?tags: Array[
                                {
@@ -1280,7 +1283,13 @@ module Aws
                                             policy_runtime: ::String,
                                             policy_text: ::String,
                                             debug_log_delivery_accounts: Array[::String]?
-                                          }
+                                          },
+                                          ?tags: Array[
+                                            {
+                                              key: ::String?,
+                                              value: ::String?
+                                            }
+                                          ]
                                         ) -> _PutOrganizationConfigRuleResponseSuccess
                                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutOrganizationConfigRuleResponseSuccess
 
@@ -1301,7 +1310,13 @@ module Aws
                                                    parameter_value: ::String
                                                  }
                                                ],
-                                               ?excluded_accounts: Array[::String]
+                                               ?excluded_accounts: Array[::String],
+                                               ?tags: Array[
+                                                 {
+                                                   key: ::String?,
+                                                   value: ::String?
+                                                 }
+                                               ]
                                              ) -> _PutOrganizationConformancePackResponseSuccess
                                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutOrganizationConformancePackResponseSuccess
 

data/sig/types.rbs

@@ -242,6 +242,7 @@ module Aws::ConfigService
       attr_accessor config_rule_state: ("ACTIVE" | "DELETING" | "DELETING_RESULTS" | "EVALUATING")
       attr_accessor created_by: ::String
       attr_accessor evaluation_modes: ::Array[Types::EvaluationModeConfiguration]
+      attr_accessor rule_evaluation_visibility: ("EXTERNAL" | "INTERNAL")
       SENSITIVE: []
     end
 
@@ -674,6 +675,7 @@ module Aws::ConfigService
 
     class DescribeConfigRulesFilters
       attr_accessor evaluation_mode: ("DETECTIVE" | "PROACTIVE")
+      attr_accessor rule_evaluation_visibility: ("EXTERNAL" | "INTERNAL")
       SENSITIVE: []
     end
 
@@ -1736,6 +1738,7 @@ module Aws::ConfigService
       attr_accessor organization_custom_rule_metadata: Types::OrganizationCustomRuleMetadata
       attr_accessor excluded_accounts: ::Array[::String]
       attr_accessor organization_custom_policy_rule_metadata: Types::OrganizationCustomPolicyRuleMetadata
+      attr_accessor tags: ::Array[Types::Tag]
       SENSITIVE: []
     end
 
@@ -1752,6 +1755,7 @@ module Aws::ConfigService
       attr_accessor delivery_s3_key_prefix: ::String
       attr_accessor conformance_pack_input_parameters: ::Array[Types::ConformancePackInputParameter]
       attr_accessor excluded_accounts: ::Array[::String]
+      attr_accessor tags: ::Array[Types::Tag]
       SENSITIVE: []
     end
 
@@ -2011,6 +2015,7 @@ module Aws::ConfigService
       attr_accessor tag_key: ::String
       attr_accessor tag_value: ::String
       attr_accessor compliance_resource_id: ::String
+      attr_accessor service_principals: ::Array[::String]
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-configservice
 version: !ruby/object:Gem::Version
-  version: 1.152.0
+  version: 1.154.0
 platform: ruby
 authors:
 - Amazon Web Services