aws-sdk-configservice 1.73.0 → 1.76.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +15 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-configservice/client.rb +161 -55
- data/lib/aws-sdk-configservice/client_api.rb +84 -1
- data/lib/aws-sdk-configservice/types.rb +533 -117
- data/lib/aws-sdk-configservice.rb +1 -1
- metadata +4 -4
|
@@ -356,7 +356,7 @@ module Aws::ConfigService
|
|
|
356
356
|
# source_account_id: "AccountId", # required
|
|
357
357
|
# source_region: "AwsRegion", # required
|
|
358
358
|
# resource_id: "ResourceId", # required
|
|
359
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
359
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
360
360
|
# resource_name: "ResourceName",
|
|
361
361
|
# }
|
|
362
362
|
#
|
|
@@ -585,7 +585,7 @@ module Aws::ConfigService
|
|
|
585
585
|
# source_account_id: "AccountId", # required
|
|
586
586
|
# source_region: "AwsRegion", # required
|
|
587
587
|
# resource_id: "ResourceId", # required
|
|
588
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
588
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
589
589
|
# resource_name: "ResourceName",
|
|
590
590
|
# },
|
|
591
591
|
# ],
|
|
@@ -633,7 +633,7 @@ module Aws::ConfigService
|
|
|
633
633
|
# {
|
|
634
634
|
# resource_keys: [ # required
|
|
635
635
|
# {
|
|
636
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
636
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
637
637
|
# resource_id: "ResourceId", # required
|
|
638
638
|
# },
|
|
639
639
|
# ],
|
|
@@ -915,8 +915,8 @@ module Aws::ConfigService
|
|
|
915
915
|
# compliance_resource_id: "BaseResourceId",
|
|
916
916
|
# },
|
|
917
917
|
# source: { # required
|
|
918
|
-
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS
|
|
919
|
-
# source_identifier: "StringWithCharLimit256",
|
|
918
|
+
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
|
|
919
|
+
# source_identifier: "StringWithCharLimit256",
|
|
920
920
|
# source_details: [
|
|
921
921
|
# {
|
|
922
922
|
# event_source: "aws.config", # accepts aws.config
|
|
@@ -924,6 +924,11 @@ module Aws::ConfigService
|
|
|
924
924
|
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
925
925
|
# },
|
|
926
926
|
# ],
|
|
927
|
+
# custom_policy_details: {
|
|
928
|
+
# policy_runtime: "PolicyRuntime", # required
|
|
929
|
+
# policy_text: "PolicyText", # required
|
|
930
|
+
# enable_debug_log_delivery: false,
|
|
931
|
+
# },
|
|
927
932
|
# },
|
|
928
933
|
# input_parameters: "StringWithCharLimit1024",
|
|
929
934
|
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
@@ -1107,12 +1112,13 @@ module Aws::ConfigService
|
|
|
1107
1112
|
include Aws::Structure
|
|
1108
1113
|
end
|
|
1109
1114
|
|
|
1110
|
-
# Status information for your Config
|
|
1111
|
-
#
|
|
1112
|
-
# failed, and the related error for the
|
|
1115
|
+
# Status information for your Config Managed rules and Config Custom
|
|
1116
|
+
# Policy rules. The status includes information such as the last time
|
|
1117
|
+
# the rule ran, the last time it failed, and the related error for the
|
|
1118
|
+
# last failure.
|
|
1113
1119
|
#
|
|
1114
|
-
# This action does not return status information about
|
|
1115
|
-
# rules.
|
|
1120
|
+
# This action does not return status information about Config Custom
|
|
1121
|
+
# Lambda rules.
|
|
1116
1122
|
#
|
|
1117
1123
|
# @!attribute [rw] config_rule_name
|
|
1118
1124
|
# The name of the Config rule.
|
|
@@ -1169,10 +1175,26 @@ module Aws::ConfigService
|
|
|
1169
1175
|
# * `true` - Config has evaluated your Amazon Web Services resources
|
|
1170
1176
|
# against the rule at least once.
|
|
1171
1177
|
#
|
|
1172
|
-
# * `false` - Config has not
|
|
1173
|
-
# Services resources against the rule.
|
|
1178
|
+
# * `false` - Config has not finished evaluating your Amazon Web
|
|
1179
|
+
# Services resources against the rule at least once.
|
|
1174
1180
|
# @return [Boolean]
|
|
1175
1181
|
#
|
|
1182
|
+
# @!attribute [rw] last_debug_log_delivery_status
|
|
1183
|
+
# The status of the last attempted delivery of a debug log for your
|
|
1184
|
+
# Config Custom Policy rules. Either `Successful` or `Failed`.
|
|
1185
|
+
# @return [String]
|
|
1186
|
+
#
|
|
1187
|
+
# @!attribute [rw] last_debug_log_delivery_status_reason
|
|
1188
|
+
# The reason Config was not able to deliver a debug log. This is for
|
|
1189
|
+
# the last failed attempt to retrieve a debug log for your Config
|
|
1190
|
+
# Custom Policy rules.
|
|
1191
|
+
# @return [String]
|
|
1192
|
+
#
|
|
1193
|
+
# @!attribute [rw] last_debug_log_delivery_time
|
|
1194
|
+
# The time Config last attempted to deliver a debug log for your
|
|
1195
|
+
# Config Custom Policy rules.
|
|
1196
|
+
# @return [Time]
|
|
1197
|
+
#
|
|
1176
1198
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConfigRuleEvaluationStatus AWS API Documentation
|
|
1177
1199
|
#
|
|
1178
1200
|
class ConfigRuleEvaluationStatus < Struct.new(
|
|
@@ -1187,7 +1209,10 @@ module Aws::ConfigService
|
|
|
1187
1209
|
:last_deactivated_time,
|
|
1188
1210
|
:last_error_code,
|
|
1189
1211
|
:last_error_message,
|
|
1190
|
-
:first_evaluation_started
|
|
1212
|
+
:first_evaluation_started,
|
|
1213
|
+
:last_debug_log_delivery_status,
|
|
1214
|
+
:last_debug_log_delivery_status_reason,
|
|
1215
|
+
:last_debug_log_delivery_time)
|
|
1191
1216
|
SENSITIVE = []
|
|
1192
1217
|
include Aws::Structure
|
|
1193
1218
|
end
|
|
@@ -1485,7 +1510,7 @@ module Aws::ConfigService
|
|
|
1485
1510
|
# recording_group: {
|
|
1486
1511
|
# all_supported: false,
|
|
1487
1512
|
# include_global_resource_types: false,
|
|
1488
|
-
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
1513
|
+
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
1489
1514
|
# },
|
|
1490
1515
|
# }
|
|
1491
1516
|
#
|
|
@@ -1798,7 +1823,7 @@ module Aws::ConfigService
|
|
|
1798
1823
|
# compliance types.
|
|
1799
1824
|
#
|
|
1800
1825
|
# @!attribute [rw] config_rule_name
|
|
1801
|
-
# Name of the
|
|
1826
|
+
# Name of the Config rule.
|
|
1802
1827
|
# @return [String]
|
|
1803
1828
|
#
|
|
1804
1829
|
# @!attribute [rw] compliance_type
|
|
@@ -1897,6 +1922,50 @@ module Aws::ConfigService
|
|
|
1897
1922
|
#
|
|
1898
1923
|
class ConformancePackTemplateValidationException < Aws::EmptyStructure; end
|
|
1899
1924
|
|
|
1925
|
+
# Provides the runtime system, policy definition, and whether debug
|
|
1926
|
+
# logging enabled. You can specify the following CustomPolicyDetails
|
|
1927
|
+
# parameter values only for Config Custom Policy rules.
|
|
1928
|
+
#
|
|
1929
|
+
# @note When making an API call, you may pass CustomPolicyDetails
|
|
1930
|
+
# data as a hash:
|
|
1931
|
+
#
|
|
1932
|
+
# {
|
|
1933
|
+
# policy_runtime: "PolicyRuntime", # required
|
|
1934
|
+
# policy_text: "PolicyText", # required
|
|
1935
|
+
# enable_debug_log_delivery: false,
|
|
1936
|
+
# }
|
|
1937
|
+
#
|
|
1938
|
+
# @!attribute [rw] policy_runtime
|
|
1939
|
+
# The runtime system for your Config Custom Policy rule. Guard is a
|
|
1940
|
+
# policy-as-code language that allows you to write policies that are
|
|
1941
|
+
# enforced by Config Custom Policy rules. For more information about
|
|
1942
|
+
# Guard, see the [Guard GitHub Repository][1].
|
|
1943
|
+
#
|
|
1944
|
+
#
|
|
1945
|
+
#
|
|
1946
|
+
# [1]: https://github.com/aws-cloudformation/cloudformation-guard
|
|
1947
|
+
# @return [String]
|
|
1948
|
+
#
|
|
1949
|
+
# @!attribute [rw] policy_text
|
|
1950
|
+
# The policy definition containing the logic for your Config Custom
|
|
1951
|
+
# Policy rule.
|
|
1952
|
+
# @return [String]
|
|
1953
|
+
#
|
|
1954
|
+
# @!attribute [rw] enable_debug_log_delivery
|
|
1955
|
+
# The boolean expression for enabling debug logging for your Config
|
|
1956
|
+
# Custom Policy rule. The default value is `false`.
|
|
1957
|
+
# @return [Boolean]
|
|
1958
|
+
#
|
|
1959
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/CustomPolicyDetails AWS API Documentation
|
|
1960
|
+
#
|
|
1961
|
+
class CustomPolicyDetails < Struct.new(
|
|
1962
|
+
:policy_runtime,
|
|
1963
|
+
:policy_text,
|
|
1964
|
+
:enable_debug_log_delivery)
|
|
1965
|
+
SENSITIVE = []
|
|
1966
|
+
include Aws::Structure
|
|
1967
|
+
end
|
|
1968
|
+
|
|
1900
1969
|
# @note When making an API call, you may pass DeleteAggregationAuthorizationRequest
|
|
1901
1970
|
# data as a hash:
|
|
1902
1971
|
#
|
|
@@ -2059,7 +2128,7 @@ module Aws::ConfigService
|
|
|
2059
2128
|
# }
|
|
2060
2129
|
#
|
|
2061
2130
|
# @!attribute [rw] organization_config_rule_name
|
|
2062
|
-
# The name of organization
|
|
2131
|
+
# The name of organization Config rule that you want to delete.
|
|
2063
2132
|
# @return [String]
|
|
2064
2133
|
#
|
|
2065
2134
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/DeleteOrganizationConfigRuleRequest AWS API Documentation
|
|
@@ -3254,7 +3323,7 @@ module Aws::ConfigService
|
|
|
3254
3323
|
# }
|
|
3255
3324
|
#
|
|
3256
3325
|
# @!attribute [rw] organization_config_rule_names
|
|
3257
|
-
# The names of organization
|
|
3326
|
+
# The names of organization Config rules for which you want status
|
|
3258
3327
|
# details. If you do not specify any names, Config returns details for
|
|
3259
3328
|
# all your organization Config rules.
|
|
3260
3329
|
# @return [Array<String>]
|
|
@@ -3308,13 +3377,13 @@ module Aws::ConfigService
|
|
|
3308
3377
|
# }
|
|
3309
3378
|
#
|
|
3310
3379
|
# @!attribute [rw] organization_config_rule_names
|
|
3311
|
-
# The names of organization
|
|
3380
|
+
# The names of organization Config rules for which you want details.
|
|
3312
3381
|
# If you do not specify any names, Config returns details for all your
|
|
3313
|
-
# organization
|
|
3382
|
+
# organization Config rules.
|
|
3314
3383
|
# @return [Array<String>]
|
|
3315
3384
|
#
|
|
3316
3385
|
# @!attribute [rw] limit
|
|
3317
|
-
# The maximum number of organization
|
|
3386
|
+
# The maximum number of organization Config rules returned on each
|
|
3318
3387
|
# page. If you do no specify a number, Config uses the default. The
|
|
3319
3388
|
# default is 100.
|
|
3320
3389
|
# @return [Integer]
|
|
@@ -3607,7 +3676,7 @@ module Aws::ConfigService
|
|
|
3607
3676
|
# config_rule_name: "ConfigRuleName", # required
|
|
3608
3677
|
# resource_keys: [
|
|
3609
3678
|
# {
|
|
3610
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
3679
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
3611
3680
|
# resource_id: "ResourceId", # required
|
|
3612
3681
|
# },
|
|
3613
3682
|
# ],
|
|
@@ -4269,7 +4338,7 @@ module Aws::ConfigService
|
|
|
4269
4338
|
# {
|
|
4270
4339
|
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
4271
4340
|
# filters: {
|
|
4272
|
-
# resource_type: "AWS::EC2::CustomerGateway", # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
4341
|
+
# resource_type: "AWS::EC2::CustomerGateway", # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
4273
4342
|
# account_id: "AccountId",
|
|
4274
4343
|
# region: "AwsRegion",
|
|
4275
4344
|
# },
|
|
@@ -4352,7 +4421,7 @@ module Aws::ConfigService
|
|
|
4352
4421
|
# source_account_id: "AccountId", # required
|
|
4353
4422
|
# source_region: "AwsRegion", # required
|
|
4354
4423
|
# resource_id: "ResourceId", # required
|
|
4355
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
4424
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
4356
4425
|
# resource_name: "ResourceName",
|
|
4357
4426
|
# },
|
|
4358
4427
|
# }
|
|
@@ -4683,6 +4752,38 @@ module Aws::ConfigService
|
|
|
4683
4752
|
include Aws::Structure
|
|
4684
4753
|
end
|
|
4685
4754
|
|
|
4755
|
+
# @note When making an API call, you may pass GetCustomRulePolicyRequest
|
|
4756
|
+
# data as a hash:
|
|
4757
|
+
#
|
|
4758
|
+
# {
|
|
4759
|
+
# config_rule_name: "ConfigRuleName",
|
|
4760
|
+
# }
|
|
4761
|
+
#
|
|
4762
|
+
# @!attribute [rw] config_rule_name
|
|
4763
|
+
# The name of your Config Custom Policy rule.
|
|
4764
|
+
# @return [String]
|
|
4765
|
+
#
|
|
4766
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/GetCustomRulePolicyRequest AWS API Documentation
|
|
4767
|
+
#
|
|
4768
|
+
class GetCustomRulePolicyRequest < Struct.new(
|
|
4769
|
+
:config_rule_name)
|
|
4770
|
+
SENSITIVE = []
|
|
4771
|
+
include Aws::Structure
|
|
4772
|
+
end
|
|
4773
|
+
|
|
4774
|
+
# @!attribute [rw] policy_text
|
|
4775
|
+
# The policy definition containing the logic for your Config Custom
|
|
4776
|
+
# Policy rule.
|
|
4777
|
+
# @return [String]
|
|
4778
|
+
#
|
|
4779
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/GetCustomRulePolicyResponse AWS API Documentation
|
|
4780
|
+
#
|
|
4781
|
+
class GetCustomRulePolicyResponse < Struct.new(
|
|
4782
|
+
:policy_text)
|
|
4783
|
+
SENSITIVE = []
|
|
4784
|
+
include Aws::Structure
|
|
4785
|
+
end
|
|
4786
|
+
|
|
4686
4787
|
# @note When making an API call, you may pass GetDiscoveredResourceCountsRequest
|
|
4687
4788
|
# data as a hash:
|
|
4688
4789
|
#
|
|
@@ -4783,7 +4884,7 @@ module Aws::ConfigService
|
|
|
4783
4884
|
# }
|
|
4784
4885
|
#
|
|
4785
4886
|
# @!attribute [rw] organization_config_rule_name
|
|
4786
|
-
# The name of organization
|
|
4887
|
+
# The name of your organization Config rule for which you want status
|
|
4787
4888
|
# details for member accounts.
|
|
4788
4889
|
# @return [String]
|
|
4789
4890
|
#
|
|
@@ -4893,13 +4994,45 @@ module Aws::ConfigService
|
|
|
4893
4994
|
include Aws::Structure
|
|
4894
4995
|
end
|
|
4895
4996
|
|
|
4997
|
+
# @note When making an API call, you may pass GetOrganizationCustomRulePolicyRequest
|
|
4998
|
+
# data as a hash:
|
|
4999
|
+
#
|
|
5000
|
+
# {
|
|
5001
|
+
# organization_config_rule_name: "OrganizationConfigRuleName", # required
|
|
5002
|
+
# }
|
|
5003
|
+
#
|
|
5004
|
+
# @!attribute [rw] organization_config_rule_name
|
|
5005
|
+
# The name of your organization Config Custom Policy rule.
|
|
5006
|
+
# @return [String]
|
|
5007
|
+
#
|
|
5008
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/GetOrganizationCustomRulePolicyRequest AWS API Documentation
|
|
5009
|
+
#
|
|
5010
|
+
class GetOrganizationCustomRulePolicyRequest < Struct.new(
|
|
5011
|
+
:organization_config_rule_name)
|
|
5012
|
+
SENSITIVE = []
|
|
5013
|
+
include Aws::Structure
|
|
5014
|
+
end
|
|
5015
|
+
|
|
5016
|
+
# @!attribute [rw] policy_text
|
|
5017
|
+
# The policy definition containing the logic for your organization
|
|
5018
|
+
# Config Custom Policy rule.
|
|
5019
|
+
# @return [String]
|
|
5020
|
+
#
|
|
5021
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/GetOrganizationCustomRulePolicyResponse AWS API Documentation
|
|
5022
|
+
#
|
|
5023
|
+
class GetOrganizationCustomRulePolicyResponse < Struct.new(
|
|
5024
|
+
:policy_text)
|
|
5025
|
+
SENSITIVE = []
|
|
5026
|
+
include Aws::Structure
|
|
5027
|
+
end
|
|
5028
|
+
|
|
4896
5029
|
# The input for the GetResourceConfigHistory action.
|
|
4897
5030
|
#
|
|
4898
5031
|
# @note When making an API call, you may pass GetResourceConfigHistoryRequest
|
|
4899
5032
|
# data as a hash:
|
|
4900
5033
|
#
|
|
4901
5034
|
# {
|
|
4902
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
5035
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
4903
5036
|
# resource_id: "ResourceId", # required
|
|
4904
5037
|
# later_time: Time.now,
|
|
4905
5038
|
# earlier_time: Time.now,
|
|
@@ -5045,7 +5178,7 @@ module Aws::ConfigService
|
|
|
5045
5178
|
# * For PutConfigRule, the Lambda function cannot be invoked. Check the
|
|
5046
5179
|
# function ARN, and check the function's permissions.
|
|
5047
5180
|
#
|
|
5048
|
-
# * For PutOrganizationConfigRule, organization
|
|
5181
|
+
# * For PutOrganizationConfigRule, organization Config rule cannot be
|
|
5049
5182
|
# created because you do not have permissions to call IAM `GetRole`
|
|
5050
5183
|
# action or create a service linked role.
|
|
5051
5184
|
#
|
|
@@ -5168,7 +5301,7 @@ module Aws::ConfigService
|
|
|
5168
5301
|
#
|
|
5169
5302
|
# {
|
|
5170
5303
|
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
5171
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
5304
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
5172
5305
|
# filters: {
|
|
5173
5306
|
# account_id: "AccountId",
|
|
5174
5307
|
# resource_id: "ResourceId",
|
|
@@ -5236,7 +5369,7 @@ module Aws::ConfigService
|
|
|
5236
5369
|
# data as a hash:
|
|
5237
5370
|
#
|
|
5238
5371
|
# {
|
|
5239
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
5372
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
5240
5373
|
# resource_ids: ["ResourceId"],
|
|
5241
5374
|
# resource_name: "ResourceName",
|
|
5242
5375
|
# limit: 1,
|
|
@@ -5447,7 +5580,7 @@ module Aws::ConfigService
|
|
|
5447
5580
|
#
|
|
5448
5581
|
class MaxNumberOfDeliveryChannelsExceededException < Aws::EmptyStructure; end
|
|
5449
5582
|
|
|
5450
|
-
# You have reached the limit of the number of organization
|
|
5583
|
+
# You have reached the limit of the number of organization Config rules
|
|
5451
5584
|
# you can create.
|
|
5452
5585
|
#
|
|
5453
5586
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/MaxNumberOfOrganizationConfigRulesExceededException AWS API Documentation
|
|
@@ -5469,7 +5602,7 @@ module Aws::ConfigService
|
|
|
5469
5602
|
#
|
|
5470
5603
|
class MaxNumberOfRetentionConfigurationsExceededException < Aws::EmptyStructure; end
|
|
5471
5604
|
|
|
5472
|
-
# Organization
|
|
5605
|
+
# Organization Config rule creation or deletion status in each member
|
|
5473
5606
|
# account. This includes the name of the rule, the status, error code
|
|
5474
5607
|
# and error message when the rule creation or deletion failed.
|
|
5475
5608
|
#
|
|
@@ -5478,56 +5611,56 @@ module Aws::ConfigService
|
|
|
5478
5611
|
# @return [String]
|
|
5479
5612
|
#
|
|
5480
5613
|
# @!attribute [rw] config_rule_name
|
|
5481
|
-
# The name of
|
|
5614
|
+
# The name of Config rule deployed in the member account.
|
|
5482
5615
|
# @return [String]
|
|
5483
5616
|
#
|
|
5484
5617
|
# @!attribute [rw] member_account_rule_status
|
|
5485
|
-
# Indicates deployment status for
|
|
5618
|
+
# Indicates deployment status for Config rule in the member account.
|
|
5486
5619
|
# When master account calls `PutOrganizationConfigRule` action for the
|
|
5487
|
-
# first time,
|
|
5620
|
+
# first time, Config rule status is created in the member account.
|
|
5488
5621
|
# When master account calls `PutOrganizationConfigRule` action for the
|
|
5489
|
-
# second time,
|
|
5622
|
+
# second time, Config rule status is updated in the member account.
|
|
5490
5623
|
# Config rule status is deleted when the master account deletes
|
|
5491
5624
|
# `OrganizationConfigRule` and disables service access for
|
|
5492
5625
|
# `config-multiaccountsetup.amazonaws.com`.
|
|
5493
5626
|
#
|
|
5494
5627
|
# Config sets the state of the rule to:
|
|
5495
5628
|
#
|
|
5496
|
-
# * `CREATE_SUCCESSFUL` when
|
|
5629
|
+
# * `CREATE_SUCCESSFUL` when Config rule has been created in the
|
|
5497
5630
|
# member account.
|
|
5498
5631
|
#
|
|
5499
|
-
# * `CREATE_IN_PROGRESS` when
|
|
5632
|
+
# * `CREATE_IN_PROGRESS` when Config rule is being created in the
|
|
5500
5633
|
# member account.
|
|
5501
5634
|
#
|
|
5502
|
-
# * `CREATE_FAILED` when
|
|
5635
|
+
# * `CREATE_FAILED` when Config rule creation has failed in the member
|
|
5503
5636
|
# account.
|
|
5504
5637
|
#
|
|
5505
|
-
# * `DELETE_FAILED` when
|
|
5638
|
+
# * `DELETE_FAILED` when Config rule deletion has failed in the member
|
|
5506
5639
|
# account.
|
|
5507
5640
|
#
|
|
5508
|
-
# * `DELETE_IN_PROGRESS` when
|
|
5641
|
+
# * `DELETE_IN_PROGRESS` when Config rule is being deleted in the
|
|
5509
5642
|
# member account.
|
|
5510
5643
|
#
|
|
5511
|
-
# * `DELETE_SUCCESSFUL` when
|
|
5644
|
+
# * `DELETE_SUCCESSFUL` when Config rule has been deleted in the
|
|
5512
5645
|
# member account.
|
|
5513
5646
|
#
|
|
5514
|
-
# * `UPDATE_SUCCESSFUL` when
|
|
5647
|
+
# * `UPDATE_SUCCESSFUL` when Config rule has been updated in the
|
|
5515
5648
|
# member account.
|
|
5516
5649
|
#
|
|
5517
|
-
# * `UPDATE_IN_PROGRESS` when
|
|
5650
|
+
# * `UPDATE_IN_PROGRESS` when Config rule is being updated in the
|
|
5518
5651
|
# member account.
|
|
5519
5652
|
#
|
|
5520
|
-
# * `UPDATE_FAILED` when
|
|
5653
|
+
# * `UPDATE_FAILED` when Config rule deletion has failed in the member
|
|
5521
5654
|
# account.
|
|
5522
5655
|
# @return [String]
|
|
5523
5656
|
#
|
|
5524
5657
|
# @!attribute [rw] error_code
|
|
5525
|
-
# An error code that is returned when
|
|
5658
|
+
# An error code that is returned when Config rule creation or deletion
|
|
5526
5659
|
# failed in the member account.
|
|
5527
5660
|
# @return [String]
|
|
5528
5661
|
#
|
|
5529
5662
|
# @!attribute [rw] error_message
|
|
5530
|
-
# An error message indicating that
|
|
5663
|
+
# An error message indicating that Config rule account creation or
|
|
5531
5664
|
# deletion has failed due to an error in the member account.
|
|
5532
5665
|
# @return [String]
|
|
5533
5666
|
#
|
|
@@ -5579,8 +5712,9 @@ module Aws::ConfigService
|
|
|
5579
5712
|
#
|
|
5580
5713
|
class NoSuchBucketException < Aws::EmptyStructure; end
|
|
5581
5714
|
|
|
5582
|
-
#
|
|
5583
|
-
# rule
|
|
5715
|
+
# The Config rule in the request is not valid. Verify that the rule is
|
|
5716
|
+
# an Config Custom Policy rule, that the rule name is correct, and that
|
|
5717
|
+
# valid Amazon Resouce Names (ARNs) are used before trying again.
|
|
5584
5718
|
#
|
|
5585
5719
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/NoSuchConfigRuleException AWS API Documentation
|
|
5586
5720
|
#
|
|
@@ -5616,7 +5750,10 @@ module Aws::ConfigService
|
|
|
5616
5750
|
#
|
|
5617
5751
|
class NoSuchDeliveryChannelException < Aws::EmptyStructure; end
|
|
5618
5752
|
|
|
5619
|
-
#
|
|
5753
|
+
# The Config rule in the request is not valid. Verify that the rule is
|
|
5754
|
+
# an organization Config Custom Policy rule, that the rule name is
|
|
5755
|
+
# correct, and that valid Amazon Resouce Names (ARNs) are used before
|
|
5756
|
+
# trying again.
|
|
5620
5757
|
#
|
|
5621
5758
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/NoSuchOrganizationConfigRuleException AWS API Documentation
|
|
5622
5759
|
#
|
|
@@ -5721,15 +5858,15 @@ module Aws::ConfigService
|
|
|
5721
5858
|
#
|
|
5722
5859
|
class OrganizationAllFeaturesNotEnabledException < Aws::EmptyStructure; end
|
|
5723
5860
|
|
|
5724
|
-
# An organization
|
|
5861
|
+
# An organization Config rule that has information about Config rules
|
|
5725
5862
|
# that Config creates in member accounts.
|
|
5726
5863
|
#
|
|
5727
5864
|
# @!attribute [rw] organization_config_rule_name
|
|
5728
|
-
# The name that you assign to organization
|
|
5865
|
+
# The name that you assign to organization Config rule.
|
|
5729
5866
|
# @return [String]
|
|
5730
5867
|
#
|
|
5731
5868
|
# @!attribute [rw] organization_config_rule_arn
|
|
5732
|
-
# Amazon Resource Name (ARN) of organization
|
|
5869
|
+
# Amazon Resource Name (ARN) of organization Config rule.
|
|
5733
5870
|
# @return [String]
|
|
5734
5871
|
#
|
|
5735
5872
|
# @!attribute [rw] organization_managed_rule_metadata
|
|
@@ -5741,7 +5878,7 @@ module Aws::ConfigService
|
|
|
5741
5878
|
# @return [Types::OrganizationCustomRuleMetadata]
|
|
5742
5879
|
#
|
|
5743
5880
|
# @!attribute [rw] excluded_accounts
|
|
5744
|
-
# A comma-separated list of accounts excluded from organization
|
|
5881
|
+
# A comma-separated list of accounts excluded from organization Config
|
|
5745
5882
|
# rule.
|
|
5746
5883
|
# @return [Array<String>]
|
|
5747
5884
|
#
|
|
@@ -5749,6 +5886,15 @@ module Aws::ConfigService
|
|
|
5749
5886
|
# The timestamp of the last update.
|
|
5750
5887
|
# @return [Time]
|
|
5751
5888
|
#
|
|
5889
|
+
# @!attribute [rw] organization_custom_policy_rule_metadata
|
|
5890
|
+
# An object that specifies metadata for your organization's Config
|
|
5891
|
+
# Custom Policy rule. The metadata includes the runtime system in use,
|
|
5892
|
+
# which accounts have debug logging enabled, and other custom rule
|
|
5893
|
+
# metadata, such as resource type, resource ID of Amazon Web Services
|
|
5894
|
+
# resource, and organization trigger types that initiate Config to
|
|
5895
|
+
# evaluate Amazon Web Services resources against a rule.
|
|
5896
|
+
# @return [Types::OrganizationCustomPolicyRuleMetadataNoPolicy]
|
|
5897
|
+
#
|
|
5752
5898
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/OrganizationConfigRule AWS API Documentation
|
|
5753
5899
|
#
|
|
5754
5900
|
class OrganizationConfigRule < Struct.new(
|
|
@@ -5757,24 +5903,25 @@ module Aws::ConfigService
|
|
|
5757
5903
|
:organization_managed_rule_metadata,
|
|
5758
5904
|
:organization_custom_rule_metadata,
|
|
5759
5905
|
:excluded_accounts,
|
|
5760
|
-
:last_update_time
|
|
5906
|
+
:last_update_time,
|
|
5907
|
+
:organization_custom_policy_rule_metadata)
|
|
5761
5908
|
SENSITIVE = []
|
|
5762
5909
|
include Aws::Structure
|
|
5763
5910
|
end
|
|
5764
5911
|
|
|
5765
|
-
# Returns the status for an organization
|
|
5912
|
+
# Returns the status for an organization Config rule in an organization.
|
|
5766
5913
|
#
|
|
5767
5914
|
# @!attribute [rw] organization_config_rule_name
|
|
5768
|
-
# The name that you assign to organization
|
|
5915
|
+
# The name that you assign to organization Config rule.
|
|
5769
5916
|
# @return [String]
|
|
5770
5917
|
#
|
|
5771
5918
|
# @!attribute [rw] organization_rule_status
|
|
5772
|
-
# Indicates deployment status of an organization
|
|
5919
|
+
# Indicates deployment status of an organization Config rule. When
|
|
5773
5920
|
# master account calls PutOrganizationConfigRule action for the first
|
|
5774
|
-
# time,
|
|
5921
|
+
# time, Config rule status is created in all the member accounts. When
|
|
5775
5922
|
# master account calls PutOrganizationConfigRule action for the second
|
|
5776
|
-
# time,
|
|
5777
|
-
# Additionally,
|
|
5923
|
+
# time, Config rule status is updated in all the member accounts.
|
|
5924
|
+
# Additionally, Config rule status is updated when one or more member
|
|
5778
5925
|
# accounts join or leave an organization. Config rule status is
|
|
5779
5926
|
# deleted when the master account deletes OrganizationConfigRule in
|
|
5780
5927
|
# all the member accounts and disables service access for
|
|
@@ -5782,41 +5929,41 @@ module Aws::ConfigService
|
|
|
5782
5929
|
#
|
|
5783
5930
|
# Config sets the state of the rule to:
|
|
5784
5931
|
#
|
|
5785
|
-
# * `CREATE_SUCCESSFUL` when an organization
|
|
5932
|
+
# * `CREATE_SUCCESSFUL` when an organization Config rule has been
|
|
5786
5933
|
# successfully created in all the member accounts.
|
|
5787
5934
|
#
|
|
5788
|
-
# * `CREATE_IN_PROGRESS` when an organization
|
|
5935
|
+
# * `CREATE_IN_PROGRESS` when an organization Config rule creation is
|
|
5789
5936
|
# in progress.
|
|
5790
5937
|
#
|
|
5791
|
-
# * `CREATE_FAILED` when an organization
|
|
5938
|
+
# * `CREATE_FAILED` when an organization Config rule creation failed
|
|
5792
5939
|
# in one or more member accounts within that organization.
|
|
5793
5940
|
#
|
|
5794
|
-
# * `DELETE_FAILED` when an organization
|
|
5941
|
+
# * `DELETE_FAILED` when an organization Config rule deletion failed
|
|
5795
5942
|
# in one or more member accounts within that organization.
|
|
5796
5943
|
#
|
|
5797
|
-
# * `DELETE_IN_PROGRESS` when an organization
|
|
5944
|
+
# * `DELETE_IN_PROGRESS` when an organization Config rule deletion is
|
|
5798
5945
|
# in progress.
|
|
5799
5946
|
#
|
|
5800
|
-
# * `DELETE_SUCCESSFUL` when an organization
|
|
5947
|
+
# * `DELETE_SUCCESSFUL` when an organization Config rule has been
|
|
5801
5948
|
# successfully deleted from all the member accounts.
|
|
5802
5949
|
#
|
|
5803
|
-
# * `UPDATE_SUCCESSFUL` when an organization
|
|
5950
|
+
# * `UPDATE_SUCCESSFUL` when an organization Config rule has been
|
|
5804
5951
|
# successfully updated in all the member accounts.
|
|
5805
5952
|
#
|
|
5806
|
-
# * `UPDATE_IN_PROGRESS` when an organization
|
|
5953
|
+
# * `UPDATE_IN_PROGRESS` when an organization Config rule update is in
|
|
5807
5954
|
# progress.
|
|
5808
5955
|
#
|
|
5809
|
-
# * `UPDATE_FAILED` when an organization
|
|
5956
|
+
# * `UPDATE_FAILED` when an organization Config rule update failed in
|
|
5810
5957
|
# one or more member accounts within that organization.
|
|
5811
5958
|
# @return [String]
|
|
5812
5959
|
#
|
|
5813
5960
|
# @!attribute [rw] error_code
|
|
5814
|
-
# An error code that is returned when organization
|
|
5961
|
+
# An error code that is returned when organization Config rule
|
|
5815
5962
|
# creation or deletion has failed.
|
|
5816
5963
|
# @return [String]
|
|
5817
5964
|
#
|
|
5818
5965
|
# @!attribute [rw] error_message
|
|
5819
|
-
# An error message indicating that organization
|
|
5966
|
+
# An error message indicating that organization Config rule creation
|
|
5820
5967
|
# or deletion failed due to an error.
|
|
5821
5968
|
# @return [String]
|
|
5822
5969
|
#
|
|
@@ -6053,6 +6200,213 @@ module Aws::ConfigService
|
|
|
6053
6200
|
#
|
|
6054
6201
|
class OrganizationConformancePackTemplateValidationException < Aws::EmptyStructure; end
|
|
6055
6202
|
|
|
6203
|
+
# An object that specifies metadata for your organization's Config
|
|
6204
|
+
# Custom Policy rule. The metadata includes the runtime system in use,
|
|
6205
|
+
# which accounts have debug logging enabled, and other custom rule
|
|
6206
|
+
# metadata, such as resource type, resource ID of Amazon Web Services
|
|
6207
|
+
# resource, and organization trigger types that initiate Config to
|
|
6208
|
+
# evaluate Amazon Web Services resources against a rule.
|
|
6209
|
+
#
|
|
6210
|
+
# @note When making an API call, you may pass OrganizationCustomPolicyRuleMetadata
|
|
6211
|
+
# data as a hash:
|
|
6212
|
+
#
|
|
6213
|
+
# {
|
|
6214
|
+
# description: "StringWithCharLimit256Min0",
|
|
6215
|
+
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification
|
|
6216
|
+
# input_parameters: "StringWithCharLimit2048",
|
|
6217
|
+
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
6218
|
+
# resource_types_scope: ["StringWithCharLimit256"],
|
|
6219
|
+
# resource_id_scope: "StringWithCharLimit768",
|
|
6220
|
+
# tag_key_scope: "StringWithCharLimit128",
|
|
6221
|
+
# tag_value_scope: "StringWithCharLimit256",
|
|
6222
|
+
# policy_runtime: "PolicyRuntime", # required
|
|
6223
|
+
# policy_text: "PolicyText", # required
|
|
6224
|
+
# debug_log_delivery_accounts: ["AccountId"],
|
|
6225
|
+
# }
|
|
6226
|
+
#
|
|
6227
|
+
# @!attribute [rw] description
|
|
6228
|
+
# The description that you provide for your organization Config Custom
|
|
6229
|
+
# Policy rule.
|
|
6230
|
+
# @return [String]
|
|
6231
|
+
#
|
|
6232
|
+
# @!attribute [rw] organization_config_rule_trigger_types
|
|
6233
|
+
# The type of notification that initiates Config to run an evaluation
|
|
6234
|
+
# for a rule. For Config Custom Policy rules, Config supports
|
|
6235
|
+
# change-initiated notification types:
|
|
6236
|
+
#
|
|
6237
|
+
# * `ConfigurationItemChangeNotification` - Initiates an evaluation
|
|
6238
|
+
# when Config delivers a configuration item as a result of a
|
|
6239
|
+
# resource change.
|
|
6240
|
+
#
|
|
6241
|
+
# * `OversizedConfigurationItemChangeNotification` - Initiates an
|
|
6242
|
+
# evaluation when Config delivers an oversized configuration item.
|
|
6243
|
+
# Config may generate this notification type when a resource changes
|
|
6244
|
+
# and the notification exceeds the maximum size allowed by Amazon
|
|
6245
|
+
# SNS.
|
|
6246
|
+
# @return [Array<String>]
|
|
6247
|
+
#
|
|
6248
|
+
# @!attribute [rw] input_parameters
|
|
6249
|
+
# A string, in JSON format, that is passed to your organization Config
|
|
6250
|
+
# Custom Policy rule.
|
|
6251
|
+
# @return [String]
|
|
6252
|
+
#
|
|
6253
|
+
# @!attribute [rw] maximum_execution_frequency
|
|
6254
|
+
# The maximum frequency with which Config runs evaluations for a rule.
|
|
6255
|
+
# Your Config Custom Policy rule is triggered when Config delivers the
|
|
6256
|
+
# configuration snapshot. For more information, see
|
|
6257
|
+
# ConfigSnapshotDeliveryProperties.
|
|
6258
|
+
# @return [String]
|
|
6259
|
+
#
|
|
6260
|
+
# @!attribute [rw] resource_types_scope
|
|
6261
|
+
# The type of the Amazon Web Services resource that was evaluated.
|
|
6262
|
+
# @return [Array<String>]
|
|
6263
|
+
#
|
|
6264
|
+
# @!attribute [rw] resource_id_scope
|
|
6265
|
+
# The ID of the Amazon Web Services resource that was evaluated.
|
|
6266
|
+
# @return [String]
|
|
6267
|
+
#
|
|
6268
|
+
# @!attribute [rw] tag_key_scope
|
|
6269
|
+
# One part of a key-value pair that make up a tag. A key is a general
|
|
6270
|
+
# label that acts like a category for more specific tag values.
|
|
6271
|
+
# @return [String]
|
|
6272
|
+
#
|
|
6273
|
+
# @!attribute [rw] tag_value_scope
|
|
6274
|
+
# The optional part of a key-value pair that make up a tag. A value
|
|
6275
|
+
# acts as a descriptor within a tag category (key).
|
|
6276
|
+
# @return [String]
|
|
6277
|
+
#
|
|
6278
|
+
# @!attribute [rw] policy_runtime
|
|
6279
|
+
# The runtime system for your organization Config Custom Policy rules.
|
|
6280
|
+
# Guard is a policy-as-code language that allows you to write policies
|
|
6281
|
+
# that are enforced by Config Custom Policy rules. For more
|
|
6282
|
+
# information about Guard, see the [Guard GitHub Repository][1].
|
|
6283
|
+
#
|
|
6284
|
+
#
|
|
6285
|
+
#
|
|
6286
|
+
# [1]: https://github.com/aws-cloudformation/cloudformation-guard
|
|
6287
|
+
# @return [String]
|
|
6288
|
+
#
|
|
6289
|
+
# @!attribute [rw] policy_text
|
|
6290
|
+
# The policy definition containing the logic for your organization
|
|
6291
|
+
# Config Custom Policy rule.
|
|
6292
|
+
# @return [String]
|
|
6293
|
+
#
|
|
6294
|
+
# @!attribute [rw] debug_log_delivery_accounts
|
|
6295
|
+
# A list of accounts that you can enable debug logging for your
|
|
6296
|
+
# organization Config Custom Policy rule. List is null when debug
|
|
6297
|
+
# logging is enabled for all accounts.
|
|
6298
|
+
# @return [Array<String>]
|
|
6299
|
+
#
|
|
6300
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/OrganizationCustomPolicyRuleMetadata AWS API Documentation
|
|
6301
|
+
#
|
|
6302
|
+
class OrganizationCustomPolicyRuleMetadata < Struct.new(
|
|
6303
|
+
:description,
|
|
6304
|
+
:organization_config_rule_trigger_types,
|
|
6305
|
+
:input_parameters,
|
|
6306
|
+
:maximum_execution_frequency,
|
|
6307
|
+
:resource_types_scope,
|
|
6308
|
+
:resource_id_scope,
|
|
6309
|
+
:tag_key_scope,
|
|
6310
|
+
:tag_value_scope,
|
|
6311
|
+
:policy_runtime,
|
|
6312
|
+
:policy_text,
|
|
6313
|
+
:debug_log_delivery_accounts)
|
|
6314
|
+
SENSITIVE = []
|
|
6315
|
+
include Aws::Structure
|
|
6316
|
+
end
|
|
6317
|
+
|
|
6318
|
+
# An object that specifies metadata for your organization Config Custom
|
|
6319
|
+
# Policy rule including the runtime system in use, which accounts have
|
|
6320
|
+
# debug logging enabled, and other custom rule metadata such as resource
|
|
6321
|
+
# type, resource ID of Amazon Web Services resource, and organization
|
|
6322
|
+
# trigger types that trigger Config to evaluate Amazon Web Services
|
|
6323
|
+
# resources against a rule.
|
|
6324
|
+
#
|
|
6325
|
+
# @!attribute [rw] description
|
|
6326
|
+
# The description that you provide for your organization Config Custom
|
|
6327
|
+
# Policy rule.
|
|
6328
|
+
# @return [String]
|
|
6329
|
+
#
|
|
6330
|
+
# @!attribute [rw] organization_config_rule_trigger_types
|
|
6331
|
+
# The type of notification that triggers Config to run an evaluation
|
|
6332
|
+
# for a rule. For Config Custom Policy rules, Config supports change
|
|
6333
|
+
# triggered notification types:
|
|
6334
|
+
#
|
|
6335
|
+
# * `ConfigurationItemChangeNotification` - Triggers an evaluation
|
|
6336
|
+
# when Config delivers a configuration item as a result of a
|
|
6337
|
+
# resource change.
|
|
6338
|
+
#
|
|
6339
|
+
# * `OversizedConfigurationItemChangeNotification` - Triggers an
|
|
6340
|
+
# evaluation when Config delivers an oversized configuration item.
|
|
6341
|
+
# Config may generate this notification type when a resource changes
|
|
6342
|
+
# and the notification exceeds the maximum size allowed by Amazon
|
|
6343
|
+
# SNS.
|
|
6344
|
+
# @return [Array<String>]
|
|
6345
|
+
#
|
|
6346
|
+
# @!attribute [rw] input_parameters
|
|
6347
|
+
# A string, in JSON format, that is passed to your organization Config
|
|
6348
|
+
# Custom Policy rule.
|
|
6349
|
+
# @return [String]
|
|
6350
|
+
#
|
|
6351
|
+
# @!attribute [rw] maximum_execution_frequency
|
|
6352
|
+
# The maximum frequency with which Config runs evaluations for a rule.
|
|
6353
|
+
# Your Config Custom Policy rule is triggered when Config delivers the
|
|
6354
|
+
# configuration snapshot. For more information, see
|
|
6355
|
+
# ConfigSnapshotDeliveryProperties.
|
|
6356
|
+
# @return [String]
|
|
6357
|
+
#
|
|
6358
|
+
# @!attribute [rw] resource_types_scope
|
|
6359
|
+
# The type of the Amazon Web Services resource that was evaluated.
|
|
6360
|
+
# @return [Array<String>]
|
|
6361
|
+
#
|
|
6362
|
+
# @!attribute [rw] resource_id_scope
|
|
6363
|
+
# The ID of the Amazon Web Services resource that was evaluated.
|
|
6364
|
+
# @return [String]
|
|
6365
|
+
#
|
|
6366
|
+
# @!attribute [rw] tag_key_scope
|
|
6367
|
+
# One part of a key-value pair that make up a tag. A key is a general
|
|
6368
|
+
# label that acts like a category for more specific tag values.
|
|
6369
|
+
# @return [String]
|
|
6370
|
+
#
|
|
6371
|
+
# @!attribute [rw] tag_value_scope
|
|
6372
|
+
# The optional part of a key-value pair that make up a tag. A value
|
|
6373
|
+
# acts as a descriptor within a tag category (key).
|
|
6374
|
+
# @return [String]
|
|
6375
|
+
#
|
|
6376
|
+
# @!attribute [rw] policy_runtime
|
|
6377
|
+
# The runtime system for your organization Config Custom Policy rules.
|
|
6378
|
+
# Guard is a policy-as-code language that allows you to write policies
|
|
6379
|
+
# that are enforced by Config Custom Policy rules. For more
|
|
6380
|
+
# information about Guard, see the [Guard GitHub Repository][1].
|
|
6381
|
+
#
|
|
6382
|
+
#
|
|
6383
|
+
#
|
|
6384
|
+
# [1]: https://github.com/aws-cloudformation/cloudformation-guard
|
|
6385
|
+
# @return [String]
|
|
6386
|
+
#
|
|
6387
|
+
# @!attribute [rw] debug_log_delivery_accounts
|
|
6388
|
+
# A list of accounts that you can enable debug logging for your
|
|
6389
|
+
# organization Config Custom Policy rule. List is null when debug
|
|
6390
|
+
# logging is enabled for all accounts.
|
|
6391
|
+
# @return [Array<String>]
|
|
6392
|
+
#
|
|
6393
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/OrganizationCustomPolicyRuleMetadataNoPolicy AWS API Documentation
|
|
6394
|
+
#
|
|
6395
|
+
class OrganizationCustomPolicyRuleMetadataNoPolicy < Struct.new(
|
|
6396
|
+
:description,
|
|
6397
|
+
:organization_config_rule_trigger_types,
|
|
6398
|
+
:input_parameters,
|
|
6399
|
+
:maximum_execution_frequency,
|
|
6400
|
+
:resource_types_scope,
|
|
6401
|
+
:resource_id_scope,
|
|
6402
|
+
:tag_key_scope,
|
|
6403
|
+
:tag_value_scope,
|
|
6404
|
+
:policy_runtime,
|
|
6405
|
+
:debug_log_delivery_accounts)
|
|
6406
|
+
SENSITIVE = []
|
|
6407
|
+
include Aws::Structure
|
|
6408
|
+
end
|
|
6409
|
+
|
|
6056
6410
|
# An object that specifies organization custom rule metadata such as
|
|
6057
6411
|
# resource type, resource ID of Amazon Web Services resource, Lambda
|
|
6058
6412
|
# function ARN, and organization trigger types that trigger Config to
|
|
@@ -6076,7 +6430,7 @@ module Aws::ConfigService
|
|
|
6076
6430
|
# }
|
|
6077
6431
|
#
|
|
6078
6432
|
# @!attribute [rw] description
|
|
6079
|
-
# The description that you provide for organization
|
|
6433
|
+
# The description that you provide for your organization Config rule.
|
|
6080
6434
|
# @return [String]
|
|
6081
6435
|
#
|
|
6082
6436
|
# @!attribute [rw] lambda_function_arn
|
|
@@ -6102,8 +6456,8 @@ module Aws::ConfigService
|
|
|
6102
6456
|
# @return [Array<String>]
|
|
6103
6457
|
#
|
|
6104
6458
|
# @!attribute [rw] input_parameters
|
|
6105
|
-
# A string, in JSON format, that is passed to organization
|
|
6106
|
-
# Lambda function.
|
|
6459
|
+
# A string, in JSON format, that is passed to your organization Config
|
|
6460
|
+
# rule Lambda function.
|
|
6107
6461
|
# @return [String]
|
|
6108
6462
|
#
|
|
6109
6463
|
# @!attribute [rw] maximum_execution_frequency
|
|
@@ -6174,7 +6528,7 @@ module Aws::ConfigService
|
|
|
6174
6528
|
# }
|
|
6175
6529
|
#
|
|
6176
6530
|
# @!attribute [rw] description
|
|
6177
|
-
# The description that you provide for organization
|
|
6531
|
+
# The description that you provide for your organization Config rule.
|
|
6178
6532
|
# @return [String]
|
|
6179
6533
|
#
|
|
6180
6534
|
# @!attribute [rw] rule_identifier
|
|
@@ -6188,8 +6542,8 @@ module Aws::ConfigService
|
|
|
6188
6542
|
# @return [String]
|
|
6189
6543
|
#
|
|
6190
6544
|
# @!attribute [rw] input_parameters
|
|
6191
|
-
# A string, in JSON format, that is passed to organization
|
|
6192
|
-
# Lambda function.
|
|
6545
|
+
# A string, in JSON format, that is passed to your organization Config
|
|
6546
|
+
# rule Lambda function.
|
|
6193
6547
|
# @return [String]
|
|
6194
6548
|
#
|
|
6195
6549
|
# @!attribute [rw] maximum_execution_frequency
|
|
@@ -6393,8 +6747,8 @@ module Aws::ConfigService
|
|
|
6393
6747
|
# compliance_resource_id: "BaseResourceId",
|
|
6394
6748
|
# },
|
|
6395
6749
|
# source: { # required
|
|
6396
|
-
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS
|
|
6397
|
-
# source_identifier: "StringWithCharLimit256",
|
|
6750
|
+
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
|
|
6751
|
+
# source_identifier: "StringWithCharLimit256",
|
|
6398
6752
|
# source_details: [
|
|
6399
6753
|
# {
|
|
6400
6754
|
# event_source: "aws.config", # accepts aws.config
|
|
@@ -6402,6 +6756,11 @@ module Aws::ConfigService
|
|
|
6402
6756
|
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
6403
6757
|
# },
|
|
6404
6758
|
# ],
|
|
6759
|
+
# custom_policy_details: {
|
|
6760
|
+
# policy_runtime: "PolicyRuntime", # required
|
|
6761
|
+
# policy_text: "PolicyText", # required
|
|
6762
|
+
# enable_debug_log_delivery: false,
|
|
6763
|
+
# },
|
|
6405
6764
|
# },
|
|
6406
6765
|
# input_parameters: "StringWithCharLimit1024",
|
|
6407
6766
|
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
@@ -6509,7 +6868,7 @@ module Aws::ConfigService
|
|
|
6509
6868
|
# recording_group: {
|
|
6510
6869
|
# all_supported: false,
|
|
6511
6870
|
# include_global_resource_types: false,
|
|
6512
|
-
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
6871
|
+
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
6513
6872
|
# },
|
|
6514
6873
|
# },
|
|
6515
6874
|
# }
|
|
@@ -6564,8 +6923,9 @@ module Aws::ConfigService
|
|
|
6564
6923
|
# containing the template body with a minimum length of 1 byte and a
|
|
6565
6924
|
# maximum length of 51,200 bytes.
|
|
6566
6925
|
#
|
|
6567
|
-
# <note markdown="1"> You can only use a YAML template with
|
|
6568
|
-
#
|
|
6926
|
+
# <note markdown="1"> You can only use a YAML template with two resource types: Config
|
|
6927
|
+
# rule (`AWS::Config::ConfigRule`) and a remediation action
|
|
6928
|
+
# (`AWS::Config::RemediationConfiguration`).
|
|
6569
6929
|
#
|
|
6570
6930
|
# </note>
|
|
6571
6931
|
# @return [String]
|
|
@@ -6774,10 +7134,23 @@ module Aws::ConfigService
|
|
|
6774
7134
|
# tag_value_scope: "StringWithCharLimit256",
|
|
6775
7135
|
# },
|
|
6776
7136
|
# excluded_accounts: ["AccountId"],
|
|
7137
|
+
# organization_custom_policy_rule_metadata: {
|
|
7138
|
+
# description: "StringWithCharLimit256Min0",
|
|
7139
|
+
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification
|
|
7140
|
+
# input_parameters: "StringWithCharLimit2048",
|
|
7141
|
+
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
7142
|
+
# resource_types_scope: ["StringWithCharLimit256"],
|
|
7143
|
+
# resource_id_scope: "StringWithCharLimit768",
|
|
7144
|
+
# tag_key_scope: "StringWithCharLimit128",
|
|
7145
|
+
# tag_value_scope: "StringWithCharLimit256",
|
|
7146
|
+
# policy_runtime: "PolicyRuntime", # required
|
|
7147
|
+
# policy_text: "PolicyText", # required
|
|
7148
|
+
# debug_log_delivery_accounts: ["AccountId"],
|
|
7149
|
+
# },
|
|
6777
7150
|
# }
|
|
6778
7151
|
#
|
|
6779
7152
|
# @!attribute [rw] organization_config_rule_name
|
|
6780
|
-
# The name that you assign to an organization
|
|
7153
|
+
# The name that you assign to an organization Config rule.
|
|
6781
7154
|
# @return [String]
|
|
6782
7155
|
#
|
|
6783
7156
|
# @!attribute [rw] organization_managed_rule_metadata
|
|
@@ -6790,22 +7163,32 @@ module Aws::ConfigService
|
|
|
6790
7163
|
#
|
|
6791
7164
|
# @!attribute [rw] excluded_accounts
|
|
6792
7165
|
# A comma-separated list of accounts that you want to exclude from an
|
|
6793
|
-
# organization
|
|
7166
|
+
# organization Config rule.
|
|
6794
7167
|
# @return [Array<String>]
|
|
6795
7168
|
#
|
|
7169
|
+
# @!attribute [rw] organization_custom_policy_rule_metadata
|
|
7170
|
+
# An object that specifies metadata for your organization's Config
|
|
7171
|
+
# Custom Policy rule. The metadata includes the runtime system in use,
|
|
7172
|
+
# which accounts have debug logging enabled, and other custom rule
|
|
7173
|
+
# metadata, such as resource type, resource ID of Amazon Web Services
|
|
7174
|
+
# resource, and organization trigger types that initiate Config to
|
|
7175
|
+
# evaluate Amazon Web Services resources against a rule.
|
|
7176
|
+
# @return [Types::OrganizationCustomPolicyRuleMetadata]
|
|
7177
|
+
#
|
|
6796
7178
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutOrganizationConfigRuleRequest AWS API Documentation
|
|
6797
7179
|
#
|
|
6798
7180
|
class PutOrganizationConfigRuleRequest < Struct.new(
|
|
6799
7181
|
:organization_config_rule_name,
|
|
6800
7182
|
:organization_managed_rule_metadata,
|
|
6801
7183
|
:organization_custom_rule_metadata,
|
|
6802
|
-
:excluded_accounts
|
|
7184
|
+
:excluded_accounts,
|
|
7185
|
+
:organization_custom_policy_rule_metadata)
|
|
6803
7186
|
SENSITIVE = []
|
|
6804
7187
|
include Aws::Structure
|
|
6805
7188
|
end
|
|
6806
7189
|
|
|
6807
7190
|
# @!attribute [rw] organization_config_rule_arn
|
|
6808
|
-
# The Amazon Resource Name (ARN) of an organization
|
|
7191
|
+
# The Amazon Resource Name (ARN) of an organization Config rule.
|
|
6809
7192
|
# @return [String]
|
|
6810
7193
|
#
|
|
6811
7194
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutOrganizationConfigRuleResponse AWS API Documentation
|
|
@@ -7241,7 +7624,7 @@ module Aws::ConfigService
|
|
|
7241
7624
|
# {
|
|
7242
7625
|
# all_supported: false,
|
|
7243
7626
|
# include_global_resource_types: false,
|
|
7244
|
-
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
7627
|
+
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
7245
7628
|
# }
|
|
7246
7629
|
#
|
|
7247
7630
|
# @!attribute [rw] all_supported
|
|
@@ -7669,7 +8052,7 @@ module Aws::ConfigService
|
|
|
7669
8052
|
# data as a hash:
|
|
7670
8053
|
#
|
|
7671
8054
|
# {
|
|
7672
|
-
# resource_type: "AWS::EC2::CustomerGateway", # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
8055
|
+
# resource_type: "AWS::EC2::CustomerGateway", # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
7673
8056
|
# account_id: "AccountId",
|
|
7674
8057
|
# region: "AwsRegion",
|
|
7675
8058
|
# }
|
|
@@ -7780,10 +8163,10 @@ module Aws::ConfigService
|
|
|
7780
8163
|
# action associated with the rule before deleting the rule and try
|
|
7781
8164
|
# your request again later.
|
|
7782
8165
|
#
|
|
7783
|
-
# * For PutConfigOrganizationRule, organization
|
|
8166
|
+
# * For PutConfigOrganizationRule, organization Config rule deletion is
|
|
7784
8167
|
# in progress. Try your request again later.
|
|
7785
8168
|
#
|
|
7786
|
-
# * For DeleteOrganizationConfigRule, organization
|
|
8169
|
+
# * For DeleteOrganizationConfigRule, organization Config rule creation
|
|
7787
8170
|
# is in progress. Try your request again later.
|
|
7788
8171
|
#
|
|
7789
8172
|
# * For PutConformancePack and PutOrganizationConformancePack, a
|
|
@@ -7804,7 +8187,7 @@ module Aws::ConfigService
|
|
|
7804
8187
|
# data as a hash:
|
|
7805
8188
|
#
|
|
7806
8189
|
# {
|
|
7807
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
8190
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
7808
8191
|
# resource_id: "ResourceId", # required
|
|
7809
8192
|
# }
|
|
7810
8193
|
#
|
|
@@ -8059,16 +8442,16 @@ module Aws::ConfigService
|
|
|
8059
8442
|
include Aws::Structure
|
|
8060
8443
|
end
|
|
8061
8444
|
|
|
8062
|
-
# Provides the
|
|
8063
|
-
# rule identifier, and the events that
|
|
8064
|
-
# Amazon Web Services resources.
|
|
8445
|
+
# Provides the CustomPolicyDetails, the rule owner (Amazon Web Services
|
|
8446
|
+
# or customer), the rule identifier, and the events that cause the
|
|
8447
|
+
# evaluation of your Amazon Web Services resources.
|
|
8065
8448
|
#
|
|
8066
8449
|
# @note When making an API call, you may pass Source
|
|
8067
8450
|
# data as a hash:
|
|
8068
8451
|
#
|
|
8069
8452
|
# {
|
|
8070
|
-
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS
|
|
8071
|
-
# source_identifier: "StringWithCharLimit256",
|
|
8453
|
+
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
|
|
8454
|
+
# source_identifier: "StringWithCharLimit256",
|
|
8072
8455
|
# source_details: [
|
|
8073
8456
|
# {
|
|
8074
8457
|
# event_source: "aws.config", # accepts aws.config
|
|
@@ -8076,38 +8459,71 @@ module Aws::ConfigService
|
|
|
8076
8459
|
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
8077
8460
|
# },
|
|
8078
8461
|
# ],
|
|
8462
|
+
# custom_policy_details: {
|
|
8463
|
+
# policy_runtime: "PolicyRuntime", # required
|
|
8464
|
+
# policy_text: "PolicyText", # required
|
|
8465
|
+
# enable_debug_log_delivery: false,
|
|
8466
|
+
# },
|
|
8079
8467
|
# }
|
|
8080
8468
|
#
|
|
8081
8469
|
# @!attribute [rw] owner
|
|
8082
8470
|
# Indicates whether Amazon Web Services or the customer owns and
|
|
8083
8471
|
# manages the Config rule.
|
|
8472
|
+
#
|
|
8473
|
+
# Config Managed Rules are predefined rules owned by Amazon Web
|
|
8474
|
+
# Services. For more information, see [Config Managed Rules][1] in the
|
|
8475
|
+
# Config developer guide.
|
|
8476
|
+
#
|
|
8477
|
+
# Config Custom Rules are rules that you can develop either with Guard
|
|
8478
|
+
# (`CUSTOM_POLICY`) or Lambda (`CUSTOM_LAMBDA`). For more information,
|
|
8479
|
+
# see [Config Custom Rules ][2] in the Config developer guide.
|
|
8480
|
+
#
|
|
8481
|
+
#
|
|
8482
|
+
#
|
|
8483
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html
|
|
8484
|
+
# [2]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html
|
|
8084
8485
|
# @return [String]
|
|
8085
8486
|
#
|
|
8086
8487
|
# @!attribute [rw] source_identifier
|
|
8087
|
-
# For Config
|
|
8488
|
+
# For Config Managed rules, a predefined identifier from a list. For
|
|
8088
8489
|
# example, `IAM_PASSWORD_POLICY` is a managed rule. To reference a
|
|
8089
|
-
# managed rule, see [
|
|
8490
|
+
# managed rule, see [List of Config Managed Rules][1].
|
|
8090
8491
|
#
|
|
8091
|
-
# For
|
|
8092
|
-
# of the rule's Lambda function, such as
|
|
8492
|
+
# For Config Custom Lambda rules, the identifier is the Amazon
|
|
8493
|
+
# Resource Name (ARN) of the rule's Lambda function, such as
|
|
8093
8494
|
# `arn:aws:lambda:us-east-2:123456789012:function:custom_rule_name`.
|
|
8094
8495
|
#
|
|
8496
|
+
# For Config Custom Policy rules, this field will be ignored.
|
|
8095
8497
|
#
|
|
8096
8498
|
#
|
|
8097
|
-
#
|
|
8499
|
+
#
|
|
8500
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
|
|
8098
8501
|
# @return [String]
|
|
8099
8502
|
#
|
|
8100
8503
|
# @!attribute [rw] source_details
|
|
8101
|
-
# Provides the source and
|
|
8102
|
-
# evaluate your Amazon Web Services resources.
|
|
8504
|
+
# Provides the source and the message types that cause Config to
|
|
8505
|
+
# evaluate your Amazon Web Services resources against a rule. It also
|
|
8506
|
+
# provides the frequency with which you want Config to run evaluations
|
|
8507
|
+
# for the rule if the trigger type is periodic.
|
|
8508
|
+
#
|
|
8509
|
+
# If the owner is set to `CUSTOM_POLICY`, the only acceptable values
|
|
8510
|
+
# for the Config rule trigger message type are
|
|
8511
|
+
# `ConfigurationItemChangeNotification` and
|
|
8512
|
+
# `OversizedConfigurationItemChangeNotification`.
|
|
8103
8513
|
# @return [Array<Types::SourceDetail>]
|
|
8104
8514
|
#
|
|
8515
|
+
# @!attribute [rw] custom_policy_details
|
|
8516
|
+
# Provides the runtime system, policy definition, and whether debug
|
|
8517
|
+
# logging is enabled. Required when owner is set to `CUSTOM_POLICY`.
|
|
8518
|
+
# @return [Types::CustomPolicyDetails]
|
|
8519
|
+
#
|
|
8105
8520
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/Source AWS API Documentation
|
|
8106
8521
|
#
|
|
8107
8522
|
class Source < Struct.new(
|
|
8108
8523
|
:owner,
|
|
8109
8524
|
:source_identifier,
|
|
8110
|
-
:source_details
|
|
8525
|
+
:source_details,
|
|
8526
|
+
:custom_policy_details)
|
|
8111
8527
|
SENSITIVE = []
|
|
8112
8528
|
include Aws::Structure
|
|
8113
8529
|
end
|
|
@@ -8277,7 +8693,7 @@ module Aws::ConfigService
|
|
|
8277
8693
|
# config_rule_name: "ConfigRuleName", # required
|
|
8278
8694
|
# resource_keys: [ # required
|
|
8279
8695
|
# {
|
|
8280
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup
|
|
8696
|
+
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector
|
|
8281
8697
|
# resource_id: "ResourceId", # required
|
|
8282
8698
|
# },
|
|
8283
8699
|
# ],
|
|
@@ -8344,7 +8760,7 @@ module Aws::ConfigService
|
|
|
8344
8760
|
end
|
|
8345
8761
|
|
|
8346
8762
|
# Status filter object to filter results based on specific member
|
|
8347
|
-
# account ID or status type for an organization
|
|
8763
|
+
# account ID or status type for an organization Config rule.
|
|
8348
8764
|
#
|
|
8349
8765
|
# @note When making an API call, you may pass StatusDetailFilters
|
|
8350
8766
|
# data as a hash:
|
|
@@ -8360,42 +8776,42 @@ module Aws::ConfigService
|
|
|
8360
8776
|
# @return [String]
|
|
8361
8777
|
#
|
|
8362
8778
|
# @!attribute [rw] member_account_rule_status
|
|
8363
|
-
# Indicates deployment status for
|
|
8779
|
+
# Indicates deployment status for Config rule in the member account.
|
|
8364
8780
|
# When master account calls `PutOrganizationConfigRule` action for the
|
|
8365
|
-
# first time,
|
|
8781
|
+
# first time, Config rule status is created in the member account.
|
|
8366
8782
|
# When master account calls `PutOrganizationConfigRule` action for the
|
|
8367
|
-
# second time,
|
|
8783
|
+
# second time, Config rule status is updated in the member account.
|
|
8368
8784
|
# Config rule status is deleted when the master account deletes
|
|
8369
8785
|
# `OrganizationConfigRule` and disables service access for
|
|
8370
8786
|
# `config-multiaccountsetup.amazonaws.com`.
|
|
8371
8787
|
#
|
|
8372
8788
|
# Config sets the state of the rule to:
|
|
8373
8789
|
#
|
|
8374
|
-
# * `CREATE_SUCCESSFUL` when
|
|
8790
|
+
# * `CREATE_SUCCESSFUL` when Config rule has been created in the
|
|
8375
8791
|
# member account.
|
|
8376
8792
|
#
|
|
8377
|
-
# * `CREATE_IN_PROGRESS` when
|
|
8793
|
+
# * `CREATE_IN_PROGRESS` when Config rule is being created in the
|
|
8378
8794
|
# member account.
|
|
8379
8795
|
#
|
|
8380
|
-
# * `CREATE_FAILED` when
|
|
8796
|
+
# * `CREATE_FAILED` when Config rule creation has failed in the member
|
|
8381
8797
|
# account.
|
|
8382
8798
|
#
|
|
8383
|
-
# * `DELETE_FAILED` when
|
|
8799
|
+
# * `DELETE_FAILED` when Config rule deletion has failed in the member
|
|
8384
8800
|
# account.
|
|
8385
8801
|
#
|
|
8386
|
-
# * `DELETE_IN_PROGRESS` when
|
|
8802
|
+
# * `DELETE_IN_PROGRESS` when Config rule is being deleted in the
|
|
8387
8803
|
# member account.
|
|
8388
8804
|
#
|
|
8389
|
-
# * `DELETE_SUCCESSFUL` when
|
|
8805
|
+
# * `DELETE_SUCCESSFUL` when Config rule has been deleted in the
|
|
8390
8806
|
# member account.
|
|
8391
8807
|
#
|
|
8392
|
-
# * `UPDATE_SUCCESSFUL` when
|
|
8808
|
+
# * `UPDATE_SUCCESSFUL` when Config rule has been updated in the
|
|
8393
8809
|
# member account.
|
|
8394
8810
|
#
|
|
8395
|
-
# * `UPDATE_IN_PROGRESS` when
|
|
8811
|
+
# * `UPDATE_IN_PROGRESS` when Config rule is being updated in the
|
|
8396
8812
|
# member account.
|
|
8397
8813
|
#
|
|
8398
|
-
# * `UPDATE_FAILED` when
|
|
8814
|
+
# * `UPDATE_FAILED` when Config rule deletion has failed in the member
|
|
8399
8815
|
# account.
|
|
8400
8816
|
# @return [String]
|
|
8401
8817
|
#
|