aws-sdk-configservice 1.80.0 → 1.81.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 41724fe084e0a48047623137f939a63835cfacba4e2106c8a565b69320544235
4
- data.tar.gz: 8e9fe90efc4cc53d8139b5cb8ed7c6b4680e2cc33b29e5d1fa0fdd8de18a5d91
3
+ metadata.gz: 3639395bc4a0183311732004ab157a4bb19d53d50fe9be2da550f62ac4f57c14
4
+ data.tar.gz: b8a6f51e8adee47ac1406b9bb6138a3c633408c04f51c474773072883b0c932a
5
5
  SHA512:
6
- metadata.gz: a56dc39397bb305ea1fe598037aefcc4027a7781e3d68c5bff9b1710bc573c3f53d3592c5680be316b7de5978ceaac25834656f84ed5c18d38f5fe21eb352f0b
7
- data.tar.gz: 946f853ea814a114226d0425159aceea9d89d0442b48078350f6a97cdbf82aff0efe443601c37e58839cac48700a554bd2509098366393ba4bae4f13651a2a68
6
+ metadata.gz: 8a2e487d196665b8ab1e64c49e7dc2950a271ee9263969b65d9ba24cfc46b5d02d1e2a121797d12225ecf5506eda2f44c7b3c508dd531eea41eac363e7c76b17
7
+ data.tar.gz: 97049d805f313b6217df52476b3e11423d4026b6b09c690a7f54a150ee4d37cd6459819b576cd8d1aff7900e453115cefe420e9d14771320071af8c2873f3e9b
data/CHANGELOG.md CHANGED
@@ -1,6 +1,11 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.81.0 (2022-08-01)
5
+ ------------------
6
+
7
+ * Feature - Documentation update for PutConfigRule and PutOrganizationConfigRule
8
+
4
9
  1.80.0 (2022-07-27)
5
10
  ------------------
6
11
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.80.0
1
+ 1.81.0
@@ -3636,7 +3636,12 @@ module Aws::ConfigService
3636
3636
  # possible rule-resource combinations in the conformance pack. This
3637
3637
  # metric provides you with a high-level view of the compliance state of
3638
3638
  # your conformance packs, and can be used to identify, investigate, and
3639
- # understand compliance deviations in your conformance packs.
3639
+ # understand the level of compliance in your conformance packs.
3640
+ #
3641
+ # <note markdown="1"> Conformance packs with no evaluation results will have a compliance
3642
+ # score of `INSUFFICIENT_DATA`.
3643
+ #
3644
+ # </note>
3640
3645
  #
3641
3646
  # @option params [Types::ConformancePackComplianceScoresFilters] :filters
3642
3647
  # Filters the results based on the
@@ -3646,10 +3651,19 @@ module Aws::ConfigService
3646
3651
  # Determines the order in which conformance pack compliance scores are
3647
3652
  # sorted. Either in ascending or descending order.
3648
3653
  #
3654
+ # Conformance packs with a compliance score of `INSUFFICIENT_DATA` will
3655
+ # be first when sorting by ascending order and last when sorting by
3656
+ # descending order.
3657
+ #
3649
3658
  # @option params [String] :sort_by
3650
3659
  # Sorts your conformance pack compliance scores in either ascending or
3651
3660
  # descending order, depending on `SortOrder`.
3652
3661
  #
3662
+ # By default, conformance pack compliance scores are sorted in ascending
3663
+ # order by compliance score and alphabetically by name of the
3664
+ # conformance pack if there is more than one conformance pack with the
3665
+ # same compliance score.
3666
+ #
3653
3667
  # @option params [Integer] :limit
3654
3668
  # The maximum number of conformance pack compliance scores returned on
3655
3669
  # each page.
@@ -3909,24 +3923,31 @@ module Aws::ConfigService
3909
3923
  req.send_request(options)
3910
3924
  end
3911
3925
 
3912
- # Adds or updates an Config rule for evaluating whether your Amazon Web
3913
- # Services resources comply with your desired configurations.
3914
- #
3915
- # You can use this action for Config custom rules and Config managed
3916
- # rules. A Config custom rule is a rule that you develop and maintain.
3917
- # An Config managed rule is a customizable, predefined rule that Config
3918
- # provides.
3919
- #
3920
- # If you are adding a new Config custom rule, you must first create the
3921
- # Lambda function that the rule invokes to evaluate your resources. When
3922
- # you use the `PutConfigRule` action to add the rule to Config, you must
3923
- # specify the Amazon Resource Name (ARN) that Lambda assigns to the
3924
- # function. Specify the ARN for the `SourceIdentifier` key. This key is
3925
- # part of the `Source` object, which is part of the `ConfigRule` object.
3926
- #
3927
- # If you are adding an Config managed rule, specify the rule's
3928
- # identifier for the `SourceIdentifier` key. To reference Config managed
3929
- # rule identifiers, see [About Config managed rules][1].
3926
+ # Adds or updates an Config rule to evaluate if your Amazon Web Services
3927
+ # resources comply with your desired configurations. For information on
3928
+ # how many Config rules you can have per account, see [ **Service
3929
+ # Limits** ][1] in the *Config Developer Guide*.
3930
+ #
3931
+ # There are two types of rules: Config Custom Rules and Config Managed
3932
+ # Rules. You can use `PutConfigRule` to create both Config custom rules
3933
+ # and Config managed rules.
3934
+ #
3935
+ # Custom rules are rules that you can create using either Guard or
3936
+ # Lambda functions. Guard ([Guard GitHub Repository][2]) is a
3937
+ # policy-as-code language that allows you to write policies that are
3938
+ # enforced by Config Custom Policy rules. Lambda uses custom code that
3939
+ # you upload to evaluate a custom rule. If you are adding a new Custom
3940
+ # Lambda rule, you first need to create an Lambda function that the rule
3941
+ # invokes to evaluate your resources. When you use `PutConfigRule` to
3942
+ # add a Custom Lambda rule to Config, you must specify the Amazon
3943
+ # Resource Name (ARN) that Lambda assigns to the function. You specify
3944
+ # the ARN in the `SourceIdentifier` key. This key is part of the
3945
+ # `Source` object, which is part of the `ConfigRule` object.
3946
+ #
3947
+ # Managed rules are predefined, customizable rules created by Config.
3948
+ # For a list of managed rules, see [List of Config Managed Rules][3]. If
3949
+ # you are adding an Config managed rule, you must specify the rule's
3950
+ # identifier for the `SourceIdentifier` key.
3930
3951
  #
3931
3952
  # For any new rule that you add, specify the `ConfigRuleName` in the
3932
3953
  # `ConfigRule` object. Do not specify the `ConfigRuleArn` or the
@@ -3936,18 +3957,16 @@ module Aws::ConfigService
3936
3957
  # the rule by `ConfigRuleName`, `ConfigRuleId`, or `ConfigRuleArn` in
3937
3958
  # the `ConfigRule` data type that you use in this request.
3938
3959
  #
3939
- # For information on how many Config rules you can have per account, see
3940
- # [ **Service Limits** ][2] in the Config Developer Guide.
3941
- #
3942
3960
  # For more information about developing and using Config rules, see
3943
3961
  # [Evaluating Amazon Web Services resource Configurations with
3944
- # Config][3] in the *Config Developer Guide*.
3962
+ # Config][4] in the *Config Developer Guide*.
3945
3963
  #
3946
3964
  #
3947
3965
  #
3948
- # [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html
3949
- # [2]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
3950
- # [3]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
3966
+ # [1]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
3967
+ # [2]: https://github.com/aws-cloudformation/cloudformation-guard
3968
+ # [3]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
3969
+ # [4]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
3951
3970
  #
3952
3971
  # @option params [required, Types::ConfigRule] :config_rule
3953
3972
  # The rule that you want to add to your account.
@@ -4031,7 +4050,7 @@ module Aws::ConfigService
4031
4050
  # valid delegated administrator.
4032
4051
  #
4033
4052
  # To register a delegated administrator, see [Register a Delegated
4034
- # Administrator][1] in the Config developer guide.
4053
+ # Administrator][1] in the *Config developer guide*.
4035
4054
  #
4036
4055
  # </note>
4037
4056
  #
@@ -4157,8 +4176,8 @@ module Aws::ConfigService
4157
4176
  # information on how many conformance packs you can have per account,
4158
4177
  # see [ **Service Limits** ][1] in the Config Developer Guide.
4159
4178
  #
4160
- # This API creates a service linked role
4161
- # `AWSServiceRoleForConfigConforms` in your account. The service linked
4179
+ # This API creates a service-linked role
4180
+ # `AWSServiceRoleForConfigConforms` in your account. The service-linked
4162
4181
  # role is created only when the role does not exist in your account.
4163
4182
  #
4164
4183
  # <note markdown="1"> You must specify either the `TemplateS3Uri` or the `TemplateBody`
@@ -4390,11 +4409,11 @@ module Aws::ConfigService
4390
4409
  req.send_request(options)
4391
4410
  end
4392
4411
 
4393
- # Adds or updates organization Config rule for your entire organization
4394
- # evaluating whether your Amazon Web Services resources comply with your
4412
+ # Adds or updates an Config rule for your entire organization to
4413
+ # evaluate if your Amazon Web Services resources comply with your
4395
4414
  # desired configurations. For information on how many organization
4396
4415
  # Config rules you can have per account, see [ **Service Limits** ][1]
4397
- # in the Config Developer Guide.
4416
+ # in the *Config Developer Guide*.
4398
4417
  #
4399
4418
  # Only a master account and a delegated administrator can create or
4400
4419
  # update an organization Config rule. When calling this API with a
@@ -4403,9 +4422,9 @@ module Aws::ConfigService
4403
4422
  # can have up to 3 delegated administrators.
4404
4423
  #
4405
4424
  # This API enables organization service access through the
4406
- # `EnableAWSServiceAccess` action and creates a service linked role
4425
+ # `EnableAWSServiceAccess` action and creates a service-linked role
4407
4426
  # `AWSServiceRoleForConfigMultiAccountSetup` in the master or delegated
4408
- # administrator account of your organization. The service linked role is
4427
+ # administrator account of your organization. The service-linked role is
4409
4428
  # created only when the role does not exist in the caller account.
4410
4429
  # Config verifies the existence of role with `GetRole` action.
4411
4430
  #
@@ -4414,49 +4433,75 @@ module Aws::ConfigService
4414
4433
  # `register-delegated-administrator` for
4415
4434
  # `config-multiaccountsetup.amazonaws.com`.
4416
4435
  #
4417
- # You can use this action to create both Config custom rules and Config
4418
- # managed rules. If you are adding a new Config custom rule, you must
4419
- # first create Lambda function in the master account or a delegated
4420
- # administrator that the rule invokes to evaluate your resources. You
4421
- # also need to create an IAM role in the managed-account that can be
4422
- # assumed by the Lambda function. When you use the
4423
- # `PutOrganizationConfigRule` action to add the rule to Config, you must
4424
- # specify the Amazon Resource Name (ARN) that Lambda assigns to the
4425
- # function. If you are adding an Config managed rule, specify the
4426
- # rule's identifier for the `RuleIdentifier` key.
4436
+ # There are two types of rules: Config Custom Rules and Config Managed
4437
+ # Rules. You can use `PutOrganizationConfigRule` to create both Config
4438
+ # custom rules and Config managed rules.
4439
+ #
4440
+ # Custom rules are rules that you can create using either Guard or
4441
+ # Lambda functions. Guard ([Guard GitHub Repository][2]) is a
4442
+ # policy-as-code language that allows you to write policies that are
4443
+ # enforced by Config Custom Policy rules. Lambda uses custom code that
4444
+ # you upload to evaluate a custom rule. If you are adding a new Custom
4445
+ # Lambda rule, you first need to create an Lambda function in the master
4446
+ # account or a delegated administrator that the rule invokes to evaluate
4447
+ # your resources. You also need to create an IAM role in the managed
4448
+ # account that can be assumed by the Lambda function. When you use
4449
+ # `PutOrganizationConfigRule` to add a Custom Lambda rule to Config, you
4450
+ # must specify the Amazon Resource Name (ARN) that Lambda assigns to the
4451
+ # function.
4452
+ #
4453
+ # Managed rules are predefined, customizable rules created by Config.
4454
+ # For a list of managed rules, see [List of Config Managed Rules][3]. If
4455
+ # you are adding an Config managed rule, you must specify the rule's
4456
+ # identifier for the `RuleIdentifier` key.
4427
4457
  #
4428
4458
  # <note markdown="1"> Prerequisite: Ensure you call `EnableAllFeatures` API to enable all
4429
4459
  # features in an organization.
4430
4460
  #
4431
- # Specify either `OrganizationCustomRuleMetadata` or
4432
- # `OrganizationManagedRuleMetadata`.
4461
+ # Make sure to specify one of either
4462
+ # `OrganizationCustomPolicyRuleMetadata` for Custom Policy rules,
4463
+ # `OrganizationCustomRuleMetadata` for Custom Lambda rules, or
4464
+ # `OrganizationManagedRuleMetadata` for managed rules.
4433
4465
  #
4434
4466
  # </note>
4435
4467
  #
4436
4468
  #
4437
4469
  #
4438
4470
  # [1]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
4471
+ # [2]: https://github.com/aws-cloudformation/cloudformation-guard
4472
+ # [3]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
4439
4473
  #
4440
4474
  # @option params [required, String] :organization_config_rule_name
4441
4475
  # The name that you assign to an organization Config rule.
4442
4476
  #
4443
4477
  # @option params [Types::OrganizationManagedRuleMetadata] :organization_managed_rule_metadata
4444
- # An `OrganizationManagedRuleMetadata` object.
4478
+ # An `OrganizationManagedRuleMetadata` object. This object specifies
4479
+ # organization managed rule metadata such as resource type and ID of
4480
+ # Amazon Web Services resource along with the rule identifier. It also
4481
+ # provides the frequency with which you want Config to run evaluations
4482
+ # for the rule if the trigger type is periodic.
4445
4483
  #
4446
4484
  # @option params [Types::OrganizationCustomRuleMetadata] :organization_custom_rule_metadata
4447
- # An `OrganizationCustomRuleMetadata` object.
4485
+ # An `OrganizationCustomRuleMetadata` object. This object specifies
4486
+ # organization custom rule metadata such as resource type, resource ID
4487
+ # of Amazon Web Services resource, Lambda function ARN, and organization
4488
+ # trigger types that trigger Config to evaluate your Amazon Web Services
4489
+ # resources against a rule. It also provides the frequency with which
4490
+ # you want Config to run evaluations for the rule if the trigger type is
4491
+ # periodic.
4448
4492
  #
4449
4493
  # @option params [Array<String>] :excluded_accounts
4450
4494
  # A comma-separated list of accounts that you want to exclude from an
4451
4495
  # organization Config rule.
4452
4496
  #
4453
4497
  # @option params [Types::OrganizationCustomPolicyRuleMetadata] :organization_custom_policy_rule_metadata
4454
- # An object that specifies metadata for your organization's Config
4455
- # Custom Policy rule. The metadata includes the runtime system in use,
4456
- # which accounts have debug logging enabled, and other custom rule
4457
- # metadata, such as resource type, resource ID of Amazon Web Services
4458
- # resource, and organization trigger types that initiate Config to
4459
- # evaluate Amazon Web Services resources against a rule.
4498
+ # An `OrganizationCustomPolicyRuleMetadata` object. This object
4499
+ # specifies metadata for your organization's Config Custom Policy rule.
4500
+ # The metadata includes the runtime system in use, which accounts have
4501
+ # debug logging enabled, and other custom rule metadata, such as
4502
+ # resource type, resource ID of Amazon Web Services resource, and
4503
+ # organization trigger types that initiate Config to evaluate Amazon Web
4504
+ # Services resources against a rule.
4460
4505
  #
4461
4506
  # @return [Types::PutOrganizationConfigRuleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
4462
4507
  #
@@ -4528,9 +4573,9 @@ module Aws::ConfigService
4528
4573
  #
4529
4574
  # This API enables organization service access for
4530
4575
  # `config-multiaccountsetup.amazonaws.com` through the
4531
- # `EnableAWSServiceAccess` action and creates a service linked role
4576
+ # `EnableAWSServiceAccess` action and creates a service-linked role
4532
4577
  # `AWSServiceRoleForConfigMultiAccountSetup` in the master or delegated
4533
- # administrator account of your organization. The service linked role is
4578
+ # administrator account of your organization. The service-linked role is
4534
4579
  # created only when the role does not exist in the caller account. To
4535
4580
  # use this API with delegated administrator, register a delegated
4536
4581
  # administrator by calling Amazon Web Services Organization
@@ -5054,7 +5099,7 @@ module Aws::ConfigService
5054
5099
  # the properties.
5055
5100
  #
5056
5101
  # For more information about query components, see the [ **Query
5057
- # Components** ][1] section in the Config Developer Guide.
5102
+ # Components** ][1] section in the *Config Developer Guide*.
5058
5103
  #
5059
5104
  #
5060
5105
  #
@@ -5340,7 +5385,7 @@ module Aws::ConfigService
5340
5385
  params: params,
5341
5386
  config: config)
5342
5387
  context[:gem_name] = 'aws-sdk-configservice'
5343
- context[:gem_version] = '1.80.0'
5388
+ context[:gem_version] = '1.81.0'
5344
5389
  Seahorse::Client::Request.new(handlers, context)
5345
5390
  end
5346
5391
 
@@ -877,13 +877,25 @@ module Aws::ConfigService
877
877
  include Aws::Structure
878
878
  end
879
879
 
880
- # An Config rule represents an Lambda function that you create for a
881
- # custom rule or a predefined function for an Config managed rule. The
882
- # function evaluates configuration items to assess whether your Amazon
883
- # Web Services resources comply with your desired configurations. This
884
- # function can run when Config detects a configuration change to an
885
- # Amazon Web Services resource and at a periodic frequency that you
886
- # choose (for example, every 24 hours).
880
+ # Config rules evaluate the configuration settings of your Amazon Web
881
+ # Services resources. A rule can run when Config detects a configuration
882
+ # change to an Amazon Web Services resource or at a periodic frequency
883
+ # that you choose (for example, every 24 hours). There are two types of
884
+ # rules: Config Managed Rules and Config Custom Rules. Managed rules are
885
+ # predefined, customizable rules created by Config. For a list of
886
+ # managed rules, see [List of Config Managed Rules][1].
887
+ #
888
+ # Custom rules are rules that you can create using either Guard or
889
+ # Lambda functions. Guard ([Guard GitHub Repository][2]) is a
890
+ # policy-as-code language that allows you to write policies that are
891
+ # enforced by Config Custom Policy rules. Lambda uses custom code that
892
+ # you upload to evaluate a custom rule. It is invoked by events that are
893
+ # published to it by an event source, which Config invokes when the
894
+ # custom rule is initiated.
895
+ #
896
+ # For more information about developing and using Config rules, see
897
+ # [Evaluating Amazon Web Services resource Configurations with
898
+ # Config][3] in the *Config Developer Guide*.
887
899
  #
888
900
  # <note markdown="1"> You can use the Amazon Web Services CLI and Amazon Web Services SDKs
889
901
  # if you want to create a rule that triggers evaluations for your
@@ -892,13 +904,11 @@ module Aws::ConfigService
892
904
  #
893
905
  # </note>
894
906
  #
895
- # For more information about developing and using Config rules, see
896
- # [Evaluating Amazon Web Services resource Configurations with
897
- # Config][1] in the *Config Developer Guide*.
898
- #
899
907
  #
900
908
  #
901
- # [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
909
+ # [1]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
910
+ # [2]: https://github.com/aws-cloudformation/cloudformation-guard
911
+ # [3]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
902
912
  #
903
913
  # @note When making an API call, you may pass ConfigRule
904
914
  # data as a hash:
@@ -968,9 +978,11 @@ module Aws::ConfigService
968
978
  # @return [Types::Scope]
969
979
  #
970
980
  # @!attribute [rw] source
971
- # Provides the rule owner (Amazon Web Services or customer), the rule
972
- # identifier, and the notifications that cause the function to
973
- # evaluate your Amazon Web Services resources.
981
+ # Provides the rule owner (`Amazon Web Services` for managed rules,
982
+ # `CUSTOM_POLICY` for Custom Policy rules, and `CUSTOM_LAMBDA` for
983
+ # Custom Lambda rules), the rule identifier, and the notifications
984
+ # that cause the function to evaluate your Amazon Web Services
985
+ # resources.
974
986
  # @return [Types::Source]
975
987
  #
976
988
  # @!attribute [rw] input_parameters
@@ -1018,7 +1030,7 @@ module Aws::ConfigService
1018
1030
  # @!attribute [rw] created_by
1019
1031
  # Service principal name of the service that created the rule.
1020
1032
  #
1021
- # <note markdown="1"> The field is populated only if the service linked rule is created by
1033
+ # <note markdown="1"> The field is populated only if the service-linked rule is created by
1022
1034
  # a service. The field is empty if you create your own rule.
1023
1035
  #
1024
1036
  # </note>
@@ -1631,11 +1643,13 @@ module Aws::ConfigService
1631
1643
  # number of total possible rule-resource combinations in the conformance
1632
1644
  # pack. This metric provides you with a high-level view of the
1633
1645
  # compliance state of your conformance packs, and can be used to
1634
- # identify, investigate, and understand compliance deviations in your
1646
+ # identify, investigate, and understand the level of compliance in your
1635
1647
  # conformance packs.
1636
1648
  #
1637
1649
  # @!attribute [rw] score
1638
- # Compliance score for the conformance pack.
1650
+ # Compliance score for the conformance pack. Conformance packs with no
1651
+ # evaluation results will have a compliance score of
1652
+ # `INSUFFICIENT_DATA`.
1639
1653
  # @return [String]
1640
1654
  #
1641
1655
  # @!attribute [rw] conformance_pack_name
@@ -1668,8 +1682,11 @@ module Aws::ConfigService
1668
1682
  # }
1669
1683
  #
1670
1684
  # @!attribute [rw] conformance_pack_names
1671
- # The name of a conformance pack whose score should be included in the
1672
- # compliance score result.
1685
+ # The names of the conformance packs whose compliance scores you want
1686
+ # to include in the conformance pack compliance score result set. You
1687
+ # can include up to 25 conformance packs in the `ConformancePackNames`
1688
+ # array of strings, each with a character limit of 256 characters for
1689
+ # the conformance pack name.
1673
1690
  # @return [Array<String>]
1674
1691
  #
1675
1692
  # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConformancePackComplianceScoresFilters AWS API Documentation
@@ -2456,7 +2473,7 @@ module Aws::ConfigService
2456
2473
  # If you specify a bucket that belongs to another Amazon Web Services
2457
2474
  # account, that bucket must have policies that grant access
2458
2475
  # permissions to Config. For more information, see [Permissions for
2459
- # the Amazon S3 Bucket][1] in the Config Developer Guide.
2476
+ # the Amazon S3 Bucket][1] in the *Config Developer Guide*.
2460
2477
  #
2461
2478
  #
2462
2479
  #
@@ -2480,7 +2497,7 @@ module Aws::ConfigService
2480
2497
  # If you choose a topic from another account, the topic must have
2481
2498
  # policies that grant access permissions to Config. For more
2482
2499
  # information, see [Permissions for the Amazon SNS Topic][1] in the
2483
- # Config Developer Guide.
2500
+ # *Config Developer Guide*.
2484
2501
  #
2485
2502
  #
2486
2503
  #
@@ -5240,13 +5257,13 @@ module Aws::ConfigService
5240
5257
  #
5241
5258
  # * For PutOrganizationConfigRule, organization Config rule cannot be
5242
5259
  # created because you do not have permissions to call IAM `GetRole`
5243
- # action or create a service linked role.
5260
+ # action or create a service-linked role.
5244
5261
  #
5245
5262
  # * For PutConformancePack and PutOrganizationConformancePack, a
5246
5263
  # conformance pack cannot be created because you do not have
5247
5264
  # permissions:
5248
5265
  #
5249
- # * To call IAM `GetRole` action or create a service linked role.
5266
+ # * To call IAM `GetRole` action or create a service-linked role.
5250
5267
  #
5251
5268
  # * To read Amazon S3 bucket.
5252
5269
  #
@@ -5446,11 +5463,20 @@ module Aws::ConfigService
5446
5463
  # @!attribute [rw] sort_order
5447
5464
  # Determines the order in which conformance pack compliance scores are
5448
5465
  # sorted. Either in ascending or descending order.
5466
+ #
5467
+ # Conformance packs with a compliance score of `INSUFFICIENT_DATA`
5468
+ # will be first when sorting by ascending order and last when sorting
5469
+ # by descending order.
5449
5470
  # @return [String]
5450
5471
  #
5451
5472
  # @!attribute [rw] sort_by
5452
5473
  # Sorts your conformance pack compliance scores in either ascending or
5453
5474
  # descending order, depending on `SortOrder`.
5475
+ #
5476
+ # By default, conformance pack compliance scores are sorted in
5477
+ # ascending order by compliance score and alphabetically by name of
5478
+ # the conformance pack if there is more than one conformance pack with
5479
+ # the same compliance score.
5454
5480
  # @return [String]
5455
5481
  #
5456
5482
  # @!attribute [rw] limit
@@ -5482,7 +5508,7 @@ module Aws::ConfigService
5482
5508
  # @return [String]
5483
5509
  #
5484
5510
  # @!attribute [rw] conformance_pack_compliance_scores
5485
- # A list of `ConformancePackComplianceScore` objects
5511
+ # A list of `ConformancePackComplianceScore` objects.
5486
5512
  # @return [Array<Types::ConformancePackComplianceScore>]
5487
5513
  #
5488
5514
  # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ListConformancePackComplianceScoresResponse AWS API Documentation
@@ -7283,11 +7309,21 @@ module Aws::ConfigService
7283
7309
  # @return [String]
7284
7310
  #
7285
7311
  # @!attribute [rw] organization_managed_rule_metadata
7286
- # An `OrganizationManagedRuleMetadata` object.
7312
+ # An `OrganizationManagedRuleMetadata` object. This object specifies
7313
+ # organization managed rule metadata such as resource type and ID of
7314
+ # Amazon Web Services resource along with the rule identifier. It also
7315
+ # provides the frequency with which you want Config to run evaluations
7316
+ # for the rule if the trigger type is periodic.
7287
7317
  # @return [Types::OrganizationManagedRuleMetadata]
7288
7318
  #
7289
7319
  # @!attribute [rw] organization_custom_rule_metadata
7290
- # An `OrganizationCustomRuleMetadata` object.
7320
+ # An `OrganizationCustomRuleMetadata` object. This object specifies
7321
+ # organization custom rule metadata such as resource type, resource ID
7322
+ # of Amazon Web Services resource, Lambda function ARN, and
7323
+ # organization trigger types that trigger Config to evaluate your
7324
+ # Amazon Web Services resources against a rule. It also provides the
7325
+ # frequency with which you want Config to run evaluations for the rule
7326
+ # if the trigger type is periodic.
7291
7327
  # @return [Types::OrganizationCustomRuleMetadata]
7292
7328
  #
7293
7329
  # @!attribute [rw] excluded_accounts
@@ -7296,12 +7332,13 @@ module Aws::ConfigService
7296
7332
  # @return [Array<String>]
7297
7333
  #
7298
7334
  # @!attribute [rw] organization_custom_policy_rule_metadata
7299
- # An object that specifies metadata for your organization's Config
7300
- # Custom Policy rule. The metadata includes the runtime system in use,
7301
- # which accounts have debug logging enabled, and other custom rule
7302
- # metadata, such as resource type, resource ID of Amazon Web Services
7303
- # resource, and organization trigger types that initiate Config to
7304
- # evaluate Amazon Web Services resources against a rule.
7335
+ # An `OrganizationCustomPolicyRuleMetadata` object. This object
7336
+ # specifies metadata for your organization's Config Custom Policy
7337
+ # rule. The metadata includes the runtime system in use, which
7338
+ # accounts have debug logging enabled, and other custom rule metadata,
7339
+ # such as resource type, resource ID of Amazon Web Services resource,
7340
+ # and organization trigger types that initiate Config to evaluate
7341
+ # Amazon Web Services resources against a rule.
7305
7342
  # @return [Types::OrganizationCustomPolicyRuleMetadata]
7306
7343
  #
7307
7344
  # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutOrganizationConfigRuleRequest AWS API Documentation
@@ -7951,7 +7988,7 @@ module Aws::ConfigService
7951
7988
  # @return [String]
7952
7989
  #
7953
7990
  # @!attribute [rw] created_by_service
7954
- # Name of the service that owns the service linked rule, if
7991
+ # Name of the service that owns the service-linked rule, if
7955
7992
  # applicable.
7956
7993
  # @return [String]
7957
7994
  #
@@ -8578,9 +8615,11 @@ module Aws::ConfigService
8578
8615
  include Aws::Structure
8579
8616
  end
8580
8617
 
8581
- # Provides the CustomPolicyDetails, the rule owner (Amazon Web Services
8582
- # or customer), the rule identifier, and the events that cause the
8583
- # evaluation of your Amazon Web Services resources.
8618
+ # Provides the CustomPolicyDetails, the rule owner (`Amazon Web
8619
+ # Services` for managed rules, `CUSTOM_POLICY` for Custom Policy rules,
8620
+ # and `CUSTOM_LAMBDA` for Custom Lambda rules), the rule identifier, and
8621
+ # the events that cause the evaluation of your Amazon Web Services
8622
+ # resources.
8584
8623
  #
8585
8624
  # @note When making an API call, you may pass Source
8586
8625
  # data as a hash:
@@ -8608,11 +8647,11 @@ module Aws::ConfigService
8608
8647
  #
8609
8648
  # Config Managed Rules are predefined rules owned by Amazon Web
8610
8649
  # Services. For more information, see [Config Managed Rules][1] in the
8611
- # Config developer guide.
8650
+ # *Config developer guide*.
8612
8651
  #
8613
8652
  # Config Custom Rules are rules that you can develop either with Guard
8614
8653
  # (`CUSTOM_POLICY`) or Lambda (`CUSTOM_LAMBDA`). For more information,
8615
- # see [Config Custom Rules ][2] in the Config developer guide.
8654
+ # see [Config Custom Rules ][2] in the *Config developer guide*.
8616
8655
  #
8617
8656
  #
8618
8657
  #
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-configservice/customizations'
48
48
  # @!group service
49
49
  module Aws::ConfigService
50
50
 
51
- GEM_VERSION = '1.80.0'
51
+ GEM_VERSION = '1.81.0'
52
52
 
53
53
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-configservice
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.80.0
4
+ version: 1.81.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-07-27 00:00:00.000000000 Z
11
+ date: 2022-08-01 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core