aws-sdk-configservice 1.80.0 → 1.81.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-configservice/client.rb +103 -58
- data/lib/aws-sdk-configservice/types.rb +78 -39
- data/lib/aws-sdk-configservice.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 3639395bc4a0183311732004ab157a4bb19d53d50fe9be2da550f62ac4f57c14
|
4
|
+
data.tar.gz: b8a6f51e8adee47ac1406b9bb6138a3c633408c04f51c474773072883b0c932a
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 8a2e487d196665b8ab1e64c49e7dc2950a271ee9263969b65d9ba24cfc46b5d02d1e2a121797d12225ecf5506eda2f44c7b3c508dd531eea41eac363e7c76b17
|
7
|
+
data.tar.gz: 97049d805f313b6217df52476b3e11423d4026b6b09c690a7f54a150ee4d37cd6459819b576cd8d1aff7900e453115cefe420e9d14771320071af8c2873f3e9b
|
data/CHANGELOG.md
CHANGED
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.81.0
|
@@ -3636,7 +3636,12 @@ module Aws::ConfigService
|
|
3636
3636
|
# possible rule-resource combinations in the conformance pack. This
|
3637
3637
|
# metric provides you with a high-level view of the compliance state of
|
3638
3638
|
# your conformance packs, and can be used to identify, investigate, and
|
3639
|
-
# understand compliance
|
3639
|
+
# understand the level of compliance in your conformance packs.
|
3640
|
+
#
|
3641
|
+
# <note markdown="1"> Conformance packs with no evaluation results will have a compliance
|
3642
|
+
# score of `INSUFFICIENT_DATA`.
|
3643
|
+
#
|
3644
|
+
# </note>
|
3640
3645
|
#
|
3641
3646
|
# @option params [Types::ConformancePackComplianceScoresFilters] :filters
|
3642
3647
|
# Filters the results based on the
|
@@ -3646,10 +3651,19 @@ module Aws::ConfigService
|
|
3646
3651
|
# Determines the order in which conformance pack compliance scores are
|
3647
3652
|
# sorted. Either in ascending or descending order.
|
3648
3653
|
#
|
3654
|
+
# Conformance packs with a compliance score of `INSUFFICIENT_DATA` will
|
3655
|
+
# be first when sorting by ascending order and last when sorting by
|
3656
|
+
# descending order.
|
3657
|
+
#
|
3649
3658
|
# @option params [String] :sort_by
|
3650
3659
|
# Sorts your conformance pack compliance scores in either ascending or
|
3651
3660
|
# descending order, depending on `SortOrder`.
|
3652
3661
|
#
|
3662
|
+
# By default, conformance pack compliance scores are sorted in ascending
|
3663
|
+
# order by compliance score and alphabetically by name of the
|
3664
|
+
# conformance pack if there is more than one conformance pack with the
|
3665
|
+
# same compliance score.
|
3666
|
+
#
|
3653
3667
|
# @option params [Integer] :limit
|
3654
3668
|
# The maximum number of conformance pack compliance scores returned on
|
3655
3669
|
# each page.
|
@@ -3909,24 +3923,31 @@ module Aws::ConfigService
|
|
3909
3923
|
req.send_request(options)
|
3910
3924
|
end
|
3911
3925
|
|
3912
|
-
# Adds or updates an Config rule
|
3913
|
-
#
|
3914
|
-
#
|
3915
|
-
#
|
3916
|
-
#
|
3917
|
-
#
|
3918
|
-
#
|
3919
|
-
#
|
3920
|
-
#
|
3921
|
-
#
|
3922
|
-
#
|
3923
|
-
#
|
3924
|
-
#
|
3925
|
-
#
|
3926
|
-
#
|
3927
|
-
#
|
3928
|
-
#
|
3929
|
-
#
|
3926
|
+
# Adds or updates an Config rule to evaluate if your Amazon Web Services
|
3927
|
+
# resources comply with your desired configurations. For information on
|
3928
|
+
# how many Config rules you can have per account, see [ **Service
|
3929
|
+
# Limits** ][1] in the *Config Developer Guide*.
|
3930
|
+
#
|
3931
|
+
# There are two types of rules: Config Custom Rules and Config Managed
|
3932
|
+
# Rules. You can use `PutConfigRule` to create both Config custom rules
|
3933
|
+
# and Config managed rules.
|
3934
|
+
#
|
3935
|
+
# Custom rules are rules that you can create using either Guard or
|
3936
|
+
# Lambda functions. Guard ([Guard GitHub Repository][2]) is a
|
3937
|
+
# policy-as-code language that allows you to write policies that are
|
3938
|
+
# enforced by Config Custom Policy rules. Lambda uses custom code that
|
3939
|
+
# you upload to evaluate a custom rule. If you are adding a new Custom
|
3940
|
+
# Lambda rule, you first need to create an Lambda function that the rule
|
3941
|
+
# invokes to evaluate your resources. When you use `PutConfigRule` to
|
3942
|
+
# add a Custom Lambda rule to Config, you must specify the Amazon
|
3943
|
+
# Resource Name (ARN) that Lambda assigns to the function. You specify
|
3944
|
+
# the ARN in the `SourceIdentifier` key. This key is part of the
|
3945
|
+
# `Source` object, which is part of the `ConfigRule` object.
|
3946
|
+
#
|
3947
|
+
# Managed rules are predefined, customizable rules created by Config.
|
3948
|
+
# For a list of managed rules, see [List of Config Managed Rules][3]. If
|
3949
|
+
# you are adding an Config managed rule, you must specify the rule's
|
3950
|
+
# identifier for the `SourceIdentifier` key.
|
3930
3951
|
#
|
3931
3952
|
# For any new rule that you add, specify the `ConfigRuleName` in the
|
3932
3953
|
# `ConfigRule` object. Do not specify the `ConfigRuleArn` or the
|
@@ -3936,18 +3957,16 @@ module Aws::ConfigService
|
|
3936
3957
|
# the rule by `ConfigRuleName`, `ConfigRuleId`, or `ConfigRuleArn` in
|
3937
3958
|
# the `ConfigRule` data type that you use in this request.
|
3938
3959
|
#
|
3939
|
-
# For information on how many Config rules you can have per account, see
|
3940
|
-
# [ **Service Limits** ][2] in the Config Developer Guide.
|
3941
|
-
#
|
3942
3960
|
# For more information about developing and using Config rules, see
|
3943
3961
|
# [Evaluating Amazon Web Services resource Configurations with
|
3944
|
-
# Config][
|
3962
|
+
# Config][4] in the *Config Developer Guide*.
|
3945
3963
|
#
|
3946
3964
|
#
|
3947
3965
|
#
|
3948
|
-
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/
|
3949
|
-
# [2]: https://
|
3950
|
-
# [3]: https://docs.aws.amazon.com/config/latest/developerguide/
|
3966
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
|
3967
|
+
# [2]: https://github.com/aws-cloudformation/cloudformation-guard
|
3968
|
+
# [3]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
|
3969
|
+
# [4]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
|
3951
3970
|
#
|
3952
3971
|
# @option params [required, Types::ConfigRule] :config_rule
|
3953
3972
|
# The rule that you want to add to your account.
|
@@ -4031,7 +4050,7 @@ module Aws::ConfigService
|
|
4031
4050
|
# valid delegated administrator.
|
4032
4051
|
#
|
4033
4052
|
# To register a delegated administrator, see [Register a Delegated
|
4034
|
-
# Administrator][1] in the Config developer guide
|
4053
|
+
# Administrator][1] in the *Config developer guide*.
|
4035
4054
|
#
|
4036
4055
|
# </note>
|
4037
4056
|
#
|
@@ -4157,8 +4176,8 @@ module Aws::ConfigService
|
|
4157
4176
|
# information on how many conformance packs you can have per account,
|
4158
4177
|
# see [ **Service Limits** ][1] in the Config Developer Guide.
|
4159
4178
|
#
|
4160
|
-
# This API creates a service
|
4161
|
-
# `AWSServiceRoleForConfigConforms` in your account. The service
|
4179
|
+
# This API creates a service-linked role
|
4180
|
+
# `AWSServiceRoleForConfigConforms` in your account. The service-linked
|
4162
4181
|
# role is created only when the role does not exist in your account.
|
4163
4182
|
#
|
4164
4183
|
# <note markdown="1"> You must specify either the `TemplateS3Uri` or the `TemplateBody`
|
@@ -4390,11 +4409,11 @@ module Aws::ConfigService
|
|
4390
4409
|
req.send_request(options)
|
4391
4410
|
end
|
4392
4411
|
|
4393
|
-
# Adds or updates
|
4394
|
-
#
|
4412
|
+
# Adds or updates an Config rule for your entire organization to
|
4413
|
+
# evaluate if your Amazon Web Services resources comply with your
|
4395
4414
|
# desired configurations. For information on how many organization
|
4396
4415
|
# Config rules you can have per account, see [ **Service Limits** ][1]
|
4397
|
-
# in the Config Developer Guide
|
4416
|
+
# in the *Config Developer Guide*.
|
4398
4417
|
#
|
4399
4418
|
# Only a master account and a delegated administrator can create or
|
4400
4419
|
# update an organization Config rule. When calling this API with a
|
@@ -4403,9 +4422,9 @@ module Aws::ConfigService
|
|
4403
4422
|
# can have up to 3 delegated administrators.
|
4404
4423
|
#
|
4405
4424
|
# This API enables organization service access through the
|
4406
|
-
# `EnableAWSServiceAccess` action and creates a service
|
4425
|
+
# `EnableAWSServiceAccess` action and creates a service-linked role
|
4407
4426
|
# `AWSServiceRoleForConfigMultiAccountSetup` in the master or delegated
|
4408
|
-
# administrator account of your organization. The service
|
4427
|
+
# administrator account of your organization. The service-linked role is
|
4409
4428
|
# created only when the role does not exist in the caller account.
|
4410
4429
|
# Config verifies the existence of role with `GetRole` action.
|
4411
4430
|
#
|
@@ -4414,49 +4433,75 @@ module Aws::ConfigService
|
|
4414
4433
|
# `register-delegated-administrator` for
|
4415
4434
|
# `config-multiaccountsetup.amazonaws.com`.
|
4416
4435
|
#
|
4417
|
-
#
|
4418
|
-
#
|
4419
|
-
#
|
4420
|
-
#
|
4421
|
-
#
|
4422
|
-
#
|
4423
|
-
#
|
4424
|
-
#
|
4425
|
-
#
|
4426
|
-
# rule
|
4436
|
+
# There are two types of rules: Config Custom Rules and Config Managed
|
4437
|
+
# Rules. You can use `PutOrganizationConfigRule` to create both Config
|
4438
|
+
# custom rules and Config managed rules.
|
4439
|
+
#
|
4440
|
+
# Custom rules are rules that you can create using either Guard or
|
4441
|
+
# Lambda functions. Guard ([Guard GitHub Repository][2]) is a
|
4442
|
+
# policy-as-code language that allows you to write policies that are
|
4443
|
+
# enforced by Config Custom Policy rules. Lambda uses custom code that
|
4444
|
+
# you upload to evaluate a custom rule. If you are adding a new Custom
|
4445
|
+
# Lambda rule, you first need to create an Lambda function in the master
|
4446
|
+
# account or a delegated administrator that the rule invokes to evaluate
|
4447
|
+
# your resources. You also need to create an IAM role in the managed
|
4448
|
+
# account that can be assumed by the Lambda function. When you use
|
4449
|
+
# `PutOrganizationConfigRule` to add a Custom Lambda rule to Config, you
|
4450
|
+
# must specify the Amazon Resource Name (ARN) that Lambda assigns to the
|
4451
|
+
# function.
|
4452
|
+
#
|
4453
|
+
# Managed rules are predefined, customizable rules created by Config.
|
4454
|
+
# For a list of managed rules, see [List of Config Managed Rules][3]. If
|
4455
|
+
# you are adding an Config managed rule, you must specify the rule's
|
4456
|
+
# identifier for the `RuleIdentifier` key.
|
4427
4457
|
#
|
4428
4458
|
# <note markdown="1"> Prerequisite: Ensure you call `EnableAllFeatures` API to enable all
|
4429
4459
|
# features in an organization.
|
4430
4460
|
#
|
4431
|
-
#
|
4432
|
-
# `
|
4461
|
+
# Make sure to specify one of either
|
4462
|
+
# `OrganizationCustomPolicyRuleMetadata` for Custom Policy rules,
|
4463
|
+
# `OrganizationCustomRuleMetadata` for Custom Lambda rules, or
|
4464
|
+
# `OrganizationManagedRuleMetadata` for managed rules.
|
4433
4465
|
#
|
4434
4466
|
# </note>
|
4435
4467
|
#
|
4436
4468
|
#
|
4437
4469
|
#
|
4438
4470
|
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
|
4471
|
+
# [2]: https://github.com/aws-cloudformation/cloudformation-guard
|
4472
|
+
# [3]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
|
4439
4473
|
#
|
4440
4474
|
# @option params [required, String] :organization_config_rule_name
|
4441
4475
|
# The name that you assign to an organization Config rule.
|
4442
4476
|
#
|
4443
4477
|
# @option params [Types::OrganizationManagedRuleMetadata] :organization_managed_rule_metadata
|
4444
|
-
# An `OrganizationManagedRuleMetadata` object.
|
4478
|
+
# An `OrganizationManagedRuleMetadata` object. This object specifies
|
4479
|
+
# organization managed rule metadata such as resource type and ID of
|
4480
|
+
# Amazon Web Services resource along with the rule identifier. It also
|
4481
|
+
# provides the frequency with which you want Config to run evaluations
|
4482
|
+
# for the rule if the trigger type is periodic.
|
4445
4483
|
#
|
4446
4484
|
# @option params [Types::OrganizationCustomRuleMetadata] :organization_custom_rule_metadata
|
4447
|
-
# An `OrganizationCustomRuleMetadata` object.
|
4485
|
+
# An `OrganizationCustomRuleMetadata` object. This object specifies
|
4486
|
+
# organization custom rule metadata such as resource type, resource ID
|
4487
|
+
# of Amazon Web Services resource, Lambda function ARN, and organization
|
4488
|
+
# trigger types that trigger Config to evaluate your Amazon Web Services
|
4489
|
+
# resources against a rule. It also provides the frequency with which
|
4490
|
+
# you want Config to run evaluations for the rule if the trigger type is
|
4491
|
+
# periodic.
|
4448
4492
|
#
|
4449
4493
|
# @option params [Array<String>] :excluded_accounts
|
4450
4494
|
# A comma-separated list of accounts that you want to exclude from an
|
4451
4495
|
# organization Config rule.
|
4452
4496
|
#
|
4453
4497
|
# @option params [Types::OrganizationCustomPolicyRuleMetadata] :organization_custom_policy_rule_metadata
|
4454
|
-
# An object
|
4455
|
-
#
|
4456
|
-
#
|
4457
|
-
#
|
4458
|
-
# resource,
|
4459
|
-
#
|
4498
|
+
# An `OrganizationCustomPolicyRuleMetadata` object. This object
|
4499
|
+
# specifies metadata for your organization's Config Custom Policy rule.
|
4500
|
+
# The metadata includes the runtime system in use, which accounts have
|
4501
|
+
# debug logging enabled, and other custom rule metadata, such as
|
4502
|
+
# resource type, resource ID of Amazon Web Services resource, and
|
4503
|
+
# organization trigger types that initiate Config to evaluate Amazon Web
|
4504
|
+
# Services resources against a rule.
|
4460
4505
|
#
|
4461
4506
|
# @return [Types::PutOrganizationConfigRuleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
4462
4507
|
#
|
@@ -4528,9 +4573,9 @@ module Aws::ConfigService
|
|
4528
4573
|
#
|
4529
4574
|
# This API enables organization service access for
|
4530
4575
|
# `config-multiaccountsetup.amazonaws.com` through the
|
4531
|
-
# `EnableAWSServiceAccess` action and creates a service
|
4576
|
+
# `EnableAWSServiceAccess` action and creates a service-linked role
|
4532
4577
|
# `AWSServiceRoleForConfigMultiAccountSetup` in the master or delegated
|
4533
|
-
# administrator account of your organization. The service
|
4578
|
+
# administrator account of your organization. The service-linked role is
|
4534
4579
|
# created only when the role does not exist in the caller account. To
|
4535
4580
|
# use this API with delegated administrator, register a delegated
|
4536
4581
|
# administrator by calling Amazon Web Services Organization
|
@@ -5054,7 +5099,7 @@ module Aws::ConfigService
|
|
5054
5099
|
# the properties.
|
5055
5100
|
#
|
5056
5101
|
# For more information about query components, see the [ **Query
|
5057
|
-
# Components** ][1] section in the Config Developer Guide
|
5102
|
+
# Components** ][1] section in the *Config Developer Guide*.
|
5058
5103
|
#
|
5059
5104
|
#
|
5060
5105
|
#
|
@@ -5340,7 +5385,7 @@ module Aws::ConfigService
|
|
5340
5385
|
params: params,
|
5341
5386
|
config: config)
|
5342
5387
|
context[:gem_name] = 'aws-sdk-configservice'
|
5343
|
-
context[:gem_version] = '1.
|
5388
|
+
context[:gem_version] = '1.81.0'
|
5344
5389
|
Seahorse::Client::Request.new(handlers, context)
|
5345
5390
|
end
|
5346
5391
|
|
@@ -877,13 +877,25 @@ module Aws::ConfigService
|
|
877
877
|
include Aws::Structure
|
878
878
|
end
|
879
879
|
|
880
|
-
#
|
881
|
-
#
|
882
|
-
#
|
883
|
-
#
|
884
|
-
#
|
885
|
-
#
|
886
|
-
#
|
880
|
+
# Config rules evaluate the configuration settings of your Amazon Web
|
881
|
+
# Services resources. A rule can run when Config detects a configuration
|
882
|
+
# change to an Amazon Web Services resource or at a periodic frequency
|
883
|
+
# that you choose (for example, every 24 hours). There are two types of
|
884
|
+
# rules: Config Managed Rules and Config Custom Rules. Managed rules are
|
885
|
+
# predefined, customizable rules created by Config. For a list of
|
886
|
+
# managed rules, see [List of Config Managed Rules][1].
|
887
|
+
#
|
888
|
+
# Custom rules are rules that you can create using either Guard or
|
889
|
+
# Lambda functions. Guard ([Guard GitHub Repository][2]) is a
|
890
|
+
# policy-as-code language that allows you to write policies that are
|
891
|
+
# enforced by Config Custom Policy rules. Lambda uses custom code that
|
892
|
+
# you upload to evaluate a custom rule. It is invoked by events that are
|
893
|
+
# published to it by an event source, which Config invokes when the
|
894
|
+
# custom rule is initiated.
|
895
|
+
#
|
896
|
+
# For more information about developing and using Config rules, see
|
897
|
+
# [Evaluating Amazon Web Services resource Configurations with
|
898
|
+
# Config][3] in the *Config Developer Guide*.
|
887
899
|
#
|
888
900
|
# <note markdown="1"> You can use the Amazon Web Services CLI and Amazon Web Services SDKs
|
889
901
|
# if you want to create a rule that triggers evaluations for your
|
@@ -892,13 +904,11 @@ module Aws::ConfigService
|
|
892
904
|
#
|
893
905
|
# </note>
|
894
906
|
#
|
895
|
-
# For more information about developing and using Config rules, see
|
896
|
-
# [Evaluating Amazon Web Services resource Configurations with
|
897
|
-
# Config][1] in the *Config Developer Guide*.
|
898
|
-
#
|
899
907
|
#
|
900
908
|
#
|
901
|
-
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/
|
909
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
|
910
|
+
# [2]: https://github.com/aws-cloudformation/cloudformation-guard
|
911
|
+
# [3]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
|
902
912
|
#
|
903
913
|
# @note When making an API call, you may pass ConfigRule
|
904
914
|
# data as a hash:
|
@@ -968,9 +978,11 @@ module Aws::ConfigService
|
|
968
978
|
# @return [Types::Scope]
|
969
979
|
#
|
970
980
|
# @!attribute [rw] source
|
971
|
-
# Provides the rule owner (Amazon Web Services
|
972
|
-
#
|
973
|
-
#
|
981
|
+
# Provides the rule owner (`Amazon Web Services` for managed rules,
|
982
|
+
# `CUSTOM_POLICY` for Custom Policy rules, and `CUSTOM_LAMBDA` for
|
983
|
+
# Custom Lambda rules), the rule identifier, and the notifications
|
984
|
+
# that cause the function to evaluate your Amazon Web Services
|
985
|
+
# resources.
|
974
986
|
# @return [Types::Source]
|
975
987
|
#
|
976
988
|
# @!attribute [rw] input_parameters
|
@@ -1018,7 +1030,7 @@ module Aws::ConfigService
|
|
1018
1030
|
# @!attribute [rw] created_by
|
1019
1031
|
# Service principal name of the service that created the rule.
|
1020
1032
|
#
|
1021
|
-
# <note markdown="1"> The field is populated only if the service
|
1033
|
+
# <note markdown="1"> The field is populated only if the service-linked rule is created by
|
1022
1034
|
# a service. The field is empty if you create your own rule.
|
1023
1035
|
#
|
1024
1036
|
# </note>
|
@@ -1631,11 +1643,13 @@ module Aws::ConfigService
|
|
1631
1643
|
# number of total possible rule-resource combinations in the conformance
|
1632
1644
|
# pack. This metric provides you with a high-level view of the
|
1633
1645
|
# compliance state of your conformance packs, and can be used to
|
1634
|
-
# identify, investigate, and understand compliance
|
1646
|
+
# identify, investigate, and understand the level of compliance in your
|
1635
1647
|
# conformance packs.
|
1636
1648
|
#
|
1637
1649
|
# @!attribute [rw] score
|
1638
|
-
# Compliance score for the conformance pack.
|
1650
|
+
# Compliance score for the conformance pack. Conformance packs with no
|
1651
|
+
# evaluation results will have a compliance score of
|
1652
|
+
# `INSUFFICIENT_DATA`.
|
1639
1653
|
# @return [String]
|
1640
1654
|
#
|
1641
1655
|
# @!attribute [rw] conformance_pack_name
|
@@ -1668,8 +1682,11 @@ module Aws::ConfigService
|
|
1668
1682
|
# }
|
1669
1683
|
#
|
1670
1684
|
# @!attribute [rw] conformance_pack_names
|
1671
|
-
# The
|
1672
|
-
# compliance score result.
|
1685
|
+
# The names of the conformance packs whose compliance scores you want
|
1686
|
+
# to include in the conformance pack compliance score result set. You
|
1687
|
+
# can include up to 25 conformance packs in the `ConformancePackNames`
|
1688
|
+
# array of strings, each with a character limit of 256 characters for
|
1689
|
+
# the conformance pack name.
|
1673
1690
|
# @return [Array<String>]
|
1674
1691
|
#
|
1675
1692
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConformancePackComplianceScoresFilters AWS API Documentation
|
@@ -2456,7 +2473,7 @@ module Aws::ConfigService
|
|
2456
2473
|
# If you specify a bucket that belongs to another Amazon Web Services
|
2457
2474
|
# account, that bucket must have policies that grant access
|
2458
2475
|
# permissions to Config. For more information, see [Permissions for
|
2459
|
-
# the Amazon S3 Bucket][1] in the Config Developer Guide
|
2476
|
+
# the Amazon S3 Bucket][1] in the *Config Developer Guide*.
|
2460
2477
|
#
|
2461
2478
|
#
|
2462
2479
|
#
|
@@ -2480,7 +2497,7 @@ module Aws::ConfigService
|
|
2480
2497
|
# If you choose a topic from another account, the topic must have
|
2481
2498
|
# policies that grant access permissions to Config. For more
|
2482
2499
|
# information, see [Permissions for the Amazon SNS Topic][1] in the
|
2483
|
-
# Config Developer Guide
|
2500
|
+
# *Config Developer Guide*.
|
2484
2501
|
#
|
2485
2502
|
#
|
2486
2503
|
#
|
@@ -5240,13 +5257,13 @@ module Aws::ConfigService
|
|
5240
5257
|
#
|
5241
5258
|
# * For PutOrganizationConfigRule, organization Config rule cannot be
|
5242
5259
|
# created because you do not have permissions to call IAM `GetRole`
|
5243
|
-
# action or create a service
|
5260
|
+
# action or create a service-linked role.
|
5244
5261
|
#
|
5245
5262
|
# * For PutConformancePack and PutOrganizationConformancePack, a
|
5246
5263
|
# conformance pack cannot be created because you do not have
|
5247
5264
|
# permissions:
|
5248
5265
|
#
|
5249
|
-
# * To call IAM `GetRole` action or create a service
|
5266
|
+
# * To call IAM `GetRole` action or create a service-linked role.
|
5250
5267
|
#
|
5251
5268
|
# * To read Amazon S3 bucket.
|
5252
5269
|
#
|
@@ -5446,11 +5463,20 @@ module Aws::ConfigService
|
|
5446
5463
|
# @!attribute [rw] sort_order
|
5447
5464
|
# Determines the order in which conformance pack compliance scores are
|
5448
5465
|
# sorted. Either in ascending or descending order.
|
5466
|
+
#
|
5467
|
+
# Conformance packs with a compliance score of `INSUFFICIENT_DATA`
|
5468
|
+
# will be first when sorting by ascending order and last when sorting
|
5469
|
+
# by descending order.
|
5449
5470
|
# @return [String]
|
5450
5471
|
#
|
5451
5472
|
# @!attribute [rw] sort_by
|
5452
5473
|
# Sorts your conformance pack compliance scores in either ascending or
|
5453
5474
|
# descending order, depending on `SortOrder`.
|
5475
|
+
#
|
5476
|
+
# By default, conformance pack compliance scores are sorted in
|
5477
|
+
# ascending order by compliance score and alphabetically by name of
|
5478
|
+
# the conformance pack if there is more than one conformance pack with
|
5479
|
+
# the same compliance score.
|
5454
5480
|
# @return [String]
|
5455
5481
|
#
|
5456
5482
|
# @!attribute [rw] limit
|
@@ -5482,7 +5508,7 @@ module Aws::ConfigService
|
|
5482
5508
|
# @return [String]
|
5483
5509
|
#
|
5484
5510
|
# @!attribute [rw] conformance_pack_compliance_scores
|
5485
|
-
# A list of `ConformancePackComplianceScore` objects
|
5511
|
+
# A list of `ConformancePackComplianceScore` objects.
|
5486
5512
|
# @return [Array<Types::ConformancePackComplianceScore>]
|
5487
5513
|
#
|
5488
5514
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ListConformancePackComplianceScoresResponse AWS API Documentation
|
@@ -7283,11 +7309,21 @@ module Aws::ConfigService
|
|
7283
7309
|
# @return [String]
|
7284
7310
|
#
|
7285
7311
|
# @!attribute [rw] organization_managed_rule_metadata
|
7286
|
-
# An `OrganizationManagedRuleMetadata` object.
|
7312
|
+
# An `OrganizationManagedRuleMetadata` object. This object specifies
|
7313
|
+
# organization managed rule metadata such as resource type and ID of
|
7314
|
+
# Amazon Web Services resource along with the rule identifier. It also
|
7315
|
+
# provides the frequency with which you want Config to run evaluations
|
7316
|
+
# for the rule if the trigger type is periodic.
|
7287
7317
|
# @return [Types::OrganizationManagedRuleMetadata]
|
7288
7318
|
#
|
7289
7319
|
# @!attribute [rw] organization_custom_rule_metadata
|
7290
|
-
# An `OrganizationCustomRuleMetadata` object.
|
7320
|
+
# An `OrganizationCustomRuleMetadata` object. This object specifies
|
7321
|
+
# organization custom rule metadata such as resource type, resource ID
|
7322
|
+
# of Amazon Web Services resource, Lambda function ARN, and
|
7323
|
+
# organization trigger types that trigger Config to evaluate your
|
7324
|
+
# Amazon Web Services resources against a rule. It also provides the
|
7325
|
+
# frequency with which you want Config to run evaluations for the rule
|
7326
|
+
# if the trigger type is periodic.
|
7291
7327
|
# @return [Types::OrganizationCustomRuleMetadata]
|
7292
7328
|
#
|
7293
7329
|
# @!attribute [rw] excluded_accounts
|
@@ -7296,12 +7332,13 @@ module Aws::ConfigService
|
|
7296
7332
|
# @return [Array<String>]
|
7297
7333
|
#
|
7298
7334
|
# @!attribute [rw] organization_custom_policy_rule_metadata
|
7299
|
-
# An object
|
7300
|
-
#
|
7301
|
-
#
|
7302
|
-
#
|
7303
|
-
# resource,
|
7304
|
-
#
|
7335
|
+
# An `OrganizationCustomPolicyRuleMetadata` object. This object
|
7336
|
+
# specifies metadata for your organization's Config Custom Policy
|
7337
|
+
# rule. The metadata includes the runtime system in use, which
|
7338
|
+
# accounts have debug logging enabled, and other custom rule metadata,
|
7339
|
+
# such as resource type, resource ID of Amazon Web Services resource,
|
7340
|
+
# and organization trigger types that initiate Config to evaluate
|
7341
|
+
# Amazon Web Services resources against a rule.
|
7305
7342
|
# @return [Types::OrganizationCustomPolicyRuleMetadata]
|
7306
7343
|
#
|
7307
7344
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutOrganizationConfigRuleRequest AWS API Documentation
|
@@ -7951,7 +7988,7 @@ module Aws::ConfigService
|
|
7951
7988
|
# @return [String]
|
7952
7989
|
#
|
7953
7990
|
# @!attribute [rw] created_by_service
|
7954
|
-
# Name of the service that owns the service
|
7991
|
+
# Name of the service that owns the service-linked rule, if
|
7955
7992
|
# applicable.
|
7956
7993
|
# @return [String]
|
7957
7994
|
#
|
@@ -8578,9 +8615,11 @@ module Aws::ConfigService
|
|
8578
8615
|
include Aws::Structure
|
8579
8616
|
end
|
8580
8617
|
|
8581
|
-
# Provides the CustomPolicyDetails, the rule owner (Amazon Web
|
8582
|
-
#
|
8583
|
-
#
|
8618
|
+
# Provides the CustomPolicyDetails, the rule owner (`Amazon Web
|
8619
|
+
# Services` for managed rules, `CUSTOM_POLICY` for Custom Policy rules,
|
8620
|
+
# and `CUSTOM_LAMBDA` for Custom Lambda rules), the rule identifier, and
|
8621
|
+
# the events that cause the evaluation of your Amazon Web Services
|
8622
|
+
# resources.
|
8584
8623
|
#
|
8585
8624
|
# @note When making an API call, you may pass Source
|
8586
8625
|
# data as a hash:
|
@@ -8608,11 +8647,11 @@ module Aws::ConfigService
|
|
8608
8647
|
#
|
8609
8648
|
# Config Managed Rules are predefined rules owned by Amazon Web
|
8610
8649
|
# Services. For more information, see [Config Managed Rules][1] in the
|
8611
|
-
# Config developer guide
|
8650
|
+
# *Config developer guide*.
|
8612
8651
|
#
|
8613
8652
|
# Config Custom Rules are rules that you can develop either with Guard
|
8614
8653
|
# (`CUSTOM_POLICY`) or Lambda (`CUSTOM_LAMBDA`). For more information,
|
8615
|
-
# see [Config Custom Rules ][2] in the Config developer guide
|
8654
|
+
# see [Config Custom Rules ][2] in the *Config developer guide*.
|
8616
8655
|
#
|
8617
8656
|
#
|
8618
8657
|
#
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-configservice
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.81.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-
|
11
|
+
date: 2022-08-01 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|