aws-sdk-configservice 1.80.0 → 1.81.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-configservice/client.rb +103 -58
- data/lib/aws-sdk-configservice/types.rb +78 -39
- data/lib/aws-sdk-configservice.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 3639395bc4a0183311732004ab157a4bb19d53d50fe9be2da550f62ac4f57c14
|
4
|
+
data.tar.gz: b8a6f51e8adee47ac1406b9bb6138a3c633408c04f51c474773072883b0c932a
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 8a2e487d196665b8ab1e64c49e7dc2950a271ee9263969b65d9ba24cfc46b5d02d1e2a121797d12225ecf5506eda2f44c7b3c508dd531eea41eac363e7c76b17
|
7
|
+
data.tar.gz: 97049d805f313b6217df52476b3e11423d4026b6b09c690a7f54a150ee4d37cd6459819b576cd8d1aff7900e453115cefe420e9d14771320071af8c2873f3e9b
|
data/CHANGELOG.md
CHANGED
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.81.0
|
@@ -3636,7 +3636,12 @@ module Aws::ConfigService
|
|
3636
3636
|
# possible rule-resource combinations in the conformance pack. This
|
3637
3637
|
# metric provides you with a high-level view of the compliance state of
|
3638
3638
|
# your conformance packs, and can be used to identify, investigate, and
|
3639
|
-
# understand compliance
|
3639
|
+
# understand the level of compliance in your conformance packs.
|
3640
|
+
#
|
3641
|
+
# <note markdown="1"> Conformance packs with no evaluation results will have a compliance
|
3642
|
+
# score of `INSUFFICIENT_DATA`.
|
3643
|
+
#
|
3644
|
+
# </note>
|
3640
3645
|
#
|
3641
3646
|
# @option params [Types::ConformancePackComplianceScoresFilters] :filters
|
3642
3647
|
# Filters the results based on the
|
@@ -3646,10 +3651,19 @@ module Aws::ConfigService
|
|
3646
3651
|
# Determines the order in which conformance pack compliance scores are
|
3647
3652
|
# sorted. Either in ascending or descending order.
|
3648
3653
|
#
|
3654
|
+
# Conformance packs with a compliance score of `INSUFFICIENT_DATA` will
|
3655
|
+
# be first when sorting by ascending order and last when sorting by
|
3656
|
+
# descending order.
|
3657
|
+
#
|
3649
3658
|
# @option params [String] :sort_by
|
3650
3659
|
# Sorts your conformance pack compliance scores in either ascending or
|
3651
3660
|
# descending order, depending on `SortOrder`.
|
3652
3661
|
#
|
3662
|
+
# By default, conformance pack compliance scores are sorted in ascending
|
3663
|
+
# order by compliance score and alphabetically by name of the
|
3664
|
+
# conformance pack if there is more than one conformance pack with the
|
3665
|
+
# same compliance score.
|
3666
|
+
#
|
3653
3667
|
# @option params [Integer] :limit
|
3654
3668
|
# The maximum number of conformance pack compliance scores returned on
|
3655
3669
|
# each page.
|
@@ -3909,24 +3923,31 @@ module Aws::ConfigService
|
|
3909
3923
|
req.send_request(options)
|
3910
3924
|
end
|
3911
3925
|
|
3912
|
-
# Adds or updates an Config rule
|
3913
|
-
#
|
3914
|
-
#
|
3915
|
-
#
|
3916
|
-
#
|
3917
|
-
#
|
3918
|
-
#
|
3919
|
-
#
|
3920
|
-
#
|
3921
|
-
#
|
3922
|
-
#
|
3923
|
-
#
|
3924
|
-
#
|
3925
|
-
#
|
3926
|
-
#
|
3927
|
-
#
|
3928
|
-
#
|
3929
|
-
#
|
3926
|
+
# Adds or updates an Config rule to evaluate if your Amazon Web Services
|
3927
|
+
# resources comply with your desired configurations. For information on
|
3928
|
+
# how many Config rules you can have per account, see [ **Service
|
3929
|
+
# Limits** ][1] in the *Config Developer Guide*.
|
3930
|
+
#
|
3931
|
+
# There are two types of rules: Config Custom Rules and Config Managed
|
3932
|
+
# Rules. You can use `PutConfigRule` to create both Config custom rules
|
3933
|
+
# and Config managed rules.
|
3934
|
+
#
|
3935
|
+
# Custom rules are rules that you can create using either Guard or
|
3936
|
+
# Lambda functions. Guard ([Guard GitHub Repository][2]) is a
|
3937
|
+
# policy-as-code language that allows you to write policies that are
|
3938
|
+
# enforced by Config Custom Policy rules. Lambda uses custom code that
|
3939
|
+
# you upload to evaluate a custom rule. If you are adding a new Custom
|
3940
|
+
# Lambda rule, you first need to create an Lambda function that the rule
|
3941
|
+
# invokes to evaluate your resources. When you use `PutConfigRule` to
|
3942
|
+
# add a Custom Lambda rule to Config, you must specify the Amazon
|
3943
|
+
# Resource Name (ARN) that Lambda assigns to the function. You specify
|
3944
|
+
# the ARN in the `SourceIdentifier` key. This key is part of the
|
3945
|
+
# `Source` object, which is part of the `ConfigRule` object.
|
3946
|
+
#
|
3947
|
+
# Managed rules are predefined, customizable rules created by Config.
|
3948
|
+
# For a list of managed rules, see [List of Config Managed Rules][3]. If
|
3949
|
+
# you are adding an Config managed rule, you must specify the rule's
|
3950
|
+
# identifier for the `SourceIdentifier` key.
|
3930
3951
|
#
|
3931
3952
|
# For any new rule that you add, specify the `ConfigRuleName` in the
|
3932
3953
|
# `ConfigRule` object. Do not specify the `ConfigRuleArn` or the
|
@@ -3936,18 +3957,16 @@ module Aws::ConfigService
|
|
3936
3957
|
# the rule by `ConfigRuleName`, `ConfigRuleId`, or `ConfigRuleArn` in
|
3937
3958
|
# the `ConfigRule` data type that you use in this request.
|
3938
3959
|
#
|
3939
|
-
# For information on how many Config rules you can have per account, see
|
3940
|
-
# [ **Service Limits** ][2] in the Config Developer Guide.
|
3941
|
-
#
|
3942
3960
|
# For more information about developing and using Config rules, see
|
3943
3961
|
# [Evaluating Amazon Web Services resource Configurations with
|
3944
|
-
# Config][
|
3962
|
+
# Config][4] in the *Config Developer Guide*.
|
3945
3963
|
#
|
3946
3964
|
#
|
3947
3965
|
#
|
3948
|
-
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/
|
3949
|
-
# [2]: https://
|
3950
|
-
# [3]: https://docs.aws.amazon.com/config/latest/developerguide/
|
3966
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
|
3967
|
+
# [2]: https://github.com/aws-cloudformation/cloudformation-guard
|
3968
|
+
# [3]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
|
3969
|
+
# [4]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
|
3951
3970
|
#
|
3952
3971
|
# @option params [required, Types::ConfigRule] :config_rule
|
3953
3972
|
# The rule that you want to add to your account.
|
@@ -4031,7 +4050,7 @@ module Aws::ConfigService
|
|
4031
4050
|
# valid delegated administrator.
|
4032
4051
|
#
|
4033
4052
|
# To register a delegated administrator, see [Register a Delegated
|
4034
|
-
# Administrator][1] in the Config developer guide
|
4053
|
+
# Administrator][1] in the *Config developer guide*.
|
4035
4054
|
#
|
4036
4055
|
# </note>
|
4037
4056
|
#
|
@@ -4157,8 +4176,8 @@ module Aws::ConfigService
|
|
4157
4176
|
# information on how many conformance packs you can have per account,
|
4158
4177
|
# see [ **Service Limits** ][1] in the Config Developer Guide.
|
4159
4178
|
#
|
4160
|
-
# This API creates a service
|
4161
|
-
# `AWSServiceRoleForConfigConforms` in your account. The service
|
4179
|
+
# This API creates a service-linked role
|
4180
|
+
# `AWSServiceRoleForConfigConforms` in your account. The service-linked
|
4162
4181
|
# role is created only when the role does not exist in your account.
|
4163
4182
|
#
|
4164
4183
|
# <note markdown="1"> You must specify either the `TemplateS3Uri` or the `TemplateBody`
|
@@ -4390,11 +4409,11 @@ module Aws::ConfigService
|
|
4390
4409
|
req.send_request(options)
|
4391
4410
|
end
|
4392
4411
|
|
4393
|
-
# Adds or updates
|
4394
|
-
#
|
4412
|
+
# Adds or updates an Config rule for your entire organization to
|
4413
|
+
# evaluate if your Amazon Web Services resources comply with your
|
4395
4414
|
# desired configurations. For information on how many organization
|
4396
4415
|
# Config rules you can have per account, see [ **Service Limits** ][1]
|
4397
|
-
# in the Config Developer Guide
|
4416
|
+
# in the *Config Developer Guide*.
|
4398
4417
|
#
|
4399
4418
|
# Only a master account and a delegated administrator can create or
|
4400
4419
|
# update an organization Config rule. When calling this API with a
|
@@ -4403,9 +4422,9 @@ module Aws::ConfigService
|
|
4403
4422
|
# can have up to 3 delegated administrators.
|
4404
4423
|
#
|
4405
4424
|
# This API enables organization service access through the
|
4406
|
-
# `EnableAWSServiceAccess` action and creates a service
|
4425
|
+
# `EnableAWSServiceAccess` action and creates a service-linked role
|
4407
4426
|
# `AWSServiceRoleForConfigMultiAccountSetup` in the master or delegated
|
4408
|
-
# administrator account of your organization. The service
|
4427
|
+
# administrator account of your organization. The service-linked role is
|
4409
4428
|
# created only when the role does not exist in the caller account.
|
4410
4429
|
# Config verifies the existence of role with `GetRole` action.
|
4411
4430
|
#
|
@@ -4414,49 +4433,75 @@ module Aws::ConfigService
|
|
4414
4433
|
# `register-delegated-administrator` for
|
4415
4434
|
# `config-multiaccountsetup.amazonaws.com`.
|
4416
4435
|
#
|
4417
|
-
#
|
4418
|
-
#
|
4419
|
-
#
|
4420
|
-
#
|
4421
|
-
#
|
4422
|
-
#
|
4423
|
-
#
|
4424
|
-
#
|
4425
|
-
#
|
4426
|
-
# rule
|
4436
|
+
# There are two types of rules: Config Custom Rules and Config Managed
|
4437
|
+
# Rules. You can use `PutOrganizationConfigRule` to create both Config
|
4438
|
+
# custom rules and Config managed rules.
|
4439
|
+
#
|
4440
|
+
# Custom rules are rules that you can create using either Guard or
|
4441
|
+
# Lambda functions. Guard ([Guard GitHub Repository][2]) is a
|
4442
|
+
# policy-as-code language that allows you to write policies that are
|
4443
|
+
# enforced by Config Custom Policy rules. Lambda uses custom code that
|
4444
|
+
# you upload to evaluate a custom rule. If you are adding a new Custom
|
4445
|
+
# Lambda rule, you first need to create an Lambda function in the master
|
4446
|
+
# account or a delegated administrator that the rule invokes to evaluate
|
4447
|
+
# your resources. You also need to create an IAM role in the managed
|
4448
|
+
# account that can be assumed by the Lambda function. When you use
|
4449
|
+
# `PutOrganizationConfigRule` to add a Custom Lambda rule to Config, you
|
4450
|
+
# must specify the Amazon Resource Name (ARN) that Lambda assigns to the
|
4451
|
+
# function.
|
4452
|
+
#
|
4453
|
+
# Managed rules are predefined, customizable rules created by Config.
|
4454
|
+
# For a list of managed rules, see [List of Config Managed Rules][3]. If
|
4455
|
+
# you are adding an Config managed rule, you must specify the rule's
|
4456
|
+
# identifier for the `RuleIdentifier` key.
|
4427
4457
|
#
|
4428
4458
|
# <note markdown="1"> Prerequisite: Ensure you call `EnableAllFeatures` API to enable all
|
4429
4459
|
# features in an organization.
|
4430
4460
|
#
|
4431
|
-
#
|
4432
|
-
# `
|
4461
|
+
# Make sure to specify one of either
|
4462
|
+
# `OrganizationCustomPolicyRuleMetadata` for Custom Policy rules,
|
4463
|
+
# `OrganizationCustomRuleMetadata` for Custom Lambda rules, or
|
4464
|
+
# `OrganizationManagedRuleMetadata` for managed rules.
|
4433
4465
|
#
|
4434
4466
|
# </note>
|
4435
4467
|
#
|
4436
4468
|
#
|
4437
4469
|
#
|
4438
4470
|
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
|
4471
|
+
# [2]: https://github.com/aws-cloudformation/cloudformation-guard
|
4472
|
+
# [3]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
|
4439
4473
|
#
|
4440
4474
|
# @option params [required, String] :organization_config_rule_name
|
4441
4475
|
# The name that you assign to an organization Config rule.
|
4442
4476
|
#
|
4443
4477
|
# @option params [Types::OrganizationManagedRuleMetadata] :organization_managed_rule_metadata
|
4444
|
-
# An `OrganizationManagedRuleMetadata` object.
|
4478
|
+
# An `OrganizationManagedRuleMetadata` object. This object specifies
|
4479
|
+
# organization managed rule metadata such as resource type and ID of
|
4480
|
+
# Amazon Web Services resource along with the rule identifier. It also
|
4481
|
+
# provides the frequency with which you want Config to run evaluations
|
4482
|
+
# for the rule if the trigger type is periodic.
|
4445
4483
|
#
|
4446
4484
|
# @option params [Types::OrganizationCustomRuleMetadata] :organization_custom_rule_metadata
|
4447
|
-
# An `OrganizationCustomRuleMetadata` object.
|
4485
|
+
# An `OrganizationCustomRuleMetadata` object. This object specifies
|
4486
|
+
# organization custom rule metadata such as resource type, resource ID
|
4487
|
+
# of Amazon Web Services resource, Lambda function ARN, and organization
|
4488
|
+
# trigger types that trigger Config to evaluate your Amazon Web Services
|
4489
|
+
# resources against a rule. It also provides the frequency with which
|
4490
|
+
# you want Config to run evaluations for the rule if the trigger type is
|
4491
|
+
# periodic.
|
4448
4492
|
#
|
4449
4493
|
# @option params [Array<String>] :excluded_accounts
|
4450
4494
|
# A comma-separated list of accounts that you want to exclude from an
|
4451
4495
|
# organization Config rule.
|
4452
4496
|
#
|
4453
4497
|
# @option params [Types::OrganizationCustomPolicyRuleMetadata] :organization_custom_policy_rule_metadata
|
4454
|
-
# An object
|
4455
|
-
#
|
4456
|
-
#
|
4457
|
-
#
|
4458
|
-
# resource,
|
4459
|
-
#
|
4498
|
+
# An `OrganizationCustomPolicyRuleMetadata` object. This object
|
4499
|
+
# specifies metadata for your organization's Config Custom Policy rule.
|
4500
|
+
# The metadata includes the runtime system in use, which accounts have
|
4501
|
+
# debug logging enabled, and other custom rule metadata, such as
|
4502
|
+
# resource type, resource ID of Amazon Web Services resource, and
|
4503
|
+
# organization trigger types that initiate Config to evaluate Amazon Web
|
4504
|
+
# Services resources against a rule.
|
4460
4505
|
#
|
4461
4506
|
# @return [Types::PutOrganizationConfigRuleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
4462
4507
|
#
|
@@ -4528,9 +4573,9 @@ module Aws::ConfigService
|
|
4528
4573
|
#
|
4529
4574
|
# This API enables organization service access for
|
4530
4575
|
# `config-multiaccountsetup.amazonaws.com` through the
|
4531
|
-
# `EnableAWSServiceAccess` action and creates a service
|
4576
|
+
# `EnableAWSServiceAccess` action and creates a service-linked role
|
4532
4577
|
# `AWSServiceRoleForConfigMultiAccountSetup` in the master or delegated
|
4533
|
-
# administrator account of your organization. The service
|
4578
|
+
# administrator account of your organization. The service-linked role is
|
4534
4579
|
# created only when the role does not exist in the caller account. To
|
4535
4580
|
# use this API with delegated administrator, register a delegated
|
4536
4581
|
# administrator by calling Amazon Web Services Organization
|
@@ -5054,7 +5099,7 @@ module Aws::ConfigService
|
|
5054
5099
|
# the properties.
|
5055
5100
|
#
|
5056
5101
|
# For more information about query components, see the [ **Query
|
5057
|
-
# Components** ][1] section in the Config Developer Guide
|
5102
|
+
# Components** ][1] section in the *Config Developer Guide*.
|
5058
5103
|
#
|
5059
5104
|
#
|
5060
5105
|
#
|
@@ -5340,7 +5385,7 @@ module Aws::ConfigService
|
|
5340
5385
|
params: params,
|
5341
5386
|
config: config)
|
5342
5387
|
context[:gem_name] = 'aws-sdk-configservice'
|
5343
|
-
context[:gem_version] = '1.
|
5388
|
+
context[:gem_version] = '1.81.0'
|
5344
5389
|
Seahorse::Client::Request.new(handlers, context)
|
5345
5390
|
end
|
5346
5391
|
|
@@ -877,13 +877,25 @@ module Aws::ConfigService
|
|
877
877
|
include Aws::Structure
|
878
878
|
end
|
879
879
|
|
880
|
-
#
|
881
|
-
#
|
882
|
-
#
|
883
|
-
#
|
884
|
-
#
|
885
|
-
#
|
886
|
-
#
|
880
|
+
# Config rules evaluate the configuration settings of your Amazon Web
|
881
|
+
# Services resources. A rule can run when Config detects a configuration
|
882
|
+
# change to an Amazon Web Services resource or at a periodic frequency
|
883
|
+
# that you choose (for example, every 24 hours). There are two types of
|
884
|
+
# rules: Config Managed Rules and Config Custom Rules. Managed rules are
|
885
|
+
# predefined, customizable rules created by Config. For a list of
|
886
|
+
# managed rules, see [List of Config Managed Rules][1].
|
887
|
+
#
|
888
|
+
# Custom rules are rules that you can create using either Guard or
|
889
|
+
# Lambda functions. Guard ([Guard GitHub Repository][2]) is a
|
890
|
+
# policy-as-code language that allows you to write policies that are
|
891
|
+
# enforced by Config Custom Policy rules. Lambda uses custom code that
|
892
|
+
# you upload to evaluate a custom rule. It is invoked by events that are
|
893
|
+
# published to it by an event source, which Config invokes when the
|
894
|
+
# custom rule is initiated.
|
895
|
+
#
|
896
|
+
# For more information about developing and using Config rules, see
|
897
|
+
# [Evaluating Amazon Web Services resource Configurations with
|
898
|
+
# Config][3] in the *Config Developer Guide*.
|
887
899
|
#
|
888
900
|
# <note markdown="1"> You can use the Amazon Web Services CLI and Amazon Web Services SDKs
|
889
901
|
# if you want to create a rule that triggers evaluations for your
|
@@ -892,13 +904,11 @@ module Aws::ConfigService
|
|
892
904
|
#
|
893
905
|
# </note>
|
894
906
|
#
|
895
|
-
# For more information about developing and using Config rules, see
|
896
|
-
# [Evaluating Amazon Web Services resource Configurations with
|
897
|
-
# Config][1] in the *Config Developer Guide*.
|
898
|
-
#
|
899
907
|
#
|
900
908
|
#
|
901
|
-
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/
|
909
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
|
910
|
+
# [2]: https://github.com/aws-cloudformation/cloudformation-guard
|
911
|
+
# [3]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
|
902
912
|
#
|
903
913
|
# @note When making an API call, you may pass ConfigRule
|
904
914
|
# data as a hash:
|
@@ -968,9 +978,11 @@ module Aws::ConfigService
|
|
968
978
|
# @return [Types::Scope]
|
969
979
|
#
|
970
980
|
# @!attribute [rw] source
|
971
|
-
# Provides the rule owner (Amazon Web Services
|
972
|
-
#
|
973
|
-
#
|
981
|
+
# Provides the rule owner (`Amazon Web Services` for managed rules,
|
982
|
+
# `CUSTOM_POLICY` for Custom Policy rules, and `CUSTOM_LAMBDA` for
|
983
|
+
# Custom Lambda rules), the rule identifier, and the notifications
|
984
|
+
# that cause the function to evaluate your Amazon Web Services
|
985
|
+
# resources.
|
974
986
|
# @return [Types::Source]
|
975
987
|
#
|
976
988
|
# @!attribute [rw] input_parameters
|
@@ -1018,7 +1030,7 @@ module Aws::ConfigService
|
|
1018
1030
|
# @!attribute [rw] created_by
|
1019
1031
|
# Service principal name of the service that created the rule.
|
1020
1032
|
#
|
1021
|
-
# <note markdown="1"> The field is populated only if the service
|
1033
|
+
# <note markdown="1"> The field is populated only if the service-linked rule is created by
|
1022
1034
|
# a service. The field is empty if you create your own rule.
|
1023
1035
|
#
|
1024
1036
|
# </note>
|
@@ -1631,11 +1643,13 @@ module Aws::ConfigService
|
|
1631
1643
|
# number of total possible rule-resource combinations in the conformance
|
1632
1644
|
# pack. This metric provides you with a high-level view of the
|
1633
1645
|
# compliance state of your conformance packs, and can be used to
|
1634
|
-
# identify, investigate, and understand compliance
|
1646
|
+
# identify, investigate, and understand the level of compliance in your
|
1635
1647
|
# conformance packs.
|
1636
1648
|
#
|
1637
1649
|
# @!attribute [rw] score
|
1638
|
-
# Compliance score for the conformance pack.
|
1650
|
+
# Compliance score for the conformance pack. Conformance packs with no
|
1651
|
+
# evaluation results will have a compliance score of
|
1652
|
+
# `INSUFFICIENT_DATA`.
|
1639
1653
|
# @return [String]
|
1640
1654
|
#
|
1641
1655
|
# @!attribute [rw] conformance_pack_name
|
@@ -1668,8 +1682,11 @@ module Aws::ConfigService
|
|
1668
1682
|
# }
|
1669
1683
|
#
|
1670
1684
|
# @!attribute [rw] conformance_pack_names
|
1671
|
-
# The
|
1672
|
-
# compliance score result.
|
1685
|
+
# The names of the conformance packs whose compliance scores you want
|
1686
|
+
# to include in the conformance pack compliance score result set. You
|
1687
|
+
# can include up to 25 conformance packs in the `ConformancePackNames`
|
1688
|
+
# array of strings, each with a character limit of 256 characters for
|
1689
|
+
# the conformance pack name.
|
1673
1690
|
# @return [Array<String>]
|
1674
1691
|
#
|
1675
1692
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConformancePackComplianceScoresFilters AWS API Documentation
|
@@ -2456,7 +2473,7 @@ module Aws::ConfigService
|
|
2456
2473
|
# If you specify a bucket that belongs to another Amazon Web Services
|
2457
2474
|
# account, that bucket must have policies that grant access
|
2458
2475
|
# permissions to Config. For more information, see [Permissions for
|
2459
|
-
# the Amazon S3 Bucket][1] in the Config Developer Guide
|
2476
|
+
# the Amazon S3 Bucket][1] in the *Config Developer Guide*.
|
2460
2477
|
#
|
2461
2478
|
#
|
2462
2479
|
#
|
@@ -2480,7 +2497,7 @@ module Aws::ConfigService
|
|
2480
2497
|
# If you choose a topic from another account, the topic must have
|
2481
2498
|
# policies that grant access permissions to Config. For more
|
2482
2499
|
# information, see [Permissions for the Amazon SNS Topic][1] in the
|
2483
|
-
# Config Developer Guide
|
2500
|
+
# *Config Developer Guide*.
|
2484
2501
|
#
|
2485
2502
|
#
|
2486
2503
|
#
|
@@ -5240,13 +5257,13 @@ module Aws::ConfigService
|
|
5240
5257
|
#
|
5241
5258
|
# * For PutOrganizationConfigRule, organization Config rule cannot be
|
5242
5259
|
# created because you do not have permissions to call IAM `GetRole`
|
5243
|
-
# action or create a service
|
5260
|
+
# action or create a service-linked role.
|
5244
5261
|
#
|
5245
5262
|
# * For PutConformancePack and PutOrganizationConformancePack, a
|
5246
5263
|
# conformance pack cannot be created because you do not have
|
5247
5264
|
# permissions:
|
5248
5265
|
#
|
5249
|
-
# * To call IAM `GetRole` action or create a service
|
5266
|
+
# * To call IAM `GetRole` action or create a service-linked role.
|
5250
5267
|
#
|
5251
5268
|
# * To read Amazon S3 bucket.
|
5252
5269
|
#
|
@@ -5446,11 +5463,20 @@ module Aws::ConfigService
|
|
5446
5463
|
# @!attribute [rw] sort_order
|
5447
5464
|
# Determines the order in which conformance pack compliance scores are
|
5448
5465
|
# sorted. Either in ascending or descending order.
|
5466
|
+
#
|
5467
|
+
# Conformance packs with a compliance score of `INSUFFICIENT_DATA`
|
5468
|
+
# will be first when sorting by ascending order and last when sorting
|
5469
|
+
# by descending order.
|
5449
5470
|
# @return [String]
|
5450
5471
|
#
|
5451
5472
|
# @!attribute [rw] sort_by
|
5452
5473
|
# Sorts your conformance pack compliance scores in either ascending or
|
5453
5474
|
# descending order, depending on `SortOrder`.
|
5475
|
+
#
|
5476
|
+
# By default, conformance pack compliance scores are sorted in
|
5477
|
+
# ascending order by compliance score and alphabetically by name of
|
5478
|
+
# the conformance pack if there is more than one conformance pack with
|
5479
|
+
# the same compliance score.
|
5454
5480
|
# @return [String]
|
5455
5481
|
#
|
5456
5482
|
# @!attribute [rw] limit
|
@@ -5482,7 +5508,7 @@ module Aws::ConfigService
|
|
5482
5508
|
# @return [String]
|
5483
5509
|
#
|
5484
5510
|
# @!attribute [rw] conformance_pack_compliance_scores
|
5485
|
-
# A list of `ConformancePackComplianceScore` objects
|
5511
|
+
# A list of `ConformancePackComplianceScore` objects.
|
5486
5512
|
# @return [Array<Types::ConformancePackComplianceScore>]
|
5487
5513
|
#
|
5488
5514
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ListConformancePackComplianceScoresResponse AWS API Documentation
|
@@ -7283,11 +7309,21 @@ module Aws::ConfigService
|
|
7283
7309
|
# @return [String]
|
7284
7310
|
#
|
7285
7311
|
# @!attribute [rw] organization_managed_rule_metadata
|
7286
|
-
# An `OrganizationManagedRuleMetadata` object.
|
7312
|
+
# An `OrganizationManagedRuleMetadata` object. This object specifies
|
7313
|
+
# organization managed rule metadata such as resource type and ID of
|
7314
|
+
# Amazon Web Services resource along with the rule identifier. It also
|
7315
|
+
# provides the frequency with which you want Config to run evaluations
|
7316
|
+
# for the rule if the trigger type is periodic.
|
7287
7317
|
# @return [Types::OrganizationManagedRuleMetadata]
|
7288
7318
|
#
|
7289
7319
|
# @!attribute [rw] organization_custom_rule_metadata
|
7290
|
-
# An `OrganizationCustomRuleMetadata` object.
|
7320
|
+
# An `OrganizationCustomRuleMetadata` object. This object specifies
|
7321
|
+
# organization custom rule metadata such as resource type, resource ID
|
7322
|
+
# of Amazon Web Services resource, Lambda function ARN, and
|
7323
|
+
# organization trigger types that trigger Config to evaluate your
|
7324
|
+
# Amazon Web Services resources against a rule. It also provides the
|
7325
|
+
# frequency with which you want Config to run evaluations for the rule
|
7326
|
+
# if the trigger type is periodic.
|
7291
7327
|
# @return [Types::OrganizationCustomRuleMetadata]
|
7292
7328
|
#
|
7293
7329
|
# @!attribute [rw] excluded_accounts
|
@@ -7296,12 +7332,13 @@ module Aws::ConfigService
|
|
7296
7332
|
# @return [Array<String>]
|
7297
7333
|
#
|
7298
7334
|
# @!attribute [rw] organization_custom_policy_rule_metadata
|
7299
|
-
# An object
|
7300
|
-
#
|
7301
|
-
#
|
7302
|
-
#
|
7303
|
-
# resource,
|
7304
|
-
#
|
7335
|
+
# An `OrganizationCustomPolicyRuleMetadata` object. This object
|
7336
|
+
# specifies metadata for your organization's Config Custom Policy
|
7337
|
+
# rule. The metadata includes the runtime system in use, which
|
7338
|
+
# accounts have debug logging enabled, and other custom rule metadata,
|
7339
|
+
# such as resource type, resource ID of Amazon Web Services resource,
|
7340
|
+
# and organization trigger types that initiate Config to evaluate
|
7341
|
+
# Amazon Web Services resources against a rule.
|
7305
7342
|
# @return [Types::OrganizationCustomPolicyRuleMetadata]
|
7306
7343
|
#
|
7307
7344
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutOrganizationConfigRuleRequest AWS API Documentation
|
@@ -7951,7 +7988,7 @@ module Aws::ConfigService
|
|
7951
7988
|
# @return [String]
|
7952
7989
|
#
|
7953
7990
|
# @!attribute [rw] created_by_service
|
7954
|
-
# Name of the service that owns the service
|
7991
|
+
# Name of the service that owns the service-linked rule, if
|
7955
7992
|
# applicable.
|
7956
7993
|
# @return [String]
|
7957
7994
|
#
|
@@ -8578,9 +8615,11 @@ module Aws::ConfigService
|
|
8578
8615
|
include Aws::Structure
|
8579
8616
|
end
|
8580
8617
|
|
8581
|
-
# Provides the CustomPolicyDetails, the rule owner (Amazon Web
|
8582
|
-
#
|
8583
|
-
#
|
8618
|
+
# Provides the CustomPolicyDetails, the rule owner (`Amazon Web
|
8619
|
+
# Services` for managed rules, `CUSTOM_POLICY` for Custom Policy rules,
|
8620
|
+
# and `CUSTOM_LAMBDA` for Custom Lambda rules), the rule identifier, and
|
8621
|
+
# the events that cause the evaluation of your Amazon Web Services
|
8622
|
+
# resources.
|
8584
8623
|
#
|
8585
8624
|
# @note When making an API call, you may pass Source
|
8586
8625
|
# data as a hash:
|
@@ -8608,11 +8647,11 @@ module Aws::ConfigService
|
|
8608
8647
|
#
|
8609
8648
|
# Config Managed Rules are predefined rules owned by Amazon Web
|
8610
8649
|
# Services. For more information, see [Config Managed Rules][1] in the
|
8611
|
-
# Config developer guide
|
8650
|
+
# *Config developer guide*.
|
8612
8651
|
#
|
8613
8652
|
# Config Custom Rules are rules that you can develop either with Guard
|
8614
8653
|
# (`CUSTOM_POLICY`) or Lambda (`CUSTOM_LAMBDA`). For more information,
|
8615
|
-
# see [Config Custom Rules ][2] in the Config developer guide
|
8654
|
+
# see [Config Custom Rules ][2] in the *Config developer guide*.
|
8616
8655
|
#
|
8617
8656
|
#
|
8618
8657
|
#
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-configservice
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.81.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-
|
11
|
+
date: 2022-08-01 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|