aws-sdk-configservice 1.86.0 → 1.88.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +13 -1
- data/VERSION +1 -1
- data/lib/aws-sdk-configservice/client.rb +205 -104
- data/lib/aws-sdk-configservice/endpoint_parameters.rb +0 -3
- data/lib/aws-sdk-configservice/endpoint_provider.rb +41 -101
- data/lib/aws-sdk-configservice/types.rb +94 -1644
- data/lib/aws-sdk-configservice.rb +1 -1
- metadata +2 -2
|
@@ -12,15 +12,6 @@ module Aws::ConfigService
|
|
|
12
12
|
|
|
13
13
|
# A collection of accounts and regions.
|
|
14
14
|
#
|
|
15
|
-
# @note When making an API call, you may pass AccountAggregationSource
|
|
16
|
-
# data as a hash:
|
|
17
|
-
#
|
|
18
|
-
# {
|
|
19
|
-
# account_ids: ["AccountId"], # required
|
|
20
|
-
# all_aws_regions: false,
|
|
21
|
-
# aws_regions: ["String"],
|
|
22
|
-
# }
|
|
23
|
-
#
|
|
24
15
|
# @!attribute [rw] account_ids
|
|
25
16
|
# The 12-digit account ID of the account being aggregated.
|
|
26
17
|
# @return [Array<String>]
|
|
@@ -206,16 +197,6 @@ module Aws::ConfigService
|
|
|
206
197
|
# Filters the conformance packs based on an account ID, region,
|
|
207
198
|
# compliance type, and the name of the conformance pack.
|
|
208
199
|
#
|
|
209
|
-
# @note When making an API call, you may pass AggregateConformancePackComplianceFilters
|
|
210
|
-
# data as a hash:
|
|
211
|
-
#
|
|
212
|
-
# {
|
|
213
|
-
# conformance_pack_name: "ConformancePackName",
|
|
214
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
|
215
|
-
# account_id: "AccountId",
|
|
216
|
-
# aws_region: "AwsRegion",
|
|
217
|
-
# }
|
|
218
|
-
#
|
|
219
200
|
# @!attribute [rw] conformance_pack_name
|
|
220
201
|
# The name of the conformance pack.
|
|
221
202
|
# @return [String]
|
|
@@ -266,14 +247,6 @@ module Aws::ConfigService
|
|
|
266
247
|
|
|
267
248
|
# Filters the results based on account ID and region.
|
|
268
249
|
#
|
|
269
|
-
# @note When making an API call, you may pass AggregateConformancePackComplianceSummaryFilters
|
|
270
|
-
# data as a hash:
|
|
271
|
-
#
|
|
272
|
-
# {
|
|
273
|
-
# account_id: "AccountId",
|
|
274
|
-
# aws_region: "AwsRegion",
|
|
275
|
-
# }
|
|
276
|
-
#
|
|
277
250
|
# @!attribute [rw] account_id
|
|
278
251
|
# The 12-digit Amazon Web Services account ID of the source account.
|
|
279
252
|
# @return [String]
|
|
@@ -349,17 +322,6 @@ module Aws::ConfigService
|
|
|
349
322
|
# aggregator, including the resource type, ID, (if available) the custom
|
|
350
323
|
# resource name, the source account, and source region.
|
|
351
324
|
#
|
|
352
|
-
# @note When making an API call, you may pass AggregateResourceIdentifier
|
|
353
|
-
# data as a hash:
|
|
354
|
-
#
|
|
355
|
-
# {
|
|
356
|
-
# source_account_id: "AccountId", # required
|
|
357
|
-
# source_region: "AwsRegion", # required
|
|
358
|
-
# resource_id: "ResourceId", # required
|
|
359
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
360
|
-
# resource_name: "ResourceName",
|
|
361
|
-
# }
|
|
362
|
-
#
|
|
363
325
|
# @!attribute [rw] source_account_id
|
|
364
326
|
# The 12-digit account ID of the source account.
|
|
365
327
|
# @return [String]
|
|
@@ -575,22 +537,6 @@ module Aws::ConfigService
|
|
|
575
537
|
include Aws::Structure
|
|
576
538
|
end
|
|
577
539
|
|
|
578
|
-
# @note When making an API call, you may pass BatchGetAggregateResourceConfigRequest
|
|
579
|
-
# data as a hash:
|
|
580
|
-
#
|
|
581
|
-
# {
|
|
582
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
583
|
-
# resource_identifiers: [ # required
|
|
584
|
-
# {
|
|
585
|
-
# source_account_id: "AccountId", # required
|
|
586
|
-
# source_region: "AwsRegion", # required
|
|
587
|
-
# resource_id: "ResourceId", # required
|
|
588
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
589
|
-
# resource_name: "ResourceName",
|
|
590
|
-
# },
|
|
591
|
-
# ],
|
|
592
|
-
# }
|
|
593
|
-
#
|
|
594
540
|
# @!attribute [rw] configuration_aggregator_name
|
|
595
541
|
# The name of the configuration aggregator.
|
|
596
542
|
# @return [String]
|
|
@@ -627,18 +573,6 @@ module Aws::ConfigService
|
|
|
627
573
|
include Aws::Structure
|
|
628
574
|
end
|
|
629
575
|
|
|
630
|
-
# @note When making an API call, you may pass BatchGetResourceConfigRequest
|
|
631
|
-
# data as a hash:
|
|
632
|
-
#
|
|
633
|
-
# {
|
|
634
|
-
# resource_keys: [ # required
|
|
635
|
-
# {
|
|
636
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
637
|
-
# resource_id: "ResourceId", # required
|
|
638
|
-
# },
|
|
639
|
-
# ],
|
|
640
|
-
# }
|
|
641
|
-
#
|
|
642
576
|
# @!attribute [rw] resource_keys
|
|
643
577
|
# A list of resource keys to be processed with the current request.
|
|
644
578
|
# Each element in the list consists of the resource type and resource
|
|
@@ -881,21 +815,23 @@ module Aws::ConfigService
|
|
|
881
815
|
# Services resources. A rule can run when Config detects a configuration
|
|
882
816
|
# change to an Amazon Web Services resource or at a periodic frequency
|
|
883
817
|
# that you choose (for example, every 24 hours). There are two types of
|
|
884
|
-
# rules: Config Managed Rules and Config Custom Rules
|
|
885
|
-
#
|
|
886
|
-
#
|
|
887
|
-
#
|
|
888
|
-
#
|
|
889
|
-
#
|
|
890
|
-
#
|
|
891
|
-
#
|
|
892
|
-
#
|
|
893
|
-
#
|
|
894
|
-
#
|
|
818
|
+
# rules: *Config Managed Rules* and *Config Custom Rules*.
|
|
819
|
+
#
|
|
820
|
+
# Config Managed Rules are predefined, customizable rules created by
|
|
821
|
+
# Config. For a list of managed rules, see [List of Config Managed
|
|
822
|
+
# Rules][1].
|
|
823
|
+
#
|
|
824
|
+
# Config Custom Rules are rules that you create from scratch. There are
|
|
825
|
+
# two ways to create Config custom rules: with Lambda functions ([
|
|
826
|
+
# Lambda Developer Guide][2]) and with Guard ([Guard GitHub
|
|
827
|
+
# Repository][3]), a policy-as-code language. Config custom rules
|
|
828
|
+
# created with Lambda are called *Config Custom Lambda Rules* and Config
|
|
829
|
+
# custom rules created with Guard are called *Config Custom Policy
|
|
830
|
+
# Rules*.
|
|
895
831
|
#
|
|
896
832
|
# For more information about developing and using Config rules, see
|
|
897
|
-
# [Evaluating
|
|
898
|
-
#
|
|
833
|
+
# [Evaluating Resource with Config Rules][4] in the *Config Developer
|
|
834
|
+
# Guide*.
|
|
899
835
|
#
|
|
900
836
|
# <note markdown="1"> You can use the Amazon Web Services CLI and Amazon Web Services SDKs
|
|
901
837
|
# if you want to create a rule that triggers evaluations for your
|
|
@@ -907,49 +843,9 @@ module Aws::ConfigService
|
|
|
907
843
|
#
|
|
908
844
|
#
|
|
909
845
|
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
|
|
910
|
-
# [2]: https://
|
|
911
|
-
# [3]: https://
|
|
912
|
-
#
|
|
913
|
-
# @note When making an API call, you may pass ConfigRule
|
|
914
|
-
# data as a hash:
|
|
915
|
-
#
|
|
916
|
-
# {
|
|
917
|
-
# config_rule_name: "ConfigRuleName",
|
|
918
|
-
# config_rule_arn: "StringWithCharLimit256",
|
|
919
|
-
# config_rule_id: "StringWithCharLimit64",
|
|
920
|
-
# description: "EmptiableStringWithCharLimit256",
|
|
921
|
-
# scope: {
|
|
922
|
-
# compliance_resource_types: ["StringWithCharLimit256"],
|
|
923
|
-
# tag_key: "StringWithCharLimit128",
|
|
924
|
-
# tag_value: "StringWithCharLimit256",
|
|
925
|
-
# compliance_resource_id: "BaseResourceId",
|
|
926
|
-
# },
|
|
927
|
-
# source: { # required
|
|
928
|
-
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
|
|
929
|
-
# source_identifier: "StringWithCharLimit256",
|
|
930
|
-
# source_details: [
|
|
931
|
-
# {
|
|
932
|
-
# event_source: "aws.config", # accepts aws.config
|
|
933
|
-
# message_type: "ConfigurationItemChangeNotification", # accepts ConfigurationItemChangeNotification, ConfigurationSnapshotDeliveryCompleted, ScheduledNotification, OversizedConfigurationItemChangeNotification
|
|
934
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
935
|
-
# },
|
|
936
|
-
# ],
|
|
937
|
-
# custom_policy_details: {
|
|
938
|
-
# policy_runtime: "PolicyRuntime", # required
|
|
939
|
-
# policy_text: "PolicyText", # required
|
|
940
|
-
# enable_debug_log_delivery: false,
|
|
941
|
-
# },
|
|
942
|
-
# },
|
|
943
|
-
# input_parameters: "StringWithCharLimit1024",
|
|
944
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
945
|
-
# config_rule_state: "ACTIVE", # accepts ACTIVE, DELETING, DELETING_RESULTS, EVALUATING
|
|
946
|
-
# created_by: "StringWithCharLimit256",
|
|
947
|
-
# evaluation_modes: [
|
|
948
|
-
# {
|
|
949
|
-
# mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
|
950
|
-
# },
|
|
951
|
-
# ],
|
|
952
|
-
# }
|
|
846
|
+
# [2]: https://docs.aws.amazon.com/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function
|
|
847
|
+
# [3]: https://github.com/aws-cloudformation/cloudformation-guard
|
|
848
|
+
# [4]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
|
|
953
849
|
#
|
|
954
850
|
# @!attribute [rw] config_rule_name
|
|
955
851
|
# The name that you assign to the Config rule. The name is required if
|
|
@@ -1068,16 +964,6 @@ module Aws::ConfigService
|
|
|
1068
964
|
# Filters the compliance results based on account ID, region, compliance
|
|
1069
965
|
# type, and rule name.
|
|
1070
966
|
#
|
|
1071
|
-
# @note When making an API call, you may pass ConfigRuleComplianceFilters
|
|
1072
|
-
# data as a hash:
|
|
1073
|
-
#
|
|
1074
|
-
# {
|
|
1075
|
-
# config_rule_name: "ConfigRuleName",
|
|
1076
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
1077
|
-
# account_id: "AccountId",
|
|
1078
|
-
# aws_region: "AwsRegion",
|
|
1079
|
-
# }
|
|
1080
|
-
#
|
|
1081
967
|
# @!attribute [rw] config_rule_name
|
|
1082
968
|
# The name of the Config rule.
|
|
1083
969
|
# @return [String]
|
|
@@ -1111,14 +997,6 @@ module Aws::ConfigService
|
|
|
1111
997
|
|
|
1112
998
|
# Filters the results based on the account IDs and regions.
|
|
1113
999
|
#
|
|
1114
|
-
# @note When making an API call, you may pass ConfigRuleComplianceSummaryFilters
|
|
1115
|
-
# data as a hash:
|
|
1116
|
-
#
|
|
1117
|
-
# {
|
|
1118
|
-
# account_id: "AccountId",
|
|
1119
|
-
# aws_region: "AwsRegion",
|
|
1120
|
-
# }
|
|
1121
|
-
#
|
|
1122
1000
|
# @!attribute [rw] account_id
|
|
1123
1001
|
# The 12-digit account ID of the source account.
|
|
1124
1002
|
# @return [String]
|
|
@@ -1281,13 +1159,6 @@ module Aws::ConfigService
|
|
|
1281
1159
|
# To update the `deliveryFrequency` with which Config delivers your
|
|
1282
1160
|
# configuration snapshots, use the `PutDeliveryChannel` action.
|
|
1283
1161
|
#
|
|
1284
|
-
# @note When making an API call, you may pass ConfigSnapshotDeliveryProperties
|
|
1285
|
-
# data as a hash:
|
|
1286
|
-
#
|
|
1287
|
-
# {
|
|
1288
|
-
# delivery_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
1289
|
-
# }
|
|
1290
|
-
#
|
|
1291
1162
|
# @!attribute [rw] delivery_frequency
|
|
1292
1163
|
# The frequency with which Config delivers configuration snapshots.
|
|
1293
1164
|
# @return [String]
|
|
@@ -1525,19 +1396,6 @@ module Aws::ConfigService
|
|
|
1525
1396
|
# An object that represents the recording of configuration changes of an
|
|
1526
1397
|
# Amazon Web Services resource.
|
|
1527
1398
|
#
|
|
1528
|
-
# @note When making an API call, you may pass ConfigurationRecorder
|
|
1529
|
-
# data as a hash:
|
|
1530
|
-
#
|
|
1531
|
-
# {
|
|
1532
|
-
# name: "RecorderName",
|
|
1533
|
-
# role_arn: "String",
|
|
1534
|
-
# recording_group: {
|
|
1535
|
-
# all_supported: false,
|
|
1536
|
-
# include_global_resource_types: false,
|
|
1537
|
-
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
1538
|
-
# },
|
|
1539
|
-
# }
|
|
1540
|
-
#
|
|
1541
1399
|
# @!attribute [rw] name
|
|
1542
1400
|
# The name of the recorder. By default, Config automatically assigns
|
|
1543
1401
|
# the name "default" when creating the configuration recorder. You
|
|
@@ -1572,6 +1430,11 @@ module Aws::ConfigService
|
|
|
1572
1430
|
|
|
1573
1431
|
# The current status of the configuration recorder.
|
|
1574
1432
|
#
|
|
1433
|
+
# <note markdown="1"> For a detailed status of recording events over time, add your Config
|
|
1434
|
+
# events to CloudWatch metrics and use CloudWatch metrics.
|
|
1435
|
+
#
|
|
1436
|
+
# </note>
|
|
1437
|
+
#
|
|
1575
1438
|
# @!attribute [rw] name
|
|
1576
1439
|
# The name of the configuration recorder.
|
|
1577
1440
|
# @return [String]
|
|
@@ -1589,19 +1452,20 @@ module Aws::ConfigService
|
|
|
1589
1452
|
# @return [Boolean]
|
|
1590
1453
|
#
|
|
1591
1454
|
# @!attribute [rw] last_status
|
|
1592
|
-
# The
|
|
1455
|
+
# The status of the latest recording event processed by the recorder.
|
|
1593
1456
|
# @return [String]
|
|
1594
1457
|
#
|
|
1595
1458
|
# @!attribute [rw] last_error_code
|
|
1596
|
-
# The error code
|
|
1459
|
+
# The latest error code from when the recorder last failed.
|
|
1597
1460
|
# @return [String]
|
|
1598
1461
|
#
|
|
1599
1462
|
# @!attribute [rw] last_error_message
|
|
1600
|
-
# The message
|
|
1463
|
+
# The latest error message from when the recorder last failed.
|
|
1601
1464
|
# @return [String]
|
|
1602
1465
|
#
|
|
1603
1466
|
# @!attribute [rw] last_status_change_time
|
|
1604
|
-
# The time
|
|
1467
|
+
# The time of the latest change in status of an recording event
|
|
1468
|
+
# processed by the recorder.
|
|
1605
1469
|
# @return [Time]
|
|
1606
1470
|
#
|
|
1607
1471
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConfigurationRecorderStatus AWS API Documentation
|
|
@@ -1622,14 +1486,6 @@ module Aws::ConfigService
|
|
|
1622
1486
|
# Filters the conformance pack by compliance types and Config rule
|
|
1623
1487
|
# names.
|
|
1624
1488
|
#
|
|
1625
|
-
# @note When making an API call, you may pass ConformancePackComplianceFilters
|
|
1626
|
-
# data as a hash:
|
|
1627
|
-
#
|
|
1628
|
-
# {
|
|
1629
|
-
# config_rule_names: ["StringWithCharLimit64"],
|
|
1630
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
|
1631
|
-
# }
|
|
1632
|
-
#
|
|
1633
1489
|
# @!attribute [rw] config_rule_names
|
|
1634
1490
|
# Filters the results by Config rule names.
|
|
1635
1491
|
# @return [Array<String>]
|
|
@@ -1686,13 +1542,6 @@ module Aws::ConfigService
|
|
|
1686
1542
|
# A list of filters to apply to the conformance pack compliance score
|
|
1687
1543
|
# result set.
|
|
1688
1544
|
#
|
|
1689
|
-
# @note When making an API call, you may pass ConformancePackComplianceScoresFilters
|
|
1690
|
-
# data as a hash:
|
|
1691
|
-
#
|
|
1692
|
-
# {
|
|
1693
|
-
# conformance_pack_names: ["ConformancePackName"], # required
|
|
1694
|
-
# }
|
|
1695
|
-
#
|
|
1696
1545
|
# @!attribute [rw] conformance_pack_names
|
|
1697
1546
|
# The names of the conformance packs whose compliance scores you want
|
|
1698
1547
|
# to include in the conformance pack compliance score result set. You
|
|
@@ -1716,8 +1565,7 @@ module Aws::ConfigService
|
|
|
1716
1565
|
# @return [String]
|
|
1717
1566
|
#
|
|
1718
1567
|
# @!attribute [rw] conformance_pack_compliance_status
|
|
1719
|
-
# The status of the conformance pack.
|
|
1720
|
-
# `COMPLIANT`, `NON_COMPLIANT` and `INSUFFICIENT_DATA`.
|
|
1568
|
+
# The status of the conformance pack.
|
|
1721
1569
|
# @return [String]
|
|
1722
1570
|
#
|
|
1723
1571
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConformancePackComplianceSummary AWS API Documentation
|
|
@@ -1800,16 +1648,6 @@ module Aws::ConfigService
|
|
|
1800
1648
|
# Filters a conformance pack by Config rule names, compliance types,
|
|
1801
1649
|
# Amazon Web Services resource types, and resource IDs.
|
|
1802
1650
|
#
|
|
1803
|
-
# @note When making an API call, you may pass ConformancePackEvaluationFilters
|
|
1804
|
-
# data as a hash:
|
|
1805
|
-
#
|
|
1806
|
-
# {
|
|
1807
|
-
# config_rule_names: ["StringWithCharLimit64"],
|
|
1808
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
|
1809
|
-
# resource_type: "StringWithCharLimit256",
|
|
1810
|
-
# resource_ids: ["StringWithCharLimit256"],
|
|
1811
|
-
# }
|
|
1812
|
-
#
|
|
1813
1651
|
# @!attribute [rw] config_rule_names
|
|
1814
1652
|
# Filters the results by Config rule names.
|
|
1815
1653
|
# @return [Array<String>]
|
|
@@ -1890,14 +1728,6 @@ module Aws::ConfigService
|
|
|
1890
1728
|
# length of 255 characters, and values can have a maximum length of 4096
|
|
1891
1729
|
# characters.
|
|
1892
1730
|
#
|
|
1893
|
-
# @note When making an API call, you may pass ConformancePackInputParameter
|
|
1894
|
-
# data as a hash:
|
|
1895
|
-
#
|
|
1896
|
-
# {
|
|
1897
|
-
# parameter_name: "ParameterName", # required
|
|
1898
|
-
# parameter_value: "ParameterValue", # required
|
|
1899
|
-
# }
|
|
1900
|
-
#
|
|
1901
1731
|
# @!attribute [rw] parameter_name
|
|
1902
1732
|
# One part of a key-value pair.
|
|
1903
1733
|
# @return [String]
|
|
@@ -1925,9 +1755,6 @@ module Aws::ConfigService
|
|
|
1925
1755
|
#
|
|
1926
1756
|
# @!attribute [rw] compliance_type
|
|
1927
1757
|
# Compliance of the Config rule.
|
|
1928
|
-
#
|
|
1929
|
-
# The allowed values are `COMPLIANT`, `NON_COMPLIANT`, and
|
|
1930
|
-
# `INSUFFICIENT_DATA`.
|
|
1931
1758
|
# @return [String]
|
|
1932
1759
|
#
|
|
1933
1760
|
# @!attribute [rw] controls
|
|
@@ -2013,7 +1840,7 @@ module Aws::ConfigService
|
|
|
2013
1840
|
include Aws::Structure
|
|
2014
1841
|
end
|
|
2015
1842
|
|
|
2016
|
-
# You have specified a template that is
|
|
1843
|
+
# You have specified a template that is not valid or supported.
|
|
2017
1844
|
#
|
|
2018
1845
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConformancePackTemplateValidationException AWS API Documentation
|
|
2019
1846
|
#
|
|
@@ -2023,15 +1850,6 @@ module Aws::ConfigService
|
|
|
2023
1850
|
# logging enabled. You can specify the following CustomPolicyDetails
|
|
2024
1851
|
# parameter values only for Config Custom Policy rules.
|
|
2025
1852
|
#
|
|
2026
|
-
# @note When making an API call, you may pass CustomPolicyDetails
|
|
2027
|
-
# data as a hash:
|
|
2028
|
-
#
|
|
2029
|
-
# {
|
|
2030
|
-
# policy_runtime: "PolicyRuntime", # required
|
|
2031
|
-
# policy_text: "PolicyText", # required
|
|
2032
|
-
# enable_debug_log_delivery: false,
|
|
2033
|
-
# }
|
|
2034
|
-
#
|
|
2035
1853
|
# @!attribute [rw] policy_runtime
|
|
2036
1854
|
# The runtime system for your Config Custom Policy rule. Guard is a
|
|
2037
1855
|
# policy-as-code language that allows you to write policies that are
|
|
@@ -2063,14 +1881,6 @@ module Aws::ConfigService
|
|
|
2063
1881
|
include Aws::Structure
|
|
2064
1882
|
end
|
|
2065
1883
|
|
|
2066
|
-
# @note When making an API call, you may pass DeleteAggregationAuthorizationRequest
|
|
2067
|
-
# data as a hash:
|
|
2068
|
-
#
|
|
2069
|
-
# {
|
|
2070
|
-
# authorized_account_id: "AccountId", # required
|
|
2071
|
-
# authorized_aws_region: "AwsRegion", # required
|
|
2072
|
-
# }
|
|
2073
|
-
#
|
|
2074
1884
|
# @!attribute [rw] authorized_account_id
|
|
2075
1885
|
# The 12-digit account ID of the account authorized to aggregate data.
|
|
2076
1886
|
# @return [String]
|
|
@@ -2088,13 +1898,6 @@ module Aws::ConfigService
|
|
|
2088
1898
|
include Aws::Structure
|
|
2089
1899
|
end
|
|
2090
1900
|
|
|
2091
|
-
# @note When making an API call, you may pass DeleteConfigRuleRequest
|
|
2092
|
-
# data as a hash:
|
|
2093
|
-
#
|
|
2094
|
-
# {
|
|
2095
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
2096
|
-
# }
|
|
2097
|
-
#
|
|
2098
1901
|
# @!attribute [rw] config_rule_name
|
|
2099
1902
|
# The name of the Config rule that you want to delete.
|
|
2100
1903
|
# @return [String]
|
|
@@ -2107,13 +1910,6 @@ module Aws::ConfigService
|
|
|
2107
1910
|
include Aws::Structure
|
|
2108
1911
|
end
|
|
2109
1912
|
|
|
2110
|
-
# @note When making an API call, you may pass DeleteConfigurationAggregatorRequest
|
|
2111
|
-
# data as a hash:
|
|
2112
|
-
#
|
|
2113
|
-
# {
|
|
2114
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
2115
|
-
# }
|
|
2116
|
-
#
|
|
2117
1913
|
# @!attribute [rw] configuration_aggregator_name
|
|
2118
1914
|
# The name of the configuration aggregator.
|
|
2119
1915
|
# @return [String]
|
|
@@ -2128,13 +1924,6 @@ module Aws::ConfigService
|
|
|
2128
1924
|
|
|
2129
1925
|
# The request object for the `DeleteConfigurationRecorder` action.
|
|
2130
1926
|
#
|
|
2131
|
-
# @note When making an API call, you may pass DeleteConfigurationRecorderRequest
|
|
2132
|
-
# data as a hash:
|
|
2133
|
-
#
|
|
2134
|
-
# {
|
|
2135
|
-
# configuration_recorder_name: "RecorderName", # required
|
|
2136
|
-
# }
|
|
2137
|
-
#
|
|
2138
1927
|
# @!attribute [rw] configuration_recorder_name
|
|
2139
1928
|
# The name of the configuration recorder to be deleted. You can
|
|
2140
1929
|
# retrieve the name of your configuration recorder by using the
|
|
@@ -2149,13 +1938,6 @@ module Aws::ConfigService
|
|
|
2149
1938
|
include Aws::Structure
|
|
2150
1939
|
end
|
|
2151
1940
|
|
|
2152
|
-
# @note When making an API call, you may pass DeleteConformancePackRequest
|
|
2153
|
-
# data as a hash:
|
|
2154
|
-
#
|
|
2155
|
-
# {
|
|
2156
|
-
# conformance_pack_name: "ConformancePackName", # required
|
|
2157
|
-
# }
|
|
2158
|
-
#
|
|
2159
1941
|
# @!attribute [rw] conformance_pack_name
|
|
2160
1942
|
# Name of the conformance pack you want to delete.
|
|
2161
1943
|
# @return [String]
|
|
@@ -2171,13 +1953,6 @@ module Aws::ConfigService
|
|
|
2171
1953
|
# The input for the DeleteDeliveryChannel action. The action accepts the
|
|
2172
1954
|
# following data, in JSON format.
|
|
2173
1955
|
#
|
|
2174
|
-
# @note When making an API call, you may pass DeleteDeliveryChannelRequest
|
|
2175
|
-
# data as a hash:
|
|
2176
|
-
#
|
|
2177
|
-
# {
|
|
2178
|
-
# delivery_channel_name: "ChannelName", # required
|
|
2179
|
-
# }
|
|
2180
|
-
#
|
|
2181
1956
|
# @!attribute [rw] delivery_channel_name
|
|
2182
1957
|
# The name of the delivery channel to delete.
|
|
2183
1958
|
# @return [String]
|
|
@@ -2190,13 +1965,6 @@ module Aws::ConfigService
|
|
|
2190
1965
|
include Aws::Structure
|
|
2191
1966
|
end
|
|
2192
1967
|
|
|
2193
|
-
# @note When making an API call, you may pass DeleteEvaluationResultsRequest
|
|
2194
|
-
# data as a hash:
|
|
2195
|
-
#
|
|
2196
|
-
# {
|
|
2197
|
-
# config_rule_name: "StringWithCharLimit64", # required
|
|
2198
|
-
# }
|
|
2199
|
-
#
|
|
2200
1968
|
# @!attribute [rw] config_rule_name
|
|
2201
1969
|
# The name of the Config rule for which you want to delete the
|
|
2202
1970
|
# evaluation results.
|
|
@@ -2217,13 +1985,6 @@ module Aws::ConfigService
|
|
|
2217
1985
|
#
|
|
2218
1986
|
class DeleteEvaluationResultsResponse < Aws::EmptyStructure; end
|
|
2219
1987
|
|
|
2220
|
-
# @note When making an API call, you may pass DeleteOrganizationConfigRuleRequest
|
|
2221
|
-
# data as a hash:
|
|
2222
|
-
#
|
|
2223
|
-
# {
|
|
2224
|
-
# organization_config_rule_name: "OrganizationConfigRuleName", # required
|
|
2225
|
-
# }
|
|
2226
|
-
#
|
|
2227
1988
|
# @!attribute [rw] organization_config_rule_name
|
|
2228
1989
|
# The name of organization Config rule that you want to delete.
|
|
2229
1990
|
# @return [String]
|
|
@@ -2236,13 +1997,6 @@ module Aws::ConfigService
|
|
|
2236
1997
|
include Aws::Structure
|
|
2237
1998
|
end
|
|
2238
1999
|
|
|
2239
|
-
# @note When making an API call, you may pass DeleteOrganizationConformancePackRequest
|
|
2240
|
-
# data as a hash:
|
|
2241
|
-
#
|
|
2242
|
-
# {
|
|
2243
|
-
# organization_conformance_pack_name: "OrganizationConformancePackName", # required
|
|
2244
|
-
# }
|
|
2245
|
-
#
|
|
2246
2000
|
# @!attribute [rw] organization_conformance_pack_name
|
|
2247
2001
|
# The name of organization conformance pack that you want to delete.
|
|
2248
2002
|
# @return [String]
|
|
@@ -2255,14 +2009,6 @@ module Aws::ConfigService
|
|
|
2255
2009
|
include Aws::Structure
|
|
2256
2010
|
end
|
|
2257
2011
|
|
|
2258
|
-
# @note When making an API call, you may pass DeletePendingAggregationRequestRequest
|
|
2259
|
-
# data as a hash:
|
|
2260
|
-
#
|
|
2261
|
-
# {
|
|
2262
|
-
# requester_account_id: "AccountId", # required
|
|
2263
|
-
# requester_aws_region: "AwsRegion", # required
|
|
2264
|
-
# }
|
|
2265
|
-
#
|
|
2266
2012
|
# @!attribute [rw] requester_account_id
|
|
2267
2013
|
# The 12-digit account ID of the account requesting to aggregate data.
|
|
2268
2014
|
# @return [String]
|
|
@@ -2280,14 +2026,6 @@ module Aws::ConfigService
|
|
|
2280
2026
|
include Aws::Structure
|
|
2281
2027
|
end
|
|
2282
2028
|
|
|
2283
|
-
# @note When making an API call, you may pass DeleteRemediationConfigurationRequest
|
|
2284
|
-
# data as a hash:
|
|
2285
|
-
#
|
|
2286
|
-
# {
|
|
2287
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
2288
|
-
# resource_type: "String",
|
|
2289
|
-
# }
|
|
2290
|
-
#
|
|
2291
2029
|
# @!attribute [rw] config_rule_name
|
|
2292
2030
|
# The name of the Config rule for which you want to delete remediation
|
|
2293
2031
|
# configuration.
|
|
@@ -2310,19 +2048,6 @@ module Aws::ConfigService
|
|
|
2310
2048
|
#
|
|
2311
2049
|
class DeleteRemediationConfigurationResponse < Aws::EmptyStructure; end
|
|
2312
2050
|
|
|
2313
|
-
# @note When making an API call, you may pass DeleteRemediationExceptionsRequest
|
|
2314
|
-
# data as a hash:
|
|
2315
|
-
#
|
|
2316
|
-
# {
|
|
2317
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
2318
|
-
# resource_keys: [ # required
|
|
2319
|
-
# {
|
|
2320
|
-
# resource_type: "StringWithCharLimit256",
|
|
2321
|
-
# resource_id: "StringWithCharLimit1024",
|
|
2322
|
-
# },
|
|
2323
|
-
# ],
|
|
2324
|
-
# }
|
|
2325
|
-
#
|
|
2326
2051
|
# @!attribute [rw] config_rule_name
|
|
2327
2052
|
# The name of the Config rule for which you want to delete remediation
|
|
2328
2053
|
# exception configuration.
|
|
@@ -2357,14 +2082,6 @@ module Aws::ConfigService
|
|
|
2357
2082
|
include Aws::Structure
|
|
2358
2083
|
end
|
|
2359
2084
|
|
|
2360
|
-
# @note When making an API call, you may pass DeleteResourceConfigRequest
|
|
2361
|
-
# data as a hash:
|
|
2362
|
-
#
|
|
2363
|
-
# {
|
|
2364
|
-
# resource_type: "ResourceTypeString", # required
|
|
2365
|
-
# resource_id: "ResourceId", # required
|
|
2366
|
-
# }
|
|
2367
|
-
#
|
|
2368
2085
|
# @!attribute [rw] resource_type
|
|
2369
2086
|
# The type of the resource.
|
|
2370
2087
|
# @return [String]
|
|
@@ -2382,13 +2099,6 @@ module Aws::ConfigService
|
|
|
2382
2099
|
include Aws::Structure
|
|
2383
2100
|
end
|
|
2384
2101
|
|
|
2385
|
-
# @note When making an API call, you may pass DeleteRetentionConfigurationRequest
|
|
2386
|
-
# data as a hash:
|
|
2387
|
-
#
|
|
2388
|
-
# {
|
|
2389
|
-
# retention_configuration_name: "RetentionConfigurationName", # required
|
|
2390
|
-
# }
|
|
2391
|
-
#
|
|
2392
2102
|
# @!attribute [rw] retention_configuration_name
|
|
2393
2103
|
# The name of the retention configuration to delete.
|
|
2394
2104
|
# @return [String]
|
|
@@ -2401,13 +2111,6 @@ module Aws::ConfigService
|
|
|
2401
2111
|
include Aws::Structure
|
|
2402
2112
|
end
|
|
2403
2113
|
|
|
2404
|
-
# @note When making an API call, you may pass DeleteStoredQueryRequest
|
|
2405
|
-
# data as a hash:
|
|
2406
|
-
#
|
|
2407
|
-
# {
|
|
2408
|
-
# query_name: "QueryName", # required
|
|
2409
|
-
# }
|
|
2410
|
-
#
|
|
2411
2114
|
# @!attribute [rw] query_name
|
|
2412
2115
|
# The name of the query that you want to delete.
|
|
2413
2116
|
# @return [String]
|
|
@@ -2426,13 +2129,6 @@ module Aws::ConfigService
|
|
|
2426
2129
|
|
|
2427
2130
|
# The input for the DeliverConfigSnapshot action.
|
|
2428
2131
|
#
|
|
2429
|
-
# @note When making an API call, you may pass DeliverConfigSnapshotRequest
|
|
2430
|
-
# data as a hash:
|
|
2431
|
-
#
|
|
2432
|
-
# {
|
|
2433
|
-
# delivery_channel_name: "ChannelName", # required
|
|
2434
|
-
# }
|
|
2435
|
-
#
|
|
2436
2132
|
# @!attribute [rw] delivery_channel_name
|
|
2437
2133
|
# The name of the delivery channel through which the snapshot is
|
|
2438
2134
|
# delivered.
|
|
@@ -2463,20 +2159,6 @@ module Aws::ConfigService
|
|
|
2463
2159
|
# The channel through which Config delivers notifications and updated
|
|
2464
2160
|
# configuration states.
|
|
2465
2161
|
#
|
|
2466
|
-
# @note When making an API call, you may pass DeliveryChannel
|
|
2467
|
-
# data as a hash:
|
|
2468
|
-
#
|
|
2469
|
-
# {
|
|
2470
|
-
# name: "ChannelName",
|
|
2471
|
-
# s3_bucket_name: "String",
|
|
2472
|
-
# s3_key_prefix: "String",
|
|
2473
|
-
# s3_kms_key_arn: "String",
|
|
2474
|
-
# sns_topic_arn: "String",
|
|
2475
|
-
# config_snapshot_delivery_properties: {
|
|
2476
|
-
# delivery_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
2477
|
-
# },
|
|
2478
|
-
# }
|
|
2479
|
-
#
|
|
2480
2162
|
# @!attribute [rw] name
|
|
2481
2163
|
# The name of the delivery channel. By default, Config assigns the
|
|
2482
2164
|
# name "default" when creating the delivery channel. To change the
|
|
@@ -2576,21 +2258,6 @@ module Aws::ConfigService
|
|
|
2576
2258
|
include Aws::Structure
|
|
2577
2259
|
end
|
|
2578
2260
|
|
|
2579
|
-
# @note When making an API call, you may pass DescribeAggregateComplianceByConfigRulesRequest
|
|
2580
|
-
# data as a hash:
|
|
2581
|
-
#
|
|
2582
|
-
# {
|
|
2583
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
2584
|
-
# filters: {
|
|
2585
|
-
# config_rule_name: "ConfigRuleName",
|
|
2586
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
2587
|
-
# account_id: "AccountId",
|
|
2588
|
-
# aws_region: "AwsRegion",
|
|
2589
|
-
# },
|
|
2590
|
-
# limit: 1,
|
|
2591
|
-
# next_token: "NextToken",
|
|
2592
|
-
# }
|
|
2593
|
-
#
|
|
2594
2261
|
# @!attribute [rw] configuration_aggregator_name
|
|
2595
2262
|
# The name of the configuration aggregator.
|
|
2596
2263
|
# @return [String]
|
|
@@ -2638,21 +2305,6 @@ module Aws::ConfigService
|
|
|
2638
2305
|
include Aws::Structure
|
|
2639
2306
|
end
|
|
2640
2307
|
|
|
2641
|
-
# @note When making an API call, you may pass DescribeAggregateComplianceByConformancePacksRequest
|
|
2642
|
-
# data as a hash:
|
|
2643
|
-
#
|
|
2644
|
-
# {
|
|
2645
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
2646
|
-
# filters: {
|
|
2647
|
-
# conformance_pack_name: "ConformancePackName",
|
|
2648
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
|
2649
|
-
# account_id: "AccountId",
|
|
2650
|
-
# aws_region: "AwsRegion",
|
|
2651
|
-
# },
|
|
2652
|
-
# limit: 1,
|
|
2653
|
-
# next_token: "NextToken",
|
|
2654
|
-
# }
|
|
2655
|
-
#
|
|
2656
2308
|
# @!attribute [rw] configuration_aggregator_name
|
|
2657
2309
|
# The name of the configuration aggregator.
|
|
2658
2310
|
# @return [String]
|
|
@@ -2702,14 +2354,6 @@ module Aws::ConfigService
|
|
|
2702
2354
|
include Aws::Structure
|
|
2703
2355
|
end
|
|
2704
2356
|
|
|
2705
|
-
# @note When making an API call, you may pass DescribeAggregationAuthorizationsRequest
|
|
2706
|
-
# data as a hash:
|
|
2707
|
-
#
|
|
2708
|
-
# {
|
|
2709
|
-
# limit: 1,
|
|
2710
|
-
# next_token: "String",
|
|
2711
|
-
# }
|
|
2712
|
-
#
|
|
2713
2357
|
# @!attribute [rw] limit
|
|
2714
2358
|
# The maximum number of AggregationAuthorizations returned on each
|
|
2715
2359
|
# page. The default is maximum. If you specify 0, Config uses the
|
|
@@ -2749,23 +2393,12 @@ module Aws::ConfigService
|
|
|
2749
2393
|
include Aws::Structure
|
|
2750
2394
|
end
|
|
2751
2395
|
|
|
2752
|
-
# @note When making an API call, you may pass DescribeComplianceByConfigRuleRequest
|
|
2753
|
-
# data as a hash:
|
|
2754
|
-
#
|
|
2755
|
-
# {
|
|
2756
|
-
# config_rule_names: ["ConfigRuleName"],
|
|
2757
|
-
# compliance_types: ["COMPLIANT"], # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
2758
|
-
# next_token: "String",
|
|
2759
|
-
# }
|
|
2760
|
-
#
|
|
2761
2396
|
# @!attribute [rw] config_rule_names
|
|
2762
2397
|
# Specify one or more Config rule names to filter the results by rule.
|
|
2763
2398
|
# @return [Array<String>]
|
|
2764
2399
|
#
|
|
2765
2400
|
# @!attribute [rw] compliance_types
|
|
2766
2401
|
# Filters the results by compliance.
|
|
2767
|
-
#
|
|
2768
|
-
# The allowed values are `COMPLIANT` and `NON_COMPLIANT`.
|
|
2769
2402
|
# @return [Array<String>]
|
|
2770
2403
|
#
|
|
2771
2404
|
# @!attribute [rw] next_token
|
|
@@ -2801,17 +2434,6 @@ module Aws::ConfigService
|
|
|
2801
2434
|
include Aws::Structure
|
|
2802
2435
|
end
|
|
2803
2436
|
|
|
2804
|
-
# @note When making an API call, you may pass DescribeComplianceByResourceRequest
|
|
2805
|
-
# data as a hash:
|
|
2806
|
-
#
|
|
2807
|
-
# {
|
|
2808
|
-
# resource_type: "StringWithCharLimit256",
|
|
2809
|
-
# resource_id: "BaseResourceId",
|
|
2810
|
-
# compliance_types: ["COMPLIANT"], # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
2811
|
-
# limit: 1,
|
|
2812
|
-
# next_token: "NextToken",
|
|
2813
|
-
# }
|
|
2814
|
-
#
|
|
2815
2437
|
# @!attribute [rw] resource_type
|
|
2816
2438
|
# The types of Amazon Web Services resources for which you want
|
|
2817
2439
|
# compliance information (for example, `AWS::EC2::Instance`). For this
|
|
@@ -2828,9 +2450,6 @@ module Aws::ConfigService
|
|
|
2828
2450
|
#
|
|
2829
2451
|
# @!attribute [rw] compliance_types
|
|
2830
2452
|
# Filters the results by compliance.
|
|
2831
|
-
#
|
|
2832
|
-
# The allowed values are `COMPLIANT`, `NON_COMPLIANT`, and
|
|
2833
|
-
# `INSUFFICIENT_DATA`.
|
|
2834
2453
|
# @return [Array<String>]
|
|
2835
2454
|
#
|
|
2836
2455
|
# @!attribute [rw] limit
|
|
@@ -2875,15 +2494,6 @@ module Aws::ConfigService
|
|
|
2875
2494
|
include Aws::Structure
|
|
2876
2495
|
end
|
|
2877
2496
|
|
|
2878
|
-
# @note When making an API call, you may pass DescribeConfigRuleEvaluationStatusRequest
|
|
2879
|
-
# data as a hash:
|
|
2880
|
-
#
|
|
2881
|
-
# {
|
|
2882
|
-
# config_rule_names: ["ConfigRuleName"],
|
|
2883
|
-
# next_token: "String",
|
|
2884
|
-
# limit: 1,
|
|
2885
|
-
# }
|
|
2886
|
-
#
|
|
2887
2497
|
# @!attribute [rw] config_rule_names
|
|
2888
2498
|
# The name of the Config managed rules for which you want status
|
|
2889
2499
|
# information. If you do not specify any names, Config returns status
|
|
@@ -2939,14 +2549,12 @@ module Aws::ConfigService
|
|
|
2939
2549
|
|
|
2940
2550
|
# Returns a filtered list of Detective or Proactive Config rules. By
|
|
2941
2551
|
# default, if the filter is not defined, this API returns an unfiltered
|
|
2942
|
-
# list.
|
|
2552
|
+
# list. For more information on Detective or Proactive Config rules, see
|
|
2553
|
+
# [ **Evaluation Mode** ][1] in the Config Developer Guide.
|
|
2943
2554
|
#
|
|
2944
|
-
# @note When making an API call, you may pass DescribeConfigRulesFilters
|
|
2945
|
-
# data as a hash:
|
|
2946
2555
|
#
|
|
2947
|
-
#
|
|
2948
|
-
#
|
|
2949
|
-
# }
|
|
2556
|
+
#
|
|
2557
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html
|
|
2950
2558
|
#
|
|
2951
2559
|
# @!attribute [rw] evaluation_mode
|
|
2952
2560
|
# The mode of an evaluation. The valid values are Detective or
|
|
@@ -2961,17 +2569,6 @@ module Aws::ConfigService
|
|
|
2961
2569
|
include Aws::Structure
|
|
2962
2570
|
end
|
|
2963
2571
|
|
|
2964
|
-
# @note When making an API call, you may pass DescribeConfigRulesRequest
|
|
2965
|
-
# data as a hash:
|
|
2966
|
-
#
|
|
2967
|
-
# {
|
|
2968
|
-
# config_rule_names: ["ConfigRuleName"],
|
|
2969
|
-
# next_token: "String",
|
|
2970
|
-
# filters: {
|
|
2971
|
-
# evaluation_mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
|
2972
|
-
# },
|
|
2973
|
-
# }
|
|
2974
|
-
#
|
|
2975
2572
|
# @!attribute [rw] config_rule_names
|
|
2976
2573
|
# The names of the Config rules for which you want details. If you do
|
|
2977
2574
|
# not specify any names, Config returns details for all your rules.
|
|
@@ -2983,8 +2580,14 @@ module Aws::ConfigService
|
|
|
2983
2580
|
# @return [String]
|
|
2984
2581
|
#
|
|
2985
2582
|
# @!attribute [rw] filters
|
|
2986
|
-
# Returns a list of
|
|
2987
|
-
# this API returns an unfiltered list.
|
|
2583
|
+
# Returns a list of Detective or Proactive Config rules. By default,
|
|
2584
|
+
# this API returns an unfiltered list. For more information on
|
|
2585
|
+
# Detective or Proactive Config rules, see [ **Evaluation Mode** ][1]
|
|
2586
|
+
# in the Config Developer Guide.
|
|
2587
|
+
#
|
|
2588
|
+
#
|
|
2589
|
+
#
|
|
2590
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html
|
|
2988
2591
|
# @return [Types::DescribeConfigRulesFilters]
|
|
2989
2592
|
#
|
|
2990
2593
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/DescribeConfigRulesRequest AWS API Documentation
|
|
@@ -3015,16 +2618,6 @@ module Aws::ConfigService
|
|
|
3015
2618
|
include Aws::Structure
|
|
3016
2619
|
end
|
|
3017
2620
|
|
|
3018
|
-
# @note When making an API call, you may pass DescribeConfigurationAggregatorSourcesStatusRequest
|
|
3019
|
-
# data as a hash:
|
|
3020
|
-
#
|
|
3021
|
-
# {
|
|
3022
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
3023
|
-
# update_status: ["FAILED"], # accepts FAILED, SUCCEEDED, OUTDATED
|
|
3024
|
-
# next_token: "String",
|
|
3025
|
-
# limit: 1,
|
|
3026
|
-
# }
|
|
3027
|
-
#
|
|
3028
2621
|
# @!attribute [rw] configuration_aggregator_name
|
|
3029
2622
|
# The name of the configuration aggregator.
|
|
3030
2623
|
# @return [String]
|
|
@@ -3078,15 +2671,6 @@ module Aws::ConfigService
|
|
|
3078
2671
|
include Aws::Structure
|
|
3079
2672
|
end
|
|
3080
2673
|
|
|
3081
|
-
# @note When making an API call, you may pass DescribeConfigurationAggregatorsRequest
|
|
3082
|
-
# data as a hash:
|
|
3083
|
-
#
|
|
3084
|
-
# {
|
|
3085
|
-
# configuration_aggregator_names: ["ConfigurationAggregatorName"],
|
|
3086
|
-
# next_token: "String",
|
|
3087
|
-
# limit: 1,
|
|
3088
|
-
# }
|
|
3089
|
-
#
|
|
3090
2674
|
# @!attribute [rw] configuration_aggregator_names
|
|
3091
2675
|
# The name of the configuration aggregators.
|
|
3092
2676
|
# @return [Array<String>]
|
|
@@ -3132,13 +2716,6 @@ module Aws::ConfigService
|
|
|
3132
2716
|
|
|
3133
2717
|
# The input for the DescribeConfigurationRecorderStatus action.
|
|
3134
2718
|
#
|
|
3135
|
-
# @note When making an API call, you may pass DescribeConfigurationRecorderStatusRequest
|
|
3136
|
-
# data as a hash:
|
|
3137
|
-
#
|
|
3138
|
-
# {
|
|
3139
|
-
# configuration_recorder_names: ["RecorderName"],
|
|
3140
|
-
# }
|
|
3141
|
-
#
|
|
3142
2719
|
# @!attribute [rw] configuration_recorder_names
|
|
3143
2720
|
# The name(s) of the configuration recorder. If the name is not
|
|
3144
2721
|
# specified, the action returns the current status of all the
|
|
@@ -3170,13 +2747,6 @@ module Aws::ConfigService
|
|
|
3170
2747
|
|
|
3171
2748
|
# The input for the DescribeConfigurationRecorders action.
|
|
3172
2749
|
#
|
|
3173
|
-
# @note When making an API call, you may pass DescribeConfigurationRecordersRequest
|
|
3174
|
-
# data as a hash:
|
|
3175
|
-
#
|
|
3176
|
-
# {
|
|
3177
|
-
# configuration_recorder_names: ["RecorderName"],
|
|
3178
|
-
# }
|
|
3179
|
-
#
|
|
3180
2750
|
# @!attribute [rw] configuration_recorder_names
|
|
3181
2751
|
# A list of configuration recorder names.
|
|
3182
2752
|
# @return [Array<String>]
|
|
@@ -3204,19 +2774,6 @@ module Aws::ConfigService
|
|
|
3204
2774
|
include Aws::Structure
|
|
3205
2775
|
end
|
|
3206
2776
|
|
|
3207
|
-
# @note When making an API call, you may pass DescribeConformancePackComplianceRequest
|
|
3208
|
-
# data as a hash:
|
|
3209
|
-
#
|
|
3210
|
-
# {
|
|
3211
|
-
# conformance_pack_name: "ConformancePackName", # required
|
|
3212
|
-
# filters: {
|
|
3213
|
-
# config_rule_names: ["StringWithCharLimit64"],
|
|
3214
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
|
3215
|
-
# },
|
|
3216
|
-
# limit: 1,
|
|
3217
|
-
# next_token: "NextToken",
|
|
3218
|
-
# }
|
|
3219
|
-
#
|
|
3220
2777
|
# @!attribute [rw] conformance_pack_name
|
|
3221
2778
|
# Name of the conformance pack.
|
|
3222
2779
|
# @return [String]
|
|
@@ -3269,15 +2826,6 @@ module Aws::ConfigService
|
|
|
3269
2826
|
include Aws::Structure
|
|
3270
2827
|
end
|
|
3271
2828
|
|
|
3272
|
-
# @note When making an API call, you may pass DescribeConformancePackStatusRequest
|
|
3273
|
-
# data as a hash:
|
|
3274
|
-
#
|
|
3275
|
-
# {
|
|
3276
|
-
# conformance_pack_names: ["ConformancePackName"],
|
|
3277
|
-
# limit: 1,
|
|
3278
|
-
# next_token: "NextToken",
|
|
3279
|
-
# }
|
|
3280
|
-
#
|
|
3281
2829
|
# @!attribute [rw] conformance_pack_names
|
|
3282
2830
|
# Comma-separated list of conformance pack names.
|
|
3283
2831
|
# @return [Array<String>]
|
|
@@ -3320,15 +2868,6 @@ module Aws::ConfigService
|
|
|
3320
2868
|
include Aws::Structure
|
|
3321
2869
|
end
|
|
3322
2870
|
|
|
3323
|
-
# @note When making an API call, you may pass DescribeConformancePacksRequest
|
|
3324
|
-
# data as a hash:
|
|
3325
|
-
#
|
|
3326
|
-
# {
|
|
3327
|
-
# conformance_pack_names: ["ConformancePackName"],
|
|
3328
|
-
# limit: 1,
|
|
3329
|
-
# next_token: "NextToken",
|
|
3330
|
-
# }
|
|
3331
|
-
#
|
|
3332
2871
|
# @!attribute [rw] conformance_pack_names
|
|
3333
2872
|
# Comma-separated list of conformance pack names for which you want
|
|
3334
2873
|
# details. If you do not specify any names, Config returns details for
|
|
@@ -3374,13 +2913,6 @@ module Aws::ConfigService
|
|
|
3374
2913
|
|
|
3375
2914
|
# The input for the DeliveryChannelStatus action.
|
|
3376
2915
|
#
|
|
3377
|
-
# @note When making an API call, you may pass DescribeDeliveryChannelStatusRequest
|
|
3378
|
-
# data as a hash:
|
|
3379
|
-
#
|
|
3380
|
-
# {
|
|
3381
|
-
# delivery_channel_names: ["ChannelName"],
|
|
3382
|
-
# }
|
|
3383
|
-
#
|
|
3384
2916
|
# @!attribute [rw] delivery_channel_names
|
|
3385
2917
|
# A list of delivery channel names.
|
|
3386
2918
|
# @return [Array<String>]
|
|
@@ -3409,13 +2941,6 @@ module Aws::ConfigService
|
|
|
3409
2941
|
|
|
3410
2942
|
# The input for the DescribeDeliveryChannels action.
|
|
3411
2943
|
#
|
|
3412
|
-
# @note When making an API call, you may pass DescribeDeliveryChannelsRequest
|
|
3413
|
-
# data as a hash:
|
|
3414
|
-
#
|
|
3415
|
-
# {
|
|
3416
|
-
# delivery_channel_names: ["ChannelName"],
|
|
3417
|
-
# }
|
|
3418
|
-
#
|
|
3419
2944
|
# @!attribute [rw] delivery_channel_names
|
|
3420
2945
|
# A list of delivery channel names.
|
|
3421
2946
|
# @return [Array<String>]
|
|
@@ -3443,15 +2968,6 @@ module Aws::ConfigService
|
|
|
3443
2968
|
include Aws::Structure
|
|
3444
2969
|
end
|
|
3445
2970
|
|
|
3446
|
-
# @note When making an API call, you may pass DescribeOrganizationConfigRuleStatusesRequest
|
|
3447
|
-
# data as a hash:
|
|
3448
|
-
#
|
|
3449
|
-
# {
|
|
3450
|
-
# organization_config_rule_names: ["StringWithCharLimit64"],
|
|
3451
|
-
# limit: 1,
|
|
3452
|
-
# next_token: "String",
|
|
3453
|
-
# }
|
|
3454
|
-
#
|
|
3455
2971
|
# @!attribute [rw] organization_config_rule_names
|
|
3456
2972
|
# The names of organization Config rules for which you want status
|
|
3457
2973
|
# details. If you do not specify any names, Config returns details for
|
|
@@ -3497,15 +3013,6 @@ module Aws::ConfigService
|
|
|
3497
3013
|
include Aws::Structure
|
|
3498
3014
|
end
|
|
3499
3015
|
|
|
3500
|
-
# @note When making an API call, you may pass DescribeOrganizationConfigRulesRequest
|
|
3501
|
-
# data as a hash:
|
|
3502
|
-
#
|
|
3503
|
-
# {
|
|
3504
|
-
# organization_config_rule_names: ["StringWithCharLimit64"],
|
|
3505
|
-
# limit: 1,
|
|
3506
|
-
# next_token: "String",
|
|
3507
|
-
# }
|
|
3508
|
-
#
|
|
3509
3016
|
# @!attribute [rw] organization_config_rule_names
|
|
3510
3017
|
# The names of organization Config rules for which you want details.
|
|
3511
3018
|
# If you do not specify any names, Config returns details for all your
|
|
@@ -3551,15 +3058,6 @@ module Aws::ConfigService
|
|
|
3551
3058
|
include Aws::Structure
|
|
3552
3059
|
end
|
|
3553
3060
|
|
|
3554
|
-
# @note When making an API call, you may pass DescribeOrganizationConformancePackStatusesRequest
|
|
3555
|
-
# data as a hash:
|
|
3556
|
-
#
|
|
3557
|
-
# {
|
|
3558
|
-
# organization_conformance_pack_names: ["OrganizationConformancePackName"],
|
|
3559
|
-
# limit: 1,
|
|
3560
|
-
# next_token: "String",
|
|
3561
|
-
# }
|
|
3562
|
-
#
|
|
3563
3061
|
# @!attribute [rw] organization_conformance_pack_names
|
|
3564
3062
|
# The names of organization conformance packs for which you want
|
|
3565
3063
|
# status details. If you do not specify any names, Config returns
|
|
@@ -3605,15 +3103,6 @@ module Aws::ConfigService
|
|
|
3605
3103
|
include Aws::Structure
|
|
3606
3104
|
end
|
|
3607
3105
|
|
|
3608
|
-
# @note When making an API call, you may pass DescribeOrganizationConformancePacksRequest
|
|
3609
|
-
# data as a hash:
|
|
3610
|
-
#
|
|
3611
|
-
# {
|
|
3612
|
-
# organization_conformance_pack_names: ["OrganizationConformancePackName"],
|
|
3613
|
-
# limit: 1,
|
|
3614
|
-
# next_token: "String",
|
|
3615
|
-
# }
|
|
3616
|
-
#
|
|
3617
3106
|
# @!attribute [rw] organization_conformance_pack_names
|
|
3618
3107
|
# The name that you assign to an organization conformance pack.
|
|
3619
3108
|
# @return [Array<String>]
|
|
@@ -3657,14 +3146,6 @@ module Aws::ConfigService
|
|
|
3657
3146
|
include Aws::Structure
|
|
3658
3147
|
end
|
|
3659
3148
|
|
|
3660
|
-
# @note When making an API call, you may pass DescribePendingAggregationRequestsRequest
|
|
3661
|
-
# data as a hash:
|
|
3662
|
-
#
|
|
3663
|
-
# {
|
|
3664
|
-
# limit: 1,
|
|
3665
|
-
# next_token: "String",
|
|
3666
|
-
# }
|
|
3667
|
-
#
|
|
3668
3149
|
# @!attribute [rw] limit
|
|
3669
3150
|
# The maximum number of evaluation results returned on each page. The
|
|
3670
3151
|
# default is maximum. If you specify 0, Config uses the default.
|
|
@@ -3702,13 +3183,6 @@ module Aws::ConfigService
|
|
|
3702
3183
|
include Aws::Structure
|
|
3703
3184
|
end
|
|
3704
3185
|
|
|
3705
|
-
# @note When making an API call, you may pass DescribeRemediationConfigurationsRequest
|
|
3706
|
-
# data as a hash:
|
|
3707
|
-
#
|
|
3708
|
-
# {
|
|
3709
|
-
# config_rule_names: ["ConfigRuleName"], # required
|
|
3710
|
-
# }
|
|
3711
|
-
#
|
|
3712
3186
|
# @!attribute [rw] config_rule_names
|
|
3713
3187
|
# A list of Config rule names of remediation configurations for which
|
|
3714
3188
|
# you want details.
|
|
@@ -3734,21 +3208,6 @@ module Aws::ConfigService
|
|
|
3734
3208
|
include Aws::Structure
|
|
3735
3209
|
end
|
|
3736
3210
|
|
|
3737
|
-
# @note When making an API call, you may pass DescribeRemediationExceptionsRequest
|
|
3738
|
-
# data as a hash:
|
|
3739
|
-
#
|
|
3740
|
-
# {
|
|
3741
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
3742
|
-
# resource_keys: [
|
|
3743
|
-
# {
|
|
3744
|
-
# resource_type: "StringWithCharLimit256",
|
|
3745
|
-
# resource_id: "StringWithCharLimit1024",
|
|
3746
|
-
# },
|
|
3747
|
-
# ],
|
|
3748
|
-
# limit: 1,
|
|
3749
|
-
# next_token: "String",
|
|
3750
|
-
# }
|
|
3751
|
-
#
|
|
3752
3211
|
# @!attribute [rw] config_rule_name
|
|
3753
3212
|
# The name of the Config rule.
|
|
3754
3213
|
# @return [String]
|
|
@@ -3799,21 +3258,6 @@ module Aws::ConfigService
|
|
|
3799
3258
|
include Aws::Structure
|
|
3800
3259
|
end
|
|
3801
3260
|
|
|
3802
|
-
# @note When making an API call, you may pass DescribeRemediationExecutionStatusRequest
|
|
3803
|
-
# data as a hash:
|
|
3804
|
-
#
|
|
3805
|
-
# {
|
|
3806
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
3807
|
-
# resource_keys: [
|
|
3808
|
-
# {
|
|
3809
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
3810
|
-
# resource_id: "ResourceId", # required
|
|
3811
|
-
# },
|
|
3812
|
-
# ],
|
|
3813
|
-
# limit: 1,
|
|
3814
|
-
# next_token: "String",
|
|
3815
|
-
# }
|
|
3816
|
-
#
|
|
3817
3261
|
# @!attribute [rw] config_rule_name
|
|
3818
3262
|
# A list of Config rule names.
|
|
3819
3263
|
# @return [String]
|
|
@@ -3864,14 +3308,6 @@ module Aws::ConfigService
|
|
|
3864
3308
|
include Aws::Structure
|
|
3865
3309
|
end
|
|
3866
3310
|
|
|
3867
|
-
# @note When making an API call, you may pass DescribeRetentionConfigurationsRequest
|
|
3868
|
-
# data as a hash:
|
|
3869
|
-
#
|
|
3870
|
-
# {
|
|
3871
|
-
# retention_configuration_names: ["RetentionConfigurationName"],
|
|
3872
|
-
# next_token: "NextToken",
|
|
3873
|
-
# }
|
|
3874
|
-
#
|
|
3875
3311
|
# @!attribute [rw] retention_configuration_names
|
|
3876
3312
|
# A list of names of retention configurations for which you want
|
|
3877
3313
|
# details. If you do not specify a name, Config returns details for
|
|
@@ -3918,17 +3354,6 @@ module Aws::ConfigService
|
|
|
3918
3354
|
# Identifies an Amazon Web Services resource and indicates whether it
|
|
3919
3355
|
# complies with the Config rule that it was evaluated against.
|
|
3920
3356
|
#
|
|
3921
|
-
# @note When making an API call, you may pass Evaluation
|
|
3922
|
-
# data as a hash:
|
|
3923
|
-
#
|
|
3924
|
-
# {
|
|
3925
|
-
# compliance_resource_type: "StringWithCharLimit256", # required
|
|
3926
|
-
# compliance_resource_id: "BaseResourceId", # required
|
|
3927
|
-
# compliance_type: "COMPLIANT", # required, accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
3928
|
-
# annotation: "StringWithCharLimit256",
|
|
3929
|
-
# ordering_timestamp: Time.now, # required
|
|
3930
|
-
# }
|
|
3931
|
-
#
|
|
3932
3357
|
# @!attribute [rw] compliance_resource_type
|
|
3933
3358
|
# The type of Amazon Web Services resource that was evaluated.
|
|
3934
3359
|
# @return [String]
|
|
@@ -3981,13 +3406,6 @@ module Aws::ConfigService
|
|
|
3981
3406
|
# just a resource definition, you do not need to provide evaluation
|
|
3982
3407
|
# context.
|
|
3983
3408
|
#
|
|
3984
|
-
# @note When making an API call, you may pass EvaluationContext
|
|
3985
|
-
# data as a hash:
|
|
3986
|
-
#
|
|
3987
|
-
# {
|
|
3988
|
-
# evaluation_context_identifier: "EvaluationContextIdentifier",
|
|
3989
|
-
# }
|
|
3990
|
-
#
|
|
3991
3409
|
# @!attribute [rw] evaluation_context_identifier
|
|
3992
3410
|
# A unique EvaluationContextIdentifier ID for an EvaluationContext.
|
|
3993
3411
|
# @return [String]
|
|
@@ -4003,13 +3421,6 @@ module Aws::ConfigService
|
|
|
4003
3421
|
# The configuration object for Config rule evaluation mode. The
|
|
4004
3422
|
# Supported valid values are Detective or Proactive.
|
|
4005
3423
|
#
|
|
4006
|
-
# @note When making an API call, you may pass EvaluationModeConfiguration
|
|
4007
|
-
# data as a hash:
|
|
4008
|
-
#
|
|
4009
|
-
# {
|
|
4010
|
-
# mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
|
4011
|
-
# }
|
|
4012
|
-
#
|
|
4013
3424
|
# @!attribute [rw] mode
|
|
4014
3425
|
# The mode of an evaluation. The valid values are Detective or
|
|
4015
3426
|
# Proactive.
|
|
@@ -4158,16 +3569,6 @@ module Aws::ConfigService
|
|
|
4158
3569
|
|
|
4159
3570
|
# The controls that Config uses for executing remediations.
|
|
4160
3571
|
#
|
|
4161
|
-
# @note When making an API call, you may pass ExecutionControls
|
|
4162
|
-
# data as a hash:
|
|
4163
|
-
#
|
|
4164
|
-
# {
|
|
4165
|
-
# ssm_controls: {
|
|
4166
|
-
# concurrent_execution_rate_percentage: 1,
|
|
4167
|
-
# error_percentage: 1,
|
|
4168
|
-
# },
|
|
4169
|
-
# }
|
|
4170
|
-
#
|
|
4171
3572
|
# @!attribute [rw] ssm_controls
|
|
4172
3573
|
# A SsmControls object.
|
|
4173
3574
|
# @return [Types::SsmControls]
|
|
@@ -4183,17 +3584,6 @@ module Aws::ConfigService
|
|
|
4183
3584
|
# Identifies an Amazon Web Services resource and indicates whether it
|
|
4184
3585
|
# complies with the Config rule that it was evaluated against.
|
|
4185
3586
|
#
|
|
4186
|
-
# @note When making an API call, you may pass ExternalEvaluation
|
|
4187
|
-
# data as a hash:
|
|
4188
|
-
#
|
|
4189
|
-
# {
|
|
4190
|
-
# compliance_resource_type: "StringWithCharLimit256", # required
|
|
4191
|
-
# compliance_resource_id: "BaseResourceId", # required
|
|
4192
|
-
# compliance_type: "COMPLIANT", # required, accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
4193
|
-
# annotation: "StringWithCharLimit256",
|
|
4194
|
-
# ordering_timestamp: Time.now, # required
|
|
4195
|
-
# }
|
|
4196
|
-
#
|
|
4197
3587
|
# @!attribute [rw] compliance_resource_type
|
|
4198
3588
|
# The evaluated compliance resource type. Config accepts
|
|
4199
3589
|
# `AWS::::Account` resource type.
|
|
@@ -4308,19 +3698,6 @@ module Aws::ConfigService
|
|
|
4308
3698
|
include Aws::Structure
|
|
4309
3699
|
end
|
|
4310
3700
|
|
|
4311
|
-
# @note When making an API call, you may pass GetAggregateComplianceDetailsByConfigRuleRequest
|
|
4312
|
-
# data as a hash:
|
|
4313
|
-
#
|
|
4314
|
-
# {
|
|
4315
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
4316
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
4317
|
-
# account_id: "AccountId", # required
|
|
4318
|
-
# aws_region: "AwsRegion", # required
|
|
4319
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
4320
|
-
# limit: 1,
|
|
4321
|
-
# next_token: "NextToken",
|
|
4322
|
-
# }
|
|
4323
|
-
#
|
|
4324
3701
|
# @!attribute [rw] configuration_aggregator_name
|
|
4325
3702
|
# The name of the configuration aggregator.
|
|
4326
3703
|
# @return [String]
|
|
@@ -4392,20 +3769,6 @@ module Aws::ConfigService
|
|
|
4392
3769
|
include Aws::Structure
|
|
4393
3770
|
end
|
|
4394
3771
|
|
|
4395
|
-
# @note When making an API call, you may pass GetAggregateConfigRuleComplianceSummaryRequest
|
|
4396
|
-
# data as a hash:
|
|
4397
|
-
#
|
|
4398
|
-
# {
|
|
4399
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
4400
|
-
# filters: {
|
|
4401
|
-
# account_id: "AccountId",
|
|
4402
|
-
# aws_region: "AwsRegion",
|
|
4403
|
-
# },
|
|
4404
|
-
# group_by_key: "ACCOUNT_ID", # accepts ACCOUNT_ID, AWS_REGION
|
|
4405
|
-
# limit: 1,
|
|
4406
|
-
# next_token: "NextToken",
|
|
4407
|
-
# }
|
|
4408
|
-
#
|
|
4409
3772
|
# @!attribute [rw] configuration_aggregator_name
|
|
4410
3773
|
# The name of the configuration aggregator.
|
|
4411
3774
|
# @return [String]
|
|
@@ -4465,20 +3828,6 @@ module Aws::ConfigService
|
|
|
4465
3828
|
include Aws::Structure
|
|
4466
3829
|
end
|
|
4467
3830
|
|
|
4468
|
-
# @note When making an API call, you may pass GetAggregateConformancePackComplianceSummaryRequest
|
|
4469
|
-
# data as a hash:
|
|
4470
|
-
#
|
|
4471
|
-
# {
|
|
4472
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
4473
|
-
# filters: {
|
|
4474
|
-
# account_id: "AccountId",
|
|
4475
|
-
# aws_region: "AwsRegion",
|
|
4476
|
-
# },
|
|
4477
|
-
# group_by_key: "ACCOUNT_ID", # accepts ACCOUNT_ID, AWS_REGION
|
|
4478
|
-
# limit: 1,
|
|
4479
|
-
# next_token: "NextToken",
|
|
4480
|
-
# }
|
|
4481
|
-
#
|
|
4482
3831
|
# @!attribute [rw] configuration_aggregator_name
|
|
4483
3832
|
# The name of the configuration aggregator.
|
|
4484
3833
|
# @return [String]
|
|
@@ -4540,21 +3889,6 @@ module Aws::ConfigService
|
|
|
4540
3889
|
include Aws::Structure
|
|
4541
3890
|
end
|
|
4542
3891
|
|
|
4543
|
-
# @note When making an API call, you may pass GetAggregateDiscoveredResourceCountsRequest
|
|
4544
|
-
# data as a hash:
|
|
4545
|
-
#
|
|
4546
|
-
# {
|
|
4547
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
4548
|
-
# filters: {
|
|
4549
|
-
# resource_type: "AWS::EC2::CustomerGateway", # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
4550
|
-
# account_id: "AccountId",
|
|
4551
|
-
# region: "AwsRegion",
|
|
4552
|
-
# },
|
|
4553
|
-
# group_by_key: "RESOURCE_TYPE", # accepts RESOURCE_TYPE, ACCOUNT_ID, AWS_REGION
|
|
4554
|
-
# limit: 1,
|
|
4555
|
-
# next_token: "NextToken",
|
|
4556
|
-
# }
|
|
4557
|
-
#
|
|
4558
3892
|
# @!attribute [rw] configuration_aggregator_name
|
|
4559
3893
|
# The name of the configuration aggregator.
|
|
4560
3894
|
# @return [String]
|
|
@@ -4620,20 +3954,6 @@ module Aws::ConfigService
|
|
|
4620
3954
|
include Aws::Structure
|
|
4621
3955
|
end
|
|
4622
3956
|
|
|
4623
|
-
# @note When making an API call, you may pass GetAggregateResourceConfigRequest
|
|
4624
|
-
# data as a hash:
|
|
4625
|
-
#
|
|
4626
|
-
# {
|
|
4627
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
4628
|
-
# resource_identifier: { # required
|
|
4629
|
-
# source_account_id: "AccountId", # required
|
|
4630
|
-
# source_region: "AwsRegion", # required
|
|
4631
|
-
# resource_id: "ResourceId", # required
|
|
4632
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
4633
|
-
# resource_name: "ResourceName",
|
|
4634
|
-
# },
|
|
4635
|
-
# }
|
|
4636
|
-
#
|
|
4637
3957
|
# @!attribute [rw] configuration_aggregator_name
|
|
4638
3958
|
# The name of the configuration aggregator.
|
|
4639
3959
|
# @return [String]
|
|
@@ -4663,16 +3983,6 @@ module Aws::ConfigService
|
|
|
4663
3983
|
include Aws::Structure
|
|
4664
3984
|
end
|
|
4665
3985
|
|
|
4666
|
-
# @note When making an API call, you may pass GetComplianceDetailsByConfigRuleRequest
|
|
4667
|
-
# data as a hash:
|
|
4668
|
-
#
|
|
4669
|
-
# {
|
|
4670
|
-
# config_rule_name: "StringWithCharLimit64", # required
|
|
4671
|
-
# compliance_types: ["COMPLIANT"], # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
4672
|
-
# limit: 1,
|
|
4673
|
-
# next_token: "NextToken",
|
|
4674
|
-
# }
|
|
4675
|
-
#
|
|
4676
3986
|
# @!attribute [rw] config_rule_name
|
|
4677
3987
|
# The name of the Config rule for which you want compliance
|
|
4678
3988
|
# information.
|
|
@@ -4681,8 +3991,10 @@ module Aws::ConfigService
|
|
|
4681
3991
|
# @!attribute [rw] compliance_types
|
|
4682
3992
|
# Filters the results by compliance.
|
|
4683
3993
|
#
|
|
4684
|
-
#
|
|
4685
|
-
#
|
|
3994
|
+
# `INSUFFICIENT_DATA` is a valid `ComplianceType` that is returned
|
|
3995
|
+
# when an Config rule cannot be evaluated. However,
|
|
3996
|
+
# `INSUFFICIENT_DATA` cannot be used as a `ComplianceType` for
|
|
3997
|
+
# filtering results.
|
|
4686
3998
|
# @return [Array<String>]
|
|
4687
3999
|
#
|
|
4688
4000
|
# @!attribute [rw] limit
|
|
@@ -4726,17 +4038,6 @@ module Aws::ConfigService
|
|
|
4726
4038
|
include Aws::Structure
|
|
4727
4039
|
end
|
|
4728
4040
|
|
|
4729
|
-
# @note When making an API call, you may pass GetComplianceDetailsByResourceRequest
|
|
4730
|
-
# data as a hash:
|
|
4731
|
-
#
|
|
4732
|
-
# {
|
|
4733
|
-
# resource_type: "StringWithCharLimit256",
|
|
4734
|
-
# resource_id: "BaseResourceId",
|
|
4735
|
-
# compliance_types: ["COMPLIANT"], # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
4736
|
-
# next_token: "String",
|
|
4737
|
-
# resource_evaluation_id: "ResourceEvaluationId",
|
|
4738
|
-
# }
|
|
4739
|
-
#
|
|
4740
4041
|
# @!attribute [rw] resource_type
|
|
4741
4042
|
# The type of the Amazon Web Services resource for which you want
|
|
4742
4043
|
# compliance information.
|
|
@@ -4750,8 +4051,10 @@ module Aws::ConfigService
|
|
|
4750
4051
|
# @!attribute [rw] compliance_types
|
|
4751
4052
|
# Filters the results by compliance.
|
|
4752
4053
|
#
|
|
4753
|
-
#
|
|
4754
|
-
#
|
|
4054
|
+
# `INSUFFICIENT_DATA` is a valid `ComplianceType` that is returned
|
|
4055
|
+
# when an Config rule cannot be evaluated. However,
|
|
4056
|
+
# `INSUFFICIENT_DATA` cannot be used as a `ComplianceType` for
|
|
4057
|
+
# filtering results.
|
|
4755
4058
|
# @return [Array<String>]
|
|
4756
4059
|
#
|
|
4757
4060
|
# @!attribute [rw] next_token
|
|
@@ -4813,13 +4116,6 @@ module Aws::ConfigService
|
|
|
4813
4116
|
include Aws::Structure
|
|
4814
4117
|
end
|
|
4815
4118
|
|
|
4816
|
-
# @note When making an API call, you may pass GetComplianceSummaryByResourceTypeRequest
|
|
4817
|
-
# data as a hash:
|
|
4818
|
-
#
|
|
4819
|
-
# {
|
|
4820
|
-
# resource_types: ["StringWithCharLimit256"],
|
|
4821
|
-
# }
|
|
4822
|
-
#
|
|
4823
4119
|
# @!attribute [rw] resource_types
|
|
4824
4120
|
# Specify one or more resource types to get the number of resources
|
|
4825
4121
|
# that are compliant and the number that are noncompliant for each
|
|
@@ -4854,21 +4150,6 @@ module Aws::ConfigService
|
|
|
4854
4150
|
include Aws::Structure
|
|
4855
4151
|
end
|
|
4856
4152
|
|
|
4857
|
-
# @note When making an API call, you may pass GetConformancePackComplianceDetailsRequest
|
|
4858
|
-
# data as a hash:
|
|
4859
|
-
#
|
|
4860
|
-
# {
|
|
4861
|
-
# conformance_pack_name: "ConformancePackName", # required
|
|
4862
|
-
# filters: {
|
|
4863
|
-
# config_rule_names: ["StringWithCharLimit64"],
|
|
4864
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
|
4865
|
-
# resource_type: "StringWithCharLimit256",
|
|
4866
|
-
# resource_ids: ["StringWithCharLimit256"],
|
|
4867
|
-
# },
|
|
4868
|
-
# limit: 1,
|
|
4869
|
-
# next_token: "NextToken",
|
|
4870
|
-
# }
|
|
4871
|
-
#
|
|
4872
4153
|
# @!attribute [rw] conformance_pack_name
|
|
4873
4154
|
# Name of the conformance pack.
|
|
4874
4155
|
# @return [String]
|
|
@@ -4922,15 +4203,6 @@ module Aws::ConfigService
|
|
|
4922
4203
|
include Aws::Structure
|
|
4923
4204
|
end
|
|
4924
4205
|
|
|
4925
|
-
# @note When making an API call, you may pass GetConformancePackComplianceSummaryRequest
|
|
4926
|
-
# data as a hash:
|
|
4927
|
-
#
|
|
4928
|
-
# {
|
|
4929
|
-
# conformance_pack_names: ["ConformancePackName"], # required
|
|
4930
|
-
# limit: 1,
|
|
4931
|
-
# next_token: "NextToken",
|
|
4932
|
-
# }
|
|
4933
|
-
#
|
|
4934
4206
|
# @!attribute [rw] conformance_pack_names
|
|
4935
4207
|
# Names of conformance packs.
|
|
4936
4208
|
# @return [Array<String>]
|
|
@@ -4972,13 +4244,6 @@ module Aws::ConfigService
|
|
|
4972
4244
|
include Aws::Structure
|
|
4973
4245
|
end
|
|
4974
4246
|
|
|
4975
|
-
# @note When making an API call, you may pass GetCustomRulePolicyRequest
|
|
4976
|
-
# data as a hash:
|
|
4977
|
-
#
|
|
4978
|
-
# {
|
|
4979
|
-
# config_rule_name: "ConfigRuleName",
|
|
4980
|
-
# }
|
|
4981
|
-
#
|
|
4982
4247
|
# @!attribute [rw] config_rule_name
|
|
4983
4248
|
# The name of your Config Custom Policy rule.
|
|
4984
4249
|
# @return [String]
|
|
@@ -5004,15 +4269,6 @@ module Aws::ConfigService
|
|
|
5004
4269
|
include Aws::Structure
|
|
5005
4270
|
end
|
|
5006
4271
|
|
|
5007
|
-
# @note When making an API call, you may pass GetDiscoveredResourceCountsRequest
|
|
5008
|
-
# data as a hash:
|
|
5009
|
-
#
|
|
5010
|
-
# {
|
|
5011
|
-
# resource_types: ["StringWithCharLimit256"],
|
|
5012
|
-
# limit: 1,
|
|
5013
|
-
# next_token: "NextToken",
|
|
5014
|
-
# }
|
|
5015
|
-
#
|
|
5016
4272
|
# @!attribute [rw] resource_types
|
|
5017
4273
|
# The comma-separated list that specifies the resource types that you
|
|
5018
4274
|
# want Config to return (for example, `"AWS::EC2::Instance"`,
|
|
@@ -5090,19 +4346,6 @@ module Aws::ConfigService
|
|
|
5090
4346
|
include Aws::Structure
|
|
5091
4347
|
end
|
|
5092
4348
|
|
|
5093
|
-
# @note When making an API call, you may pass GetOrganizationConfigRuleDetailedStatusRequest
|
|
5094
|
-
# data as a hash:
|
|
5095
|
-
#
|
|
5096
|
-
# {
|
|
5097
|
-
# organization_config_rule_name: "OrganizationConfigRuleName", # required
|
|
5098
|
-
# filters: {
|
|
5099
|
-
# account_id: "AccountId",
|
|
5100
|
-
# member_account_rule_status: "CREATE_SUCCESSFUL", # accepts CREATE_SUCCESSFUL, CREATE_IN_PROGRESS, CREATE_FAILED, DELETE_SUCCESSFUL, DELETE_FAILED, DELETE_IN_PROGRESS, UPDATE_SUCCESSFUL, UPDATE_IN_PROGRESS, UPDATE_FAILED
|
|
5101
|
-
# },
|
|
5102
|
-
# limit: 1,
|
|
5103
|
-
# next_token: "String",
|
|
5104
|
-
# }
|
|
5105
|
-
#
|
|
5106
4349
|
# @!attribute [rw] organization_config_rule_name
|
|
5107
4350
|
# The name of your organization Config rule for which you want status
|
|
5108
4351
|
# details for member accounts.
|
|
@@ -5152,19 +4395,6 @@ module Aws::ConfigService
|
|
|
5152
4395
|
include Aws::Structure
|
|
5153
4396
|
end
|
|
5154
4397
|
|
|
5155
|
-
# @note When making an API call, you may pass GetOrganizationConformancePackDetailedStatusRequest
|
|
5156
|
-
# data as a hash:
|
|
5157
|
-
#
|
|
5158
|
-
# {
|
|
5159
|
-
# organization_conformance_pack_name: "OrganizationConformancePackName", # required
|
|
5160
|
-
# filters: {
|
|
5161
|
-
# account_id: "AccountId",
|
|
5162
|
-
# status: "CREATE_SUCCESSFUL", # accepts CREATE_SUCCESSFUL, CREATE_IN_PROGRESS, CREATE_FAILED, DELETE_SUCCESSFUL, DELETE_FAILED, DELETE_IN_PROGRESS, UPDATE_SUCCESSFUL, UPDATE_IN_PROGRESS, UPDATE_FAILED
|
|
5163
|
-
# },
|
|
5164
|
-
# limit: 1,
|
|
5165
|
-
# next_token: "String",
|
|
5166
|
-
# }
|
|
5167
|
-
#
|
|
5168
4398
|
# @!attribute [rw] organization_conformance_pack_name
|
|
5169
4399
|
# The name of organization conformance pack for which you want status
|
|
5170
4400
|
# details for member accounts.
|
|
@@ -5214,13 +4444,6 @@ module Aws::ConfigService
|
|
|
5214
4444
|
include Aws::Structure
|
|
5215
4445
|
end
|
|
5216
4446
|
|
|
5217
|
-
# @note When making an API call, you may pass GetOrganizationCustomRulePolicyRequest
|
|
5218
|
-
# data as a hash:
|
|
5219
|
-
#
|
|
5220
|
-
# {
|
|
5221
|
-
# organization_config_rule_name: "OrganizationConfigRuleName", # required
|
|
5222
|
-
# }
|
|
5223
|
-
#
|
|
5224
4447
|
# @!attribute [rw] organization_config_rule_name
|
|
5225
4448
|
# The name of your organization Config Custom Policy rule.
|
|
5226
4449
|
# @return [String]
|
|
@@ -5248,19 +4471,6 @@ module Aws::ConfigService
|
|
|
5248
4471
|
|
|
5249
4472
|
# The input for the GetResourceConfigHistory action.
|
|
5250
4473
|
#
|
|
5251
|
-
# @note When making an API call, you may pass GetResourceConfigHistoryRequest
|
|
5252
|
-
# data as a hash:
|
|
5253
|
-
#
|
|
5254
|
-
# {
|
|
5255
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
5256
|
-
# resource_id: "ResourceId", # required
|
|
5257
|
-
# later_time: Time.now,
|
|
5258
|
-
# earlier_time: Time.now,
|
|
5259
|
-
# chronological_order: "Reverse", # accepts Reverse, Forward
|
|
5260
|
-
# limit: 1,
|
|
5261
|
-
# next_token: "NextToken",
|
|
5262
|
-
# }
|
|
5263
|
-
#
|
|
5264
4474
|
# @!attribute [rw] resource_type
|
|
5265
4475
|
# The resource type.
|
|
5266
4476
|
# @return [String]
|
|
@@ -5331,13 +4541,6 @@ module Aws::ConfigService
|
|
|
5331
4541
|
include Aws::Structure
|
|
5332
4542
|
end
|
|
5333
4543
|
|
|
5334
|
-
# @note When making an API call, you may pass GetResourceEvaluationSummaryRequest
|
|
5335
|
-
# data as a hash:
|
|
5336
|
-
#
|
|
5337
|
-
# {
|
|
5338
|
-
# resource_evaluation_id: "ResourceEvaluationId", # required
|
|
5339
|
-
# }
|
|
5340
|
-
#
|
|
5341
4544
|
# @!attribute [rw] resource_evaluation_id
|
|
5342
4545
|
# The unique `ResourceEvaluationId` of Amazon Web Services resource
|
|
5343
4546
|
# execution for which you want to retrieve the evaluation summary.
|
|
@@ -5397,13 +4600,6 @@ module Aws::ConfigService
|
|
|
5397
4600
|
include Aws::Structure
|
|
5398
4601
|
end
|
|
5399
4602
|
|
|
5400
|
-
# @note When making an API call, you may pass GetStoredQueryRequest
|
|
5401
|
-
# data as a hash:
|
|
5402
|
-
#
|
|
5403
|
-
# {
|
|
5404
|
-
# query_name: "QueryName", # required
|
|
5405
|
-
# }
|
|
5406
|
-
#
|
|
5407
4603
|
# @!attribute [rw] query_name
|
|
5408
4604
|
# The name of the query.
|
|
5409
4605
|
# @return [String]
|
|
@@ -5502,7 +4698,7 @@ module Aws::ConfigService
|
|
|
5502
4698
|
#
|
|
5503
4699
|
class InvalidConfigurationRecorderNameException < Aws::EmptyStructure; end
|
|
5504
4700
|
|
|
5505
|
-
# The specified delivery channel name is
|
|
4701
|
+
# The specified delivery channel name is not valid.
|
|
5506
4702
|
#
|
|
5507
4703
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidDeliveryChannelNameException AWS API Documentation
|
|
5508
4704
|
#
|
|
@@ -5520,7 +4716,7 @@ module Aws::ConfigService
|
|
|
5520
4716
|
#
|
|
5521
4717
|
class InvalidLimitException < Aws::EmptyStructure; end
|
|
5522
4718
|
|
|
5523
|
-
# The specified next token is
|
|
4719
|
+
# The specified next token is not valid. Specify the `nextToken` string
|
|
5524
4720
|
# that was returned in the previous response to get the next page of
|
|
5525
4721
|
# results.
|
|
5526
4722
|
#
|
|
@@ -5528,22 +4724,22 @@ module Aws::ConfigService
|
|
|
5528
4724
|
#
|
|
5529
4725
|
class InvalidNextTokenException < Aws::EmptyStructure; end
|
|
5530
4726
|
|
|
5531
|
-
# One or more of the specified parameters are
|
|
5532
|
-
# parameters are valid and try again.
|
|
4727
|
+
# One or more of the specified parameters are not valid. Verify that
|
|
4728
|
+
# your parameters are valid and try again.
|
|
5533
4729
|
#
|
|
5534
4730
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidParameterValueException AWS API Documentation
|
|
5535
4731
|
#
|
|
5536
4732
|
class InvalidParameterValueException < Aws::EmptyStructure; end
|
|
5537
4733
|
|
|
5538
4734
|
# Config throws an exception if the recording group does not contain a
|
|
5539
|
-
# valid list of resource types.
|
|
5540
|
-
# formatted.
|
|
4735
|
+
# valid list of resource types. Values that are not valid might also be
|
|
4736
|
+
# incorrectly formatted.
|
|
5541
4737
|
#
|
|
5542
4738
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidRecordingGroupException AWS API Documentation
|
|
5543
4739
|
#
|
|
5544
4740
|
class InvalidRecordingGroupException < Aws::EmptyStructure; end
|
|
5545
4741
|
|
|
5546
|
-
# The specified `ResultToken` is
|
|
4742
|
+
# The specified `ResultToken` is not valid.
|
|
5547
4743
|
#
|
|
5548
4744
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidResultTokenException AWS API Documentation
|
|
5549
4745
|
#
|
|
@@ -5555,13 +4751,13 @@ module Aws::ConfigService
|
|
|
5555
4751
|
#
|
|
5556
4752
|
class InvalidRoleException < Aws::EmptyStructure; end
|
|
5557
4753
|
|
|
5558
|
-
# The specified Amazon S3 key prefix is
|
|
4754
|
+
# The specified Amazon S3 key prefix is not valid.
|
|
5559
4755
|
#
|
|
5560
4756
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidS3KeyPrefixException AWS API Documentation
|
|
5561
4757
|
#
|
|
5562
4758
|
class InvalidS3KeyPrefixException < Aws::EmptyStructure; end
|
|
5563
4759
|
|
|
5564
|
-
# The specified Amazon KMS Key ARN is
|
|
4760
|
+
# The specified Amazon KMS Key ARN is not valid.
|
|
5565
4761
|
#
|
|
5566
4762
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidS3KmsKeyArnException AWS API Documentation
|
|
5567
4763
|
#
|
|
@@ -5573,7 +4769,7 @@ module Aws::ConfigService
|
|
|
5573
4769
|
#
|
|
5574
4770
|
class InvalidSNSTopicARNException < Aws::EmptyStructure; end
|
|
5575
4771
|
|
|
5576
|
-
# The specified time range is
|
|
4772
|
+
# The specified time range is not valid. The earlier time is not
|
|
5577
4773
|
# chronologically before the later time.
|
|
5578
4774
|
#
|
|
5579
4775
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidTimeRangeException AWS API Documentation
|
|
@@ -5598,22 +4794,6 @@ module Aws::ConfigService
|
|
|
5598
4794
|
#
|
|
5599
4795
|
class LimitExceededException < Aws::EmptyStructure; end
|
|
5600
4796
|
|
|
5601
|
-
# @note When making an API call, you may pass ListAggregateDiscoveredResourcesRequest
|
|
5602
|
-
# data as a hash:
|
|
5603
|
-
#
|
|
5604
|
-
# {
|
|
5605
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
5606
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
5607
|
-
# filters: {
|
|
5608
|
-
# account_id: "AccountId",
|
|
5609
|
-
# resource_id: "ResourceId",
|
|
5610
|
-
# resource_name: "ResourceName",
|
|
5611
|
-
# region: "AwsRegion",
|
|
5612
|
-
# },
|
|
5613
|
-
# limit: 1,
|
|
5614
|
-
# next_token: "NextToken",
|
|
5615
|
-
# }
|
|
5616
|
-
#
|
|
5617
4797
|
# @!attribute [rw] configuration_aggregator_name
|
|
5618
4798
|
# The name of the configuration aggregator.
|
|
5619
4799
|
# @return [String]
|
|
@@ -5667,19 +4847,6 @@ module Aws::ConfigService
|
|
|
5667
4847
|
include Aws::Structure
|
|
5668
4848
|
end
|
|
5669
4849
|
|
|
5670
|
-
# @note When making an API call, you may pass ListConformancePackComplianceScoresRequest
|
|
5671
|
-
# data as a hash:
|
|
5672
|
-
#
|
|
5673
|
-
# {
|
|
5674
|
-
# filters: {
|
|
5675
|
-
# conformance_pack_names: ["ConformancePackName"], # required
|
|
5676
|
-
# },
|
|
5677
|
-
# sort_order: "ASCENDING", # accepts ASCENDING, DESCENDING
|
|
5678
|
-
# sort_by: "SCORE", # accepts SCORE
|
|
5679
|
-
# limit: 1,
|
|
5680
|
-
# next_token: "NextToken",
|
|
5681
|
-
# }
|
|
5682
|
-
#
|
|
5683
4850
|
# @!attribute [rw] filters
|
|
5684
4851
|
# Filters the results based on the
|
|
5685
4852
|
# `ConformancePackComplianceScoresFilters`.
|
|
@@ -5719,8 +4886,8 @@ module Aws::ConfigService
|
|
|
5719
4886
|
#
|
|
5720
4887
|
# @!attribute [rw] next_token
|
|
5721
4888
|
# The `nextToken` string in a prior request that you can use to get
|
|
5722
|
-
# the paginated response for next set of conformance pack
|
|
5723
|
-
# scores.
|
|
4889
|
+
# the paginated response for the next set of conformance pack
|
|
4890
|
+
# compliance scores.
|
|
5724
4891
|
# @return [String]
|
|
5725
4892
|
#
|
|
5726
4893
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ListConformancePackComplianceScoresRequest AWS API Documentation
|
|
@@ -5753,18 +4920,6 @@ module Aws::ConfigService
|
|
|
5753
4920
|
include Aws::Structure
|
|
5754
4921
|
end
|
|
5755
4922
|
|
|
5756
|
-
# @note When making an API call, you may pass ListDiscoveredResourcesRequest
|
|
5757
|
-
# data as a hash:
|
|
5758
|
-
#
|
|
5759
|
-
# {
|
|
5760
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
5761
|
-
# resource_ids: ["ResourceId"],
|
|
5762
|
-
# resource_name: "ResourceName",
|
|
5763
|
-
# limit: 1,
|
|
5764
|
-
# include_deleted_resources: false,
|
|
5765
|
-
# next_token: "NextToken",
|
|
5766
|
-
# }
|
|
5767
|
-
#
|
|
5768
4923
|
# @!attribute [rw] resource_type
|
|
5769
4924
|
# The type of resources that you want Config to list in the response.
|
|
5770
4925
|
# @return [String]
|
|
@@ -5772,7 +4927,8 @@ module Aws::ConfigService
|
|
|
5772
4927
|
# @!attribute [rw] resource_ids
|
|
5773
4928
|
# The IDs of only those resources that you want Config to list in the
|
|
5774
4929
|
# response. If you do not specify this parameter, Config lists all
|
|
5775
|
-
# resources of the specified type that it has discovered.
|
|
4930
|
+
# resources of the specified type that it has discovered. You can list
|
|
4931
|
+
# a minimum of 1 resourceID and a maximum of 20 resourceIds.
|
|
5776
4932
|
# @return [Array<String>]
|
|
5777
4933
|
#
|
|
5778
4934
|
# @!attribute [rw] resource_name
|
|
@@ -5830,22 +4986,6 @@ module Aws::ConfigService
|
|
|
5830
4986
|
include Aws::Structure
|
|
5831
4987
|
end
|
|
5832
4988
|
|
|
5833
|
-
# @note When making an API call, you may pass ListResourceEvaluationsRequest
|
|
5834
|
-
# data as a hash:
|
|
5835
|
-
#
|
|
5836
|
-
# {
|
|
5837
|
-
# filters: {
|
|
5838
|
-
# evaluation_mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
|
5839
|
-
# time_window: {
|
|
5840
|
-
# start_time: Time.now,
|
|
5841
|
-
# end_time: Time.now,
|
|
5842
|
-
# },
|
|
5843
|
-
# evaluation_context_identifier: "EvaluationContextIdentifier",
|
|
5844
|
-
# },
|
|
5845
|
-
# limit: 1,
|
|
5846
|
-
# next_token: "String",
|
|
5847
|
-
# }
|
|
5848
|
-
#
|
|
5849
4989
|
# @!attribute [rw] filters
|
|
5850
4990
|
# Returns a `ResourceEvaluationFilters` object.
|
|
5851
4991
|
# @return [Types::ResourceEvaluationFilters]
|
|
@@ -5889,14 +5029,6 @@ module Aws::ConfigService
|
|
|
5889
5029
|
include Aws::Structure
|
|
5890
5030
|
end
|
|
5891
5031
|
|
|
5892
|
-
# @note When making an API call, you may pass ListStoredQueriesRequest
|
|
5893
|
-
# data as a hash:
|
|
5894
|
-
#
|
|
5895
|
-
# {
|
|
5896
|
-
# next_token: "String",
|
|
5897
|
-
# max_results: 1,
|
|
5898
|
-
# }
|
|
5899
|
-
#
|
|
5900
5032
|
# @!attribute [rw] next_token
|
|
5901
5033
|
# The nextToken string returned in a previous request that you use to
|
|
5902
5034
|
# request the next page of results in a paginated response.
|
|
@@ -5937,15 +5069,6 @@ module Aws::ConfigService
|
|
|
5937
5069
|
include Aws::Structure
|
|
5938
5070
|
end
|
|
5939
5071
|
|
|
5940
|
-
# @note When making an API call, you may pass ListTagsForResourceRequest
|
|
5941
|
-
# data as a hash:
|
|
5942
|
-
#
|
|
5943
|
-
# {
|
|
5944
|
-
# resource_arn: "AmazonResourceName", # required
|
|
5945
|
-
# limit: 1,
|
|
5946
|
-
# next_token: "NextToken",
|
|
5947
|
-
# }
|
|
5948
|
-
#
|
|
5949
5072
|
# @!attribute [rw] resource_arn
|
|
5950
5073
|
# The Amazon Resource Name (ARN) that identifies the resource for
|
|
5951
5074
|
# which to list the tags. Currently, the supported resources are
|
|
@@ -6178,8 +5301,8 @@ module Aws::ConfigService
|
|
|
6178
5301
|
#
|
|
6179
5302
|
class NoSuchBucketException < Aws::EmptyStructure; end
|
|
6180
5303
|
|
|
6181
|
-
# The Config rule in the request is
|
|
6182
|
-
# Config
|
|
5304
|
+
# The Config rule in the request is not valid. Verify that the rule is
|
|
5305
|
+
# an Config Process Check rule, that the rule name is correct, and that
|
|
6183
5306
|
# valid Amazon Resouce Names (ARNs) are used before trying again.
|
|
6184
5307
|
#
|
|
6185
5308
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/NoSuchConfigRuleException AWS API Documentation
|
|
@@ -6216,10 +5339,10 @@ module Aws::ConfigService
|
|
|
6216
5339
|
#
|
|
6217
5340
|
class NoSuchDeliveryChannelException < Aws::EmptyStructure; end
|
|
6218
5341
|
|
|
6219
|
-
# The Config rule in the request is
|
|
6220
|
-
# organization Config
|
|
6221
|
-
# and that valid Amazon Resouce Names (ARNs) are used before
|
|
6222
|
-
# again.
|
|
5342
|
+
# The Config rule in the request is not valid. Verify that the rule is
|
|
5343
|
+
# an organization Config Process Check rule, that the rule name is
|
|
5344
|
+
# correct, and that valid Amazon Resouce Names (ARNs) are used before
|
|
5345
|
+
# trying again.
|
|
6223
5346
|
#
|
|
6224
5347
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/NoSuchOrganizationConfigRuleException AWS API Documentation
|
|
6225
5348
|
#
|
|
@@ -6286,15 +5409,6 @@ module Aws::ConfigService
|
|
|
6286
5409
|
# This object contains regions to set up the aggregator and an IAM role
|
|
6287
5410
|
# to retrieve organization details.
|
|
6288
5411
|
#
|
|
6289
|
-
# @note When making an API call, you may pass OrganizationAggregationSource
|
|
6290
|
-
# data as a hash:
|
|
6291
|
-
#
|
|
6292
|
-
# {
|
|
6293
|
-
# role_arn: "String", # required
|
|
6294
|
-
# aws_regions: ["String"],
|
|
6295
|
-
# all_aws_regions: false,
|
|
6296
|
-
# }
|
|
6297
|
-
#
|
|
6298
5412
|
# @!attribute [rw] role_arn
|
|
6299
5413
|
# ARN of the IAM role used to retrieve Amazon Web Services
|
|
6300
5414
|
# Organization details associated with the aggregator account.
|
|
@@ -6662,7 +5776,7 @@ module Aws::ConfigService
|
|
|
6662
5776
|
include Aws::Structure
|
|
6663
5777
|
end
|
|
6664
5778
|
|
|
6665
|
-
# You have specified a template that is
|
|
5779
|
+
# You have specified a template that is not valid or supported.
|
|
6666
5780
|
#
|
|
6667
5781
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/OrganizationConformancePackTemplateValidationException AWS API Documentation
|
|
6668
5782
|
#
|
|
@@ -6675,23 +5789,6 @@ module Aws::ConfigService
|
|
|
6675
5789
|
# resource, and organization trigger types that initiate Config to
|
|
6676
5790
|
# evaluate Amazon Web Services resources against a rule.
|
|
6677
5791
|
#
|
|
6678
|
-
# @note When making an API call, you may pass OrganizationCustomPolicyRuleMetadata
|
|
6679
|
-
# data as a hash:
|
|
6680
|
-
#
|
|
6681
|
-
# {
|
|
6682
|
-
# description: "StringWithCharLimit256Min0",
|
|
6683
|
-
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification
|
|
6684
|
-
# input_parameters: "StringWithCharLimit2048",
|
|
6685
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
6686
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
|
6687
|
-
# resource_id_scope: "StringWithCharLimit768",
|
|
6688
|
-
# tag_key_scope: "StringWithCharLimit128",
|
|
6689
|
-
# tag_value_scope: "StringWithCharLimit256",
|
|
6690
|
-
# policy_runtime: "PolicyRuntime", # required
|
|
6691
|
-
# policy_text: "PolicyText", # required
|
|
6692
|
-
# debug_log_delivery_accounts: ["AccountId"],
|
|
6693
|
-
# }
|
|
6694
|
-
#
|
|
6695
5792
|
# @!attribute [rw] description
|
|
6696
5793
|
# The description that you provide for your organization Config Custom
|
|
6697
5794
|
# Policy rule.
|
|
@@ -6882,21 +5979,6 @@ module Aws::ConfigService
|
|
|
6882
5979
|
# provides the frequency with which you want Config to run evaluations
|
|
6883
5980
|
# for the rule if the trigger type is periodic.
|
|
6884
5981
|
#
|
|
6885
|
-
# @note When making an API call, you may pass OrganizationCustomRuleMetadata
|
|
6886
|
-
# data as a hash:
|
|
6887
|
-
#
|
|
6888
|
-
# {
|
|
6889
|
-
# description: "StringWithCharLimit256Min0",
|
|
6890
|
-
# lambda_function_arn: "StringWithCharLimit256", # required
|
|
6891
|
-
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # required, accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification, ScheduledNotification
|
|
6892
|
-
# input_parameters: "StringWithCharLimit2048",
|
|
6893
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
6894
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
|
6895
|
-
# resource_id_scope: "StringWithCharLimit768",
|
|
6896
|
-
# tag_key_scope: "StringWithCharLimit128",
|
|
6897
|
-
# tag_value_scope: "StringWithCharLimit256",
|
|
6898
|
-
# }
|
|
6899
|
-
#
|
|
6900
5982
|
# @!attribute [rw] description
|
|
6901
5983
|
# The description that you provide for your organization Config rule.
|
|
6902
5984
|
# @return [String]
|
|
@@ -6981,20 +6063,6 @@ module Aws::ConfigService
|
|
|
6981
6063
|
# Config to run evaluations for the rule if the trigger type is
|
|
6982
6064
|
# periodic.
|
|
6983
6065
|
#
|
|
6984
|
-
# @note When making an API call, you may pass OrganizationManagedRuleMetadata
|
|
6985
|
-
# data as a hash:
|
|
6986
|
-
#
|
|
6987
|
-
# {
|
|
6988
|
-
# description: "StringWithCharLimit256Min0",
|
|
6989
|
-
# rule_identifier: "StringWithCharLimit256", # required
|
|
6990
|
-
# input_parameters: "StringWithCharLimit2048",
|
|
6991
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
6992
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
|
6993
|
-
# resource_id_scope: "StringWithCharLimit768",
|
|
6994
|
-
# tag_key_scope: "StringWithCharLimit128",
|
|
6995
|
-
# tag_value_scope: "StringWithCharLimit256",
|
|
6996
|
-
# }
|
|
6997
|
-
#
|
|
6998
6066
|
# @!attribute [rw] description
|
|
6999
6067
|
# The description that you provide for your organization Config rule.
|
|
7000
6068
|
# @return [String]
|
|
@@ -7062,14 +6130,6 @@ module Aws::ConfigService
|
|
|
7062
6130
|
# Status filter object to filter results based on specific member
|
|
7063
6131
|
# account ID or status type for an organization conformance pack.
|
|
7064
6132
|
#
|
|
7065
|
-
# @note When making an API call, you may pass OrganizationResourceDetailedStatusFilters
|
|
7066
|
-
# data as a hash:
|
|
7067
|
-
#
|
|
7068
|
-
# {
|
|
7069
|
-
# account_id: "AccountId",
|
|
7070
|
-
# status: "CREATE_SUCCESSFUL", # accepts CREATE_SUCCESSFUL, CREATE_IN_PROGRESS, CREATE_FAILED, DELETE_SUCCESSFUL, DELETE_FAILED, DELETE_IN_PROGRESS, UPDATE_SUCCESSFUL, UPDATE_IN_PROGRESS, UPDATE_FAILED
|
|
7071
|
-
# }
|
|
7072
|
-
#
|
|
7073
6133
|
# @!attribute [rw] account_id
|
|
7074
6134
|
# The 12-digit account ID of the member account within an
|
|
7075
6135
|
# organization.
|
|
@@ -7151,20 +6211,6 @@ module Aws::ConfigService
|
|
|
7151
6211
|
include Aws::Structure
|
|
7152
6212
|
end
|
|
7153
6213
|
|
|
7154
|
-
# @note When making an API call, you may pass PutAggregationAuthorizationRequest
|
|
7155
|
-
# data as a hash:
|
|
7156
|
-
#
|
|
7157
|
-
# {
|
|
7158
|
-
# authorized_account_id: "AccountId", # required
|
|
7159
|
-
# authorized_aws_region: "AwsRegion", # required
|
|
7160
|
-
# tags: [
|
|
7161
|
-
# {
|
|
7162
|
-
# key: "TagKey",
|
|
7163
|
-
# value: "TagValue",
|
|
7164
|
-
# },
|
|
7165
|
-
# ],
|
|
7166
|
-
# }
|
|
7167
|
-
#
|
|
7168
6214
|
# @!attribute [rw] authorized_account_id
|
|
7169
6215
|
# The 12-digit account ID of the account authorized to aggregate data.
|
|
7170
6216
|
# @return [String]
|
|
@@ -7199,55 +6245,6 @@ module Aws::ConfigService
|
|
|
7199
6245
|
include Aws::Structure
|
|
7200
6246
|
end
|
|
7201
6247
|
|
|
7202
|
-
# @note When making an API call, you may pass PutConfigRuleRequest
|
|
7203
|
-
# data as a hash:
|
|
7204
|
-
#
|
|
7205
|
-
# {
|
|
7206
|
-
# config_rule: { # required
|
|
7207
|
-
# config_rule_name: "ConfigRuleName",
|
|
7208
|
-
# config_rule_arn: "StringWithCharLimit256",
|
|
7209
|
-
# config_rule_id: "StringWithCharLimit64",
|
|
7210
|
-
# description: "EmptiableStringWithCharLimit256",
|
|
7211
|
-
# scope: {
|
|
7212
|
-
# compliance_resource_types: ["StringWithCharLimit256"],
|
|
7213
|
-
# tag_key: "StringWithCharLimit128",
|
|
7214
|
-
# tag_value: "StringWithCharLimit256",
|
|
7215
|
-
# compliance_resource_id: "BaseResourceId",
|
|
7216
|
-
# },
|
|
7217
|
-
# source: { # required
|
|
7218
|
-
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
|
|
7219
|
-
# source_identifier: "StringWithCharLimit256",
|
|
7220
|
-
# source_details: [
|
|
7221
|
-
# {
|
|
7222
|
-
# event_source: "aws.config", # accepts aws.config
|
|
7223
|
-
# message_type: "ConfigurationItemChangeNotification", # accepts ConfigurationItemChangeNotification, ConfigurationSnapshotDeliveryCompleted, ScheduledNotification, OversizedConfigurationItemChangeNotification
|
|
7224
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
7225
|
-
# },
|
|
7226
|
-
# ],
|
|
7227
|
-
# custom_policy_details: {
|
|
7228
|
-
# policy_runtime: "PolicyRuntime", # required
|
|
7229
|
-
# policy_text: "PolicyText", # required
|
|
7230
|
-
# enable_debug_log_delivery: false,
|
|
7231
|
-
# },
|
|
7232
|
-
# },
|
|
7233
|
-
# input_parameters: "StringWithCharLimit1024",
|
|
7234
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
7235
|
-
# config_rule_state: "ACTIVE", # accepts ACTIVE, DELETING, DELETING_RESULTS, EVALUATING
|
|
7236
|
-
# created_by: "StringWithCharLimit256",
|
|
7237
|
-
# evaluation_modes: [
|
|
7238
|
-
# {
|
|
7239
|
-
# mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
|
7240
|
-
# },
|
|
7241
|
-
# ],
|
|
7242
|
-
# },
|
|
7243
|
-
# tags: [
|
|
7244
|
-
# {
|
|
7245
|
-
# key: "TagKey",
|
|
7246
|
-
# value: "TagValue",
|
|
7247
|
-
# },
|
|
7248
|
-
# ],
|
|
7249
|
-
# }
|
|
7250
|
-
#
|
|
7251
6248
|
# @!attribute [rw] config_rule
|
|
7252
6249
|
# The rule that you want to add to your account.
|
|
7253
6250
|
# @return [Types::ConfigRule]
|
|
@@ -7265,31 +6262,6 @@ module Aws::ConfigService
|
|
|
7265
6262
|
include Aws::Structure
|
|
7266
6263
|
end
|
|
7267
6264
|
|
|
7268
|
-
# @note When making an API call, you may pass PutConfigurationAggregatorRequest
|
|
7269
|
-
# data as a hash:
|
|
7270
|
-
#
|
|
7271
|
-
# {
|
|
7272
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
7273
|
-
# account_aggregation_sources: [
|
|
7274
|
-
# {
|
|
7275
|
-
# account_ids: ["AccountId"], # required
|
|
7276
|
-
# all_aws_regions: false,
|
|
7277
|
-
# aws_regions: ["String"],
|
|
7278
|
-
# },
|
|
7279
|
-
# ],
|
|
7280
|
-
# organization_aggregation_source: {
|
|
7281
|
-
# role_arn: "String", # required
|
|
7282
|
-
# aws_regions: ["String"],
|
|
7283
|
-
# all_aws_regions: false,
|
|
7284
|
-
# },
|
|
7285
|
-
# tags: [
|
|
7286
|
-
# {
|
|
7287
|
-
# key: "TagKey",
|
|
7288
|
-
# value: "TagValue",
|
|
7289
|
-
# },
|
|
7290
|
-
# ],
|
|
7291
|
-
# }
|
|
7292
|
-
#
|
|
7293
6265
|
# @!attribute [rw] configuration_aggregator_name
|
|
7294
6266
|
# The name of the configuration aggregator.
|
|
7295
6267
|
# @return [String]
|
|
@@ -7331,21 +6303,6 @@ module Aws::ConfigService
|
|
|
7331
6303
|
|
|
7332
6304
|
# The input for the PutConfigurationRecorder action.
|
|
7333
6305
|
#
|
|
7334
|
-
# @note When making an API call, you may pass PutConfigurationRecorderRequest
|
|
7335
|
-
# data as a hash:
|
|
7336
|
-
#
|
|
7337
|
-
# {
|
|
7338
|
-
# configuration_recorder: { # required
|
|
7339
|
-
# name: "RecorderName",
|
|
7340
|
-
# role_arn: "String",
|
|
7341
|
-
# recording_group: {
|
|
7342
|
-
# all_supported: false,
|
|
7343
|
-
# include_global_resource_types: false,
|
|
7344
|
-
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
7345
|
-
# },
|
|
7346
|
-
# },
|
|
7347
|
-
# }
|
|
7348
|
-
#
|
|
7349
6306
|
# @!attribute [rw] configuration_recorder
|
|
7350
6307
|
# The configuration recorder object that records each configuration
|
|
7351
6308
|
# change made to the resources.
|
|
@@ -7359,27 +6316,6 @@ module Aws::ConfigService
|
|
|
7359
6316
|
include Aws::Structure
|
|
7360
6317
|
end
|
|
7361
6318
|
|
|
7362
|
-
# @note When making an API call, you may pass PutConformancePackRequest
|
|
7363
|
-
# data as a hash:
|
|
7364
|
-
#
|
|
7365
|
-
# {
|
|
7366
|
-
# conformance_pack_name: "ConformancePackName", # required
|
|
7367
|
-
# template_s3_uri: "TemplateS3Uri",
|
|
7368
|
-
# template_body: "TemplateBody",
|
|
7369
|
-
# delivery_s3_bucket: "DeliveryS3Bucket",
|
|
7370
|
-
# delivery_s3_key_prefix: "DeliveryS3KeyPrefix",
|
|
7371
|
-
# conformance_pack_input_parameters: [
|
|
7372
|
-
# {
|
|
7373
|
-
# parameter_name: "ParameterName", # required
|
|
7374
|
-
# parameter_value: "ParameterValue", # required
|
|
7375
|
-
# },
|
|
7376
|
-
# ],
|
|
7377
|
-
# template_ssm_document_details: {
|
|
7378
|
-
# document_name: "SSMDocumentName", # required
|
|
7379
|
-
# document_version: "SSMDocumentVersion",
|
|
7380
|
-
# },
|
|
7381
|
-
# }
|
|
7382
|
-
#
|
|
7383
6319
|
# @!attribute [rw] conformance_pack_name
|
|
7384
6320
|
# The unique name of the conformance pack you want to deploy.
|
|
7385
6321
|
# @return [String]
|
|
@@ -7463,22 +6399,6 @@ module Aws::ConfigService
|
|
|
7463
6399
|
|
|
7464
6400
|
# The input for the PutDeliveryChannel action.
|
|
7465
6401
|
#
|
|
7466
|
-
# @note When making an API call, you may pass PutDeliveryChannelRequest
|
|
7467
|
-
# data as a hash:
|
|
7468
|
-
#
|
|
7469
|
-
# {
|
|
7470
|
-
# delivery_channel: { # required
|
|
7471
|
-
# name: "ChannelName",
|
|
7472
|
-
# s3_bucket_name: "String",
|
|
7473
|
-
# s3_key_prefix: "String",
|
|
7474
|
-
# s3_kms_key_arn: "String",
|
|
7475
|
-
# sns_topic_arn: "String",
|
|
7476
|
-
# config_snapshot_delivery_properties: {
|
|
7477
|
-
# delivery_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
7478
|
-
# },
|
|
7479
|
-
# },
|
|
7480
|
-
# }
|
|
7481
|
-
#
|
|
7482
6402
|
# @!attribute [rw] delivery_channel
|
|
7483
6403
|
# The configuration delivery channel object that delivers the
|
|
7484
6404
|
# configuration information to an Amazon S3 bucket and to an Amazon
|
|
@@ -7493,23 +6413,6 @@ module Aws::ConfigService
|
|
|
7493
6413
|
include Aws::Structure
|
|
7494
6414
|
end
|
|
7495
6415
|
|
|
7496
|
-
# @note When making an API call, you may pass PutEvaluationsRequest
|
|
7497
|
-
# data as a hash:
|
|
7498
|
-
#
|
|
7499
|
-
# {
|
|
7500
|
-
# evaluations: [
|
|
7501
|
-
# {
|
|
7502
|
-
# compliance_resource_type: "StringWithCharLimit256", # required
|
|
7503
|
-
# compliance_resource_id: "BaseResourceId", # required
|
|
7504
|
-
# compliance_type: "COMPLIANT", # required, accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
7505
|
-
# annotation: "StringWithCharLimit256",
|
|
7506
|
-
# ordering_timestamp: Time.now, # required
|
|
7507
|
-
# },
|
|
7508
|
-
# ],
|
|
7509
|
-
# result_token: "String", # required
|
|
7510
|
-
# test_mode: false,
|
|
7511
|
-
# }
|
|
7512
|
-
#
|
|
7513
6416
|
# @!attribute [rw] evaluations
|
|
7514
6417
|
# The assessments that the Lambda function performs. Each evaluation
|
|
7515
6418
|
# identifies an Amazon Web Services resource and indicates whether it
|
|
@@ -7556,20 +6459,6 @@ module Aws::ConfigService
|
|
|
7556
6459
|
include Aws::Structure
|
|
7557
6460
|
end
|
|
7558
6461
|
|
|
7559
|
-
# @note When making an API call, you may pass PutExternalEvaluationRequest
|
|
7560
|
-
# data as a hash:
|
|
7561
|
-
#
|
|
7562
|
-
# {
|
|
7563
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
7564
|
-
# external_evaluation: { # required
|
|
7565
|
-
# compliance_resource_type: "StringWithCharLimit256", # required
|
|
7566
|
-
# compliance_resource_id: "BaseResourceId", # required
|
|
7567
|
-
# compliance_type: "COMPLIANT", # required, accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
|
7568
|
-
# annotation: "StringWithCharLimit256",
|
|
7569
|
-
# ordering_timestamp: Time.now, # required
|
|
7570
|
-
# },
|
|
7571
|
-
# }
|
|
7572
|
-
#
|
|
7573
6462
|
# @!attribute [rw] config_rule_name
|
|
7574
6463
|
# The name of the Config rule.
|
|
7575
6464
|
# @return [String]
|
|
@@ -7592,48 +6481,6 @@ module Aws::ConfigService
|
|
|
7592
6481
|
#
|
|
7593
6482
|
class PutExternalEvaluationResponse < Aws::EmptyStructure; end
|
|
7594
6483
|
|
|
7595
|
-
# @note When making an API call, you may pass PutOrganizationConfigRuleRequest
|
|
7596
|
-
# data as a hash:
|
|
7597
|
-
#
|
|
7598
|
-
# {
|
|
7599
|
-
# organization_config_rule_name: "OrganizationConfigRuleName", # required
|
|
7600
|
-
# organization_managed_rule_metadata: {
|
|
7601
|
-
# description: "StringWithCharLimit256Min0",
|
|
7602
|
-
# rule_identifier: "StringWithCharLimit256", # required
|
|
7603
|
-
# input_parameters: "StringWithCharLimit2048",
|
|
7604
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
7605
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
|
7606
|
-
# resource_id_scope: "StringWithCharLimit768",
|
|
7607
|
-
# tag_key_scope: "StringWithCharLimit128",
|
|
7608
|
-
# tag_value_scope: "StringWithCharLimit256",
|
|
7609
|
-
# },
|
|
7610
|
-
# organization_custom_rule_metadata: {
|
|
7611
|
-
# description: "StringWithCharLimit256Min0",
|
|
7612
|
-
# lambda_function_arn: "StringWithCharLimit256", # required
|
|
7613
|
-
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # required, accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification, ScheduledNotification
|
|
7614
|
-
# input_parameters: "StringWithCharLimit2048",
|
|
7615
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
7616
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
|
7617
|
-
# resource_id_scope: "StringWithCharLimit768",
|
|
7618
|
-
# tag_key_scope: "StringWithCharLimit128",
|
|
7619
|
-
# tag_value_scope: "StringWithCharLimit256",
|
|
7620
|
-
# },
|
|
7621
|
-
# excluded_accounts: ["AccountId"],
|
|
7622
|
-
# organization_custom_policy_rule_metadata: {
|
|
7623
|
-
# description: "StringWithCharLimit256Min0",
|
|
7624
|
-
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification
|
|
7625
|
-
# input_parameters: "StringWithCharLimit2048",
|
|
7626
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
7627
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
|
7628
|
-
# resource_id_scope: "StringWithCharLimit768",
|
|
7629
|
-
# tag_key_scope: "StringWithCharLimit128",
|
|
7630
|
-
# tag_value_scope: "StringWithCharLimit256",
|
|
7631
|
-
# policy_runtime: "PolicyRuntime", # required
|
|
7632
|
-
# policy_text: "PolicyText", # required
|
|
7633
|
-
# debug_log_delivery_accounts: ["AccountId"],
|
|
7634
|
-
# },
|
|
7635
|
-
# }
|
|
7636
|
-
#
|
|
7637
6484
|
# @!attribute [rw] organization_config_rule_name
|
|
7638
6485
|
# The name that you assign to an organization Config rule.
|
|
7639
6486
|
# @return [String]
|
|
@@ -7695,24 +6542,6 @@ module Aws::ConfigService
|
|
|
7695
6542
|
include Aws::Structure
|
|
7696
6543
|
end
|
|
7697
6544
|
|
|
7698
|
-
# @note When making an API call, you may pass PutOrganizationConformancePackRequest
|
|
7699
|
-
# data as a hash:
|
|
7700
|
-
#
|
|
7701
|
-
# {
|
|
7702
|
-
# organization_conformance_pack_name: "OrganizationConformancePackName", # required
|
|
7703
|
-
# template_s3_uri: "TemplateS3Uri",
|
|
7704
|
-
# template_body: "TemplateBody",
|
|
7705
|
-
# delivery_s3_bucket: "DeliveryS3Bucket",
|
|
7706
|
-
# delivery_s3_key_prefix: "DeliveryS3KeyPrefix",
|
|
7707
|
-
# conformance_pack_input_parameters: [
|
|
7708
|
-
# {
|
|
7709
|
-
# parameter_name: "ParameterName", # required
|
|
7710
|
-
# parameter_value: "ParameterValue", # required
|
|
7711
|
-
# },
|
|
7712
|
-
# ],
|
|
7713
|
-
# excluded_accounts: ["AccountId"],
|
|
7714
|
-
# }
|
|
7715
|
-
#
|
|
7716
6545
|
# @!attribute [rw] organization_conformance_pack_name
|
|
7717
6546
|
# Name of the organization conformance pack you want to create.
|
|
7718
6547
|
# @return [String]
|
|
@@ -7785,42 +6614,6 @@ module Aws::ConfigService
|
|
|
7785
6614
|
include Aws::Structure
|
|
7786
6615
|
end
|
|
7787
6616
|
|
|
7788
|
-
# @note When making an API call, you may pass PutRemediationConfigurationsRequest
|
|
7789
|
-
# data as a hash:
|
|
7790
|
-
#
|
|
7791
|
-
# {
|
|
7792
|
-
# remediation_configurations: [ # required
|
|
7793
|
-
# {
|
|
7794
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
7795
|
-
# target_type: "SSM_DOCUMENT", # required, accepts SSM_DOCUMENT
|
|
7796
|
-
# target_id: "StringWithCharLimit256", # required
|
|
7797
|
-
# target_version: "String",
|
|
7798
|
-
# parameters: {
|
|
7799
|
-
# "StringWithCharLimit256" => {
|
|
7800
|
-
# resource_value: {
|
|
7801
|
-
# value: "RESOURCE_ID", # required, accepts RESOURCE_ID
|
|
7802
|
-
# },
|
|
7803
|
-
# static_value: {
|
|
7804
|
-
# values: ["StringWithCharLimit256"], # required
|
|
7805
|
-
# },
|
|
7806
|
-
# },
|
|
7807
|
-
# },
|
|
7808
|
-
# resource_type: "String",
|
|
7809
|
-
# automatic: false,
|
|
7810
|
-
# execution_controls: {
|
|
7811
|
-
# ssm_controls: {
|
|
7812
|
-
# concurrent_execution_rate_percentage: 1,
|
|
7813
|
-
# error_percentage: 1,
|
|
7814
|
-
# },
|
|
7815
|
-
# },
|
|
7816
|
-
# maximum_automatic_attempts: 1,
|
|
7817
|
-
# retry_attempt_seconds: 1,
|
|
7818
|
-
# arn: "StringWithCharLimit1024",
|
|
7819
|
-
# created_by_service: "StringWithCharLimit1024",
|
|
7820
|
-
# },
|
|
7821
|
-
# ],
|
|
7822
|
-
# }
|
|
7823
|
-
#
|
|
7824
6617
|
# @!attribute [rw] remediation_configurations
|
|
7825
6618
|
# A list of remediation configuration objects.
|
|
7826
6619
|
# @return [Array<Types::RemediationConfiguration>]
|
|
@@ -7845,21 +6638,6 @@ module Aws::ConfigService
|
|
|
7845
6638
|
include Aws::Structure
|
|
7846
6639
|
end
|
|
7847
6640
|
|
|
7848
|
-
# @note When making an API call, you may pass PutRemediationExceptionsRequest
|
|
7849
|
-
# data as a hash:
|
|
7850
|
-
#
|
|
7851
|
-
# {
|
|
7852
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
7853
|
-
# resource_keys: [ # required
|
|
7854
|
-
# {
|
|
7855
|
-
# resource_type: "StringWithCharLimit256",
|
|
7856
|
-
# resource_id: "StringWithCharLimit1024",
|
|
7857
|
-
# },
|
|
7858
|
-
# ],
|
|
7859
|
-
# message: "StringWithCharLimit1024",
|
|
7860
|
-
# expiration_time: Time.now,
|
|
7861
|
-
# }
|
|
7862
|
-
#
|
|
7863
6641
|
# @!attribute [rw] config_rule_name
|
|
7864
6642
|
# The name of the Config rule for which you want to create remediation
|
|
7865
6643
|
# exception.
|
|
@@ -7904,20 +6682,6 @@ module Aws::ConfigService
|
|
|
7904
6682
|
include Aws::Structure
|
|
7905
6683
|
end
|
|
7906
6684
|
|
|
7907
|
-
# @note When making an API call, you may pass PutResourceConfigRequest
|
|
7908
|
-
# data as a hash:
|
|
7909
|
-
#
|
|
7910
|
-
# {
|
|
7911
|
-
# resource_type: "ResourceTypeString", # required
|
|
7912
|
-
# schema_version_id: "SchemaVersionId", # required
|
|
7913
|
-
# resource_id: "ResourceId", # required
|
|
7914
|
-
# resource_name: "ResourceName",
|
|
7915
|
-
# configuration: "Configuration", # required
|
|
7916
|
-
# tags: {
|
|
7917
|
-
# "Name" => "Value",
|
|
7918
|
-
# },
|
|
7919
|
-
# }
|
|
7920
|
-
#
|
|
7921
6685
|
# @!attribute [rw] resource_type
|
|
7922
6686
|
# The type of the resource. The custom resource type must be
|
|
7923
6687
|
# registered with CloudFormation.
|
|
@@ -7975,13 +6739,6 @@ module Aws::ConfigService
|
|
|
7975
6739
|
include Aws::Structure
|
|
7976
6740
|
end
|
|
7977
6741
|
|
|
7978
|
-
# @note When making an API call, you may pass PutRetentionConfigurationRequest
|
|
7979
|
-
# data as a hash:
|
|
7980
|
-
#
|
|
7981
|
-
# {
|
|
7982
|
-
# retention_period_in_days: 1, # required
|
|
7983
|
-
# }
|
|
7984
|
-
#
|
|
7985
6742
|
# @!attribute [rw] retention_period_in_days
|
|
7986
6743
|
# Number of days Config stores your historical information.
|
|
7987
6744
|
#
|
|
@@ -8010,25 +6767,6 @@ module Aws::ConfigService
|
|
|
8010
6767
|
include Aws::Structure
|
|
8011
6768
|
end
|
|
8012
6769
|
|
|
8013
|
-
# @note When making an API call, you may pass PutStoredQueryRequest
|
|
8014
|
-
# data as a hash:
|
|
8015
|
-
#
|
|
8016
|
-
# {
|
|
8017
|
-
# stored_query: { # required
|
|
8018
|
-
# query_id: "QueryId",
|
|
8019
|
-
# query_arn: "QueryArn",
|
|
8020
|
-
# query_name: "QueryName", # required
|
|
8021
|
-
# description: "QueryDescription",
|
|
8022
|
-
# expression: "QueryExpression",
|
|
8023
|
-
# },
|
|
8024
|
-
# tags: [
|
|
8025
|
-
# {
|
|
8026
|
-
# key: "TagKey",
|
|
8027
|
-
# value: "TagValue",
|
|
8028
|
-
# },
|
|
8029
|
-
# ],
|
|
8030
|
-
# }
|
|
8031
|
-
#
|
|
8032
6770
|
# @!attribute [rw] stored_query
|
|
8033
6771
|
# A list of `StoredQuery` objects. The mandatory fields are
|
|
8034
6772
|
# `QueryName` and `Expression`.
|
|
@@ -8131,15 +6869,6 @@ module Aws::ConfigService
|
|
|
8131
6869
|
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources
|
|
8132
6870
|
# [2]: https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html
|
|
8133
6871
|
#
|
|
8134
|
-
# @note When making an API call, you may pass RecordingGroup
|
|
8135
|
-
# data as a hash:
|
|
8136
|
-
#
|
|
8137
|
-
# {
|
|
8138
|
-
# all_supported: false,
|
|
8139
|
-
# include_global_resource_types: false,
|
|
8140
|
-
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
8141
|
-
# }
|
|
8142
|
-
#
|
|
8143
6872
|
# @!attribute [rw] all_supported
|
|
8144
6873
|
# Specifies whether Config records configuration changes for every
|
|
8145
6874
|
# supported type of regional resource.
|
|
@@ -8178,7 +6907,8 @@ module Aws::ConfigService
|
|
|
8178
6907
|
# To record all configuration changes, you must set the `allSupported`
|
|
8179
6908
|
# option to `true`.
|
|
8180
6909
|
#
|
|
8181
|
-
# If you set
|
|
6910
|
+
# If you set the `AllSupported` option to false and populate the
|
|
6911
|
+
# `ResourceTypes` option with values, when Config adds support for a
|
|
8182
6912
|
# new type of resource, it will not record resources of that type
|
|
8183
6913
|
# unless you manually add that type to your recording group.
|
|
8184
6914
|
#
|
|
@@ -8233,38 +6963,6 @@ module Aws::ConfigService
|
|
|
8233
6963
|
# configuration that includes the remediation action, parameters, and
|
|
8234
6964
|
# data to execute the action.
|
|
8235
6965
|
#
|
|
8236
|
-
# @note When making an API call, you may pass RemediationConfiguration
|
|
8237
|
-
# data as a hash:
|
|
8238
|
-
#
|
|
8239
|
-
# {
|
|
8240
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
8241
|
-
# target_type: "SSM_DOCUMENT", # required, accepts SSM_DOCUMENT
|
|
8242
|
-
# target_id: "StringWithCharLimit256", # required
|
|
8243
|
-
# target_version: "String",
|
|
8244
|
-
# parameters: {
|
|
8245
|
-
# "StringWithCharLimit256" => {
|
|
8246
|
-
# resource_value: {
|
|
8247
|
-
# value: "RESOURCE_ID", # required, accepts RESOURCE_ID
|
|
8248
|
-
# },
|
|
8249
|
-
# static_value: {
|
|
8250
|
-
# values: ["StringWithCharLimit256"], # required
|
|
8251
|
-
# },
|
|
8252
|
-
# },
|
|
8253
|
-
# },
|
|
8254
|
-
# resource_type: "String",
|
|
8255
|
-
# automatic: false,
|
|
8256
|
-
# execution_controls: {
|
|
8257
|
-
# ssm_controls: {
|
|
8258
|
-
# concurrent_execution_rate_percentage: 1,
|
|
8259
|
-
# error_percentage: 1,
|
|
8260
|
-
# },
|
|
8261
|
-
# },
|
|
8262
|
-
# maximum_automatic_attempts: 1,
|
|
8263
|
-
# retry_attempt_seconds: 1,
|
|
8264
|
-
# arn: "StringWithCharLimit1024",
|
|
8265
|
-
# created_by_service: "StringWithCharLimit1024",
|
|
8266
|
-
# }
|
|
8267
|
-
#
|
|
8268
6966
|
# @!attribute [rw] config_rule_name
|
|
8269
6967
|
# The name of the Config rule.
|
|
8270
6968
|
# @return [String]
|
|
@@ -8391,14 +7089,6 @@ module Aws::ConfigService
|
|
|
8391
7089
|
# The details that identify a resource within Config, including the
|
|
8392
7090
|
# resource type and resource ID.
|
|
8393
7091
|
#
|
|
8394
|
-
# @note When making an API call, you may pass RemediationExceptionResourceKey
|
|
8395
|
-
# data as a hash:
|
|
8396
|
-
#
|
|
8397
|
-
# {
|
|
8398
|
-
# resource_type: "StringWithCharLimit256",
|
|
8399
|
-
# resource_id: "StringWithCharLimit1024",
|
|
8400
|
-
# }
|
|
8401
|
-
#
|
|
8402
7092
|
# @!attribute [rw] resource_type
|
|
8403
7093
|
# The type of a resource.
|
|
8404
7094
|
# @return [String]
|
|
@@ -8496,18 +7186,6 @@ module Aws::ConfigService
|
|
|
8496
7186
|
# The value is either a dynamic (resource) value or a static value. You
|
|
8497
7187
|
# must select either a dynamic value or a static value.
|
|
8498
7188
|
#
|
|
8499
|
-
# @note When making an API call, you may pass RemediationParameterValue
|
|
8500
|
-
# data as a hash:
|
|
8501
|
-
#
|
|
8502
|
-
# {
|
|
8503
|
-
# resource_value: {
|
|
8504
|
-
# value: "RESOURCE_ID", # required, accepts RESOURCE_ID
|
|
8505
|
-
# },
|
|
8506
|
-
# static_value: {
|
|
8507
|
-
# values: ["StringWithCharLimit256"], # required
|
|
8508
|
-
# },
|
|
8509
|
-
# }
|
|
8510
|
-
#
|
|
8511
7189
|
# @!attribute [rw] resource_value
|
|
8512
7190
|
# The value is dynamic and changes at run-time.
|
|
8513
7191
|
# @return [Types::ResourceValue]
|
|
@@ -8561,15 +7239,6 @@ module Aws::ConfigService
|
|
|
8561
7239
|
# Filters the resource count based on account ID, region, and resource
|
|
8562
7240
|
# type.
|
|
8563
7241
|
#
|
|
8564
|
-
# @note When making an API call, you may pass ResourceCountFilters
|
|
8565
|
-
# data as a hash:
|
|
8566
|
-
#
|
|
8567
|
-
# {
|
|
8568
|
-
# resource_type: "AWS::EC2::CustomerGateway", # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
8569
|
-
# account_id: "AccountId",
|
|
8570
|
-
# region: "AwsRegion",
|
|
8571
|
-
# }
|
|
8572
|
-
#
|
|
8573
7242
|
# @!attribute [rw] resource_type
|
|
8574
7243
|
# The type of the Amazon Web Services resource.
|
|
8575
7244
|
# @return [String]
|
|
@@ -8594,16 +7263,6 @@ module Aws::ConfigService
|
|
|
8594
7263
|
|
|
8595
7264
|
# Returns information about the resource being evaluated.
|
|
8596
7265
|
#
|
|
8597
|
-
# @note When making an API call, you may pass ResourceDetails
|
|
8598
|
-
# data as a hash:
|
|
8599
|
-
#
|
|
8600
|
-
# {
|
|
8601
|
-
# resource_id: "BaseResourceId", # required
|
|
8602
|
-
# resource_type: "StringWithCharLimit256", # required
|
|
8603
|
-
# resource_configuration: "ResourceConfiguration", # required
|
|
8604
|
-
# resource_configuration_schema_type: "CFN_RESOURCE_SCHEMA", # accepts CFN_RESOURCE_SCHEMA
|
|
8605
|
-
# }
|
|
8606
|
-
#
|
|
8607
7266
|
# @!attribute [rw] resource_id
|
|
8608
7267
|
# A unique resource ID for an evaluation.
|
|
8609
7268
|
# @return [String]
|
|
@@ -8619,6 +7278,24 @@ module Aws::ConfigService
|
|
|
8619
7278
|
#
|
|
8620
7279
|
# @!attribute [rw] resource_configuration_schema_type
|
|
8621
7280
|
# The schema type of the resource configuration.
|
|
7281
|
+
#
|
|
7282
|
+
# <note markdown="1"> You can find the [Resource type schema][1], or
|
|
7283
|
+
# `CFN_RESOURCE_SCHEMA`, in "*Amazon Web Services public
|
|
7284
|
+
# extensions*" within the CloudFormation registry or with the
|
|
7285
|
+
# following CLI commmand: `aws cloudformation describe-type
|
|
7286
|
+
# --type-name "AWS::S3::Bucket" --type RESOURCE`.
|
|
7287
|
+
#
|
|
7288
|
+
# For more information, see [Managing extensions through the
|
|
7289
|
+
# CloudFormation registry][2] and [Amazon Web Services resource and
|
|
7290
|
+
# property types reference][3] in the CloudFormation User Guide.
|
|
7291
|
+
#
|
|
7292
|
+
# </note>
|
|
7293
|
+
#
|
|
7294
|
+
#
|
|
7295
|
+
#
|
|
7296
|
+
# [1]: https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-schema.html
|
|
7297
|
+
# [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html#registry-view
|
|
7298
|
+
# [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html
|
|
8622
7299
|
# @return [String]
|
|
8623
7300
|
#
|
|
8624
7301
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ResourceDetails AWS API Documentation
|
|
@@ -8659,18 +7336,6 @@ module Aws::ConfigService
|
|
|
8659
7336
|
|
|
8660
7337
|
# Returns details of a resource evaluation based on the selected filter.
|
|
8661
7338
|
#
|
|
8662
|
-
# @note When making an API call, you may pass ResourceEvaluationFilters
|
|
8663
|
-
# data as a hash:
|
|
8664
|
-
#
|
|
8665
|
-
# {
|
|
8666
|
-
# evaluation_mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
|
8667
|
-
# time_window: {
|
|
8668
|
-
# start_time: Time.now,
|
|
8669
|
-
# end_time: Time.now,
|
|
8670
|
-
# },
|
|
8671
|
-
# evaluation_context_identifier: "EvaluationContextIdentifier",
|
|
8672
|
-
# }
|
|
8673
|
-
#
|
|
8674
7339
|
# @!attribute [rw] evaluation_mode
|
|
8675
7340
|
# Filters all resource evaluations results based on an evaluation
|
|
8676
7341
|
# mode. the valid value for this API is `Proactive`.
|
|
@@ -8698,16 +7363,6 @@ module Aws::ConfigService
|
|
|
8698
7363
|
# Filters the results by resource account ID, region, resource ID, and
|
|
8699
7364
|
# resource name.
|
|
8700
7365
|
#
|
|
8701
|
-
# @note When making an API call, you may pass ResourceFilters
|
|
8702
|
-
# data as a hash:
|
|
8703
|
-
#
|
|
8704
|
-
# {
|
|
8705
|
-
# account_id: "AccountId",
|
|
8706
|
-
# resource_id: "ResourceId",
|
|
8707
|
-
# resource_name: "ResourceName",
|
|
8708
|
-
# region: "AwsRegion",
|
|
8709
|
-
# }
|
|
8710
|
-
#
|
|
8711
7366
|
# @!attribute [rw] account_id
|
|
8712
7367
|
# The 12-digit source account ID.
|
|
8713
7368
|
# @return [String]
|
|
@@ -8799,14 +7454,6 @@ module Aws::ConfigService
|
|
|
8799
7454
|
# The details that identify a resource within Config, including the
|
|
8800
7455
|
# resource type and resource ID.
|
|
8801
7456
|
#
|
|
8802
|
-
# @note When making an API call, you may pass ResourceKey
|
|
8803
|
-
# data as a hash:
|
|
8804
|
-
#
|
|
8805
|
-
# {
|
|
8806
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
8807
|
-
# resource_id: "ResourceId", # required
|
|
8808
|
-
# }
|
|
8809
|
-
#
|
|
8810
7457
|
# @!attribute [rw] resource_type
|
|
8811
7458
|
# The resource type.
|
|
8812
7459
|
# @return [String]
|
|
@@ -8839,13 +7486,6 @@ module Aws::ConfigService
|
|
|
8839
7486
|
|
|
8840
7487
|
# The dynamic value of the resource.
|
|
8841
7488
|
#
|
|
8842
|
-
# @note When making an API call, you may pass ResourceValue
|
|
8843
|
-
# data as a hash:
|
|
8844
|
-
#
|
|
8845
|
-
# {
|
|
8846
|
-
# value: "RESOURCE_ID", # required, accepts RESOURCE_ID
|
|
8847
|
-
# }
|
|
8848
|
-
#
|
|
8849
7489
|
# @!attribute [rw] value
|
|
8850
7490
|
# The value is a resource ID.
|
|
8851
7491
|
# @return [String]
|
|
@@ -8890,16 +7530,6 @@ module Aws::ConfigService
|
|
|
8890
7530
|
# for a rule. Otherwise, evaluations for the rule are triggered when any
|
|
8891
7531
|
# resource in your recording group changes in configuration.
|
|
8892
7532
|
#
|
|
8893
|
-
# @note When making an API call, you may pass Scope
|
|
8894
|
-
# data as a hash:
|
|
8895
|
-
#
|
|
8896
|
-
# {
|
|
8897
|
-
# compliance_resource_types: ["StringWithCharLimit256"],
|
|
8898
|
-
# tag_key: "StringWithCharLimit128",
|
|
8899
|
-
# tag_value: "StringWithCharLimit256",
|
|
8900
|
-
# compliance_resource_id: "BaseResourceId",
|
|
8901
|
-
# }
|
|
8902
|
-
#
|
|
8903
7533
|
# @!attribute [rw] compliance_resource_types
|
|
8904
7534
|
# The resource types of only those Amazon Web Services resources that
|
|
8905
7535
|
# you want to trigger an evaluation for the rule. You can only specify
|
|
@@ -8935,17 +7565,6 @@ module Aws::ConfigService
|
|
|
8935
7565
|
include Aws::Structure
|
|
8936
7566
|
end
|
|
8937
7567
|
|
|
8938
|
-
# @note When making an API call, you may pass SelectAggregateResourceConfigRequest
|
|
8939
|
-
# data as a hash:
|
|
8940
|
-
#
|
|
8941
|
-
# {
|
|
8942
|
-
# expression: "Expression", # required
|
|
8943
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
|
8944
|
-
# limit: 1,
|
|
8945
|
-
# max_results: 1,
|
|
8946
|
-
# next_token: "NextToken",
|
|
8947
|
-
# }
|
|
8948
|
-
#
|
|
8949
7568
|
# @!attribute [rw] expression
|
|
8950
7569
|
# The SQL query SELECT command.
|
|
8951
7570
|
# @return [String]
|
|
@@ -9003,15 +7622,6 @@ module Aws::ConfigService
|
|
|
9003
7622
|
include Aws::Structure
|
|
9004
7623
|
end
|
|
9005
7624
|
|
|
9006
|
-
# @note When making an API call, you may pass SelectResourceConfigRequest
|
|
9007
|
-
# data as a hash:
|
|
9008
|
-
#
|
|
9009
|
-
# {
|
|
9010
|
-
# expression: "Expression", # required
|
|
9011
|
-
# limit: 1,
|
|
9012
|
-
# next_token: "NextToken",
|
|
9013
|
-
# }
|
|
9014
|
-
#
|
|
9015
7625
|
# @!attribute [rw] expression
|
|
9016
7626
|
# The SQL query `SELECT` command.
|
|
9017
7627
|
# @return [String]
|
|
@@ -9064,26 +7674,6 @@ module Aws::ConfigService
|
|
|
9064
7674
|
# the events that cause the evaluation of your Amazon Web Services
|
|
9065
7675
|
# resources.
|
|
9066
7676
|
#
|
|
9067
|
-
# @note When making an API call, you may pass Source
|
|
9068
|
-
# data as a hash:
|
|
9069
|
-
#
|
|
9070
|
-
# {
|
|
9071
|
-
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
|
|
9072
|
-
# source_identifier: "StringWithCharLimit256",
|
|
9073
|
-
# source_details: [
|
|
9074
|
-
# {
|
|
9075
|
-
# event_source: "aws.config", # accepts aws.config
|
|
9076
|
-
# message_type: "ConfigurationItemChangeNotification", # accepts ConfigurationItemChangeNotification, ConfigurationSnapshotDeliveryCompleted, ScheduledNotification, OversizedConfigurationItemChangeNotification
|
|
9077
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
9078
|
-
# },
|
|
9079
|
-
# ],
|
|
9080
|
-
# custom_policy_details: {
|
|
9081
|
-
# policy_runtime: "PolicyRuntime", # required
|
|
9082
|
-
# policy_text: "PolicyText", # required
|
|
9083
|
-
# enable_debug_log_delivery: false,
|
|
9084
|
-
# },
|
|
9085
|
-
# }
|
|
9086
|
-
#
|
|
9087
7677
|
# @!attribute [rw] owner
|
|
9088
7678
|
# Indicates whether Amazon Web Services or the customer owns and
|
|
9089
7679
|
# manages the Config rule.
|
|
@@ -9152,15 +7742,6 @@ module Aws::ConfigService
|
|
|
9152
7742
|
# for the rule if the trigger type is periodic. You can specify the
|
|
9153
7743
|
# parameter values for `SourceDetail` only for custom rules.
|
|
9154
7744
|
#
|
|
9155
|
-
# @note When making an API call, you may pass SourceDetail
|
|
9156
|
-
# data as a hash:
|
|
9157
|
-
#
|
|
9158
|
-
# {
|
|
9159
|
-
# event_source: "aws.config", # accepts aws.config
|
|
9160
|
-
# message_type: "ConfigurationItemChangeNotification", # accepts ConfigurationItemChangeNotification, ConfigurationSnapshotDeliveryCompleted, ScheduledNotification, OversizedConfigurationItemChangeNotification
|
|
9161
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
|
9162
|
-
# }
|
|
9163
|
-
#
|
|
9164
7745
|
# @!attribute [rw] event_source
|
|
9165
7746
|
# The source of the event, such as an Amazon Web Services service,
|
|
9166
7747
|
# that triggers Config to evaluate your Amazon Web Services resources.
|
|
@@ -9223,14 +7804,6 @@ module Aws::ConfigService
|
|
|
9223
7804
|
# Amazon Web Services Systems Manager (SSM) specific remediation
|
|
9224
7805
|
# controls.
|
|
9225
7806
|
#
|
|
9226
|
-
# @note When making an API call, you may pass SsmControls
|
|
9227
|
-
# data as a hash:
|
|
9228
|
-
#
|
|
9229
|
-
# {
|
|
9230
|
-
# concurrent_execution_rate_percentage: 1,
|
|
9231
|
-
# error_percentage: 1,
|
|
9232
|
-
# }
|
|
9233
|
-
#
|
|
9234
7807
|
# @!attribute [rw] concurrent_execution_rate_percentage
|
|
9235
7808
|
# The maximum percentage of remediation actions allowed to run in
|
|
9236
7809
|
# parallel on the non-compliant resources for that specific rule. You
|
|
@@ -9255,13 +7828,6 @@ module Aws::ConfigService
|
|
|
9255
7828
|
include Aws::Structure
|
|
9256
7829
|
end
|
|
9257
7830
|
|
|
9258
|
-
# @note When making an API call, you may pass StartConfigRulesEvaluationRequest
|
|
9259
|
-
# data as a hash:
|
|
9260
|
-
#
|
|
9261
|
-
# {
|
|
9262
|
-
# config_rule_names: ["ConfigRuleName"],
|
|
9263
|
-
# }
|
|
9264
|
-
#
|
|
9265
7831
|
# @!attribute [rw] config_rule_names
|
|
9266
7832
|
# The list of names of Config rules that you want to run evaluations
|
|
9267
7833
|
# for.
|
|
@@ -9284,13 +7850,6 @@ module Aws::ConfigService
|
|
|
9284
7850
|
|
|
9285
7851
|
# The input for the StartConfigurationRecorder action.
|
|
9286
7852
|
#
|
|
9287
|
-
# @note When making an API call, you may pass StartConfigurationRecorderRequest
|
|
9288
|
-
# data as a hash:
|
|
9289
|
-
#
|
|
9290
|
-
# {
|
|
9291
|
-
# configuration_recorder_name: "RecorderName", # required
|
|
9292
|
-
# }
|
|
9293
|
-
#
|
|
9294
7853
|
# @!attribute [rw] configuration_recorder_name
|
|
9295
7854
|
# The name of the recorder object that records each configuration
|
|
9296
7855
|
# change made to the resources.
|
|
@@ -9304,19 +7863,6 @@ module Aws::ConfigService
|
|
|
9304
7863
|
include Aws::Structure
|
|
9305
7864
|
end
|
|
9306
7865
|
|
|
9307
|
-
# @note When making an API call, you may pass StartRemediationExecutionRequest
|
|
9308
|
-
# data as a hash:
|
|
9309
|
-
#
|
|
9310
|
-
# {
|
|
9311
|
-
# config_rule_name: "ConfigRuleName", # required
|
|
9312
|
-
# resource_keys: [ # required
|
|
9313
|
-
# {
|
|
9314
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
|
9315
|
-
# resource_id: "ResourceId", # required
|
|
9316
|
-
# },
|
|
9317
|
-
# ],
|
|
9318
|
-
# }
|
|
9319
|
-
#
|
|
9320
7866
|
# @!attribute [rw] config_rule_name
|
|
9321
7867
|
# The list of names of Config rules that you want to run remediation
|
|
9322
7868
|
# execution for.
|
|
@@ -9356,24 +7902,6 @@ module Aws::ConfigService
|
|
|
9356
7902
|
include Aws::Structure
|
|
9357
7903
|
end
|
|
9358
7904
|
|
|
9359
|
-
# @note When making an API call, you may pass StartResourceEvaluationRequest
|
|
9360
|
-
# data as a hash:
|
|
9361
|
-
#
|
|
9362
|
-
# {
|
|
9363
|
-
# resource_details: { # required
|
|
9364
|
-
# resource_id: "BaseResourceId", # required
|
|
9365
|
-
# resource_type: "StringWithCharLimit256", # required
|
|
9366
|
-
# resource_configuration: "ResourceConfiguration", # required
|
|
9367
|
-
# resource_configuration_schema_type: "CFN_RESOURCE_SCHEMA", # accepts CFN_RESOURCE_SCHEMA
|
|
9368
|
-
# },
|
|
9369
|
-
# evaluation_context: {
|
|
9370
|
-
# evaluation_context_identifier: "EvaluationContextIdentifier",
|
|
9371
|
-
# },
|
|
9372
|
-
# evaluation_mode: "DETECTIVE", # required, accepts DETECTIVE, PROACTIVE
|
|
9373
|
-
# evaluation_timeout: 1,
|
|
9374
|
-
# client_token: "ClientToken",
|
|
9375
|
-
# }
|
|
9376
|
-
#
|
|
9377
7905
|
# @!attribute [rw] resource_details
|
|
9378
7906
|
# Returns a `ResourceDetails` object.
|
|
9379
7907
|
# @return [Types::ResourceDetails]
|
|
@@ -9383,8 +7911,8 @@ module Aws::ConfigService
|
|
|
9383
7911
|
# @return [Types::EvaluationContext]
|
|
9384
7912
|
#
|
|
9385
7913
|
# @!attribute [rw] evaluation_mode
|
|
9386
|
-
# The mode of an evaluation. The valid
|
|
9387
|
-
# `
|
|
7914
|
+
# The mode of an evaluation. The valid values for this API are
|
|
7915
|
+
# `DETECTIVE` and `PROACTIVE`.
|
|
9388
7916
|
# @return [String]
|
|
9389
7917
|
#
|
|
9390
7918
|
# @!attribute [rw] evaluation_timeout
|
|
@@ -9436,13 +7964,6 @@ module Aws::ConfigService
|
|
|
9436
7964
|
|
|
9437
7965
|
# The static value of the resource.
|
|
9438
7966
|
#
|
|
9439
|
-
# @note When making an API call, you may pass StaticValue
|
|
9440
|
-
# data as a hash:
|
|
9441
|
-
#
|
|
9442
|
-
# {
|
|
9443
|
-
# values: ["StringWithCharLimit256"], # required
|
|
9444
|
-
# }
|
|
9445
|
-
#
|
|
9446
7967
|
# @!attribute [rw] values
|
|
9447
7968
|
# A list of values. For example, the ARN of the assumed role.
|
|
9448
7969
|
# @return [Array<String>]
|
|
@@ -9458,14 +7979,6 @@ module Aws::ConfigService
|
|
|
9458
7979
|
# Status filter object to filter results based on specific member
|
|
9459
7980
|
# account ID or status type for an organization Config rule.
|
|
9460
7981
|
#
|
|
9461
|
-
# @note When making an API call, you may pass StatusDetailFilters
|
|
9462
|
-
# data as a hash:
|
|
9463
|
-
#
|
|
9464
|
-
# {
|
|
9465
|
-
# account_id: "AccountId",
|
|
9466
|
-
# member_account_rule_status: "CREATE_SUCCESSFUL", # accepts CREATE_SUCCESSFUL, CREATE_IN_PROGRESS, CREATE_FAILED, DELETE_SUCCESSFUL, DELETE_FAILED, DELETE_IN_PROGRESS, UPDATE_SUCCESSFUL, UPDATE_IN_PROGRESS, UPDATE_FAILED
|
|
9467
|
-
# }
|
|
9468
|
-
#
|
|
9469
7982
|
# @!attribute [rw] account_id
|
|
9470
7983
|
# The 12-digit account ID of the member account within an
|
|
9471
7984
|
# organization.
|
|
@@ -9522,13 +8035,6 @@ module Aws::ConfigService
|
|
|
9522
8035
|
|
|
9523
8036
|
# The input for the StopConfigurationRecorder action.
|
|
9524
8037
|
#
|
|
9525
|
-
# @note When making an API call, you may pass StopConfigurationRecorderRequest
|
|
9526
|
-
# data as a hash:
|
|
9527
|
-
#
|
|
9528
|
-
# {
|
|
9529
|
-
# configuration_recorder_name: "RecorderName", # required
|
|
9530
|
-
# }
|
|
9531
|
-
#
|
|
9532
8038
|
# @!attribute [rw] configuration_recorder_name
|
|
9533
8039
|
# The name of the recorder object that records each configuration
|
|
9534
8040
|
# change made to the resources.
|
|
@@ -9544,17 +8050,6 @@ module Aws::ConfigService
|
|
|
9544
8050
|
|
|
9545
8051
|
# Provides the details of a stored query.
|
|
9546
8052
|
#
|
|
9547
|
-
# @note When making an API call, you may pass StoredQuery
|
|
9548
|
-
# data as a hash:
|
|
9549
|
-
#
|
|
9550
|
-
# {
|
|
9551
|
-
# query_id: "QueryId",
|
|
9552
|
-
# query_arn: "QueryArn",
|
|
9553
|
-
# query_name: "QueryName", # required
|
|
9554
|
-
# description: "QueryDescription",
|
|
9555
|
-
# expression: "QueryExpression",
|
|
9556
|
-
# }
|
|
9557
|
-
#
|
|
9558
8053
|
# @!attribute [rw] query_id
|
|
9559
8054
|
# The ID of the query.
|
|
9560
8055
|
# @return [String]
|
|
@@ -9629,14 +8124,6 @@ module Aws::ConfigService
|
|
|
9629
8124
|
# maximum character length of 128 characters, and tag values can have a
|
|
9630
8125
|
# maximum length of 256 characters.
|
|
9631
8126
|
#
|
|
9632
|
-
# @note When making an API call, you may pass Tag
|
|
9633
|
-
# data as a hash:
|
|
9634
|
-
#
|
|
9635
|
-
# {
|
|
9636
|
-
# key: "TagKey",
|
|
9637
|
-
# value: "TagValue",
|
|
9638
|
-
# }
|
|
9639
|
-
#
|
|
9640
8127
|
# @!attribute [rw] key
|
|
9641
8128
|
# One part of a key-value pair that make up a tag. A key is a general
|
|
9642
8129
|
# label that acts like a category for more specific tag values.
|
|
@@ -9656,19 +8143,6 @@ module Aws::ConfigService
|
|
|
9656
8143
|
include Aws::Structure
|
|
9657
8144
|
end
|
|
9658
8145
|
|
|
9659
|
-
# @note When making an API call, you may pass TagResourceRequest
|
|
9660
|
-
# data as a hash:
|
|
9661
|
-
#
|
|
9662
|
-
# {
|
|
9663
|
-
# resource_arn: "AmazonResourceName", # required
|
|
9664
|
-
# tags: [ # required
|
|
9665
|
-
# {
|
|
9666
|
-
# key: "TagKey",
|
|
9667
|
-
# value: "TagValue",
|
|
9668
|
-
# },
|
|
9669
|
-
# ],
|
|
9670
|
-
# }
|
|
9671
|
-
#
|
|
9672
8146
|
# @!attribute [rw] resource_arn
|
|
9673
8147
|
# The Amazon Resource Name (ARN) that identifies the resource for
|
|
9674
8148
|
# which to list the tags. Currently, the supported resources are
|
|
@@ -9703,14 +8177,6 @@ module Aws::ConfigService
|
|
|
9703
8177
|
#
|
|
9704
8178
|
# [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_PutConformancePack.html
|
|
9705
8179
|
#
|
|
9706
|
-
# @note When making an API call, you may pass TemplateSSMDocumentDetails
|
|
9707
|
-
# data as a hash:
|
|
9708
|
-
#
|
|
9709
|
-
# {
|
|
9710
|
-
# document_name: "SSMDocumentName", # required
|
|
9711
|
-
# document_version: "SSMDocumentVersion",
|
|
9712
|
-
# }
|
|
9713
|
-
#
|
|
9714
8180
|
# @!attribute [rw] document_name
|
|
9715
8181
|
# The name or Amazon Resource Name (ARN) of the SSM document to use to
|
|
9716
8182
|
# create a conformance pack. If you use the document name, Config
|
|
@@ -9739,14 +8205,6 @@ module Aws::ConfigService
|
|
|
9739
8205
|
|
|
9740
8206
|
# Filters evaluation results based on start and end times.
|
|
9741
8207
|
#
|
|
9742
|
-
# @note When making an API call, you may pass TimeWindow
|
|
9743
|
-
# data as a hash:
|
|
9744
|
-
#
|
|
9745
|
-
# {
|
|
9746
|
-
# start_time: Time.now,
|
|
9747
|
-
# end_time: Time.now,
|
|
9748
|
-
# }
|
|
9749
|
-
#
|
|
9750
8208
|
# @!attribute [rw] start_time
|
|
9751
8209
|
# The start time of an execution.
|
|
9752
8210
|
# @return [Time]
|
|
@@ -9777,14 +8235,6 @@ module Aws::ConfigService
|
|
|
9777
8235
|
#
|
|
9778
8236
|
class TooManyTagsException < Aws::EmptyStructure; end
|
|
9779
8237
|
|
|
9780
|
-
# @note When making an API call, you may pass UntagResourceRequest
|
|
9781
|
-
# data as a hash:
|
|
9782
|
-
#
|
|
9783
|
-
# {
|
|
9784
|
-
# resource_arn: "AmazonResourceName", # required
|
|
9785
|
-
# tag_keys: ["TagKey"], # required
|
|
9786
|
-
# }
|
|
9787
|
-
#
|
|
9788
8238
|
# @!attribute [rw] resource_arn
|
|
9789
8239
|
# The Amazon Resource Name (ARN) that identifies the resource for
|
|
9790
8240
|
# which to list the tags. Currently, the supported resources are
|
|
@@ -9805,7 +8255,7 @@ module Aws::ConfigService
|
|
|
9805
8255
|
include Aws::Structure
|
|
9806
8256
|
end
|
|
9807
8257
|
|
|
9808
|
-
# The requested action is
|
|
8258
|
+
# The requested action is not valid.
|
|
9809
8259
|
#
|
|
9810
8260
|
# For PutStoredQuery, you will see this exception if there are missing
|
|
9811
8261
|
# required fields or if the input value fails the validation, or if you
|