aws-sdk-configservice 1.86.0 → 1.88.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +13 -1
- data/VERSION +1 -1
- data/lib/aws-sdk-configservice/client.rb +205 -104
- data/lib/aws-sdk-configservice/endpoint_parameters.rb +0 -3
- data/lib/aws-sdk-configservice/endpoint_provider.rb +41 -101
- data/lib/aws-sdk-configservice/types.rb +94 -1644
- data/lib/aws-sdk-configservice.rb +1 -1
- metadata +2 -2
@@ -12,15 +12,6 @@ module Aws::ConfigService
|
|
12
12
|
|
13
13
|
# A collection of accounts and regions.
|
14
14
|
#
|
15
|
-
# @note When making an API call, you may pass AccountAggregationSource
|
16
|
-
# data as a hash:
|
17
|
-
#
|
18
|
-
# {
|
19
|
-
# account_ids: ["AccountId"], # required
|
20
|
-
# all_aws_regions: false,
|
21
|
-
# aws_regions: ["String"],
|
22
|
-
# }
|
23
|
-
#
|
24
15
|
# @!attribute [rw] account_ids
|
25
16
|
# The 12-digit account ID of the account being aggregated.
|
26
17
|
# @return [Array<String>]
|
@@ -206,16 +197,6 @@ module Aws::ConfigService
|
|
206
197
|
# Filters the conformance packs based on an account ID, region,
|
207
198
|
# compliance type, and the name of the conformance pack.
|
208
199
|
#
|
209
|
-
# @note When making an API call, you may pass AggregateConformancePackComplianceFilters
|
210
|
-
# data as a hash:
|
211
|
-
#
|
212
|
-
# {
|
213
|
-
# conformance_pack_name: "ConformancePackName",
|
214
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
215
|
-
# account_id: "AccountId",
|
216
|
-
# aws_region: "AwsRegion",
|
217
|
-
# }
|
218
|
-
#
|
219
200
|
# @!attribute [rw] conformance_pack_name
|
220
201
|
# The name of the conformance pack.
|
221
202
|
# @return [String]
|
@@ -266,14 +247,6 @@ module Aws::ConfigService
|
|
266
247
|
|
267
248
|
# Filters the results based on account ID and region.
|
268
249
|
#
|
269
|
-
# @note When making an API call, you may pass AggregateConformancePackComplianceSummaryFilters
|
270
|
-
# data as a hash:
|
271
|
-
#
|
272
|
-
# {
|
273
|
-
# account_id: "AccountId",
|
274
|
-
# aws_region: "AwsRegion",
|
275
|
-
# }
|
276
|
-
#
|
277
250
|
# @!attribute [rw] account_id
|
278
251
|
# The 12-digit Amazon Web Services account ID of the source account.
|
279
252
|
# @return [String]
|
@@ -349,17 +322,6 @@ module Aws::ConfigService
|
|
349
322
|
# aggregator, including the resource type, ID, (if available) the custom
|
350
323
|
# resource name, the source account, and source region.
|
351
324
|
#
|
352
|
-
# @note When making an API call, you may pass AggregateResourceIdentifier
|
353
|
-
# data as a hash:
|
354
|
-
#
|
355
|
-
# {
|
356
|
-
# source_account_id: "AccountId", # required
|
357
|
-
# source_region: "AwsRegion", # required
|
358
|
-
# resource_id: "ResourceId", # required
|
359
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
360
|
-
# resource_name: "ResourceName",
|
361
|
-
# }
|
362
|
-
#
|
363
325
|
# @!attribute [rw] source_account_id
|
364
326
|
# The 12-digit account ID of the source account.
|
365
327
|
# @return [String]
|
@@ -575,22 +537,6 @@ module Aws::ConfigService
|
|
575
537
|
include Aws::Structure
|
576
538
|
end
|
577
539
|
|
578
|
-
# @note When making an API call, you may pass BatchGetAggregateResourceConfigRequest
|
579
|
-
# data as a hash:
|
580
|
-
#
|
581
|
-
# {
|
582
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
583
|
-
# resource_identifiers: [ # required
|
584
|
-
# {
|
585
|
-
# source_account_id: "AccountId", # required
|
586
|
-
# source_region: "AwsRegion", # required
|
587
|
-
# resource_id: "ResourceId", # required
|
588
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
589
|
-
# resource_name: "ResourceName",
|
590
|
-
# },
|
591
|
-
# ],
|
592
|
-
# }
|
593
|
-
#
|
594
540
|
# @!attribute [rw] configuration_aggregator_name
|
595
541
|
# The name of the configuration aggregator.
|
596
542
|
# @return [String]
|
@@ -627,18 +573,6 @@ module Aws::ConfigService
|
|
627
573
|
include Aws::Structure
|
628
574
|
end
|
629
575
|
|
630
|
-
# @note When making an API call, you may pass BatchGetResourceConfigRequest
|
631
|
-
# data as a hash:
|
632
|
-
#
|
633
|
-
# {
|
634
|
-
# resource_keys: [ # required
|
635
|
-
# {
|
636
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
637
|
-
# resource_id: "ResourceId", # required
|
638
|
-
# },
|
639
|
-
# ],
|
640
|
-
# }
|
641
|
-
#
|
642
576
|
# @!attribute [rw] resource_keys
|
643
577
|
# A list of resource keys to be processed with the current request.
|
644
578
|
# Each element in the list consists of the resource type and resource
|
@@ -881,21 +815,23 @@ module Aws::ConfigService
|
|
881
815
|
# Services resources. A rule can run when Config detects a configuration
|
882
816
|
# change to an Amazon Web Services resource or at a periodic frequency
|
883
817
|
# that you choose (for example, every 24 hours). There are two types of
|
884
|
-
# rules: Config Managed Rules and Config Custom Rules
|
885
|
-
#
|
886
|
-
#
|
887
|
-
#
|
888
|
-
#
|
889
|
-
#
|
890
|
-
#
|
891
|
-
#
|
892
|
-
#
|
893
|
-
#
|
894
|
-
#
|
818
|
+
# rules: *Config Managed Rules* and *Config Custom Rules*.
|
819
|
+
#
|
820
|
+
# Config Managed Rules are predefined, customizable rules created by
|
821
|
+
# Config. For a list of managed rules, see [List of Config Managed
|
822
|
+
# Rules][1].
|
823
|
+
#
|
824
|
+
# Config Custom Rules are rules that you create from scratch. There are
|
825
|
+
# two ways to create Config custom rules: with Lambda functions ([
|
826
|
+
# Lambda Developer Guide][2]) and with Guard ([Guard GitHub
|
827
|
+
# Repository][3]), a policy-as-code language. Config custom rules
|
828
|
+
# created with Lambda are called *Config Custom Lambda Rules* and Config
|
829
|
+
# custom rules created with Guard are called *Config Custom Policy
|
830
|
+
# Rules*.
|
895
831
|
#
|
896
832
|
# For more information about developing and using Config rules, see
|
897
|
-
# [Evaluating
|
898
|
-
#
|
833
|
+
# [Evaluating Resource with Config Rules][4] in the *Config Developer
|
834
|
+
# Guide*.
|
899
835
|
#
|
900
836
|
# <note markdown="1"> You can use the Amazon Web Services CLI and Amazon Web Services SDKs
|
901
837
|
# if you want to create a rule that triggers evaluations for your
|
@@ -907,49 +843,9 @@ module Aws::ConfigService
|
|
907
843
|
#
|
908
844
|
#
|
909
845
|
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
|
910
|
-
# [2]: https://
|
911
|
-
# [3]: https://
|
912
|
-
#
|
913
|
-
# @note When making an API call, you may pass ConfigRule
|
914
|
-
# data as a hash:
|
915
|
-
#
|
916
|
-
# {
|
917
|
-
# config_rule_name: "ConfigRuleName",
|
918
|
-
# config_rule_arn: "StringWithCharLimit256",
|
919
|
-
# config_rule_id: "StringWithCharLimit64",
|
920
|
-
# description: "EmptiableStringWithCharLimit256",
|
921
|
-
# scope: {
|
922
|
-
# compliance_resource_types: ["StringWithCharLimit256"],
|
923
|
-
# tag_key: "StringWithCharLimit128",
|
924
|
-
# tag_value: "StringWithCharLimit256",
|
925
|
-
# compliance_resource_id: "BaseResourceId",
|
926
|
-
# },
|
927
|
-
# source: { # required
|
928
|
-
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
|
929
|
-
# source_identifier: "StringWithCharLimit256",
|
930
|
-
# source_details: [
|
931
|
-
# {
|
932
|
-
# event_source: "aws.config", # accepts aws.config
|
933
|
-
# message_type: "ConfigurationItemChangeNotification", # accepts ConfigurationItemChangeNotification, ConfigurationSnapshotDeliveryCompleted, ScheduledNotification, OversizedConfigurationItemChangeNotification
|
934
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
935
|
-
# },
|
936
|
-
# ],
|
937
|
-
# custom_policy_details: {
|
938
|
-
# policy_runtime: "PolicyRuntime", # required
|
939
|
-
# policy_text: "PolicyText", # required
|
940
|
-
# enable_debug_log_delivery: false,
|
941
|
-
# },
|
942
|
-
# },
|
943
|
-
# input_parameters: "StringWithCharLimit1024",
|
944
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
945
|
-
# config_rule_state: "ACTIVE", # accepts ACTIVE, DELETING, DELETING_RESULTS, EVALUATING
|
946
|
-
# created_by: "StringWithCharLimit256",
|
947
|
-
# evaluation_modes: [
|
948
|
-
# {
|
949
|
-
# mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
950
|
-
# },
|
951
|
-
# ],
|
952
|
-
# }
|
846
|
+
# [2]: https://docs.aws.amazon.com/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function
|
847
|
+
# [3]: https://github.com/aws-cloudformation/cloudformation-guard
|
848
|
+
# [4]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
|
953
849
|
#
|
954
850
|
# @!attribute [rw] config_rule_name
|
955
851
|
# The name that you assign to the Config rule. The name is required if
|
@@ -1068,16 +964,6 @@ module Aws::ConfigService
|
|
1068
964
|
# Filters the compliance results based on account ID, region, compliance
|
1069
965
|
# type, and rule name.
|
1070
966
|
#
|
1071
|
-
# @note When making an API call, you may pass ConfigRuleComplianceFilters
|
1072
|
-
# data as a hash:
|
1073
|
-
#
|
1074
|
-
# {
|
1075
|
-
# config_rule_name: "ConfigRuleName",
|
1076
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
1077
|
-
# account_id: "AccountId",
|
1078
|
-
# aws_region: "AwsRegion",
|
1079
|
-
# }
|
1080
|
-
#
|
1081
967
|
# @!attribute [rw] config_rule_name
|
1082
968
|
# The name of the Config rule.
|
1083
969
|
# @return [String]
|
@@ -1111,14 +997,6 @@ module Aws::ConfigService
|
|
1111
997
|
|
1112
998
|
# Filters the results based on the account IDs and regions.
|
1113
999
|
#
|
1114
|
-
# @note When making an API call, you may pass ConfigRuleComplianceSummaryFilters
|
1115
|
-
# data as a hash:
|
1116
|
-
#
|
1117
|
-
# {
|
1118
|
-
# account_id: "AccountId",
|
1119
|
-
# aws_region: "AwsRegion",
|
1120
|
-
# }
|
1121
|
-
#
|
1122
1000
|
# @!attribute [rw] account_id
|
1123
1001
|
# The 12-digit account ID of the source account.
|
1124
1002
|
# @return [String]
|
@@ -1281,13 +1159,6 @@ module Aws::ConfigService
|
|
1281
1159
|
# To update the `deliveryFrequency` with which Config delivers your
|
1282
1160
|
# configuration snapshots, use the `PutDeliveryChannel` action.
|
1283
1161
|
#
|
1284
|
-
# @note When making an API call, you may pass ConfigSnapshotDeliveryProperties
|
1285
|
-
# data as a hash:
|
1286
|
-
#
|
1287
|
-
# {
|
1288
|
-
# delivery_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
1289
|
-
# }
|
1290
|
-
#
|
1291
1162
|
# @!attribute [rw] delivery_frequency
|
1292
1163
|
# The frequency with which Config delivers configuration snapshots.
|
1293
1164
|
# @return [String]
|
@@ -1525,19 +1396,6 @@ module Aws::ConfigService
|
|
1525
1396
|
# An object that represents the recording of configuration changes of an
|
1526
1397
|
# Amazon Web Services resource.
|
1527
1398
|
#
|
1528
|
-
# @note When making an API call, you may pass ConfigurationRecorder
|
1529
|
-
# data as a hash:
|
1530
|
-
#
|
1531
|
-
# {
|
1532
|
-
# name: "RecorderName",
|
1533
|
-
# role_arn: "String",
|
1534
|
-
# recording_group: {
|
1535
|
-
# all_supported: false,
|
1536
|
-
# include_global_resource_types: false,
|
1537
|
-
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
1538
|
-
# },
|
1539
|
-
# }
|
1540
|
-
#
|
1541
1399
|
# @!attribute [rw] name
|
1542
1400
|
# The name of the recorder. By default, Config automatically assigns
|
1543
1401
|
# the name "default" when creating the configuration recorder. You
|
@@ -1572,6 +1430,11 @@ module Aws::ConfigService
|
|
1572
1430
|
|
1573
1431
|
# The current status of the configuration recorder.
|
1574
1432
|
#
|
1433
|
+
# <note markdown="1"> For a detailed status of recording events over time, add your Config
|
1434
|
+
# events to CloudWatch metrics and use CloudWatch metrics.
|
1435
|
+
#
|
1436
|
+
# </note>
|
1437
|
+
#
|
1575
1438
|
# @!attribute [rw] name
|
1576
1439
|
# The name of the configuration recorder.
|
1577
1440
|
# @return [String]
|
@@ -1589,19 +1452,20 @@ module Aws::ConfigService
|
|
1589
1452
|
# @return [Boolean]
|
1590
1453
|
#
|
1591
1454
|
# @!attribute [rw] last_status
|
1592
|
-
# The
|
1455
|
+
# The status of the latest recording event processed by the recorder.
|
1593
1456
|
# @return [String]
|
1594
1457
|
#
|
1595
1458
|
# @!attribute [rw] last_error_code
|
1596
|
-
# The error code
|
1459
|
+
# The latest error code from when the recorder last failed.
|
1597
1460
|
# @return [String]
|
1598
1461
|
#
|
1599
1462
|
# @!attribute [rw] last_error_message
|
1600
|
-
# The message
|
1463
|
+
# The latest error message from when the recorder last failed.
|
1601
1464
|
# @return [String]
|
1602
1465
|
#
|
1603
1466
|
# @!attribute [rw] last_status_change_time
|
1604
|
-
# The time
|
1467
|
+
# The time of the latest change in status of an recording event
|
1468
|
+
# processed by the recorder.
|
1605
1469
|
# @return [Time]
|
1606
1470
|
#
|
1607
1471
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConfigurationRecorderStatus AWS API Documentation
|
@@ -1622,14 +1486,6 @@ module Aws::ConfigService
|
|
1622
1486
|
# Filters the conformance pack by compliance types and Config rule
|
1623
1487
|
# names.
|
1624
1488
|
#
|
1625
|
-
# @note When making an API call, you may pass ConformancePackComplianceFilters
|
1626
|
-
# data as a hash:
|
1627
|
-
#
|
1628
|
-
# {
|
1629
|
-
# config_rule_names: ["StringWithCharLimit64"],
|
1630
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
1631
|
-
# }
|
1632
|
-
#
|
1633
1489
|
# @!attribute [rw] config_rule_names
|
1634
1490
|
# Filters the results by Config rule names.
|
1635
1491
|
# @return [Array<String>]
|
@@ -1686,13 +1542,6 @@ module Aws::ConfigService
|
|
1686
1542
|
# A list of filters to apply to the conformance pack compliance score
|
1687
1543
|
# result set.
|
1688
1544
|
#
|
1689
|
-
# @note When making an API call, you may pass ConformancePackComplianceScoresFilters
|
1690
|
-
# data as a hash:
|
1691
|
-
#
|
1692
|
-
# {
|
1693
|
-
# conformance_pack_names: ["ConformancePackName"], # required
|
1694
|
-
# }
|
1695
|
-
#
|
1696
1545
|
# @!attribute [rw] conformance_pack_names
|
1697
1546
|
# The names of the conformance packs whose compliance scores you want
|
1698
1547
|
# to include in the conformance pack compliance score result set. You
|
@@ -1716,8 +1565,7 @@ module Aws::ConfigService
|
|
1716
1565
|
# @return [String]
|
1717
1566
|
#
|
1718
1567
|
# @!attribute [rw] conformance_pack_compliance_status
|
1719
|
-
# The status of the conformance pack.
|
1720
|
-
# `COMPLIANT`, `NON_COMPLIANT` and `INSUFFICIENT_DATA`.
|
1568
|
+
# The status of the conformance pack.
|
1721
1569
|
# @return [String]
|
1722
1570
|
#
|
1723
1571
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConformancePackComplianceSummary AWS API Documentation
|
@@ -1800,16 +1648,6 @@ module Aws::ConfigService
|
|
1800
1648
|
# Filters a conformance pack by Config rule names, compliance types,
|
1801
1649
|
# Amazon Web Services resource types, and resource IDs.
|
1802
1650
|
#
|
1803
|
-
# @note When making an API call, you may pass ConformancePackEvaluationFilters
|
1804
|
-
# data as a hash:
|
1805
|
-
#
|
1806
|
-
# {
|
1807
|
-
# config_rule_names: ["StringWithCharLimit64"],
|
1808
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
1809
|
-
# resource_type: "StringWithCharLimit256",
|
1810
|
-
# resource_ids: ["StringWithCharLimit256"],
|
1811
|
-
# }
|
1812
|
-
#
|
1813
1651
|
# @!attribute [rw] config_rule_names
|
1814
1652
|
# Filters the results by Config rule names.
|
1815
1653
|
# @return [Array<String>]
|
@@ -1890,14 +1728,6 @@ module Aws::ConfigService
|
|
1890
1728
|
# length of 255 characters, and values can have a maximum length of 4096
|
1891
1729
|
# characters.
|
1892
1730
|
#
|
1893
|
-
# @note When making an API call, you may pass ConformancePackInputParameter
|
1894
|
-
# data as a hash:
|
1895
|
-
#
|
1896
|
-
# {
|
1897
|
-
# parameter_name: "ParameterName", # required
|
1898
|
-
# parameter_value: "ParameterValue", # required
|
1899
|
-
# }
|
1900
|
-
#
|
1901
1731
|
# @!attribute [rw] parameter_name
|
1902
1732
|
# One part of a key-value pair.
|
1903
1733
|
# @return [String]
|
@@ -1925,9 +1755,6 @@ module Aws::ConfigService
|
|
1925
1755
|
#
|
1926
1756
|
# @!attribute [rw] compliance_type
|
1927
1757
|
# Compliance of the Config rule.
|
1928
|
-
#
|
1929
|
-
# The allowed values are `COMPLIANT`, `NON_COMPLIANT`, and
|
1930
|
-
# `INSUFFICIENT_DATA`.
|
1931
1758
|
# @return [String]
|
1932
1759
|
#
|
1933
1760
|
# @!attribute [rw] controls
|
@@ -2013,7 +1840,7 @@ module Aws::ConfigService
|
|
2013
1840
|
include Aws::Structure
|
2014
1841
|
end
|
2015
1842
|
|
2016
|
-
# You have specified a template that is
|
1843
|
+
# You have specified a template that is not valid or supported.
|
2017
1844
|
#
|
2018
1845
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConformancePackTemplateValidationException AWS API Documentation
|
2019
1846
|
#
|
@@ -2023,15 +1850,6 @@ module Aws::ConfigService
|
|
2023
1850
|
# logging enabled. You can specify the following CustomPolicyDetails
|
2024
1851
|
# parameter values only for Config Custom Policy rules.
|
2025
1852
|
#
|
2026
|
-
# @note When making an API call, you may pass CustomPolicyDetails
|
2027
|
-
# data as a hash:
|
2028
|
-
#
|
2029
|
-
# {
|
2030
|
-
# policy_runtime: "PolicyRuntime", # required
|
2031
|
-
# policy_text: "PolicyText", # required
|
2032
|
-
# enable_debug_log_delivery: false,
|
2033
|
-
# }
|
2034
|
-
#
|
2035
1853
|
# @!attribute [rw] policy_runtime
|
2036
1854
|
# The runtime system for your Config Custom Policy rule. Guard is a
|
2037
1855
|
# policy-as-code language that allows you to write policies that are
|
@@ -2063,14 +1881,6 @@ module Aws::ConfigService
|
|
2063
1881
|
include Aws::Structure
|
2064
1882
|
end
|
2065
1883
|
|
2066
|
-
# @note When making an API call, you may pass DeleteAggregationAuthorizationRequest
|
2067
|
-
# data as a hash:
|
2068
|
-
#
|
2069
|
-
# {
|
2070
|
-
# authorized_account_id: "AccountId", # required
|
2071
|
-
# authorized_aws_region: "AwsRegion", # required
|
2072
|
-
# }
|
2073
|
-
#
|
2074
1884
|
# @!attribute [rw] authorized_account_id
|
2075
1885
|
# The 12-digit account ID of the account authorized to aggregate data.
|
2076
1886
|
# @return [String]
|
@@ -2088,13 +1898,6 @@ module Aws::ConfigService
|
|
2088
1898
|
include Aws::Structure
|
2089
1899
|
end
|
2090
1900
|
|
2091
|
-
# @note When making an API call, you may pass DeleteConfigRuleRequest
|
2092
|
-
# data as a hash:
|
2093
|
-
#
|
2094
|
-
# {
|
2095
|
-
# config_rule_name: "ConfigRuleName", # required
|
2096
|
-
# }
|
2097
|
-
#
|
2098
1901
|
# @!attribute [rw] config_rule_name
|
2099
1902
|
# The name of the Config rule that you want to delete.
|
2100
1903
|
# @return [String]
|
@@ -2107,13 +1910,6 @@ module Aws::ConfigService
|
|
2107
1910
|
include Aws::Structure
|
2108
1911
|
end
|
2109
1912
|
|
2110
|
-
# @note When making an API call, you may pass DeleteConfigurationAggregatorRequest
|
2111
|
-
# data as a hash:
|
2112
|
-
#
|
2113
|
-
# {
|
2114
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
2115
|
-
# }
|
2116
|
-
#
|
2117
1913
|
# @!attribute [rw] configuration_aggregator_name
|
2118
1914
|
# The name of the configuration aggregator.
|
2119
1915
|
# @return [String]
|
@@ -2128,13 +1924,6 @@ module Aws::ConfigService
|
|
2128
1924
|
|
2129
1925
|
# The request object for the `DeleteConfigurationRecorder` action.
|
2130
1926
|
#
|
2131
|
-
# @note When making an API call, you may pass DeleteConfigurationRecorderRequest
|
2132
|
-
# data as a hash:
|
2133
|
-
#
|
2134
|
-
# {
|
2135
|
-
# configuration_recorder_name: "RecorderName", # required
|
2136
|
-
# }
|
2137
|
-
#
|
2138
1927
|
# @!attribute [rw] configuration_recorder_name
|
2139
1928
|
# The name of the configuration recorder to be deleted. You can
|
2140
1929
|
# retrieve the name of your configuration recorder by using the
|
@@ -2149,13 +1938,6 @@ module Aws::ConfigService
|
|
2149
1938
|
include Aws::Structure
|
2150
1939
|
end
|
2151
1940
|
|
2152
|
-
# @note When making an API call, you may pass DeleteConformancePackRequest
|
2153
|
-
# data as a hash:
|
2154
|
-
#
|
2155
|
-
# {
|
2156
|
-
# conformance_pack_name: "ConformancePackName", # required
|
2157
|
-
# }
|
2158
|
-
#
|
2159
1941
|
# @!attribute [rw] conformance_pack_name
|
2160
1942
|
# Name of the conformance pack you want to delete.
|
2161
1943
|
# @return [String]
|
@@ -2171,13 +1953,6 @@ module Aws::ConfigService
|
|
2171
1953
|
# The input for the DeleteDeliveryChannel action. The action accepts the
|
2172
1954
|
# following data, in JSON format.
|
2173
1955
|
#
|
2174
|
-
# @note When making an API call, you may pass DeleteDeliveryChannelRequest
|
2175
|
-
# data as a hash:
|
2176
|
-
#
|
2177
|
-
# {
|
2178
|
-
# delivery_channel_name: "ChannelName", # required
|
2179
|
-
# }
|
2180
|
-
#
|
2181
1956
|
# @!attribute [rw] delivery_channel_name
|
2182
1957
|
# The name of the delivery channel to delete.
|
2183
1958
|
# @return [String]
|
@@ -2190,13 +1965,6 @@ module Aws::ConfigService
|
|
2190
1965
|
include Aws::Structure
|
2191
1966
|
end
|
2192
1967
|
|
2193
|
-
# @note When making an API call, you may pass DeleteEvaluationResultsRequest
|
2194
|
-
# data as a hash:
|
2195
|
-
#
|
2196
|
-
# {
|
2197
|
-
# config_rule_name: "StringWithCharLimit64", # required
|
2198
|
-
# }
|
2199
|
-
#
|
2200
1968
|
# @!attribute [rw] config_rule_name
|
2201
1969
|
# The name of the Config rule for which you want to delete the
|
2202
1970
|
# evaluation results.
|
@@ -2217,13 +1985,6 @@ module Aws::ConfigService
|
|
2217
1985
|
#
|
2218
1986
|
class DeleteEvaluationResultsResponse < Aws::EmptyStructure; end
|
2219
1987
|
|
2220
|
-
# @note When making an API call, you may pass DeleteOrganizationConfigRuleRequest
|
2221
|
-
# data as a hash:
|
2222
|
-
#
|
2223
|
-
# {
|
2224
|
-
# organization_config_rule_name: "OrganizationConfigRuleName", # required
|
2225
|
-
# }
|
2226
|
-
#
|
2227
1988
|
# @!attribute [rw] organization_config_rule_name
|
2228
1989
|
# The name of organization Config rule that you want to delete.
|
2229
1990
|
# @return [String]
|
@@ -2236,13 +1997,6 @@ module Aws::ConfigService
|
|
2236
1997
|
include Aws::Structure
|
2237
1998
|
end
|
2238
1999
|
|
2239
|
-
# @note When making an API call, you may pass DeleteOrganizationConformancePackRequest
|
2240
|
-
# data as a hash:
|
2241
|
-
#
|
2242
|
-
# {
|
2243
|
-
# organization_conformance_pack_name: "OrganizationConformancePackName", # required
|
2244
|
-
# }
|
2245
|
-
#
|
2246
2000
|
# @!attribute [rw] organization_conformance_pack_name
|
2247
2001
|
# The name of organization conformance pack that you want to delete.
|
2248
2002
|
# @return [String]
|
@@ -2255,14 +2009,6 @@ module Aws::ConfigService
|
|
2255
2009
|
include Aws::Structure
|
2256
2010
|
end
|
2257
2011
|
|
2258
|
-
# @note When making an API call, you may pass DeletePendingAggregationRequestRequest
|
2259
|
-
# data as a hash:
|
2260
|
-
#
|
2261
|
-
# {
|
2262
|
-
# requester_account_id: "AccountId", # required
|
2263
|
-
# requester_aws_region: "AwsRegion", # required
|
2264
|
-
# }
|
2265
|
-
#
|
2266
2012
|
# @!attribute [rw] requester_account_id
|
2267
2013
|
# The 12-digit account ID of the account requesting to aggregate data.
|
2268
2014
|
# @return [String]
|
@@ -2280,14 +2026,6 @@ module Aws::ConfigService
|
|
2280
2026
|
include Aws::Structure
|
2281
2027
|
end
|
2282
2028
|
|
2283
|
-
# @note When making an API call, you may pass DeleteRemediationConfigurationRequest
|
2284
|
-
# data as a hash:
|
2285
|
-
#
|
2286
|
-
# {
|
2287
|
-
# config_rule_name: "ConfigRuleName", # required
|
2288
|
-
# resource_type: "String",
|
2289
|
-
# }
|
2290
|
-
#
|
2291
2029
|
# @!attribute [rw] config_rule_name
|
2292
2030
|
# The name of the Config rule for which you want to delete remediation
|
2293
2031
|
# configuration.
|
@@ -2310,19 +2048,6 @@ module Aws::ConfigService
|
|
2310
2048
|
#
|
2311
2049
|
class DeleteRemediationConfigurationResponse < Aws::EmptyStructure; end
|
2312
2050
|
|
2313
|
-
# @note When making an API call, you may pass DeleteRemediationExceptionsRequest
|
2314
|
-
# data as a hash:
|
2315
|
-
#
|
2316
|
-
# {
|
2317
|
-
# config_rule_name: "ConfigRuleName", # required
|
2318
|
-
# resource_keys: [ # required
|
2319
|
-
# {
|
2320
|
-
# resource_type: "StringWithCharLimit256",
|
2321
|
-
# resource_id: "StringWithCharLimit1024",
|
2322
|
-
# },
|
2323
|
-
# ],
|
2324
|
-
# }
|
2325
|
-
#
|
2326
2051
|
# @!attribute [rw] config_rule_name
|
2327
2052
|
# The name of the Config rule for which you want to delete remediation
|
2328
2053
|
# exception configuration.
|
@@ -2357,14 +2082,6 @@ module Aws::ConfigService
|
|
2357
2082
|
include Aws::Structure
|
2358
2083
|
end
|
2359
2084
|
|
2360
|
-
# @note When making an API call, you may pass DeleteResourceConfigRequest
|
2361
|
-
# data as a hash:
|
2362
|
-
#
|
2363
|
-
# {
|
2364
|
-
# resource_type: "ResourceTypeString", # required
|
2365
|
-
# resource_id: "ResourceId", # required
|
2366
|
-
# }
|
2367
|
-
#
|
2368
2085
|
# @!attribute [rw] resource_type
|
2369
2086
|
# The type of the resource.
|
2370
2087
|
# @return [String]
|
@@ -2382,13 +2099,6 @@ module Aws::ConfigService
|
|
2382
2099
|
include Aws::Structure
|
2383
2100
|
end
|
2384
2101
|
|
2385
|
-
# @note When making an API call, you may pass DeleteRetentionConfigurationRequest
|
2386
|
-
# data as a hash:
|
2387
|
-
#
|
2388
|
-
# {
|
2389
|
-
# retention_configuration_name: "RetentionConfigurationName", # required
|
2390
|
-
# }
|
2391
|
-
#
|
2392
2102
|
# @!attribute [rw] retention_configuration_name
|
2393
2103
|
# The name of the retention configuration to delete.
|
2394
2104
|
# @return [String]
|
@@ -2401,13 +2111,6 @@ module Aws::ConfigService
|
|
2401
2111
|
include Aws::Structure
|
2402
2112
|
end
|
2403
2113
|
|
2404
|
-
# @note When making an API call, you may pass DeleteStoredQueryRequest
|
2405
|
-
# data as a hash:
|
2406
|
-
#
|
2407
|
-
# {
|
2408
|
-
# query_name: "QueryName", # required
|
2409
|
-
# }
|
2410
|
-
#
|
2411
2114
|
# @!attribute [rw] query_name
|
2412
2115
|
# The name of the query that you want to delete.
|
2413
2116
|
# @return [String]
|
@@ -2426,13 +2129,6 @@ module Aws::ConfigService
|
|
2426
2129
|
|
2427
2130
|
# The input for the DeliverConfigSnapshot action.
|
2428
2131
|
#
|
2429
|
-
# @note When making an API call, you may pass DeliverConfigSnapshotRequest
|
2430
|
-
# data as a hash:
|
2431
|
-
#
|
2432
|
-
# {
|
2433
|
-
# delivery_channel_name: "ChannelName", # required
|
2434
|
-
# }
|
2435
|
-
#
|
2436
2132
|
# @!attribute [rw] delivery_channel_name
|
2437
2133
|
# The name of the delivery channel through which the snapshot is
|
2438
2134
|
# delivered.
|
@@ -2463,20 +2159,6 @@ module Aws::ConfigService
|
|
2463
2159
|
# The channel through which Config delivers notifications and updated
|
2464
2160
|
# configuration states.
|
2465
2161
|
#
|
2466
|
-
# @note When making an API call, you may pass DeliveryChannel
|
2467
|
-
# data as a hash:
|
2468
|
-
#
|
2469
|
-
# {
|
2470
|
-
# name: "ChannelName",
|
2471
|
-
# s3_bucket_name: "String",
|
2472
|
-
# s3_key_prefix: "String",
|
2473
|
-
# s3_kms_key_arn: "String",
|
2474
|
-
# sns_topic_arn: "String",
|
2475
|
-
# config_snapshot_delivery_properties: {
|
2476
|
-
# delivery_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
2477
|
-
# },
|
2478
|
-
# }
|
2479
|
-
#
|
2480
2162
|
# @!attribute [rw] name
|
2481
2163
|
# The name of the delivery channel. By default, Config assigns the
|
2482
2164
|
# name "default" when creating the delivery channel. To change the
|
@@ -2576,21 +2258,6 @@ module Aws::ConfigService
|
|
2576
2258
|
include Aws::Structure
|
2577
2259
|
end
|
2578
2260
|
|
2579
|
-
# @note When making an API call, you may pass DescribeAggregateComplianceByConfigRulesRequest
|
2580
|
-
# data as a hash:
|
2581
|
-
#
|
2582
|
-
# {
|
2583
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
2584
|
-
# filters: {
|
2585
|
-
# config_rule_name: "ConfigRuleName",
|
2586
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
2587
|
-
# account_id: "AccountId",
|
2588
|
-
# aws_region: "AwsRegion",
|
2589
|
-
# },
|
2590
|
-
# limit: 1,
|
2591
|
-
# next_token: "NextToken",
|
2592
|
-
# }
|
2593
|
-
#
|
2594
2261
|
# @!attribute [rw] configuration_aggregator_name
|
2595
2262
|
# The name of the configuration aggregator.
|
2596
2263
|
# @return [String]
|
@@ -2638,21 +2305,6 @@ module Aws::ConfigService
|
|
2638
2305
|
include Aws::Structure
|
2639
2306
|
end
|
2640
2307
|
|
2641
|
-
# @note When making an API call, you may pass DescribeAggregateComplianceByConformancePacksRequest
|
2642
|
-
# data as a hash:
|
2643
|
-
#
|
2644
|
-
# {
|
2645
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
2646
|
-
# filters: {
|
2647
|
-
# conformance_pack_name: "ConformancePackName",
|
2648
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
2649
|
-
# account_id: "AccountId",
|
2650
|
-
# aws_region: "AwsRegion",
|
2651
|
-
# },
|
2652
|
-
# limit: 1,
|
2653
|
-
# next_token: "NextToken",
|
2654
|
-
# }
|
2655
|
-
#
|
2656
2308
|
# @!attribute [rw] configuration_aggregator_name
|
2657
2309
|
# The name of the configuration aggregator.
|
2658
2310
|
# @return [String]
|
@@ -2702,14 +2354,6 @@ module Aws::ConfigService
|
|
2702
2354
|
include Aws::Structure
|
2703
2355
|
end
|
2704
2356
|
|
2705
|
-
# @note When making an API call, you may pass DescribeAggregationAuthorizationsRequest
|
2706
|
-
# data as a hash:
|
2707
|
-
#
|
2708
|
-
# {
|
2709
|
-
# limit: 1,
|
2710
|
-
# next_token: "String",
|
2711
|
-
# }
|
2712
|
-
#
|
2713
2357
|
# @!attribute [rw] limit
|
2714
2358
|
# The maximum number of AggregationAuthorizations returned on each
|
2715
2359
|
# page. The default is maximum. If you specify 0, Config uses the
|
@@ -2749,23 +2393,12 @@ module Aws::ConfigService
|
|
2749
2393
|
include Aws::Structure
|
2750
2394
|
end
|
2751
2395
|
|
2752
|
-
# @note When making an API call, you may pass DescribeComplianceByConfigRuleRequest
|
2753
|
-
# data as a hash:
|
2754
|
-
#
|
2755
|
-
# {
|
2756
|
-
# config_rule_names: ["ConfigRuleName"],
|
2757
|
-
# compliance_types: ["COMPLIANT"], # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
2758
|
-
# next_token: "String",
|
2759
|
-
# }
|
2760
|
-
#
|
2761
2396
|
# @!attribute [rw] config_rule_names
|
2762
2397
|
# Specify one or more Config rule names to filter the results by rule.
|
2763
2398
|
# @return [Array<String>]
|
2764
2399
|
#
|
2765
2400
|
# @!attribute [rw] compliance_types
|
2766
2401
|
# Filters the results by compliance.
|
2767
|
-
#
|
2768
|
-
# The allowed values are `COMPLIANT` and `NON_COMPLIANT`.
|
2769
2402
|
# @return [Array<String>]
|
2770
2403
|
#
|
2771
2404
|
# @!attribute [rw] next_token
|
@@ -2801,17 +2434,6 @@ module Aws::ConfigService
|
|
2801
2434
|
include Aws::Structure
|
2802
2435
|
end
|
2803
2436
|
|
2804
|
-
# @note When making an API call, you may pass DescribeComplianceByResourceRequest
|
2805
|
-
# data as a hash:
|
2806
|
-
#
|
2807
|
-
# {
|
2808
|
-
# resource_type: "StringWithCharLimit256",
|
2809
|
-
# resource_id: "BaseResourceId",
|
2810
|
-
# compliance_types: ["COMPLIANT"], # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
2811
|
-
# limit: 1,
|
2812
|
-
# next_token: "NextToken",
|
2813
|
-
# }
|
2814
|
-
#
|
2815
2437
|
# @!attribute [rw] resource_type
|
2816
2438
|
# The types of Amazon Web Services resources for which you want
|
2817
2439
|
# compliance information (for example, `AWS::EC2::Instance`). For this
|
@@ -2828,9 +2450,6 @@ module Aws::ConfigService
|
|
2828
2450
|
#
|
2829
2451
|
# @!attribute [rw] compliance_types
|
2830
2452
|
# Filters the results by compliance.
|
2831
|
-
#
|
2832
|
-
# The allowed values are `COMPLIANT`, `NON_COMPLIANT`, and
|
2833
|
-
# `INSUFFICIENT_DATA`.
|
2834
2453
|
# @return [Array<String>]
|
2835
2454
|
#
|
2836
2455
|
# @!attribute [rw] limit
|
@@ -2875,15 +2494,6 @@ module Aws::ConfigService
|
|
2875
2494
|
include Aws::Structure
|
2876
2495
|
end
|
2877
2496
|
|
2878
|
-
# @note When making an API call, you may pass DescribeConfigRuleEvaluationStatusRequest
|
2879
|
-
# data as a hash:
|
2880
|
-
#
|
2881
|
-
# {
|
2882
|
-
# config_rule_names: ["ConfigRuleName"],
|
2883
|
-
# next_token: "String",
|
2884
|
-
# limit: 1,
|
2885
|
-
# }
|
2886
|
-
#
|
2887
2497
|
# @!attribute [rw] config_rule_names
|
2888
2498
|
# The name of the Config managed rules for which you want status
|
2889
2499
|
# information. If you do not specify any names, Config returns status
|
@@ -2939,14 +2549,12 @@ module Aws::ConfigService
|
|
2939
2549
|
|
2940
2550
|
# Returns a filtered list of Detective or Proactive Config rules. By
|
2941
2551
|
# default, if the filter is not defined, this API returns an unfiltered
|
2942
|
-
# list.
|
2552
|
+
# list. For more information on Detective or Proactive Config rules, see
|
2553
|
+
# [ **Evaluation Mode** ][1] in the Config Developer Guide.
|
2943
2554
|
#
|
2944
|
-
# @note When making an API call, you may pass DescribeConfigRulesFilters
|
2945
|
-
# data as a hash:
|
2946
2555
|
#
|
2947
|
-
#
|
2948
|
-
#
|
2949
|
-
# }
|
2556
|
+
#
|
2557
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html
|
2950
2558
|
#
|
2951
2559
|
# @!attribute [rw] evaluation_mode
|
2952
2560
|
# The mode of an evaluation. The valid values are Detective or
|
@@ -2961,17 +2569,6 @@ module Aws::ConfigService
|
|
2961
2569
|
include Aws::Structure
|
2962
2570
|
end
|
2963
2571
|
|
2964
|
-
# @note When making an API call, you may pass DescribeConfigRulesRequest
|
2965
|
-
# data as a hash:
|
2966
|
-
#
|
2967
|
-
# {
|
2968
|
-
# config_rule_names: ["ConfigRuleName"],
|
2969
|
-
# next_token: "String",
|
2970
|
-
# filters: {
|
2971
|
-
# evaluation_mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
2972
|
-
# },
|
2973
|
-
# }
|
2974
|
-
#
|
2975
2572
|
# @!attribute [rw] config_rule_names
|
2976
2573
|
# The names of the Config rules for which you want details. If you do
|
2977
2574
|
# not specify any names, Config returns details for all your rules.
|
@@ -2983,8 +2580,14 @@ module Aws::ConfigService
|
|
2983
2580
|
# @return [String]
|
2984
2581
|
#
|
2985
2582
|
# @!attribute [rw] filters
|
2986
|
-
# Returns a list of
|
2987
|
-
# this API returns an unfiltered list.
|
2583
|
+
# Returns a list of Detective or Proactive Config rules. By default,
|
2584
|
+
# this API returns an unfiltered list. For more information on
|
2585
|
+
# Detective or Proactive Config rules, see [ **Evaluation Mode** ][1]
|
2586
|
+
# in the Config Developer Guide.
|
2587
|
+
#
|
2588
|
+
#
|
2589
|
+
#
|
2590
|
+
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html
|
2988
2591
|
# @return [Types::DescribeConfigRulesFilters]
|
2989
2592
|
#
|
2990
2593
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/DescribeConfigRulesRequest AWS API Documentation
|
@@ -3015,16 +2618,6 @@ module Aws::ConfigService
|
|
3015
2618
|
include Aws::Structure
|
3016
2619
|
end
|
3017
2620
|
|
3018
|
-
# @note When making an API call, you may pass DescribeConfigurationAggregatorSourcesStatusRequest
|
3019
|
-
# data as a hash:
|
3020
|
-
#
|
3021
|
-
# {
|
3022
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
3023
|
-
# update_status: ["FAILED"], # accepts FAILED, SUCCEEDED, OUTDATED
|
3024
|
-
# next_token: "String",
|
3025
|
-
# limit: 1,
|
3026
|
-
# }
|
3027
|
-
#
|
3028
2621
|
# @!attribute [rw] configuration_aggregator_name
|
3029
2622
|
# The name of the configuration aggregator.
|
3030
2623
|
# @return [String]
|
@@ -3078,15 +2671,6 @@ module Aws::ConfigService
|
|
3078
2671
|
include Aws::Structure
|
3079
2672
|
end
|
3080
2673
|
|
3081
|
-
# @note When making an API call, you may pass DescribeConfigurationAggregatorsRequest
|
3082
|
-
# data as a hash:
|
3083
|
-
#
|
3084
|
-
# {
|
3085
|
-
# configuration_aggregator_names: ["ConfigurationAggregatorName"],
|
3086
|
-
# next_token: "String",
|
3087
|
-
# limit: 1,
|
3088
|
-
# }
|
3089
|
-
#
|
3090
2674
|
# @!attribute [rw] configuration_aggregator_names
|
3091
2675
|
# The name of the configuration aggregators.
|
3092
2676
|
# @return [Array<String>]
|
@@ -3132,13 +2716,6 @@ module Aws::ConfigService
|
|
3132
2716
|
|
3133
2717
|
# The input for the DescribeConfigurationRecorderStatus action.
|
3134
2718
|
#
|
3135
|
-
# @note When making an API call, you may pass DescribeConfigurationRecorderStatusRequest
|
3136
|
-
# data as a hash:
|
3137
|
-
#
|
3138
|
-
# {
|
3139
|
-
# configuration_recorder_names: ["RecorderName"],
|
3140
|
-
# }
|
3141
|
-
#
|
3142
2719
|
# @!attribute [rw] configuration_recorder_names
|
3143
2720
|
# The name(s) of the configuration recorder. If the name is not
|
3144
2721
|
# specified, the action returns the current status of all the
|
@@ -3170,13 +2747,6 @@ module Aws::ConfigService
|
|
3170
2747
|
|
3171
2748
|
# The input for the DescribeConfigurationRecorders action.
|
3172
2749
|
#
|
3173
|
-
# @note When making an API call, you may pass DescribeConfigurationRecordersRequest
|
3174
|
-
# data as a hash:
|
3175
|
-
#
|
3176
|
-
# {
|
3177
|
-
# configuration_recorder_names: ["RecorderName"],
|
3178
|
-
# }
|
3179
|
-
#
|
3180
2750
|
# @!attribute [rw] configuration_recorder_names
|
3181
2751
|
# A list of configuration recorder names.
|
3182
2752
|
# @return [Array<String>]
|
@@ -3204,19 +2774,6 @@ module Aws::ConfigService
|
|
3204
2774
|
include Aws::Structure
|
3205
2775
|
end
|
3206
2776
|
|
3207
|
-
# @note When making an API call, you may pass DescribeConformancePackComplianceRequest
|
3208
|
-
# data as a hash:
|
3209
|
-
#
|
3210
|
-
# {
|
3211
|
-
# conformance_pack_name: "ConformancePackName", # required
|
3212
|
-
# filters: {
|
3213
|
-
# config_rule_names: ["StringWithCharLimit64"],
|
3214
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
3215
|
-
# },
|
3216
|
-
# limit: 1,
|
3217
|
-
# next_token: "NextToken",
|
3218
|
-
# }
|
3219
|
-
#
|
3220
2777
|
# @!attribute [rw] conformance_pack_name
|
3221
2778
|
# Name of the conformance pack.
|
3222
2779
|
# @return [String]
|
@@ -3269,15 +2826,6 @@ module Aws::ConfigService
|
|
3269
2826
|
include Aws::Structure
|
3270
2827
|
end
|
3271
2828
|
|
3272
|
-
# @note When making an API call, you may pass DescribeConformancePackStatusRequest
|
3273
|
-
# data as a hash:
|
3274
|
-
#
|
3275
|
-
# {
|
3276
|
-
# conformance_pack_names: ["ConformancePackName"],
|
3277
|
-
# limit: 1,
|
3278
|
-
# next_token: "NextToken",
|
3279
|
-
# }
|
3280
|
-
#
|
3281
2829
|
# @!attribute [rw] conformance_pack_names
|
3282
2830
|
# Comma-separated list of conformance pack names.
|
3283
2831
|
# @return [Array<String>]
|
@@ -3320,15 +2868,6 @@ module Aws::ConfigService
|
|
3320
2868
|
include Aws::Structure
|
3321
2869
|
end
|
3322
2870
|
|
3323
|
-
# @note When making an API call, you may pass DescribeConformancePacksRequest
|
3324
|
-
# data as a hash:
|
3325
|
-
#
|
3326
|
-
# {
|
3327
|
-
# conformance_pack_names: ["ConformancePackName"],
|
3328
|
-
# limit: 1,
|
3329
|
-
# next_token: "NextToken",
|
3330
|
-
# }
|
3331
|
-
#
|
3332
2871
|
# @!attribute [rw] conformance_pack_names
|
3333
2872
|
# Comma-separated list of conformance pack names for which you want
|
3334
2873
|
# details. If you do not specify any names, Config returns details for
|
@@ -3374,13 +2913,6 @@ module Aws::ConfigService
|
|
3374
2913
|
|
3375
2914
|
# The input for the DeliveryChannelStatus action.
|
3376
2915
|
#
|
3377
|
-
# @note When making an API call, you may pass DescribeDeliveryChannelStatusRequest
|
3378
|
-
# data as a hash:
|
3379
|
-
#
|
3380
|
-
# {
|
3381
|
-
# delivery_channel_names: ["ChannelName"],
|
3382
|
-
# }
|
3383
|
-
#
|
3384
2916
|
# @!attribute [rw] delivery_channel_names
|
3385
2917
|
# A list of delivery channel names.
|
3386
2918
|
# @return [Array<String>]
|
@@ -3409,13 +2941,6 @@ module Aws::ConfigService
|
|
3409
2941
|
|
3410
2942
|
# The input for the DescribeDeliveryChannels action.
|
3411
2943
|
#
|
3412
|
-
# @note When making an API call, you may pass DescribeDeliveryChannelsRequest
|
3413
|
-
# data as a hash:
|
3414
|
-
#
|
3415
|
-
# {
|
3416
|
-
# delivery_channel_names: ["ChannelName"],
|
3417
|
-
# }
|
3418
|
-
#
|
3419
2944
|
# @!attribute [rw] delivery_channel_names
|
3420
2945
|
# A list of delivery channel names.
|
3421
2946
|
# @return [Array<String>]
|
@@ -3443,15 +2968,6 @@ module Aws::ConfigService
|
|
3443
2968
|
include Aws::Structure
|
3444
2969
|
end
|
3445
2970
|
|
3446
|
-
# @note When making an API call, you may pass DescribeOrganizationConfigRuleStatusesRequest
|
3447
|
-
# data as a hash:
|
3448
|
-
#
|
3449
|
-
# {
|
3450
|
-
# organization_config_rule_names: ["StringWithCharLimit64"],
|
3451
|
-
# limit: 1,
|
3452
|
-
# next_token: "String",
|
3453
|
-
# }
|
3454
|
-
#
|
3455
2971
|
# @!attribute [rw] organization_config_rule_names
|
3456
2972
|
# The names of organization Config rules for which you want status
|
3457
2973
|
# details. If you do not specify any names, Config returns details for
|
@@ -3497,15 +3013,6 @@ module Aws::ConfigService
|
|
3497
3013
|
include Aws::Structure
|
3498
3014
|
end
|
3499
3015
|
|
3500
|
-
# @note When making an API call, you may pass DescribeOrganizationConfigRulesRequest
|
3501
|
-
# data as a hash:
|
3502
|
-
#
|
3503
|
-
# {
|
3504
|
-
# organization_config_rule_names: ["StringWithCharLimit64"],
|
3505
|
-
# limit: 1,
|
3506
|
-
# next_token: "String",
|
3507
|
-
# }
|
3508
|
-
#
|
3509
3016
|
# @!attribute [rw] organization_config_rule_names
|
3510
3017
|
# The names of organization Config rules for which you want details.
|
3511
3018
|
# If you do not specify any names, Config returns details for all your
|
@@ -3551,15 +3058,6 @@ module Aws::ConfigService
|
|
3551
3058
|
include Aws::Structure
|
3552
3059
|
end
|
3553
3060
|
|
3554
|
-
# @note When making an API call, you may pass DescribeOrganizationConformancePackStatusesRequest
|
3555
|
-
# data as a hash:
|
3556
|
-
#
|
3557
|
-
# {
|
3558
|
-
# organization_conformance_pack_names: ["OrganizationConformancePackName"],
|
3559
|
-
# limit: 1,
|
3560
|
-
# next_token: "String",
|
3561
|
-
# }
|
3562
|
-
#
|
3563
3061
|
# @!attribute [rw] organization_conformance_pack_names
|
3564
3062
|
# The names of organization conformance packs for which you want
|
3565
3063
|
# status details. If you do not specify any names, Config returns
|
@@ -3605,15 +3103,6 @@ module Aws::ConfigService
|
|
3605
3103
|
include Aws::Structure
|
3606
3104
|
end
|
3607
3105
|
|
3608
|
-
# @note When making an API call, you may pass DescribeOrganizationConformancePacksRequest
|
3609
|
-
# data as a hash:
|
3610
|
-
#
|
3611
|
-
# {
|
3612
|
-
# organization_conformance_pack_names: ["OrganizationConformancePackName"],
|
3613
|
-
# limit: 1,
|
3614
|
-
# next_token: "String",
|
3615
|
-
# }
|
3616
|
-
#
|
3617
3106
|
# @!attribute [rw] organization_conformance_pack_names
|
3618
3107
|
# The name that you assign to an organization conformance pack.
|
3619
3108
|
# @return [Array<String>]
|
@@ -3657,14 +3146,6 @@ module Aws::ConfigService
|
|
3657
3146
|
include Aws::Structure
|
3658
3147
|
end
|
3659
3148
|
|
3660
|
-
# @note When making an API call, you may pass DescribePendingAggregationRequestsRequest
|
3661
|
-
# data as a hash:
|
3662
|
-
#
|
3663
|
-
# {
|
3664
|
-
# limit: 1,
|
3665
|
-
# next_token: "String",
|
3666
|
-
# }
|
3667
|
-
#
|
3668
3149
|
# @!attribute [rw] limit
|
3669
3150
|
# The maximum number of evaluation results returned on each page. The
|
3670
3151
|
# default is maximum. If you specify 0, Config uses the default.
|
@@ -3702,13 +3183,6 @@ module Aws::ConfigService
|
|
3702
3183
|
include Aws::Structure
|
3703
3184
|
end
|
3704
3185
|
|
3705
|
-
# @note When making an API call, you may pass DescribeRemediationConfigurationsRequest
|
3706
|
-
# data as a hash:
|
3707
|
-
#
|
3708
|
-
# {
|
3709
|
-
# config_rule_names: ["ConfigRuleName"], # required
|
3710
|
-
# }
|
3711
|
-
#
|
3712
3186
|
# @!attribute [rw] config_rule_names
|
3713
3187
|
# A list of Config rule names of remediation configurations for which
|
3714
3188
|
# you want details.
|
@@ -3734,21 +3208,6 @@ module Aws::ConfigService
|
|
3734
3208
|
include Aws::Structure
|
3735
3209
|
end
|
3736
3210
|
|
3737
|
-
# @note When making an API call, you may pass DescribeRemediationExceptionsRequest
|
3738
|
-
# data as a hash:
|
3739
|
-
#
|
3740
|
-
# {
|
3741
|
-
# config_rule_name: "ConfigRuleName", # required
|
3742
|
-
# resource_keys: [
|
3743
|
-
# {
|
3744
|
-
# resource_type: "StringWithCharLimit256",
|
3745
|
-
# resource_id: "StringWithCharLimit1024",
|
3746
|
-
# },
|
3747
|
-
# ],
|
3748
|
-
# limit: 1,
|
3749
|
-
# next_token: "String",
|
3750
|
-
# }
|
3751
|
-
#
|
3752
3211
|
# @!attribute [rw] config_rule_name
|
3753
3212
|
# The name of the Config rule.
|
3754
3213
|
# @return [String]
|
@@ -3799,21 +3258,6 @@ module Aws::ConfigService
|
|
3799
3258
|
include Aws::Structure
|
3800
3259
|
end
|
3801
3260
|
|
3802
|
-
# @note When making an API call, you may pass DescribeRemediationExecutionStatusRequest
|
3803
|
-
# data as a hash:
|
3804
|
-
#
|
3805
|
-
# {
|
3806
|
-
# config_rule_name: "ConfigRuleName", # required
|
3807
|
-
# resource_keys: [
|
3808
|
-
# {
|
3809
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
3810
|
-
# resource_id: "ResourceId", # required
|
3811
|
-
# },
|
3812
|
-
# ],
|
3813
|
-
# limit: 1,
|
3814
|
-
# next_token: "String",
|
3815
|
-
# }
|
3816
|
-
#
|
3817
3261
|
# @!attribute [rw] config_rule_name
|
3818
3262
|
# A list of Config rule names.
|
3819
3263
|
# @return [String]
|
@@ -3864,14 +3308,6 @@ module Aws::ConfigService
|
|
3864
3308
|
include Aws::Structure
|
3865
3309
|
end
|
3866
3310
|
|
3867
|
-
# @note When making an API call, you may pass DescribeRetentionConfigurationsRequest
|
3868
|
-
# data as a hash:
|
3869
|
-
#
|
3870
|
-
# {
|
3871
|
-
# retention_configuration_names: ["RetentionConfigurationName"],
|
3872
|
-
# next_token: "NextToken",
|
3873
|
-
# }
|
3874
|
-
#
|
3875
3311
|
# @!attribute [rw] retention_configuration_names
|
3876
3312
|
# A list of names of retention configurations for which you want
|
3877
3313
|
# details. If you do not specify a name, Config returns details for
|
@@ -3918,17 +3354,6 @@ module Aws::ConfigService
|
|
3918
3354
|
# Identifies an Amazon Web Services resource and indicates whether it
|
3919
3355
|
# complies with the Config rule that it was evaluated against.
|
3920
3356
|
#
|
3921
|
-
# @note When making an API call, you may pass Evaluation
|
3922
|
-
# data as a hash:
|
3923
|
-
#
|
3924
|
-
# {
|
3925
|
-
# compliance_resource_type: "StringWithCharLimit256", # required
|
3926
|
-
# compliance_resource_id: "BaseResourceId", # required
|
3927
|
-
# compliance_type: "COMPLIANT", # required, accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
3928
|
-
# annotation: "StringWithCharLimit256",
|
3929
|
-
# ordering_timestamp: Time.now, # required
|
3930
|
-
# }
|
3931
|
-
#
|
3932
3357
|
# @!attribute [rw] compliance_resource_type
|
3933
3358
|
# The type of Amazon Web Services resource that was evaluated.
|
3934
3359
|
# @return [String]
|
@@ -3981,13 +3406,6 @@ module Aws::ConfigService
|
|
3981
3406
|
# just a resource definition, you do not need to provide evaluation
|
3982
3407
|
# context.
|
3983
3408
|
#
|
3984
|
-
# @note When making an API call, you may pass EvaluationContext
|
3985
|
-
# data as a hash:
|
3986
|
-
#
|
3987
|
-
# {
|
3988
|
-
# evaluation_context_identifier: "EvaluationContextIdentifier",
|
3989
|
-
# }
|
3990
|
-
#
|
3991
3409
|
# @!attribute [rw] evaluation_context_identifier
|
3992
3410
|
# A unique EvaluationContextIdentifier ID for an EvaluationContext.
|
3993
3411
|
# @return [String]
|
@@ -4003,13 +3421,6 @@ module Aws::ConfigService
|
|
4003
3421
|
# The configuration object for Config rule evaluation mode. The
|
4004
3422
|
# Supported valid values are Detective or Proactive.
|
4005
3423
|
#
|
4006
|
-
# @note When making an API call, you may pass EvaluationModeConfiguration
|
4007
|
-
# data as a hash:
|
4008
|
-
#
|
4009
|
-
# {
|
4010
|
-
# mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
4011
|
-
# }
|
4012
|
-
#
|
4013
3424
|
# @!attribute [rw] mode
|
4014
3425
|
# The mode of an evaluation. The valid values are Detective or
|
4015
3426
|
# Proactive.
|
@@ -4158,16 +3569,6 @@ module Aws::ConfigService
|
|
4158
3569
|
|
4159
3570
|
# The controls that Config uses for executing remediations.
|
4160
3571
|
#
|
4161
|
-
# @note When making an API call, you may pass ExecutionControls
|
4162
|
-
# data as a hash:
|
4163
|
-
#
|
4164
|
-
# {
|
4165
|
-
# ssm_controls: {
|
4166
|
-
# concurrent_execution_rate_percentage: 1,
|
4167
|
-
# error_percentage: 1,
|
4168
|
-
# },
|
4169
|
-
# }
|
4170
|
-
#
|
4171
3572
|
# @!attribute [rw] ssm_controls
|
4172
3573
|
# A SsmControls object.
|
4173
3574
|
# @return [Types::SsmControls]
|
@@ -4183,17 +3584,6 @@ module Aws::ConfigService
|
|
4183
3584
|
# Identifies an Amazon Web Services resource and indicates whether it
|
4184
3585
|
# complies with the Config rule that it was evaluated against.
|
4185
3586
|
#
|
4186
|
-
# @note When making an API call, you may pass ExternalEvaluation
|
4187
|
-
# data as a hash:
|
4188
|
-
#
|
4189
|
-
# {
|
4190
|
-
# compliance_resource_type: "StringWithCharLimit256", # required
|
4191
|
-
# compliance_resource_id: "BaseResourceId", # required
|
4192
|
-
# compliance_type: "COMPLIANT", # required, accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
4193
|
-
# annotation: "StringWithCharLimit256",
|
4194
|
-
# ordering_timestamp: Time.now, # required
|
4195
|
-
# }
|
4196
|
-
#
|
4197
3587
|
# @!attribute [rw] compliance_resource_type
|
4198
3588
|
# The evaluated compliance resource type. Config accepts
|
4199
3589
|
# `AWS::::Account` resource type.
|
@@ -4308,19 +3698,6 @@ module Aws::ConfigService
|
|
4308
3698
|
include Aws::Structure
|
4309
3699
|
end
|
4310
3700
|
|
4311
|
-
# @note When making an API call, you may pass GetAggregateComplianceDetailsByConfigRuleRequest
|
4312
|
-
# data as a hash:
|
4313
|
-
#
|
4314
|
-
# {
|
4315
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
4316
|
-
# config_rule_name: "ConfigRuleName", # required
|
4317
|
-
# account_id: "AccountId", # required
|
4318
|
-
# aws_region: "AwsRegion", # required
|
4319
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
4320
|
-
# limit: 1,
|
4321
|
-
# next_token: "NextToken",
|
4322
|
-
# }
|
4323
|
-
#
|
4324
3701
|
# @!attribute [rw] configuration_aggregator_name
|
4325
3702
|
# The name of the configuration aggregator.
|
4326
3703
|
# @return [String]
|
@@ -4392,20 +3769,6 @@ module Aws::ConfigService
|
|
4392
3769
|
include Aws::Structure
|
4393
3770
|
end
|
4394
3771
|
|
4395
|
-
# @note When making an API call, you may pass GetAggregateConfigRuleComplianceSummaryRequest
|
4396
|
-
# data as a hash:
|
4397
|
-
#
|
4398
|
-
# {
|
4399
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
4400
|
-
# filters: {
|
4401
|
-
# account_id: "AccountId",
|
4402
|
-
# aws_region: "AwsRegion",
|
4403
|
-
# },
|
4404
|
-
# group_by_key: "ACCOUNT_ID", # accepts ACCOUNT_ID, AWS_REGION
|
4405
|
-
# limit: 1,
|
4406
|
-
# next_token: "NextToken",
|
4407
|
-
# }
|
4408
|
-
#
|
4409
3772
|
# @!attribute [rw] configuration_aggregator_name
|
4410
3773
|
# The name of the configuration aggregator.
|
4411
3774
|
# @return [String]
|
@@ -4465,20 +3828,6 @@ module Aws::ConfigService
|
|
4465
3828
|
include Aws::Structure
|
4466
3829
|
end
|
4467
3830
|
|
4468
|
-
# @note When making an API call, you may pass GetAggregateConformancePackComplianceSummaryRequest
|
4469
|
-
# data as a hash:
|
4470
|
-
#
|
4471
|
-
# {
|
4472
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
4473
|
-
# filters: {
|
4474
|
-
# account_id: "AccountId",
|
4475
|
-
# aws_region: "AwsRegion",
|
4476
|
-
# },
|
4477
|
-
# group_by_key: "ACCOUNT_ID", # accepts ACCOUNT_ID, AWS_REGION
|
4478
|
-
# limit: 1,
|
4479
|
-
# next_token: "NextToken",
|
4480
|
-
# }
|
4481
|
-
#
|
4482
3831
|
# @!attribute [rw] configuration_aggregator_name
|
4483
3832
|
# The name of the configuration aggregator.
|
4484
3833
|
# @return [String]
|
@@ -4540,21 +3889,6 @@ module Aws::ConfigService
|
|
4540
3889
|
include Aws::Structure
|
4541
3890
|
end
|
4542
3891
|
|
4543
|
-
# @note When making an API call, you may pass GetAggregateDiscoveredResourceCountsRequest
|
4544
|
-
# data as a hash:
|
4545
|
-
#
|
4546
|
-
# {
|
4547
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
4548
|
-
# filters: {
|
4549
|
-
# resource_type: "AWS::EC2::CustomerGateway", # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
4550
|
-
# account_id: "AccountId",
|
4551
|
-
# region: "AwsRegion",
|
4552
|
-
# },
|
4553
|
-
# group_by_key: "RESOURCE_TYPE", # accepts RESOURCE_TYPE, ACCOUNT_ID, AWS_REGION
|
4554
|
-
# limit: 1,
|
4555
|
-
# next_token: "NextToken",
|
4556
|
-
# }
|
4557
|
-
#
|
4558
3892
|
# @!attribute [rw] configuration_aggregator_name
|
4559
3893
|
# The name of the configuration aggregator.
|
4560
3894
|
# @return [String]
|
@@ -4620,20 +3954,6 @@ module Aws::ConfigService
|
|
4620
3954
|
include Aws::Structure
|
4621
3955
|
end
|
4622
3956
|
|
4623
|
-
# @note When making an API call, you may pass GetAggregateResourceConfigRequest
|
4624
|
-
# data as a hash:
|
4625
|
-
#
|
4626
|
-
# {
|
4627
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
4628
|
-
# resource_identifier: { # required
|
4629
|
-
# source_account_id: "AccountId", # required
|
4630
|
-
# source_region: "AwsRegion", # required
|
4631
|
-
# resource_id: "ResourceId", # required
|
4632
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
4633
|
-
# resource_name: "ResourceName",
|
4634
|
-
# },
|
4635
|
-
# }
|
4636
|
-
#
|
4637
3957
|
# @!attribute [rw] configuration_aggregator_name
|
4638
3958
|
# The name of the configuration aggregator.
|
4639
3959
|
# @return [String]
|
@@ -4663,16 +3983,6 @@ module Aws::ConfigService
|
|
4663
3983
|
include Aws::Structure
|
4664
3984
|
end
|
4665
3985
|
|
4666
|
-
# @note When making an API call, you may pass GetComplianceDetailsByConfigRuleRequest
|
4667
|
-
# data as a hash:
|
4668
|
-
#
|
4669
|
-
# {
|
4670
|
-
# config_rule_name: "StringWithCharLimit64", # required
|
4671
|
-
# compliance_types: ["COMPLIANT"], # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
4672
|
-
# limit: 1,
|
4673
|
-
# next_token: "NextToken",
|
4674
|
-
# }
|
4675
|
-
#
|
4676
3986
|
# @!attribute [rw] config_rule_name
|
4677
3987
|
# The name of the Config rule for which you want compliance
|
4678
3988
|
# information.
|
@@ -4681,8 +3991,10 @@ module Aws::ConfigService
|
|
4681
3991
|
# @!attribute [rw] compliance_types
|
4682
3992
|
# Filters the results by compliance.
|
4683
3993
|
#
|
4684
|
-
#
|
4685
|
-
#
|
3994
|
+
# `INSUFFICIENT_DATA` is a valid `ComplianceType` that is returned
|
3995
|
+
# when an Config rule cannot be evaluated. However,
|
3996
|
+
# `INSUFFICIENT_DATA` cannot be used as a `ComplianceType` for
|
3997
|
+
# filtering results.
|
4686
3998
|
# @return [Array<String>]
|
4687
3999
|
#
|
4688
4000
|
# @!attribute [rw] limit
|
@@ -4726,17 +4038,6 @@ module Aws::ConfigService
|
|
4726
4038
|
include Aws::Structure
|
4727
4039
|
end
|
4728
4040
|
|
4729
|
-
# @note When making an API call, you may pass GetComplianceDetailsByResourceRequest
|
4730
|
-
# data as a hash:
|
4731
|
-
#
|
4732
|
-
# {
|
4733
|
-
# resource_type: "StringWithCharLimit256",
|
4734
|
-
# resource_id: "BaseResourceId",
|
4735
|
-
# compliance_types: ["COMPLIANT"], # accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
4736
|
-
# next_token: "String",
|
4737
|
-
# resource_evaluation_id: "ResourceEvaluationId",
|
4738
|
-
# }
|
4739
|
-
#
|
4740
4041
|
# @!attribute [rw] resource_type
|
4741
4042
|
# The type of the Amazon Web Services resource for which you want
|
4742
4043
|
# compliance information.
|
@@ -4750,8 +4051,10 @@ module Aws::ConfigService
|
|
4750
4051
|
# @!attribute [rw] compliance_types
|
4751
4052
|
# Filters the results by compliance.
|
4752
4053
|
#
|
4753
|
-
#
|
4754
|
-
#
|
4054
|
+
# `INSUFFICIENT_DATA` is a valid `ComplianceType` that is returned
|
4055
|
+
# when an Config rule cannot be evaluated. However,
|
4056
|
+
# `INSUFFICIENT_DATA` cannot be used as a `ComplianceType` for
|
4057
|
+
# filtering results.
|
4755
4058
|
# @return [Array<String>]
|
4756
4059
|
#
|
4757
4060
|
# @!attribute [rw] next_token
|
@@ -4813,13 +4116,6 @@ module Aws::ConfigService
|
|
4813
4116
|
include Aws::Structure
|
4814
4117
|
end
|
4815
4118
|
|
4816
|
-
# @note When making an API call, you may pass GetComplianceSummaryByResourceTypeRequest
|
4817
|
-
# data as a hash:
|
4818
|
-
#
|
4819
|
-
# {
|
4820
|
-
# resource_types: ["StringWithCharLimit256"],
|
4821
|
-
# }
|
4822
|
-
#
|
4823
4119
|
# @!attribute [rw] resource_types
|
4824
4120
|
# Specify one or more resource types to get the number of resources
|
4825
4121
|
# that are compliant and the number that are noncompliant for each
|
@@ -4854,21 +4150,6 @@ module Aws::ConfigService
|
|
4854
4150
|
include Aws::Structure
|
4855
4151
|
end
|
4856
4152
|
|
4857
|
-
# @note When making an API call, you may pass GetConformancePackComplianceDetailsRequest
|
4858
|
-
# data as a hash:
|
4859
|
-
#
|
4860
|
-
# {
|
4861
|
-
# conformance_pack_name: "ConformancePackName", # required
|
4862
|
-
# filters: {
|
4863
|
-
# config_rule_names: ["StringWithCharLimit64"],
|
4864
|
-
# compliance_type: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT, INSUFFICIENT_DATA
|
4865
|
-
# resource_type: "StringWithCharLimit256",
|
4866
|
-
# resource_ids: ["StringWithCharLimit256"],
|
4867
|
-
# },
|
4868
|
-
# limit: 1,
|
4869
|
-
# next_token: "NextToken",
|
4870
|
-
# }
|
4871
|
-
#
|
4872
4153
|
# @!attribute [rw] conformance_pack_name
|
4873
4154
|
# Name of the conformance pack.
|
4874
4155
|
# @return [String]
|
@@ -4922,15 +4203,6 @@ module Aws::ConfigService
|
|
4922
4203
|
include Aws::Structure
|
4923
4204
|
end
|
4924
4205
|
|
4925
|
-
# @note When making an API call, you may pass GetConformancePackComplianceSummaryRequest
|
4926
|
-
# data as a hash:
|
4927
|
-
#
|
4928
|
-
# {
|
4929
|
-
# conformance_pack_names: ["ConformancePackName"], # required
|
4930
|
-
# limit: 1,
|
4931
|
-
# next_token: "NextToken",
|
4932
|
-
# }
|
4933
|
-
#
|
4934
4206
|
# @!attribute [rw] conformance_pack_names
|
4935
4207
|
# Names of conformance packs.
|
4936
4208
|
# @return [Array<String>]
|
@@ -4972,13 +4244,6 @@ module Aws::ConfigService
|
|
4972
4244
|
include Aws::Structure
|
4973
4245
|
end
|
4974
4246
|
|
4975
|
-
# @note When making an API call, you may pass GetCustomRulePolicyRequest
|
4976
|
-
# data as a hash:
|
4977
|
-
#
|
4978
|
-
# {
|
4979
|
-
# config_rule_name: "ConfigRuleName",
|
4980
|
-
# }
|
4981
|
-
#
|
4982
4247
|
# @!attribute [rw] config_rule_name
|
4983
4248
|
# The name of your Config Custom Policy rule.
|
4984
4249
|
# @return [String]
|
@@ -5004,15 +4269,6 @@ module Aws::ConfigService
|
|
5004
4269
|
include Aws::Structure
|
5005
4270
|
end
|
5006
4271
|
|
5007
|
-
# @note When making an API call, you may pass GetDiscoveredResourceCountsRequest
|
5008
|
-
# data as a hash:
|
5009
|
-
#
|
5010
|
-
# {
|
5011
|
-
# resource_types: ["StringWithCharLimit256"],
|
5012
|
-
# limit: 1,
|
5013
|
-
# next_token: "NextToken",
|
5014
|
-
# }
|
5015
|
-
#
|
5016
4272
|
# @!attribute [rw] resource_types
|
5017
4273
|
# The comma-separated list that specifies the resource types that you
|
5018
4274
|
# want Config to return (for example, `"AWS::EC2::Instance"`,
|
@@ -5090,19 +4346,6 @@ module Aws::ConfigService
|
|
5090
4346
|
include Aws::Structure
|
5091
4347
|
end
|
5092
4348
|
|
5093
|
-
# @note When making an API call, you may pass GetOrganizationConfigRuleDetailedStatusRequest
|
5094
|
-
# data as a hash:
|
5095
|
-
#
|
5096
|
-
# {
|
5097
|
-
# organization_config_rule_name: "OrganizationConfigRuleName", # required
|
5098
|
-
# filters: {
|
5099
|
-
# account_id: "AccountId",
|
5100
|
-
# member_account_rule_status: "CREATE_SUCCESSFUL", # accepts CREATE_SUCCESSFUL, CREATE_IN_PROGRESS, CREATE_FAILED, DELETE_SUCCESSFUL, DELETE_FAILED, DELETE_IN_PROGRESS, UPDATE_SUCCESSFUL, UPDATE_IN_PROGRESS, UPDATE_FAILED
|
5101
|
-
# },
|
5102
|
-
# limit: 1,
|
5103
|
-
# next_token: "String",
|
5104
|
-
# }
|
5105
|
-
#
|
5106
4349
|
# @!attribute [rw] organization_config_rule_name
|
5107
4350
|
# The name of your organization Config rule for which you want status
|
5108
4351
|
# details for member accounts.
|
@@ -5152,19 +4395,6 @@ module Aws::ConfigService
|
|
5152
4395
|
include Aws::Structure
|
5153
4396
|
end
|
5154
4397
|
|
5155
|
-
# @note When making an API call, you may pass GetOrganizationConformancePackDetailedStatusRequest
|
5156
|
-
# data as a hash:
|
5157
|
-
#
|
5158
|
-
# {
|
5159
|
-
# organization_conformance_pack_name: "OrganizationConformancePackName", # required
|
5160
|
-
# filters: {
|
5161
|
-
# account_id: "AccountId",
|
5162
|
-
# status: "CREATE_SUCCESSFUL", # accepts CREATE_SUCCESSFUL, CREATE_IN_PROGRESS, CREATE_FAILED, DELETE_SUCCESSFUL, DELETE_FAILED, DELETE_IN_PROGRESS, UPDATE_SUCCESSFUL, UPDATE_IN_PROGRESS, UPDATE_FAILED
|
5163
|
-
# },
|
5164
|
-
# limit: 1,
|
5165
|
-
# next_token: "String",
|
5166
|
-
# }
|
5167
|
-
#
|
5168
4398
|
# @!attribute [rw] organization_conformance_pack_name
|
5169
4399
|
# The name of organization conformance pack for which you want status
|
5170
4400
|
# details for member accounts.
|
@@ -5214,13 +4444,6 @@ module Aws::ConfigService
|
|
5214
4444
|
include Aws::Structure
|
5215
4445
|
end
|
5216
4446
|
|
5217
|
-
# @note When making an API call, you may pass GetOrganizationCustomRulePolicyRequest
|
5218
|
-
# data as a hash:
|
5219
|
-
#
|
5220
|
-
# {
|
5221
|
-
# organization_config_rule_name: "OrganizationConfigRuleName", # required
|
5222
|
-
# }
|
5223
|
-
#
|
5224
4447
|
# @!attribute [rw] organization_config_rule_name
|
5225
4448
|
# The name of your organization Config Custom Policy rule.
|
5226
4449
|
# @return [String]
|
@@ -5248,19 +4471,6 @@ module Aws::ConfigService
|
|
5248
4471
|
|
5249
4472
|
# The input for the GetResourceConfigHistory action.
|
5250
4473
|
#
|
5251
|
-
# @note When making an API call, you may pass GetResourceConfigHistoryRequest
|
5252
|
-
# data as a hash:
|
5253
|
-
#
|
5254
|
-
# {
|
5255
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
5256
|
-
# resource_id: "ResourceId", # required
|
5257
|
-
# later_time: Time.now,
|
5258
|
-
# earlier_time: Time.now,
|
5259
|
-
# chronological_order: "Reverse", # accepts Reverse, Forward
|
5260
|
-
# limit: 1,
|
5261
|
-
# next_token: "NextToken",
|
5262
|
-
# }
|
5263
|
-
#
|
5264
4474
|
# @!attribute [rw] resource_type
|
5265
4475
|
# The resource type.
|
5266
4476
|
# @return [String]
|
@@ -5331,13 +4541,6 @@ module Aws::ConfigService
|
|
5331
4541
|
include Aws::Structure
|
5332
4542
|
end
|
5333
4543
|
|
5334
|
-
# @note When making an API call, you may pass GetResourceEvaluationSummaryRequest
|
5335
|
-
# data as a hash:
|
5336
|
-
#
|
5337
|
-
# {
|
5338
|
-
# resource_evaluation_id: "ResourceEvaluationId", # required
|
5339
|
-
# }
|
5340
|
-
#
|
5341
4544
|
# @!attribute [rw] resource_evaluation_id
|
5342
4545
|
# The unique `ResourceEvaluationId` of Amazon Web Services resource
|
5343
4546
|
# execution for which you want to retrieve the evaluation summary.
|
@@ -5397,13 +4600,6 @@ module Aws::ConfigService
|
|
5397
4600
|
include Aws::Structure
|
5398
4601
|
end
|
5399
4602
|
|
5400
|
-
# @note When making an API call, you may pass GetStoredQueryRequest
|
5401
|
-
# data as a hash:
|
5402
|
-
#
|
5403
|
-
# {
|
5404
|
-
# query_name: "QueryName", # required
|
5405
|
-
# }
|
5406
|
-
#
|
5407
4603
|
# @!attribute [rw] query_name
|
5408
4604
|
# The name of the query.
|
5409
4605
|
# @return [String]
|
@@ -5502,7 +4698,7 @@ module Aws::ConfigService
|
|
5502
4698
|
#
|
5503
4699
|
class InvalidConfigurationRecorderNameException < Aws::EmptyStructure; end
|
5504
4700
|
|
5505
|
-
# The specified delivery channel name is
|
4701
|
+
# The specified delivery channel name is not valid.
|
5506
4702
|
#
|
5507
4703
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidDeliveryChannelNameException AWS API Documentation
|
5508
4704
|
#
|
@@ -5520,7 +4716,7 @@ module Aws::ConfigService
|
|
5520
4716
|
#
|
5521
4717
|
class InvalidLimitException < Aws::EmptyStructure; end
|
5522
4718
|
|
5523
|
-
# The specified next token is
|
4719
|
+
# The specified next token is not valid. Specify the `nextToken` string
|
5524
4720
|
# that was returned in the previous response to get the next page of
|
5525
4721
|
# results.
|
5526
4722
|
#
|
@@ -5528,22 +4724,22 @@ module Aws::ConfigService
|
|
5528
4724
|
#
|
5529
4725
|
class InvalidNextTokenException < Aws::EmptyStructure; end
|
5530
4726
|
|
5531
|
-
# One or more of the specified parameters are
|
5532
|
-
# parameters are valid and try again.
|
4727
|
+
# One or more of the specified parameters are not valid. Verify that
|
4728
|
+
# your parameters are valid and try again.
|
5533
4729
|
#
|
5534
4730
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidParameterValueException AWS API Documentation
|
5535
4731
|
#
|
5536
4732
|
class InvalidParameterValueException < Aws::EmptyStructure; end
|
5537
4733
|
|
5538
4734
|
# Config throws an exception if the recording group does not contain a
|
5539
|
-
# valid list of resource types.
|
5540
|
-
# formatted.
|
4735
|
+
# valid list of resource types. Values that are not valid might also be
|
4736
|
+
# incorrectly formatted.
|
5541
4737
|
#
|
5542
4738
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidRecordingGroupException AWS API Documentation
|
5543
4739
|
#
|
5544
4740
|
class InvalidRecordingGroupException < Aws::EmptyStructure; end
|
5545
4741
|
|
5546
|
-
# The specified `ResultToken` is
|
4742
|
+
# The specified `ResultToken` is not valid.
|
5547
4743
|
#
|
5548
4744
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidResultTokenException AWS API Documentation
|
5549
4745
|
#
|
@@ -5555,13 +4751,13 @@ module Aws::ConfigService
|
|
5555
4751
|
#
|
5556
4752
|
class InvalidRoleException < Aws::EmptyStructure; end
|
5557
4753
|
|
5558
|
-
# The specified Amazon S3 key prefix is
|
4754
|
+
# The specified Amazon S3 key prefix is not valid.
|
5559
4755
|
#
|
5560
4756
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidS3KeyPrefixException AWS API Documentation
|
5561
4757
|
#
|
5562
4758
|
class InvalidS3KeyPrefixException < Aws::EmptyStructure; end
|
5563
4759
|
|
5564
|
-
# The specified Amazon KMS Key ARN is
|
4760
|
+
# The specified Amazon KMS Key ARN is not valid.
|
5565
4761
|
#
|
5566
4762
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidS3KmsKeyArnException AWS API Documentation
|
5567
4763
|
#
|
@@ -5573,7 +4769,7 @@ module Aws::ConfigService
|
|
5573
4769
|
#
|
5574
4770
|
class InvalidSNSTopicARNException < Aws::EmptyStructure; end
|
5575
4771
|
|
5576
|
-
# The specified time range is
|
4772
|
+
# The specified time range is not valid. The earlier time is not
|
5577
4773
|
# chronologically before the later time.
|
5578
4774
|
#
|
5579
4775
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidTimeRangeException AWS API Documentation
|
@@ -5598,22 +4794,6 @@ module Aws::ConfigService
|
|
5598
4794
|
#
|
5599
4795
|
class LimitExceededException < Aws::EmptyStructure; end
|
5600
4796
|
|
5601
|
-
# @note When making an API call, you may pass ListAggregateDiscoveredResourcesRequest
|
5602
|
-
# data as a hash:
|
5603
|
-
#
|
5604
|
-
# {
|
5605
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
5606
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
5607
|
-
# filters: {
|
5608
|
-
# account_id: "AccountId",
|
5609
|
-
# resource_id: "ResourceId",
|
5610
|
-
# resource_name: "ResourceName",
|
5611
|
-
# region: "AwsRegion",
|
5612
|
-
# },
|
5613
|
-
# limit: 1,
|
5614
|
-
# next_token: "NextToken",
|
5615
|
-
# }
|
5616
|
-
#
|
5617
4797
|
# @!attribute [rw] configuration_aggregator_name
|
5618
4798
|
# The name of the configuration aggregator.
|
5619
4799
|
# @return [String]
|
@@ -5667,19 +4847,6 @@ module Aws::ConfigService
|
|
5667
4847
|
include Aws::Structure
|
5668
4848
|
end
|
5669
4849
|
|
5670
|
-
# @note When making an API call, you may pass ListConformancePackComplianceScoresRequest
|
5671
|
-
# data as a hash:
|
5672
|
-
#
|
5673
|
-
# {
|
5674
|
-
# filters: {
|
5675
|
-
# conformance_pack_names: ["ConformancePackName"], # required
|
5676
|
-
# },
|
5677
|
-
# sort_order: "ASCENDING", # accepts ASCENDING, DESCENDING
|
5678
|
-
# sort_by: "SCORE", # accepts SCORE
|
5679
|
-
# limit: 1,
|
5680
|
-
# next_token: "NextToken",
|
5681
|
-
# }
|
5682
|
-
#
|
5683
4850
|
# @!attribute [rw] filters
|
5684
4851
|
# Filters the results based on the
|
5685
4852
|
# `ConformancePackComplianceScoresFilters`.
|
@@ -5719,8 +4886,8 @@ module Aws::ConfigService
|
|
5719
4886
|
#
|
5720
4887
|
# @!attribute [rw] next_token
|
5721
4888
|
# The `nextToken` string in a prior request that you can use to get
|
5722
|
-
# the paginated response for next set of conformance pack
|
5723
|
-
# scores.
|
4889
|
+
# the paginated response for the next set of conformance pack
|
4890
|
+
# compliance scores.
|
5724
4891
|
# @return [String]
|
5725
4892
|
#
|
5726
4893
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ListConformancePackComplianceScoresRequest AWS API Documentation
|
@@ -5753,18 +4920,6 @@ module Aws::ConfigService
|
|
5753
4920
|
include Aws::Structure
|
5754
4921
|
end
|
5755
4922
|
|
5756
|
-
# @note When making an API call, you may pass ListDiscoveredResourcesRequest
|
5757
|
-
# data as a hash:
|
5758
|
-
#
|
5759
|
-
# {
|
5760
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
5761
|
-
# resource_ids: ["ResourceId"],
|
5762
|
-
# resource_name: "ResourceName",
|
5763
|
-
# limit: 1,
|
5764
|
-
# include_deleted_resources: false,
|
5765
|
-
# next_token: "NextToken",
|
5766
|
-
# }
|
5767
|
-
#
|
5768
4923
|
# @!attribute [rw] resource_type
|
5769
4924
|
# The type of resources that you want Config to list in the response.
|
5770
4925
|
# @return [String]
|
@@ -5772,7 +4927,8 @@ module Aws::ConfigService
|
|
5772
4927
|
# @!attribute [rw] resource_ids
|
5773
4928
|
# The IDs of only those resources that you want Config to list in the
|
5774
4929
|
# response. If you do not specify this parameter, Config lists all
|
5775
|
-
# resources of the specified type that it has discovered.
|
4930
|
+
# resources of the specified type that it has discovered. You can list
|
4931
|
+
# a minimum of 1 resourceID and a maximum of 20 resourceIds.
|
5776
4932
|
# @return [Array<String>]
|
5777
4933
|
#
|
5778
4934
|
# @!attribute [rw] resource_name
|
@@ -5830,22 +4986,6 @@ module Aws::ConfigService
|
|
5830
4986
|
include Aws::Structure
|
5831
4987
|
end
|
5832
4988
|
|
5833
|
-
# @note When making an API call, you may pass ListResourceEvaluationsRequest
|
5834
|
-
# data as a hash:
|
5835
|
-
#
|
5836
|
-
# {
|
5837
|
-
# filters: {
|
5838
|
-
# evaluation_mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
5839
|
-
# time_window: {
|
5840
|
-
# start_time: Time.now,
|
5841
|
-
# end_time: Time.now,
|
5842
|
-
# },
|
5843
|
-
# evaluation_context_identifier: "EvaluationContextIdentifier",
|
5844
|
-
# },
|
5845
|
-
# limit: 1,
|
5846
|
-
# next_token: "String",
|
5847
|
-
# }
|
5848
|
-
#
|
5849
4989
|
# @!attribute [rw] filters
|
5850
4990
|
# Returns a `ResourceEvaluationFilters` object.
|
5851
4991
|
# @return [Types::ResourceEvaluationFilters]
|
@@ -5889,14 +5029,6 @@ module Aws::ConfigService
|
|
5889
5029
|
include Aws::Structure
|
5890
5030
|
end
|
5891
5031
|
|
5892
|
-
# @note When making an API call, you may pass ListStoredQueriesRequest
|
5893
|
-
# data as a hash:
|
5894
|
-
#
|
5895
|
-
# {
|
5896
|
-
# next_token: "String",
|
5897
|
-
# max_results: 1,
|
5898
|
-
# }
|
5899
|
-
#
|
5900
5032
|
# @!attribute [rw] next_token
|
5901
5033
|
# The nextToken string returned in a previous request that you use to
|
5902
5034
|
# request the next page of results in a paginated response.
|
@@ -5937,15 +5069,6 @@ module Aws::ConfigService
|
|
5937
5069
|
include Aws::Structure
|
5938
5070
|
end
|
5939
5071
|
|
5940
|
-
# @note When making an API call, you may pass ListTagsForResourceRequest
|
5941
|
-
# data as a hash:
|
5942
|
-
#
|
5943
|
-
# {
|
5944
|
-
# resource_arn: "AmazonResourceName", # required
|
5945
|
-
# limit: 1,
|
5946
|
-
# next_token: "NextToken",
|
5947
|
-
# }
|
5948
|
-
#
|
5949
5072
|
# @!attribute [rw] resource_arn
|
5950
5073
|
# The Amazon Resource Name (ARN) that identifies the resource for
|
5951
5074
|
# which to list the tags. Currently, the supported resources are
|
@@ -6178,8 +5301,8 @@ module Aws::ConfigService
|
|
6178
5301
|
#
|
6179
5302
|
class NoSuchBucketException < Aws::EmptyStructure; end
|
6180
5303
|
|
6181
|
-
# The Config rule in the request is
|
6182
|
-
# Config
|
5304
|
+
# The Config rule in the request is not valid. Verify that the rule is
|
5305
|
+
# an Config Process Check rule, that the rule name is correct, and that
|
6183
5306
|
# valid Amazon Resouce Names (ARNs) are used before trying again.
|
6184
5307
|
#
|
6185
5308
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/NoSuchConfigRuleException AWS API Documentation
|
@@ -6216,10 +5339,10 @@ module Aws::ConfigService
|
|
6216
5339
|
#
|
6217
5340
|
class NoSuchDeliveryChannelException < Aws::EmptyStructure; end
|
6218
5341
|
|
6219
|
-
# The Config rule in the request is
|
6220
|
-
# organization Config
|
6221
|
-
# and that valid Amazon Resouce Names (ARNs) are used before
|
6222
|
-
# again.
|
5342
|
+
# The Config rule in the request is not valid. Verify that the rule is
|
5343
|
+
# an organization Config Process Check rule, that the rule name is
|
5344
|
+
# correct, and that valid Amazon Resouce Names (ARNs) are used before
|
5345
|
+
# trying again.
|
6223
5346
|
#
|
6224
5347
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/NoSuchOrganizationConfigRuleException AWS API Documentation
|
6225
5348
|
#
|
@@ -6286,15 +5409,6 @@ module Aws::ConfigService
|
|
6286
5409
|
# This object contains regions to set up the aggregator and an IAM role
|
6287
5410
|
# to retrieve organization details.
|
6288
5411
|
#
|
6289
|
-
# @note When making an API call, you may pass OrganizationAggregationSource
|
6290
|
-
# data as a hash:
|
6291
|
-
#
|
6292
|
-
# {
|
6293
|
-
# role_arn: "String", # required
|
6294
|
-
# aws_regions: ["String"],
|
6295
|
-
# all_aws_regions: false,
|
6296
|
-
# }
|
6297
|
-
#
|
6298
5412
|
# @!attribute [rw] role_arn
|
6299
5413
|
# ARN of the IAM role used to retrieve Amazon Web Services
|
6300
5414
|
# Organization details associated with the aggregator account.
|
@@ -6662,7 +5776,7 @@ module Aws::ConfigService
|
|
6662
5776
|
include Aws::Structure
|
6663
5777
|
end
|
6664
5778
|
|
6665
|
-
# You have specified a template that is
|
5779
|
+
# You have specified a template that is not valid or supported.
|
6666
5780
|
#
|
6667
5781
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/OrganizationConformancePackTemplateValidationException AWS API Documentation
|
6668
5782
|
#
|
@@ -6675,23 +5789,6 @@ module Aws::ConfigService
|
|
6675
5789
|
# resource, and organization trigger types that initiate Config to
|
6676
5790
|
# evaluate Amazon Web Services resources against a rule.
|
6677
5791
|
#
|
6678
|
-
# @note When making an API call, you may pass OrganizationCustomPolicyRuleMetadata
|
6679
|
-
# data as a hash:
|
6680
|
-
#
|
6681
|
-
# {
|
6682
|
-
# description: "StringWithCharLimit256Min0",
|
6683
|
-
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification
|
6684
|
-
# input_parameters: "StringWithCharLimit2048",
|
6685
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
6686
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
6687
|
-
# resource_id_scope: "StringWithCharLimit768",
|
6688
|
-
# tag_key_scope: "StringWithCharLimit128",
|
6689
|
-
# tag_value_scope: "StringWithCharLimit256",
|
6690
|
-
# policy_runtime: "PolicyRuntime", # required
|
6691
|
-
# policy_text: "PolicyText", # required
|
6692
|
-
# debug_log_delivery_accounts: ["AccountId"],
|
6693
|
-
# }
|
6694
|
-
#
|
6695
5792
|
# @!attribute [rw] description
|
6696
5793
|
# The description that you provide for your organization Config Custom
|
6697
5794
|
# Policy rule.
|
@@ -6882,21 +5979,6 @@ module Aws::ConfigService
|
|
6882
5979
|
# provides the frequency with which you want Config to run evaluations
|
6883
5980
|
# for the rule if the trigger type is periodic.
|
6884
5981
|
#
|
6885
|
-
# @note When making an API call, you may pass OrganizationCustomRuleMetadata
|
6886
|
-
# data as a hash:
|
6887
|
-
#
|
6888
|
-
# {
|
6889
|
-
# description: "StringWithCharLimit256Min0",
|
6890
|
-
# lambda_function_arn: "StringWithCharLimit256", # required
|
6891
|
-
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # required, accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification, ScheduledNotification
|
6892
|
-
# input_parameters: "StringWithCharLimit2048",
|
6893
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
6894
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
6895
|
-
# resource_id_scope: "StringWithCharLimit768",
|
6896
|
-
# tag_key_scope: "StringWithCharLimit128",
|
6897
|
-
# tag_value_scope: "StringWithCharLimit256",
|
6898
|
-
# }
|
6899
|
-
#
|
6900
5982
|
# @!attribute [rw] description
|
6901
5983
|
# The description that you provide for your organization Config rule.
|
6902
5984
|
# @return [String]
|
@@ -6981,20 +6063,6 @@ module Aws::ConfigService
|
|
6981
6063
|
# Config to run evaluations for the rule if the trigger type is
|
6982
6064
|
# periodic.
|
6983
6065
|
#
|
6984
|
-
# @note When making an API call, you may pass OrganizationManagedRuleMetadata
|
6985
|
-
# data as a hash:
|
6986
|
-
#
|
6987
|
-
# {
|
6988
|
-
# description: "StringWithCharLimit256Min0",
|
6989
|
-
# rule_identifier: "StringWithCharLimit256", # required
|
6990
|
-
# input_parameters: "StringWithCharLimit2048",
|
6991
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
6992
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
6993
|
-
# resource_id_scope: "StringWithCharLimit768",
|
6994
|
-
# tag_key_scope: "StringWithCharLimit128",
|
6995
|
-
# tag_value_scope: "StringWithCharLimit256",
|
6996
|
-
# }
|
6997
|
-
#
|
6998
6066
|
# @!attribute [rw] description
|
6999
6067
|
# The description that you provide for your organization Config rule.
|
7000
6068
|
# @return [String]
|
@@ -7062,14 +6130,6 @@ module Aws::ConfigService
|
|
7062
6130
|
# Status filter object to filter results based on specific member
|
7063
6131
|
# account ID or status type for an organization conformance pack.
|
7064
6132
|
#
|
7065
|
-
# @note When making an API call, you may pass OrganizationResourceDetailedStatusFilters
|
7066
|
-
# data as a hash:
|
7067
|
-
#
|
7068
|
-
# {
|
7069
|
-
# account_id: "AccountId",
|
7070
|
-
# status: "CREATE_SUCCESSFUL", # accepts CREATE_SUCCESSFUL, CREATE_IN_PROGRESS, CREATE_FAILED, DELETE_SUCCESSFUL, DELETE_FAILED, DELETE_IN_PROGRESS, UPDATE_SUCCESSFUL, UPDATE_IN_PROGRESS, UPDATE_FAILED
|
7071
|
-
# }
|
7072
|
-
#
|
7073
6133
|
# @!attribute [rw] account_id
|
7074
6134
|
# The 12-digit account ID of the member account within an
|
7075
6135
|
# organization.
|
@@ -7151,20 +6211,6 @@ module Aws::ConfigService
|
|
7151
6211
|
include Aws::Structure
|
7152
6212
|
end
|
7153
6213
|
|
7154
|
-
# @note When making an API call, you may pass PutAggregationAuthorizationRequest
|
7155
|
-
# data as a hash:
|
7156
|
-
#
|
7157
|
-
# {
|
7158
|
-
# authorized_account_id: "AccountId", # required
|
7159
|
-
# authorized_aws_region: "AwsRegion", # required
|
7160
|
-
# tags: [
|
7161
|
-
# {
|
7162
|
-
# key: "TagKey",
|
7163
|
-
# value: "TagValue",
|
7164
|
-
# },
|
7165
|
-
# ],
|
7166
|
-
# }
|
7167
|
-
#
|
7168
6214
|
# @!attribute [rw] authorized_account_id
|
7169
6215
|
# The 12-digit account ID of the account authorized to aggregate data.
|
7170
6216
|
# @return [String]
|
@@ -7199,55 +6245,6 @@ module Aws::ConfigService
|
|
7199
6245
|
include Aws::Structure
|
7200
6246
|
end
|
7201
6247
|
|
7202
|
-
# @note When making an API call, you may pass PutConfigRuleRequest
|
7203
|
-
# data as a hash:
|
7204
|
-
#
|
7205
|
-
# {
|
7206
|
-
# config_rule: { # required
|
7207
|
-
# config_rule_name: "ConfigRuleName",
|
7208
|
-
# config_rule_arn: "StringWithCharLimit256",
|
7209
|
-
# config_rule_id: "StringWithCharLimit64",
|
7210
|
-
# description: "EmptiableStringWithCharLimit256",
|
7211
|
-
# scope: {
|
7212
|
-
# compliance_resource_types: ["StringWithCharLimit256"],
|
7213
|
-
# tag_key: "StringWithCharLimit128",
|
7214
|
-
# tag_value: "StringWithCharLimit256",
|
7215
|
-
# compliance_resource_id: "BaseResourceId",
|
7216
|
-
# },
|
7217
|
-
# source: { # required
|
7218
|
-
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
|
7219
|
-
# source_identifier: "StringWithCharLimit256",
|
7220
|
-
# source_details: [
|
7221
|
-
# {
|
7222
|
-
# event_source: "aws.config", # accepts aws.config
|
7223
|
-
# message_type: "ConfigurationItemChangeNotification", # accepts ConfigurationItemChangeNotification, ConfigurationSnapshotDeliveryCompleted, ScheduledNotification, OversizedConfigurationItemChangeNotification
|
7224
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
7225
|
-
# },
|
7226
|
-
# ],
|
7227
|
-
# custom_policy_details: {
|
7228
|
-
# policy_runtime: "PolicyRuntime", # required
|
7229
|
-
# policy_text: "PolicyText", # required
|
7230
|
-
# enable_debug_log_delivery: false,
|
7231
|
-
# },
|
7232
|
-
# },
|
7233
|
-
# input_parameters: "StringWithCharLimit1024",
|
7234
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
7235
|
-
# config_rule_state: "ACTIVE", # accepts ACTIVE, DELETING, DELETING_RESULTS, EVALUATING
|
7236
|
-
# created_by: "StringWithCharLimit256",
|
7237
|
-
# evaluation_modes: [
|
7238
|
-
# {
|
7239
|
-
# mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
7240
|
-
# },
|
7241
|
-
# ],
|
7242
|
-
# },
|
7243
|
-
# tags: [
|
7244
|
-
# {
|
7245
|
-
# key: "TagKey",
|
7246
|
-
# value: "TagValue",
|
7247
|
-
# },
|
7248
|
-
# ],
|
7249
|
-
# }
|
7250
|
-
#
|
7251
6248
|
# @!attribute [rw] config_rule
|
7252
6249
|
# The rule that you want to add to your account.
|
7253
6250
|
# @return [Types::ConfigRule]
|
@@ -7265,31 +6262,6 @@ module Aws::ConfigService
|
|
7265
6262
|
include Aws::Structure
|
7266
6263
|
end
|
7267
6264
|
|
7268
|
-
# @note When making an API call, you may pass PutConfigurationAggregatorRequest
|
7269
|
-
# data as a hash:
|
7270
|
-
#
|
7271
|
-
# {
|
7272
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
7273
|
-
# account_aggregation_sources: [
|
7274
|
-
# {
|
7275
|
-
# account_ids: ["AccountId"], # required
|
7276
|
-
# all_aws_regions: false,
|
7277
|
-
# aws_regions: ["String"],
|
7278
|
-
# },
|
7279
|
-
# ],
|
7280
|
-
# organization_aggregation_source: {
|
7281
|
-
# role_arn: "String", # required
|
7282
|
-
# aws_regions: ["String"],
|
7283
|
-
# all_aws_regions: false,
|
7284
|
-
# },
|
7285
|
-
# tags: [
|
7286
|
-
# {
|
7287
|
-
# key: "TagKey",
|
7288
|
-
# value: "TagValue",
|
7289
|
-
# },
|
7290
|
-
# ],
|
7291
|
-
# }
|
7292
|
-
#
|
7293
6265
|
# @!attribute [rw] configuration_aggregator_name
|
7294
6266
|
# The name of the configuration aggregator.
|
7295
6267
|
# @return [String]
|
@@ -7331,21 +6303,6 @@ module Aws::ConfigService
|
|
7331
6303
|
|
7332
6304
|
# The input for the PutConfigurationRecorder action.
|
7333
6305
|
#
|
7334
|
-
# @note When making an API call, you may pass PutConfigurationRecorderRequest
|
7335
|
-
# data as a hash:
|
7336
|
-
#
|
7337
|
-
# {
|
7338
|
-
# configuration_recorder: { # required
|
7339
|
-
# name: "RecorderName",
|
7340
|
-
# role_arn: "String",
|
7341
|
-
# recording_group: {
|
7342
|
-
# all_supported: false,
|
7343
|
-
# include_global_resource_types: false,
|
7344
|
-
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
7345
|
-
# },
|
7346
|
-
# },
|
7347
|
-
# }
|
7348
|
-
#
|
7349
6306
|
# @!attribute [rw] configuration_recorder
|
7350
6307
|
# The configuration recorder object that records each configuration
|
7351
6308
|
# change made to the resources.
|
@@ -7359,27 +6316,6 @@ module Aws::ConfigService
|
|
7359
6316
|
include Aws::Structure
|
7360
6317
|
end
|
7361
6318
|
|
7362
|
-
# @note When making an API call, you may pass PutConformancePackRequest
|
7363
|
-
# data as a hash:
|
7364
|
-
#
|
7365
|
-
# {
|
7366
|
-
# conformance_pack_name: "ConformancePackName", # required
|
7367
|
-
# template_s3_uri: "TemplateS3Uri",
|
7368
|
-
# template_body: "TemplateBody",
|
7369
|
-
# delivery_s3_bucket: "DeliveryS3Bucket",
|
7370
|
-
# delivery_s3_key_prefix: "DeliveryS3KeyPrefix",
|
7371
|
-
# conformance_pack_input_parameters: [
|
7372
|
-
# {
|
7373
|
-
# parameter_name: "ParameterName", # required
|
7374
|
-
# parameter_value: "ParameterValue", # required
|
7375
|
-
# },
|
7376
|
-
# ],
|
7377
|
-
# template_ssm_document_details: {
|
7378
|
-
# document_name: "SSMDocumentName", # required
|
7379
|
-
# document_version: "SSMDocumentVersion",
|
7380
|
-
# },
|
7381
|
-
# }
|
7382
|
-
#
|
7383
6319
|
# @!attribute [rw] conformance_pack_name
|
7384
6320
|
# The unique name of the conformance pack you want to deploy.
|
7385
6321
|
# @return [String]
|
@@ -7463,22 +6399,6 @@ module Aws::ConfigService
|
|
7463
6399
|
|
7464
6400
|
# The input for the PutDeliveryChannel action.
|
7465
6401
|
#
|
7466
|
-
# @note When making an API call, you may pass PutDeliveryChannelRequest
|
7467
|
-
# data as a hash:
|
7468
|
-
#
|
7469
|
-
# {
|
7470
|
-
# delivery_channel: { # required
|
7471
|
-
# name: "ChannelName",
|
7472
|
-
# s3_bucket_name: "String",
|
7473
|
-
# s3_key_prefix: "String",
|
7474
|
-
# s3_kms_key_arn: "String",
|
7475
|
-
# sns_topic_arn: "String",
|
7476
|
-
# config_snapshot_delivery_properties: {
|
7477
|
-
# delivery_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
7478
|
-
# },
|
7479
|
-
# },
|
7480
|
-
# }
|
7481
|
-
#
|
7482
6402
|
# @!attribute [rw] delivery_channel
|
7483
6403
|
# The configuration delivery channel object that delivers the
|
7484
6404
|
# configuration information to an Amazon S3 bucket and to an Amazon
|
@@ -7493,23 +6413,6 @@ module Aws::ConfigService
|
|
7493
6413
|
include Aws::Structure
|
7494
6414
|
end
|
7495
6415
|
|
7496
|
-
# @note When making an API call, you may pass PutEvaluationsRequest
|
7497
|
-
# data as a hash:
|
7498
|
-
#
|
7499
|
-
# {
|
7500
|
-
# evaluations: [
|
7501
|
-
# {
|
7502
|
-
# compliance_resource_type: "StringWithCharLimit256", # required
|
7503
|
-
# compliance_resource_id: "BaseResourceId", # required
|
7504
|
-
# compliance_type: "COMPLIANT", # required, accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
7505
|
-
# annotation: "StringWithCharLimit256",
|
7506
|
-
# ordering_timestamp: Time.now, # required
|
7507
|
-
# },
|
7508
|
-
# ],
|
7509
|
-
# result_token: "String", # required
|
7510
|
-
# test_mode: false,
|
7511
|
-
# }
|
7512
|
-
#
|
7513
6416
|
# @!attribute [rw] evaluations
|
7514
6417
|
# The assessments that the Lambda function performs. Each evaluation
|
7515
6418
|
# identifies an Amazon Web Services resource and indicates whether it
|
@@ -7556,20 +6459,6 @@ module Aws::ConfigService
|
|
7556
6459
|
include Aws::Structure
|
7557
6460
|
end
|
7558
6461
|
|
7559
|
-
# @note When making an API call, you may pass PutExternalEvaluationRequest
|
7560
|
-
# data as a hash:
|
7561
|
-
#
|
7562
|
-
# {
|
7563
|
-
# config_rule_name: "ConfigRuleName", # required
|
7564
|
-
# external_evaluation: { # required
|
7565
|
-
# compliance_resource_type: "StringWithCharLimit256", # required
|
7566
|
-
# compliance_resource_id: "BaseResourceId", # required
|
7567
|
-
# compliance_type: "COMPLIANT", # required, accepts COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA
|
7568
|
-
# annotation: "StringWithCharLimit256",
|
7569
|
-
# ordering_timestamp: Time.now, # required
|
7570
|
-
# },
|
7571
|
-
# }
|
7572
|
-
#
|
7573
6462
|
# @!attribute [rw] config_rule_name
|
7574
6463
|
# The name of the Config rule.
|
7575
6464
|
# @return [String]
|
@@ -7592,48 +6481,6 @@ module Aws::ConfigService
|
|
7592
6481
|
#
|
7593
6482
|
class PutExternalEvaluationResponse < Aws::EmptyStructure; end
|
7594
6483
|
|
7595
|
-
# @note When making an API call, you may pass PutOrganizationConfigRuleRequest
|
7596
|
-
# data as a hash:
|
7597
|
-
#
|
7598
|
-
# {
|
7599
|
-
# organization_config_rule_name: "OrganizationConfigRuleName", # required
|
7600
|
-
# organization_managed_rule_metadata: {
|
7601
|
-
# description: "StringWithCharLimit256Min0",
|
7602
|
-
# rule_identifier: "StringWithCharLimit256", # required
|
7603
|
-
# input_parameters: "StringWithCharLimit2048",
|
7604
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
7605
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
7606
|
-
# resource_id_scope: "StringWithCharLimit768",
|
7607
|
-
# tag_key_scope: "StringWithCharLimit128",
|
7608
|
-
# tag_value_scope: "StringWithCharLimit256",
|
7609
|
-
# },
|
7610
|
-
# organization_custom_rule_metadata: {
|
7611
|
-
# description: "StringWithCharLimit256Min0",
|
7612
|
-
# lambda_function_arn: "StringWithCharLimit256", # required
|
7613
|
-
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # required, accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification, ScheduledNotification
|
7614
|
-
# input_parameters: "StringWithCharLimit2048",
|
7615
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
7616
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
7617
|
-
# resource_id_scope: "StringWithCharLimit768",
|
7618
|
-
# tag_key_scope: "StringWithCharLimit128",
|
7619
|
-
# tag_value_scope: "StringWithCharLimit256",
|
7620
|
-
# },
|
7621
|
-
# excluded_accounts: ["AccountId"],
|
7622
|
-
# organization_custom_policy_rule_metadata: {
|
7623
|
-
# description: "StringWithCharLimit256Min0",
|
7624
|
-
# organization_config_rule_trigger_types: ["ConfigurationItemChangeNotification"], # accepts ConfigurationItemChangeNotification, OversizedConfigurationItemChangeNotification
|
7625
|
-
# input_parameters: "StringWithCharLimit2048",
|
7626
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
7627
|
-
# resource_types_scope: ["StringWithCharLimit256"],
|
7628
|
-
# resource_id_scope: "StringWithCharLimit768",
|
7629
|
-
# tag_key_scope: "StringWithCharLimit128",
|
7630
|
-
# tag_value_scope: "StringWithCharLimit256",
|
7631
|
-
# policy_runtime: "PolicyRuntime", # required
|
7632
|
-
# policy_text: "PolicyText", # required
|
7633
|
-
# debug_log_delivery_accounts: ["AccountId"],
|
7634
|
-
# },
|
7635
|
-
# }
|
7636
|
-
#
|
7637
6484
|
# @!attribute [rw] organization_config_rule_name
|
7638
6485
|
# The name that you assign to an organization Config rule.
|
7639
6486
|
# @return [String]
|
@@ -7695,24 +6542,6 @@ module Aws::ConfigService
|
|
7695
6542
|
include Aws::Structure
|
7696
6543
|
end
|
7697
6544
|
|
7698
|
-
# @note When making an API call, you may pass PutOrganizationConformancePackRequest
|
7699
|
-
# data as a hash:
|
7700
|
-
#
|
7701
|
-
# {
|
7702
|
-
# organization_conformance_pack_name: "OrganizationConformancePackName", # required
|
7703
|
-
# template_s3_uri: "TemplateS3Uri",
|
7704
|
-
# template_body: "TemplateBody",
|
7705
|
-
# delivery_s3_bucket: "DeliveryS3Bucket",
|
7706
|
-
# delivery_s3_key_prefix: "DeliveryS3KeyPrefix",
|
7707
|
-
# conformance_pack_input_parameters: [
|
7708
|
-
# {
|
7709
|
-
# parameter_name: "ParameterName", # required
|
7710
|
-
# parameter_value: "ParameterValue", # required
|
7711
|
-
# },
|
7712
|
-
# ],
|
7713
|
-
# excluded_accounts: ["AccountId"],
|
7714
|
-
# }
|
7715
|
-
#
|
7716
6545
|
# @!attribute [rw] organization_conformance_pack_name
|
7717
6546
|
# Name of the organization conformance pack you want to create.
|
7718
6547
|
# @return [String]
|
@@ -7785,42 +6614,6 @@ module Aws::ConfigService
|
|
7785
6614
|
include Aws::Structure
|
7786
6615
|
end
|
7787
6616
|
|
7788
|
-
# @note When making an API call, you may pass PutRemediationConfigurationsRequest
|
7789
|
-
# data as a hash:
|
7790
|
-
#
|
7791
|
-
# {
|
7792
|
-
# remediation_configurations: [ # required
|
7793
|
-
# {
|
7794
|
-
# config_rule_name: "ConfigRuleName", # required
|
7795
|
-
# target_type: "SSM_DOCUMENT", # required, accepts SSM_DOCUMENT
|
7796
|
-
# target_id: "StringWithCharLimit256", # required
|
7797
|
-
# target_version: "String",
|
7798
|
-
# parameters: {
|
7799
|
-
# "StringWithCharLimit256" => {
|
7800
|
-
# resource_value: {
|
7801
|
-
# value: "RESOURCE_ID", # required, accepts RESOURCE_ID
|
7802
|
-
# },
|
7803
|
-
# static_value: {
|
7804
|
-
# values: ["StringWithCharLimit256"], # required
|
7805
|
-
# },
|
7806
|
-
# },
|
7807
|
-
# },
|
7808
|
-
# resource_type: "String",
|
7809
|
-
# automatic: false,
|
7810
|
-
# execution_controls: {
|
7811
|
-
# ssm_controls: {
|
7812
|
-
# concurrent_execution_rate_percentage: 1,
|
7813
|
-
# error_percentage: 1,
|
7814
|
-
# },
|
7815
|
-
# },
|
7816
|
-
# maximum_automatic_attempts: 1,
|
7817
|
-
# retry_attempt_seconds: 1,
|
7818
|
-
# arn: "StringWithCharLimit1024",
|
7819
|
-
# created_by_service: "StringWithCharLimit1024",
|
7820
|
-
# },
|
7821
|
-
# ],
|
7822
|
-
# }
|
7823
|
-
#
|
7824
6617
|
# @!attribute [rw] remediation_configurations
|
7825
6618
|
# A list of remediation configuration objects.
|
7826
6619
|
# @return [Array<Types::RemediationConfiguration>]
|
@@ -7845,21 +6638,6 @@ module Aws::ConfigService
|
|
7845
6638
|
include Aws::Structure
|
7846
6639
|
end
|
7847
6640
|
|
7848
|
-
# @note When making an API call, you may pass PutRemediationExceptionsRequest
|
7849
|
-
# data as a hash:
|
7850
|
-
#
|
7851
|
-
# {
|
7852
|
-
# config_rule_name: "ConfigRuleName", # required
|
7853
|
-
# resource_keys: [ # required
|
7854
|
-
# {
|
7855
|
-
# resource_type: "StringWithCharLimit256",
|
7856
|
-
# resource_id: "StringWithCharLimit1024",
|
7857
|
-
# },
|
7858
|
-
# ],
|
7859
|
-
# message: "StringWithCharLimit1024",
|
7860
|
-
# expiration_time: Time.now,
|
7861
|
-
# }
|
7862
|
-
#
|
7863
6641
|
# @!attribute [rw] config_rule_name
|
7864
6642
|
# The name of the Config rule for which you want to create remediation
|
7865
6643
|
# exception.
|
@@ -7904,20 +6682,6 @@ module Aws::ConfigService
|
|
7904
6682
|
include Aws::Structure
|
7905
6683
|
end
|
7906
6684
|
|
7907
|
-
# @note When making an API call, you may pass PutResourceConfigRequest
|
7908
|
-
# data as a hash:
|
7909
|
-
#
|
7910
|
-
# {
|
7911
|
-
# resource_type: "ResourceTypeString", # required
|
7912
|
-
# schema_version_id: "SchemaVersionId", # required
|
7913
|
-
# resource_id: "ResourceId", # required
|
7914
|
-
# resource_name: "ResourceName",
|
7915
|
-
# configuration: "Configuration", # required
|
7916
|
-
# tags: {
|
7917
|
-
# "Name" => "Value",
|
7918
|
-
# },
|
7919
|
-
# }
|
7920
|
-
#
|
7921
6685
|
# @!attribute [rw] resource_type
|
7922
6686
|
# The type of the resource. The custom resource type must be
|
7923
6687
|
# registered with CloudFormation.
|
@@ -7975,13 +6739,6 @@ module Aws::ConfigService
|
|
7975
6739
|
include Aws::Structure
|
7976
6740
|
end
|
7977
6741
|
|
7978
|
-
# @note When making an API call, you may pass PutRetentionConfigurationRequest
|
7979
|
-
# data as a hash:
|
7980
|
-
#
|
7981
|
-
# {
|
7982
|
-
# retention_period_in_days: 1, # required
|
7983
|
-
# }
|
7984
|
-
#
|
7985
6742
|
# @!attribute [rw] retention_period_in_days
|
7986
6743
|
# Number of days Config stores your historical information.
|
7987
6744
|
#
|
@@ -8010,25 +6767,6 @@ module Aws::ConfigService
|
|
8010
6767
|
include Aws::Structure
|
8011
6768
|
end
|
8012
6769
|
|
8013
|
-
# @note When making an API call, you may pass PutStoredQueryRequest
|
8014
|
-
# data as a hash:
|
8015
|
-
#
|
8016
|
-
# {
|
8017
|
-
# stored_query: { # required
|
8018
|
-
# query_id: "QueryId",
|
8019
|
-
# query_arn: "QueryArn",
|
8020
|
-
# query_name: "QueryName", # required
|
8021
|
-
# description: "QueryDescription",
|
8022
|
-
# expression: "QueryExpression",
|
8023
|
-
# },
|
8024
|
-
# tags: [
|
8025
|
-
# {
|
8026
|
-
# key: "TagKey",
|
8027
|
-
# value: "TagValue",
|
8028
|
-
# },
|
8029
|
-
# ],
|
8030
|
-
# }
|
8031
|
-
#
|
8032
6770
|
# @!attribute [rw] stored_query
|
8033
6771
|
# A list of `StoredQuery` objects. The mandatory fields are
|
8034
6772
|
# `QueryName` and `Expression`.
|
@@ -8131,15 +6869,6 @@ module Aws::ConfigService
|
|
8131
6869
|
# [1]: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources
|
8132
6870
|
# [2]: https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html
|
8133
6871
|
#
|
8134
|
-
# @note When making an API call, you may pass RecordingGroup
|
8135
|
-
# data as a hash:
|
8136
|
-
#
|
8137
|
-
# {
|
8138
|
-
# all_supported: false,
|
8139
|
-
# include_global_resource_types: false,
|
8140
|
-
# resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
8141
|
-
# }
|
8142
|
-
#
|
8143
6872
|
# @!attribute [rw] all_supported
|
8144
6873
|
# Specifies whether Config records configuration changes for every
|
8145
6874
|
# supported type of regional resource.
|
@@ -8178,7 +6907,8 @@ module Aws::ConfigService
|
|
8178
6907
|
# To record all configuration changes, you must set the `allSupported`
|
8179
6908
|
# option to `true`.
|
8180
6909
|
#
|
8181
|
-
# If you set
|
6910
|
+
# If you set the `AllSupported` option to false and populate the
|
6911
|
+
# `ResourceTypes` option with values, when Config adds support for a
|
8182
6912
|
# new type of resource, it will not record resources of that type
|
8183
6913
|
# unless you manually add that type to your recording group.
|
8184
6914
|
#
|
@@ -8233,38 +6963,6 @@ module Aws::ConfigService
|
|
8233
6963
|
# configuration that includes the remediation action, parameters, and
|
8234
6964
|
# data to execute the action.
|
8235
6965
|
#
|
8236
|
-
# @note When making an API call, you may pass RemediationConfiguration
|
8237
|
-
# data as a hash:
|
8238
|
-
#
|
8239
|
-
# {
|
8240
|
-
# config_rule_name: "ConfigRuleName", # required
|
8241
|
-
# target_type: "SSM_DOCUMENT", # required, accepts SSM_DOCUMENT
|
8242
|
-
# target_id: "StringWithCharLimit256", # required
|
8243
|
-
# target_version: "String",
|
8244
|
-
# parameters: {
|
8245
|
-
# "StringWithCharLimit256" => {
|
8246
|
-
# resource_value: {
|
8247
|
-
# value: "RESOURCE_ID", # required, accepts RESOURCE_ID
|
8248
|
-
# },
|
8249
|
-
# static_value: {
|
8250
|
-
# values: ["StringWithCharLimit256"], # required
|
8251
|
-
# },
|
8252
|
-
# },
|
8253
|
-
# },
|
8254
|
-
# resource_type: "String",
|
8255
|
-
# automatic: false,
|
8256
|
-
# execution_controls: {
|
8257
|
-
# ssm_controls: {
|
8258
|
-
# concurrent_execution_rate_percentage: 1,
|
8259
|
-
# error_percentage: 1,
|
8260
|
-
# },
|
8261
|
-
# },
|
8262
|
-
# maximum_automatic_attempts: 1,
|
8263
|
-
# retry_attempt_seconds: 1,
|
8264
|
-
# arn: "StringWithCharLimit1024",
|
8265
|
-
# created_by_service: "StringWithCharLimit1024",
|
8266
|
-
# }
|
8267
|
-
#
|
8268
6966
|
# @!attribute [rw] config_rule_name
|
8269
6967
|
# The name of the Config rule.
|
8270
6968
|
# @return [String]
|
@@ -8391,14 +7089,6 @@ module Aws::ConfigService
|
|
8391
7089
|
# The details that identify a resource within Config, including the
|
8392
7090
|
# resource type and resource ID.
|
8393
7091
|
#
|
8394
|
-
# @note When making an API call, you may pass RemediationExceptionResourceKey
|
8395
|
-
# data as a hash:
|
8396
|
-
#
|
8397
|
-
# {
|
8398
|
-
# resource_type: "StringWithCharLimit256",
|
8399
|
-
# resource_id: "StringWithCharLimit1024",
|
8400
|
-
# }
|
8401
|
-
#
|
8402
7092
|
# @!attribute [rw] resource_type
|
8403
7093
|
# The type of a resource.
|
8404
7094
|
# @return [String]
|
@@ -8496,18 +7186,6 @@ module Aws::ConfigService
|
|
8496
7186
|
# The value is either a dynamic (resource) value or a static value. You
|
8497
7187
|
# must select either a dynamic value or a static value.
|
8498
7188
|
#
|
8499
|
-
# @note When making an API call, you may pass RemediationParameterValue
|
8500
|
-
# data as a hash:
|
8501
|
-
#
|
8502
|
-
# {
|
8503
|
-
# resource_value: {
|
8504
|
-
# value: "RESOURCE_ID", # required, accepts RESOURCE_ID
|
8505
|
-
# },
|
8506
|
-
# static_value: {
|
8507
|
-
# values: ["StringWithCharLimit256"], # required
|
8508
|
-
# },
|
8509
|
-
# }
|
8510
|
-
#
|
8511
7189
|
# @!attribute [rw] resource_value
|
8512
7190
|
# The value is dynamic and changes at run-time.
|
8513
7191
|
# @return [Types::ResourceValue]
|
@@ -8561,15 +7239,6 @@ module Aws::ConfigService
|
|
8561
7239
|
# Filters the resource count based on account ID, region, and resource
|
8562
7240
|
# type.
|
8563
7241
|
#
|
8564
|
-
# @note When making an API call, you may pass ResourceCountFilters
|
8565
|
-
# data as a hash:
|
8566
|
-
#
|
8567
|
-
# {
|
8568
|
-
# resource_type: "AWS::EC2::CustomerGateway", # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
8569
|
-
# account_id: "AccountId",
|
8570
|
-
# region: "AwsRegion",
|
8571
|
-
# }
|
8572
|
-
#
|
8573
7242
|
# @!attribute [rw] resource_type
|
8574
7243
|
# The type of the Amazon Web Services resource.
|
8575
7244
|
# @return [String]
|
@@ -8594,16 +7263,6 @@ module Aws::ConfigService
|
|
8594
7263
|
|
8595
7264
|
# Returns information about the resource being evaluated.
|
8596
7265
|
#
|
8597
|
-
# @note When making an API call, you may pass ResourceDetails
|
8598
|
-
# data as a hash:
|
8599
|
-
#
|
8600
|
-
# {
|
8601
|
-
# resource_id: "BaseResourceId", # required
|
8602
|
-
# resource_type: "StringWithCharLimit256", # required
|
8603
|
-
# resource_configuration: "ResourceConfiguration", # required
|
8604
|
-
# resource_configuration_schema_type: "CFN_RESOURCE_SCHEMA", # accepts CFN_RESOURCE_SCHEMA
|
8605
|
-
# }
|
8606
|
-
#
|
8607
7266
|
# @!attribute [rw] resource_id
|
8608
7267
|
# A unique resource ID for an evaluation.
|
8609
7268
|
# @return [String]
|
@@ -8619,6 +7278,24 @@ module Aws::ConfigService
|
|
8619
7278
|
#
|
8620
7279
|
# @!attribute [rw] resource_configuration_schema_type
|
8621
7280
|
# The schema type of the resource configuration.
|
7281
|
+
#
|
7282
|
+
# <note markdown="1"> You can find the [Resource type schema][1], or
|
7283
|
+
# `CFN_RESOURCE_SCHEMA`, in "*Amazon Web Services public
|
7284
|
+
# extensions*" within the CloudFormation registry or with the
|
7285
|
+
# following CLI commmand: `aws cloudformation describe-type
|
7286
|
+
# --type-name "AWS::S3::Bucket" --type RESOURCE`.
|
7287
|
+
#
|
7288
|
+
# For more information, see [Managing extensions through the
|
7289
|
+
# CloudFormation registry][2] and [Amazon Web Services resource and
|
7290
|
+
# property types reference][3] in the CloudFormation User Guide.
|
7291
|
+
#
|
7292
|
+
# </note>
|
7293
|
+
#
|
7294
|
+
#
|
7295
|
+
#
|
7296
|
+
# [1]: https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-schema.html
|
7297
|
+
# [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html#registry-view
|
7298
|
+
# [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html
|
8622
7299
|
# @return [String]
|
8623
7300
|
#
|
8624
7301
|
# @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ResourceDetails AWS API Documentation
|
@@ -8659,18 +7336,6 @@ module Aws::ConfigService
|
|
8659
7336
|
|
8660
7337
|
# Returns details of a resource evaluation based on the selected filter.
|
8661
7338
|
#
|
8662
|
-
# @note When making an API call, you may pass ResourceEvaluationFilters
|
8663
|
-
# data as a hash:
|
8664
|
-
#
|
8665
|
-
# {
|
8666
|
-
# evaluation_mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
|
8667
|
-
# time_window: {
|
8668
|
-
# start_time: Time.now,
|
8669
|
-
# end_time: Time.now,
|
8670
|
-
# },
|
8671
|
-
# evaluation_context_identifier: "EvaluationContextIdentifier",
|
8672
|
-
# }
|
8673
|
-
#
|
8674
7339
|
# @!attribute [rw] evaluation_mode
|
8675
7340
|
# Filters all resource evaluations results based on an evaluation
|
8676
7341
|
# mode. the valid value for this API is `Proactive`.
|
@@ -8698,16 +7363,6 @@ module Aws::ConfigService
|
|
8698
7363
|
# Filters the results by resource account ID, region, resource ID, and
|
8699
7364
|
# resource name.
|
8700
7365
|
#
|
8701
|
-
# @note When making an API call, you may pass ResourceFilters
|
8702
|
-
# data as a hash:
|
8703
|
-
#
|
8704
|
-
# {
|
8705
|
-
# account_id: "AccountId",
|
8706
|
-
# resource_id: "ResourceId",
|
8707
|
-
# resource_name: "ResourceName",
|
8708
|
-
# region: "AwsRegion",
|
8709
|
-
# }
|
8710
|
-
#
|
8711
7366
|
# @!attribute [rw] account_id
|
8712
7367
|
# The 12-digit source account ID.
|
8713
7368
|
# @return [String]
|
@@ -8799,14 +7454,6 @@ module Aws::ConfigService
|
|
8799
7454
|
# The details that identify a resource within Config, including the
|
8800
7455
|
# resource type and resource ID.
|
8801
7456
|
#
|
8802
|
-
# @note When making an API call, you may pass ResourceKey
|
8803
|
-
# data as a hash:
|
8804
|
-
#
|
8805
|
-
# {
|
8806
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
8807
|
-
# resource_id: "ResourceId", # required
|
8808
|
-
# }
|
8809
|
-
#
|
8810
7457
|
# @!attribute [rw] resource_type
|
8811
7458
|
# The resource type.
|
8812
7459
|
# @return [String]
|
@@ -8839,13 +7486,6 @@ module Aws::ConfigService
|
|
8839
7486
|
|
8840
7487
|
# The dynamic value of the resource.
|
8841
7488
|
#
|
8842
|
-
# @note When making an API call, you may pass ResourceValue
|
8843
|
-
# data as a hash:
|
8844
|
-
#
|
8845
|
-
# {
|
8846
|
-
# value: "RESOURCE_ID", # required, accepts RESOURCE_ID
|
8847
|
-
# }
|
8848
|
-
#
|
8849
7489
|
# @!attribute [rw] value
|
8850
7490
|
# The value is a resource ID.
|
8851
7491
|
# @return [String]
|
@@ -8890,16 +7530,6 @@ module Aws::ConfigService
|
|
8890
7530
|
# for a rule. Otherwise, evaluations for the rule are triggered when any
|
8891
7531
|
# resource in your recording group changes in configuration.
|
8892
7532
|
#
|
8893
|
-
# @note When making an API call, you may pass Scope
|
8894
|
-
# data as a hash:
|
8895
|
-
#
|
8896
|
-
# {
|
8897
|
-
# compliance_resource_types: ["StringWithCharLimit256"],
|
8898
|
-
# tag_key: "StringWithCharLimit128",
|
8899
|
-
# tag_value: "StringWithCharLimit256",
|
8900
|
-
# compliance_resource_id: "BaseResourceId",
|
8901
|
-
# }
|
8902
|
-
#
|
8903
7533
|
# @!attribute [rw] compliance_resource_types
|
8904
7534
|
# The resource types of only those Amazon Web Services resources that
|
8905
7535
|
# you want to trigger an evaluation for the rule. You can only specify
|
@@ -8935,17 +7565,6 @@ module Aws::ConfigService
|
|
8935
7565
|
include Aws::Structure
|
8936
7566
|
end
|
8937
7567
|
|
8938
|
-
# @note When making an API call, you may pass SelectAggregateResourceConfigRequest
|
8939
|
-
# data as a hash:
|
8940
|
-
#
|
8941
|
-
# {
|
8942
|
-
# expression: "Expression", # required
|
8943
|
-
# configuration_aggregator_name: "ConfigurationAggregatorName", # required
|
8944
|
-
# limit: 1,
|
8945
|
-
# max_results: 1,
|
8946
|
-
# next_token: "NextToken",
|
8947
|
-
# }
|
8948
|
-
#
|
8949
7568
|
# @!attribute [rw] expression
|
8950
7569
|
# The SQL query SELECT command.
|
8951
7570
|
# @return [String]
|
@@ -9003,15 +7622,6 @@ module Aws::ConfigService
|
|
9003
7622
|
include Aws::Structure
|
9004
7623
|
end
|
9005
7624
|
|
9006
|
-
# @note When making an API call, you may pass SelectResourceConfigRequest
|
9007
|
-
# data as a hash:
|
9008
|
-
#
|
9009
|
-
# {
|
9010
|
-
# expression: "Expression", # required
|
9011
|
-
# limit: 1,
|
9012
|
-
# next_token: "NextToken",
|
9013
|
-
# }
|
9014
|
-
#
|
9015
7625
|
# @!attribute [rw] expression
|
9016
7626
|
# The SQL query `SELECT` command.
|
9017
7627
|
# @return [String]
|
@@ -9064,26 +7674,6 @@ module Aws::ConfigService
|
|
9064
7674
|
# the events that cause the evaluation of your Amazon Web Services
|
9065
7675
|
# resources.
|
9066
7676
|
#
|
9067
|
-
# @note When making an API call, you may pass Source
|
9068
|
-
# data as a hash:
|
9069
|
-
#
|
9070
|
-
# {
|
9071
|
-
# owner: "CUSTOM_LAMBDA", # required, accepts CUSTOM_LAMBDA, AWS, CUSTOM_POLICY
|
9072
|
-
# source_identifier: "StringWithCharLimit256",
|
9073
|
-
# source_details: [
|
9074
|
-
# {
|
9075
|
-
# event_source: "aws.config", # accepts aws.config
|
9076
|
-
# message_type: "ConfigurationItemChangeNotification", # accepts ConfigurationItemChangeNotification, ConfigurationSnapshotDeliveryCompleted, ScheduledNotification, OversizedConfigurationItemChangeNotification
|
9077
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
9078
|
-
# },
|
9079
|
-
# ],
|
9080
|
-
# custom_policy_details: {
|
9081
|
-
# policy_runtime: "PolicyRuntime", # required
|
9082
|
-
# policy_text: "PolicyText", # required
|
9083
|
-
# enable_debug_log_delivery: false,
|
9084
|
-
# },
|
9085
|
-
# }
|
9086
|
-
#
|
9087
7677
|
# @!attribute [rw] owner
|
9088
7678
|
# Indicates whether Amazon Web Services or the customer owns and
|
9089
7679
|
# manages the Config rule.
|
@@ -9152,15 +7742,6 @@ module Aws::ConfigService
|
|
9152
7742
|
# for the rule if the trigger type is periodic. You can specify the
|
9153
7743
|
# parameter values for `SourceDetail` only for custom rules.
|
9154
7744
|
#
|
9155
|
-
# @note When making an API call, you may pass SourceDetail
|
9156
|
-
# data as a hash:
|
9157
|
-
#
|
9158
|
-
# {
|
9159
|
-
# event_source: "aws.config", # accepts aws.config
|
9160
|
-
# message_type: "ConfigurationItemChangeNotification", # accepts ConfigurationItemChangeNotification, ConfigurationSnapshotDeliveryCompleted, ScheduledNotification, OversizedConfigurationItemChangeNotification
|
9161
|
-
# maximum_execution_frequency: "One_Hour", # accepts One_Hour, Three_Hours, Six_Hours, Twelve_Hours, TwentyFour_Hours
|
9162
|
-
# }
|
9163
|
-
#
|
9164
7745
|
# @!attribute [rw] event_source
|
9165
7746
|
# The source of the event, such as an Amazon Web Services service,
|
9166
7747
|
# that triggers Config to evaluate your Amazon Web Services resources.
|
@@ -9223,14 +7804,6 @@ module Aws::ConfigService
|
|
9223
7804
|
# Amazon Web Services Systems Manager (SSM) specific remediation
|
9224
7805
|
# controls.
|
9225
7806
|
#
|
9226
|
-
# @note When making an API call, you may pass SsmControls
|
9227
|
-
# data as a hash:
|
9228
|
-
#
|
9229
|
-
# {
|
9230
|
-
# concurrent_execution_rate_percentage: 1,
|
9231
|
-
# error_percentage: 1,
|
9232
|
-
# }
|
9233
|
-
#
|
9234
7807
|
# @!attribute [rw] concurrent_execution_rate_percentage
|
9235
7808
|
# The maximum percentage of remediation actions allowed to run in
|
9236
7809
|
# parallel on the non-compliant resources for that specific rule. You
|
@@ -9255,13 +7828,6 @@ module Aws::ConfigService
|
|
9255
7828
|
include Aws::Structure
|
9256
7829
|
end
|
9257
7830
|
|
9258
|
-
# @note When making an API call, you may pass StartConfigRulesEvaluationRequest
|
9259
|
-
# data as a hash:
|
9260
|
-
#
|
9261
|
-
# {
|
9262
|
-
# config_rule_names: ["ConfigRuleName"],
|
9263
|
-
# }
|
9264
|
-
#
|
9265
7831
|
# @!attribute [rw] config_rule_names
|
9266
7832
|
# The list of names of Config rules that you want to run evaluations
|
9267
7833
|
# for.
|
@@ -9284,13 +7850,6 @@ module Aws::ConfigService
|
|
9284
7850
|
|
9285
7851
|
# The input for the StartConfigurationRecorder action.
|
9286
7852
|
#
|
9287
|
-
# @note When making an API call, you may pass StartConfigurationRecorderRequest
|
9288
|
-
# data as a hash:
|
9289
|
-
#
|
9290
|
-
# {
|
9291
|
-
# configuration_recorder_name: "RecorderName", # required
|
9292
|
-
# }
|
9293
|
-
#
|
9294
7853
|
# @!attribute [rw] configuration_recorder_name
|
9295
7854
|
# The name of the recorder object that records each configuration
|
9296
7855
|
# change made to the resources.
|
@@ -9304,19 +7863,6 @@ module Aws::ConfigService
|
|
9304
7863
|
include Aws::Structure
|
9305
7864
|
end
|
9306
7865
|
|
9307
|
-
# @note When making an API call, you may pass StartRemediationExecutionRequest
|
9308
|
-
# data as a hash:
|
9309
|
-
#
|
9310
|
-
# {
|
9311
|
-
# config_rule_name: "ConfigRuleName", # required
|
9312
|
-
# resource_keys: [ # required
|
9313
|
-
# {
|
9314
|
-
# resource_type: "AWS::EC2::CustomerGateway", # required, accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone
|
9315
|
-
# resource_id: "ResourceId", # required
|
9316
|
-
# },
|
9317
|
-
# ],
|
9318
|
-
# }
|
9319
|
-
#
|
9320
7866
|
# @!attribute [rw] config_rule_name
|
9321
7867
|
# The list of names of Config rules that you want to run remediation
|
9322
7868
|
# execution for.
|
@@ -9356,24 +7902,6 @@ module Aws::ConfigService
|
|
9356
7902
|
include Aws::Structure
|
9357
7903
|
end
|
9358
7904
|
|
9359
|
-
# @note When making an API call, you may pass StartResourceEvaluationRequest
|
9360
|
-
# data as a hash:
|
9361
|
-
#
|
9362
|
-
# {
|
9363
|
-
# resource_details: { # required
|
9364
|
-
# resource_id: "BaseResourceId", # required
|
9365
|
-
# resource_type: "StringWithCharLimit256", # required
|
9366
|
-
# resource_configuration: "ResourceConfiguration", # required
|
9367
|
-
# resource_configuration_schema_type: "CFN_RESOURCE_SCHEMA", # accepts CFN_RESOURCE_SCHEMA
|
9368
|
-
# },
|
9369
|
-
# evaluation_context: {
|
9370
|
-
# evaluation_context_identifier: "EvaluationContextIdentifier",
|
9371
|
-
# },
|
9372
|
-
# evaluation_mode: "DETECTIVE", # required, accepts DETECTIVE, PROACTIVE
|
9373
|
-
# evaluation_timeout: 1,
|
9374
|
-
# client_token: "ClientToken",
|
9375
|
-
# }
|
9376
|
-
#
|
9377
7905
|
# @!attribute [rw] resource_details
|
9378
7906
|
# Returns a `ResourceDetails` object.
|
9379
7907
|
# @return [Types::ResourceDetails]
|
@@ -9383,8 +7911,8 @@ module Aws::ConfigService
|
|
9383
7911
|
# @return [Types::EvaluationContext]
|
9384
7912
|
#
|
9385
7913
|
# @!attribute [rw] evaluation_mode
|
9386
|
-
# The mode of an evaluation. The valid
|
9387
|
-
# `
|
7914
|
+
# The mode of an evaluation. The valid values for this API are
|
7915
|
+
# `DETECTIVE` and `PROACTIVE`.
|
9388
7916
|
# @return [String]
|
9389
7917
|
#
|
9390
7918
|
# @!attribute [rw] evaluation_timeout
|
@@ -9436,13 +7964,6 @@ module Aws::ConfigService
|
|
9436
7964
|
|
9437
7965
|
# The static value of the resource.
|
9438
7966
|
#
|
9439
|
-
# @note When making an API call, you may pass StaticValue
|
9440
|
-
# data as a hash:
|
9441
|
-
#
|
9442
|
-
# {
|
9443
|
-
# values: ["StringWithCharLimit256"], # required
|
9444
|
-
# }
|
9445
|
-
#
|
9446
7967
|
# @!attribute [rw] values
|
9447
7968
|
# A list of values. For example, the ARN of the assumed role.
|
9448
7969
|
# @return [Array<String>]
|
@@ -9458,14 +7979,6 @@ module Aws::ConfigService
|
|
9458
7979
|
# Status filter object to filter results based on specific member
|
9459
7980
|
# account ID or status type for an organization Config rule.
|
9460
7981
|
#
|
9461
|
-
# @note When making an API call, you may pass StatusDetailFilters
|
9462
|
-
# data as a hash:
|
9463
|
-
#
|
9464
|
-
# {
|
9465
|
-
# account_id: "AccountId",
|
9466
|
-
# member_account_rule_status: "CREATE_SUCCESSFUL", # accepts CREATE_SUCCESSFUL, CREATE_IN_PROGRESS, CREATE_FAILED, DELETE_SUCCESSFUL, DELETE_FAILED, DELETE_IN_PROGRESS, UPDATE_SUCCESSFUL, UPDATE_IN_PROGRESS, UPDATE_FAILED
|
9467
|
-
# }
|
9468
|
-
#
|
9469
7982
|
# @!attribute [rw] account_id
|
9470
7983
|
# The 12-digit account ID of the member account within an
|
9471
7984
|
# organization.
|
@@ -9522,13 +8035,6 @@ module Aws::ConfigService
|
|
9522
8035
|
|
9523
8036
|
# The input for the StopConfigurationRecorder action.
|
9524
8037
|
#
|
9525
|
-
# @note When making an API call, you may pass StopConfigurationRecorderRequest
|
9526
|
-
# data as a hash:
|
9527
|
-
#
|
9528
|
-
# {
|
9529
|
-
# configuration_recorder_name: "RecorderName", # required
|
9530
|
-
# }
|
9531
|
-
#
|
9532
8038
|
# @!attribute [rw] configuration_recorder_name
|
9533
8039
|
# The name of the recorder object that records each configuration
|
9534
8040
|
# change made to the resources.
|
@@ -9544,17 +8050,6 @@ module Aws::ConfigService
|
|
9544
8050
|
|
9545
8051
|
# Provides the details of a stored query.
|
9546
8052
|
#
|
9547
|
-
# @note When making an API call, you may pass StoredQuery
|
9548
|
-
# data as a hash:
|
9549
|
-
#
|
9550
|
-
# {
|
9551
|
-
# query_id: "QueryId",
|
9552
|
-
# query_arn: "QueryArn",
|
9553
|
-
# query_name: "QueryName", # required
|
9554
|
-
# description: "QueryDescription",
|
9555
|
-
# expression: "QueryExpression",
|
9556
|
-
# }
|
9557
|
-
#
|
9558
8053
|
# @!attribute [rw] query_id
|
9559
8054
|
# The ID of the query.
|
9560
8055
|
# @return [String]
|
@@ -9629,14 +8124,6 @@ module Aws::ConfigService
|
|
9629
8124
|
# maximum character length of 128 characters, and tag values can have a
|
9630
8125
|
# maximum length of 256 characters.
|
9631
8126
|
#
|
9632
|
-
# @note When making an API call, you may pass Tag
|
9633
|
-
# data as a hash:
|
9634
|
-
#
|
9635
|
-
# {
|
9636
|
-
# key: "TagKey",
|
9637
|
-
# value: "TagValue",
|
9638
|
-
# }
|
9639
|
-
#
|
9640
8127
|
# @!attribute [rw] key
|
9641
8128
|
# One part of a key-value pair that make up a tag. A key is a general
|
9642
8129
|
# label that acts like a category for more specific tag values.
|
@@ -9656,19 +8143,6 @@ module Aws::ConfigService
|
|
9656
8143
|
include Aws::Structure
|
9657
8144
|
end
|
9658
8145
|
|
9659
|
-
# @note When making an API call, you may pass TagResourceRequest
|
9660
|
-
# data as a hash:
|
9661
|
-
#
|
9662
|
-
# {
|
9663
|
-
# resource_arn: "AmazonResourceName", # required
|
9664
|
-
# tags: [ # required
|
9665
|
-
# {
|
9666
|
-
# key: "TagKey",
|
9667
|
-
# value: "TagValue",
|
9668
|
-
# },
|
9669
|
-
# ],
|
9670
|
-
# }
|
9671
|
-
#
|
9672
8146
|
# @!attribute [rw] resource_arn
|
9673
8147
|
# The Amazon Resource Name (ARN) that identifies the resource for
|
9674
8148
|
# which to list the tags. Currently, the supported resources are
|
@@ -9703,14 +8177,6 @@ module Aws::ConfigService
|
|
9703
8177
|
#
|
9704
8178
|
# [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_PutConformancePack.html
|
9705
8179
|
#
|
9706
|
-
# @note When making an API call, you may pass TemplateSSMDocumentDetails
|
9707
|
-
# data as a hash:
|
9708
|
-
#
|
9709
|
-
# {
|
9710
|
-
# document_name: "SSMDocumentName", # required
|
9711
|
-
# document_version: "SSMDocumentVersion",
|
9712
|
-
# }
|
9713
|
-
#
|
9714
8180
|
# @!attribute [rw] document_name
|
9715
8181
|
# The name or Amazon Resource Name (ARN) of the SSM document to use to
|
9716
8182
|
# create a conformance pack. If you use the document name, Config
|
@@ -9739,14 +8205,6 @@ module Aws::ConfigService
|
|
9739
8205
|
|
9740
8206
|
# Filters evaluation results based on start and end times.
|
9741
8207
|
#
|
9742
|
-
# @note When making an API call, you may pass TimeWindow
|
9743
|
-
# data as a hash:
|
9744
|
-
#
|
9745
|
-
# {
|
9746
|
-
# start_time: Time.now,
|
9747
|
-
# end_time: Time.now,
|
9748
|
-
# }
|
9749
|
-
#
|
9750
8208
|
# @!attribute [rw] start_time
|
9751
8209
|
# The start time of an execution.
|
9752
8210
|
# @return [Time]
|
@@ -9777,14 +8235,6 @@ module Aws::ConfigService
|
|
9777
8235
|
#
|
9778
8236
|
class TooManyTagsException < Aws::EmptyStructure; end
|
9779
8237
|
|
9780
|
-
# @note When making an API call, you may pass UntagResourceRequest
|
9781
|
-
# data as a hash:
|
9782
|
-
#
|
9783
|
-
# {
|
9784
|
-
# resource_arn: "AmazonResourceName", # required
|
9785
|
-
# tag_keys: ["TagKey"], # required
|
9786
|
-
# }
|
9787
|
-
#
|
9788
8238
|
# @!attribute [rw] resource_arn
|
9789
8239
|
# The Amazon Resource Name (ARN) that identifies the resource for
|
9790
8240
|
# which to list the tags. Currently, the supported resources are
|
@@ -9805,7 +8255,7 @@ module Aws::ConfigService
|
|
9805
8255
|
include Aws::Structure
|
9806
8256
|
end
|
9807
8257
|
|
9808
|
-
# The requested action is
|
8258
|
+
# The requested action is not valid.
|
9809
8259
|
#
|
9810
8260
|
# For PutStoredQuery, you will see this exception if there are missing
|
9811
8261
|
# required fields or if the input value fails the validation, or if you
|