aws-sdk-configservice 1.154.0 → 1.155.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d32fb85edb6e2d97b9ef68bf3fb52077d98df82393241d4db6c9cf0a86d1cca3
-  data.tar.gz: e6cddcbd5e35c440ab8faccd3b8d1dc5dd5f656ae1571464ae591188b4d69076
+  metadata.gz: 2e877d99f88becb25a54c37edaf55218c980ba54b7944a23eb75746dadbd5706
+  data.tar.gz: 379fe846b91f5568c43f959f832b07b1864be29d50ca4bee11e6f5e4ed7a5483
 SHA512:
-  metadata.gz: 9e2263c4d20b959c5733afb5ab457acb4d9f2fb4586f257edf8cbc23adcec1e012901b3d9a95609dd72a51f9f41a2bbc937205a8ae59803ae0dcfbc39717c7f0
-  data.tar.gz: c657fd23b8abf75444e4d0b5494669cbeca2806b0166be4b4c7fb2df6162ec3369cae482b4ad0c03af69ee5909654138b24c8a1f02d3fcb02c5771daef5a72dc
+  metadata.gz: 13c04ab4758031a5ecd3fe9729804b9c8c471434dfa53cfa7f15bf5569a1fb51abfe1fe1349cf89052713274da7bf8274a21688e2128d6765d690b11d5e90fe4
+  data.tar.gz: a3a276a75b7fda4732e51e82ad4ec38567694811309dfd91f387b47f9a4274a6d4c70877a6514d64ef9d9ab975ce9ff57a6e90e92954bec5e1cf5d62ec185b61

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.155.0 (2026-07-07)
+------------------
+
+* Feature - Added support for connecting AWS Config to third-party cloud service providers. New APIs include PutConnector, GetConnector, DeleteConnector, and ListConnectors for managing connectors, and PutThirdPartyServiceLinkedConfigurationRecorder for creating third-party service-linked recorders.
+
 1.154.0 (2026-07-02)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.154.0
+1.155.0

data/lib/aws-sdk-configservice/client.rb

@@ -533,6 +533,13 @@ module Aws::ConfigService
     #   resp.configuration_recorder.recording_mode.recording_mode_overrides[0].recording_frequency #=> String, one of "CONTINUOUS", "DAILY"
     #   resp.configuration_recorder.recording_scope #=> String, one of "INTERNAL", "PAID"
     #   resp.configuration_recorder.service_principal #=> String
+    #   resp.configuration_recorder.connector_arn #=> String
+    #   resp.configuration_recorder.scope_configuration.scope_type #=> String
+    #   resp.configuration_recorder.scope_configuration.scope_values #=> Array
+    #   resp.configuration_recorder.scope_configuration.scope_values[0] #=> String
+    #   resp.configuration_recorder.scope_configuration.all_regions #=> Boolean
+    #   resp.configuration_recorder.scope_configuration.included_regions #=> Array
+    #   resp.configuration_recorder.scope_configuration.included_regions[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/AssociateResourceTypes AWS API Documentation
     #
@@ -873,6 +880,29 @@ module Aws::ConfigService
       req.send_request(options)
     end
 
+    # Deletes the specified connector.
+    #
+    # @option params [required, String] :arn
+    #   The Amazon Resource Name (ARN) of the connector that you want to
+    #   delete.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_connector({
+    #     arn: "AmazonResourceName", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/DeleteConnector AWS API Documentation
+    #
+    # @overload delete_connector(params = {})
+    # @param [Hash] params ({})
+    def delete_connector(params = {}, options = {})
+      req = build_request(:delete_connector, params)
+      req.send_request(options)
+    end
+
     # Deletes the delivery channel.
     #
     # Before you can delete the delivery channel, you must stop the customer
@@ -1211,9 +1241,18 @@ module Aws::ConfigService
     #
     # [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_GetResourceConfigHistory.html
     #
-    # @option params [required, String] :service_principal
+    # @option params [String] :service_principal
     #   The service principal of the Amazon Web Services service for the
-    #   service-linked configuration recorder that you want to delete.
+    #   service-linked configuration recorder that you want to delete. This
+    #   field is only supported for Amazon Web Services service principals.
+    #   For third-party service-linked configuration recorders, use `Arn`
+    #   instead.
+    #
+    # @option params [String] :arn
+    #   The Amazon Resource Name (ARN) of the service-linked configuration
+    #   recorder that you want to delete. For third-party service-linked
+    #   configuration recorders, you must use `Arn`. You must specify exactly
+    #   one of `Arn` or `ServicePrincipal`.
     #
     # @return [Types::DeleteServiceLinkedConfigurationRecorderResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1223,7 +1262,8 @@ module Aws::ConfigService
     # @example Request syntax with placeholder values
     #
     #   resp = client.delete_service_linked_configuration_recorder({
-    #     service_principal: "ServicePrincipal", # required
+    #     service_principal: "ServicePrincipal",
+    #     arn: "AmazonResourceName",
     #   })
     #
     # @example Response structure
@@ -1711,10 +1751,6 @@ module Aws::ConfigService
     #   The names of the Config rules for which you want details. If you do
     #   not specify any names, Config returns details for all your rules.
     #
-    # @option params [String] :next_token
-    #   The `nextToken` string returned on a previous page that you use to get
-    #   the next page of results in a paginated response.
-    #
     # @option params [Types::DescribeConfigRulesFilters] :filters
     #   Returns a list of Detective or Proactive Config rules. By default,
     #   this API returns an unfiltered list. For more information on Detective
@@ -1725,6 +1761,10 @@ module Aws::ConfigService
     #
     #   [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config-rules.html
     #
+    # @option params [String] :next_token
+    #   The `nextToken` string returned on a previous page that you use to get
+    #   the next page of results in a paginated response.
+    #
     # @return [Types::DescribeConfigRulesResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::DescribeConfigRulesResponse#config_rules #config_rules} => Array<Types::ConfigRule>
@@ -1736,11 +1776,11 @@ module Aws::ConfigService
     #
     #   resp = client.describe_config_rules({
     #     config_rule_names: ["ConfigRuleName"],
-    #     next_token: "String",
     #     filters: {
     #       evaluation_mode: "DETECTIVE", # accepts DETECTIVE, PROACTIVE
     #       rule_evaluation_visibility: "EXTERNAL", # accepts EXTERNAL, INTERNAL
     #     },
+    #     next_token: "String",
     #   })
     #
     # @example Response structure
@@ -1942,7 +1982,9 @@ module Aws::ConfigService
     # @option params [String] :service_principal
     #   For service-linked configuration recorders, you can use the service
     #   principal of the linked Amazon Web Services service to specify the
-    #   configuration recorder.
+    #   configuration recorder. This field is only supported for Amazon Web
+    #   Services service principals. For third-party service-linked
+    #   configuration recorders, use `Arn` instead.
     #
     # @option params [String] :arn
     #   The Amazon Resource Name (ARN) of the configuration recorder that you
@@ -2006,7 +2048,9 @@ module Aws::ConfigService
     # @option params [String] :service_principal
     #   For service-linked configuration recorders, you can use the service
     #   principal of the linked Amazon Web Services service to specify the
-    #   configuration recorder.
+    #   configuration recorder. This field is only supported for Amazon Web
+    #   Services service principals. For third-party service-linked
+    #   configuration recorders, use `Arn` instead.
     #
     # @option params [String] :arn
     #   The Amazon Resource Name (ARN) of the configuration recorder that you
@@ -2045,6 +2089,13 @@ module Aws::ConfigService
     #   resp.configuration_recorders[0].recording_mode.recording_mode_overrides[0].recording_frequency #=> String, one of "CONTINUOUS", "DAILY"
     #   resp.configuration_recorders[0].recording_scope #=> String, one of "INTERNAL", "PAID"
     #   resp.configuration_recorders[0].service_principal #=> String
+    #   resp.configuration_recorders[0].connector_arn #=> String
+    #   resp.configuration_recorders[0].scope_configuration.scope_type #=> String
+    #   resp.configuration_recorders[0].scope_configuration.scope_values #=> Array
+    #   resp.configuration_recorders[0].scope_configuration.scope_values[0] #=> String
+    #   resp.configuration_recorders[0].scope_configuration.all_regions #=> Boolean
+    #   resp.configuration_recorders[0].scope_configuration.included_regions #=> Array
+    #   resp.configuration_recorders[0].scope_configuration.included_regions[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/DescribeConfigurationRecorders AWS API Documentation
     #
@@ -2955,6 +3006,13 @@ module Aws::ConfigService
     #   resp.configuration_recorder.recording_mode.recording_mode_overrides[0].recording_frequency #=> String, one of "CONTINUOUS", "DAILY"
     #   resp.configuration_recorder.recording_scope #=> String, one of "INTERNAL", "PAID"
     #   resp.configuration_recorder.service_principal #=> String
+    #   resp.configuration_recorder.connector_arn #=> String
+    #   resp.configuration_recorder.scope_configuration.scope_type #=> String
+    #   resp.configuration_recorder.scope_configuration.scope_values #=> Array
+    #   resp.configuration_recorder.scope_configuration.scope_values[0] #=> String
+    #   resp.configuration_recorder.scope_configuration.all_regions #=> Boolean
+    #   resp.configuration_recorder.scope_configuration.included_regions #=> Array
+    #   resp.configuration_recorder.scope_configuration.included_regions[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/DisassociateResourceTypes AWS API Documentation
     #
@@ -3641,6 +3699,38 @@ module Aws::ConfigService
       req.send_request(options)
     end
 
+    # Returns the details of the specified connector.
+    #
+    # @option params [required, String] :arn
+    #   The Amazon Resource Name (ARN) of the connector.
+    #
+    # @return [Types::GetConnectorResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetConnectorResponse#connector #connector} => Types::Connector
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_connector({
+    #     arn: "AmazonResourceName", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.connector.name #=> String
+    #   resp.connector.arn #=> String
+    #   resp.connector.connector_configuration.azure.tenant_identifier #=> String
+    #   resp.connector.connector_configuration.azure.client_identifier #=> String
+    #   resp.connector.created_time #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/GetConnector AWS API Documentation
+    #
+    # @overload get_connector(params = {})
+    # @param [Hash] params ({})
+    def get_connector(params = {}, options = {})
+      req = build_request(:get_connector, params)
+      req.send_request(options)
+    end
+
     # Returns the policy definition containing the logic for your Config
     # Custom Policy rule.
     #
@@ -4246,6 +4336,7 @@ module Aws::ConfigService
     #   resp.configuration_recorder_summaries[0].name #=> String
     #   resp.configuration_recorder_summaries[0].service_principal #=> String
     #   resp.configuration_recorder_summaries[0].recording_scope #=> String, one of "INTERNAL", "PAID"
+    #   resp.configuration_recorder_summaries[0].provider #=> String, one of "AZURE"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ListConfigurationRecorders AWS API Documentation
@@ -4343,6 +4434,58 @@ module Aws::ConfigService
       req.send_request(options)
     end
 
+    # Returns a list of connectors depending on the filters you specify.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to include in the response.
+    #
+    # @option params [String] :next_token
+    #   The `NextToken` string returned on a previous page that you use to get
+    #   the next page of results in a paginated response.
+    #
+    # @option params [Array<Types::ConnectorFilter>] :filters
+    #   Filters the results based on a list of `ConnectorFilter` objects that
+    #   you specify.
+    #
+    # @return [Types::ListConnectorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListConnectorsResponse#connector_summaries #connector_summaries} => Array&lt;Types::ConnectorSummary&gt;
+    #   * {Types::ListConnectorsResponse#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_connectors({
+    #     max_results: 1,
+    #     next_token: "String",
+    #     filters: [
+    #       {
+    #         filter_name: "provider", # accepts provider
+    #         filter_values: ["String"],
+    #       },
+    #     ],
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.connector_summaries #=> Array
+    #   resp.connector_summaries[0].arn #=> String
+    #   resp.connector_summaries[0].name #=> String
+    #   resp.connector_summaries[0].provider #=> String, one of "AZURE"
+    #   resp.connector_summaries[0].tenant_identifier #=> String
+    #   resp.connector_summaries[0].created_time #=> Time
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ListConnectors AWS API Documentation
+    #
+    # @overload list_connectors(params = {})
+    # @param [Hash] params ({})
+    def list_connectors(params = {}, options = {})
+      req = build_request(:list_connectors, params)
+      req.send_request(options)
+    end
+
     # Returns a list of resource resource identifiers for the specified
     # resource types for the resources of that type. A *resource identifier*
     # includes the resource type, ID, and (if available) the custom resource
@@ -4562,6 +4705,8 @@ module Aws::ConfigService
     #
     #   * `StoredQuery`
     #
+    #   * `Connector`
+    #
     # @option params [Integer] :limit
     #   The maximum number of tags returned on each page. The limit maximum is
     #   50. You cannot specify a number greater than 50. If you specify 0,
@@ -5022,6 +5167,13 @@ module Aws::ConfigService
     #       },
     #       recording_scope: "INTERNAL", # accepts INTERNAL, PAID
     #       service_principal: "ServicePrincipal",
+    #       connector_arn: "AmazonResourceName",
+    #       scope_configuration: {
+    #         scope_type: "ScopeType", # required
+    #         scope_values: ["ScopeValue"],
+    #         all_regions: false, # required
+    #         included_regions: ["ThirdPartyCloudRegion"],
+    #       },
     #     },
     #     tags: [
     #       {
@@ -5188,6 +5340,82 @@ module Aws::ConfigService
       req.send_request(options)
     end
 
+    # Creates a connector that specifies the connection between a
+    # third-party cloud service provider and Config.
+    #
+    # A connector is required to create a service-linked configuration
+    # recorder for a third-party cloud service provider using the
+    # [PutThirdPartyServiceLinkedConfigurationRecorder][1] operation.
+    #
+    # This API creates a service-linked role
+    # `AWSServiceRoleForConfigThirdParty` in your account. The
+    # service-linked role is created only when the role does not exist in
+    # your account.
+    #
+    # <note markdown="1"> **Connectors cannot be updated**
+    #
+    #  To update the connector configuration, you must delete all associated
+    # configuration recorders, delete the connector, and recreate it with
+    # the updated configuration.
+    #
+    #  </note>
+    #
+    # <note markdown="1"> **Tags are added at creation and cannot be updated with this
+    # operation**
+    #
+    #  Use [TagResource][2] and [UntagResource][3] to update tags after
+    # creation.
+    #
+    #  </note>
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_PutThirdPartyServiceLinkedConfigurationRecorder.html
+    # [2]: https://docs.aws.amazon.com/config/latest/APIReference/API_TagResource.html
+    # [3]: https://docs.aws.amazon.com/config/latest/APIReference/API_UntagResource.html
+    #
+    # @option params [required, Types::ConnectorConfiguration] :connector_configuration
+    #   The provider-specific configuration for connecting to the third-party
+    #   cloud service provider.
+    #
+    # @option params [Array<Types::Tag>] :tags
+    #   The tags for the connector. Each tag consists of a key and an optional
+    #   value, both of which you define.
+    #
+    # @return [Types::PutConnectorResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::PutConnectorResponse#arn #arn} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_connector({
+    #     connector_configuration: { # required
+    #       azure: {
+    #         tenant_identifier: "AzureTenantIdentifier", # required
+    #         client_identifier: "AzureClientIdentifier", # required
+    #       },
+    #     },
+    #     tags: [
+    #       {
+    #         key: "TagKey",
+    #         value: "TagValue",
+    #       },
+    #     ],
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.arn #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutConnector AWS API Documentation
+    #
+    # @overload put_connector(params = {})
+    # @param [Hash] params ({})
+    def put_connector(params = {}, options = {})
+      req = build_request(:put_connector, params)
+      req.send_request(options)
+    end
+
     # Creates or updates a delivery channel to deliver configuration
     # information and other compliance information.
     #
@@ -6155,6 +6383,95 @@ module Aws::ConfigService
       req.send_request(options)
     end
 
+    # Creates or updates a service-linked configuration recorder that is
+    # linked to a third-party cloud service provider based on the
+    # `ConnectorArn` you specify.
+    #
+    # The configuration recorder's `name`, `recordingGroup`,
+    # `recordingMode`, and `recordingScope` is set by the service that is
+    # linked to the configuration recorder.
+    #
+    # If a service-linked configuration recorder already exists for the
+    # specified service principal and connector, calling this operation
+    # again updates the `ScopeConfiguration`.
+    #
+    # <note markdown="1"> **This operation can only be called by the Amazon Web Services service
+    # linked to the configuration recorder**
+    #
+    #  Customers cannot call this operation directly. Only the linked Amazon
+    # Web Services service can create or update the service-linked
+    # configuration recorder.
+    #
+    #  </note>
+    #
+    # <note markdown="1"> **Tags are added at creation and cannot be updated with this
+    # operation**
+    #
+    #  Use [TagResource][1] and [UntagResource][2] to update tags after
+    # creation.
+    #
+    #  </note>
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_TagResource.html
+    # [2]: https://docs.aws.amazon.com/config/latest/APIReference/API_UntagResource.html
+    #
+    # @option params [required, String] :service_principal
+    #   The service principal of the Amazon Web Services service for the
+    #   service-linked configuration recorder that you want to create.
+    #
+    # @option params [required, String] :connector_arn
+    #   The Amazon Resource Name (ARN) of the connector that specifies the
+    #   connection between the third-party cloud service provider and Config.
+    #   The specified connector must exist.
+    #
+    # @option params [required, Types::ScopeConfiguration] :scope_configuration
+    #   Specifies the scope of resources to record from the third-party cloud
+    #   service provider.
+    #
+    # @option params [Array<Types::Tag>] :tags
+    #   The tags for a service-linked configuration recorder. Each tag
+    #   consists of a key and an optional value, both of which you define.
+    #
+    # @return [Types::PutThirdPartyServiceLinkedConfigurationRecorderResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::PutThirdPartyServiceLinkedConfigurationRecorderResponse#arn #arn} => String
+    #   * {Types::PutThirdPartyServiceLinkedConfigurationRecorderResponse#name #name} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_third_party_service_linked_configuration_recorder({
+    #     service_principal: "ServicePrincipal", # required
+    #     connector_arn: "AmazonResourceName", # required
+    #     scope_configuration: { # required
+    #       scope_type: "ScopeType", # required
+    #       scope_values: ["ScopeValue"],
+    #       all_regions: false, # required
+    #       included_regions: ["ThirdPartyCloudRegion"],
+    #     },
+    #     tags: [
+    #       {
+    #         key: "TagKey",
+    #         value: "TagValue",
+    #       },
+    #     ],
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.arn #=> String
+    #   resp.name #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutThirdPartyServiceLinkedConfigurationRecorder AWS API Documentation
+    #
+    # @overload put_third_party_service_linked_configuration_recorder(params = {})
+    # @param [Hash] params ({})
+    def put_third_party_service_linked_configuration_recorder(params = {}, options = {})
+      req = build_request(:put_third_party_service_linked_configuration_recorder, params)
+      req.send_request(options)
+    end
+
     # Accepts a structured query language (SQL) SELECT command and an
     # aggregator to query configuration state of Amazon Web Services
     # resources across multiple accounts and regions, performs the
@@ -6575,6 +6892,8 @@ module Aws::ConfigService
     #
     #   * `StoredQuery`
     #
+    #   * `Connector`
+    #
     # @option params [required, Array<Types::Tag>] :tags
     #   An array of tag object.
     #
@@ -6623,6 +6942,8 @@ module Aws::ConfigService
     #
     #   * `StoredQuery`
     #
+    #   * `Connector`
+    #
     # @option params [required, Array<String>] :tag_keys
     #   The keys of the tags to be removed.
     #
@@ -6662,7 +6983,7 @@ module Aws::ConfigService
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-configservice'
-      context[:gem_version] = '1.154.0'
+      context[:gem_version] = '1.155.0'
       Seahorse::Client::Request.new(handlers, context)
     end