aws-sdk-configservice 1.65.0 → 1.66.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-configservice/client.rb +384 -372
- data/lib/aws-sdk-configservice/types.rb +624 -614
- data/lib/aws-sdk-configservice.rb +1 -1
- metadata +5 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 6932a3ac9d945a9dcc0a207a60f1b89ec550284eeeccedd35def71ab3c11f0dc
|
4
|
+
data.tar.gz: 5c8888fabcca4291a71e724ec03ec8ff197a41eddd7a170dba75ecd98064a52a
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 2fde0f1bc8b8b973cec867e2571a991939b72ec2a17803cf7c625b8a13f52f0cb5dda6e2c7457d94216aaa2cfc3b10dedfd021364523e6b344689a0b6dd64479
|
7
|
+
data.tar.gz: 204c946187696d20fdbe126353fedb89df0a1321c591b0729d675c773f017cb65b653066507613880fd77923c485bd3917f1ce36c4a3f08062aa283e6f4ff3fa
|
data/CHANGELOG.md
CHANGED
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.66.0
|
@@ -338,7 +338,7 @@ module Aws::ConfigService
|
|
338
338
|
# @!group API Operations
|
339
339
|
|
340
340
|
# Returns the current configuration items for resources that are present
|
341
|
-
# in your
|
341
|
+
# in your Config aggregator. The operation also returns a list of
|
342
342
|
# resources that are not processed in the current request. If there are
|
343
343
|
# no unprocessed resources, the operation returns an empty
|
344
344
|
# `unprocessedResourceIdentifiers` list.
|
@@ -409,10 +409,11 @@ module Aws::ConfigService
|
|
409
409
|
req.send_request(options)
|
410
410
|
end
|
411
411
|
|
412
|
-
# Returns the
|
413
|
-
# The operation also returns a list of resources that are not
|
414
|
-
# in the current request. If there are no unprocessed
|
415
|
-
# operation returns an empty unprocessedResourceKeys
|
412
|
+
# Returns the `BaseConfigurationItem` for one or more requested
|
413
|
+
# resources. The operation also returns a list of resources that are not
|
414
|
+
# processed in the current request. If there are no unprocessed
|
415
|
+
# resources, the operation returns an empty unprocessedResourceKeys
|
416
|
+
# list.
|
416
417
|
#
|
417
418
|
# <note markdown="1"> * The API does not return results for deleted resources.
|
418
419
|
#
|
@@ -500,19 +501,18 @@ module Aws::ConfigService
|
|
500
501
|
req.send_request(options)
|
501
502
|
end
|
502
503
|
|
503
|
-
# Deletes the specified
|
504
|
-
# results.
|
504
|
+
# Deletes the specified Config rule and all of its evaluation results.
|
505
505
|
#
|
506
|
-
#
|
507
|
-
#
|
508
|
-
#
|
509
|
-
#
|
506
|
+
# Config sets the state of a rule to `DELETING` until the deletion is
|
507
|
+
# complete. You cannot update a rule while it is in this state. If you
|
508
|
+
# make a `PutConfigRule` or `DeleteConfigRule` request for the rule, you
|
509
|
+
# will receive a `ResourceInUseException`.
|
510
510
|
#
|
511
511
|
# You can check the state of a rule by using the `DescribeConfigRules`
|
512
512
|
# request.
|
513
513
|
#
|
514
514
|
# @option params [required, String] :config_rule_name
|
515
|
-
# The name of the
|
515
|
+
# The name of the Config rule that you want to delete.
|
516
516
|
#
|
517
517
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
518
518
|
#
|
@@ -556,14 +556,14 @@ module Aws::ConfigService
|
|
556
556
|
|
557
557
|
# Deletes the configuration recorder.
|
558
558
|
#
|
559
|
-
# After the configuration recorder is deleted,
|
560
|
-
#
|
561
|
-
#
|
559
|
+
# After the configuration recorder is deleted, Config will not record
|
560
|
+
# resource configuration changes until you create a new configuration
|
561
|
+
# recorder.
|
562
562
|
#
|
563
563
|
# This action does not delete the configuration information that was
|
564
564
|
# previously recorded. You will be able to access the previously
|
565
565
|
# recorded information by using the `GetResourceConfigHistory` action,
|
566
|
-
# but you will not be able to access this information in the
|
566
|
+
# but you will not be able to access this information in the Config
|
567
567
|
# console until you create a new configuration recorder.
|
568
568
|
#
|
569
569
|
# @option params [required, String] :configuration_recorder_name
|
@@ -588,11 +588,11 @@ module Aws::ConfigService
|
|
588
588
|
req.send_request(options)
|
589
589
|
end
|
590
590
|
|
591
|
-
# Deletes the specified conformance pack and all the
|
591
|
+
# Deletes the specified conformance pack and all the Config rules,
|
592
592
|
# remediation actions, and all evaluation results within that
|
593
593
|
# conformance pack.
|
594
594
|
#
|
595
|
-
#
|
595
|
+
# Config sets the conformance pack to `DELETE_IN_PROGRESS` until the
|
596
596
|
# deletion is complete. You cannot update a conformance pack while it is
|
597
597
|
# in this state.
|
598
598
|
#
|
@@ -641,13 +641,13 @@ module Aws::ConfigService
|
|
641
641
|
req.send_request(options)
|
642
642
|
end
|
643
643
|
|
644
|
-
# Deletes the evaluation results for the specified
|
645
|
-
#
|
646
|
-
#
|
647
|
-
#
|
644
|
+
# Deletes the evaluation results for the specified Config rule. You can
|
645
|
+
# specify one Config rule per request. After you delete the evaluation
|
646
|
+
# results, you can call the StartConfigRulesEvaluation API to start
|
647
|
+
# evaluating your Amazon Web Services resources against the rule.
|
648
648
|
#
|
649
649
|
# @option params [required, String] :config_rule_name
|
650
|
-
# The name of the
|
650
|
+
# The name of the Config rule for which you want to delete the
|
651
651
|
# evaluation results.
|
652
652
|
#
|
653
653
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
@@ -672,10 +672,10 @@ module Aws::ConfigService
|
|
672
672
|
#
|
673
673
|
# Only a master account and a delegated administrator account can delete
|
674
674
|
# an organization config rule. When calling this API with a delegated
|
675
|
-
# administrator, you must ensure
|
675
|
+
# administrator, you must ensure Organizations
|
676
676
|
# `ListDelegatedAdministrator` permissions are added.
|
677
677
|
#
|
678
|
-
#
|
678
|
+
# Config sets the state of a rule to DELETE\_IN\_PROGRESS until the
|
679
679
|
# deletion is complete. You cannot update a rule while it is in this
|
680
680
|
# state.
|
681
681
|
#
|
@@ -705,12 +705,12 @@ module Aws::ConfigService
|
|
705
705
|
#
|
706
706
|
# Only a master account or a delegated administrator account can delete
|
707
707
|
# an organization conformance pack. When calling this API with a
|
708
|
-
# delegated administrator, you must ensure
|
708
|
+
# delegated administrator, you must ensure Organizations
|
709
709
|
# `ListDelegatedAdministrator` permissions are added.
|
710
710
|
#
|
711
|
-
#
|
712
|
-
#
|
713
|
-
#
|
711
|
+
# Config sets the state of a conformance pack to DELETE\_IN\_PROGRESS
|
712
|
+
# until the deletion is complete. You cannot update a conformance pack
|
713
|
+
# while it is in this state.
|
714
714
|
#
|
715
715
|
# @option params [required, String] :organization_conformance_pack_name
|
716
716
|
# The name of organization conformance pack that you want to delete.
|
@@ -762,8 +762,8 @@ module Aws::ConfigService
|
|
762
762
|
# Deletes the remediation configuration.
|
763
763
|
#
|
764
764
|
# @option params [required, String] :config_rule_name
|
765
|
-
# The name of the
|
766
|
-
#
|
765
|
+
# The name of the Config rule for which you want to delete remediation
|
766
|
+
# configuration.
|
767
767
|
#
|
768
768
|
# @option params [String] :resource_type
|
769
769
|
# The type of a resource.
|
@@ -789,20 +789,20 @@ module Aws::ConfigService
|
|
789
789
|
# Deletes one or more remediation exceptions mentioned in the resource
|
790
790
|
# keys.
|
791
791
|
#
|
792
|
-
# <note markdown="1">
|
792
|
+
# <note markdown="1"> Config generates a remediation exception when a problem occurs
|
793
793
|
# executing a remediation action to a specific resource. Remediation
|
794
794
|
# exceptions blocks auto-remediation until the exception is cleared.
|
795
795
|
#
|
796
796
|
# </note>
|
797
797
|
#
|
798
798
|
# @option params [required, String] :config_rule_name
|
799
|
-
# The name of the
|
800
|
-
#
|
799
|
+
# The name of the Config rule for which you want to delete remediation
|
800
|
+
# exception configuration.
|
801
801
|
#
|
802
802
|
# @option params [required, Array<Types::RemediationExceptionResourceKey>] :resource_keys
|
803
803
|
# An exception list of resource exception keys to be processed with the
|
804
|
-
# current request.
|
805
|
-
# example,
|
804
|
+
# current request. Config adds exception for each resource key. For
|
805
|
+
# example, Config adds 3 exceptions for 3 resource keys.
|
806
806
|
#
|
807
807
|
# @return [Types::DeleteRemediationExceptionsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
808
808
|
#
|
@@ -840,7 +840,7 @@ module Aws::ConfigService
|
|
840
840
|
# Records the configuration state for a custom resource that has been
|
841
841
|
# deleted. This API records a new ConfigurationItem with a
|
842
842
|
# ResourceDeleted status. You can retrieve the ConfigurationItems
|
843
|
-
# recorded for this resource in your
|
843
|
+
# recorded for this resource in your Config History.
|
844
844
|
#
|
845
845
|
# @option params [required, String] :resource_type
|
846
846
|
# The type of the resource.
|
@@ -888,8 +888,8 @@ module Aws::ConfigService
|
|
888
888
|
req.send_request(options)
|
889
889
|
end
|
890
890
|
|
891
|
-
# Deletes the stored query for a single
|
892
|
-
# Region.
|
891
|
+
# Deletes the stored query for a single Amazon Web Services account and
|
892
|
+
# a single Amazon Web Services Region.
|
893
893
|
#
|
894
894
|
# @option params [required, String] :query_name
|
895
895
|
# The name of the query that you want to delete.
|
@@ -912,7 +912,7 @@ module Aws::ConfigService
|
|
912
912
|
end
|
913
913
|
|
914
914
|
# Schedules delivery of a configuration snapshot to the Amazon S3 bucket
|
915
|
-
# in the specified delivery channel. After the delivery has started,
|
915
|
+
# in the specified delivery channel. After the delivery has started,
|
916
916
|
# Config sends the following notifications using an Amazon SNS topic
|
917
917
|
# that you have specified.
|
918
918
|
#
|
@@ -951,7 +951,8 @@ module Aws::ConfigService
|
|
951
951
|
end
|
952
952
|
|
953
953
|
# Returns a list of compliant and noncompliant rules with the number of
|
954
|
-
# resources for compliant and noncompliant rules.
|
954
|
+
# resources for compliant and noncompliant rules. Does not display rules
|
955
|
+
# that do not have compliance results.
|
955
956
|
#
|
956
957
|
# <note markdown="1"> The results can return an empty result page, but if you have a
|
957
958
|
# `nextToken`, the results are displayed on the next page.
|
@@ -966,7 +967,7 @@ module Aws::ConfigService
|
|
966
967
|
#
|
967
968
|
# @option params [Integer] :limit
|
968
969
|
# The maximum number of evaluation results returned on each page. The
|
969
|
-
# default is maximum. If you specify 0,
|
970
|
+
# default is maximum. If you specify 0, Config uses the default.
|
970
971
|
#
|
971
972
|
# @option params [String] :next_token
|
972
973
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -1014,10 +1015,10 @@ module Aws::ConfigService
|
|
1014
1015
|
end
|
1015
1016
|
|
1016
1017
|
# Returns a list of the conformance packs and their associated
|
1017
|
-
# compliance status with the count of compliant and noncompliant
|
1018
|
-
#
|
1019
|
-
#
|
1020
|
-
#
|
1018
|
+
# compliance status with the count of compliant and noncompliant Config
|
1019
|
+
# rules within each conformance pack. Also returns the total rule count
|
1020
|
+
# which includes compliant rules, noncompliant rules, and rules that
|
1021
|
+
# cannot be evaluated due to insufficient data.
|
1021
1022
|
#
|
1022
1023
|
# <note markdown="1"> The results can return an empty result page, but if you have a
|
1023
1024
|
# `nextToken`, the results are displayed on the next page.
|
@@ -1033,8 +1034,8 @@ module Aws::ConfigService
|
|
1033
1034
|
#
|
1034
1035
|
# @option params [Integer] :limit
|
1035
1036
|
# The maximum number of conformance packs compliance details returned on
|
1036
|
-
# each page. The default is maximum. If you specify 0,
|
1037
|
-
#
|
1037
|
+
# each page. The default is maximum. If you specify 0, Config uses the
|
1038
|
+
# default.
|
1038
1039
|
#
|
1039
1040
|
# @option params [String] :next_token
|
1040
1041
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -1087,7 +1088,7 @@ module Aws::ConfigService
|
|
1087
1088
|
#
|
1088
1089
|
# @option params [Integer] :limit
|
1089
1090
|
# The maximum number of AggregationAuthorizations returned on each page.
|
1090
|
-
# The default is maximum. If you specify 0,
|
1091
|
+
# The default is maximum. If you specify 0, Config uses the default.
|
1091
1092
|
#
|
1092
1093
|
# @option params [String] :next_token
|
1093
1094
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -1125,35 +1126,34 @@ module Aws::ConfigService
|
|
1125
1126
|
req.send_request(options)
|
1126
1127
|
end
|
1127
1128
|
|
1128
|
-
# Indicates whether the specified
|
1129
|
-
#
|
1130
|
-
# that do not comply with the rule.
|
1129
|
+
# Indicates whether the specified Config rules are compliant. If a rule
|
1130
|
+
# is noncompliant, this action returns the number of Amazon Web Services
|
1131
|
+
# resources that do not comply with the rule.
|
1131
1132
|
#
|
1132
1133
|
# A rule is compliant if all of the evaluated resources comply with it.
|
1133
1134
|
# It is noncompliant if any of these resources do not comply.
|
1134
1135
|
#
|
1135
|
-
# If
|
1136
|
-
#
|
1137
|
-
#
|
1136
|
+
# If Config has no current evaluation results for the rule, it returns
|
1137
|
+
# `INSUFFICIENT_DATA`. This result might indicate one of the following
|
1138
|
+
# conditions:
|
1138
1139
|
#
|
1139
|
-
# *
|
1140
|
+
# * Config has never invoked an evaluation for the rule. To check
|
1140
1141
|
# whether it has, use the `DescribeConfigRuleEvaluationStatus` action
|
1141
1142
|
# to get the `LastSuccessfulInvocationTime` and
|
1142
1143
|
# `LastFailedInvocationTime`.
|
1143
1144
|
#
|
1144
|
-
# * The rule's
|
1145
|
-
#
|
1146
|
-
#
|
1147
|
-
#
|
1148
|
-
#
|
1145
|
+
# * The rule's Lambda function is failing to send evaluation results to
|
1146
|
+
# Config. Verify that the role you assigned to your configuration
|
1147
|
+
# recorder includes the `config:PutEvaluations` permission. If the
|
1148
|
+
# rule is a custom rule, verify that the Lambda execution role
|
1149
|
+
# includes the `config:PutEvaluations` permission.
|
1149
1150
|
#
|
1150
|
-
# * The rule's
|
1151
|
-
#
|
1152
|
-
#
|
1151
|
+
# * The rule's Lambda function has returned `NOT_APPLICABLE` for all
|
1152
|
+
# evaluation results. This can occur if the resources were deleted or
|
1153
|
+
# removed from the rule's scope.
|
1153
1154
|
#
|
1154
1155
|
# @option params [Array<String>] :config_rule_names
|
1155
|
-
# Specify one or more
|
1156
|
-
# rule.
|
1156
|
+
# Specify one or more Config rule names to filter the results by rule.
|
1157
1157
|
#
|
1158
1158
|
# @option params [Array<String>] :compliance_types
|
1159
1159
|
# Filters the results by compliance.
|
@@ -1197,43 +1197,44 @@ module Aws::ConfigService
|
|
1197
1197
|
req.send_request(options)
|
1198
1198
|
end
|
1199
1199
|
|
1200
|
-
# Indicates whether the specified
|
1201
|
-
# resource is noncompliant, this action returns the
|
1202
|
-
# rules that the resource does not comply with.
|
1200
|
+
# Indicates whether the specified Amazon Web Services resources are
|
1201
|
+
# compliant. If a resource is noncompliant, this action returns the
|
1202
|
+
# number of Config rules that the resource does not comply with.
|
1203
1203
|
#
|
1204
|
-
# A resource is compliant if it complies with all the
|
1205
|
-
#
|
1206
|
-
#
|
1204
|
+
# A resource is compliant if it complies with all the Config rules that
|
1205
|
+
# evaluate it. It is noncompliant if it does not comply with one or more
|
1206
|
+
# of these rules.
|
1207
1207
|
#
|
1208
|
-
# If
|
1208
|
+
# If Config has no current evaluation results for the resource, it
|
1209
1209
|
# returns `INSUFFICIENT_DATA`. This result might indicate one of the
|
1210
1210
|
# following conditions about the rules that evaluate the resource:
|
1211
1211
|
#
|
1212
|
-
# *
|
1212
|
+
# * Config has never invoked an evaluation for the rule. To check
|
1213
1213
|
# whether it has, use the `DescribeConfigRuleEvaluationStatus` action
|
1214
1214
|
# to get the `LastSuccessfulInvocationTime` and
|
1215
1215
|
# `LastFailedInvocationTime`.
|
1216
1216
|
#
|
1217
|
-
# * The rule's
|
1218
|
-
#
|
1219
|
-
#
|
1220
|
-
#
|
1221
|
-
#
|
1217
|
+
# * The rule's Lambda function is failing to send evaluation results to
|
1218
|
+
# Config. Verify that the role that you assigned to your configuration
|
1219
|
+
# recorder includes the `config:PutEvaluations` permission. If the
|
1220
|
+
# rule is a custom rule, verify that the Lambda execution role
|
1221
|
+
# includes the `config:PutEvaluations` permission.
|
1222
1222
|
#
|
1223
|
-
# * The rule's
|
1224
|
-
#
|
1225
|
-
#
|
1223
|
+
# * The rule's Lambda function has returned `NOT_APPLICABLE` for all
|
1224
|
+
# evaluation results. This can occur if the resources were deleted or
|
1225
|
+
# removed from the rule's scope.
|
1226
1226
|
#
|
1227
1227
|
# @option params [String] :resource_type
|
1228
|
-
# The types of
|
1229
|
-
# (for example, `AWS::EC2::Instance`). For this
|
1230
|
-
# that the resource type is an
|
1231
|
-
# `AWS::::Account`.
|
1228
|
+
# The types of Amazon Web Services resources for which you want
|
1229
|
+
# compliance information (for example, `AWS::EC2::Instance`). For this
|
1230
|
+
# action, you can specify that the resource type is an Amazon Web
|
1231
|
+
# Services account by specifying `AWS::::Account`.
|
1232
1232
|
#
|
1233
1233
|
# @option params [String] :resource_id
|
1234
|
-
# The ID of the
|
1235
|
-
# You can specify only one resource ID. If you
|
1236
|
-
# you must also specify a type for
|
1234
|
+
# The ID of the Amazon Web Services resource for which you want
|
1235
|
+
# compliance information. You can specify only one resource ID. If you
|
1236
|
+
# specify a resource ID, you must also specify a type for
|
1237
|
+
# `ResourceType`.
|
1237
1238
|
#
|
1238
1239
|
# @option params [Array<String>] :compliance_types
|
1239
1240
|
# Filters the results by compliance.
|
@@ -1244,7 +1245,7 @@ module Aws::ConfigService
|
|
1244
1245
|
# @option params [Integer] :limit
|
1245
1246
|
# The maximum number of evaluation results returned on each page. The
|
1246
1247
|
# default is 10. You cannot specify a number greater than 100. If you
|
1247
|
-
# specify 0,
|
1248
|
+
# specify 0, Config uses the default.
|
1248
1249
|
#
|
1249
1250
|
# @option params [String] :next_token
|
1250
1251
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -1286,15 +1287,15 @@ module Aws::ConfigService
|
|
1286
1287
|
req.send_request(options)
|
1287
1288
|
end
|
1288
1289
|
|
1289
|
-
# Returns status information for each of your
|
1290
|
-
#
|
1291
|
-
#
|
1292
|
-
#
|
1290
|
+
# Returns status information for each of your Config managed rules. The
|
1291
|
+
# status includes information such as the last time Config invoked the
|
1292
|
+
# rule, the last time Config failed to invoke the rule, and the related
|
1293
|
+
# error for the last failure.
|
1293
1294
|
#
|
1294
1295
|
# @option params [Array<String>] :config_rule_names
|
1295
|
-
# The name of the
|
1296
|
-
# information. If you do not specify any names,
|
1297
|
-
#
|
1296
|
+
# The name of the Config managed rules for which you want status
|
1297
|
+
# information. If you do not specify any names, Config returns status
|
1298
|
+
# information for all Config managed rules that you use.
|
1298
1299
|
#
|
1299
1300
|
# @option params [String] :next_token
|
1300
1301
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -1306,8 +1307,8 @@ module Aws::ConfigService
|
|
1306
1307
|
# This parameter is required if the rule limit for your account is more
|
1307
1308
|
# than the default of 150 rules.
|
1308
1309
|
#
|
1309
|
-
# For information about requesting a rule limit increase, see [
|
1310
|
-
#
|
1310
|
+
# For information about requesting a rule limit increase, see [Config
|
1311
|
+
# Limits][1] in the *Amazon Web Services General Reference Guide*.
|
1311
1312
|
#
|
1312
1313
|
#
|
1313
1314
|
#
|
@@ -1354,12 +1355,11 @@ module Aws::ConfigService
|
|
1354
1355
|
req.send_request(options)
|
1355
1356
|
end
|
1356
1357
|
|
1357
|
-
# Returns details about your
|
1358
|
+
# Returns details about your Config rules.
|
1358
1359
|
#
|
1359
1360
|
# @option params [Array<String>] :config_rule_names
|
1360
|
-
# The names of the
|
1361
|
-
#
|
1362
|
-
# rules.
|
1361
|
+
# The names of the Config rules for which you want details. If you do
|
1362
|
+
# not specify any names, Config returns details for all your rules.
|
1363
1363
|
#
|
1364
1364
|
# @option params [String] :next_token
|
1365
1365
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -1413,7 +1413,7 @@ module Aws::ConfigService
|
|
1413
1413
|
end
|
1414
1414
|
|
1415
1415
|
# Returns status information for sources within an aggregator. The
|
1416
|
-
# status includes information about the last time
|
1416
|
+
# status includes information about the last time Config verified
|
1417
1417
|
# authorization between the source account and an aggregator account. In
|
1418
1418
|
# case of a failure, the status contains the related error code or
|
1419
1419
|
# message.
|
@@ -1436,7 +1436,7 @@ module Aws::ConfigService
|
|
1436
1436
|
#
|
1437
1437
|
# @option params [Integer] :limit
|
1438
1438
|
# The maximum number of AggregatorSourceStatus returned on each page.
|
1439
|
-
# The default is maximum. If you specify 0,
|
1439
|
+
# The default is maximum. If you specify 0, Config uses the default.
|
1440
1440
|
#
|
1441
1441
|
# @return [Types::DescribeConfigurationAggregatorSourcesStatusResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1442
1442
|
#
|
@@ -1489,7 +1489,7 @@ module Aws::ConfigService
|
|
1489
1489
|
#
|
1490
1490
|
# @option params [Integer] :limit
|
1491
1491
|
# The maximum number of configuration aggregators returned on each page.
|
1492
|
-
# The default is maximum. If you specify 0,
|
1492
|
+
# The default is maximum. If you specify 0, Config uses the default.
|
1493
1493
|
#
|
1494
1494
|
# @return [Types::DescribeConfigurationAggregatorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1495
1495
|
#
|
@@ -1634,7 +1634,7 @@ module Aws::ConfigService
|
|
1634
1634
|
# A `ConformancePackComplianceFilters` object.
|
1635
1635
|
#
|
1636
1636
|
# @option params [Integer] :limit
|
1637
|
-
# The maximum number of
|
1637
|
+
# The maximum number of Config rules within a conformance pack are
|
1638
1638
|
# returned on each page.
|
1639
1639
|
#
|
1640
1640
|
# @option params [String] :next_token
|
@@ -1737,8 +1737,8 @@ module Aws::ConfigService
|
|
1737
1737
|
#
|
1738
1738
|
# @option params [Array<String>] :conformance_pack_names
|
1739
1739
|
# Comma-separated list of conformance pack names for which you want
|
1740
|
-
# details. If you do not specify any names,
|
1741
|
-
#
|
1740
|
+
# details. If you do not specify any names, Config returns details for
|
1741
|
+
# all your conformance packs.
|
1742
1742
|
#
|
1743
1743
|
# @option params [Integer] :limit
|
1744
1744
|
# The maximum number of conformance packs returned on each page.
|
@@ -1895,13 +1895,13 @@ module Aws::ConfigService
|
|
1895
1895
|
#
|
1896
1896
|
# @option params [Array<String>] :organization_config_rule_names
|
1897
1897
|
# The names of organization config rules for which you want status
|
1898
|
-
# details. If you do not specify any names,
|
1899
|
-
#
|
1898
|
+
# details. If you do not specify any names, Config returns details for
|
1899
|
+
# all your organization Config rules.
|
1900
1900
|
#
|
1901
1901
|
# @option params [Integer] :limit
|
1902
1902
|
# The maximum number of `OrganizationConfigRuleStatuses` returned on
|
1903
|
-
# each page. If you do no specify a number,
|
1904
|
-
#
|
1903
|
+
# each page. If you do no specify a number, Config uses the default. The
|
1904
|
+
# default is 100.
|
1905
1905
|
#
|
1906
1906
|
# @option params [String] :next_token
|
1907
1907
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -1952,13 +1952,13 @@ module Aws::ConfigService
|
|
1952
1952
|
#
|
1953
1953
|
# @option params [Array<String>] :organization_config_rule_names
|
1954
1954
|
# The names of organization config rules for which you want details. If
|
1955
|
-
# you do not specify any names,
|
1955
|
+
# you do not specify any names, Config returns details for all your
|
1956
1956
|
# organization config rules.
|
1957
1957
|
#
|
1958
1958
|
# @option params [Integer] :limit
|
1959
1959
|
# The maximum number of organization config rules returned on each page.
|
1960
|
-
# If you do no specify a number,
|
1961
|
-
#
|
1960
|
+
# If you do no specify a number, Config uses the default. The default is
|
1961
|
+
# 100.
|
1962
1962
|
#
|
1963
1963
|
# @option params [String] :next_token
|
1964
1964
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -2034,13 +2034,13 @@ module Aws::ConfigService
|
|
2034
2034
|
#
|
2035
2035
|
# @option params [Array<String>] :organization_conformance_pack_names
|
2036
2036
|
# The names of organization conformance packs for which you want status
|
2037
|
-
# details. If you do not specify any names,
|
2038
|
-
#
|
2037
|
+
# details. If you do not specify any names, Config returns details for
|
2038
|
+
# all your organization conformance packs.
|
2039
2039
|
#
|
2040
2040
|
# @option params [Integer] :limit
|
2041
2041
|
# The maximum number of OrganizationConformancePackStatuses returned on
|
2042
|
-
# each page. If you do no specify a number,
|
2043
|
-
#
|
2042
|
+
# each page. If you do no specify a number, Config uses the default. The
|
2043
|
+
# default is 100.
|
2044
2044
|
#
|
2045
2045
|
# @option params [String] :next_token
|
2046
2046
|
# The nextToken string returned on a previous page that you use to get
|
@@ -2096,8 +2096,8 @@ module Aws::ConfigService
|
|
2096
2096
|
#
|
2097
2097
|
# @option params [Integer] :limit
|
2098
2098
|
# The maximum number of organization config packs returned on each page.
|
2099
|
-
# If you do no specify a number,
|
2100
|
-
#
|
2099
|
+
# If you do no specify a number, Config uses the default. The default is
|
2100
|
+
# 100.
|
2101
2101
|
#
|
2102
2102
|
# @option params [String] :next_token
|
2103
2103
|
# The nextToken string returned on a previous page that you use to get
|
@@ -2146,7 +2146,7 @@ module Aws::ConfigService
|
|
2146
2146
|
#
|
2147
2147
|
# @option params [Integer] :limit
|
2148
2148
|
# The maximum number of evaluation results returned on each page. The
|
2149
|
-
# default is maximum. If you specify 0,
|
2149
|
+
# default is maximum. If you specify 0, Config uses the default.
|
2150
2150
|
#
|
2151
2151
|
# @option params [String] :next_token
|
2152
2152
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -2185,8 +2185,8 @@ module Aws::ConfigService
|
|
2185
2185
|
# Returns the details of one or more remediation configurations.
|
2186
2186
|
#
|
2187
2187
|
# @option params [required, Array<String>] :config_rule_names
|
2188
|
-
# A list of
|
2189
|
-
#
|
2188
|
+
# A list of Config rule names of remediation configurations for which
|
2189
|
+
# you want details.
|
2190
2190
|
#
|
2191
2191
|
# @return [Types::DescribeRemediationConfigurationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
2192
2192
|
#
|
@@ -2233,7 +2233,7 @@ module Aws::ConfigService
|
|
2233
2233
|
# deleted. When you specify the limit and the next token, you receive a
|
2234
2234
|
# paginated response.
|
2235
2235
|
#
|
2236
|
-
# <note markdown="1">
|
2236
|
+
# <note markdown="1"> Config generates a remediation exception when a problem occurs
|
2237
2237
|
# executing a remediation action to a specific resource. Remediation
|
2238
2238
|
# exceptions blocks auto-remediation until the exception is cleared.
|
2239
2239
|
#
|
@@ -2246,17 +2246,16 @@ module Aws::ConfigService
|
|
2246
2246
|
# </note>
|
2247
2247
|
#
|
2248
2248
|
# @option params [required, String] :config_rule_name
|
2249
|
-
# The name of the
|
2249
|
+
# The name of the Config rule.
|
2250
2250
|
#
|
2251
2251
|
# @option params [Array<Types::RemediationExceptionResourceKey>] :resource_keys
|
2252
2252
|
# An exception list of resource exception keys to be processed with the
|
2253
|
-
# current request.
|
2254
|
-
# example,
|
2253
|
+
# current request. Config adds exception for each resource key. For
|
2254
|
+
# example, Config adds 3 exceptions for 3 resource keys.
|
2255
2255
|
#
|
2256
2256
|
# @option params [Integer] :limit
|
2257
2257
|
# The maximum number of RemediationExceptionResourceKey returned on each
|
2258
|
-
# page. The default is 25. If you specify 0,
|
2259
|
-
# default.
|
2258
|
+
# page. The default is 25. If you specify 0, Config uses the default.
|
2260
2259
|
#
|
2261
2260
|
# @option params [String] :next_token
|
2262
2261
|
# The `nextToken` string returned in a previous request that you use to
|
@@ -2309,7 +2308,7 @@ module Aws::ConfigService
|
|
2309
2308
|
# receive a paginated response.
|
2310
2309
|
#
|
2311
2310
|
# @option params [required, String] :config_rule_name
|
2312
|
-
# A list of
|
2311
|
+
# A list of Config rule names.
|
2313
2312
|
#
|
2314
2313
|
# @option params [Array<Types::ResourceKey>] :resource_keys
|
2315
2314
|
# A list of resource keys to be processed with the current request. Each
|
@@ -2317,7 +2316,7 @@ module Aws::ConfigService
|
|
2317
2316
|
#
|
2318
2317
|
# @option params [Integer] :limit
|
2319
2318
|
# The maximum number of RemediationExecutionStatuses returned on each
|
2320
|
-
# page. The default is maximum. If you specify 0,
|
2319
|
+
# page. The default is maximum. If you specify 0, Config uses the
|
2321
2320
|
# default.
|
2322
2321
|
#
|
2323
2322
|
# @option params [String] :next_token
|
@@ -2374,18 +2373,18 @@ module Aws::ConfigService
|
|
2374
2373
|
# retention configuration name is not specified, this action returns the
|
2375
2374
|
# details for all the retention configurations for that account.
|
2376
2375
|
#
|
2377
|
-
# <note markdown="1"> Currently,
|
2378
|
-
#
|
2376
|
+
# <note markdown="1"> Currently, Config supports only one retention configuration per region
|
2377
|
+
# in your account.
|
2379
2378
|
#
|
2380
2379
|
# </note>
|
2381
2380
|
#
|
2382
2381
|
# @option params [Array<String>] :retention_configuration_names
|
2383
2382
|
# A list of names of retention configurations for which you want
|
2384
|
-
# details. If you do not specify a name,
|
2385
|
-
#
|
2383
|
+
# details. If you do not specify a name, Config returns details for all
|
2384
|
+
# the retention configurations for that account.
|
2386
2385
|
#
|
2387
|
-
# <note markdown="1"> Currently,
|
2388
|
-
#
|
2386
|
+
# <note markdown="1"> Currently, Config supports only one retention configuration per region
|
2387
|
+
# in your account.
|
2389
2388
|
#
|
2390
2389
|
# </note>
|
2391
2390
|
#
|
@@ -2423,10 +2422,10 @@ module Aws::ConfigService
|
|
2423
2422
|
req.send_request(options)
|
2424
2423
|
end
|
2425
2424
|
|
2426
|
-
# Returns the evaluation results for the specified
|
2427
|
-
# specific resource in a rule. The results indicate which
|
2428
|
-
# were evaluated by the rule, when each resource was
|
2429
|
-
# whether each resource complies with the rule.
|
2425
|
+
# Returns the evaluation results for the specified Config rule for a
|
2426
|
+
# specific resource in a rule. The results indicate which Amazon Web
|
2427
|
+
# Services resources were evaluated by the rule, when each resource was
|
2428
|
+
# last evaluated, and whether each resource complies with the rule.
|
2430
2429
|
#
|
2431
2430
|
# <note markdown="1"> The results can return an empty result page. But if you have a
|
2432
2431
|
# `nextToken`, the results are displayed on the next page.
|
@@ -2437,8 +2436,7 @@ module Aws::ConfigService
|
|
2437
2436
|
# The name of the configuration aggregator.
|
2438
2437
|
#
|
2439
2438
|
# @option params [required, String] :config_rule_name
|
2440
|
-
# The name of the
|
2441
|
-
# information.
|
2439
|
+
# The name of the Config rule for which you want compliance information.
|
2442
2440
|
#
|
2443
2441
|
# @option params [required, String] :account_id
|
2444
2442
|
# The 12-digit account ID of the source account.
|
@@ -2450,16 +2448,15 @@ module Aws::ConfigService
|
|
2450
2448
|
# The resource compliance status.
|
2451
2449
|
#
|
2452
2450
|
# <note markdown="1"> For the `GetAggregateComplianceDetailsByConfigRuleRequest` data type,
|
2453
|
-
#
|
2454
|
-
#
|
2455
|
-
# values.
|
2451
|
+
# Config supports only the `COMPLIANT` and `NON_COMPLIANT`. Config does
|
2452
|
+
# not support the `NOT_APPLICABLE` and `INSUFFICIENT_DATA` values.
|
2456
2453
|
#
|
2457
2454
|
# </note>
|
2458
2455
|
#
|
2459
2456
|
# @option params [Integer] :limit
|
2460
2457
|
# The maximum number of evaluation results returned on each page. The
|
2461
2458
|
# default is 50. You cannot specify a number greater than 100. If you
|
2462
|
-
# specify 0,
|
2459
|
+
# specify 0, Config uses the default.
|
2463
2460
|
#
|
2464
2461
|
# @option params [String] :next_token
|
2465
2462
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -2529,7 +2526,7 @@ module Aws::ConfigService
|
|
2529
2526
|
# @option params [Integer] :limit
|
2530
2527
|
# The maximum number of evaluation results returned on each page. The
|
2531
2528
|
# default is 1000. You cannot specify a number greater than 1000. If you
|
2532
|
-
# specify 0,
|
2529
|
+
# specify 0, Config uses the default.
|
2533
2530
|
#
|
2534
2531
|
# @option params [String] :next_token
|
2535
2532
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -2578,8 +2575,9 @@ module Aws::ConfigService
|
|
2578
2575
|
end
|
2579
2576
|
|
2580
2577
|
# Returns the count of compliant and noncompliant conformance packs
|
2581
|
-
# across all
|
2582
|
-
# filter based on
|
2578
|
+
# across all Amazon Web Services accounts and Amazon Web Services
|
2579
|
+
# Regions in an aggregator. You can filter based on Amazon Web Services
|
2580
|
+
# account ID or Amazon Web Services Region.
|
2583
2581
|
#
|
2584
2582
|
# <note markdown="1"> The results can return an empty result page, but if you have a
|
2585
2583
|
# nextToken, the results are displayed on the next page.
|
@@ -2594,11 +2592,12 @@ module Aws::ConfigService
|
|
2594
2592
|
# `AggregateConformancePackComplianceSummaryFilters` object.
|
2595
2593
|
#
|
2596
2594
|
# @option params [String] :group_by_key
|
2597
|
-
# Groups the result based on
|
2595
|
+
# Groups the result based on Amazon Web Services account ID or Amazon
|
2596
|
+
# Web Services Region.
|
2598
2597
|
#
|
2599
2598
|
# @option params [Integer] :limit
|
2600
2599
|
# The maximum number of results returned on each page. The default is
|
2601
|
-
# maximum. If you specify 0,
|
2600
|
+
# maximum. If you specify 0, Config uses the default.
|
2602
2601
|
#
|
2603
2602
|
# @option params [String] :next_token
|
2604
2603
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -2644,8 +2643,8 @@ module Aws::ConfigService
|
|
2644
2643
|
end
|
2645
2644
|
|
2646
2645
|
# Returns the resource counts across accounts and regions that are
|
2647
|
-
# present in your
|
2648
|
-
#
|
2646
|
+
# present in your Config aggregator. You can request the resource counts
|
2647
|
+
# by providing filters and GroupByKey.
|
2649
2648
|
#
|
2650
2649
|
# For example, if the input contains accountID 12345678910 and region
|
2651
2650
|
# us-east-1 in filters, the API returns the count of resources in
|
@@ -2665,7 +2664,7 @@ module Aws::ConfigService
|
|
2665
2664
|
# @option params [Integer] :limit
|
2666
2665
|
# The maximum number of GroupedResourceCount objects returned on each
|
2667
2666
|
# page. The default is 1000. You cannot specify a number greater than
|
2668
|
-
# 1000. If you specify 0,
|
2667
|
+
# 1000. If you specify 0, Config uses the default.
|
2669
2668
|
#
|
2670
2669
|
# @option params [String] :next_token
|
2671
2670
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -2775,14 +2774,13 @@ module Aws::ConfigService
|
|
2775
2774
|
req.send_request(options)
|
2776
2775
|
end
|
2777
2776
|
|
2778
|
-
# Returns the evaluation results for the specified
|
2779
|
-
# results indicate which
|
2780
|
-
# each resource was last evaluated, and whether each
|
2781
|
-
# with the rule.
|
2777
|
+
# Returns the evaluation results for the specified Config rule. The
|
2778
|
+
# results indicate which Amazon Web Services resources were evaluated by
|
2779
|
+
# the rule, when each resource was last evaluated, and whether each
|
2780
|
+
# resource complies with the rule.
|
2782
2781
|
#
|
2783
2782
|
# @option params [required, String] :config_rule_name
|
2784
|
-
# The name of the
|
2785
|
-
# information.
|
2783
|
+
# The name of the Config rule for which you want compliance information.
|
2786
2784
|
#
|
2787
2785
|
# @option params [Array<String>] :compliance_types
|
2788
2786
|
# Filters the results by compliance.
|
@@ -2793,7 +2791,7 @@ module Aws::ConfigService
|
|
2793
2791
|
# @option params [Integer] :limit
|
2794
2792
|
# The maximum number of evaluation results returned on each page. The
|
2795
2793
|
# default is 10. You cannot specify a number greater than 100. If you
|
2796
|
-
# specify 0,
|
2794
|
+
# specify 0, Config uses the default.
|
2797
2795
|
#
|
2798
2796
|
# @option params [String] :next_token
|
2799
2797
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -2838,17 +2836,18 @@ module Aws::ConfigService
|
|
2838
2836
|
req.send_request(options)
|
2839
2837
|
end
|
2840
2838
|
|
2841
|
-
# Returns the evaluation results for the specified
|
2842
|
-
# results indicate which
|
2843
|
-
# resource, when each rule was last used, and whether the
|
2844
|
-
# complies with each rule.
|
2839
|
+
# Returns the evaluation results for the specified Amazon Web Services
|
2840
|
+
# resource. The results indicate which Config rules were used to
|
2841
|
+
# evaluate the resource, when each rule was last used, and whether the
|
2842
|
+
# resource complies with each rule.
|
2845
2843
|
#
|
2846
2844
|
# @option params [required, String] :resource_type
|
2847
|
-
# The type of the
|
2848
|
-
# information.
|
2845
|
+
# The type of the Amazon Web Services resource for which you want
|
2846
|
+
# compliance information.
|
2849
2847
|
#
|
2850
2848
|
# @option params [required, String] :resource_id
|
2851
|
-
# The ID of the
|
2849
|
+
# The ID of the Amazon Web Services resource for which you want
|
2850
|
+
# compliance information.
|
2852
2851
|
#
|
2853
2852
|
# @option params [Array<String>] :compliance_types
|
2854
2853
|
# Filters the results by compliance.
|
@@ -2899,7 +2898,7 @@ module Aws::ConfigService
|
|
2899
2898
|
req.send_request(options)
|
2900
2899
|
end
|
2901
2900
|
|
2902
|
-
# Returns the number of
|
2901
|
+
# Returns the number of Config rules that are compliant and
|
2903
2902
|
# noncompliant, up to a maximum of 25 for each.
|
2904
2903
|
#
|
2905
2904
|
# @return [Types::GetComplianceSummaryByConfigRuleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
@@ -2933,9 +2932,9 @@ module Aws::ConfigService
|
|
2933
2932
|
# are compliant and the number that are noncompliant for each resource
|
2934
2933
|
# type.
|
2935
2934
|
#
|
2936
|
-
# For this request, you can specify an
|
2937
|
-
# `AWS::EC2::Instance`. You can specify that the resource type
|
2938
|
-
# account by specifying `AWS::::Account`.
|
2935
|
+
# For this request, you can specify an Amazon Web Services resource type
|
2936
|
+
# such as `AWS::EC2::Instance`. You can specify that the resource type
|
2937
|
+
# is an Amazon Web Services account by specifying `AWS::::Account`.
|
2939
2938
|
#
|
2940
2939
|
# @return [Types::GetComplianceSummaryByResourceTypeResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
2941
2940
|
#
|
@@ -2966,8 +2965,8 @@ module Aws::ConfigService
|
|
2966
2965
|
req.send_request(options)
|
2967
2966
|
end
|
2968
2967
|
|
2969
|
-
# Returns compliance details of a conformance pack for all
|
2970
|
-
# that are monitered by conformance pack.
|
2968
|
+
# Returns compliance details of a conformance pack for all Amazon Web
|
2969
|
+
# Services resources that are monitered by conformance pack.
|
2971
2970
|
#
|
2972
2971
|
# @option params [required, String] :conformance_pack_name
|
2973
2972
|
# Name of the conformance pack.
|
@@ -2977,8 +2976,7 @@ module Aws::ConfigService
|
|
2977
2976
|
#
|
2978
2977
|
# @option params [Integer] :limit
|
2979
2978
|
# The maximum number of evaluation results returned on each page. If you
|
2980
|
-
# do no specify a number,
|
2981
|
-
# 100.
|
2979
|
+
# do no specify a number, Config uses the default. The default is 100.
|
2982
2980
|
#
|
2983
2981
|
# @option params [String] :next_token
|
2984
2982
|
# The `nextToken` string returned in a previous request that you use to
|
@@ -3075,19 +3073,19 @@ module Aws::ConfigService
|
|
3075
3073
|
end
|
3076
3074
|
|
3077
3075
|
# Returns the resource types, the number of each resource type, and the
|
3078
|
-
# total number of resources that
|
3079
|
-
#
|
3076
|
+
# total number of resources that Config is recording in this region for
|
3077
|
+
# your Amazon Web Services account.
|
3080
3078
|
#
|
3081
3079
|
# **Example**
|
3082
3080
|
#
|
3083
|
-
# 1.
|
3081
|
+
# 1. Config is recording three resource types in the US East (Ohio)
|
3084
3082
|
# Region for your account: 25 EC2 instances, 20 IAM users, and 15 S3
|
3085
3083
|
# buckets.
|
3086
3084
|
#
|
3087
3085
|
# 2. You make a call to the `GetDiscoveredResourceCounts` action and
|
3088
3086
|
# specify that you want all resource types.
|
3089
3087
|
#
|
3090
|
-
# 3.
|
3088
|
+
# 3. Config returns the following:
|
3091
3089
|
#
|
3092
3090
|
# * The resource types (EC2 instances, IAM users, and S3 buckets).
|
3093
3091
|
#
|
@@ -3095,21 +3093,21 @@ module Aws::ConfigService
|
|
3095
3093
|
#
|
3096
3094
|
# * The total number of all resources (60).
|
3097
3095
|
#
|
3098
|
-
# The response is paginated. By default,
|
3099
|
-
#
|
3100
|
-
#
|
3101
|
-
#
|
3102
|
-
#
|
3096
|
+
# The response is paginated. By default, Config lists 100 ResourceCount
|
3097
|
+
# objects on each page. You can customize this number with the `limit`
|
3098
|
+
# parameter. The response includes a `nextToken` string. To get the next
|
3099
|
+
# page of results, run the request again and specify the string for the
|
3100
|
+
# `nextToken` parameter.
|
3103
3101
|
#
|
3104
3102
|
# <note markdown="1"> If you make a call to the GetDiscoveredResourceCounts action, you
|
3105
3103
|
# might not immediately receive resource counts in the following
|
3106
3104
|
# situations:
|
3107
3105
|
#
|
3108
|
-
# * You are a new
|
3106
|
+
# * You are a new Config customer.
|
3109
3107
|
#
|
3110
3108
|
# * You just enabled resource recording.
|
3111
3109
|
#
|
3112
|
-
# It might take a few minutes for
|
3110
|
+
# It might take a few minutes for Config to record and count your
|
3113
3111
|
# resources. Wait a few minutes and then retry the
|
3114
3112
|
# GetDiscoveredResourceCounts action.
|
3115
3113
|
#
|
@@ -3117,16 +3115,16 @@ module Aws::ConfigService
|
|
3117
3115
|
#
|
3118
3116
|
# @option params [Array<String>] :resource_types
|
3119
3117
|
# The comma-separated list that specifies the resource types that you
|
3120
|
-
# want
|
3118
|
+
# want Config to return (for example, `"AWS::EC2::Instance"`,
|
3121
3119
|
# `"AWS::IAM::User"`).
|
3122
3120
|
#
|
3123
|
-
# If a value for `resourceTypes` is not specified,
|
3124
|
-
#
|
3121
|
+
# If a value for `resourceTypes` is not specified, Config returns all
|
3122
|
+
# resource types that Config is recording in the region for your
|
3125
3123
|
# account.
|
3126
3124
|
#
|
3127
|
-
# <note markdown="1"> If the configuration recorder is turned off,
|
3128
|
-
#
|
3129
|
-
#
|
3125
|
+
# <note markdown="1"> If the configuration recorder is turned off, Config returns an empty
|
3126
|
+
# list of ResourceCount objects. If the configuration recorder is not
|
3127
|
+
# recording a specific resource type (for example, S3 buckets), that
|
3130
3128
|
# resource type is not returned in the list of ResourceCount objects.
|
3131
3129
|
#
|
3132
3130
|
# </note>
|
@@ -3134,7 +3132,7 @@ module Aws::ConfigService
|
|
3134
3132
|
# @option params [Integer] :limit
|
3135
3133
|
# The maximum number of ResourceCount objects returned on each page. The
|
3136
3134
|
# default is 100. You cannot specify a number greater than 100. If you
|
3137
|
-
# specify 0,
|
3135
|
+
# specify 0, Config uses the default.
|
3138
3136
|
#
|
3139
3137
|
# @option params [String] :next_token
|
3140
3138
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -3185,8 +3183,8 @@ module Aws::ConfigService
|
|
3185
3183
|
#
|
3186
3184
|
# @option params [Integer] :limit
|
3187
3185
|
# The maximum number of `OrganizationConfigRuleDetailedStatus` returned
|
3188
|
-
# on each page. If you do not specify a number,
|
3189
|
-
#
|
3186
|
+
# on each page. If you do not specify a number, Config uses the default.
|
3187
|
+
# The default is 100.
|
3190
3188
|
#
|
3191
3189
|
# @option params [String] :next_token
|
3192
3190
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -3243,8 +3241,8 @@ module Aws::ConfigService
|
|
3243
3241
|
#
|
3244
3242
|
# @option params [Integer] :limit
|
3245
3243
|
# The maximum number of `OrganizationConformancePackDetailedStatuses`
|
3246
|
-
# returned on each page. If you do not specify a number,
|
3247
|
-
#
|
3244
|
+
# returned on each page. If you do not specify a number, Config uses the
|
3245
|
+
# default. The default is 100.
|
3248
3246
|
#
|
3249
3247
|
# @option params [String] :next_token
|
3250
3248
|
# The nextToken string returned on a previous page that you use to get
|
@@ -3289,18 +3287,18 @@ module Aws::ConfigService
|
|
3289
3287
|
req.send_request(options)
|
3290
3288
|
end
|
3291
3289
|
|
3292
|
-
# Returns a list of
|
3290
|
+
# Returns a list of `ConfigurationItems` for the specified resource. The
|
3293
3291
|
# list contains details about each state of the resource during the
|
3294
3292
|
# specified time interval. If you specified a retention period to retain
|
3295
3293
|
# your `ConfigurationItems` between a minimum of 30 days and a maximum
|
3296
|
-
# of 7 years (2557 days),
|
3297
|
-
#
|
3294
|
+
# of 7 years (2557 days), Config returns the `ConfigurationItems` for
|
3295
|
+
# the specified retention period.
|
3298
3296
|
#
|
3299
|
-
# The response is paginated. By default,
|
3300
|
-
#
|
3301
|
-
#
|
3302
|
-
#
|
3303
|
-
#
|
3297
|
+
# The response is paginated. By default, Config returns a limit of 10
|
3298
|
+
# configuration items per page. You can customize this number with the
|
3299
|
+
# `limit` parameter. The response includes a `nextToken` string. To get
|
3300
|
+
# the next page of results, run the request again and specify the string
|
3301
|
+
# for the `nextToken` parameter.
|
3304
3302
|
#
|
3305
3303
|
# <note markdown="1"> Each call to the API is limited to span a duration of seven days. It
|
3306
3304
|
# is likely that the number of records returned is smaller than the
|
@@ -3331,7 +3329,7 @@ module Aws::ConfigService
|
|
3331
3329
|
# @option params [Integer] :limit
|
3332
3330
|
# The maximum number of configuration items returned on each page. The
|
3333
3331
|
# default is 10. You cannot specify a number greater than 100. If you
|
3334
|
-
# specify 0,
|
3332
|
+
# specify 0, Config uses the default.
|
3335
3333
|
#
|
3336
3334
|
# @option params [String] :next_token
|
3337
3335
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -3444,15 +3442,14 @@ module Aws::ConfigService
|
|
3444
3442
|
# The name of the configuration aggregator.
|
3445
3443
|
#
|
3446
3444
|
# @option params [required, String] :resource_type
|
3447
|
-
# The type of resources that you want
|
3448
|
-
# response.
|
3445
|
+
# The type of resources that you want Config to list in the response.
|
3449
3446
|
#
|
3450
3447
|
# @option params [Types::ResourceFilters] :filters
|
3451
3448
|
# Filters the results based on the `ResourceFilters` object.
|
3452
3449
|
#
|
3453
3450
|
# @option params [Integer] :limit
|
3454
3451
|
# The maximum number of resource identifiers returned on each page. You
|
3455
|
-
# cannot specify a number greater than 100. If you specify 0,
|
3452
|
+
# cannot specify a number greater than 100. If you specify 0, Config
|
3456
3453
|
# uses the default.
|
3457
3454
|
#
|
3458
3455
|
# @option params [String] :next_token
|
@@ -3503,8 +3500,8 @@ module Aws::ConfigService
|
|
3503
3500
|
# Accepts a resource type and returns a list of resource identifiers for
|
3504
3501
|
# the resources of that type. A resource identifier includes the
|
3505
3502
|
# resource type, ID, and (if available) the custom resource name. The
|
3506
|
-
# results consist of resources that
|
3507
|
-
# those that
|
3503
|
+
# results consist of resources that Config has discovered, including
|
3504
|
+
# those that Config is not currently recording. You can narrow the
|
3508
3505
|
# results to include only resources that have specific resource IDs or a
|
3509
3506
|
# resource name.
|
3510
3507
|
#
|
@@ -3513,34 +3510,33 @@ module Aws::ConfigService
|
|
3513
3510
|
#
|
3514
3511
|
# </note>
|
3515
3512
|
#
|
3516
|
-
# The response is paginated. By default,
|
3513
|
+
# The response is paginated. By default, Config lists 100 resource
|
3517
3514
|
# identifiers on each page. You can customize this number with the
|
3518
3515
|
# `limit` parameter. The response includes a `nextToken` string. To get
|
3519
3516
|
# the next page of results, run the request again and specify the string
|
3520
3517
|
# for the `nextToken` parameter.
|
3521
3518
|
#
|
3522
3519
|
# @option params [required, String] :resource_type
|
3523
|
-
# The type of resources that you want
|
3524
|
-
# response.
|
3520
|
+
# The type of resources that you want Config to list in the response.
|
3525
3521
|
#
|
3526
3522
|
# @option params [Array<String>] :resource_ids
|
3527
|
-
# The IDs of only those resources that you want
|
3528
|
-
#
|
3529
|
-
#
|
3523
|
+
# The IDs of only those resources that you want Config to list in the
|
3524
|
+
# response. If you do not specify this parameter, Config lists all
|
3525
|
+
# resources of the specified type that it has discovered.
|
3530
3526
|
#
|
3531
3527
|
# @option params [String] :resource_name
|
3532
|
-
# The custom name of only those resources that you want
|
3533
|
-
#
|
3534
|
-
#
|
3528
|
+
# The custom name of only those resources that you want Config to list
|
3529
|
+
# in the response. If you do not specify this parameter, Config lists
|
3530
|
+
# all resources of the specified type that it has discovered.
|
3535
3531
|
#
|
3536
3532
|
# @option params [Integer] :limit
|
3537
3533
|
# The maximum number of resource identifiers returned on each page. The
|
3538
3534
|
# default is 100. You cannot specify a number greater than 100. If you
|
3539
|
-
# specify 0,
|
3535
|
+
# specify 0, Config uses the default.
|
3540
3536
|
#
|
3541
3537
|
# @option params [Boolean] :include_deleted_resources
|
3542
|
-
# Specifies whether
|
3543
|
-
#
|
3538
|
+
# Specifies whether Config includes deleted resources in the results. By
|
3539
|
+
# default, deleted resources are not included.
|
3544
3540
|
#
|
3545
3541
|
# @option params [String] :next_token
|
3546
3542
|
# The `nextToken` string returned on a previous page that you use to get
|
@@ -3582,8 +3578,8 @@ module Aws::ConfigService
|
|
3582
3578
|
req.send_request(options)
|
3583
3579
|
end
|
3584
3580
|
|
3585
|
-
# Lists the stored queries for a single
|
3586
|
-
# Region. The default is 100.
|
3581
|
+
# Lists the stored queries for a single Amazon Web Services account and
|
3582
|
+
# a single Amazon Web Services Region. The default is 100.
|
3587
3583
|
#
|
3588
3584
|
# @option params [String] :next_token
|
3589
3585
|
# The nextToken string returned in a previous request that you use to
|
@@ -3624,7 +3620,7 @@ module Aws::ConfigService
|
|
3624
3620
|
req.send_request(options)
|
3625
3621
|
end
|
3626
3622
|
|
3627
|
-
# List the tags for
|
3623
|
+
# List the tags for Config resource.
|
3628
3624
|
#
|
3629
3625
|
# @option params [required, String] :resource_arn
|
3630
3626
|
# The Amazon Resource Name (ARN) that identifies the resource for which
|
@@ -3633,7 +3629,7 @@ module Aws::ConfigService
|
|
3633
3629
|
#
|
3634
3630
|
# @option params [Integer] :limit
|
3635
3631
|
# The maximum number of tags returned on each page. The limit maximum is
|
3636
|
-
# 50. You cannot specify a number greater than 50. If you specify 0,
|
3632
|
+
# 50. You cannot specify a number greater than 50. If you specify 0,
|
3637
3633
|
# Config uses the default.
|
3638
3634
|
#
|
3639
3635
|
# @option params [String] :next_token
|
@@ -3716,43 +3712,41 @@ module Aws::ConfigService
|
|
3716
3712
|
req.send_request(options)
|
3717
3713
|
end
|
3718
3714
|
|
3719
|
-
# Adds or updates an
|
3720
|
-
# resources comply with your desired configurations.
|
3721
|
-
#
|
3722
|
-
# You can use this action for custom
|
3723
|
-
#
|
3724
|
-
#
|
3725
|
-
#
|
3726
|
-
#
|
3727
|
-
# If you are adding a new custom
|
3728
|
-
#
|
3729
|
-
#
|
3730
|
-
#
|
3731
|
-
#
|
3732
|
-
# `
|
3733
|
-
#
|
3734
|
-
#
|
3735
|
-
#
|
3736
|
-
#
|
3737
|
-
# Config rule identifiers, see [About AWS Managed Config Rules][1].
|
3715
|
+
# Adds or updates an Config rule for evaluating whether your Amazon Web
|
3716
|
+
# Services resources comply with your desired configurations.
|
3717
|
+
#
|
3718
|
+
# You can use this action for custom Config rules and Config managed
|
3719
|
+
# rules. A custom Config rule is a rule that you develop and maintain.
|
3720
|
+
# An Config managed rule is a customizable, predefined rule that Config
|
3721
|
+
# provides.
|
3722
|
+
#
|
3723
|
+
# If you are adding a new custom Config rule, you must first create the
|
3724
|
+
# Lambda function that the rule invokes to evaluate your resources. When
|
3725
|
+
# you use the `PutConfigRule` action to add the rule to Config, you must
|
3726
|
+
# specify the Amazon Resource Name (ARN) that Lambda assigns to the
|
3727
|
+
# function. Specify the ARN for the `SourceIdentifier` key. This key is
|
3728
|
+
# part of the `Source` object, which is part of the `ConfigRule` object.
|
3729
|
+
#
|
3730
|
+
# If you are adding an Config managed rule, specify the rule's
|
3731
|
+
# identifier for the `SourceIdentifier` key. To reference Config managed
|
3732
|
+
# rule identifiers, see [About Config managed rules][1].
|
3738
3733
|
#
|
3739
3734
|
# For any new rule that you add, specify the `ConfigRuleName` in the
|
3740
3735
|
# `ConfigRule` object. Do not specify the `ConfigRuleArn` or the
|
3741
|
-
# `ConfigRuleId`. These values are generated by
|
3742
|
-
# rules.
|
3736
|
+
# `ConfigRuleId`. These values are generated by Config for new rules.
|
3743
3737
|
#
|
3744
3738
|
# If you are updating a rule that you added previously, you can specify
|
3745
3739
|
# the rule by `ConfigRuleName`, `ConfigRuleId`, or `ConfigRuleArn` in
|
3746
3740
|
# the `ConfigRule` data type that you use in this request.
|
3747
3741
|
#
|
3748
|
-
# The maximum number of rules that
|
3742
|
+
# The maximum number of rules that Config supports is 150.
|
3749
3743
|
#
|
3750
|
-
# For information about requesting a rule limit increase, see [
|
3751
|
-
#
|
3744
|
+
# For information about requesting a rule limit increase, see [Config
|
3745
|
+
# Limits][2] in the *Amazon Web Services General Reference Guide*.
|
3752
3746
|
#
|
3753
|
-
# For more information about developing and using
|
3754
|
-
# [Evaluating
|
3755
|
-
# *
|
3747
|
+
# For more information about developing and using Config rules, see
|
3748
|
+
# [Evaluating Amazon Web Services resource Configurations with
|
3749
|
+
# Config][3] in the *Config Developer Guide*.
|
3756
3750
|
#
|
3757
3751
|
#
|
3758
3752
|
#
|
@@ -3824,20 +3818,20 @@ module Aws::ConfigService
|
|
3824
3818
|
# `DescribeAggregator` to get the previous accounts and then append new
|
3825
3819
|
# ones.
|
3826
3820
|
#
|
3827
|
-
# <note markdown="1">
|
3828
|
-
#
|
3821
|
+
# <note markdown="1"> Config should be enabled in source accounts and regions you want to
|
3822
|
+
# aggregate.
|
3829
3823
|
#
|
3830
3824
|
# If your source type is an organization, you must be signed in to the
|
3831
3825
|
# management account or a registered delegated administrator and all the
|
3832
3826
|
# features must be enabled in your organization. If the caller is a
|
3833
|
-
# management account,
|
3834
|
-
# enable integration between
|
3835
|
-
#
|
3827
|
+
# management account, Config calls `EnableAwsServiceAccess` API to
|
3828
|
+
# enable integration between Config and Organizations. If the caller is
|
3829
|
+
# a registered delegated administrator, Config calls
|
3836
3830
|
# `ListDelegatedAdministrators` API to verify whether the caller is a
|
3837
3831
|
# valid delegated administrator.
|
3838
3832
|
#
|
3839
3833
|
# To register a delegated administrator, see [Register a Delegated
|
3840
|
-
# Administrator][1] in the
|
3834
|
+
# Administrator][1] in the Config developer guide.
|
3841
3835
|
#
|
3842
3836
|
# </note>
|
3843
3837
|
#
|
@@ -3958,15 +3952,15 @@ module Aws::ConfigService
|
|
3958
3952
|
end
|
3959
3953
|
|
3960
3954
|
# Creates or updates a conformance pack. A conformance pack is a
|
3961
|
-
# collection of
|
3962
|
-
#
|
3955
|
+
# collection of Config rules that can be easily deployed in an account
|
3956
|
+
# and a region and across Amazon Web Services Organization.
|
3963
3957
|
#
|
3964
3958
|
# This API creates a service linked role
|
3965
3959
|
# `AWSServiceRoleForConfigConforms` in your account. The service linked
|
3966
3960
|
# role is created only when the role does not exist in your account.
|
3967
3961
|
#
|
3968
3962
|
# <note markdown="1"> You must specify either the `TemplateS3Uri` or the `TemplateBody`
|
3969
|
-
# parameter, but not both. If you provide both
|
3963
|
+
# parameter, but not both. If you provide both Config uses the
|
3970
3964
|
# `TemplateS3Uri` parameter and ignores the `TemplateBody` parameter.
|
3971
3965
|
#
|
3972
3966
|
# </note>
|
@@ -3995,7 +3989,8 @@ module Aws::ConfigService
|
|
3995
3989
|
# </note>
|
3996
3990
|
#
|
3997
3991
|
# @option params [String] :delivery_s3_bucket
|
3998
|
-
# Amazon S3 bucket where
|
3992
|
+
# The name of the Amazon S3 bucket where Config stores conformance pack
|
3993
|
+
# templates.
|
3999
3994
|
#
|
4000
3995
|
# <note markdown="1"> This field is optional.
|
4001
3996
|
#
|
@@ -4092,24 +4087,24 @@ module Aws::ConfigService
|
|
4092
4087
|
req.send_request(options)
|
4093
4088
|
end
|
4094
4089
|
|
4095
|
-
# Used by an
|
4096
|
-
#
|
4097
|
-
#
|
4090
|
+
# Used by an Lambda function to deliver evaluation results to Config.
|
4091
|
+
# This action is required in every Lambda function that is invoked by an
|
4092
|
+
# Config rule.
|
4098
4093
|
#
|
4099
4094
|
# @option params [Array<Types::Evaluation>] :evaluations
|
4100
|
-
# The assessments that the
|
4101
|
-
# identifies an
|
4102
|
-
#
|
4095
|
+
# The assessments that the Lambda function performs. Each evaluation
|
4096
|
+
# identifies an Amazon Web Services resource and indicates whether it
|
4097
|
+
# complies with the Config rule that invokes the Lambda function.
|
4103
4098
|
#
|
4104
4099
|
# @option params [required, String] :result_token
|
4105
|
-
# An encrypted token that associates an evaluation with an
|
4106
|
-
#
|
4100
|
+
# An encrypted token that associates an evaluation with an Config rule.
|
4101
|
+
# Identifies the rule and the event that triggered the evaluation.
|
4107
4102
|
#
|
4108
4103
|
# @option params [Boolean] :test_mode
|
4109
4104
|
# Use this parameter to specify a test run for `PutEvaluations`. You can
|
4110
|
-
# verify whether your
|
4111
|
-
#
|
4112
|
-
#
|
4105
|
+
# verify whether your Lambda function will deliver evaluation results to
|
4106
|
+
# Config. No updates occur to your existing evaluations, and evaluation
|
4107
|
+
# results are not sent to Config.
|
4113
4108
|
#
|
4114
4109
|
# <note markdown="1"> When `TestMode` is `true`, `PutEvaluations` doesn't require a valid
|
4115
4110
|
# value for the `ResultToken` parameter, but the value cannot be null.
|
@@ -4155,11 +4150,11 @@ module Aws::ConfigService
|
|
4155
4150
|
end
|
4156
4151
|
|
4157
4152
|
# Add or updates the evaluations for process checks. This API checks if
|
4158
|
-
# the rule is a process check when the name of the
|
4153
|
+
# the rule is a process check when the name of the Config rule is
|
4159
4154
|
# provided.
|
4160
4155
|
#
|
4161
4156
|
# @option params [required, String] :config_rule_name
|
4162
|
-
# The name of the
|
4157
|
+
# The name of the Config rule.
|
4163
4158
|
#
|
4164
4159
|
# @option params [required, Types::ExternalEvaluation] :external_evaluation
|
4165
4160
|
# An `ExternalEvaluation` object that provides details about compliance.
|
@@ -4189,38 +4184,39 @@ module Aws::ConfigService
|
|
4189
4184
|
end
|
4190
4185
|
|
4191
4186
|
# Adds or updates organization config rule for your entire organization
|
4192
|
-
# evaluating whether your
|
4193
|
-
# configurations.
|
4187
|
+
# evaluating whether your Amazon Web Services resources comply with your
|
4188
|
+
# desired configurations.
|
4194
4189
|
#
|
4195
4190
|
# Only a master account and a delegated administrator can create or
|
4196
4191
|
# update an organization config rule. When calling this API with a
|
4197
|
-
# delegated administrator, you must ensure
|
4192
|
+
# delegated administrator, you must ensure Organizations
|
4198
4193
|
# `ListDelegatedAdministrator` permissions are added.
|
4199
4194
|
#
|
4200
4195
|
# This API enables organization service access through the
|
4201
4196
|
# `EnableAWSServiceAccess` action and creates a service linked role
|
4202
4197
|
# `AWSServiceRoleForConfigMultiAccountSetup` in the master or delegated
|
4203
4198
|
# administrator account of your organization. The service linked role is
|
4204
|
-
# created only when the role does not exist in the caller account.
|
4199
|
+
# created only when the role does not exist in the caller account.
|
4205
4200
|
# Config verifies the existence of role with `GetRole` action.
|
4206
4201
|
#
|
4207
4202
|
# To use this API with delegated administrator, register a delegated
|
4208
|
-
# administrator by calling
|
4203
|
+
# administrator by calling Amazon Web Services Organization
|
4209
4204
|
# `register-delegated-administrator` for
|
4210
4205
|
# `config-multiaccountsetup.amazonaws.com`.
|
4211
4206
|
#
|
4212
|
-
# You can use this action to create both custom
|
4213
|
-
# managed
|
4214
|
-
#
|
4215
|
-
#
|
4216
|
-
#
|
4217
|
-
# the
|
4218
|
-
#
|
4219
|
-
#
|
4220
|
-
#
|
4207
|
+
# You can use this action to create both custom Config rules and Config
|
4208
|
+
# managed rules. If you are adding a new custom Config rule, you must
|
4209
|
+
# first create Lambda function in the master account or a delegated
|
4210
|
+
# administrator that the rule invokes to evaluate your resources. You
|
4211
|
+
# also need to create an IAM role in the managed-account that can be
|
4212
|
+
# assumed by the Lambda function. When you use the
|
4213
|
+
# `PutOrganizationConfigRule` action to add the rule to Config, you must
|
4214
|
+
# specify the Amazon Resource Name (ARN) that Lambda assigns to the
|
4215
|
+
# function. If you are adding an Config managed rule, specify the
|
4216
|
+
# rule's identifier for the `RuleIdentifier` key.
|
4221
4217
|
#
|
4222
|
-
# The maximum number of organization config rules that
|
4223
|
-
#
|
4218
|
+
# The maximum number of organization config rules that Config supports
|
4219
|
+
# is 150 and 3 delegated administrator per organization.
|
4224
4220
|
#
|
4225
4221
|
# <note markdown="1"> Prerequisite: Ensure you call `EnableAllFeatures` API to enable all
|
4226
4222
|
# features in an organization.
|
@@ -4288,12 +4284,12 @@ module Aws::ConfigService
|
|
4288
4284
|
req.send_request(options)
|
4289
4285
|
end
|
4290
4286
|
|
4291
|
-
# Deploys conformance packs across member accounts in an
|
4292
|
-
# Organization.
|
4287
|
+
# Deploys conformance packs across member accounts in an Amazon Web
|
4288
|
+
# Services Organization.
|
4293
4289
|
#
|
4294
4290
|
# Only a master account and a delegated administrator can call this API.
|
4295
4291
|
# When calling this API with a delegated administrator, you must ensure
|
4296
|
-
#
|
4292
|
+
# Organizations `ListDelegatedAdministrator` permissions are added.
|
4297
4293
|
#
|
4298
4294
|
# This API enables organization service access for
|
4299
4295
|
# `config-multiaccountsetup.amazonaws.com` through the
|
@@ -4302,23 +4298,24 @@ module Aws::ConfigService
|
|
4302
4298
|
# administrator account of your organization. The service linked role is
|
4303
4299
|
# created only when the role does not exist in the caller account. To
|
4304
4300
|
# use this API with delegated administrator, register a delegated
|
4305
|
-
# administrator by calling
|
4306
|
-
#
|
4301
|
+
# administrator by calling Amazon Web Services Organization
|
4302
|
+
# `register-delegate-admin` for
|
4303
|
+
# `config-multiaccountsetup.amazonaws.com`.
|
4307
4304
|
#
|
4308
4305
|
# <note markdown="1"> Prerequisite: Ensure you call `EnableAllFeatures` API to enable all
|
4309
4306
|
# features in an organization.
|
4310
4307
|
#
|
4311
4308
|
# You must specify either the `TemplateS3Uri` or the `TemplateBody`
|
4312
|
-
# parameter, but not both. If you provide both
|
4309
|
+
# parameter, but not both. If you provide both Config uses the
|
4313
4310
|
# `TemplateS3Uri` parameter and ignores the `TemplateBody` parameter.
|
4314
4311
|
#
|
4315
|
-
#
|
4316
|
-
#
|
4317
|
-
#
|
4318
|
-
#
|
4312
|
+
# Config sets the state of a conformance pack to CREATE\_IN\_PROGRESS
|
4313
|
+
# and UPDATE\_IN\_PROGRESS until the conformance pack is created or
|
4314
|
+
# updated. You cannot update a conformance pack while it is in this
|
4315
|
+
# state.
|
4319
4316
|
#
|
4320
|
-
# You can create 50 conformance packs with 25
|
4321
|
-
#
|
4317
|
+
# You can create 50 conformance packs with 25 Config rules in each pack
|
4318
|
+
# and 3 delegated administrator per organization.
|
4322
4319
|
#
|
4323
4320
|
# </note>
|
4324
4321
|
#
|
@@ -4339,7 +4336,8 @@ module Aws::ConfigService
|
|
4339
4336
|
# maximum length of 51,200 bytes.
|
4340
4337
|
#
|
4341
4338
|
# @option params [String] :delivery_s3_bucket
|
4342
|
-
# Amazon S3 bucket where
|
4339
|
+
# The name of the Amazon S3 bucket where Config stores conformance pack
|
4340
|
+
# templates.
|
4343
4341
|
#
|
4344
4342
|
# <note markdown="1"> This field is optional. If used, it must be prefixed with
|
4345
4343
|
# `awsconfigconforms`.
|
@@ -4357,8 +4355,8 @@ module Aws::ConfigService
|
|
4357
4355
|
# A list of `ConformancePackInputParameter` objects.
|
4358
4356
|
#
|
4359
4357
|
# @option params [Array<String>] :excluded_accounts
|
4360
|
-
# A list of
|
4361
|
-
# pack while deploying a conformance pack.
|
4358
|
+
# A list of Amazon Web Services accounts to be excluded from an
|
4359
|
+
# organization conformance pack while deploying a conformance pack.
|
4362
4360
|
#
|
4363
4361
|
# @return [Types::PutOrganizationConformancePackResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
4364
4362
|
#
|
@@ -4394,20 +4392,20 @@ module Aws::ConfigService
|
|
4394
4392
|
req.send_request(options)
|
4395
4393
|
end
|
4396
4394
|
|
4397
|
-
# Adds or updates the remediation configuration with a specific
|
4398
|
-
#
|
4399
|
-
# `RemediationConfiguration` object for the
|
4400
|
-
#
|
4401
|
-
#
|
4402
|
-
#
|
4395
|
+
# Adds or updates the remediation configuration with a specific Config
|
4396
|
+
# rule with the selected target or action. The API creates the
|
4397
|
+
# `RemediationConfiguration` object for the Config rule. The Config rule
|
4398
|
+
# must already exist for you to add a remediation configuration. The
|
4399
|
+
# target (SSM document) must exist and have permissions to use the
|
4400
|
+
# target.
|
4403
4401
|
#
|
4404
4402
|
# <note markdown="1"> If you make backward incompatible changes to the SSM document, you
|
4405
4403
|
# must call this again to ensure the remediations can run.
|
4406
4404
|
#
|
4407
4405
|
# This API does not support adding remediation configurations for
|
4408
|
-
# service-linked
|
4409
|
-
# rules deployed by conformance packs, and rules deployed by
|
4410
|
-
# Security Hub.
|
4406
|
+
# service-linked Config Rules such as Organization Config rules, the
|
4407
|
+
# rules deployed by conformance packs, and rules deployed by Amazon Web
|
4408
|
+
# Services Security Hub.
|
4411
4409
|
#
|
4412
4410
|
# </note>
|
4413
4411
|
#
|
@@ -4487,22 +4485,22 @@ module Aws::ConfigService
|
|
4487
4485
|
# A remediation exception is when a specific resource is no longer
|
4488
4486
|
# considered for auto-remediation. This API adds a new exception or
|
4489
4487
|
# updates an existing exception for a specific resource with a specific
|
4490
|
-
#
|
4488
|
+
# Config rule.
|
4491
4489
|
#
|
4492
|
-
# <note markdown="1">
|
4490
|
+
# <note markdown="1"> Config generates a remediation exception when a problem occurs
|
4493
4491
|
# executing a remediation action to a specific resource. Remediation
|
4494
4492
|
# exceptions blocks auto-remediation until the exception is cleared.
|
4495
4493
|
#
|
4496
4494
|
# </note>
|
4497
4495
|
#
|
4498
4496
|
# @option params [required, String] :config_rule_name
|
4499
|
-
# The name of the
|
4500
|
-
#
|
4497
|
+
# The name of the Config rule for which you want to create remediation
|
4498
|
+
# exception.
|
4501
4499
|
#
|
4502
4500
|
# @option params [required, Array<Types::RemediationExceptionResourceKey>] :resource_keys
|
4503
4501
|
# An exception list of resource exception keys to be processed with the
|
4504
|
-
# current request.
|
4505
|
-
# example,
|
4502
|
+
# current request. Config adds exception for each resource key. For
|
4503
|
+
# example, Config adds 3 exceptions for 3 resource keys.
|
4506
4504
|
#
|
4507
4505
|
# @option params [String] :message
|
4508
4506
|
# The message contains an explanation of the exception.
|
@@ -4549,17 +4547,16 @@ module Aws::ConfigService
|
|
4549
4547
|
end
|
4550
4548
|
|
4551
4549
|
# Records the configuration state for the resource provided in the
|
4552
|
-
# request. The configuration state of a resource is represented in
|
4550
|
+
# request. The configuration state of a resource is represented in
|
4553
4551
|
# Config as Configuration Items. Once this API records the configuration
|
4554
4552
|
# item, you can retrieve the list of configuration items for the custom
|
4555
|
-
# resource type using existing
|
4553
|
+
# resource type using existing Config APIs.
|
4556
4554
|
#
|
4557
|
-
# <note markdown="1"> The custom resource type must be registered with
|
4558
|
-
#
|
4559
|
-
# CloudFormation.
|
4555
|
+
# <note markdown="1"> The custom resource type must be registered with CloudFormation. This
|
4556
|
+
# API accepts the configuration item registered with CloudFormation.
|
4560
4557
|
#
|
4561
|
-
# When you call this API,
|
4562
|
-
#
|
4558
|
+
# When you call this API, Config only stores configuration state of the
|
4559
|
+
# resource provided in the request. This API does not change or
|
4563
4560
|
# remediate the configuration of the resource.
|
4564
4561
|
#
|
4565
4562
|
# Write-only schema properites are not recorded as part of the published
|
@@ -4569,16 +4566,16 @@ module Aws::ConfigService
|
|
4569
4566
|
#
|
4570
4567
|
# @option params [required, String] :resource_type
|
4571
4568
|
# The type of the resource. The custom resource type must be registered
|
4572
|
-
# with
|
4569
|
+
# with CloudFormation.
|
4573
4570
|
#
|
4574
|
-
# <note markdown="1"> You cannot use the organization names “
|
4575
|
-
# “
|
4576
|
-
#
|
4571
|
+
# <note markdown="1"> You cannot use the organization names “amzn”, “amazon”, “alexa”,
|
4572
|
+
# “custom” with custom resource types. It is the first part of the
|
4573
|
+
# ResourceType up to the first ::.
|
4577
4574
|
#
|
4578
4575
|
# </note>
|
4579
4576
|
#
|
4580
4577
|
# @option params [required, String] :schema_version_id
|
4581
|
-
# Version of the schema registered for the ResourceType in
|
4578
|
+
# Version of the schema registered for the ResourceType in
|
4582
4579
|
# CloudFormation.
|
4583
4580
|
#
|
4584
4581
|
# @option params [required, String] :resource_id
|
@@ -4589,7 +4586,7 @@ module Aws::ConfigService
|
|
4589
4586
|
#
|
4590
4587
|
# @option params [required, String] :configuration
|
4591
4588
|
# The configuration object of the resource in valid JSON format. It must
|
4592
|
-
# match the schema registered with
|
4589
|
+
# match the schema registered with CloudFormation.
|
4593
4590
|
#
|
4594
4591
|
# <note markdown="1"> The configuration JSON must not exceed 64 KB.
|
4595
4592
|
#
|
@@ -4623,19 +4620,19 @@ module Aws::ConfigService
|
|
4623
4620
|
end
|
4624
4621
|
|
4625
4622
|
# Creates and updates the retention configuration with details about
|
4626
|
-
# retention period (number of days) that
|
4627
|
-
#
|
4628
|
-
#
|
4623
|
+
# retention period (number of days) that Config stores your historical
|
4624
|
+
# information. The API creates the `RetentionConfiguration` object and
|
4625
|
+
# names the object as **default**. When you have a
|
4629
4626
|
# `RetentionConfiguration` object named **default**, calling the API
|
4630
4627
|
# modifies the default object.
|
4631
4628
|
#
|
4632
|
-
# <note markdown="1"> Currently,
|
4633
|
-
#
|
4629
|
+
# <note markdown="1"> Currently, Config supports only one retention configuration per region
|
4630
|
+
# in your account.
|
4634
4631
|
#
|
4635
4632
|
# </note>
|
4636
4633
|
#
|
4637
4634
|
# @option params [required, Integer] :retention_period_in_days
|
4638
|
-
# Number of days
|
4635
|
+
# Number of days Config stores your historical information.
|
4639
4636
|
#
|
4640
4637
|
# <note markdown="1"> Currently, only applicable to the configuration item history.
|
4641
4638
|
#
|
@@ -4666,8 +4663,9 @@ module Aws::ConfigService
|
|
4666
4663
|
end
|
4667
4664
|
|
4668
4665
|
# Saves a new query or updates an existing saved query. The `QueryName`
|
4669
|
-
# must be unique for a single
|
4670
|
-
# can create upto 300 queries in a
|
4666
|
+
# must be unique for a single Amazon Web Services account and a single
|
4667
|
+
# Amazon Web Services Region. You can create upto 300 queries in a
|
4668
|
+
# single Amazon Web Services account and a single Amazon Web Services
|
4671
4669
|
# Region.
|
4672
4670
|
#
|
4673
4671
|
# @option params [required, Types::StoredQuery] :stored_query
|
@@ -4719,12 +4717,26 @@ module Aws::ConfigService
|
|
4719
4717
|
end
|
4720
4718
|
|
4721
4719
|
# Accepts a structured query language (SQL) SELECT command and an
|
4722
|
-
# aggregator to query configuration state of
|
4723
|
-
# multiple accounts and regions, performs the
|
4724
|
-
# returns resource configurations matching the
|
4720
|
+
# aggregator to query configuration state of Amazon Web Services
|
4721
|
+
# resources across multiple accounts and regions, performs the
|
4722
|
+
# corresponding search, and returns resource configurations matching the
|
4723
|
+
# properties.
|
4725
4724
|
#
|
4726
4725
|
# For more information about query components, see the [ **Query
|
4727
|
-
# Components** ][1] section in the
|
4726
|
+
# Components** ][1] section in the Config Developer Guide.
|
4727
|
+
#
|
4728
|
+
# <note markdown="1"> If you run an aggregation query (i.e., using `GROUP BY` or using
|
4729
|
+
# aggregate functions such as `COUNT`; e.g., `SELECT resourceId,
|
4730
|
+
# COUNT(*) WHERE resourceType = 'AWS::IAM::Role' GROUP BY resourceId`)
|
4731
|
+
# and do not specify the `MaxResults` or the `Limit` query parameters,
|
4732
|
+
# the default page size is set to 500.
|
4733
|
+
#
|
4734
|
+
# If you run a non-aggregation query (i.e., not using `GROUP BY` or
|
4735
|
+
# aggregate function; e.g., `SELECT * WHERE resourceType =
|
4736
|
+
# 'AWS::IAM::Role'`) and do not specify the `MaxResults` or the `Limit`
|
4737
|
+
# query parameters, the default page size is set to 25.
|
4738
|
+
#
|
4739
|
+
# </note>
|
4728
4740
|
#
|
4729
4741
|
#
|
4730
4742
|
#
|
@@ -4740,8 +4752,8 @@ module Aws::ConfigService
|
|
4740
4752
|
# The maximum number of query results returned on each page.
|
4741
4753
|
#
|
4742
4754
|
# @option params [Integer] :max_results
|
4743
|
-
# The maximum number of query results returned on each page.
|
4744
|
-
#
|
4755
|
+
# The maximum number of query results returned on each page. Config also
|
4756
|
+
# allows the Limit request parameter.
|
4745
4757
|
#
|
4746
4758
|
# @option params [String] :next_token
|
4747
4759
|
# The nextToken string returned in a previous request that you use to
|
@@ -4787,7 +4799,7 @@ module Aws::ConfigService
|
|
4787
4799
|
# the properties.
|
4788
4800
|
#
|
4789
4801
|
# For more information about query components, see the [ **Query
|
4790
|
-
# Components** ][1] section in the
|
4802
|
+
# Components** ][1] section in the Config Developer Guide.
|
4791
4803
|
#
|
4792
4804
|
#
|
4793
4805
|
#
|
@@ -4836,23 +4848,23 @@ module Aws::ConfigService
|
|
4836
4848
|
req.send_request(options)
|
4837
4849
|
end
|
4838
4850
|
|
4839
|
-
# Runs an on-demand evaluation for the specified
|
4840
|
-
#
|
4851
|
+
# Runs an on-demand evaluation for the specified Config rules against
|
4852
|
+
# the last known configuration state of the resources. Use
|
4841
4853
|
# `StartConfigRulesEvaluation` when you want to test that a rule you
|
4842
4854
|
# updated is working as expected. `StartConfigRulesEvaluation` does not
|
4843
4855
|
# re-record the latest configuration state for your resources. It
|
4844
4856
|
# re-runs an evaluation against the last known state of your resources.
|
4845
4857
|
#
|
4846
|
-
# You can specify up to 25
|
4858
|
+
# You can specify up to 25 Config rules per request.
|
4847
4859
|
#
|
4848
4860
|
# An existing `StartConfigRulesEvaluation` call for the specified rules
|
4849
4861
|
# must complete before you can call the API again. If you chose to have
|
4850
|
-
#
|
4862
|
+
# Config stream to an Amazon SNS topic, you will receive a
|
4851
4863
|
# `ConfigRuleEvaluationStarted` notification when the evaluation starts.
|
4852
4864
|
#
|
4853
4865
|
# <note markdown="1"> You don't need to call the `StartConfigRulesEvaluation` API to run an
|
4854
|
-
# evaluation for a new rule. When you create a rule,
|
4855
|
-
#
|
4866
|
+
# evaluation for a new rule. When you create a rule, Config evaluates
|
4867
|
+
# your resources against the rule automatically.
|
4856
4868
|
#
|
4857
4869
|
# </note>
|
4858
4870
|
#
|
@@ -4868,14 +4880,14 @@ module Aws::ConfigService
|
|
4868
4880
|
# 3. Instead of waiting for the next periodic evaluation, you call the
|
4869
4881
|
# `StartConfigRulesEvaluation` API.
|
4870
4882
|
#
|
4871
|
-
# 4.
|
4883
|
+
# 4. Config invokes your Lambda function and evaluates your IAM
|
4872
4884
|
# resources.
|
4873
4885
|
#
|
4874
4886
|
# 5. Your custom rule will still run periodic evaluations every 24
|
4875
4887
|
# hours.
|
4876
4888
|
#
|
4877
4889
|
# @option params [Array<String>] :config_rule_names
|
4878
|
-
# The list of names of
|
4890
|
+
# The list of names of Config rules that you want to run evaluations
|
4879
4891
|
# for.
|
4880
4892
|
#
|
4881
4893
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
@@ -4895,8 +4907,8 @@ module Aws::ConfigService
|
|
4895
4907
|
req.send_request(options)
|
4896
4908
|
end
|
4897
4909
|
|
4898
|
-
# Starts recording configurations of the
|
4899
|
-
# to record in your
|
4910
|
+
# Starts recording configurations of the Amazon Web Services resources
|
4911
|
+
# you have selected to record in your Amazon Web Services account.
|
4900
4912
|
#
|
4901
4913
|
# You must have created at least one delivery channel to successfully
|
4902
4914
|
# start the configuration recorder.
|
@@ -4922,9 +4934,9 @@ module Aws::ConfigService
|
|
4922
4934
|
req.send_request(options)
|
4923
4935
|
end
|
4924
4936
|
|
4925
|
-
# Runs an on-demand remediation for the specified
|
4926
|
-
#
|
4927
|
-
#
|
4937
|
+
# Runs an on-demand remediation for the specified Config rules against
|
4938
|
+
# the last known remediation configuration. It runs an execution against
|
4939
|
+
# the current state of your resources. Remediation execution is
|
4928
4940
|
# asynchronous.
|
4929
4941
|
#
|
4930
4942
|
# You can specify up to 100 resource keys per request. An existing
|
@@ -4932,7 +4944,7 @@ module Aws::ConfigService
|
|
4932
4944
|
# complete before you can call the API again.
|
4933
4945
|
#
|
4934
4946
|
# @option params [required, String] :config_rule_name
|
4935
|
-
# The list of names of
|
4947
|
+
# The list of names of Config rules that you want to run remediation
|
4936
4948
|
# execution for.
|
4937
4949
|
#
|
4938
4950
|
# @option params [required, Array<Types::ResourceKey>] :resource_keys
|
@@ -4972,8 +4984,8 @@ module Aws::ConfigService
|
|
4972
4984
|
req.send_request(options)
|
4973
4985
|
end
|
4974
4986
|
|
4975
|
-
# Stops recording configurations of the
|
4976
|
-
# to record in your
|
4987
|
+
# Stops recording configurations of the Amazon Web Services resources
|
4988
|
+
# you have selected to record in your Amazon Web Services account.
|
4977
4989
|
#
|
4978
4990
|
# @option params [required, String] :configuration_recorder_name
|
4979
4991
|
# The name of the recorder object that records each configuration change
|
@@ -5073,7 +5085,7 @@ module Aws::ConfigService
|
|
5073
5085
|
params: params,
|
5074
5086
|
config: config)
|
5075
5087
|
context[:gem_name] = 'aws-sdk-configservice'
|
5076
|
-
context[:gem_version] = '1.
|
5088
|
+
context[:gem_version] = '1.66.0'
|
5077
5089
|
Seahorse::Client::Request.new(handlers, context)
|
5078
5090
|
end
|
5079
5091
|
|