aws-sdk-configservice 1.80.0 → 1.81.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 41724fe084e0a48047623137f939a63835cfacba4e2106c8a565b69320544235
4
- data.tar.gz: 8e9fe90efc4cc53d8139b5cb8ed7c6b4680e2cc33b29e5d1fa0fdd8de18a5d91
3
+ metadata.gz: 3639395bc4a0183311732004ab157a4bb19d53d50fe9be2da550f62ac4f57c14
4
+ data.tar.gz: b8a6f51e8adee47ac1406b9bb6138a3c633408c04f51c474773072883b0c932a
5
5
  SHA512:
6
- metadata.gz: a56dc39397bb305ea1fe598037aefcc4027a7781e3d68c5bff9b1710bc573c3f53d3592c5680be316b7de5978ceaac25834656f84ed5c18d38f5fe21eb352f0b
7
- data.tar.gz: 946f853ea814a114226d0425159aceea9d89d0442b48078350f6a97cdbf82aff0efe443601c37e58839cac48700a554bd2509098366393ba4bae4f13651a2a68
6
+ metadata.gz: 8a2e487d196665b8ab1e64c49e7dc2950a271ee9263969b65d9ba24cfc46b5d02d1e2a121797d12225ecf5506eda2f44c7b3c508dd531eea41eac363e7c76b17
7
+ data.tar.gz: 97049d805f313b6217df52476b3e11423d4026b6b09c690a7f54a150ee4d37cd6459819b576cd8d1aff7900e453115cefe420e9d14771320071af8c2873f3e9b
data/CHANGELOG.md CHANGED
@@ -1,6 +1,11 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.81.0 (2022-08-01)
5
+ ------------------
6
+
7
+ * Feature - Documentation update for PutConfigRule and PutOrganizationConfigRule
8
+
4
9
  1.80.0 (2022-07-27)
5
10
  ------------------
6
11
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.80.0
1
+ 1.81.0
@@ -3636,7 +3636,12 @@ module Aws::ConfigService
3636
3636
  # possible rule-resource combinations in the conformance pack. This
3637
3637
  # metric provides you with a high-level view of the compliance state of
3638
3638
  # your conformance packs, and can be used to identify, investigate, and
3639
- # understand compliance deviations in your conformance packs.
3639
+ # understand the level of compliance in your conformance packs.
3640
+ #
3641
+ # <note markdown="1"> Conformance packs with no evaluation results will have a compliance
3642
+ # score of `INSUFFICIENT_DATA`.
3643
+ #
3644
+ # </note>
3640
3645
  #
3641
3646
  # @option params [Types::ConformancePackComplianceScoresFilters] :filters
3642
3647
  # Filters the results based on the
@@ -3646,10 +3651,19 @@ module Aws::ConfigService
3646
3651
  # Determines the order in which conformance pack compliance scores are
3647
3652
  # sorted. Either in ascending or descending order.
3648
3653
  #
3654
+ # Conformance packs with a compliance score of `INSUFFICIENT_DATA` will
3655
+ # be first when sorting by ascending order and last when sorting by
3656
+ # descending order.
3657
+ #
3649
3658
  # @option params [String] :sort_by
3650
3659
  # Sorts your conformance pack compliance scores in either ascending or
3651
3660
  # descending order, depending on `SortOrder`.
3652
3661
  #
3662
+ # By default, conformance pack compliance scores are sorted in ascending
3663
+ # order by compliance score and alphabetically by name of the
3664
+ # conformance pack if there is more than one conformance pack with the
3665
+ # same compliance score.
3666
+ #
3653
3667
  # @option params [Integer] :limit
3654
3668
  # The maximum number of conformance pack compliance scores returned on
3655
3669
  # each page.
@@ -3909,24 +3923,31 @@ module Aws::ConfigService
3909
3923
  req.send_request(options)
3910
3924
  end
3911
3925
 
3912
- # Adds or updates an Config rule for evaluating whether your Amazon Web
3913
- # Services resources comply with your desired configurations.
3914
- #
3915
- # You can use this action for Config custom rules and Config managed
3916
- # rules. A Config custom rule is a rule that you develop and maintain.
3917
- # An Config managed rule is a customizable, predefined rule that Config
3918
- # provides.
3919
- #
3920
- # If you are adding a new Config custom rule, you must first create the
3921
- # Lambda function that the rule invokes to evaluate your resources. When
3922
- # you use the `PutConfigRule` action to add the rule to Config, you must
3923
- # specify the Amazon Resource Name (ARN) that Lambda assigns to the
3924
- # function. Specify the ARN for the `SourceIdentifier` key. This key is
3925
- # part of the `Source` object, which is part of the `ConfigRule` object.
3926
- #
3927
- # If you are adding an Config managed rule, specify the rule's
3928
- # identifier for the `SourceIdentifier` key. To reference Config managed
3929
- # rule identifiers, see [About Config managed rules][1].
3926
+ # Adds or updates an Config rule to evaluate if your Amazon Web Services
3927
+ # resources comply with your desired configurations. For information on
3928
+ # how many Config rules you can have per account, see [ **Service
3929
+ # Limits** ][1] in the *Config Developer Guide*.
3930
+ #
3931
+ # There are two types of rules: Config Custom Rules and Config Managed
3932
+ # Rules. You can use `PutConfigRule` to create both Config custom rules
3933
+ # and Config managed rules.
3934
+ #
3935
+ # Custom rules are rules that you can create using either Guard or
3936
+ # Lambda functions. Guard ([Guard GitHub Repository][2]) is a
3937
+ # policy-as-code language that allows you to write policies that are
3938
+ # enforced by Config Custom Policy rules. Lambda uses custom code that
3939
+ # you upload to evaluate a custom rule. If you are adding a new Custom
3940
+ # Lambda rule, you first need to create an Lambda function that the rule
3941
+ # invokes to evaluate your resources. When you use `PutConfigRule` to
3942
+ # add a Custom Lambda rule to Config, you must specify the Amazon
3943
+ # Resource Name (ARN) that Lambda assigns to the function. You specify
3944
+ # the ARN in the `SourceIdentifier` key. This key is part of the
3945
+ # `Source` object, which is part of the `ConfigRule` object.
3946
+ #
3947
+ # Managed rules are predefined, customizable rules created by Config.
3948
+ # For a list of managed rules, see [List of Config Managed Rules][3]. If
3949
+ # you are adding an Config managed rule, you must specify the rule's
3950
+ # identifier for the `SourceIdentifier` key.
3930
3951
  #
3931
3952
  # For any new rule that you add, specify the `ConfigRuleName` in the
3932
3953
  # `ConfigRule` object. Do not specify the `ConfigRuleArn` or the
@@ -3936,18 +3957,16 @@ module Aws::ConfigService
3936
3957
  # the rule by `ConfigRuleName`, `ConfigRuleId`, or `ConfigRuleArn` in
3937
3958
  # the `ConfigRule` data type that you use in this request.
3938
3959
  #
3939
- # For information on how many Config rules you can have per account, see
3940
- # [ **Service Limits** ][2] in the Config Developer Guide.
3941
- #
3942
3960
  # For more information about developing and using Config rules, see
3943
3961
  # [Evaluating Amazon Web Services resource Configurations with
3944
- # Config][3] in the *Config Developer Guide*.
3962
+ # Config][4] in the *Config Developer Guide*.
3945
3963
  #
3946
3964
  #
3947
3965
  #
3948
- # [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html
3949
- # [2]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
3950
- # [3]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
3966
+ # [1]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
3967
+ # [2]: https://github.com/aws-cloudformation/cloudformation-guard
3968
+ # [3]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
3969
+ # [4]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
3951
3970
  #
3952
3971
  # @option params [required, Types::ConfigRule] :config_rule
3953
3972
  # The rule that you want to add to your account.
@@ -4031,7 +4050,7 @@ module Aws::ConfigService
4031
4050
  # valid delegated administrator.
4032
4051
  #
4033
4052
  # To register a delegated administrator, see [Register a Delegated
4034
- # Administrator][1] in the Config developer guide.
4053
+ # Administrator][1] in the *Config developer guide*.
4035
4054
  #
4036
4055
  # </note>
4037
4056
  #
@@ -4157,8 +4176,8 @@ module Aws::ConfigService
4157
4176
  # information on how many conformance packs you can have per account,
4158
4177
  # see [ **Service Limits** ][1] in the Config Developer Guide.
4159
4178
  #
4160
- # This API creates a service linked role
4161
- # `AWSServiceRoleForConfigConforms` in your account. The service linked
4179
+ # This API creates a service-linked role
4180
+ # `AWSServiceRoleForConfigConforms` in your account. The service-linked
4162
4181
  # role is created only when the role does not exist in your account.
4163
4182
  #
4164
4183
  # <note markdown="1"> You must specify either the `TemplateS3Uri` or the `TemplateBody`
@@ -4390,11 +4409,11 @@ module Aws::ConfigService
4390
4409
  req.send_request(options)
4391
4410
  end
4392
4411
 
4393
- # Adds or updates organization Config rule for your entire organization
4394
- # evaluating whether your Amazon Web Services resources comply with your
4412
+ # Adds or updates an Config rule for your entire organization to
4413
+ # evaluate if your Amazon Web Services resources comply with your
4395
4414
  # desired configurations. For information on how many organization
4396
4415
  # Config rules you can have per account, see [ **Service Limits** ][1]
4397
- # in the Config Developer Guide.
4416
+ # in the *Config Developer Guide*.
4398
4417
  #
4399
4418
  # Only a master account and a delegated administrator can create or
4400
4419
  # update an organization Config rule. When calling this API with a
@@ -4403,9 +4422,9 @@ module Aws::ConfigService
4403
4422
  # can have up to 3 delegated administrators.
4404
4423
  #
4405
4424
  # This API enables organization service access through the
4406
- # `EnableAWSServiceAccess` action and creates a service linked role
4425
+ # `EnableAWSServiceAccess` action and creates a service-linked role
4407
4426
  # `AWSServiceRoleForConfigMultiAccountSetup` in the master or delegated
4408
- # administrator account of your organization. The service linked role is
4427
+ # administrator account of your organization. The service-linked role is
4409
4428
  # created only when the role does not exist in the caller account.
4410
4429
  # Config verifies the existence of role with `GetRole` action.
4411
4430
  #
@@ -4414,49 +4433,75 @@ module Aws::ConfigService
4414
4433
  # `register-delegated-administrator` for
4415
4434
  # `config-multiaccountsetup.amazonaws.com`.
4416
4435
  #
4417
- # You can use this action to create both Config custom rules and Config
4418
- # managed rules. If you are adding a new Config custom rule, you must
4419
- # first create Lambda function in the master account or a delegated
4420
- # administrator that the rule invokes to evaluate your resources. You
4421
- # also need to create an IAM role in the managed-account that can be
4422
- # assumed by the Lambda function. When you use the
4423
- # `PutOrganizationConfigRule` action to add the rule to Config, you must
4424
- # specify the Amazon Resource Name (ARN) that Lambda assigns to the
4425
- # function. If you are adding an Config managed rule, specify the
4426
- # rule's identifier for the `RuleIdentifier` key.
4436
+ # There are two types of rules: Config Custom Rules and Config Managed
4437
+ # Rules. You can use `PutOrganizationConfigRule` to create both Config
4438
+ # custom rules and Config managed rules.
4439
+ #
4440
+ # Custom rules are rules that you can create using either Guard or
4441
+ # Lambda functions. Guard ([Guard GitHub Repository][2]) is a
4442
+ # policy-as-code language that allows you to write policies that are
4443
+ # enforced by Config Custom Policy rules. Lambda uses custom code that
4444
+ # you upload to evaluate a custom rule. If you are adding a new Custom
4445
+ # Lambda rule, you first need to create an Lambda function in the master
4446
+ # account or a delegated administrator that the rule invokes to evaluate
4447
+ # your resources. You also need to create an IAM role in the managed
4448
+ # account that can be assumed by the Lambda function. When you use
4449
+ # `PutOrganizationConfigRule` to add a Custom Lambda rule to Config, you
4450
+ # must specify the Amazon Resource Name (ARN) that Lambda assigns to the
4451
+ # function.
4452
+ #
4453
+ # Managed rules are predefined, customizable rules created by Config.
4454
+ # For a list of managed rules, see [List of Config Managed Rules][3]. If
4455
+ # you are adding an Config managed rule, you must specify the rule's
4456
+ # identifier for the `RuleIdentifier` key.
4427
4457
  #
4428
4458
  # <note markdown="1"> Prerequisite: Ensure you call `EnableAllFeatures` API to enable all
4429
4459
  # features in an organization.
4430
4460
  #
4431
- # Specify either `OrganizationCustomRuleMetadata` or
4432
- # `OrganizationManagedRuleMetadata`.
4461
+ # Make sure to specify one of either
4462
+ # `OrganizationCustomPolicyRuleMetadata` for Custom Policy rules,
4463
+ # `OrganizationCustomRuleMetadata` for Custom Lambda rules, or
4464
+ # `OrganizationManagedRuleMetadata` for managed rules.
4433
4465
  #
4434
4466
  # </note>
4435
4467
  #
4436
4468
  #
4437
4469
  #
4438
4470
  # [1]: https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html
4471
+ # [2]: https://github.com/aws-cloudformation/cloudformation-guard
4472
+ # [3]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
4439
4473
  #
4440
4474
  # @option params [required, String] :organization_config_rule_name
4441
4475
  # The name that you assign to an organization Config rule.
4442
4476
  #
4443
4477
  # @option params [Types::OrganizationManagedRuleMetadata] :organization_managed_rule_metadata
4444
- # An `OrganizationManagedRuleMetadata` object.
4478
+ # An `OrganizationManagedRuleMetadata` object. This object specifies
4479
+ # organization managed rule metadata such as resource type and ID of
4480
+ # Amazon Web Services resource along with the rule identifier. It also
4481
+ # provides the frequency with which you want Config to run evaluations
4482
+ # for the rule if the trigger type is periodic.
4445
4483
  #
4446
4484
  # @option params [Types::OrganizationCustomRuleMetadata] :organization_custom_rule_metadata
4447
- # An `OrganizationCustomRuleMetadata` object.
4485
+ # An `OrganizationCustomRuleMetadata` object. This object specifies
4486
+ # organization custom rule metadata such as resource type, resource ID
4487
+ # of Amazon Web Services resource, Lambda function ARN, and organization
4488
+ # trigger types that trigger Config to evaluate your Amazon Web Services
4489
+ # resources against a rule. It also provides the frequency with which
4490
+ # you want Config to run evaluations for the rule if the trigger type is
4491
+ # periodic.
4448
4492
  #
4449
4493
  # @option params [Array<String>] :excluded_accounts
4450
4494
  # A comma-separated list of accounts that you want to exclude from an
4451
4495
  # organization Config rule.
4452
4496
  #
4453
4497
  # @option params [Types::OrganizationCustomPolicyRuleMetadata] :organization_custom_policy_rule_metadata
4454
- # An object that specifies metadata for your organization's Config
4455
- # Custom Policy rule. The metadata includes the runtime system in use,
4456
- # which accounts have debug logging enabled, and other custom rule
4457
- # metadata, such as resource type, resource ID of Amazon Web Services
4458
- # resource, and organization trigger types that initiate Config to
4459
- # evaluate Amazon Web Services resources against a rule.
4498
+ # An `OrganizationCustomPolicyRuleMetadata` object. This object
4499
+ # specifies metadata for your organization's Config Custom Policy rule.
4500
+ # The metadata includes the runtime system in use, which accounts have
4501
+ # debug logging enabled, and other custom rule metadata, such as
4502
+ # resource type, resource ID of Amazon Web Services resource, and
4503
+ # organization trigger types that initiate Config to evaluate Amazon Web
4504
+ # Services resources against a rule.
4460
4505
  #
4461
4506
  # @return [Types::PutOrganizationConfigRuleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
4462
4507
  #
@@ -4528,9 +4573,9 @@ module Aws::ConfigService
4528
4573
  #
4529
4574
  # This API enables organization service access for
4530
4575
  # `config-multiaccountsetup.amazonaws.com` through the
4531
- # `EnableAWSServiceAccess` action and creates a service linked role
4576
+ # `EnableAWSServiceAccess` action and creates a service-linked role
4532
4577
  # `AWSServiceRoleForConfigMultiAccountSetup` in the master or delegated
4533
- # administrator account of your organization. The service linked role is
4578
+ # administrator account of your organization. The service-linked role is
4534
4579
  # created only when the role does not exist in the caller account. To
4535
4580
  # use this API with delegated administrator, register a delegated
4536
4581
  # administrator by calling Amazon Web Services Organization
@@ -5054,7 +5099,7 @@ module Aws::ConfigService
5054
5099
  # the properties.
5055
5100
  #
5056
5101
  # For more information about query components, see the [ **Query
5057
- # Components** ][1] section in the Config Developer Guide.
5102
+ # Components** ][1] section in the *Config Developer Guide*.
5058
5103
  #
5059
5104
  #
5060
5105
  #
@@ -5340,7 +5385,7 @@ module Aws::ConfigService
5340
5385
  params: params,
5341
5386
  config: config)
5342
5387
  context[:gem_name] = 'aws-sdk-configservice'
5343
- context[:gem_version] = '1.80.0'
5388
+ context[:gem_version] = '1.81.0'
5344
5389
  Seahorse::Client::Request.new(handlers, context)
5345
5390
  end
5346
5391
 
@@ -877,13 +877,25 @@ module Aws::ConfigService
877
877
  include Aws::Structure
878
878
  end
879
879
 
880
- # An Config rule represents an Lambda function that you create for a
881
- # custom rule or a predefined function for an Config managed rule. The
882
- # function evaluates configuration items to assess whether your Amazon
883
- # Web Services resources comply with your desired configurations. This
884
- # function can run when Config detects a configuration change to an
885
- # Amazon Web Services resource and at a periodic frequency that you
886
- # choose (for example, every 24 hours).
880
+ # Config rules evaluate the configuration settings of your Amazon Web
881
+ # Services resources. A rule can run when Config detects a configuration
882
+ # change to an Amazon Web Services resource or at a periodic frequency
883
+ # that you choose (for example, every 24 hours). There are two types of
884
+ # rules: Config Managed Rules and Config Custom Rules. Managed rules are
885
+ # predefined, customizable rules created by Config. For a list of
886
+ # managed rules, see [List of Config Managed Rules][1].
887
+ #
888
+ # Custom rules are rules that you can create using either Guard or
889
+ # Lambda functions. Guard ([Guard GitHub Repository][2]) is a
890
+ # policy-as-code language that allows you to write policies that are
891
+ # enforced by Config Custom Policy rules. Lambda uses custom code that
892
+ # you upload to evaluate a custom rule. It is invoked by events that are
893
+ # published to it by an event source, which Config invokes when the
894
+ # custom rule is initiated.
895
+ #
896
+ # For more information about developing and using Config rules, see
897
+ # [Evaluating Amazon Web Services resource Configurations with
898
+ # Config][3] in the *Config Developer Guide*.
887
899
  #
888
900
  # <note markdown="1"> You can use the Amazon Web Services CLI and Amazon Web Services SDKs
889
901
  # if you want to create a rule that triggers evaluations for your
@@ -892,13 +904,11 @@ module Aws::ConfigService
892
904
  #
893
905
  # </note>
894
906
  #
895
- # For more information about developing and using Config rules, see
896
- # [Evaluating Amazon Web Services resource Configurations with
897
- # Config][1] in the *Config Developer Guide*.
898
- #
899
907
  #
900
908
  #
901
- # [1]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
909
+ # [1]: https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html
910
+ # [2]: https://github.com/aws-cloudformation/cloudformation-guard
911
+ # [3]: https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html
902
912
  #
903
913
  # @note When making an API call, you may pass ConfigRule
904
914
  # data as a hash:
@@ -968,9 +978,11 @@ module Aws::ConfigService
968
978
  # @return [Types::Scope]
969
979
  #
970
980
  # @!attribute [rw] source
971
- # Provides the rule owner (Amazon Web Services or customer), the rule
972
- # identifier, and the notifications that cause the function to
973
- # evaluate your Amazon Web Services resources.
981
+ # Provides the rule owner (`Amazon Web Services` for managed rules,
982
+ # `CUSTOM_POLICY` for Custom Policy rules, and `CUSTOM_LAMBDA` for
983
+ # Custom Lambda rules), the rule identifier, and the notifications
984
+ # that cause the function to evaluate your Amazon Web Services
985
+ # resources.
974
986
  # @return [Types::Source]
975
987
  #
976
988
  # @!attribute [rw] input_parameters
@@ -1018,7 +1030,7 @@ module Aws::ConfigService
1018
1030
  # @!attribute [rw] created_by
1019
1031
  # Service principal name of the service that created the rule.
1020
1032
  #
1021
- # <note markdown="1"> The field is populated only if the service linked rule is created by
1033
+ # <note markdown="1"> The field is populated only if the service-linked rule is created by
1022
1034
  # a service. The field is empty if you create your own rule.
1023
1035
  #
1024
1036
  # </note>
@@ -1631,11 +1643,13 @@ module Aws::ConfigService
1631
1643
  # number of total possible rule-resource combinations in the conformance
1632
1644
  # pack. This metric provides you with a high-level view of the
1633
1645
  # compliance state of your conformance packs, and can be used to
1634
- # identify, investigate, and understand compliance deviations in your
1646
+ # identify, investigate, and understand the level of compliance in your
1635
1647
  # conformance packs.
1636
1648
  #
1637
1649
  # @!attribute [rw] score
1638
- # Compliance score for the conformance pack.
1650
+ # Compliance score for the conformance pack. Conformance packs with no
1651
+ # evaluation results will have a compliance score of
1652
+ # `INSUFFICIENT_DATA`.
1639
1653
  # @return [String]
1640
1654
  #
1641
1655
  # @!attribute [rw] conformance_pack_name
@@ -1668,8 +1682,11 @@ module Aws::ConfigService
1668
1682
  # }
1669
1683
  #
1670
1684
  # @!attribute [rw] conformance_pack_names
1671
- # The name of a conformance pack whose score should be included in the
1672
- # compliance score result.
1685
+ # The names of the conformance packs whose compliance scores you want
1686
+ # to include in the conformance pack compliance score result set. You
1687
+ # can include up to 25 conformance packs in the `ConformancePackNames`
1688
+ # array of strings, each with a character limit of 256 characters for
1689
+ # the conformance pack name.
1673
1690
  # @return [Array<String>]
1674
1691
  #
1675
1692
  # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConformancePackComplianceScoresFilters AWS API Documentation
@@ -2456,7 +2473,7 @@ module Aws::ConfigService
2456
2473
  # If you specify a bucket that belongs to another Amazon Web Services
2457
2474
  # account, that bucket must have policies that grant access
2458
2475
  # permissions to Config. For more information, see [Permissions for
2459
- # the Amazon S3 Bucket][1] in the Config Developer Guide.
2476
+ # the Amazon S3 Bucket][1] in the *Config Developer Guide*.
2460
2477
  #
2461
2478
  #
2462
2479
  #
@@ -2480,7 +2497,7 @@ module Aws::ConfigService
2480
2497
  # If you choose a topic from another account, the topic must have
2481
2498
  # policies that grant access permissions to Config. For more
2482
2499
  # information, see [Permissions for the Amazon SNS Topic][1] in the
2483
- # Config Developer Guide.
2500
+ # *Config Developer Guide*.
2484
2501
  #
2485
2502
  #
2486
2503
  #
@@ -5240,13 +5257,13 @@ module Aws::ConfigService
5240
5257
  #
5241
5258
  # * For PutOrganizationConfigRule, organization Config rule cannot be
5242
5259
  # created because you do not have permissions to call IAM `GetRole`
5243
- # action or create a service linked role.
5260
+ # action or create a service-linked role.
5244
5261
  #
5245
5262
  # * For PutConformancePack and PutOrganizationConformancePack, a
5246
5263
  # conformance pack cannot be created because you do not have
5247
5264
  # permissions:
5248
5265
  #
5249
- # * To call IAM `GetRole` action or create a service linked role.
5266
+ # * To call IAM `GetRole` action or create a service-linked role.
5250
5267
  #
5251
5268
  # * To read Amazon S3 bucket.
5252
5269
  #
@@ -5446,11 +5463,20 @@ module Aws::ConfigService
5446
5463
  # @!attribute [rw] sort_order
5447
5464
  # Determines the order in which conformance pack compliance scores are
5448
5465
  # sorted. Either in ascending or descending order.
5466
+ #
5467
+ # Conformance packs with a compliance score of `INSUFFICIENT_DATA`
5468
+ # will be first when sorting by ascending order and last when sorting
5469
+ # by descending order.
5449
5470
  # @return [String]
5450
5471
  #
5451
5472
  # @!attribute [rw] sort_by
5452
5473
  # Sorts your conformance pack compliance scores in either ascending or
5453
5474
  # descending order, depending on `SortOrder`.
5475
+ #
5476
+ # By default, conformance pack compliance scores are sorted in
5477
+ # ascending order by compliance score and alphabetically by name of
5478
+ # the conformance pack if there is more than one conformance pack with
5479
+ # the same compliance score.
5454
5480
  # @return [String]
5455
5481
  #
5456
5482
  # @!attribute [rw] limit
@@ -5482,7 +5508,7 @@ module Aws::ConfigService
5482
5508
  # @return [String]
5483
5509
  #
5484
5510
  # @!attribute [rw] conformance_pack_compliance_scores
5485
- # A list of `ConformancePackComplianceScore` objects
5511
+ # A list of `ConformancePackComplianceScore` objects.
5486
5512
  # @return [Array<Types::ConformancePackComplianceScore>]
5487
5513
  #
5488
5514
  # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ListConformancePackComplianceScoresResponse AWS API Documentation
@@ -7283,11 +7309,21 @@ module Aws::ConfigService
7283
7309
  # @return [String]
7284
7310
  #
7285
7311
  # @!attribute [rw] organization_managed_rule_metadata
7286
- # An `OrganizationManagedRuleMetadata` object.
7312
+ # An `OrganizationManagedRuleMetadata` object. This object specifies
7313
+ # organization managed rule metadata such as resource type and ID of
7314
+ # Amazon Web Services resource along with the rule identifier. It also
7315
+ # provides the frequency with which you want Config to run evaluations
7316
+ # for the rule if the trigger type is periodic.
7287
7317
  # @return [Types::OrganizationManagedRuleMetadata]
7288
7318
  #
7289
7319
  # @!attribute [rw] organization_custom_rule_metadata
7290
- # An `OrganizationCustomRuleMetadata` object.
7320
+ # An `OrganizationCustomRuleMetadata` object. This object specifies
7321
+ # organization custom rule metadata such as resource type, resource ID
7322
+ # of Amazon Web Services resource, Lambda function ARN, and
7323
+ # organization trigger types that trigger Config to evaluate your
7324
+ # Amazon Web Services resources against a rule. It also provides the
7325
+ # frequency with which you want Config to run evaluations for the rule
7326
+ # if the trigger type is periodic.
7291
7327
  # @return [Types::OrganizationCustomRuleMetadata]
7292
7328
  #
7293
7329
  # @!attribute [rw] excluded_accounts
@@ -7296,12 +7332,13 @@ module Aws::ConfigService
7296
7332
  # @return [Array<String>]
7297
7333
  #
7298
7334
  # @!attribute [rw] organization_custom_policy_rule_metadata
7299
- # An object that specifies metadata for your organization's Config
7300
- # Custom Policy rule. The metadata includes the runtime system in use,
7301
- # which accounts have debug logging enabled, and other custom rule
7302
- # metadata, such as resource type, resource ID of Amazon Web Services
7303
- # resource, and organization trigger types that initiate Config to
7304
- # evaluate Amazon Web Services resources against a rule.
7335
+ # An `OrganizationCustomPolicyRuleMetadata` object. This object
7336
+ # specifies metadata for your organization's Config Custom Policy
7337
+ # rule. The metadata includes the runtime system in use, which
7338
+ # accounts have debug logging enabled, and other custom rule metadata,
7339
+ # such as resource type, resource ID of Amazon Web Services resource,
7340
+ # and organization trigger types that initiate Config to evaluate
7341
+ # Amazon Web Services resources against a rule.
7305
7342
  # @return [Types::OrganizationCustomPolicyRuleMetadata]
7306
7343
  #
7307
7344
  # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutOrganizationConfigRuleRequest AWS API Documentation
@@ -7951,7 +7988,7 @@ module Aws::ConfigService
7951
7988
  # @return [String]
7952
7989
  #
7953
7990
  # @!attribute [rw] created_by_service
7954
- # Name of the service that owns the service linked rule, if
7991
+ # Name of the service that owns the service-linked rule, if
7955
7992
  # applicable.
7956
7993
  # @return [String]
7957
7994
  #
@@ -8578,9 +8615,11 @@ module Aws::ConfigService
8578
8615
  include Aws::Structure
8579
8616
  end
8580
8617
 
8581
- # Provides the CustomPolicyDetails, the rule owner (Amazon Web Services
8582
- # or customer), the rule identifier, and the events that cause the
8583
- # evaluation of your Amazon Web Services resources.
8618
+ # Provides the CustomPolicyDetails, the rule owner (`Amazon Web
8619
+ # Services` for managed rules, `CUSTOM_POLICY` for Custom Policy rules,
8620
+ # and `CUSTOM_LAMBDA` for Custom Lambda rules), the rule identifier, and
8621
+ # the events that cause the evaluation of your Amazon Web Services
8622
+ # resources.
8584
8623
  #
8585
8624
  # @note When making an API call, you may pass Source
8586
8625
  # data as a hash:
@@ -8608,11 +8647,11 @@ module Aws::ConfigService
8608
8647
  #
8609
8648
  # Config Managed Rules are predefined rules owned by Amazon Web
8610
8649
  # Services. For more information, see [Config Managed Rules][1] in the
8611
- # Config developer guide.
8650
+ # *Config developer guide*.
8612
8651
  #
8613
8652
  # Config Custom Rules are rules that you can develop either with Guard
8614
8653
  # (`CUSTOM_POLICY`) or Lambda (`CUSTOM_LAMBDA`). For more information,
8615
- # see [Config Custom Rules ][2] in the Config developer guide.
8654
+ # see [Config Custom Rules ][2] in the *Config developer guide*.
8616
8655
  #
8617
8656
  #
8618
8657
  #
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-configservice/customizations'
48
48
  # @!group service
49
49
  module Aws::ConfigService
50
50
 
51
- GEM_VERSION = '1.80.0'
51
+ GEM_VERSION = '1.81.0'
52
52
 
53
53
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-configservice
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.80.0
4
+ version: 1.81.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-07-27 00:00:00.000000000 Z
11
+ date: 2022-08-01 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core