aws-sdk-configservice 1.90.0 → 1.91.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9c29e07fbb34dcd649bd0eb35e4fa07b1cb1b84f0d369ab228ab68f5877c67fd
-  data.tar.gz: a62dad1057c86259a4fc5e305d777dfd459d1008a284a0e2d9eeda206bdaad8e
+  metadata.gz: 7d33762993583db897341bc3f6a90985b8011b375fae16b8ae92ad2643f3fd54
+  data.tar.gz: 2d4acba3dd54356194e24712a61586cc0cdb2d5b4b3a80260419fd8cb62986fd
 SHA512:
-  metadata.gz: 76e84e4a6492df51afabb43d5b2459cef91772b8a204b456e6cbf3085f339e543fa245d9442ba37cddd98627ed817097518c2d7e4b6641a73aec64f12db6d338
-  data.tar.gz: 62a4b3f30804a65265fe1f83c19fd5e7f0aa5b0a46aee24957e6195395b92bbc5ca84ecaf0ef746ddd415725c61c500b27c7e5a01e3968b39e31a5006444cc9f
+  metadata.gz: 4c4ddc71480153d47d1970cbbdaa25c68e79b2d92072e43b9921a5195b116111f84f5d437d335221d9cdc7f34a1156ea7e64101e37557f17bb735cffed369c13
+  data.tar.gz: 2a694a3f37720d756695cbfd17c626f911b08c7f8af01d42aae42f630bdba6f5977f9b44797162541ab881615d131ead5e01f1be98e049ae2dfeecebfa1d405f

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.91.0 (2023-05-31)
+------------------
+
+* Feature - Resource Types Exclusion feature launch by AWS Config
+
 1.90.0 (2023-05-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.90.0
+1.91.0

data/lib/aws-sdk-configservice/client.rb

@@ -275,6 +275,11 @@ module Aws::ConfigService
     #       in the future.
     #
     #
+    #   @option options [String] :sdk_ua_app_id
+    #     A unique and opaque application ID that is appended to the
+    #     User-Agent header as app/<sdk_ua_app_id>. It should have a
+    #     maximum length of 50.
+    #
     #   @option options [String] :secret_access_key
     #
     #   @option options [String] :session_token
@@ -1408,7 +1413,7 @@ module Aws::ConfigService
     #   Returns a list of Detective or Proactive Config rules. By default,
     #   this API returns an unfiltered list. For more information on Detective
     #   or Proactive Config rules, see [ **Evaluation Mode** ][1] in the
-    #   Config Developer Guide.
+    #   *Config Developer Guide*.
     #
     #
     #
@@ -1597,10 +1602,10 @@ module Aws::ConfigService
     # configuration recorder is not specified, this action returns the
     # status of all configuration recorders associated with the account.
     #
-    # <note markdown="1"> Currently, you can specify only one configuration recorder per region
-    # in your account. For a detailed status of recording events over time,
-    # add your Config events to Amazon CloudWatch metrics and use CloudWatch
-    # metrics.
+    # <note markdown="1"> &gt;You can specify only one configuration recorder for each Amazon
+    # Web Services Region for each account. For a detailed status of
+    # recording events over time, add your Config events to Amazon
+    # CloudWatch metrics and use CloudWatch metrics.
     #
     #  </note>
     #
@@ -1644,8 +1649,8 @@ module Aws::ConfigService
     # configuration recorder is not specified, this action returns the
     # details for all configuration recorders associated with the account.
     #
-    # <note markdown="1"> Currently, you can specify only one configuration recorder per region
-    # in your account.
+    # <note markdown="1"> You can specify only one configuration recorder for each Amazon Web
+    # Services Region for each account.
     #
     #  </note>
     #
@@ -1671,6 +1676,9 @@ module Aws::ConfigService
     #   resp.configuration_recorders[0].recording_group.include_global_resource_types #=> Boolean
     #   resp.configuration_recorders[0].recording_group.resource_types #=> Array
     #   resp.configuration_recorders[0].recording_group.resource_types[0] #=> String, one of "AWS::EC2::CustomerGateway", "AWS::EC2::EIP", "AWS::EC2::Host", "AWS::EC2::Instance", "AWS::EC2::InternetGateway", "AWS::EC2::NetworkAcl", "AWS::EC2::NetworkInterface", "AWS::EC2::RouteTable", "AWS::EC2::SecurityGroup", "AWS::EC2::Subnet", "AWS::CloudTrail::Trail", "AWS::EC2::Volume", "AWS::EC2::VPC", "AWS::EC2::VPNConnection", "AWS::EC2::VPNGateway", "AWS::EC2::RegisteredHAInstance", "AWS::EC2::NatGateway", "AWS::EC2::EgressOnlyInternetGateway", "AWS::EC2::VPCEndpoint", "AWS::EC2::VPCEndpointService", "AWS::EC2::FlowLog", "AWS::EC2::VPCPeeringConnection", "AWS::Elasticsearch::Domain", "AWS::IAM::Group", "AWS::IAM::Policy", "AWS::IAM::Role", "AWS::IAM::User", "AWS::ElasticLoadBalancingV2::LoadBalancer", "AWS::ACM::Certificate", "AWS::RDS::DBInstance", "AWS::RDS::DBSubnetGroup", "AWS::RDS::DBSecurityGroup", "AWS::RDS::DBSnapshot", "AWS::RDS::DBCluster", "AWS::RDS::DBClusterSnapshot", "AWS::RDS::EventSubscription", "AWS::S3::Bucket", "AWS::S3::AccountPublicAccessBlock", "AWS::Redshift::Cluster", "AWS::Redshift::ClusterSnapshot", "AWS::Redshift::ClusterParameterGroup", "AWS::Redshift::ClusterSecurityGroup", "AWS::Redshift::ClusterSubnetGroup", "AWS::Redshift::EventSubscription", "AWS::SSM::ManagedInstanceInventory", "AWS::CloudWatch::Alarm", "AWS::CloudFormation::Stack", "AWS::ElasticLoadBalancing::LoadBalancer", "AWS::AutoScaling::AutoScalingGroup", "AWS::AutoScaling::LaunchConfiguration", "AWS::AutoScaling::ScalingPolicy", "AWS::AutoScaling::ScheduledAction", "AWS::DynamoDB::Table", "AWS::CodeBuild::Project", "AWS::WAF::RateBasedRule", "AWS::WAF::Rule", "AWS::WAF::RuleGroup", "AWS::WAF::WebACL", "AWS::WAFRegional::RateBasedRule", "AWS::WAFRegional::Rule", "AWS::WAFRegional::RuleGroup", "AWS::WAFRegional::WebACL", "AWS::CloudFront::Distribution", "AWS::CloudFront::StreamingDistribution", "AWS::Lambda::Function", "AWS::NetworkFirewall::Firewall", "AWS::NetworkFirewall::FirewallPolicy", "AWS::NetworkFirewall::RuleGroup", "AWS::ElasticBeanstalk::Application", "AWS::ElasticBeanstalk::ApplicationVersion", "AWS::ElasticBeanstalk::Environment", "AWS::WAFv2::WebACL", "AWS::WAFv2::RuleGroup", "AWS::WAFv2::IPSet", "AWS::WAFv2::RegexPatternSet", "AWS::WAFv2::ManagedRuleSet", "AWS::XRay::EncryptionConfig", "AWS::SSM::AssociationCompliance", "AWS::SSM::PatchCompliance", "AWS::Shield::Protection", "AWS::ShieldRegional::Protection", "AWS::Config::ConformancePackCompliance", "AWS::Config::ResourceCompliance", "AWS::ApiGateway::Stage", "AWS::ApiGateway::RestApi", "AWS::ApiGatewayV2::Stage", "AWS::ApiGatewayV2::Api", "AWS::CodePipeline::Pipeline", "AWS::ServiceCatalog::CloudFormationProvisionedProduct", "AWS::ServiceCatalog::CloudFormationProduct", "AWS::ServiceCatalog::Portfolio", "AWS::SQS::Queue", "AWS::KMS::Key", "AWS::QLDB::Ledger", "AWS::SecretsManager::Secret", "AWS::SNS::Topic", "AWS::SSM::FileData", "AWS::Backup::BackupPlan", "AWS::Backup::BackupSelection", "AWS::Backup::BackupVault", "AWS::Backup::RecoveryPoint", "AWS::ECR::Repository", "AWS::ECS::Cluster", "AWS::ECS::Service", "AWS::ECS::TaskDefinition", "AWS::EFS::AccessPoint", "AWS::EFS::FileSystem", "AWS::EKS::Cluster", "AWS::OpenSearch::Domain", "AWS::EC2::TransitGateway", "AWS::Kinesis::Stream", "AWS::Kinesis::StreamConsumer", "AWS::CodeDeploy::Application", "AWS::CodeDeploy::DeploymentConfig", "AWS::CodeDeploy::DeploymentGroup", "AWS::EC2::LaunchTemplate", "AWS::ECR::PublicRepository", "AWS::GuardDuty::Detector", "AWS::EMR::SecurityConfiguration", "AWS::SageMaker::CodeRepository", "AWS::Route53Resolver::ResolverEndpoint", "AWS::Route53Resolver::ResolverRule", "AWS::Route53Resolver::ResolverRuleAssociation", "AWS::DMS::ReplicationSubnetGroup", "AWS::DMS::EventSubscription", "AWS::MSK::Cluster", "AWS::StepFunctions::Activity", "AWS::WorkSpaces::Workspace", "AWS::WorkSpaces::ConnectionAlias", "AWS::SageMaker::Model", "AWS::ElasticLoadBalancingV2::Listener", "AWS::StepFunctions::StateMachine", "AWS::Batch::JobQueue", "AWS::Batch::ComputeEnvironment", "AWS::AccessAnalyzer::Analyzer", "AWS::Athena::WorkGroup", "AWS::Athena::DataCatalog", "AWS::Detective::Graph", "AWS::GlobalAccelerator::Accelerator", "AWS::GlobalAccelerator::EndpointGroup", "AWS::GlobalAccelerator::Listener", "AWS::EC2::TransitGatewayAttachment", "AWS::EC2::TransitGatewayRouteTable", "AWS::DMS::Certificate", "AWS::AppConfig::Application", "AWS::AppSync::GraphQLApi", "AWS::DataSync::LocationSMB", "AWS::DataSync::LocationFSxLustre", "AWS::DataSync::LocationS3", "AWS::DataSync::LocationEFS", "AWS::DataSync::Task", "AWS::DataSync::LocationNFS", "AWS::EC2::NetworkInsightsAccessScopeAnalysis", "AWS::EKS::FargateProfile", "AWS::Glue::Job", "AWS::GuardDuty::ThreatIntelSet", "AWS::GuardDuty::IPSet", "AWS::SageMaker::Workteam", "AWS::SageMaker::NotebookInstanceLifecycleConfig", "AWS::ServiceDiscovery::Service", "AWS::ServiceDiscovery::PublicDnsNamespace", "AWS::SES::ContactList", "AWS::SES::ConfigurationSet", "AWS::Route53::HostedZone", "AWS::IoTEvents::Input", "AWS::IoTEvents::DetectorModel", "AWS::IoTEvents::AlarmModel", "AWS::ServiceDiscovery::HttpNamespace", "AWS::Events::EventBus", "AWS::ImageBuilder::ContainerRecipe", "AWS::ImageBuilder::DistributionConfiguration", "AWS::ImageBuilder::InfrastructureConfiguration", "AWS::DataSync::LocationObjectStorage", "AWS::DataSync::LocationHDFS", "AWS::Glue::Classifier", "AWS::Route53RecoveryReadiness::Cell", "AWS::Route53RecoveryReadiness::ReadinessCheck", "AWS::ECR::RegistryPolicy", "AWS::Backup::ReportPlan", "AWS::Lightsail::Certificate", "AWS::RUM::AppMonitor", "AWS::Events::Endpoint", "AWS::SES::ReceiptRuleSet", "AWS::Events::Archive", "AWS::Events::ApiDestination", "AWS::Lightsail::Disk", "AWS::FIS::ExperimentTemplate", "AWS::DataSync::LocationFSxWindows", "AWS::SES::ReceiptFilter", "AWS::GuardDuty::Filter", "AWS::SES::Template", "AWS::AmazonMQ::Broker", "AWS::AppConfig::Environment", "AWS::AppConfig::ConfigurationProfile", "AWS::Cloud9::EnvironmentEC2", "AWS::EventSchemas::Registry", "AWS::EventSchemas::RegistryPolicy", "AWS::EventSchemas::Discoverer", "AWS::FraudDetector::Label", "AWS::FraudDetector::EntityType", "AWS::FraudDetector::Variable", "AWS::FraudDetector::Outcome", "AWS::IoT::Authorizer", "AWS::IoT::SecurityProfile", "AWS::IoT::RoleAlias", "AWS::IoT::Dimension", "AWS::IoTAnalytics::Datastore", "AWS::Lightsail::Bucket", "AWS::Lightsail::StaticIp", "AWS::MediaPackage::PackagingGroup", "AWS::Route53RecoveryReadiness::RecoveryGroup", "AWS::ResilienceHub::ResiliencyPolicy", "AWS::Transfer::Workflow", "AWS::EKS::IdentityProviderConfig", "AWS::EKS::Addon", "AWS::Glue::MLTransform", "AWS::IoT::Policy", "AWS::IoT::MitigationAction", "AWS::IoTTwinMaker::Workspace", "AWS::IoTTwinMaker::Entity", "AWS::IoTAnalytics::Dataset", "AWS::IoTAnalytics::Pipeline", "AWS::IoTAnalytics::Channel", "AWS::IoTSiteWise::Dashboard", "AWS::IoTSiteWise::Project", "AWS::IoTSiteWise::Portal", "AWS::IoTSiteWise::AssetModel", "AWS::IVS::Channel", "AWS::IVS::RecordingConfiguration", "AWS::IVS::PlaybackKeyPair", "AWS::KinesisAnalyticsV2::Application", "AWS::RDS::GlobalCluster", "AWS::S3::MultiRegionAccessPoint", "AWS::DeviceFarm::TestGridProject", "AWS::Budgets::BudgetsAction", "AWS::Lex::Bot", "AWS::CodeGuruReviewer::RepositoryAssociation", "AWS::IoT::CustomMetric", "AWS::Route53Resolver::FirewallDomainList", "AWS::RoboMaker::RobotApplicationVersion", "AWS::EC2::TrafficMirrorSession", "AWS::IoTSiteWise::Gateway", "AWS::Lex::BotAlias", "AWS::LookoutMetrics::Alert", "AWS::IoT::AccountAuditConfiguration", "AWS::EC2::TrafficMirrorTarget", "AWS::S3::StorageLens", "AWS::IoT::ScheduledAudit", "AWS::Events::Connection", "AWS::EventSchemas::Schema", "AWS::MediaPackage::PackagingConfiguration", "AWS::KinesisVideo::SignalingChannel", "AWS::AppStream::DirectoryConfig", "AWS::LookoutVision::Project", "AWS::Route53RecoveryControl::Cluster", "AWS::Route53RecoveryControl::SafetyRule", "AWS::Route53RecoveryControl::ControlPanel", "AWS::Route53RecoveryControl::RoutingControl", "AWS::Route53RecoveryReadiness::ResourceSet", "AWS::RoboMaker::SimulationApplication", "AWS::RoboMaker::RobotApplication", "AWS::HealthLake::FHIRDatastore", "AWS::Pinpoint::Segment", "AWS::Pinpoint::ApplicationSettings", "AWS::Events::Rule", "AWS::EC2::DHCPOptions", "AWS::EC2::NetworkInsightsPath", "AWS::EC2::TrafficMirrorFilter", "AWS::EC2::IPAM", "AWS::IoTTwinMaker::Scene", "AWS::NetworkManager::TransitGatewayRegistration", "AWS::CustomerProfiles::Domain", "AWS::AutoScaling::WarmPool", "AWS::Connect::PhoneNumber", "AWS::AppConfig::DeploymentStrategy", "AWS::AppFlow::Flow", "AWS::AuditManager::Assessment", "AWS::CloudWatch::MetricStream", "AWS::DeviceFarm::InstanceProfile", "AWS::DeviceFarm::Project", "AWS::EC2::EC2Fleet", "AWS::EC2::SubnetRouteTableAssociation", "AWS::ECR::PullThroughCacheRule", "AWS::GroundStation::Config", "AWS::ImageBuilder::ImagePipeline", "AWS::IoT::FleetMetric", "AWS::IoTWireless::ServiceProfile", "AWS::NetworkManager::Device", "AWS::NetworkManager::GlobalNetwork", "AWS::NetworkManager::Link", "AWS::NetworkManager::Site", "AWS::Panorama::Package", "AWS::Pinpoint::App", "AWS::Redshift::ScheduledAction", "AWS::Route53Resolver::FirewallRuleGroupAssociation", "AWS::SageMaker::AppImageConfig", "AWS::SageMaker::Image"
+    #   resp.configuration_recorders[0].recording_group.exclusion_by_resource_types.resource_types #=> Array
+    #   resp.configuration_recorders[0].recording_group.exclusion_by_resource_types.resource_types[0] #=> String, one of "AWS::EC2::CustomerGateway", "AWS::EC2::EIP", "AWS::EC2::Host", "AWS::EC2::Instance", "AWS::EC2::InternetGateway", "AWS::EC2::NetworkAcl", "AWS::EC2::NetworkInterface", "AWS::EC2::RouteTable", "AWS::EC2::SecurityGroup", "AWS::EC2::Subnet", "AWS::CloudTrail::Trail", "AWS::EC2::Volume", "AWS::EC2::VPC", "AWS::EC2::VPNConnection", "AWS::EC2::VPNGateway", "AWS::EC2::RegisteredHAInstance", "AWS::EC2::NatGateway", "AWS::EC2::EgressOnlyInternetGateway", "AWS::EC2::VPCEndpoint", "AWS::EC2::VPCEndpointService", "AWS::EC2::FlowLog", "AWS::EC2::VPCPeeringConnection", "AWS::Elasticsearch::Domain", "AWS::IAM::Group", "AWS::IAM::Policy", "AWS::IAM::Role", "AWS::IAM::User", "AWS::ElasticLoadBalancingV2::LoadBalancer", "AWS::ACM::Certificate", "AWS::RDS::DBInstance", "AWS::RDS::DBSubnetGroup", "AWS::RDS::DBSecurityGroup", "AWS::RDS::DBSnapshot", "AWS::RDS::DBCluster", "AWS::RDS::DBClusterSnapshot", "AWS::RDS::EventSubscription", "AWS::S3::Bucket", "AWS::S3::AccountPublicAccessBlock", "AWS::Redshift::Cluster", "AWS::Redshift::ClusterSnapshot", "AWS::Redshift::ClusterParameterGroup", "AWS::Redshift::ClusterSecurityGroup", "AWS::Redshift::ClusterSubnetGroup", "AWS::Redshift::EventSubscription", "AWS::SSM::ManagedInstanceInventory", "AWS::CloudWatch::Alarm", "AWS::CloudFormation::Stack", "AWS::ElasticLoadBalancing::LoadBalancer", "AWS::AutoScaling::AutoScalingGroup", "AWS::AutoScaling::LaunchConfiguration", "AWS::AutoScaling::ScalingPolicy", "AWS::AutoScaling::ScheduledAction", "AWS::DynamoDB::Table", "AWS::CodeBuild::Project", "AWS::WAF::RateBasedRule", "AWS::WAF::Rule", "AWS::WAF::RuleGroup", "AWS::WAF::WebACL", "AWS::WAFRegional::RateBasedRule", "AWS::WAFRegional::Rule", "AWS::WAFRegional::RuleGroup", "AWS::WAFRegional::WebACL", "AWS::CloudFront::Distribution", "AWS::CloudFront::StreamingDistribution", "AWS::Lambda::Function", "AWS::NetworkFirewall::Firewall", "AWS::NetworkFirewall::FirewallPolicy", "AWS::NetworkFirewall::RuleGroup", "AWS::ElasticBeanstalk::Application", "AWS::ElasticBeanstalk::ApplicationVersion", "AWS::ElasticBeanstalk::Environment", "AWS::WAFv2::WebACL", "AWS::WAFv2::RuleGroup", "AWS::WAFv2::IPSet", "AWS::WAFv2::RegexPatternSet", "AWS::WAFv2::ManagedRuleSet", "AWS::XRay::EncryptionConfig", "AWS::SSM::AssociationCompliance", "AWS::SSM::PatchCompliance", "AWS::Shield::Protection", "AWS::ShieldRegional::Protection", "AWS::Config::ConformancePackCompliance", "AWS::Config::ResourceCompliance", "AWS::ApiGateway::Stage", "AWS::ApiGateway::RestApi", "AWS::ApiGatewayV2::Stage", "AWS::ApiGatewayV2::Api", "AWS::CodePipeline::Pipeline", "AWS::ServiceCatalog::CloudFormationProvisionedProduct", "AWS::ServiceCatalog::CloudFormationProduct", "AWS::ServiceCatalog::Portfolio", "AWS::SQS::Queue", "AWS::KMS::Key", "AWS::QLDB::Ledger", "AWS::SecretsManager::Secret", "AWS::SNS::Topic", "AWS::SSM::FileData", "AWS::Backup::BackupPlan", "AWS::Backup::BackupSelection", "AWS::Backup::BackupVault", "AWS::Backup::RecoveryPoint", "AWS::ECR::Repository", "AWS::ECS::Cluster", "AWS::ECS::Service", "AWS::ECS::TaskDefinition", "AWS::EFS::AccessPoint", "AWS::EFS::FileSystem", "AWS::EKS::Cluster", "AWS::OpenSearch::Domain", "AWS::EC2::TransitGateway", "AWS::Kinesis::Stream", "AWS::Kinesis::StreamConsumer", "AWS::CodeDeploy::Application", "AWS::CodeDeploy::DeploymentConfig", "AWS::CodeDeploy::DeploymentGroup", "AWS::EC2::LaunchTemplate", "AWS::ECR::PublicRepository", "AWS::GuardDuty::Detector", "AWS::EMR::SecurityConfiguration", "AWS::SageMaker::CodeRepository", "AWS::Route53Resolver::ResolverEndpoint", "AWS::Route53Resolver::ResolverRule", "AWS::Route53Resolver::ResolverRuleAssociation", "AWS::DMS::ReplicationSubnetGroup", "AWS::DMS::EventSubscription", "AWS::MSK::Cluster", "AWS::StepFunctions::Activity", "AWS::WorkSpaces::Workspace", "AWS::WorkSpaces::ConnectionAlias", "AWS::SageMaker::Model", "AWS::ElasticLoadBalancingV2::Listener", "AWS::StepFunctions::StateMachine", "AWS::Batch::JobQueue", "AWS::Batch::ComputeEnvironment", "AWS::AccessAnalyzer::Analyzer", "AWS::Athena::WorkGroup", "AWS::Athena::DataCatalog", "AWS::Detective::Graph", "AWS::GlobalAccelerator::Accelerator", "AWS::GlobalAccelerator::EndpointGroup", "AWS::GlobalAccelerator::Listener", "AWS::EC2::TransitGatewayAttachment", "AWS::EC2::TransitGatewayRouteTable", "AWS::DMS::Certificate", "AWS::AppConfig::Application", "AWS::AppSync::GraphQLApi", "AWS::DataSync::LocationSMB", "AWS::DataSync::LocationFSxLustre", "AWS::DataSync::LocationS3", "AWS::DataSync::LocationEFS", "AWS::DataSync::Task", "AWS::DataSync::LocationNFS", "AWS::EC2::NetworkInsightsAccessScopeAnalysis", "AWS::EKS::FargateProfile", "AWS::Glue::Job", "AWS::GuardDuty::ThreatIntelSet", "AWS::GuardDuty::IPSet", "AWS::SageMaker::Workteam", "AWS::SageMaker::NotebookInstanceLifecycleConfig", "AWS::ServiceDiscovery::Service", "AWS::ServiceDiscovery::PublicDnsNamespace", "AWS::SES::ContactList", "AWS::SES::ConfigurationSet", "AWS::Route53::HostedZone", "AWS::IoTEvents::Input", "AWS::IoTEvents::DetectorModel", "AWS::IoTEvents::AlarmModel", "AWS::ServiceDiscovery::HttpNamespace", "AWS::Events::EventBus", "AWS::ImageBuilder::ContainerRecipe", "AWS::ImageBuilder::DistributionConfiguration", "AWS::ImageBuilder::InfrastructureConfiguration", "AWS::DataSync::LocationObjectStorage", "AWS::DataSync::LocationHDFS", "AWS::Glue::Classifier", "AWS::Route53RecoveryReadiness::Cell", "AWS::Route53RecoveryReadiness::ReadinessCheck", "AWS::ECR::RegistryPolicy", "AWS::Backup::ReportPlan", "AWS::Lightsail::Certificate", "AWS::RUM::AppMonitor", "AWS::Events::Endpoint", "AWS::SES::ReceiptRuleSet", "AWS::Events::Archive", "AWS::Events::ApiDestination", "AWS::Lightsail::Disk", "AWS::FIS::ExperimentTemplate", "AWS::DataSync::LocationFSxWindows", "AWS::SES::ReceiptFilter", "AWS::GuardDuty::Filter", "AWS::SES::Template", "AWS::AmazonMQ::Broker", "AWS::AppConfig::Environment", "AWS::AppConfig::ConfigurationProfile", "AWS::Cloud9::EnvironmentEC2", "AWS::EventSchemas::Registry", "AWS::EventSchemas::RegistryPolicy", "AWS::EventSchemas::Discoverer", "AWS::FraudDetector::Label", "AWS::FraudDetector::EntityType", "AWS::FraudDetector::Variable", "AWS::FraudDetector::Outcome", "AWS::IoT::Authorizer", "AWS::IoT::SecurityProfile", "AWS::IoT::RoleAlias", "AWS::IoT::Dimension", "AWS::IoTAnalytics::Datastore", "AWS::Lightsail::Bucket", "AWS::Lightsail::StaticIp", "AWS::MediaPackage::PackagingGroup", "AWS::Route53RecoveryReadiness::RecoveryGroup", "AWS::ResilienceHub::ResiliencyPolicy", "AWS::Transfer::Workflow", "AWS::EKS::IdentityProviderConfig", "AWS::EKS::Addon", "AWS::Glue::MLTransform", "AWS::IoT::Policy", "AWS::IoT::MitigationAction", "AWS::IoTTwinMaker::Workspace", "AWS::IoTTwinMaker::Entity", "AWS::IoTAnalytics::Dataset", "AWS::IoTAnalytics::Pipeline", "AWS::IoTAnalytics::Channel", "AWS::IoTSiteWise::Dashboard", "AWS::IoTSiteWise::Project", "AWS::IoTSiteWise::Portal", "AWS::IoTSiteWise::AssetModel", "AWS::IVS::Channel", "AWS::IVS::RecordingConfiguration", "AWS::IVS::PlaybackKeyPair", "AWS::KinesisAnalyticsV2::Application", "AWS::RDS::GlobalCluster", "AWS::S3::MultiRegionAccessPoint", "AWS::DeviceFarm::TestGridProject", "AWS::Budgets::BudgetsAction", "AWS::Lex::Bot", "AWS::CodeGuruReviewer::RepositoryAssociation", "AWS::IoT::CustomMetric", "AWS::Route53Resolver::FirewallDomainList", "AWS::RoboMaker::RobotApplicationVersion", "AWS::EC2::TrafficMirrorSession", "AWS::IoTSiteWise::Gateway", "AWS::Lex::BotAlias", "AWS::LookoutMetrics::Alert", "AWS::IoT::AccountAuditConfiguration", "AWS::EC2::TrafficMirrorTarget", "AWS::S3::StorageLens", "AWS::IoT::ScheduledAudit", "AWS::Events::Connection", "AWS::EventSchemas::Schema", "AWS::MediaPackage::PackagingConfiguration", "AWS::KinesisVideo::SignalingChannel", "AWS::AppStream::DirectoryConfig", "AWS::LookoutVision::Project", "AWS::Route53RecoveryControl::Cluster", "AWS::Route53RecoveryControl::SafetyRule", "AWS::Route53RecoveryControl::ControlPanel", "AWS::Route53RecoveryControl::RoutingControl", "AWS::Route53RecoveryReadiness::ResourceSet", "AWS::RoboMaker::SimulationApplication", "AWS::RoboMaker::RobotApplication", "AWS::HealthLake::FHIRDatastore", "AWS::Pinpoint::Segment", "AWS::Pinpoint::ApplicationSettings", "AWS::Events::Rule", "AWS::EC2::DHCPOptions", "AWS::EC2::NetworkInsightsPath", "AWS::EC2::TrafficMirrorFilter", "AWS::EC2::IPAM", "AWS::IoTTwinMaker::Scene", "AWS::NetworkManager::TransitGatewayRegistration", "AWS::CustomerProfiles::Domain", "AWS::AutoScaling::WarmPool", "AWS::Connect::PhoneNumber", "AWS::AppConfig::DeploymentStrategy", "AWS::AppFlow::Flow", "AWS::AuditManager::Assessment", "AWS::CloudWatch::MetricStream", "AWS::DeviceFarm::InstanceProfile", "AWS::DeviceFarm::Project", "AWS::EC2::EC2Fleet", "AWS::EC2::SubnetRouteTableAssociation", "AWS::ECR::PullThroughCacheRule", "AWS::GroundStation::Config", "AWS::ImageBuilder::ImagePipeline", "AWS::IoT::FleetMetric", "AWS::IoTWireless::ServiceProfile", "AWS::NetworkManager::Device", "AWS::NetworkManager::GlobalNetwork", "AWS::NetworkManager::Link", "AWS::NetworkManager::Site", "AWS::Panorama::Package", "AWS::Pinpoint::App", "AWS::Redshift::ScheduledAction", "AWS::Route53Resolver::FirewallRuleGroupAssociation", "AWS::SageMaker::AppImageConfig", "AWS::SageMaker::Image"
+    #   resp.configuration_recorders[0].recording_group.recording_strategy.use_only #=> String, one of "ALL_SUPPORTED_RESOURCE_TYPES", "INCLUSION_BY_RESOURCE_TYPES", "EXCLUSION_BY_RESOURCE_TYPES"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/DescribeConfigurationRecorders AWS API Documentation
     #
@@ -4337,25 +4345,29 @@ module Aws::ConfigService
       req.send_request(options)
     end
 
-    # Creates a new configuration recorder to record the selected resource
-    # configurations.
+    # Creates a new configuration recorder to record configuration changes
+    # for specified resource types.
     #
-    # You can use this action to change the role `roleARN` or the
-    # `recordingGroup` of an existing recorder. To change the role, call the
-    # action on the existing configuration recorder and specify a role.
+    # You can also use this action to change the `roleARN` or the
+    # `recordingGroup` of an existing recorder. For more information, see [
+    # **Managing the Configuration Recorder** ][1] in the *Config Developer
+    # Guide*.
     #
-    # <note markdown="1"> Currently, you can specify only one configuration recorder per region
-    # in your account.
+    # <note markdown="1"> You can specify only one configuration recorder for each Amazon Web
+    # Services Region for each account.
     #
-    #  If `ConfigurationRecorder` does not have the **recordingGroup**
-    # parameter specified, the default is to record all supported resource
-    # types.
+    #  If the configuration recorder does not have the `recordingGroup` field
+    # specified, the default is to record all supported resource types.
     #
     #  </note>
     #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/config/latest/developerguide/stop-start-recorder.html
+    #
     # @option params [required, Types::ConfigurationRecorder] :configuration_recorder
-    #   The configuration recorder object that records each configuration
-    #   change made to the resources.
+    #   An object for the configuration recorder to record configuration
+    #   changes for specified resource types.
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -4369,6 +4381,12 @@ module Aws::ConfigService
     #         all_supported: false,
     #         include_global_resource_types: false,
     #         resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone, AWS::IoTEvents::Input, AWS::IoTEvents::DetectorModel, AWS::IoTEvents::AlarmModel, AWS::ServiceDiscovery::HttpNamespace, AWS::Events::EventBus, AWS::ImageBuilder::ContainerRecipe, AWS::ImageBuilder::DistributionConfiguration, AWS::ImageBuilder::InfrastructureConfiguration, AWS::DataSync::LocationObjectStorage, AWS::DataSync::LocationHDFS, AWS::Glue::Classifier, AWS::Route53RecoveryReadiness::Cell, AWS::Route53RecoveryReadiness::ReadinessCheck, AWS::ECR::RegistryPolicy, AWS::Backup::ReportPlan, AWS::Lightsail::Certificate, AWS::RUM::AppMonitor, AWS::Events::Endpoint, AWS::SES::ReceiptRuleSet, AWS::Events::Archive, AWS::Events::ApiDestination, AWS::Lightsail::Disk, AWS::FIS::ExperimentTemplate, AWS::DataSync::LocationFSxWindows, AWS::SES::ReceiptFilter, AWS::GuardDuty::Filter, AWS::SES::Template, AWS::AmazonMQ::Broker, AWS::AppConfig::Environment, AWS::AppConfig::ConfigurationProfile, AWS::Cloud9::EnvironmentEC2, AWS::EventSchemas::Registry, AWS::EventSchemas::RegistryPolicy, AWS::EventSchemas::Discoverer, AWS::FraudDetector::Label, AWS::FraudDetector::EntityType, AWS::FraudDetector::Variable, AWS::FraudDetector::Outcome, AWS::IoT::Authorizer, AWS::IoT::SecurityProfile, AWS::IoT::RoleAlias, AWS::IoT::Dimension, AWS::IoTAnalytics::Datastore, AWS::Lightsail::Bucket, AWS::Lightsail::StaticIp, AWS::MediaPackage::PackagingGroup, AWS::Route53RecoveryReadiness::RecoveryGroup, AWS::ResilienceHub::ResiliencyPolicy, AWS::Transfer::Workflow, AWS::EKS::IdentityProviderConfig, AWS::EKS::Addon, AWS::Glue::MLTransform, AWS::IoT::Policy, AWS::IoT::MitigationAction, AWS::IoTTwinMaker::Workspace, AWS::IoTTwinMaker::Entity, AWS::IoTAnalytics::Dataset, AWS::IoTAnalytics::Pipeline, AWS::IoTAnalytics::Channel, AWS::IoTSiteWise::Dashboard, AWS::IoTSiteWise::Project, AWS::IoTSiteWise::Portal, AWS::IoTSiteWise::AssetModel, AWS::IVS::Channel, AWS::IVS::RecordingConfiguration, AWS::IVS::PlaybackKeyPair, AWS::KinesisAnalyticsV2::Application, AWS::RDS::GlobalCluster, AWS::S3::MultiRegionAccessPoint, AWS::DeviceFarm::TestGridProject, AWS::Budgets::BudgetsAction, AWS::Lex::Bot, AWS::CodeGuruReviewer::RepositoryAssociation, AWS::IoT::CustomMetric, AWS::Route53Resolver::FirewallDomainList, AWS::RoboMaker::RobotApplicationVersion, AWS::EC2::TrafficMirrorSession, AWS::IoTSiteWise::Gateway, AWS::Lex::BotAlias, AWS::LookoutMetrics::Alert, AWS::IoT::AccountAuditConfiguration, AWS::EC2::TrafficMirrorTarget, AWS::S3::StorageLens, AWS::IoT::ScheduledAudit, AWS::Events::Connection, AWS::EventSchemas::Schema, AWS::MediaPackage::PackagingConfiguration, AWS::KinesisVideo::SignalingChannel, AWS::AppStream::DirectoryConfig, AWS::LookoutVision::Project, AWS::Route53RecoveryControl::Cluster, AWS::Route53RecoveryControl::SafetyRule, AWS::Route53RecoveryControl::ControlPanel, AWS::Route53RecoveryControl::RoutingControl, AWS::Route53RecoveryReadiness::ResourceSet, AWS::RoboMaker::SimulationApplication, AWS::RoboMaker::RobotApplication, AWS::HealthLake::FHIRDatastore, AWS::Pinpoint::Segment, AWS::Pinpoint::ApplicationSettings, AWS::Events::Rule, AWS::EC2::DHCPOptions, AWS::EC2::NetworkInsightsPath, AWS::EC2::TrafficMirrorFilter, AWS::EC2::IPAM, AWS::IoTTwinMaker::Scene, AWS::NetworkManager::TransitGatewayRegistration, AWS::CustomerProfiles::Domain, AWS::AutoScaling::WarmPool, AWS::Connect::PhoneNumber, AWS::AppConfig::DeploymentStrategy, AWS::AppFlow::Flow, AWS::AuditManager::Assessment, AWS::CloudWatch::MetricStream, AWS::DeviceFarm::InstanceProfile, AWS::DeviceFarm::Project, AWS::EC2::EC2Fleet, AWS::EC2::SubnetRouteTableAssociation, AWS::ECR::PullThroughCacheRule, AWS::GroundStation::Config, AWS::ImageBuilder::ImagePipeline, AWS::IoT::FleetMetric, AWS::IoTWireless::ServiceProfile, AWS::NetworkManager::Device, AWS::NetworkManager::GlobalNetwork, AWS::NetworkManager::Link, AWS::NetworkManager::Site, AWS::Panorama::Package, AWS::Pinpoint::App, AWS::Redshift::ScheduledAction, AWS::Route53Resolver::FirewallRuleGroupAssociation, AWS::SageMaker::AppImageConfig, AWS::SageMaker::Image
+    #         exclusion_by_resource_types: {
+    #           resource_types: ["AWS::EC2::CustomerGateway"], # accepts AWS::EC2::CustomerGateway, AWS::EC2::EIP, AWS::EC2::Host, AWS::EC2::Instance, AWS::EC2::InternetGateway, AWS::EC2::NetworkAcl, AWS::EC2::NetworkInterface, AWS::EC2::RouteTable, AWS::EC2::SecurityGroup, AWS::EC2::Subnet, AWS::CloudTrail::Trail, AWS::EC2::Volume, AWS::EC2::VPC, AWS::EC2::VPNConnection, AWS::EC2::VPNGateway, AWS::EC2::RegisteredHAInstance, AWS::EC2::NatGateway, AWS::EC2::EgressOnlyInternetGateway, AWS::EC2::VPCEndpoint, AWS::EC2::VPCEndpointService, AWS::EC2::FlowLog, AWS::EC2::VPCPeeringConnection, AWS::Elasticsearch::Domain, AWS::IAM::Group, AWS::IAM::Policy, AWS::IAM::Role, AWS::IAM::User, AWS::ElasticLoadBalancingV2::LoadBalancer, AWS::ACM::Certificate, AWS::RDS::DBInstance, AWS::RDS::DBSubnetGroup, AWS::RDS::DBSecurityGroup, AWS::RDS::DBSnapshot, AWS::RDS::DBCluster, AWS::RDS::DBClusterSnapshot, AWS::RDS::EventSubscription, AWS::S3::Bucket, AWS::S3::AccountPublicAccessBlock, AWS::Redshift::Cluster, AWS::Redshift::ClusterSnapshot, AWS::Redshift::ClusterParameterGroup, AWS::Redshift::ClusterSecurityGroup, AWS::Redshift::ClusterSubnetGroup, AWS::Redshift::EventSubscription, AWS::SSM::ManagedInstanceInventory, AWS::CloudWatch::Alarm, AWS::CloudFormation::Stack, AWS::ElasticLoadBalancing::LoadBalancer, AWS::AutoScaling::AutoScalingGroup, AWS::AutoScaling::LaunchConfiguration, AWS::AutoScaling::ScalingPolicy, AWS::AutoScaling::ScheduledAction, AWS::DynamoDB::Table, AWS::CodeBuild::Project, AWS::WAF::RateBasedRule, AWS::WAF::Rule, AWS::WAF::RuleGroup, AWS::WAF::WebACL, AWS::WAFRegional::RateBasedRule, AWS::WAFRegional::Rule, AWS::WAFRegional::RuleGroup, AWS::WAFRegional::WebACL, AWS::CloudFront::Distribution, AWS::CloudFront::StreamingDistribution, AWS::Lambda::Function, AWS::NetworkFirewall::Firewall, AWS::NetworkFirewall::FirewallPolicy, AWS::NetworkFirewall::RuleGroup, AWS::ElasticBeanstalk::Application, AWS::ElasticBeanstalk::ApplicationVersion, AWS::ElasticBeanstalk::Environment, AWS::WAFv2::WebACL, AWS::WAFv2::RuleGroup, AWS::WAFv2::IPSet, AWS::WAFv2::RegexPatternSet, AWS::WAFv2::ManagedRuleSet, AWS::XRay::EncryptionConfig, AWS::SSM::AssociationCompliance, AWS::SSM::PatchCompliance, AWS::Shield::Protection, AWS::ShieldRegional::Protection, AWS::Config::ConformancePackCompliance, AWS::Config::ResourceCompliance, AWS::ApiGateway::Stage, AWS::ApiGateway::RestApi, AWS::ApiGatewayV2::Stage, AWS::ApiGatewayV2::Api, AWS::CodePipeline::Pipeline, AWS::ServiceCatalog::CloudFormationProvisionedProduct, AWS::ServiceCatalog::CloudFormationProduct, AWS::ServiceCatalog::Portfolio, AWS::SQS::Queue, AWS::KMS::Key, AWS::QLDB::Ledger, AWS::SecretsManager::Secret, AWS::SNS::Topic, AWS::SSM::FileData, AWS::Backup::BackupPlan, AWS::Backup::BackupSelection, AWS::Backup::BackupVault, AWS::Backup::RecoveryPoint, AWS::ECR::Repository, AWS::ECS::Cluster, AWS::ECS::Service, AWS::ECS::TaskDefinition, AWS::EFS::AccessPoint, AWS::EFS::FileSystem, AWS::EKS::Cluster, AWS::OpenSearch::Domain, AWS::EC2::TransitGateway, AWS::Kinesis::Stream, AWS::Kinesis::StreamConsumer, AWS::CodeDeploy::Application, AWS::CodeDeploy::DeploymentConfig, AWS::CodeDeploy::DeploymentGroup, AWS::EC2::LaunchTemplate, AWS::ECR::PublicRepository, AWS::GuardDuty::Detector, AWS::EMR::SecurityConfiguration, AWS::SageMaker::CodeRepository, AWS::Route53Resolver::ResolverEndpoint, AWS::Route53Resolver::ResolverRule, AWS::Route53Resolver::ResolverRuleAssociation, AWS::DMS::ReplicationSubnetGroup, AWS::DMS::EventSubscription, AWS::MSK::Cluster, AWS::StepFunctions::Activity, AWS::WorkSpaces::Workspace, AWS::WorkSpaces::ConnectionAlias, AWS::SageMaker::Model, AWS::ElasticLoadBalancingV2::Listener, AWS::StepFunctions::StateMachine, AWS::Batch::JobQueue, AWS::Batch::ComputeEnvironment, AWS::AccessAnalyzer::Analyzer, AWS::Athena::WorkGroup, AWS::Athena::DataCatalog, AWS::Detective::Graph, AWS::GlobalAccelerator::Accelerator, AWS::GlobalAccelerator::EndpointGroup, AWS::GlobalAccelerator::Listener, AWS::EC2::TransitGatewayAttachment, AWS::EC2::TransitGatewayRouteTable, AWS::DMS::Certificate, AWS::AppConfig::Application, AWS::AppSync::GraphQLApi, AWS::DataSync::LocationSMB, AWS::DataSync::LocationFSxLustre, AWS::DataSync::LocationS3, AWS::DataSync::LocationEFS, AWS::DataSync::Task, AWS::DataSync::LocationNFS, AWS::EC2::NetworkInsightsAccessScopeAnalysis, AWS::EKS::FargateProfile, AWS::Glue::Job, AWS::GuardDuty::ThreatIntelSet, AWS::GuardDuty::IPSet, AWS::SageMaker::Workteam, AWS::SageMaker::NotebookInstanceLifecycleConfig, AWS::ServiceDiscovery::Service, AWS::ServiceDiscovery::PublicDnsNamespace, AWS::SES::ContactList, AWS::SES::ConfigurationSet, AWS::Route53::HostedZone, AWS::IoTEvents::Input, AWS::IoTEvents::DetectorModel, AWS::IoTEvents::AlarmModel, AWS::ServiceDiscovery::HttpNamespace, AWS::Events::EventBus, AWS::ImageBuilder::ContainerRecipe, AWS::ImageBuilder::DistributionConfiguration, AWS::ImageBuilder::InfrastructureConfiguration, AWS::DataSync::LocationObjectStorage, AWS::DataSync::LocationHDFS, AWS::Glue::Classifier, AWS::Route53RecoveryReadiness::Cell, AWS::Route53RecoveryReadiness::ReadinessCheck, AWS::ECR::RegistryPolicy, AWS::Backup::ReportPlan, AWS::Lightsail::Certificate, AWS::RUM::AppMonitor, AWS::Events::Endpoint, AWS::SES::ReceiptRuleSet, AWS::Events::Archive, AWS::Events::ApiDestination, AWS::Lightsail::Disk, AWS::FIS::ExperimentTemplate, AWS::DataSync::LocationFSxWindows, AWS::SES::ReceiptFilter, AWS::GuardDuty::Filter, AWS::SES::Template, AWS::AmazonMQ::Broker, AWS::AppConfig::Environment, AWS::AppConfig::ConfigurationProfile, AWS::Cloud9::EnvironmentEC2, AWS::EventSchemas::Registry, AWS::EventSchemas::RegistryPolicy, AWS::EventSchemas::Discoverer, AWS::FraudDetector::Label, AWS::FraudDetector::EntityType, AWS::FraudDetector::Variable, AWS::FraudDetector::Outcome, AWS::IoT::Authorizer, AWS::IoT::SecurityProfile, AWS::IoT::RoleAlias, AWS::IoT::Dimension, AWS::IoTAnalytics::Datastore, AWS::Lightsail::Bucket, AWS::Lightsail::StaticIp, AWS::MediaPackage::PackagingGroup, AWS::Route53RecoveryReadiness::RecoveryGroup, AWS::ResilienceHub::ResiliencyPolicy, AWS::Transfer::Workflow, AWS::EKS::IdentityProviderConfig, AWS::EKS::Addon, AWS::Glue::MLTransform, AWS::IoT::Policy, AWS::IoT::MitigationAction, AWS::IoTTwinMaker::Workspace, AWS::IoTTwinMaker::Entity, AWS::IoTAnalytics::Dataset, AWS::IoTAnalytics::Pipeline, AWS::IoTAnalytics::Channel, AWS::IoTSiteWise::Dashboard, AWS::IoTSiteWise::Project, AWS::IoTSiteWise::Portal, AWS::IoTSiteWise::AssetModel, AWS::IVS::Channel, AWS::IVS::RecordingConfiguration, AWS::IVS::PlaybackKeyPair, AWS::KinesisAnalyticsV2::Application, AWS::RDS::GlobalCluster, AWS::S3::MultiRegionAccessPoint, AWS::DeviceFarm::TestGridProject, AWS::Budgets::BudgetsAction, AWS::Lex::Bot, AWS::CodeGuruReviewer::RepositoryAssociation, AWS::IoT::CustomMetric, AWS::Route53Resolver::FirewallDomainList, AWS::RoboMaker::RobotApplicationVersion, AWS::EC2::TrafficMirrorSession, AWS::IoTSiteWise::Gateway, AWS::Lex::BotAlias, AWS::LookoutMetrics::Alert, AWS::IoT::AccountAuditConfiguration, AWS::EC2::TrafficMirrorTarget, AWS::S3::StorageLens, AWS::IoT::ScheduledAudit, AWS::Events::Connection, AWS::EventSchemas::Schema, AWS::MediaPackage::PackagingConfiguration, AWS::KinesisVideo::SignalingChannel, AWS::AppStream::DirectoryConfig, AWS::LookoutVision::Project, AWS::Route53RecoveryControl::Cluster, AWS::Route53RecoveryControl::SafetyRule, AWS::Route53RecoveryControl::ControlPanel, AWS::Route53RecoveryControl::RoutingControl, AWS::Route53RecoveryReadiness::ResourceSet, AWS::RoboMaker::SimulationApplication, AWS::RoboMaker::RobotApplication, AWS::HealthLake::FHIRDatastore, AWS::Pinpoint::Segment, AWS::Pinpoint::ApplicationSettings, AWS::Events::Rule, AWS::EC2::DHCPOptions, AWS::EC2::NetworkInsightsPath, AWS::EC2::TrafficMirrorFilter, AWS::EC2::IPAM, AWS::IoTTwinMaker::Scene, AWS::NetworkManager::TransitGatewayRegistration, AWS::CustomerProfiles::Domain, AWS::AutoScaling::WarmPool, AWS::Connect::PhoneNumber, AWS::AppConfig::DeploymentStrategy, AWS::AppFlow::Flow, AWS::AuditManager::Assessment, AWS::CloudWatch::MetricStream, AWS::DeviceFarm::InstanceProfile, AWS::DeviceFarm::Project, AWS::EC2::EC2Fleet, AWS::EC2::SubnetRouteTableAssociation, AWS::ECR::PullThroughCacheRule, AWS::GroundStation::Config, AWS::ImageBuilder::ImagePipeline, AWS::IoT::FleetMetric, AWS::IoTWireless::ServiceProfile, AWS::NetworkManager::Device, AWS::NetworkManager::GlobalNetwork, AWS::NetworkManager::Link, AWS::NetworkManager::Site, AWS::Panorama::Package, AWS::Pinpoint::App, AWS::Redshift::ScheduledAction, AWS::Route53Resolver::FirewallRuleGroupAssociation, AWS::SageMaker::AppImageConfig, AWS::SageMaker::Image
+    #         },
+    #         recording_strategy: {
+    #           use_only: "ALL_SUPPORTED_RESOURCE_TYPES", # accepts ALL_SUPPORTED_RESOURCE_TYPES, INCLUSION_BY_RESOURCE_TYPES, EXCLUSION_BY_RESOURCE_TYPES
+    #         },
     #       },
     #     },
     #   })
@@ -4386,7 +4404,7 @@ module Aws::ConfigService
     # collection of Config rules that can be easily deployed in an account
     # and a region and across an organization. For information on how many
     # conformance packs you can have per account, see [ **Service Limits**
-    # ][1] in the Config Developer Guide.
+    # ][1] in the *Config Developer Guide*.
     #
     # This API creates a service-linked role
     # `AWSServiceRoleForConfigConforms` in your account. The service-linked
@@ -4791,7 +4809,7 @@ module Aws::ConfigService
     # Deploys conformance packs across member accounts in an Amazon Web
     # Services Organization. For information on how many organization
     # conformance packs and how many Config rules you can have per account,
-    # see [ **Service Limits** ][1] in the Config Developer Guide.
+    # see [ **Service Limits** ][1] in the *Config Developer Guide*.
     #
     # Only a management account and a delegated administrator can call this
     # API. When calling this API with a delegated administrator, you must
@@ -5030,7 +5048,7 @@ module Aws::ConfigService
     # resources that are `NOT_APPLICABLE`, a remediation exception will not
     # be generated. For more information on the conditions that initiate the
     # possible Config evaluation results, see [Concepts \| Config Rules][1]
-    # in the Config Developer Guide.
+    # in the *Config Developer Guide*.
     #
     #  </note>
     #
@@ -5283,7 +5301,7 @@ module Aws::ConfigService
     # properties.
     #
     # For more information about query components, see the [ **Query
-    # Components** ][1] section in the Config Developer Guide.
+    # Components** ][1] section in the *Config Developer Guide*.
     #
     # <note markdown="1"> If you run an aggregation query (i.e., using `GROUP BY` or using
     # aggregate functions such as `COUNT`; e.g., `SELECT resourceId,
@@ -5738,7 +5756,7 @@ module Aws::ConfigService
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-configservice'
-      context[:gem_version] = '1.90.0'
+      context[:gem_version] = '1.91.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-configservice/client_api.rb

@@ -238,6 +238,7 @@ module Aws::ConfigService
     Evaluations = Shapes::ListShape.new(name: 'Evaluations')
     EventSource = Shapes::StringShape.new(name: 'EventSource')
     ExcludedAccounts = Shapes::ListShape.new(name: 'ExcludedAccounts')
+    ExclusionByResourceTypes = Shapes::StructureShape.new(name: 'ExclusionByResourceTypes')
     ExecutionControls = Shapes::StructureShape.new(name: 'ExecutionControls')
     Expression = Shapes::StringShape.new(name: 'Expression')
     ExternalEvaluation = Shapes::StructureShape.new(name: 'ExternalEvaluation')
@@ -435,6 +436,8 @@ module Aws::ConfigService
     RecorderName = Shapes::StringShape.new(name: 'RecorderName')
     RecorderStatus = Shapes::StringShape.new(name: 'RecorderStatus')
     RecordingGroup = Shapes::StructureShape.new(name: 'RecordingGroup')
+    RecordingStrategy = Shapes::StructureShape.new(name: 'RecordingStrategy')
+    RecordingStrategyType = Shapes::StringShape.new(name: 'RecordingStrategyType')
     ReevaluateConfigRuleNames = Shapes::ListShape.new(name: 'ReevaluateConfigRuleNames')
     RelatedEvent = Shapes::StringShape.new(name: 'RelatedEvent')
     RelatedEventList = Shapes::ListShape.new(name: 'RelatedEventList')
@@ -1287,6 +1290,9 @@ module Aws::ConfigService
 
     ExcludedAccounts.member = Shapes::ShapeRef.new(shape: AccountId)
 
+    ExclusionByResourceTypes.add_member(:resource_types, Shapes::ShapeRef.new(shape: ResourceTypeList, location_name: "resourceTypes"))
+    ExclusionByResourceTypes.struct_class = Types::ExclusionByResourceTypes
+
     ExecutionControls.add_member(:ssm_controls, Shapes::ShapeRef.new(shape: SsmControls, location_name: "SsmControls"))
     ExecutionControls.struct_class = Types::ExecutionControls
 
@@ -1905,8 +1911,13 @@ module Aws::ConfigService
     RecordingGroup.add_member(:all_supported, Shapes::ShapeRef.new(shape: AllSupported, location_name: "allSupported"))
     RecordingGroup.add_member(:include_global_resource_types, Shapes::ShapeRef.new(shape: IncludeGlobalResourceTypes, location_name: "includeGlobalResourceTypes"))
     RecordingGroup.add_member(:resource_types, Shapes::ShapeRef.new(shape: ResourceTypeList, location_name: "resourceTypes"))
+    RecordingGroup.add_member(:exclusion_by_resource_types, Shapes::ShapeRef.new(shape: ExclusionByResourceTypes, location_name: "exclusionByResourceTypes"))
+    RecordingGroup.add_member(:recording_strategy, Shapes::ShapeRef.new(shape: RecordingStrategy, location_name: "recordingStrategy"))
     RecordingGroup.struct_class = Types::RecordingGroup
 
+    RecordingStrategy.add_member(:use_only, Shapes::ShapeRef.new(shape: RecordingStrategyType, location_name: "useOnly"))
+    RecordingStrategy.struct_class = Types::RecordingStrategy
+
     ReevaluateConfigRuleNames.member = Shapes::ShapeRef.new(shape: ConfigRuleName)
 
     RelatedEventList.member = Shapes::ShapeRef.new(shape: RelatedEvent)

data/lib/aws-sdk-configservice/types.rb

@@ -1393,29 +1393,82 @@ module Aws::ConfigService
       include Aws::Structure
     end
 
-    # An object that represents the recording of configuration changes of an
-    # Amazon Web Services resource.
+    # Records configuration changes to specified resource types. For more
+    # information about the configuration recorder, see [ **Managing the
+    # Configuration Recorder** ][1] in the *Config Developer Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/config/latest/developerguide/stop-start-recorder.html
     #
     # @!attribute [rw] name
-    #   The name of the recorder. By default, Config automatically assigns
-    #   the name "default" when creating the configuration recorder. You
-    #   cannot change the assigned name.
+    #   The name of the configuration recorder. Config automatically assigns
+    #   the name of "default" when creating the configuration recorder.
+    #
+    #   You cannot change the name of the configuration recorder after it
+    #   has been created. To change the configuration recorder name, you
+    #   must delete it and create a new configuration recorder with a new
+    #   name.
     #   @return [String]
     #
     # @!attribute [rw] role_arn
-    #   Amazon Resource Name (ARN) of the IAM role used to describe the
-    #   Amazon Web Services resources associated with the account.
+    #   Amazon Resource Name (ARN) of the IAM role assumed by Config and
+    #   used by the configuration recorder.
     #
     #   <note markdown="1"> While the API model does not require this field, the server will
-    #   reject a request without a defined roleARN for the configuration
+    #   reject a request without a defined `roleARN` for the configuration
     #   recorder.
     #
     #    </note>
+    #
+    #   <note markdown="1"> **Pre-existing Config role**
+    #
+    #    If you have used an Amazon Web Services service that uses Config,
+    #   such as Security Hub or Control Tower, and an Config role has
+    #   already been created, make sure that the IAM role that you use when
+    #   setting up Config keeps the same minimum permissions as the already
+    #   created Config role. You must do this so that the other Amazon Web
+    #   Services service continues to run as expected.
+    #
+    #    For example, if Control Tower has an IAM role that allows Config to
+    #   read Amazon Simple Storage Service (Amazon S3) objects, make sure
+    #   that the same permissions are granted within the IAM role you use
+    #   when setting up Config. Otherwise, it may interfere with how Control
+    #   Tower operates. For more information about IAM roles for Config, see
+    #   [ **Identity and Access Management for Config** ][1] in the *Config
+    #   Developer Guide*.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/config/latest/developerguide/security-iam.html
     #   @return [String]
     #
     # @!attribute [rw] recording_group
-    #   Specifies the types of Amazon Web Services resources for which
-    #   Config records configuration changes.
+    #   Specifies which resource types Config records for configuration
+    #   changes.
+    #
+    #   <note markdown="1"> <b> High Number of Config Evaluations</b>
+    #
+    #    You may notice increased activity in your account during your
+    #   initial month recording with Config when compared to subsequent
+    #   months. During the initial bootstrapping process, Config runs
+    #   evaluations on all the resources in your account that you have
+    #   selected for Config to record.
+    #
+    #    If you are running ephemeral workloads, you may see increased
+    #   activity from Config as it records configuration changes associated
+    #   with creating and deleting these temporary resources. An *ephemeral
+    #   workload* is a temporary use of computing resources that are loaded
+    #   and run when needed. Examples include Amazon Elastic Compute Cloud
+    #   (Amazon EC2) Spot Instances, Amazon EMR jobs, and Auto Scaling. If
+    #   you want to avoid the increased activity from running ephemeral
+    #   workloads, you can run these types of workloads in a separate
+    #   account with Config turned off to avoid increased configuration
+    #   recording and rule evaluations.
+    #
+    #    </note>
     #   @return [Types::RecordingGroup]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ConfigurationRecorder AWS API Documentation
@@ -2550,7 +2603,7 @@ module Aws::ConfigService
     # Returns a filtered list of Detective or Proactive Config rules. By
     # default, if the filter is not defined, this API returns an unfiltered
     # list. For more information on Detective or Proactive Config rules, see
-    # [ **Evaluation Mode** ][1] in the Config Developer Guide.
+    # [ **Evaluation Mode** ][1] in the *Config Developer Guide*.
     #
     #
     #
@@ -2583,7 +2636,7 @@ module Aws::ConfigService
     #   Returns a list of Detective or Proactive Config rules. By default,
     #   this API returns an unfiltered list. For more information on
     #   Detective or Proactive Config rules, see [ **Evaluation Mode** ][1]
-    #   in the Config Developer Guide.
+    #   in the *Config Developer Guide*.
     #
     #
     #
@@ -3567,6 +3620,23 @@ module Aws::ConfigService
       include Aws::Structure
     end
 
+    # Specifies whether the configuration recorder excludes resource types
+    # from being recorded. Use the `resourceTypes` field to enter a
+    # comma-separated list of resource types to exclude as exemptions.
+    #
+    # @!attribute [rw] resource_types
+    #   A comma-separated list of resource types to exclude from recording
+    #   by the configuration recorder.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/ExclusionByResourceTypes AWS API Documentation
+    #
+    class ExclusionByResourceTypes < Struct.new(
+      :resource_types)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The controls that Config uses for executing remediations.
     #
     # @!attribute [rw] ssm_controls
@@ -4692,7 +4762,8 @@ module Aws::ConfigService
     #
     class InsufficientPermissionsException < Aws::EmptyStructure; end
 
-    # You have provided a configuration recorder name that is not valid.
+    # You have provided a name for the configuration recorder that is not
+    # valid.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidConfigurationRecorderNameException AWS API Documentation
     #
@@ -4731,9 +4802,31 @@ module Aws::ConfigService
     #
     class InvalidParameterValueException < Aws::EmptyStructure; end
 
-    # Config throws an exception if the recording group does not contain a
-    # valid list of resource types. Values that are not valid might also be
-    # incorrectly formatted.
+    # Indicates one of the following errors:
+    #
+    # * You have provided a combination of parameter values that is not
+    #   valid. For example:
+    #
+    #   * Setting the `allSupported` field of [RecordingGroup][1] to `true`,
+    #     but providing a non-empty list for the `resourceTypes`field of
+    #     [RecordingGroup][1].
+    #
+    #   * Setting the `allSupported` field of [RecordingGroup][1] to `true`,
+    #     but also setting the `useOnly` field of [RecordingStrategy][2] to
+    #     `EXCLUSION_BY_RESOURCE_TYPES`.
+    #
+    # * Every parameter is either null, false, or empty.
+    #
+    # * You have reached the limit of the number of resource types you can
+    #   provide for the recording group.
+    #
+    # * You have provided resource types or a recording strategy that are
+    #   not valid.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html
+    # [2]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidRecordingGroupException AWS API Documentation
     #
@@ -4745,7 +4838,8 @@ module Aws::ConfigService
     #
     class InvalidResultTokenException < Aws::EmptyStructure; end
 
-    # You have provided a null or empty role ARN.
+    # You have provided a null or empty Amazon Resource Name (ARN) for the
+    # IAM role assumed by Config and used by the configuration recorder.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/InvalidRoleException AWS API Documentation
     #
@@ -5135,7 +5229,8 @@ module Aws::ConfigService
     #
     class MaxNumberOfConfigRulesExceededException < Aws::EmptyStructure; end
 
-    # You have reached the limit of the number of recorders you can create.
+    # You have reached the limit of the number of configuration recorders
+    # you can create.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/MaxNumberOfConfigurationRecordersExceededException AWS API Documentation
     #
@@ -5143,7 +5238,7 @@ module Aws::ConfigService
 
     # You have reached the limit of the number of conformance packs you can
     # create in an account. For more information, see [ **Service Limits**
-    # ][1] in the Config Developer Guide.
+    # ][1] in the *Config Developer Guide*.
     #
     #
     #
@@ -5162,7 +5257,7 @@ module Aws::ConfigService
 
     # You have reached the limit of the number of organization Config rules
     # you can create. For more information, see see [ **Service Limits**
-    # ][1] in the Config Developer Guide.
+    # ][1] in the *Config Developer Guide*.
     #
     #
     #
@@ -5174,7 +5269,7 @@ module Aws::ConfigService
 
     # You have reached the limit of the number of organization conformance
     # packs you can create in an account. For more information, see [
-    # **Service Limits** ][1] in the Config Developer Guide.
+    # **Service Limits** ][1] in the *Config Developer Guide*.
     #
     #
     #
@@ -5880,12 +5975,12 @@ module Aws::ConfigService
       include Aws::Structure
     end
 
-    # An object that specifies metadata for your organization Config Custom
-    # Policy rule including the runtime system in use, which accounts have
-    # debug logging enabled, and other custom rule metadata such as resource
-    # type, resource ID of Amazon Web Services resource, and organization
-    # trigger types that trigger Config to evaluate Amazon Web Services
-    # resources against a rule.
+    # metadata for your organization Config Custom Policy rule including the
+    # runtime system in use, which accounts have debug logging enabled, and
+    # other custom rule metadata such as resource type, resource ID of
+    # Amazon Web Services resource, and organization trigger types that
+    # trigger Config to evaluate Amazon Web Services resources against a
+    # rule.
     #
     # @!attribute [rw] description
     #   The description that you provide for your organization Config Custom
@@ -5972,12 +6067,12 @@ module Aws::ConfigService
       include Aws::Structure
     end
 
-    # An object that specifies organization custom rule metadata such as
-    # resource type, resource ID of Amazon Web Services resource, Lambda
-    # function ARN, and organization trigger types that trigger Config to
-    # evaluate your Amazon Web Services resources against a rule. It also
-    # provides the frequency with which you want Config to run evaluations
-    # for the rule if the trigger type is periodic.
+    # organization custom rule metadata such as resource type, resource ID
+    # of Amazon Web Services resource, Lambda function ARN, and organization
+    # trigger types that trigger Config to evaluate your Amazon Web Services
+    # resources against a rule. It also provides the frequency with which
+    # you want Config to run evaluations for the rule if the trigger type is
+    # periodic.
     #
     # @!attribute [rw] description
     #   The description that you provide for your organization Config rule.
@@ -6057,11 +6152,10 @@ module Aws::ConfigService
       include Aws::Structure
     end
 
-    # An object that specifies organization managed rule metadata such as
-    # resource type and ID of Amazon Web Services resource along with the
-    # rule identifier. It also provides the frequency with which you want
-    # Config to run evaluations for the rule if the trigger type is
-    # periodic.
+    # organization managed rule metadata such as resource type and ID of
+    # Amazon Web Services resource along with the rule identifier. It also
+    # provides the frequency with which you want Config to run evaluations
+    # for the rule if the trigger type is periodic.
     #
     # @!attribute [rw] description
     #   The description that you provide for your organization Config rule.
@@ -6304,8 +6398,8 @@ module Aws::ConfigService
     # The input for the PutConfigurationRecorder action.
     #
     # @!attribute [rw] configuration_recorder
-    #   The configuration recorder object that records each configuration
-    #   change made to the resources.
+    #   An object for the configuration recorder to record configuration
+    #   changes for specified resource types.
     #   @return [Types::ConfigurationRecorder]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/PutConfigurationRecorderRequest AWS API Documentation
@@ -6818,51 +6912,39 @@ module Aws::ConfigService
       include Aws::Structure
     end
 
-    # Specifies which Amazon Web Services resource types Config records for
-    # configuration changes. In the recording group, you specify whether you
-    # want to record all supported resource types or only specific types of
-    # resources.
+    # Specifies which resource types Config records for configuration
+    # changes. In the recording group, you specify whether you want to
+    # record all supported resource types or to include or exclude specific
+    # types of resources.
     #
-    # By default, Config records the configuration changes for all supported
-    # types of *regional resources* that Config discovers in the region in
-    # which it is running. Regional resources are tied to a region and can
-    # be used only in that region. Examples of regional resources are EC2
-    # instances and EBS volumes.
+    # By default, Config records configuration changes for all supported
+    # types of *Regional resources* that Config discovers in the Amazon Web
+    # Services Region in which it is running. Regional resources are tied to
+    # a Region and can be used only in that Region. Examples of Regional
+    # resources are Amazon EC2 instances and Amazon EBS volumes.
     #
     # You can also have Config record supported types of *global resources*.
-    # Global resources are not tied to a specific region and can be used in
-    # all regions. The global resource types that Config supports include
+    # Global resources are not tied to a specific Region and can be used in
+    # all Regions. The global resource types that Config supports include
     # IAM users, groups, roles, and customer managed policies.
     #
     # Global resource types onboarded to Config recording after February
-    # 2022 will only be recorded in the service's home region for the
-    # commercial partition and Amazon Web Services GovCloud (US) West for
-    # the GovCloud partition. You can view the Configuration Items for these
-    # new global resource types only in their home region and Amazon Web
-    # Services GovCloud (US) West.
-    #
-    #  Supported global resource types onboarded before February 2022 such
-    # as
-    # `AWS::IAM::Group`, `AWS::IAM::Policy`, `AWS::IAM::Role`,
-    # `AWS::IAM::User` remain unchanged, and they will continue to deliver
-    # Configuration Items in all supported regions in Config. The change
-    # will only affect new global resource types onboarded after February
-    # 2022.
-    #
-    #  To record global resource types onboarded after February 2022, enable
-    # All Supported Resource Types in the home region of the global resource
-    # type you want to record.
+    # 2022 will be recorded only in the service's home Region for the
+    # commercial partition and Amazon Web Services GovCloud (US-West) for
+    # the Amazon Web Services GovCloud (US) partition. You can view the
+    # Configuration Items for these new global resource types only in their
+    # home Region and Amazon Web Services GovCloud (US-West).
     #
     # If you don't want Config to record all resources, you can specify
-    # which types of resources it will record with the `resourceTypes`
+    # which types of resources Config records with the `resourceTypes`
     # parameter.
     #
     # For a list of supported resource types, see [Supported Resource
-    # Types][1].
+    # Types][1] in the *Config developer guide*.
     #
     # For more information and a table of the Home Regions for Global
     # Resource Types Onboarded after February 2022, see [Selecting Which
-    # Resources Config Records][2].
+    # Resources Config Records][2] in the *Config developer guide*.
     #
     #
     #
@@ -6870,62 +6952,245 @@ module Aws::ConfigService
     # [2]: https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html
     #
     # @!attribute [rw] all_supported
-    #   Specifies whether Config records configuration changes for every
-    #   supported type of regional resource.
+    #   Specifies whether Config records configuration changes for all
+    #   supported regional resource types.
     #
-    #   If you set this option to `true`, when Config adds support for a new
-    #   type of regional resource, it starts recording resources of that
+    #   If you set this field to `true`, when Config adds support for a new
+    #   type of regional resource, Config starts recording resources of that
     #   type automatically.
     #
-    #   If you set this option to `true`, you cannot enumerate a list of
-    #   `resourceTypes`.
+    #   If you set this field to `true`, you cannot enumerate specific
+    #   resource types to record in the `resourceTypes` field of
+    #   [RecordingGroup][1], or to exclude in the `resourceTypes` field of
+    #   [ExclusionByResourceTypes][2].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html
+    #   [2]: https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html
     #   @return [Boolean]
     #
     # @!attribute [rw] include_global_resource_types
-    #   Specifies whether Config includes all supported types of global
-    #   resources (for example, IAM resources) with the resources that it
-    #   records.
+    #   Specifies whether Config records configuration changes for all
+    #   supported global resources.
+    #
+    #   Before you set this field to `true`, set the `allSupported` field of
+    #   [RecordingGroup][1] to `true`. Optionally, you can set the `useOnly`
+    #   field of [RecordingStrategy][2] to `ALL_SUPPORTED_RESOURCE_TYPES`.
     #
-    #   Before you can set this option to `true`, you must set the
-    #   `allSupported` option to `true`.
+    #   If you set this field to `true`, when Config adds support for a new
+    #   type of global resource in the Region where you set up the
+    #   configuration recorder, Config starts recording resources of that
+    #   type automatically.
     #
-    #   If you set this option to `true`, when Config adds support for a new
-    #   type of global resource, it starts recording resources of that type
-    #   automatically.
+    #   <note markdown="1"> If you set this field to `false` but list global resource types in
+    #   the `resourceTypes` field of [RecordingGroup][1], Config will still
+    #   record configuration changes for those specified resource types
+    #   *regardless* of if you set the `includeGlobalResourceTypes` field to
+    #   false.
     #
-    #   The configuration details for any global resource are the same in
-    #   all regions. To prevent duplicate configuration items, you should
-    #   consider customizing Config in only one region to record global
-    #   resources.
+    #    If you do not want to record configuration changes to global
+    #   resource types, make sure to not list them in the `resourceTypes`
+    #   field in addition to setting the `includeGlobalResourceTypes` field
+    #   to false.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html
+    #   [2]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html
     #   @return [Boolean]
     #
     # @!attribute [rw] resource_types
-    #   A comma-separated list that specifies the types of Amazon Web
-    #   Services resources for which Config records configuration changes
-    #   (for example, `AWS::EC2::Instance` or `AWS::CloudTrail::Trail`).
+    #   A comma-separated list that specifies which resource types Config
+    #   records.
+    #
+    #   Optionally, you can set the `useOnly` field of
+    #   [RecordingStrategy][1] to `INCLUSION_BY_RESOURCE_TYPES`.
+    #
+    #   To record all configuration changes, set the `allSupported` field of
+    #   [RecordingGroup][2] to `true`, and either omit this field or don't
+    #   specify any resource types in this field. If you set the
+    #   `allSupported` field to `false` and specify values for
+    #   `resourceTypes`, when Config adds support for a new type of
+    #   resource, it will not record resources of that type unless you
+    #   manually add that type to your recording group.
+    #
+    #   For a list of valid `resourceTypes` values, see the **Resource Type
+    #   Value** column in [Supported Amazon Web Services resource Types][3]
+    #   in the *Config developer guide*.
     #
-    #   To record all configuration changes, you must set the `allSupported`
-    #   option to `true`.
+    #   <note markdown="1"> **Region Availability**
     #
-    #   If you set the `AllSupported` option to false and populate the
-    #   `ResourceTypes` option with values, when Config adds support for a
-    #   new type of resource, it will not record resources of that type
-    #   unless you manually add that type to your recording group.
+    #    Before specifying a resource type for Config to track, check
+    #   [Resource Coverage by Region Availability][4] to see if the resource
+    #   type is supported in the Amazon Web Services Region where you set up
+    #   Config. If a resource type is supported by Config in at least one
+    #   Region, you can enable the recording of that resource type in all
+    #   Regions supported by Config, even if the specified resource type is
+    #   not supported in the Amazon Web Services Region where you set up
+    #   Config.
     #
-    #   For a list of valid `resourceTypes` values, see the **resourceType
-    #   Value** column in [Supported Amazon Web Services resource Types][1].
+    #    </note>
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources
+    #   [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html
+    #   [2]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html
+    #   [3]: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources
+    #   [4]: https://docs.aws.amazon.com/config/latest/developerguide/what-is-resource-config-coverage.html
     #   @return [Array<String>]
     #
+    # @!attribute [rw] exclusion_by_resource_types
+    #   An object that specifies how Config excludes resource types from
+    #   being recorded by the configuration recorder.
+    #
+    #   To use this option, you must set the `useOnly` field of
+    #   [RecordingStrategy][1] to `EXCLUSION_BY_RESOURCE_TYPES`.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html
+    #   @return [Types::ExclusionByResourceTypes]
+    #
+    # @!attribute [rw] recording_strategy
+    #   An object that specifies the recording strategy for the
+    #   configuration recorder.
+    #
+    #   * If you set the `useOnly` field of [RecordingStrategy][1] to
+    #     `ALL_SUPPORTED_RESOURCE_TYPES`, Config records configuration
+    #     changes for all supported regional resource types. You also must
+    #     set the `allSupported` field of [RecordingGroup][2] to `true`.
+    #     When Config adds support for a new type of regional resource,
+    #     Config automatically starts recording resources of that type.
+    #
+    #   * If you set the `useOnly` field of [RecordingStrategy][1] to
+    #     `INCLUSION_BY_RESOURCE_TYPES`, Config records configuration
+    #     changes for only the resource types you specify in the
+    #     `resourceTypes` field of [RecordingGroup][2].
+    #
+    #   * If you set the `useOnly` field of [RecordingStrategy][1] to
+    #     `EXCLUSION_BY_RESOURCE_TYPES`, Config records configuration
+    #     changes for all supported resource types except the resource types
+    #     that you specify as exemptions to exclude from being recorded in
+    #     the `resourceTypes` field of [ExclusionByResourceTypes][3].
+    #
+    #   <note markdown="1"> The `recordingStrategy` field is optional when you set the
+    #   `allSupported` field of [RecordingGroup][2] to `true`.
+    #
+    #    The `recordingStrategy` field is optional when you list resource
+    #   types in the `resourceTypes` field of [RecordingGroup][2].
+    #
+    #    The `recordingStrategy` field is required if you list resource types
+    #   to exclude from recording in the `resourceTypes` field of
+    #   [ExclusionByResourceTypes][3].
+    #
+    #    </note>
+    #
+    #   <note markdown="1"> If you choose `EXCLUSION_BY_RESOURCE_TYPES` for the recording
+    #   strategy, the `exclusionByResourceTypes` field will override other
+    #   properties in the request.
+    #
+    #    For example, even if you set `includeGlobalResourceTypes` to false,
+    #   global resource types will still be automatically recorded in this
+    #   option unless those resource types are specifically listed as
+    #   exemptions in the `resourceTypes` field of
+    #   `exclusionByResourceTypes`.
+    #
+    #    By default, if you choose the `EXCLUSION_BY_RESOURCE_TYPES`
+    #   recording strategy, when Config adds support for a new resource type
+    #   in the Region where you set up the configuration recorder, including
+    #   global resource types, Config starts recording resources of that
+    #   type automatically.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html
+    #   [2]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html
+    #   [3]: https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html
+    #   @return [Types::RecordingStrategy]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/RecordingGroup AWS API Documentation
     #
     class RecordingGroup < Struct.new(
       :all_supported,
       :include_global_resource_types,
-      :resource_types)
+      :resource_types,
+      :exclusion_by_resource_types,
+      :recording_strategy)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Specifies the recording strategy of the configuration recorder.
+    #
+    # @!attribute [rw] use_only
+    #   The recording strategy for the configuration recorder.
+    #
+    #   * If you set this option to `ALL_SUPPORTED_RESOURCE_TYPES`, Config
+    #     records configuration changes for all supported regional resource
+    #     types. You also must set the `allSupported` field of
+    #     [RecordingGroup][1] to `true`.
+    #
+    #     When Config adds support for a new type of regional resource,
+    #     Config automatically starts recording resources of that type. For
+    #     a list of supported resource types, see [Supported Resource
+    #     Types][2] in the *Config developer guide*.
+    #
+    #   * If you set this option to `INCLUSION_BY_RESOURCE_TYPES`, Config
+    #     records configuration changes for only the resource types that you
+    #     specify in the `resourceTypes` field of [RecordingGroup][1].
+    #
+    #   * If you set this option to `EXCLUSION_BY_RESOURCE_TYPES`, Config
+    #     records configuration changes for all supported resource types,
+    #     except the resource types that you specify as exemptions to
+    #     exclude from being recorded in the `resourceTypes` field of
+    #     [ExclusionByResourceTypes][3].
+    #
+    #   <note markdown="1"> The `recordingStrategy` field is optional when you set the
+    #   `allSupported` field of [RecordingGroup][1] to `true`.
+    #
+    #    The `recordingStrategy` field is optional when you list resource
+    #   types in the `resourceTypes` field of [RecordingGroup][1].
+    #
+    #    The `recordingStrategy` field is required if you list resource types
+    #   to exclude from recording in the `resourceTypes` field of
+    #   [ExclusionByResourceTypes][3].
+    #
+    #    </note>
+    #
+    #   <note markdown="1"> If you choose `EXCLUSION_BY_RESOURCE_TYPES` for the recording
+    #   strategy, the `exclusionByResourceTypes` field will override other
+    #   properties in the request.
+    #
+    #    For example, even if you set `includeGlobalResourceTypes` to false,
+    #   global resource types will still be automatically recorded in this
+    #   option unless those resource types are specifically listed as
+    #   exemptions in the `resourceTypes` field of
+    #   `exclusionByResourceTypes`.
+    #
+    #    By default, if you choose the `EXCLUSION_BY_RESOURCE_TYPES`
+    #   recording strategy, when Config adds support for a new resource type
+    #   in the Region where you set up the configuration recorder, including
+    #   global resource types, Config starts recording resources of that
+    #   type automatically.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html
+    #   [2]: https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources
+    #   [3]: https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/config-2014-11-12/RecordingStrategy AWS API Documentation
+    #
+    class RecordingStrategy < Struct.new(
+      :use_only)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8224,8 +8489,8 @@ module Aws::ConfigService
     end
 
     # You have reached the limit of the number of tags you can use. For more
-    # information, see [ **Service Limits** ][1] in the Config Developer
-    # Guide.
+    # information, see [ **Service Limits** ][1] in the *Config Developer
+    # Guide*.
     #
     #
     #

data/lib/aws-sdk-configservice.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-configservice/customizations'
 # @!group service
 module Aws::ConfigService
 
-  GEM_VERSION = '1.90.0'
+  GEM_VERSION = '1.91.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-configservice
 version: !ruby/object:Gem::Version
-  version: 1.90.0
+  version: 1.91.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-05-04 00:00:00.000000000 Z
+date: 2023-05-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.165.0
+        version: 3.174.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.165.0
+        version: 3.174.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement