aws-sdk-controltower 1.41.0 → 1.42.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c42c64f2d50ac0b3e6f89c4adfdf8cfb00af2c6eedd19b5dc51a901190b33818
-  data.tar.gz: e6a47aa1aa14da7d5232215f4edcda614eb571a0122de435dad7901fe21d33ad
+  metadata.gz: 828157ccb3fc91396f13f8742e861e121fc9b91ad7e4d34a2399bff4796f3e8a
+  data.tar.gz: 5a649a78b39b61c5f50e7c1dae64ab968624cbcd4d42208c045426640f642f31
 SHA512:
-  metadata.gz: fe7d6715ae20822d88bb9adf64f2ab7a655be07aa3b1c477925b0f02284b6c2474b8a6379ac0b19b48bcf3176e7c013514e7c3b89eb9fad3f026afdae5128f55
-  data.tar.gz: db158b00a6db6afc4ad1eeb8b2c8c19a78f4aab2d250035f5cbdddfd783f8d0b1ee2f20f33eb9e1db7a6501da677012f4607106d76ebca9917bab0adb2cbccdd
+  metadata.gz: a6f5cbfa684c64cd06530040e2b3cbf08b4c8a719e47048350c6cd64793167efc50cd35f793efc9ee85192bcf525c77dbc79a45303c40b7f428db8ce2d248869
+  data.tar.gz: 1aaa25fb8d09cf242e63e5b2c5ff471939d44fd81186c84f840c5c680fe58f7d8cdba882285de87576029f65f5749acb33de6a465a1e6b85477a8ddc4580c625

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.42.0 (2025-05-13)
+------------------
+
+* Feature - AWS Control Tower now reports the inheritance drift status for EnabledBaselines through the GetEnabledBaseline and ListEnabledBaselines APIs. You can now filter EnabledBaselines by their enablement and drift status using the ListEnabledBaselines API to view accounts and OUs that require attention.
+
 1.41.0 (2025-05-12)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.41.0
+1.42.0

data/lib/aws-sdk-controltower/client.rb

@@ -922,6 +922,7 @@ module Aws::ControlTower
     #   resp.enabled_baseline_details.arn #=> String
     #   resp.enabled_baseline_details.baseline_identifier #=> String
     #   resp.enabled_baseline_details.baseline_version #=> String
+    #   resp.enabled_baseline_details.drift_status_summary.types.inheritance.status #=> String, one of "IN_SYNC", "DRIFTED"
     #   resp.enabled_baseline_details.parameters #=> Array
     #   resp.enabled_baseline_details.parameters[0].key #=> String
     #   resp.enabled_baseline_details.parent_identifier #=> String
@@ -1188,7 +1189,9 @@ module Aws::ControlTower
     #   resp = client.list_enabled_baselines({
     #     filter: {
     #       baseline_identifiers: ["Arn"],
+    #       inheritance_drift_statuses: ["IN_SYNC"], # accepts IN_SYNC, DRIFTED
     #       parent_identifiers: ["Arn"],
+    #       statuses: ["SUCCEEDED"], # accepts SUCCEEDED, FAILED, UNDER_CHANGE
     #       target_identifiers: ["Arn"],
     #     },
     #     include_children: false,
@@ -1202,6 +1205,7 @@ module Aws::ControlTower
     #   resp.enabled_baselines[0].arn #=> String
     #   resp.enabled_baselines[0].baseline_identifier #=> String
     #   resp.enabled_baselines[0].baseline_version #=> String
+    #   resp.enabled_baselines[0].drift_status_summary.types.inheritance.status #=> String, one of "IN_SYNC", "DRIFTED"
     #   resp.enabled_baselines[0].parent_identifier #=> String
     #   resp.enabled_baselines[0].status_summary.last_operation_identifier #=> String
     #   resp.enabled_baselines[0].status_summary.status #=> String, one of "SUCCEEDED", "FAILED", "UNDER_CHANGE"
@@ -1750,7 +1754,7 @@ module Aws::ControlTower
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-controltower'
-      context[:gem_version] = '1.41.0'
+      context[:gem_version] = '1.42.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-controltower/client_api.rb

@@ -53,7 +53,13 @@ module Aws::ControlTower
     EnableControlOutput = Shapes::StructureShape.new(name: 'EnableControlOutput')
     EnabledBaselineBaselineIdentifiers = Shapes::ListShape.new(name: 'EnabledBaselineBaselineIdentifiers')
     EnabledBaselineDetails = Shapes::StructureShape.new(name: 'EnabledBaselineDetails')
+    EnabledBaselineDriftStatus = Shapes::StringShape.new(name: 'EnabledBaselineDriftStatus')
+    EnabledBaselineDriftStatusSummary = Shapes::StructureShape.new(name: 'EnabledBaselineDriftStatusSummary')
+    EnabledBaselineDriftStatuses = Shapes::ListShape.new(name: 'EnabledBaselineDriftStatuses')
+    EnabledBaselineDriftTypes = Shapes::StructureShape.new(name: 'EnabledBaselineDriftTypes')
+    EnabledBaselineEnablementStatuses = Shapes::ListShape.new(name: 'EnabledBaselineEnablementStatuses')
     EnabledBaselineFilter = Shapes::StructureShape.new(name: 'EnabledBaselineFilter')
+    EnabledBaselineInheritanceDrift = Shapes::StructureShape.new(name: 'EnabledBaselineInheritanceDrift')
     EnabledBaselineParameter = Shapes::StructureShape.new(name: 'EnabledBaselineParameter')
     EnabledBaselineParameterDocument = Shapes::DocumentShape.new(name: 'EnabledBaselineParameterDocument', document: true)
     EnabledBaselineParameterSummaries = Shapes::ListShape.new(name: 'EnabledBaselineParameterSummaries')
@@ -280,17 +286,33 @@ module Aws::ControlTower
     EnabledBaselineDetails.add_member(:arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "arn"))
     EnabledBaselineDetails.add_member(:baseline_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "baselineIdentifier"))
     EnabledBaselineDetails.add_member(:baseline_version, Shapes::ShapeRef.new(shape: String, location_name: "baselineVersion"))
+    EnabledBaselineDetails.add_member(:drift_status_summary, Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatusSummary, location_name: "driftStatusSummary"))
     EnabledBaselineDetails.add_member(:parameters, Shapes::ShapeRef.new(shape: EnabledBaselineParameterSummaries, location_name: "parameters"))
     EnabledBaselineDetails.add_member(:parent_identifier, Shapes::ShapeRef.new(shape: Arn, location_name: "parentIdentifier"))
     EnabledBaselineDetails.add_member(:status_summary, Shapes::ShapeRef.new(shape: EnablementStatusSummary, required: true, location_name: "statusSummary"))
     EnabledBaselineDetails.add_member(:target_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "targetIdentifier"))
     EnabledBaselineDetails.struct_class = Types::EnabledBaselineDetails
 
+    EnabledBaselineDriftStatusSummary.add_member(:types, Shapes::ShapeRef.new(shape: EnabledBaselineDriftTypes, location_name: "types"))
+    EnabledBaselineDriftStatusSummary.struct_class = Types::EnabledBaselineDriftStatusSummary
+
+    EnabledBaselineDriftStatuses.member = Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatus)
+
+    EnabledBaselineDriftTypes.add_member(:inheritance, Shapes::ShapeRef.new(shape: EnabledBaselineInheritanceDrift, location_name: "inheritance"))
+    EnabledBaselineDriftTypes.struct_class = Types::EnabledBaselineDriftTypes
+
+    EnabledBaselineEnablementStatuses.member = Shapes::ShapeRef.new(shape: EnablementStatus)
+
     EnabledBaselineFilter.add_member(:baseline_identifiers, Shapes::ShapeRef.new(shape: EnabledBaselineBaselineIdentifiers, location_name: "baselineIdentifiers"))
+    EnabledBaselineFilter.add_member(:inheritance_drift_statuses, Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatuses, location_name: "inheritanceDriftStatuses"))
     EnabledBaselineFilter.add_member(:parent_identifiers, Shapes::ShapeRef.new(shape: EnabledBaselineParentIdentifiers, location_name: "parentIdentifiers"))
+    EnabledBaselineFilter.add_member(:statuses, Shapes::ShapeRef.new(shape: EnabledBaselineEnablementStatuses, location_name: "statuses"))
     EnabledBaselineFilter.add_member(:target_identifiers, Shapes::ShapeRef.new(shape: EnabledBaselineTargetIdentifiers, location_name: "targetIdentifiers"))
     EnabledBaselineFilter.struct_class = Types::EnabledBaselineFilter
 
+    EnabledBaselineInheritanceDrift.add_member(:status, Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatus, location_name: "status"))
+    EnabledBaselineInheritanceDrift.struct_class = Types::EnabledBaselineInheritanceDrift
+
     EnabledBaselineParameter.add_member(:key, Shapes::ShapeRef.new(shape: String, required: true, location_name: "key"))
     EnabledBaselineParameter.add_member(:value, Shapes::ShapeRef.new(shape: EnabledBaselineParameterDocument, required: true, location_name: "value"))
     EnabledBaselineParameter.struct_class = Types::EnabledBaselineParameter
@@ -308,6 +330,7 @@ module Aws::ControlTower
     EnabledBaselineSummary.add_member(:arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "arn"))
     EnabledBaselineSummary.add_member(:baseline_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "baselineIdentifier"))
     EnabledBaselineSummary.add_member(:baseline_version, Shapes::ShapeRef.new(shape: String, location_name: "baselineVersion"))
+    EnabledBaselineSummary.add_member(:drift_status_summary, Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatusSummary, location_name: "driftStatusSummary"))
     EnabledBaselineSummary.add_member(:parent_identifier, Shapes::ShapeRef.new(shape: Arn, location_name: "parentIdentifier"))
     EnabledBaselineSummary.add_member(:status_summary, Shapes::ShapeRef.new(shape: EnablementStatusSummary, required: true, location_name: "statusSummary"))
     EnabledBaselineSummary.add_member(:target_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "targetIdentifier"))
@@ -612,8 +635,8 @@ module Aws::ControlTower
         o.http_request_uri = "/create-landingzone"
         o.input = Shapes::ShapeRef.new(shape: CreateLandingZoneInput)
         o.output = Shapes::ShapeRef.new(shape: CreateLandingZoneOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
@@ -625,12 +648,12 @@ module Aws::ControlTower
         o.http_request_uri = "/delete-landingzone"
         o.input = Shapes::ShapeRef.new(shape: DeleteLandingZoneInput)
         o.output = Shapes::ShapeRef.new(shape: DeleteLandingZoneOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:disable_baseline, Seahorse::Model::Operation.new.tap do |o|
@@ -639,13 +662,13 @@ module Aws::ControlTower
         o.http_request_uri = "/disable-baseline"
         o.input = Shapes::ShapeRef.new(shape: DisableBaselineInput)
         o.output = Shapes::ShapeRef.new(shape: DisableBaselineOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:disable_control, Seahorse::Model::Operation.new.tap do |o|
@@ -654,13 +677,13 @@ module Aws::ControlTower
         o.http_request_uri = "/disable-control"
         o.input = Shapes::ShapeRef.new(shape: DisableControlInput)
         o.output = Shapes::ShapeRef.new(shape: DisableControlOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:enable_baseline, Seahorse::Model::Operation.new.tap do |o|
@@ -669,13 +692,13 @@ module Aws::ControlTower
         o.http_request_uri = "/enable-baseline"
         o.input = Shapes::ShapeRef.new(shape: EnableBaselineInput)
         o.output = Shapes::ShapeRef.new(shape: EnableBaselineOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:enable_control, Seahorse::Model::Operation.new.tap do |o|
@@ -684,13 +707,13 @@ module Aws::ControlTower
         o.http_request_uri = "/enable-control"
         o.input = Shapes::ShapeRef.new(shape: EnableControlInput)
         o.output = Shapes::ShapeRef.new(shape: EnableControlOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_baseline, Seahorse::Model::Operation.new.tap do |o|
@@ -702,8 +725,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_baseline_operation, Seahorse::Model::Operation.new.tap do |o|
@@ -715,8 +738,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_control_operation, Seahorse::Model::Operation.new.tap do |o|
@@ -728,8 +751,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_enabled_baseline, Seahorse::Model::Operation.new.tap do |o|
@@ -741,8 +764,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_enabled_control, Seahorse::Model::Operation.new.tap do |o|
@@ -754,8 +777,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_landing_zone, Seahorse::Model::Operation.new.tap do |o|
@@ -767,8 +790,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_landing_zone_operation, Seahorse::Model::Operation.new.tap do |o|
@@ -780,8 +803,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:list_baselines, Seahorse::Model::Operation.new.tap do |o|
@@ -847,8 +870,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o[:pager] = Aws::Pager.new(
           limit_key: "max_results",
           tokens: {
@@ -910,13 +933,13 @@ module Aws::ControlTower
         o.http_request_uri = "/reset-enabled-baseline"
         o.input = Shapes::ShapeRef.new(shape: ResetEnabledBaselineInput)
         o.output = Shapes::ShapeRef.new(shape: ResetEnabledBaselineOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:reset_enabled_control, Seahorse::Model::Operation.new.tap do |o|
@@ -925,13 +948,13 @@ module Aws::ControlTower
         o.http_request_uri = "/reset-enabled-control"
         o.input = Shapes::ShapeRef.new(shape: ResetEnabledControlInput)
         o.output = Shapes::ShapeRef.new(shape: ResetEnabledControlOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:reset_landing_zone, Seahorse::Model::Operation.new.tap do |o|
@@ -940,12 +963,12 @@ module Aws::ControlTower
         o.http_request_uri = "/reset-landingzone"
         o.input = Shapes::ShapeRef.new(shape: ResetLandingZoneInput)
         o.output = Shapes::ShapeRef.new(shape: ResetLandingZoneOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:tag_resource, Seahorse::Model::Operation.new.tap do |o|
@@ -976,13 +999,13 @@ module Aws::ControlTower
         o.http_request_uri = "/update-enabled-baseline"
         o.input = Shapes::ShapeRef.new(shape: UpdateEnabledBaselineInput)
         o.output = Shapes::ShapeRef.new(shape: UpdateEnabledBaselineOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:update_enabled_control, Seahorse::Model::Operation.new.tap do |o|
@@ -991,13 +1014,13 @@ module Aws::ControlTower
         o.http_request_uri = "/update-enabled-control"
         o.input = Shapes::ShapeRef.new(shape: UpdateEnabledControlInput)
         o.output = Shapes::ShapeRef.new(shape: UpdateEnabledControlOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:update_landing_zone, Seahorse::Model::Operation.new.tap do |o|
@@ -1006,12 +1029,12 @@ module Aws::ControlTower
         o.http_request_uri = "/update-landingzone"
         o.input = Shapes::ShapeRef.new(shape: UpdateLandingZoneInput)
         o.output = Shapes::ShapeRef.new(shape: UpdateLandingZoneOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
     end
 

data/lib/aws-sdk-controltower/types.rb

@@ -554,6 +554,10 @@ module Aws::ControlTower
     #   The enabled version of the `Baseline`.
     #   @return [String]
     #
+    # @!attribute [rw] drift_status_summary
+    #   The drift status of the enabled baseline.
+    #   @return [Types::EnabledBaselineDriftStatusSummary]
+    #
     # @!attribute [rw] parameters
     #   Shows the parameters that are applied when enabling this `Baseline`.
     #   @return [Array<Types::EnabledBaselineParameterSummary>]
@@ -580,6 +584,7 @@ module Aws::ControlTower
       :arn,
       :baseline_identifier,
       :baseline_version,
+      :drift_status_summary,
       :parameters,
       :parent_identifier,
       :status_summary,
@@ -588,6 +593,77 @@ module Aws::ControlTower
       include Aws::Structure
     end
 
+    # The drift summary of the enabled baseline. Amazon Web Services Control
+    # Tower reports inheritance drift when an enabled baseline configuration
+    # of a member account is different than the configuration that applies
+    # to the OU. Amazon Web Services Control Tower reports this type of
+    # drift for a parent or child enabled baseline. One way to repair this
+    # drift by resetting the parent enabled baseline, on the OU.
+    #
+    # For example, if an account is moved between OUs that share the same
+    # baseline but different versions or parameters, the entity from the
+    # previous OU is unlinked; that (previous) OU reports *inheritance
+    # drift*. Also, the parent enabled baseline on the destination OU
+    # reports *inheritance drift*; it is missing the newly moved account.
+    # The configurations do not match for either OU, so both are in a state
+    # of inheritance drift.
+    #
+    # @!attribute [rw] types
+    #   The types of drift that can be detected for an enabled baseline.
+    #   Amazon Web Services Control Tower detects inheritance drift on
+    #   enabled baselines that apply at the OU level.
+    #   @return [Types::EnabledBaselineDriftTypes]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnabledBaselineDriftStatusSummary AWS API Documentation
+    #
+    class EnabledBaselineDriftStatusSummary < Struct.new(
+      :types)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The types of drift that can be detected for an enabled baseline.
+    #
+    # * Amazon Web Services Control Tower detects inheritance drift on the
+    #   enabled baselines that target OUs: `AWSControlTowerBaseline` and
+    #   `BackupBaseline`.
+    #
+    # * Amazon Web Services Control Tower does not detect drift on the
+    #   baselines that apply to your landing zone: `IdentityCenterBaseline`,
+    #   `AuditBaseline`, `LogArchiveBaseline`, `BackupCentralVaultBaseline`,
+    #   or `BackupAdminBaseline`. For more information, see [Types of
+    #   baselines][1].
+    #
+    # Baselines enabled on an OU are inherited by its member accounts as
+    # child `EnabledBaseline` resources. The baseline on the OU serves as
+    # the parent `EnabledBaseline`, which governs the configuration of each
+    # child `EnabledBaseline`.
+    #
+    # If the baseline configuration of a member account in an OU does not
+    # match the configuration of the parent OU, the parent and child
+    # baseline is in a state of inheritance drift. This drift could occur in
+    # the `AWSControlTowerBaseline` or the `BackupBaseline` related to that
+    # account.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html
+    #
+    # @!attribute [rw] inheritance
+    #   One or more accounts within the target OU does not match the
+    #   baseline configuration defined on that OU. An account is in
+    #   inheritance drift when it does not match the configuration of a
+    #   parent OU, possibly a new parent OU if the account is moved.
+    #   @return [Types::EnabledBaselineInheritanceDrift]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnabledBaselineDriftTypes AWS API Documentation
+    #
+    class EnabledBaselineDriftTypes < Struct.new(
+      :inheritance)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A filter applied on the `ListEnabledBaseline` operation. Allowed
     # filters are `baselineIdentifiers` and `targetIdentifiers`. The filter
     # can be applied for either, or both.
@@ -597,11 +673,19 @@ module Aws::ControlTower
     #   filter operation.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] inheritance_drift_statuses
+    #   A list of `EnabledBaselineDriftStatus` items for enabled baselines.
+    #   @return [Array<String>]
+    #
     # @!attribute [rw] parent_identifiers
     #   An optional filter that sets up a list of `parentIdentifiers` to
     #   filter the results of the `ListEnabledBaseline` output.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] statuses
+    #   A list of `EnablementStatus` items.
+    #   @return [Array<String>]
+    #
     # @!attribute [rw] target_identifiers
     #   Identifiers for the targets of the `Baseline` filter operation.
     #   @return [Array<String>]
@@ -610,12 +694,30 @@ module Aws::ControlTower
     #
     class EnabledBaselineFilter < Struct.new(
       :baseline_identifiers,
+      :inheritance_drift_statuses,
       :parent_identifiers,
+      :statuses,
       :target_identifiers)
       SENSITIVE = []
       include Aws::Structure
     end
 
+    # The inheritance drift summary for the enabled baseline. Inheritance
+    # drift occurs when any accounts in the target OU do not match the
+    # baseline configuration defined on that OU.
+    #
+    # @!attribute [rw] status
+    #   The inheritance drift status for enabled baselines.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnabledBaselineInheritanceDrift AWS API Documentation
+    #
+    class EnabledBaselineInheritanceDrift < Struct.new(
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A key-value parameter to an `EnabledBaseline` resource.
     #
     # @!attribute [rw] key
@@ -671,6 +773,10 @@ module Aws::ControlTower
     #   The enabled version of the baseline.
     #   @return [String]
     #
+    # @!attribute [rw] drift_status_summary
+    #   The drift status of the enabled baseline.
+    #   @return [Types::EnabledBaselineDriftStatusSummary]
+    #
     # @!attribute [rw] parent_identifier
     #   An ARN that represents an object returned by `ListEnabledBaseline`,
     #   to describe an enabled baseline.
@@ -691,6 +797,7 @@ module Aws::ControlTower
       :arn,
       :baseline_identifier,
       :baseline_version,
+      :drift_status_summary,
       :parent_identifier,
       :status_summary,
       :target_identifier)
@@ -1652,7 +1759,7 @@ module Aws::ControlTower
     end
 
     # The request would cause a service quota to be exceeded. The limit is
-    # 10 concurrent operations.
+    # 100 concurrent operations.
     #
     # @!attribute [rw] message
     #   @return [String]

data/lib/aws-sdk-controltower.rb

@@ -54,7 +54,7 @@ module Aws::ControlTower
   autoload :EndpointProvider, 'aws-sdk-controltower/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-controltower/endpoints'
 
-  GEM_VERSION = '1.41.0'
+  GEM_VERSION = '1.42.0'
 
 end
 

data/sig/client.rbs

@@ -275,7 +275,9 @@ module Aws
       def list_enabled_baselines: (
                                     ?filter: {
                                       baseline_identifiers: Array[::String]?,
+                                      inheritance_drift_statuses: Array[("IN_SYNC" | "DRIFTED")]?,
                                       parent_identifiers: Array[::String]?,
+                                      statuses: Array[("SUCCEEDED" | "FAILED" | "UNDER_CHANGE")]?,
                                       target_identifiers: Array[::String]?
                                     },
                                     ?include_children: bool,

data/sig/types.rbs

@@ -152,6 +152,7 @@ module Aws::ControlTower
       attr_accessor arn: ::String
       attr_accessor baseline_identifier: ::String
       attr_accessor baseline_version: ::String
+      attr_accessor drift_status_summary: Types::EnabledBaselineDriftStatusSummary
       attr_accessor parameters: ::Array[Types::EnabledBaselineParameterSummary]
       attr_accessor parent_identifier: ::String
       attr_accessor status_summary: Types::EnablementStatusSummary
@@ -159,13 +160,30 @@ module Aws::ControlTower
       SENSITIVE: []
     end
 
+    class EnabledBaselineDriftStatusSummary
+      attr_accessor types: Types::EnabledBaselineDriftTypes
+      SENSITIVE: []
+    end
+
+    class EnabledBaselineDriftTypes
+      attr_accessor inheritance: Types::EnabledBaselineInheritanceDrift
+      SENSITIVE: []
+    end
+
     class EnabledBaselineFilter
       attr_accessor baseline_identifiers: ::Array[::String]
+      attr_accessor inheritance_drift_statuses: ::Array[("IN_SYNC" | "DRIFTED")]
       attr_accessor parent_identifiers: ::Array[::String]
+      attr_accessor statuses: ::Array[("SUCCEEDED" | "FAILED" | "UNDER_CHANGE")]
       attr_accessor target_identifiers: ::Array[::String]
       SENSITIVE: []
     end
 
+    class EnabledBaselineInheritanceDrift
+      attr_accessor status: ("IN_SYNC" | "DRIFTED")
+      SENSITIVE: []
+    end
+
     class EnabledBaselineParameter
       attr_accessor key: ::String
       attr_accessor value: untyped
@@ -182,6 +200,7 @@ module Aws::ControlTower
       attr_accessor arn: ::String
       attr_accessor baseline_identifier: ::String
       attr_accessor baseline_version: ::String
+      attr_accessor drift_status_summary: Types::EnabledBaselineDriftStatusSummary
       attr_accessor parent_identifier: ::String
       attr_accessor status_summary: Types::EnablementStatusSummary
       attr_accessor target_identifier: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-controltower
 version: !ruby/object:Gem::Version
-  version: 1.41.0
+  version: 1.42.0
 platform: ruby
 authors:
 - Amazon Web Services