aws-sdk-controltower 1.41.0 → 1.43.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c42c64f2d50ac0b3e6f89c4adfdf8cfb00af2c6eedd19b5dc51a901190b33818
-  data.tar.gz: e6a47aa1aa14da7d5232215f4edcda614eb571a0122de435dad7901fe21d33ad
+  metadata.gz: 020c7401c2598d27f0a48bb45ea381acc5bc01a4896762b152a6dd460194b8d5
+  data.tar.gz: 40f4953863d199ca07f686171f83264a075c57d21f14f560c00dcbd34a2fdc3b
 SHA512:
-  metadata.gz: fe7d6715ae20822d88bb9adf64f2ab7a655be07aa3b1c477925b0f02284b6c2474b8a6379ac0b19b48bcf3176e7c013514e7c3b89eb9fad3f026afdae5128f55
-  data.tar.gz: db158b00a6db6afc4ad1eeb8b2c8c19a78f4aab2d250035f5cbdddfd783f8d0b1ee2f20f33eb9e1db7a6501da677012f4607106d76ebca9917bab0adb2cbccdd
+  metadata.gz: 5473bd6614a0474a9d423f01d7643fb0df347bccb42f40ec73faa344d9e34cff7004ff0c2857b8026e224f82358ce5eeca111edd50f0d676980e43a47a443db7
+  data.tar.gz: 74859af4fbd8d414d430e7458cdfc5f88d0279e746178e89e39738de7cd7f15f153d3cddb7168bd0902bf50d5438744770ab49fdd48e5f46fa43685860f73aa1

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.43.0 (2025-05-15)
+------------------
+
+* Feature - Updated the descriptions for the AWS Control Tower Baseline APIs to make them more intuitive.
+
+1.42.0 (2025-05-13)
+------------------
+
+* Feature - AWS Control Tower now reports the inheritance drift status for EnabledBaselines through the GetEnabledBaseline and ListEnabledBaselines APIs. You can now filter EnabledBaselines by their enablement and drift status using the ListEnabledBaselines API to view accounts and OUs that require attention.
+
 1.41.0 (2025-05-12)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.41.0
+1.43.0

data/lib/aws-sdk-controltower/client.rb

@@ -922,6 +922,7 @@ module Aws::ControlTower
     #   resp.enabled_baseline_details.arn #=> String
     #   resp.enabled_baseline_details.baseline_identifier #=> String
     #   resp.enabled_baseline_details.baseline_version #=> String
+    #   resp.enabled_baseline_details.drift_status_summary.types.inheritance.status #=> String, one of "IN_SYNC", "DRIFTED"
     #   resp.enabled_baseline_details.parameters #=> Array
     #   resp.enabled_baseline_details.parameters[0].key #=> String
     #   resp.enabled_baseline_details.parent_identifier #=> String
@@ -1188,7 +1189,9 @@ module Aws::ControlTower
     #   resp = client.list_enabled_baselines({
     #     filter: {
     #       baseline_identifiers: ["Arn"],
+    #       inheritance_drift_statuses: ["IN_SYNC"], # accepts IN_SYNC, DRIFTED
     #       parent_identifiers: ["Arn"],
+    #       statuses: ["SUCCEEDED"], # accepts SUCCEEDED, FAILED, UNDER_CHANGE
     #       target_identifiers: ["Arn"],
     #     },
     #     include_children: false,
@@ -1202,6 +1205,7 @@ module Aws::ControlTower
     #   resp.enabled_baselines[0].arn #=> String
     #   resp.enabled_baselines[0].baseline_identifier #=> String
     #   resp.enabled_baselines[0].baseline_version #=> String
+    #   resp.enabled_baselines[0].drift_status_summary.types.inheritance.status #=> String, one of "IN_SYNC", "DRIFTED"
     #   resp.enabled_baselines[0].parent_identifier #=> String
     #   resp.enabled_baselines[0].status_summary.last_operation_identifier #=> String
     #   resp.enabled_baselines[0].status_summary.status #=> String, one of "SUCCEEDED", "FAILED", "UNDER_CHANGE"
@@ -1750,7 +1754,7 @@ module Aws::ControlTower
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-controltower'
-      context[:gem_version] = '1.41.0'
+      context[:gem_version] = '1.43.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-controltower/client_api.rb

@@ -53,7 +53,13 @@ module Aws::ControlTower
     EnableControlOutput = Shapes::StructureShape.new(name: 'EnableControlOutput')
     EnabledBaselineBaselineIdentifiers = Shapes::ListShape.new(name: 'EnabledBaselineBaselineIdentifiers')
     EnabledBaselineDetails = Shapes::StructureShape.new(name: 'EnabledBaselineDetails')
+    EnabledBaselineDriftStatus = Shapes::StringShape.new(name: 'EnabledBaselineDriftStatus')
+    EnabledBaselineDriftStatusSummary = Shapes::StructureShape.new(name: 'EnabledBaselineDriftStatusSummary')
+    EnabledBaselineDriftStatuses = Shapes::ListShape.new(name: 'EnabledBaselineDriftStatuses')
+    EnabledBaselineDriftTypes = Shapes::StructureShape.new(name: 'EnabledBaselineDriftTypes')
+    EnabledBaselineEnablementStatuses = Shapes::ListShape.new(name: 'EnabledBaselineEnablementStatuses')
     EnabledBaselineFilter = Shapes::StructureShape.new(name: 'EnabledBaselineFilter')
+    EnabledBaselineInheritanceDrift = Shapes::StructureShape.new(name: 'EnabledBaselineInheritanceDrift')
     EnabledBaselineParameter = Shapes::StructureShape.new(name: 'EnabledBaselineParameter')
     EnabledBaselineParameterDocument = Shapes::DocumentShape.new(name: 'EnabledBaselineParameterDocument', document: true)
     EnabledBaselineParameterSummaries = Shapes::ListShape.new(name: 'EnabledBaselineParameterSummaries')
@@ -280,17 +286,33 @@ module Aws::ControlTower
     EnabledBaselineDetails.add_member(:arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "arn"))
     EnabledBaselineDetails.add_member(:baseline_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "baselineIdentifier"))
     EnabledBaselineDetails.add_member(:baseline_version, Shapes::ShapeRef.new(shape: String, location_name: "baselineVersion"))
+    EnabledBaselineDetails.add_member(:drift_status_summary, Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatusSummary, location_name: "driftStatusSummary"))
     EnabledBaselineDetails.add_member(:parameters, Shapes::ShapeRef.new(shape: EnabledBaselineParameterSummaries, location_name: "parameters"))
     EnabledBaselineDetails.add_member(:parent_identifier, Shapes::ShapeRef.new(shape: Arn, location_name: "parentIdentifier"))
     EnabledBaselineDetails.add_member(:status_summary, Shapes::ShapeRef.new(shape: EnablementStatusSummary, required: true, location_name: "statusSummary"))
     EnabledBaselineDetails.add_member(:target_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "targetIdentifier"))
     EnabledBaselineDetails.struct_class = Types::EnabledBaselineDetails
 
+    EnabledBaselineDriftStatusSummary.add_member(:types, Shapes::ShapeRef.new(shape: EnabledBaselineDriftTypes, location_name: "types"))
+    EnabledBaselineDriftStatusSummary.struct_class = Types::EnabledBaselineDriftStatusSummary
+
+    EnabledBaselineDriftStatuses.member = Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatus)
+
+    EnabledBaselineDriftTypes.add_member(:inheritance, Shapes::ShapeRef.new(shape: EnabledBaselineInheritanceDrift, location_name: "inheritance"))
+    EnabledBaselineDriftTypes.struct_class = Types::EnabledBaselineDriftTypes
+
+    EnabledBaselineEnablementStatuses.member = Shapes::ShapeRef.new(shape: EnablementStatus)
+
     EnabledBaselineFilter.add_member(:baseline_identifiers, Shapes::ShapeRef.new(shape: EnabledBaselineBaselineIdentifiers, location_name: "baselineIdentifiers"))
+    EnabledBaselineFilter.add_member(:inheritance_drift_statuses, Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatuses, location_name: "inheritanceDriftStatuses"))
     EnabledBaselineFilter.add_member(:parent_identifiers, Shapes::ShapeRef.new(shape: EnabledBaselineParentIdentifiers, location_name: "parentIdentifiers"))
+    EnabledBaselineFilter.add_member(:statuses, Shapes::ShapeRef.new(shape: EnabledBaselineEnablementStatuses, location_name: "statuses"))
     EnabledBaselineFilter.add_member(:target_identifiers, Shapes::ShapeRef.new(shape: EnabledBaselineTargetIdentifiers, location_name: "targetIdentifiers"))
     EnabledBaselineFilter.struct_class = Types::EnabledBaselineFilter
 
+    EnabledBaselineInheritanceDrift.add_member(:status, Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatus, location_name: "status"))
+    EnabledBaselineInheritanceDrift.struct_class = Types::EnabledBaselineInheritanceDrift
+
     EnabledBaselineParameter.add_member(:key, Shapes::ShapeRef.new(shape: String, required: true, location_name: "key"))
     EnabledBaselineParameter.add_member(:value, Shapes::ShapeRef.new(shape: EnabledBaselineParameterDocument, required: true, location_name: "value"))
     EnabledBaselineParameter.struct_class = Types::EnabledBaselineParameter
@@ -308,6 +330,7 @@ module Aws::ControlTower
     EnabledBaselineSummary.add_member(:arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "arn"))
     EnabledBaselineSummary.add_member(:baseline_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "baselineIdentifier"))
     EnabledBaselineSummary.add_member(:baseline_version, Shapes::ShapeRef.new(shape: String, location_name: "baselineVersion"))
+    EnabledBaselineSummary.add_member(:drift_status_summary, Shapes::ShapeRef.new(shape: EnabledBaselineDriftStatusSummary, location_name: "driftStatusSummary"))
     EnabledBaselineSummary.add_member(:parent_identifier, Shapes::ShapeRef.new(shape: Arn, location_name: "parentIdentifier"))
     EnabledBaselineSummary.add_member(:status_summary, Shapes::ShapeRef.new(shape: EnablementStatusSummary, required: true, location_name: "statusSummary"))
     EnabledBaselineSummary.add_member(:target_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "targetIdentifier"))
@@ -612,8 +635,8 @@ module Aws::ControlTower
         o.http_request_uri = "/create-landingzone"
         o.input = Shapes::ShapeRef.new(shape: CreateLandingZoneInput)
         o.output = Shapes::ShapeRef.new(shape: CreateLandingZoneOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
@@ -625,12 +648,12 @@ module Aws::ControlTower
         o.http_request_uri = "/delete-landingzone"
         o.input = Shapes::ShapeRef.new(shape: DeleteLandingZoneInput)
         o.output = Shapes::ShapeRef.new(shape: DeleteLandingZoneOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:disable_baseline, Seahorse::Model::Operation.new.tap do |o|
@@ -639,13 +662,13 @@ module Aws::ControlTower
         o.http_request_uri = "/disable-baseline"
         o.input = Shapes::ShapeRef.new(shape: DisableBaselineInput)
         o.output = Shapes::ShapeRef.new(shape: DisableBaselineOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:disable_control, Seahorse::Model::Operation.new.tap do |o|
@@ -654,13 +677,13 @@ module Aws::ControlTower
         o.http_request_uri = "/disable-control"
         o.input = Shapes::ShapeRef.new(shape: DisableControlInput)
         o.output = Shapes::ShapeRef.new(shape: DisableControlOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:enable_baseline, Seahorse::Model::Operation.new.tap do |o|
@@ -669,13 +692,13 @@ module Aws::ControlTower
         o.http_request_uri = "/enable-baseline"
         o.input = Shapes::ShapeRef.new(shape: EnableBaselineInput)
         o.output = Shapes::ShapeRef.new(shape: EnableBaselineOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:enable_control, Seahorse::Model::Operation.new.tap do |o|
@@ -684,13 +707,13 @@ module Aws::ControlTower
         o.http_request_uri = "/enable-control"
         o.input = Shapes::ShapeRef.new(shape: EnableControlInput)
         o.output = Shapes::ShapeRef.new(shape: EnableControlOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_baseline, Seahorse::Model::Operation.new.tap do |o|
@@ -702,8 +725,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_baseline_operation, Seahorse::Model::Operation.new.tap do |o|
@@ -715,8 +738,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_control_operation, Seahorse::Model::Operation.new.tap do |o|
@@ -728,8 +751,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_enabled_baseline, Seahorse::Model::Operation.new.tap do |o|
@@ -741,8 +764,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_enabled_control, Seahorse::Model::Operation.new.tap do |o|
@@ -754,8 +777,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_landing_zone, Seahorse::Model::Operation.new.tap do |o|
@@ -767,8 +790,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:get_landing_zone_operation, Seahorse::Model::Operation.new.tap do |o|
@@ -780,8 +803,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:list_baselines, Seahorse::Model::Operation.new.tap do |o|
@@ -847,8 +870,8 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o[:pager] = Aws::Pager.new(
           limit_key: "max_results",
           tokens: {
@@ -910,13 +933,13 @@ module Aws::ControlTower
         o.http_request_uri = "/reset-enabled-baseline"
         o.input = Shapes::ShapeRef.new(shape: ResetEnabledBaselineInput)
         o.output = Shapes::ShapeRef.new(shape: ResetEnabledBaselineOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:reset_enabled_control, Seahorse::Model::Operation.new.tap do |o|
@@ -925,13 +948,13 @@ module Aws::ControlTower
         o.http_request_uri = "/reset-enabled-control"
         o.input = Shapes::ShapeRef.new(shape: ResetEnabledControlInput)
         o.output = Shapes::ShapeRef.new(shape: ResetEnabledControlOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:reset_landing_zone, Seahorse::Model::Operation.new.tap do |o|
@@ -940,12 +963,12 @@ module Aws::ControlTower
         o.http_request_uri = "/reset-landingzone"
         o.input = Shapes::ShapeRef.new(shape: ResetLandingZoneInput)
         o.output = Shapes::ShapeRef.new(shape: ResetLandingZoneOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:tag_resource, Seahorse::Model::Operation.new.tap do |o|
@@ -976,13 +999,13 @@ module Aws::ControlTower
         o.http_request_uri = "/update-enabled-baseline"
         o.input = Shapes::ShapeRef.new(shape: UpdateEnabledBaselineInput)
         o.output = Shapes::ShapeRef.new(shape: UpdateEnabledBaselineOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:update_enabled_control, Seahorse::Model::Operation.new.tap do |o|
@@ -991,13 +1014,13 @@ module Aws::ControlTower
         o.http_request_uri = "/update-enabled-control"
         o.input = Shapes::ShapeRef.new(shape: UpdateEnabledControlInput)
         o.output = Shapes::ShapeRef.new(shape: UpdateEnabledControlOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:update_landing_zone, Seahorse::Model::Operation.new.tap do |o|
@@ -1006,12 +1029,12 @@ module Aws::ControlTower
         o.http_request_uri = "/update-landingzone"
         o.input = Shapes::ShapeRef.new(shape: UpdateLandingZoneInput)
         o.output = Shapes::ShapeRef.new(shape: UpdateLandingZoneOutput)
-        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
-        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
     end
 

data/lib/aws-sdk-controltower/types.rb

@@ -554,6 +554,10 @@ module Aws::ControlTower
     #   The enabled version of the `Baseline`.
     #   @return [String]
     #
+    # @!attribute [rw] drift_status_summary
+    #   The drift status of the enabled baseline.
+    #   @return [Types::EnabledBaselineDriftStatusSummary]
+    #
     # @!attribute [rw] parameters
     #   Shows the parameters that are applied when enabling this `Baseline`.
     #   @return [Array<Types::EnabledBaselineParameterSummary>]
@@ -580,6 +584,7 @@ module Aws::ControlTower
       :arn,
       :baseline_identifier,
       :baseline_version,
+      :drift_status_summary,
       :parameters,
       :parent_identifier,
       :status_summary,
@@ -588,6 +593,72 @@ module Aws::ControlTower
       include Aws::Structure
     end
 
+    # The drift summary of the enabled baseline. Amazon Web Services Control
+    # Tower reports inheritance drift when an enabled baseline configuration
+    # of a member account is different than the configuration that applies
+    # to the OU. Amazon Web Services Control Tower reports this type of
+    # drift for a parent or child enabled baseline. One way to repair this
+    # drift by resetting the parent enabled baseline, on the OU.
+    #
+    # For example, you may see this type of drift if you move accounts
+    # between OUs, but the accounts are not yet (re-)enrolled.
+    #
+    # @!attribute [rw] types
+    #   The types of drift that can be detected for an enabled baseline.
+    #   Amazon Web Services Control Tower detects inheritance drift on
+    #   enabled baselines that apply at the OU level.
+    #   @return [Types::EnabledBaselineDriftTypes]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnabledBaselineDriftStatusSummary AWS API Documentation
+    #
+    class EnabledBaselineDriftStatusSummary < Struct.new(
+      :types)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The types of drift that can be detected for an enabled baseline.
+    #
+    # * Amazon Web Services Control Tower detects inheritance drift on the
+    #   enabled baselines that target OUs: `AWSControlTowerBaseline` and
+    #   `BackupBaseline`.
+    #
+    # * Amazon Web Services Control Tower does not detect drift on the
+    #   baselines that apply to your landing zone: `IdentityCenterBaseline`,
+    #   `AuditBaseline`, `LogArchiveBaseline`, `BackupCentralVaultBaseline`,
+    #   or `BackupAdminBaseline`. For more information, see [Types of
+    #   baselines][1].
+    #
+    # Baselines enabled on an OU are inherited by its member accounts as
+    # child `EnabledBaseline` resources. The baseline on the OU serves as
+    # the parent `EnabledBaseline`, which governs the configuration of each
+    # child `EnabledBaseline`.
+    #
+    # If the baseline configuration of a member account in an OU does not
+    # match the configuration of the parent OU, the parent and child
+    # baseline is in a state of inheritance drift. This drift could occur in
+    # the `AWSControlTowerBaseline` or the `BackupBaseline` related to that
+    # account.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html
+    #
+    # @!attribute [rw] inheritance
+    #   At least one account within the target OU does not match the
+    #   baseline configuration defined on that OU. An account is in
+    #   inheritance drift when it does not match the configuration of a
+    #   parent OU, possibly a new parent OU, if the account is moved.
+    #   @return [Types::EnabledBaselineInheritanceDrift]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnabledBaselineDriftTypes AWS API Documentation
+    #
+    class EnabledBaselineDriftTypes < Struct.new(
+      :inheritance)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A filter applied on the `ListEnabledBaseline` operation. Allowed
     # filters are `baselineIdentifiers` and `targetIdentifiers`. The filter
     # can be applied for either, or both.
@@ -597,11 +668,19 @@ module Aws::ControlTower
     #   filter operation.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] inheritance_drift_statuses
+    #   A list of `EnabledBaselineDriftStatus` items for enabled baselines.
+    #   @return [Array<String>]
+    #
     # @!attribute [rw] parent_identifiers
     #   An optional filter that sets up a list of `parentIdentifiers` to
     #   filter the results of the `ListEnabledBaseline` output.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] statuses
+    #   A list of `EnablementStatus` items.
+    #   @return [Array<String>]
+    #
     # @!attribute [rw] target_identifiers
     #   Identifiers for the targets of the `Baseline` filter operation.
     #   @return [Array<String>]
@@ -610,12 +689,30 @@ module Aws::ControlTower
     #
     class EnabledBaselineFilter < Struct.new(
       :baseline_identifiers,
+      :inheritance_drift_statuses,
       :parent_identifiers,
+      :statuses,
       :target_identifiers)
       SENSITIVE = []
       include Aws::Structure
     end
 
+    # The inheritance drift summary for the enabled baseline. Inheritance
+    # drift occurs when any accounts in the target OU do not match the
+    # baseline configuration defined on that OU.
+    #
+    # @!attribute [rw] status
+    #   The inheritance drift status for enabled baselines.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnabledBaselineInheritanceDrift AWS API Documentation
+    #
+    class EnabledBaselineInheritanceDrift < Struct.new(
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A key-value parameter to an `EnabledBaseline` resource.
     #
     # @!attribute [rw] key
@@ -671,6 +768,10 @@ module Aws::ControlTower
     #   The enabled version of the baseline.
     #   @return [String]
     #
+    # @!attribute [rw] drift_status_summary
+    #   The drift status of the enabled baseline.
+    #   @return [Types::EnabledBaselineDriftStatusSummary]
+    #
     # @!attribute [rw] parent_identifier
     #   An ARN that represents an object returned by `ListEnabledBaseline`,
     #   to describe an enabled baseline.
@@ -691,6 +792,7 @@ module Aws::ControlTower
       :arn,
       :baseline_identifier,
       :baseline_version,
+      :drift_status_summary,
       :parent_identifier,
       :status_summary,
       :target_identifier)
@@ -1652,7 +1754,7 @@ module Aws::ControlTower
     end
 
     # The request would cause a service quota to be exceeded. The limit is
-    # 10 concurrent operations.
+    # 100 concurrent operations.
     #
     # @!attribute [rw] message
     #   @return [String]

data/lib/aws-sdk-controltower.rb

@@ -54,7 +54,7 @@ module Aws::ControlTower
   autoload :EndpointProvider, 'aws-sdk-controltower/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-controltower/endpoints'
 
-  GEM_VERSION = '1.41.0'
+  GEM_VERSION = '1.43.0'
 
 end
 

data/sig/client.rbs

@@ -275,7 +275,9 @@ module Aws
       def list_enabled_baselines: (
                                     ?filter: {
                                       baseline_identifiers: Array[::String]?,
+                                      inheritance_drift_statuses: Array[("IN_SYNC" | "DRIFTED")]?,
                                       parent_identifiers: Array[::String]?,
+                                      statuses: Array[("SUCCEEDED" | "FAILED" | "UNDER_CHANGE")]?,
                                       target_identifiers: Array[::String]?
                                     },
                                     ?include_children: bool,

data/sig/types.rbs

@@ -152,6 +152,7 @@ module Aws::ControlTower
       attr_accessor arn: ::String
       attr_accessor baseline_identifier: ::String
       attr_accessor baseline_version: ::String
+      attr_accessor drift_status_summary: Types::EnabledBaselineDriftStatusSummary
       attr_accessor parameters: ::Array[Types::EnabledBaselineParameterSummary]
       attr_accessor parent_identifier: ::String
       attr_accessor status_summary: Types::EnablementStatusSummary
@@ -159,13 +160,30 @@ module Aws::ControlTower
       SENSITIVE: []
     end
 
+    class EnabledBaselineDriftStatusSummary
+      attr_accessor types: Types::EnabledBaselineDriftTypes
+      SENSITIVE: []
+    end
+
+    class EnabledBaselineDriftTypes
+      attr_accessor inheritance: Types::EnabledBaselineInheritanceDrift
+      SENSITIVE: []
+    end
+
     class EnabledBaselineFilter
       attr_accessor baseline_identifiers: ::Array[::String]
+      attr_accessor inheritance_drift_statuses: ::Array[("IN_SYNC" | "DRIFTED")]
       attr_accessor parent_identifiers: ::Array[::String]
+      attr_accessor statuses: ::Array[("SUCCEEDED" | "FAILED" | "UNDER_CHANGE")]
       attr_accessor target_identifiers: ::Array[::String]
       SENSITIVE: []
     end
 
+    class EnabledBaselineInheritanceDrift
+      attr_accessor status: ("IN_SYNC" | "DRIFTED")
+      SENSITIVE: []
+    end
+
     class EnabledBaselineParameter
       attr_accessor key: ::String
       attr_accessor value: untyped
@@ -182,6 +200,7 @@ module Aws::ControlTower
       attr_accessor arn: ::String
       attr_accessor baseline_identifier: ::String
       attr_accessor baseline_version: ::String
+      attr_accessor drift_status_summary: Types::EnabledBaselineDriftStatusSummary
       attr_accessor parent_identifier: ::String
       attr_accessor status_summary: Types::EnablementStatusSummary
       attr_accessor target_identifier: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-controltower
 version: !ruby/object:Gem::Version
-  version: 1.41.0
+  version: 1.43.0
 platform: ruby
 authors:
 - Amazon Web Services