aws-sdk-controltower 1.51.0 → 1.52.0

data/lib/aws-sdk-controltower/client.rb

@@ -480,6 +480,9 @@ module Aws::ControlTower
     # operation that creates and configures a landing zone, based on the
     # parameters specified in the manifest JSON file.
     #
+    # @option params [required, String] :version
+    #   The landing zone version, for example, 3.0.
+    #
     # @option params [required, Hash,Array,String,Numeric,Boolean] :manifest
     #   The manifest JSON file is a text file that describes your Amazon Web
     #   Services resources. For examples, review [Launch your landing
@@ -494,12 +497,14 @@ module Aws::ControlTower
     #
     #   [1]: https://docs.aws.amazon.com/controltower/latest/userguide/lz-api-launch
     #
+    # @option params [Array<String>] :remediation_types
+    #   Specifies the types of remediation actions to apply when creating the
+    #   landing zone, such as automatic drift correction or compliance
+    #   enforcement.
+    #
     # @option params [Hash<String,String>] :tags
     #   Tags to be applied to the landing zone.
     #
-    # @option params [required, String] :version
-    #   The landing zone version, for example, 3.0.
-    #
     # @return [Types::CreateLandingZoneOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateLandingZoneOutput#arn #arn} => String
@@ -508,12 +513,13 @@ module Aws::ControlTower
     # @example Request syntax with placeholder values
     #
     #   resp = client.create_landing_zone({
+    #     version: "LandingZoneVersion", # required
     #     manifest: { # required
     #     },
+    #     remediation_types: ["INHERITANCE_DRIFT"], # accepts INHERITANCE_DRIFT
     #     tags: {
     #       "TagKey" => "TagValue",
     #     },
-    #     version: "LandingZoneVersion", # required
     #   })
     #
     # @example Response structure
@@ -534,6 +540,11 @@ module Aws::ControlTower
     # operation that deletes Amazon Web Services Control Tower resources
     # deployed in accounts managed by Amazon Web Services Control Tower.
     #
+    # Decommissioning a landing zone is a process with significant
+    # consequences, and it cannot be undone. We strongly recommend that you
+    # perform this decommissioning process only if you intend to stop using
+    # your landing zone.
+    #
     # @option params [required, String] :landing_zone_identifier
     #   The unique identifier of the landing zone.
     #
@@ -607,7 +618,7 @@ module Aws::ControlTower
     #
     # [1]: https://docs.aws.amazon.com/controltower/latest/controlreference/control-api-examples-short.html
     #
-    # @option params [required, String] :control_identifier
+    # @option params [String] :control_identifier
     #   The ARN of the control. Only **Strongly recommended** and **Elective**
     #   controls are permitted, with the exception of the **Region deny**
     #   control. For information on how to find the `controlIdentifier`, see
@@ -617,7 +628,7 @@ module Aws::ControlTower
     #
     #   [1]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
     #
-    # @option params [required, String] :target_identifier
+    # @option params [String] :target_identifier
     #   The ARN of the organizational unit. For information on how to find the
     #   `targetIdentifier`, see [the overview page][1].
     #
@@ -625,6 +636,10 @@ module Aws::ControlTower
     #
     #   [1]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
     #
+    # @option params [String] :enabled_control_identifier
+    #   The ARN of the enabled control to be disabled, which uniquely
+    #   identifies the control instance on the target organizational unit.
+    #
     # @return [Types::DisableControlOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::DisableControlOutput#operation_identifier #operation_identifier} => String
@@ -632,8 +647,9 @@ module Aws::ControlTower
     # @example Request syntax with placeholder values
     #
     #   resp = client.disable_control({
-    #     control_identifier: "ControlIdentifier", # required
-    #     target_identifier: "TargetIdentifier", # required
+    #     control_identifier: "ControlIdentifier",
+    #     target_identifier: "TargetIdentifier",
+    #     enabled_control_identifier: "Arn",
     #   })
     #
     # @example Response structure
@@ -658,9 +674,6 @@ module Aws::ControlTower
     #
     # [1]: https://docs.aws.amazon.com/controltower/latest/userguide/baseline-api-examples.html
     #
-    # @option params [required, String] :baseline_identifier
-    #   The ARN of the baseline to be enabled.
-    #
     # @option params [required, String] :baseline_version
     #   The specific version to be enabled of the specified baseline.
     #
@@ -668,22 +681,24 @@ module Aws::ControlTower
     #   A list of `key-value` objects that specify enablement parameters,
     #   where `key` is a string and `value` is a document of any type.
     #
-    # @option params [Hash<String,String>] :tags
-    #   Tags associated with input to `EnableBaseline`.
+    # @option params [required, String] :baseline_identifier
+    #   The ARN of the baseline to be enabled.
     #
     # @option params [required, String] :target_identifier
     #   The ARN of the target on which the baseline will be enabled. Only OUs
     #   are supported as targets.
     #
+    # @option params [Hash<String,String>] :tags
+    #   Tags associated with input to `EnableBaseline`.
+    #
     # @return [Types::EnableBaselineOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
-    #   * {Types::EnableBaselineOutput#arn #arn} => String
     #   * {Types::EnableBaselineOutput#operation_identifier #operation_identifier} => String
+    #   * {Types::EnableBaselineOutput#arn #arn} => String
     #
     # @example Request syntax with placeholder values
     #
     #   resp = client.enable_baseline({
-    #     baseline_identifier: "Arn", # required
     #     baseline_version: "BaselineVersion", # required
     #     parameters: [
     #       {
@@ -692,16 +707,17 @@ module Aws::ControlTower
     #         },
     #       },
     #     ],
+    #     baseline_identifier: "Arn", # required
+    #     target_identifier: "Arn", # required
     #     tags: {
     #       "TagKey" => "TagValue",
     #     },
-    #     target_identifier: "Arn", # required
     #   })
     #
     # @example Response structure
     #
-    #   resp.arn #=> String
     #   resp.operation_identifier #=> String
+    #   resp.arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnableBaseline AWS API Documentation
     #
@@ -732,13 +748,6 @@ module Aws::ControlTower
     #
     #   [1]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
     #
-    # @option params [Array<Types::EnabledControlParameter>] :parameters
-    #   A list of input parameter values, which are specified to configure the
-    #   control when you enable it.
-    #
-    # @option params [Hash<String,String>] :tags
-    #   Tags to be applied to the `EnabledControl` resource.
-    #
     # @option params [required, String] :target_identifier
     #   The ARN of the organizational unit. For information on how to find the
     #   `targetIdentifier`, see [the overview page][1].
@@ -747,15 +756,26 @@ module Aws::ControlTower
     #
     #   [1]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
     #
+    # @option params [Hash<String,String>] :tags
+    #   Tags to be applied to the `EnabledControl` resource.
+    #
+    # @option params [Array<Types::EnabledControlParameter>] :parameters
+    #   A list of input parameter values, which are specified to configure the
+    #   control when you enable it.
+    #
     # @return [Types::EnableControlOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
-    #   * {Types::EnableControlOutput#arn #arn} => String
     #   * {Types::EnableControlOutput#operation_identifier #operation_identifier} => String
+    #   * {Types::EnableControlOutput#arn #arn} => String
     #
     # @example Request syntax with placeholder values
     #
     #   resp = client.enable_control({
     #     control_identifier: "ControlIdentifier", # required
+    #     target_identifier: "TargetIdentifier", # required
+    #     tags: {
+    #       "TagKey" => "TagValue",
+    #     },
     #     parameters: [
     #       {
     #         key: "String", # required
@@ -763,16 +783,12 @@ module Aws::ControlTower
     #         },
     #       },
     #     ],
-    #     tags: {
-    #       "TagKey" => "TagValue",
-    #     },
-    #     target_identifier: "TargetIdentifier", # required
     #   })
     #
     # @example Response structure
     #
-    #   resp.arn #=> String
     #   resp.operation_identifier #=> String
+    #   resp.arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnableControl AWS API Documentation
     #
@@ -797,8 +813,8 @@ module Aws::ControlTower
     # @return [Types::GetBaselineOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetBaselineOutput#arn #arn} => String
-    #   * {Types::GetBaselineOutput#description #description} => String
     #   * {Types::GetBaselineOutput#name #name} => String
+    #   * {Types::GetBaselineOutput#description #description} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -809,8 +825,8 @@ module Aws::ControlTower
     # @example Response structure
     #
     #   resp.arn #=> String
-    #   resp.description #=> String
     #   resp.name #=> String
+    #   resp.description #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/GetBaseline AWS API Documentation
     #
@@ -847,11 +863,11 @@ module Aws::ControlTower
     #
     # @example Response structure
     #
-    #   resp.baseline_operation.end_time #=> Time
     #   resp.baseline_operation.operation_identifier #=> String
     #   resp.baseline_operation.operation_type #=> String, one of "ENABLE_BASELINE", "DISABLE_BASELINE", "UPDATE_ENABLED_BASELINE", "RESET_ENABLED_BASELINE"
-    #   resp.baseline_operation.start_time #=> Time
     #   resp.baseline_operation.status #=> String, one of "SUCCEEDED", "FAILED", "IN_PROGRESS"
+    #   resp.baseline_operation.start_time #=> Time
+    #   resp.baseline_operation.end_time #=> Time
     #   resp.baseline_operation.status_message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/GetBaselineOperation AWS API Documentation
@@ -888,15 +904,15 @@ module Aws::ControlTower
     #
     # @example Response structure
     #
-    #   resp.control_operation.control_identifier #=> String
-    #   resp.control_operation.enabled_control_identifier #=> String
-    #   resp.control_operation.end_time #=> Time
-    #   resp.control_operation.operation_identifier #=> String
     #   resp.control_operation.operation_type #=> String, one of "ENABLE_CONTROL", "DISABLE_CONTROL", "UPDATE_ENABLED_CONTROL", "RESET_ENABLED_CONTROL"
     #   resp.control_operation.start_time #=> Time
+    #   resp.control_operation.end_time #=> Time
     #   resp.control_operation.status #=> String, one of "SUCCEEDED", "FAILED", "IN_PROGRESS"
     #   resp.control_operation.status_message #=> String
+    #   resp.control_operation.operation_identifier #=> String
+    #   resp.control_operation.control_identifier #=> String
     #   resp.control_operation.target_identifier #=> String
+    #   resp.control_operation.enabled_control_identifier #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/GetControlOperation AWS API Documentation
     #
@@ -930,12 +946,12 @@ module Aws::ControlTower
     #   resp.enabled_baseline_details.baseline_identifier #=> String
     #   resp.enabled_baseline_details.baseline_version #=> String
     #   resp.enabled_baseline_details.drift_status_summary.types.inheritance.status #=> String, one of "IN_SYNC", "DRIFTED"
-    #   resp.enabled_baseline_details.parameters #=> Array
-    #   resp.enabled_baseline_details.parameters[0].key #=> String
+    #   resp.enabled_baseline_details.target_identifier #=> String
     #   resp.enabled_baseline_details.parent_identifier #=> String
-    #   resp.enabled_baseline_details.status_summary.last_operation_identifier #=> String
     #   resp.enabled_baseline_details.status_summary.status #=> String, one of "SUCCEEDED", "FAILED", "UNDER_CHANGE"
-    #   resp.enabled_baseline_details.target_identifier #=> String
+    #   resp.enabled_baseline_details.status_summary.last_operation_identifier #=> String
+    #   resp.enabled_baseline_details.parameters #=> Array
+    #   resp.enabled_baseline_details.parameters[0].key #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/GetEnabledBaseline AWS API Documentation
     #
@@ -970,14 +986,17 @@ module Aws::ControlTower
     #
     #   resp.enabled_control_details.arn #=> String
     #   resp.enabled_control_details.control_identifier #=> String
-    #   resp.enabled_control_details.drift_status_summary.drift_status #=> String, one of "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN"
-    #   resp.enabled_control_details.parameters #=> Array
-    #   resp.enabled_control_details.parameters[0].key #=> String
-    #   resp.enabled_control_details.status_summary.last_operation_identifier #=> String
-    #   resp.enabled_control_details.status_summary.status #=> String, one of "SUCCEEDED", "FAILED", "UNDER_CHANGE"
     #   resp.enabled_control_details.target_identifier #=> String
+    #   resp.enabled_control_details.status_summary.status #=> String, one of "SUCCEEDED", "FAILED", "UNDER_CHANGE"
+    #   resp.enabled_control_details.status_summary.last_operation_identifier #=> String
+    #   resp.enabled_control_details.drift_status_summary.drift_status #=> String, one of "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN"
+    #   resp.enabled_control_details.drift_status_summary.types.inheritance.status #=> String, one of "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN"
+    #   resp.enabled_control_details.drift_status_summary.types.resource.status #=> String, one of "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN"
+    #   resp.enabled_control_details.parent_identifier #=> String
     #   resp.enabled_control_details.target_regions #=> Array
     #   resp.enabled_control_details.target_regions[0].name #=> String
+    #   resp.enabled_control_details.parameters #=> Array
+    #   resp.enabled_control_details.parameters[0].key #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/GetEnabledControl AWS API Documentation
     #
@@ -1006,11 +1025,13 @@ module Aws::ControlTower
     #
     # @example Response structure
     #
+    #   resp.landing_zone.version #=> String
+    #   resp.landing_zone.remediation_types #=> Array
+    #   resp.landing_zone.remediation_types[0] #=> String, one of "INHERITANCE_DRIFT"
     #   resp.landing_zone.arn #=> String
-    #   resp.landing_zone.drift_status.status #=> String, one of "DRIFTED", "IN_SYNC"
-    #   resp.landing_zone.latest_available_version #=> String
     #   resp.landing_zone.status #=> String, one of "ACTIVE", "PROCESSING", "FAILED"
-    #   resp.landing_zone.version #=> String
+    #   resp.landing_zone.latest_available_version #=> String
+    #   resp.landing_zone.drift_status.status #=> String, one of "DRIFTED", "IN_SYNC"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/GetLandingZone AWS API Documentation
     #
@@ -1039,11 +1060,11 @@ module Aws::ControlTower
     #
     # @example Response structure
     #
-    #   resp.operation_details.end_time #=> Time
-    #   resp.operation_details.operation_identifier #=> String
     #   resp.operation_details.operation_type #=> String, one of "DELETE", "CREATE", "UPDATE", "RESET"
-    #   resp.operation_details.start_time #=> Time
+    #   resp.operation_details.operation_identifier #=> String
     #   resp.operation_details.status #=> String, one of "SUCCEEDED", "FAILED", "IN_PROGRESS"
+    #   resp.operation_details.start_time #=> Time
+    #   resp.operation_details.end_time #=> Time
     #   resp.operation_details.status_message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/GetLandingZoneOperation AWS API Documentation
@@ -1062,12 +1083,12 @@ module Aws::ControlTower
     #
     # [1]: https://docs.aws.amazon.com/controltower/latest/userguide/baseline-api-examples.html
     #
-    # @option params [Integer] :max_results
-    #   The maximum number of results to be shown.
-    #
     # @option params [String] :next_token
     #   A pagination token.
     #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to be shown.
+    #
     # @return [Types::ListBaselinesOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ListBaselinesOutput#baselines #baselines} => Array&lt;Types::BaselineSummary&gt;
@@ -1078,16 +1099,16 @@ module Aws::ControlTower
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_baselines({
-    #     max_results: 1,
     #     next_token: "String",
+    #     max_results: 1,
     #   })
     #
     # @example Response structure
     #
     #   resp.baselines #=> Array
     #   resp.baselines[0].arn #=> String
-    #   resp.baselines[0].description #=> String
     #   resp.baselines[0].name #=> String
+    #   resp.baselines[0].description #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/ListBaselines AWS API Documentation
@@ -1110,12 +1131,12 @@ module Aws::ControlTower
     #   An input filter for the `ListControlOperations` API that lets you
     #   select the types of control operations to view.
     #
-    # @option params [Integer] :max_results
-    #   The maximum number of results to be shown.
-    #
     # @option params [String] :next_token
     #   A pagination token.
     #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to be shown.
+    #
     # @return [Types::ListControlOperationsOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ListControlOperationsOutput#control_operations #control_operations} => Array&lt;Types::ControlOperationSummary&gt;
@@ -1128,27 +1149,27 @@ module Aws::ControlTower
     #   resp = client.list_control_operations({
     #     filter: {
     #       control_identifiers: ["ControlIdentifier"],
-    #       control_operation_types: ["ENABLE_CONTROL"], # accepts ENABLE_CONTROL, DISABLE_CONTROL, UPDATE_ENABLED_CONTROL, RESET_ENABLED_CONTROL
+    #       target_identifiers: ["TargetIdentifier"],
     #       enabled_control_identifiers: ["Arn"],
     #       statuses: ["SUCCEEDED"], # accepts SUCCEEDED, FAILED, IN_PROGRESS
-    #       target_identifiers: ["TargetIdentifier"],
+    #       control_operation_types: ["ENABLE_CONTROL"], # accepts ENABLE_CONTROL, DISABLE_CONTROL, UPDATE_ENABLED_CONTROL, RESET_ENABLED_CONTROL
     #     },
-    #     max_results: 1,
     #     next_token: "ListControlOperationsNextToken",
+    #     max_results: 1,
     #   })
     #
     # @example Response structure
     #
     #   resp.control_operations #=> Array
-    #   resp.control_operations[0].control_identifier #=> String
-    #   resp.control_operations[0].enabled_control_identifier #=> String
-    #   resp.control_operations[0].end_time #=> Time
-    #   resp.control_operations[0].operation_identifier #=> String
     #   resp.control_operations[0].operation_type #=> String, one of "ENABLE_CONTROL", "DISABLE_CONTROL", "UPDATE_ENABLED_CONTROL", "RESET_ENABLED_CONTROL"
     #   resp.control_operations[0].start_time #=> Time
+    #   resp.control_operations[0].end_time #=> Time
     #   resp.control_operations[0].status #=> String, one of "SUCCEEDED", "FAILED", "IN_PROGRESS"
     #   resp.control_operations[0].status_message #=> String
+    #   resp.control_operations[0].operation_identifier #=> String
+    #   resp.control_operations[0].control_identifier #=> String
     #   resp.control_operations[0].target_identifier #=> String
+    #   resp.control_operations[0].enabled_control_identifier #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/ListControlOperations AWS API Documentation
@@ -1174,15 +1195,15 @@ module Aws::ControlTower
     #   filters are `baselineIdentifiers` and `targetIdentifiers`. The filter
     #   can be applied for either, or both.
     #
-    # @option params [Boolean] :include_children
-    #   A value that can be set to include the child enabled baselines in
-    #   responses. The default value is false.
+    # @option params [String] :next_token
+    #   A pagination token.
     #
     # @option params [Integer] :max_results
     #   The maximum number of results to be shown.
     #
-    # @option params [String] :next_token
-    #   A pagination token.
+    # @option params [Boolean] :include_children
+    #   A value that can be set to include the child enabled baselines in
+    #   responses. The default value is false.
     #
     # @return [Types::ListEnabledBaselinesOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1195,15 +1216,15 @@ module Aws::ControlTower
     #
     #   resp = client.list_enabled_baselines({
     #     filter: {
+    #       target_identifiers: ["Arn"],
     #       baseline_identifiers: ["Arn"],
-    #       inheritance_drift_statuses: ["IN_SYNC"], # accepts IN_SYNC, DRIFTED
     #       parent_identifiers: ["Arn"],
     #       statuses: ["SUCCEEDED"], # accepts SUCCEEDED, FAILED, UNDER_CHANGE
-    #       target_identifiers: ["Arn"],
+    #       inheritance_drift_statuses: ["IN_SYNC"], # accepts IN_SYNC, DRIFTED
     #     },
-    #     include_children: false,
-    #     max_results: 1,
     #     next_token: "ListEnabledBaselinesNextToken",
+    #     max_results: 1,
+    #     include_children: false,
     #   })
     #
     # @example Response structure
@@ -1213,10 +1234,10 @@ module Aws::ControlTower
     #   resp.enabled_baselines[0].baseline_identifier #=> String
     #   resp.enabled_baselines[0].baseline_version #=> String
     #   resp.enabled_baselines[0].drift_status_summary.types.inheritance.status #=> String, one of "IN_SYNC", "DRIFTED"
+    #   resp.enabled_baselines[0].target_identifier #=> String
     #   resp.enabled_baselines[0].parent_identifier #=> String
-    #   resp.enabled_baselines[0].status_summary.last_operation_identifier #=> String
     #   resp.enabled_baselines[0].status_summary.status #=> String, one of "SUCCEEDED", "FAILED", "UNDER_CHANGE"
-    #   resp.enabled_baselines[0].target_identifier #=> String
+    #   resp.enabled_baselines[0].status_summary.last_operation_identifier #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/ListEnabledBaselines AWS API Documentation
@@ -1236,24 +1257,28 @@ module Aws::ControlTower
     #
     # [1]: https://docs.aws.amazon.com/controltower/latest/controlreference/control-api-examples-short.html
     #
-    # @option params [Types::EnabledControlFilter] :filter
-    #   An input filter for the `ListEnabledControls` API that lets you select
-    #   the types of control operations to view.
+    # @option params [String] :target_identifier
+    #   The ARN of the organizational unit. For information on how to find the
+    #   `targetIdentifier`, see [the overview page][1].
     #
-    # @option params [Integer] :max_results
-    #   How many results to return per API call.
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
     #
     # @option params [String] :next_token
     #   The token to continue the list from a previous API call with the same
     #   parameters.
     #
-    # @option params [String] :target_identifier
-    #   The ARN of the organizational unit. For information on how to find the
-    #   `targetIdentifier`, see [the overview page][1].
-    #
+    # @option params [Integer] :max_results
+    #   How many results to return per API call.
     #
+    # @option params [Types::EnabledControlFilter] :filter
+    #   An input filter for the `ListEnabledControls` API that lets you select
+    #   the types of control operations to view.
     #
-    #   [1]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
+    # @option params [Boolean] :include_children
+    #   A boolean value that determines whether to include enabled controls
+    #   from child organizational units in the response.
     #
     # @return [Types::ListEnabledControlsOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1265,14 +1290,18 @@ module Aws::ControlTower
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_enabled_controls({
+    #     target_identifier: "TargetIdentifier",
+    #     next_token: "String",
+    #     max_results: 1,
     #     filter: {
     #       control_identifiers: ["ControlIdentifier"],
-    #       drift_statuses: ["DRIFTED"], # accepts DRIFTED, IN_SYNC, NOT_CHECKING, UNKNOWN
     #       statuses: ["SUCCEEDED"], # accepts SUCCEEDED, FAILED, UNDER_CHANGE
+    #       drift_statuses: ["DRIFTED"], # accepts DRIFTED, IN_SYNC, NOT_CHECKING, UNKNOWN
+    #       parent_identifiers: ["ParentIdentifier"],
+    #       inheritance_drift_statuses: ["DRIFTED"], # accepts DRIFTED, IN_SYNC, NOT_CHECKING, UNKNOWN
+    #       resource_drift_statuses: ["DRIFTED"], # accepts DRIFTED, IN_SYNC, NOT_CHECKING, UNKNOWN
     #     },
-    #     max_results: 1,
-    #     next_token: "String",
-    #     target_identifier: "TargetIdentifier",
+    #     include_children: false,
     #   })
     #
     # @example Response structure
@@ -1280,10 +1309,13 @@ module Aws::ControlTower
     #   resp.enabled_controls #=> Array
     #   resp.enabled_controls[0].arn #=> String
     #   resp.enabled_controls[0].control_identifier #=> String
-    #   resp.enabled_controls[0].drift_status_summary.drift_status #=> String, one of "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN"
-    #   resp.enabled_controls[0].status_summary.last_operation_identifier #=> String
-    #   resp.enabled_controls[0].status_summary.status #=> String, one of "SUCCEEDED", "FAILED", "UNDER_CHANGE"
     #   resp.enabled_controls[0].target_identifier #=> String
+    #   resp.enabled_controls[0].status_summary.status #=> String, one of "SUCCEEDED", "FAILED", "UNDER_CHANGE"
+    #   resp.enabled_controls[0].status_summary.last_operation_identifier #=> String
+    #   resp.enabled_controls[0].drift_status_summary.drift_status #=> String, one of "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN"
+    #   resp.enabled_controls[0].drift_status_summary.types.inheritance.status #=> String, one of "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN"
+    #   resp.enabled_controls[0].drift_status_summary.types.resource.status #=> String, one of "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN"
+    #   resp.enabled_controls[0].parent_identifier #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/ListEnabledControls AWS API Documentation
@@ -1302,13 +1334,13 @@ module Aws::ControlTower
     #   An input filter for the `ListLandingZoneOperations` API that lets you
     #   select the types of landing zone operations to view.
     #
-    # @option params [Integer] :max_results
-    #   How many results to return per API call.
-    #
     # @option params [String] :next_token
     #   The token to continue the list from a previous API call with the same
     #   parameters.
     #
+    # @option params [Integer] :max_results
+    #   How many results to return per API call.
+    #
     # @return [Types::ListLandingZoneOperationsOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ListLandingZoneOperationsOutput#landing_zone_operations #landing_zone_operations} => Array&lt;Types::LandingZoneOperationSummary&gt;
@@ -1320,18 +1352,18 @@ module Aws::ControlTower
     #
     #   resp = client.list_landing_zone_operations({
     #     filter: {
-    #       statuses: ["SUCCEEDED"], # accepts SUCCEEDED, FAILED, IN_PROGRESS
     #       types: ["DELETE"], # accepts DELETE, CREATE, UPDATE, RESET
+    #       statuses: ["SUCCEEDED"], # accepts SUCCEEDED, FAILED, IN_PROGRESS
     #     },
-    #     max_results: 1,
     #     next_token: "String",
+    #     max_results: 1,
     #   })
     #
     # @example Response structure
     #
     #   resp.landing_zone_operations #=> Array
-    #   resp.landing_zone_operations[0].operation_identifier #=> String
     #   resp.landing_zone_operations[0].operation_type #=> String, one of "DELETE", "CREATE", "UPDATE", "RESET"
+    #   resp.landing_zone_operations[0].operation_identifier #=> String
     #   resp.landing_zone_operations[0].status #=> String, one of "SUCCEEDED", "FAILED", "IN_PROGRESS"
     #   resp.next_token #=> String
     #
@@ -1350,13 +1382,13 @@ module Aws::ControlTower
     #
     # Returns one landing zone ARN.
     #
-    # @option params [Integer] :max_results
-    #   The maximum number of returned landing zone ARNs, which is one.
-    #
     # @option params [String] :next_token
     #   The token to continue the list from a previous API call with the same
     #   parameters.
     #
+    # @option params [Integer] :max_results
+    #   The maximum number of returned landing zone ARNs, which is one.
+    #
     # @return [Types::ListLandingZonesOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ListLandingZonesOutput#landing_zones #landing_zones} => Array&lt;Types::LandingZoneSummary&gt;
@@ -1367,8 +1399,8 @@ module Aws::ControlTower
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_landing_zones({
-    #     max_results: 1,
     #     next_token: "String",
+    #     max_results: 1,
     #   })
     #
     # @example Response structure
@@ -1456,7 +1488,8 @@ module Aws::ControlTower
       req.send_request(options)
     end
 
-    # Resets an enabled control.
+    # Resets an enabled control. Does not work for controls implemented with
+    # SCPs.
     #
     # @option params [required, String] :enabled_control_identifier
     #   The ARN of the enabled control to be reset.
@@ -1594,12 +1627,12 @@ module Aws::ControlTower
     #   Specifies the new `Baseline` version, to which the `EnabledBaseline`
     #   should be updated.
     #
-    # @option params [required, String] :enabled_baseline_identifier
-    #   Specifies the `EnabledBaseline` resource to be updated.
-    #
     # @option params [Array<Types::EnabledBaselineParameter>] :parameters
     #   Parameters to apply when making an update.
     #
+    # @option params [required, String] :enabled_baseline_identifier
+    #   Specifies the `EnabledBaseline` resource to be updated.
+    #
     # @return [Types::UpdateEnabledBaselineOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateEnabledBaselineOutput#operation_identifier #operation_identifier} => String
@@ -1608,7 +1641,6 @@ module Aws::ControlTower
     #
     #   resp = client.update_enabled_baseline({
     #     baseline_version: "BaselineVersion", # required
-    #     enabled_baseline_identifier: "Arn", # required
     #     parameters: [
     #       {
     #         key: "String", # required
@@ -1616,6 +1648,7 @@ module Aws::ControlTower
     #         },
     #       },
     #     ],
+    #     enabled_baseline_identifier: "Arn", # required
     #   })
     #
     # @example Response structure
@@ -1653,13 +1686,13 @@ module Aws::ControlTower
     #
     # [1]: https://docs.aws.amazon.com/controltower/latest/controlreference/control-api-examples-short.html
     #
-    # @option params [required, String] :enabled_control_identifier
-    #   The ARN of the enabled control that will be updated.
-    #
     # @option params [required, Array<Types::EnabledControlParameter>] :parameters
     #   A key/value pair, where `Key` is of type `String` and `Value` is of
     #   type `Document`.
     #
+    # @option params [required, String] :enabled_control_identifier
+    #   The ARN of the enabled control that will be updated.
+    #
     # @return [Types::UpdateEnabledControlOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateEnabledControlOutput#operation_identifier #operation_identifier} => String
@@ -1667,7 +1700,6 @@ module Aws::ControlTower
     # @example Request syntax with placeholder values
     #
     #   resp = client.update_enabled_control({
-    #     enabled_control_identifier: "Arn", # required
     #     parameters: [ # required
     #       {
     #         key: "String", # required
@@ -1675,6 +1707,7 @@ module Aws::ControlTower
     #         },
     #       },
     #     ],
+    #     enabled_control_identifier: "Arn", # required
     #   })
     #
     # @example Response structure
@@ -1695,8 +1728,8 @@ module Aws::ControlTower
     # version, or on the changed parameters specified in the updated
     # manifest file.
     #
-    # @option params [required, String] :landing_zone_identifier
-    #   The unique identifier of the landing zone.
+    # @option params [required, String] :version
+    #   The landing zone version, for example, 3.2.
     #
     # @option params [required, Hash,Array,String,Numeric,Boolean] :manifest
     #   The manifest file (JSON) is a text file that describes your Amazon Web
@@ -1714,8 +1747,12 @@ module Aws::ControlTower
     #
     #   [1]: https://docs.aws.amazon.com/controltower/latest/userguide/lz-api-launch
     #
-    # @option params [required, String] :version
-    #   The landing zone version, for example, 3.2.
+    # @option params [Array<String>] :remediation_types
+    #   Specifies the types of remediation actions to apply when updating the
+    #   landing zone configuration.
+    #
+    # @option params [required, String] :landing_zone_identifier
+    #   The unique identifier of the landing zone.
     #
     # @return [Types::UpdateLandingZoneOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1724,10 +1761,11 @@ module Aws::ControlTower
     # @example Request syntax with placeholder values
     #
     #   resp = client.update_landing_zone({
-    #     landing_zone_identifier: "String", # required
+    #     version: "LandingZoneVersion", # required
     #     manifest: { # required
     #     },
-    #     version: "LandingZoneVersion", # required
+    #     remediation_types: ["INHERITANCE_DRIFT"], # accepts INHERITANCE_DRIFT
+    #     landing_zone_identifier: "String", # required
     #   })
     #
     # @example Response structure
@@ -1761,7 +1799,7 @@ module Aws::ControlTower
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-controltower'
-      context[:gem_version] = '1.51.0'
+      context[:gem_version] = '1.52.0'
       Seahorse::Client::Request.new(handlers, context)
     end