aws-sdk-controltower 1.13.0 → 1.14.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '01068a7d69e7cfce4651d37296c14de38dc9bbb891cfe5c1c35f4d2aa32f1fff'
-  data.tar.gz: e4df49d011371aabf701df509be82704c56c698257af82a7ef24664e11b4ce50
+  metadata.gz: 573d52fdb4d2e41257388f874ba6fbdcd130dfd04fbec74df7a95d5d2c1e19d7
+  data.tar.gz: 2f24b76751109439a2cee72646bdb8b98a07091d26ad09c3976f37de179ae3a1
 SHA512:
-  metadata.gz: 499bf6a89d21c53a832d3d69d3e21048520c79e05f00d5d1097dcf35477ab1b394bff23dfc294565364c8bb7a4dfadeb16bd6a4bdd0cb3b6a60f57435b26b7d3
-  data.tar.gz: ef6b264490f8ca513de8630629860f32ad25340d90519440d84f71cbee2954274fc332cf4e2b59b176c22abc6680a718006e52b2cfccbe16551b5dfd76c1a7c1
+  metadata.gz: 29ffd45b639cddbbf4ba47dd4041cc3bec4e8c2dbeed630650d0c90f4a8ec941d05bfb96fb4e986b2f8e7fd115930166ec06ebaab89cf4681ca7bc39ad19a5ee
+  data.tar.gz: a7eac3ddc681b61a3a608654012ab2da9dae7f73c52d793907a8ebce36e1be8d75bfed3cc0fd66c8dc487ca880b9a444cc7e2bd53aadcab522627139b7a129ff

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.14.0 (2023-11-27)
+------------------
+
+* Feature - This release adds the following support: 1. The EnableControl API can configure controls that are configurable.  2. The GetEnabledControl API shows the configured parameters on an enabled control. 3. The new UpdateEnabledControl API can change parameters on an enabled control.
+
 1.13.0 (2023-11-27)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.13.0
+1.14.0

data/lib/aws-sdk-controltower/client.rb

@@ -388,9 +388,9 @@ module Aws::ControlTower
 
     # @!group API Operations
 
-    # Creates a new landing zone. This starts an asynchronous operation that
-    # creates and configures a landing zone based on the parameters
-    # specified in the manifest JSON file.
+    # Creates a new landing zone. This API call starts an asynchronous
+    # operation that creates and configures a landing zone, based on the
+    # parameters specified in the manifest JSON file.
     #
     # @option params [required, Hash,Array,String,Numeric,Boolean] :manifest
     #   The manifest.yaml file is a text file that describes your Amazon Web
@@ -409,7 +409,7 @@ module Aws::ControlTower
     #   Tags to be applied to the landing zone.
     #
     # @option params [required, String] :version
-    #   The landing zone version.
+    #   The landing zone version, for example, 3.0.
     #
     # @return [Types::CreateLandingZoneOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -441,9 +441,9 @@ module Aws::ControlTower
       req.send_request(options)
     end
 
-    # This decommissions a landing zone. This starts an asynchronous
+    # Decommissions a landing zone. This API call starts an asynchronous
     # operation that deletes Amazon Web Services Control Tower resources
-    # deployed in Amazon Web Services Control Tower managed accounts.
+    # deployed in accounts managed by Amazon Web Services Control Tower.
     #
     # @option params [required, String] :landing_zone_identifier
     #   The unique identifier of the landing zone.
@@ -483,9 +483,9 @@ module Aws::ControlTower
     #
     # @option params [required, String] :control_identifier
     #   The ARN of the control. Only **Strongly recommended** and **Elective**
-    #   controls are permitted, with the exception of the **Region deny**
-    #   control. For information on how to find the `controlIdentifier`, see
-    #   [the overview page][1].
+    #   controls are permitted, with the exception of the **landing zone
+    #   Region deny** control. For information on how to find the
+    #   `controlIdentifier`, see [the overview page][1].
     #
     #
     #
@@ -536,14 +536,17 @@ module Aws::ControlTower
     #
     # @option params [required, String] :control_identifier
     #   The ARN of the control. Only **Strongly recommended** and **Elective**
-    #   controls are permitted, with the exception of the **Region deny**
-    #   control. For information on how to find the `controlIdentifier`, see
-    #   [the overview page][1].
+    #   controls are permitted, with the exception of the **landing zone
+    #   Region deny** control. For information on how to find the
+    #   `controlIdentifier`, see [the overview page][1].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
     #
+    # @option params [Array<Types::EnabledControlParameter>] :parameters
+    #   An array of `EnabledControlParameter` objects
+    #
     # @option params [Hash<String,String>] :tags
     #   Tags to be applied to the `EnabledControl` resource.
     #
@@ -564,6 +567,13 @@ module Aws::ControlTower
     #
     #   resp = client.enable_control({
     #     control_identifier: "ControlIdentifier", # required
+    #     parameters: [
+    #       {
+    #         key: "String", # required
+    #         value: { # required
+    #         },
+    #       },
+    #     ],
     #     tags: {
     #       "TagKey" => "TagValue",
     #     },
@@ -610,7 +620,7 @@ module Aws::ControlTower
     # @example Response structure
     #
     #   resp.control_operation.end_time #=> Time
-    #   resp.control_operation.operation_type #=> String, one of "ENABLE_CONTROL", "DISABLE_CONTROL"
+    #   resp.control_operation.operation_type #=> String, one of "ENABLE_CONTROL", "DISABLE_CONTROL", "UPDATE_ENABLED_CONTROL"
     #   resp.control_operation.start_time #=> Time
     #   resp.control_operation.status #=> String, one of "SUCCEEDED", "FAILED", "IN_PROGRESS"
     #   resp.control_operation.status_message #=> String
@@ -649,6 +659,8 @@ module Aws::ControlTower
     #   resp.enabled_control_details.arn #=> String
     #   resp.enabled_control_details.control_identifier #=> String
     #   resp.enabled_control_details.drift_status_summary.drift_status #=> String, one of "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN"
+    #   resp.enabled_control_details.parameters #=> Array
+    #   resp.enabled_control_details.parameters[0].key #=> String
     #   resp.enabled_control_details.status_summary.last_operation_identifier #=> String
     #   resp.enabled_control_details.status_summary.status #=> String, one of "SUCCEEDED", "FAILED", "UNDER_CHANGE"
     #   resp.enabled_control_details.target_identifier #=> String
@@ -698,7 +710,7 @@ module Aws::ControlTower
     end
 
     # Returns the status of the specified landing zone operation. Details
-    # for an operation are available for X days.
+    # for an operation are available for 60 days.
     #
     # @option params [required, String] :operation_identifier
     #   A unique identifier assigned to a landing zone operation.
@@ -793,10 +805,10 @@ module Aws::ControlTower
     # managed account. This API also creates an ARN for existing accounts
     # that do not yet have a landing zone ARN.
     #
-    # The return limit is one landing zone ARN.
+    # Returns one landing zone ARN.
     #
     # @option params [Integer] :max_results
-    #   The maximum number of returned landing zone ARNs.
+    #   The maximum number of returned landing zone ARNs, which is one.
     #
     # @option params [String] :next_token
     #   The token to continue the list from a previous API call with the same
@@ -960,17 +972,75 @@ module Aws::ControlTower
       req.send_request(options)
     end
 
+    # Updates the configuration of an already enabled control.
+    #
+    # If the enabled control shows an `EnablementStatus` of SUCCEEDED,
+    # supply parameters that are different from the currently configured
+    # parameters. Otherwise, Amazon Web Services Control Tower will not
+    # accept the request.
+    #
+    # If the enabled control shows an `EnablementStatus` of FAILED, Amazon
+    # Web Services Control Tower will update the control to match any valid
+    # parameters that you supply.
+    #
+    # If the `DriftSummary` status for the control shows as DRIFTED, you
+    # cannot call this API. Instead, you can update the control by calling
+    # `DisableControl` and again calling `EnableControl`, or you can run an
+    # extending governance operation. For usage examples, see [ *the Amazon
+    # Web Services Control Tower User Guide* ][1]
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/controltower/latest/userguide/control-api-examples-short.html
+    #
+    # @option params [required, String] :enabled_control_identifier
+    #   The ARN of the enabled control that will be updated.
+    #
+    # @option params [required, Array<Types::EnabledControlParameter>] :parameters
+    #   A key/value pair, where `Key` is of type `String` and `Value` is of
+    #   type `Document`.
+    #
+    # @return [Types::UpdateEnabledControlOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::UpdateEnabledControlOutput#operation_identifier #operation_identifier} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_enabled_control({
+    #     enabled_control_identifier: "Arn", # required
+    #     parameters: [ # required
+    #       {
+    #         key: "String", # required
+    #         value: { # required
+    #         },
+    #       },
+    #     ],
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.operation_identifier #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/UpdateEnabledControl AWS API Documentation
+    #
+    # @overload update_enabled_control(params = {})
+    # @param [Hash] params ({})
+    def update_enabled_control(params = {}, options = {})
+      req = build_request(:update_enabled_control, params)
+      req.send_request(options)
+    end
+
     # This API call updates the landing zone. It starts an asynchronous
     # operation that updates the landing zone based on the new landing zone
-    # version or the updated parameters specified in the updated manifest
-    # file.
+    # version, or on the changed parameters specified in the updated
+    # manifest file.
     #
     # @option params [required, String] :landing_zone_identifier
     #   The unique identifier of the landing zone.
     #
     # @option params [required, Hash,Array,String,Numeric,Boolean] :manifest
-    #   The manifest.yaml file is a text file that describes your Amazon Web
-    #   Services resources. For examples, review [The manifest file][1]
+    #   The `manifest.yaml` file is a text file that describes your Amazon Web
+    #   Services resources. For examples, review [The manifest file][1].
     #
     #   Document type used to carry open content
     #   (Hash,Array,String,Numeric,Boolean). A document type value is
@@ -982,7 +1052,7 @@ module Aws::ControlTower
     #   [1]: https://docs.aws.amazon.com/controltower/latest/userguide/the-manifest-file
     #
     # @option params [required, String] :version
-    #   The landing zone version.
+    #   The landing zone version, for example, 3.2.
     #
     # @return [Types::UpdateLandingZoneOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1023,7 +1093,7 @@ module Aws::ControlTower
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-controltower'
-      context[:gem_version] = '1.13.0'
+      context[:gem_version] = '1.14.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-controltower/client_api.rb

@@ -26,11 +26,16 @@ module Aws::ControlTower
     DeleteLandingZoneOutput = Shapes::StructureShape.new(name: 'DeleteLandingZoneOutput')
     DisableControlInput = Shapes::StructureShape.new(name: 'DisableControlInput')
     DisableControlOutput = Shapes::StructureShape.new(name: 'DisableControlOutput')
+    Document = Shapes::DocumentShape.new(name: 'Document', document: true)
     DriftStatus = Shapes::StringShape.new(name: 'DriftStatus')
     DriftStatusSummary = Shapes::StructureShape.new(name: 'DriftStatusSummary')
     EnableControlInput = Shapes::StructureShape.new(name: 'EnableControlInput')
     EnableControlOutput = Shapes::StructureShape.new(name: 'EnableControlOutput')
     EnabledControlDetails = Shapes::StructureShape.new(name: 'EnabledControlDetails')
+    EnabledControlParameter = Shapes::StructureShape.new(name: 'EnabledControlParameter')
+    EnabledControlParameterSummaries = Shapes::ListShape.new(name: 'EnabledControlParameterSummaries')
+    EnabledControlParameterSummary = Shapes::StructureShape.new(name: 'EnabledControlParameterSummary')
+    EnabledControlParameters = Shapes::ListShape.new(name: 'EnabledControlParameters')
     EnabledControlSummary = Shapes::StructureShape.new(name: 'EnabledControlSummary')
     EnabledControls = Shapes::ListShape.new(name: 'EnabledControls')
     EnablementStatus = Shapes::StringShape.new(name: 'EnablementStatus')
@@ -85,6 +90,8 @@ module Aws::ControlTower
     Timestamp = Shapes::TimestampShape.new(name: 'Timestamp', timestampFormat: "iso8601")
     UntagResourceInput = Shapes::StructureShape.new(name: 'UntagResourceInput')
     UntagResourceOutput = Shapes::StructureShape.new(name: 'UntagResourceOutput')
+    UpdateEnabledControlInput = Shapes::StructureShape.new(name: 'UpdateEnabledControlInput')
+    UpdateEnabledControlOutput = Shapes::StructureShape.new(name: 'UpdateEnabledControlOutput')
     UpdateLandingZoneInput = Shapes::StructureShape.new(name: 'UpdateLandingZoneInput')
     UpdateLandingZoneOutput = Shapes::StructureShape.new(name: 'UpdateLandingZoneOutput')
     ValidationException = Shapes::StructureShape.new(name: 'ValidationException')
@@ -128,6 +135,7 @@ module Aws::ControlTower
     DriftStatusSummary.struct_class = Types::DriftStatusSummary
 
     EnableControlInput.add_member(:control_identifier, Shapes::ShapeRef.new(shape: ControlIdentifier, required: true, location_name: "controlIdentifier"))
+    EnableControlInput.add_member(:parameters, Shapes::ShapeRef.new(shape: EnabledControlParameters, location_name: "parameters"))
     EnableControlInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
     EnableControlInput.add_member(:target_identifier, Shapes::ShapeRef.new(shape: TargetIdentifier, required: true, location_name: "targetIdentifier"))
     EnableControlInput.struct_class = Types::EnableControlInput
@@ -139,11 +147,24 @@ module Aws::ControlTower
     EnabledControlDetails.add_member(:arn, Shapes::ShapeRef.new(shape: Arn, location_name: "arn"))
     EnabledControlDetails.add_member(:control_identifier, Shapes::ShapeRef.new(shape: ControlIdentifier, location_name: "controlIdentifier"))
     EnabledControlDetails.add_member(:drift_status_summary, Shapes::ShapeRef.new(shape: DriftStatusSummary, location_name: "driftStatusSummary"))
+    EnabledControlDetails.add_member(:parameters, Shapes::ShapeRef.new(shape: EnabledControlParameterSummaries, location_name: "parameters"))
     EnabledControlDetails.add_member(:status_summary, Shapes::ShapeRef.new(shape: EnablementStatusSummary, location_name: "statusSummary"))
     EnabledControlDetails.add_member(:target_identifier, Shapes::ShapeRef.new(shape: TargetIdentifier, location_name: "targetIdentifier"))
     EnabledControlDetails.add_member(:target_regions, Shapes::ShapeRef.new(shape: TargetRegions, location_name: "targetRegions"))
     EnabledControlDetails.struct_class = Types::EnabledControlDetails
 
+    EnabledControlParameter.add_member(:key, Shapes::ShapeRef.new(shape: String, required: true, location_name: "key"))
+    EnabledControlParameter.add_member(:value, Shapes::ShapeRef.new(shape: Document, required: true, location_name: "value"))
+    EnabledControlParameter.struct_class = Types::EnabledControlParameter
+
+    EnabledControlParameterSummaries.member = Shapes::ShapeRef.new(shape: EnabledControlParameterSummary)
+
+    EnabledControlParameterSummary.add_member(:key, Shapes::ShapeRef.new(shape: String, required: true, location_name: "key"))
+    EnabledControlParameterSummary.add_member(:value, Shapes::ShapeRef.new(shape: Document, required: true, location_name: "value"))
+    EnabledControlParameterSummary.struct_class = Types::EnabledControlParameterSummary
+
+    EnabledControlParameters.member = Shapes::ShapeRef.new(shape: EnabledControlParameter)
+
     EnabledControlSummary.add_member(:arn, Shapes::ShapeRef.new(shape: Arn, location_name: "arn"))
     EnabledControlSummary.add_member(:control_identifier, Shapes::ShapeRef.new(shape: ControlIdentifier, location_name: "controlIdentifier"))
     EnabledControlSummary.add_member(:drift_status_summary, Shapes::ShapeRef.new(shape: DriftStatusSummary, location_name: "driftStatusSummary"))
@@ -270,6 +291,13 @@ module Aws::ControlTower
 
     UntagResourceOutput.struct_class = Types::UntagResourceOutput
 
+    UpdateEnabledControlInput.add_member(:enabled_control_identifier, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "enabledControlIdentifier"))
+    UpdateEnabledControlInput.add_member(:parameters, Shapes::ShapeRef.new(shape: EnabledControlParameters, required: true, location_name: "parameters"))
+    UpdateEnabledControlInput.struct_class = Types::UpdateEnabledControlInput
+
+    UpdateEnabledControlOutput.add_member(:operation_identifier, Shapes::ShapeRef.new(shape: OperationIdentifier, required: true, location_name: "operationIdentifier"))
+    UpdateEnabledControlOutput.struct_class = Types::UpdateEnabledControlOutput
+
     UpdateLandingZoneInput.add_member(:landing_zone_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "landingZoneIdentifier"))
     UpdateLandingZoneInput.add_member(:manifest, Shapes::ShapeRef.new(shape: Manifest, required: true, location_name: "manifest"))
     UpdateLandingZoneInput.add_member(:version, Shapes::ShapeRef.new(shape: LandingZoneVersion, required: true, location_name: "version"))
@@ -492,6 +520,21 @@ module Aws::ControlTower
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
+      api.add_operation(:update_enabled_control, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "UpdateEnabledControl"
+        o.http_method = "POST"
+        o.http_request_uri = "/update-enabled-control"
+        o.input = Shapes::ShapeRef.new(shape: UpdateEnabledControlInput)
+        o.output = Shapes::ShapeRef.new(shape: UpdateEnabledControlOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+      end)
+
       api.add_operation(:update_landing_zone, Seahorse::Model::Operation.new.tap do |o|
         o.name = "UpdateLandingZone"
         o.http_method = "POST"

data/lib/aws-sdk-controltower/endpoints.rb

@@ -208,6 +208,20 @@ module Aws::ControlTower
       end
     end
 
+    class UpdateEnabledControl
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::ControlTower::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
     class UpdateLandingZone
       def self.build(context)
         unless context.config.regional_endpoint

data/lib/aws-sdk-controltower/plugins/endpoints.rb

@@ -84,6 +84,8 @@ module Aws::ControlTower
             Aws::ControlTower::Endpoints::TagResource.build(context)
           when :untag_resource
             Aws::ControlTower::Endpoints::UntagResource.build(context)
+          when :update_enabled_control
+            Aws::ControlTower::Endpoints::UpdateEnabledControl.build(context)
           when :update_landing_zone
             Aws::ControlTower::Endpoints::UpdateLandingZone.build(context)
           end

data/lib/aws-sdk-controltower/types.rb

@@ -23,7 +23,7 @@ module Aws::ControlTower
       include Aws::Structure
     end
 
-    # Updating or deleting a resource can cause an inconsistent state.
+    # Updating or deleting the resource can cause an inconsistent state.
     #
     # @!attribute [rw] message
     #   @return [String]
@@ -85,7 +85,7 @@ module Aws::ControlTower
     #   @return [Hash<String,String>]
     #
     # @!attribute [rw] version
-    #   The landing zone version.
+    #   The landing zone version, for example, 3.0.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/CreateLandingZoneInput AWS API Documentation
@@ -99,7 +99,7 @@ module Aws::ControlTower
     end
 
     # @!attribute [rw] arn
-    #   The ARN of the landing zone.
+    #   The ARN of the landing zone resource.
     #   @return [String]
     #
     # @!attribute [rw] operation_identifier
@@ -130,9 +130,9 @@ module Aws::ControlTower
     end
 
     # @!attribute [rw] operation_identifier
-    #   A unique identifier assigned to a `DeleteLandingZone` operation. You
-    #   can use this identifier as an input of `GetLandingZoneOperation` to
-    #   check the operation's status.
+    #   &gt;A unique identifier assigned to a `DeleteLandingZone` operation.
+    #   You can use this identifier as an input parameter of
+    #   `GetLandingZoneOperation` to check the operation's status.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/DeleteLandingZoneOutput AWS API Documentation
@@ -146,8 +146,8 @@ module Aws::ControlTower
     # @!attribute [rw] control_identifier
     #   The ARN of the control. Only **Strongly recommended** and
     #   **Elective** controls are permitted, with the exception of the
-    #   **Region deny** control. For information on how to find the
-    #   `controlIdentifier`, see [the overview page][1].
+    #   **landing zone Region deny** control. For information on how to find
+    #   the `controlIdentifier`, see [the overview page][1].
     #
     #
     #
@@ -225,14 +225,18 @@ module Aws::ControlTower
     # @!attribute [rw] control_identifier
     #   The ARN of the control. Only **Strongly recommended** and
     #   **Elective** controls are permitted, with the exception of the
-    #   **Region deny** control. For information on how to find the
-    #   `controlIdentifier`, see [the overview page][1].
+    #   **landing zone Region deny** control. For information on how to find
+    #   the `controlIdentifier`, see [the overview page][1].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
     #   @return [String]
     #
+    # @!attribute [rw] parameters
+    #   An array of `EnabledControlParameter` objects
+    #   @return [Array<Types::EnabledControlParameter>]
+    #
     # @!attribute [rw] tags
     #   Tags to be applied to the `EnabledControl` resource.
     #   @return [Hash<String,String>]
@@ -250,6 +254,7 @@ module Aws::ControlTower
     #
     class EnableControlInput < Struct.new(
       :control_identifier,
+      :parameters,
       :tags,
       :target_identifier)
       SENSITIVE = []
@@ -293,6 +298,10 @@ module Aws::ControlTower
     #   The drift status of the enabled control.
     #   @return [Types::DriftStatusSummary]
     #
+    # @!attribute [rw] parameters
+    #   Array of `EnabledControlParameter` objects.
+    #   @return [Array<Types::EnabledControlParameterSummary>]
+    #
     # @!attribute [rw] status_summary
     #   The deployment summary of the enabled control.
     #   @return [Types::EnablementStatusSummary]
@@ -316,6 +325,7 @@ module Aws::ControlTower
       :arn,
       :control_identifier,
       :drift_status_summary,
+      :parameters,
       :status_summary,
       :target_identifier,
       :target_regions)
@@ -323,6 +333,48 @@ module Aws::ControlTower
       include Aws::Structure
     end
 
+    # A set of parameters that configure the behavior of the enabled
+    # control. A key/value pair, where `Key` is of type `String` and `Value`
+    # is of type `Document`.
+    #
+    # @!attribute [rw] key
+    #   The key of a key/value pair. It is of type `string`.
+    #   @return [String]
+    #
+    # @!attribute [rw] value
+    #   The value of a key/value pair. It can be of type `array` `string`,
+    #   `number`, `object`, or `boolean`.
+    #   @return [Hash,Array,String,Numeric,Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnabledControlParameter AWS API Documentation
+    #
+    class EnabledControlParameter < Struct.new(
+      :key,
+      :value)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Returns a summary of information about the parameters of an enabled
+    # control.
+    #
+    # @!attribute [rw] key
+    #   The key of a key/value pair.
+    #   @return [String]
+    #
+    # @!attribute [rw] value
+    #   The value of a key/value pair.
+    #   @return [Hash,Array,String,Numeric,Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/EnabledControlParameterSummary AWS API Documentation
+    #
+    class EnabledControlParameterSummary < Struct.new(
+      :key,
+      :value)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Returns a summary of information about an enabled control.
     #
     # @!attribute [rw] arn
@@ -459,7 +511,7 @@ module Aws::ControlTower
     end
 
     # @!attribute [rw] operation_details
-    #   The landing zone operation details.
+    #   Details about a landing zone operation.
     #   @return [Types::LandingZoneOperationDetail]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/GetLandingZoneOperationOutput AWS API Documentation
@@ -482,7 +534,7 @@ module Aws::ControlTower
       include Aws::Structure
     end
 
-    # Unexpected error during processing of request.
+    # An unexpected error occurred during processing of a request.
     #
     # @!attribute [rw] message
     #   @return [String]
@@ -510,20 +562,12 @@ module Aws::ControlTower
     #   @return [String]
     #
     # @!attribute [rw] manifest
-    #   The landing zone manifest.yaml text file that specifies the landing
-    #   zone configurations.
+    #   The landing zone `manifest.yaml` text file that specifies the
+    #   landing zone configurations.
     #   @return [Hash,Array,String,Numeric,Boolean]
     #
     # @!attribute [rw] status
     #   The landing zone deployment status.
-    #
-    #   Valid values:
-    #
-    #   * `ACTIVE`: The landing zone is actively deployed.
-    #
-    #   * `PROCESSING`: The landing zone is processing deployment.
-    #
-    #   * `FAILED`: The landing zone failed deployment.
     #   @return [String]
     #
     # @!attribute [rw] version
@@ -595,8 +639,6 @@ module Aws::ControlTower
     #   @return [Time]
     #
     # @!attribute [rw] status
-    #   The landing zone operation status.
-    #
     #   Valid values:
     #
     #   * `SUCCEEDED`: The landing zone operation succeeded.
@@ -672,7 +714,7 @@ module Aws::ControlTower
     #
     # @!attribute [rw] next_token
     #   Retrieves the next page of results. If the string is empty, the
-    #   current response is the end of the results.
+    #   response is the end of the results.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/ListEnabledControlsOutput AWS API Documentation
@@ -685,7 +727,7 @@ module Aws::ControlTower
     end
 
     # @!attribute [rw] max_results
-    #   The maximum number of returned landing zone ARNs.
+    #   The maximum number of returned landing zone ARNs, which is one.
     #   @return [Integer]
     #
     # @!attribute [rw] next_token
@@ -708,7 +750,7 @@ module Aws::ControlTower
     #
     # @!attribute [rw] next_token
     #   Retrieves the next page of results. If the string is empty, the
-    #   current response is the end of the results.
+    #   response is the end of the results.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/ListLandingZonesOutput AWS API Documentation
@@ -782,8 +824,8 @@ module Aws::ControlTower
 
     # @!attribute [rw] operation_identifier
     #   A unique identifier assigned to a `ResetLandingZone` operation. You
-    #   can use this identifier as an input of `GetLandingZoneOperation` to
-    #   check the operation's status.
+    #   can use this identifier as an input parameter of
+    #   `GetLandingZoneOperation` to check the operation's status.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/ResetLandingZoneOutput AWS API Documentation
@@ -794,7 +836,7 @@ module Aws::ControlTower
       include Aws::Structure
     end
 
-    # Request references a resource which does not exist.
+    # The request references a resource that does not exist.
     #
     # @!attribute [rw] message
     #   @return [String]
@@ -807,8 +849,8 @@ module Aws::ControlTower
       include Aws::Structure
     end
 
-    # Request would cause a service quota to be exceeded. The limit is 10
-    # concurrent operations.
+    # The request would cause a service quota to be exceeded. The limit is
+    # 10 concurrent operations.
     #
     # @!attribute [rw] message
     #   @return [String]
@@ -842,7 +884,7 @@ module Aws::ControlTower
     #
     class TagResourceOutput < Aws::EmptyStructure; end
 
-    # Request was denied due to request throttling.
+    # The request was denied due to request throttling.
     #
     # @!attribute [rw] message
     #   @return [String]
@@ -852,7 +894,7 @@ module Aws::ControlTower
     #   @return [String]
     #
     # @!attribute [rw] retry_after_seconds
-    #   The number of seconds the caller should wait before retrying.
+    #   The number of seconds to wait before retrying.
     #   @return [Integer]
     #
     # @!attribute [rw] service_code
@@ -891,13 +933,43 @@ module Aws::ControlTower
     #
     class UntagResourceOutput < Aws::EmptyStructure; end
 
+    # @!attribute [rw] enabled_control_identifier
+    #   The ARN of the enabled control that will be updated.
+    #   @return [String]
+    #
+    # @!attribute [rw] parameters
+    #   A key/value pair, where `Key` is of type `String` and `Value` is of
+    #   type `Document`.
+    #   @return [Array<Types::EnabledControlParameter>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/UpdateEnabledControlInput AWS API Documentation
+    #
+    class UpdateEnabledControlInput < Struct.new(
+      :enabled_control_identifier,
+      :parameters)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] operation_identifier
+    #   The operation identifier for this `UpdateEnabledControl` operation.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/UpdateEnabledControlOutput AWS API Documentation
+    #
+    class UpdateEnabledControlOutput < Struct.new(
+      :operation_identifier)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] landing_zone_identifier
     #   The unique identifier of the landing zone.
     #   @return [String]
     #
     # @!attribute [rw] manifest
-    #   The manifest.yaml file is a text file that describes your Amazon Web
-    #   Services resources. For examples, review [The manifest file][1]
+    #   The `manifest.yaml` file is a text file that describes your Amazon
+    #   Web Services resources. For examples, review [The manifest file][1].
     #
     #
     #
@@ -905,7 +977,7 @@ module Aws::ControlTower
     #   @return [Hash,Array,String,Numeric,Boolean]
     #
     # @!attribute [rw] version
-    #   The landing zone version.
+    #   The landing zone version, for example, 3.2.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/controltower-2018-05-10/UpdateLandingZoneInput AWS API Documentation
@@ -932,7 +1004,7 @@ module Aws::ControlTower
       include Aws::Structure
     end
 
-    # The input fails to satisfy the constraints specified by an Amazon Web
+    # The input does not satisfy the constraints specified by an Amazon Web
     # Services service.
     #
     # @!attribute [rw] message

data/lib/aws-sdk-controltower.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-controltower/customizations'
 # @!group service
 module Aws::ControlTower
 
-  GEM_VERSION = '1.13.0'
+  GEM_VERSION = '1.14.0'
 
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-controltower
 version: !ruby/object:Gem::Version
-  version: 1.13.0
+  version: 1.14.0
 platform: ruby
 authors:
 - Amazon Web Services