aws-sdk-resourcegroupstaggingapi 1.13.0 → 1.14.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 6b2755c3b69dcda3a9be9ef15e7b54738378f824
-  data.tar.gz: d5ca5a0dcd5855ed009625dbb42e8496768dda89
+  metadata.gz: 02f79fcf224e6af22954524f0030dfd7bdd3d191
+  data.tar.gz: 8d8acebc5c70e06018bbf0dc7f6af68f03a38071
 SHA512:
-  metadata.gz: 2dfd7cc541fd401294f538216ca34a3e1318bc8154a60bd3af3c527c94ab01566dce2afb61270c0c071312a0209dac9744f7630dd9d968c658fc0ebb5996f94f
-  data.tar.gz: 33ea62f50d344fdc15f8354668638d34d9c90845fa91b2d4dd69d0abb54627ac1e56fd18dcd4f54ea111d54475e9199c0be00b30807ce7332e90dbc19ac63c4c
+  metadata.gz: b094878e241eecfd8d9c00e57b45df4b8d3fbe0cf8dc6c7c44d35422c9afa6288643da009a86d68578b0cee0250eea0a2c139caac1bae34c4b5fc90de0ef7817
+  data.tar.gz: 2eef30b33801a836cdcbf32544562c4186a2fc3c7bffdf8005de672e004177605b7adc21d5b83b4c3e2c70cbdf65f24f5d64b2406860c8d6670852e6edc3038d

data/lib/aws-sdk-resourcegroupstaggingapi.rb

@@ -42,6 +42,6 @@ require_relative 'aws-sdk-resourcegroupstaggingapi/customizations'
 # @service
 module Aws::ResourceGroupsTaggingAPI
 
-  GEM_VERSION = '1.13.0'
+  GEM_VERSION = '1.14.0'
 
 end

data/lib/aws-sdk-resourcegroupstaggingapi/client.rb

@@ -264,13 +264,310 @@ module Aws::ResourceGroupsTaggingAPI
 
     # @!group API Operations
 
-    # Returns all the tagged resources that are associated with the
-    # specified tags (keys and values) located in the specified region for
-    # the AWS account. The tags and the resource types that you specify in
-    # the request are known as *filters*. The response includes all tags
-    # that are associated with the requested resources. If no filter is
-    # provided, this action returns a paginated resource list with the
-    # associated tags.
+    # Deletes the policy that is attached to the specified organization root
+    # or account.
+    #
+    # You can call this operation from the organization's master account
+    # only and from the us-east-1 Region only.
+    #
+    # @option params [required, String] :target_id
+    #   The account ID or the root identifier of the organization. If you
+    #   don't know the root ID, you can call the AWS Organizations
+    #   [ListRoots][1] API to find it.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_tag_policy({
+    #     target_id: "TargetId", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/DeleteTagPolicy AWS API Documentation
+    #
+    # @overload delete_tag_policy(params = {})
+    # @param [Hash] params ({})
+    def delete_tag_policy(params = {}, options = {})
+      req = build_request(:delete_tag_policy, params)
+      req.send_request(options)
+    end
+
+    # Describes the status of the `StartReportCreation` operation.
+    #
+    # You can call this operation from the organization's master account
+    # only and from the us-east-1 Region only.
+    #
+    # @return [Types::DescribeReportCreationOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeReportCreationOutput#status #status} => String
+    #   * {Types::DescribeReportCreationOutput#s3_location #s3_location} => String
+    #   * {Types::DescribeReportCreationOutput#error_message #error_message} => String
+    #
+    # @example Response structure
+    #
+    #   resp.status #=> String
+    #   resp.s3_location #=> String
+    #   resp.error_message #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/DescribeReportCreation AWS API Documentation
+    #
+    # @overload describe_report_creation(params = {})
+    # @param [Hash] params ({})
+    def describe_report_creation(params = {}, options = {})
+      req = build_request(:describe_report_creation, params)
+      req.send_request(options)
+    end
+
+    # Disables tag policies for your organization and deletes all tag
+    # policies.
+    #
+    # You can call this operation from the organization's master account
+    # only and from the us-east-1 Region only.
+    #
+    # Use caution when disabling tag policies, as this is a destructive
+    # operation that applies to your entire organization. You cannot undo
+    # this operation.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/DisableTagPolicies AWS API Documentation
+    #
+    # @overload disable_tag_policies(params = {})
+    # @param [Hash] params ({})
+    def disable_tag_policies(params = {}, options = {})
+      req = build_request(:disable_tag_policies, params)
+      req.send_request(options)
+    end
+
+    # Enables tag policies for your organization. To use tag policies, you
+    # must be using AWS Organizations with all features enabled.
+    #
+    # You can call this operation from the organization's master account
+    # only and from the us-east-1 Region only.
+    #
+    # This operation does the following:
+    #
+    # * Enables tag policies for the specified organization.
+    #
+    # * Calls the [EnableAWSServiceAccess][1] API on your behalf to allow
+    #   service access with the `tagpolicies.tag.amazonaws.com` service
+    #   principal.
+    #
+    # * Creates a [service-linked role][2] named
+    #   `AWSServiceRoleForTagPolicies`.
+    #
+    # For more information on tag policies, see [Tag Policies][3] in the
+    # *AWS Resource Groups User Guide.*
+    #
+    #
+    #
+    # [1]: http://docs.aws.amazon.com/organizations/latest/APIReference/API_EnableAWSServiceAccess.html
+    # [2]: http://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html
+    # [3]: http://docs.aws.amazon.com/ARG/latest/userguide/tag-policies.html
+    #
+    # @option params [required, String] :root_id
+    #   The root identifier of the organization. If you don't know the root
+    #   ID, you can call the AWS Organizations [ListRoots][1] API to find it.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.enable_tag_policies({
+    #     root_id: "RootId", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/EnableTagPolicies AWS API Documentation
+    #
+    # @overload enable_tag_policies(params = {})
+    # @param [Hash] params ({})
+    def enable_tag_policies(params = {}, options = {})
+      req = build_request(:enable_tag_policies, params)
+      req.send_request(options)
+    end
+
+    # Returns a table that shows counts of resources that are noncompliant
+    # with their tag policies.
+    #
+    # For more information on tag policies, see [Tag Policies][1] in the
+    # *AWS Resource Groups User Guide.*
+    #
+    # You can call this operation from the organization's master account
+    # only and from the us-east-1 Region only.
+    #
+    #
+    #
+    # [1]: http://docs.aws.amazon.com/ARG/latest/userguide/tag-policies.html
+    #
+    # @option params [Array<String>] :target_id_filters
+    #   The target identifiers (usually, specific account IDs) to limit the
+    #   output by. If you use this parameter, the count of returned
+    #   noncompliant resources includes only resources in the specified target
+    #   IDs.
+    #
+    # @option params [Array<String>] :region_filters
+    #   A list of Regions to limit the output by. If you use this parameter,
+    #   the count of returned noncompliant resources includes only resources
+    #   in the specified Regions.
+    #
+    # @option params [Array<String>] :resource_type_filters
+    #   The constraints on the resources that you want returned. The format of
+    #   each resource type is `service[:resourceType]`. For example,
+    #   specifying a resource type of `ec2` returns all Amazon EC2 resources
+    #   (which includes EC2 instances). Specifying a resource type of
+    #   `ec2:instance` returns only EC2 instances.
+    #
+    #   The string for each service name and resource type is the same as that
+    #   embedded in a resource's Amazon Resource Name (ARN). Consult the *AWS
+    #   General Reference* for the following:
+    #
+    #   * For a list of service name strings, see [AWS Service Namespaces][1].
+    #
+    #   * For resource type strings, see [Example ARNs][2].
+    #
+    #   * For more information about ARNs, see [Amazon Resource Names (ARNs)
+    #     and AWS Service Namespaces][3].
+    #
+    #   You can specify multiple resource types by using an array. The array
+    #   can include up to 100 items. Note that the length constraint
+    #   requirement applies to each resource type filter.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html#genref-aws-service-namespaces
+    #   [2]: http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html#arns-syntax
+    #   [3]: http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
+    #
+    # @option params [Array<String>] :tag_key_filters
+    #   A list of tag keys to limit the output by. If you use this parameter,
+    #   the count of returned noncompliant resources includes only resources
+    #   that have the specified tag keys.
+    #
+    # @option params [Array<String>] :group_by
+    #   A list of attributes to group the counts of noncompliant resources by.
+    #   If supplied, the counts are sorted by those attributes.
+    #
+    # @option params [Integer] :max_results
+    #   A limit that restricts the number of results that are returned per
+    #   page.
+    #
+    # @option params [String] :pagination_token
+    #   A string that indicates that additional data is available. Leave this
+    #   value empty for your initial request. If the response includes a
+    #   `PaginationToken`, use that string for this value to request an
+    #   additional page of data.
+    #
+    # @return [Types::GetComplianceSummaryOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetComplianceSummaryOutput#summary_list #summary_list} => Array&lt;Types::Summary&gt;
+    #   * {Types::GetComplianceSummaryOutput#pagination_token #pagination_token} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_compliance_summary({
+    #     target_id_filters: ["TargetId"],
+    #     region_filters: ["Region"],
+    #     resource_type_filters: ["AmazonResourceType"],
+    #     tag_key_filters: ["TagKey"],
+    #     group_by: ["TARGET_ID"], # accepts TARGET_ID, REGION, RESOURCE_TYPE
+    #     max_results: 1,
+    #     pagination_token: "PaginationToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.summary_list #=> Array
+    #   resp.summary_list[0].last_updated #=> Time
+    #   resp.summary_list[0].target_id #=> String
+    #   resp.summary_list[0].region #=> String
+    #   resp.summary_list[0].resource_type #=> String
+    #   resp.summary_list[0].non_compliant_resources #=> Integer
+    #   resp.pagination_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/GetComplianceSummary AWS API Documentation
+    #
+    # @overload get_compliance_summary(params = {})
+    # @param [Hash] params ({})
+    def get_compliance_summary(params = {}, options = {})
+      req = build_request(:get_compliance_summary, params)
+      req.send_request(options)
+    end
+
+    # Returns the contents of the effective tag policy for the AWS account.
+    # Depending on how you use tag policies, the effective tag policy for an
+    # account is one of the following:
+    #
+    # * The tag policy attached to the organization that the account belongs
+    #   to.
+    #
+    # * The tag policy attached to the account.
+    #
+    # * The combination of both policies if tag policies are attached to the
+    #   organization root and account.
+    #
+    # @option params [String] :target_id
+    #   The unique identifier of the organization root or account whose tag
+    #   policy you want returned.
+    #
+    # @return [Types::GetEffectiveTagPolicyOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetEffectiveTagPolicyOutput#policy #policy} => String
+    #   * {Types::GetEffectiveTagPolicyOutput#last_updated #last_updated} => Time
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_effective_tag_policy({
+    #     target_id: "TargetId",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy #=> String
+    #   resp.last_updated #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/GetEffectiveTagPolicy AWS API Documentation
+    #
+    # @overload get_effective_tag_policy(params = {})
+    # @param [Hash] params ({})
+    def get_effective_tag_policy(params = {}, options = {})
+      req = build_request(:get_effective_tag_policy, params)
+      req.send_request(options)
+    end
+
+    # Returns all the tagged or previously tagged resources that are located
+    # in the specified Region for the AWS account.
+    #
+    # Depending on what information you want returned, you can also specify
+    # the following:
+    #
+    # * *Filters* that specify what tags and resource types you want
+    #   returned. The response includes all tags that are associated with
+    #   the requested resources.
+    #
+    # * Information about compliance with tag policies. If supplied, the
+    #   compliance check follows the specified tag policy instead of
+    #   following the effective tag policy. For more information on tag
+    #   policies, see [Tag Policies][1] in the *AWS Resource Groups User
+    #   Guide.*
+    #
+    # <note markdown="1"> You can check the `PaginationToken` response parameter to determine if
+    # a query completed. Queries can occasionally return fewer results on a
+    # page than allowed. The `PaginationToken` response parameter value is
+    # `null` *only* when there are no more results to display.
+    #
+    #  </note>
+    #
+    #
+    #
+    # [1]: http://docs.aws.amazon.com/ARG/latest/userguide/tag-policies.html
     #
     # @option params [String] :pagination_token
     #   A string that indicates that additional data is available. Leave this
@@ -279,21 +576,51 @@ module Aws::ResourceGroupsTaggingAPI
     #   additional page of data.
     #
     # @option params [Array<Types::TagFilter>] :tag_filters
-    #   A list of tags (keys and values). A request can include up to 50 keys,
-    #   and each key can include up to 20 values.
+    #   A list of TagFilters (keys and values). Each TagFilter specified must
+    #   contain a key with values as optional. A request can include up to 50
+    #   keys, and each key can include up to 20 values.
     #
-    #   If you specify multiple filters connected by an AND operator in a
-    #   single request, the response returns only those resources that are
-    #   associated with every specified filter.
+    #   Note the following when deciding how to use TagFilters:
     #
-    #   If you specify multiple filters connected by an OR operator in a
-    #   single request, the response returns all resources that are associated
-    #   with at least one or possibly more of the specified filters.
+    #   * If you *do* specify a TagFilter, the response returns only those
+    #     resources that are currently associated with the specified tag.
+    #
+    #   * If you *don't* specify a TagFilter, the response includes all
+    #     resources that were ever associated with tags. Resources that
+    #     currently don't have associated tags are shown with an empty tag
+    #     set, like this: `"Tags": []`.
+    #
+    #   * If you specify more than one filter in a single request, the
+    #     response returns only those resources that satisfy all specified
+    #     filters.
+    #
+    #   * If you specify a filter that contains more than one value for a key,
+    #     the response returns resources that match any of the specified
+    #     values for that key.
+    #
+    #   * If you don't specify any values for a key, the response returns
+    #     resources that are tagged with that key irrespective of the value.
+    #
+    #     For example, for filters: `filter1 = \{key1, \{value1\}\}, filter2 =
+    #     \{key2, \{value2,value3,value4\}\} , filter3 = \{key3\}`\:
+    #
+    #     * `GetResources( \{filter1\} )` returns resources tagged with
+    #       key1=value1
+    #
+    #     * `GetResources( \{filter2\} )` returns resources tagged with
+    #       key2=value2 or key2=value3 or key2=value4
+    #
+    #     * `GetResources( \{filter3\} )` returns resources tagged with any
+    #       tag containing key3 as its tag key, irrespective of its value
+    #
+    #     * `GetResources( \{filter1,filter2,filter3\} )` returns resources
+    #       tagged with ( key1=value1) and ( key2=value2 or key2=value3 or
+    #       key2=value4) and (key3, irrespective of the value)
     #
     # @option params [Integer] :resources_per_page
     #   A limit that restricts the number of resources returned by
     #   GetResources in paginated output. You can set ResourcesPerPage to a
-    #   minimum of 1 item and the maximum of 50 items.
+    #   minimum of 1 item and the maximum of 100 items.
     #
     # @option params [Integer] :tags_per_page
     #   A limit that restricts the number of tags (key and value pairs)
@@ -312,17 +639,15 @@ module Aws::ResourceGroupsTaggingAPI
     #   tags, and the third page displaying the remaining 2 resources, each
     #   with its 10 tags.
     #
-    #
-    #
     #   You can set `TagsPerPage` to a minimum of 100 items and the maximum of
     #   500 items.
     #
     # @option params [Array<String>] :resource_type_filters
     #   The constraints on the resources that you want returned. The format of
     #   each resource type is `service[:resourceType]`. For example,
-    #   specifying a resource type of `ec2` returns all tagged Amazon EC2
-    #   resources (which includes tagged EC2 instances). Specifying a resource
-    #   type of `ec2:instance` returns only EC2 instances.
+    #   specifying a resource type of `ec2` returns all Amazon EC2 resources
+    #   (which includes EC2 instances). Specifying a resource type of
+    #   `ec2:instance` returns only EC2 instances.
     #
     #   The string for each service name and resource type is the same as that
     #   embedded in a resource's Amazon Resource Name (ARN). Consult the *AWS
@@ -335,12 +660,39 @@ module Aws::ResourceGroupsTaggingAPI
     #   * For more information about ARNs, see [Amazon Resource Names (ARNs)
     #     and AWS Service Namespaces][3].
     #
+    #   You can specify multiple resource types by using an array. The array
+    #   can include up to 100 items. Note that the length constraint
+    #   requirement applies to each resource type filter.
+    #
     #
     #
     #   [1]: http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html#genref-aws-service-namespaces
     #   [2]: http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html#arns-syntax
     #   [3]: http://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
     #
+    # @option params [Boolean] :include_compliance_details
+    #   Specifies whether to include details regarding the compliance with the
+    #   effective tag policy. Set this to `true` to determine whether
+    #   resources are compliant with the tag policy and to get details.
+    #
+    # @option params [Boolean] :exclude_compliant_resources
+    #   Specifies whether to exclude resources that are compliant with the tag
+    #   policy. Set this to `true` if you are interested in retrieving
+    #   information on noncompliant resources only.
+    #
+    #   You can use this parameter only if the `IncludeComplianceDetails`
+    #   parameter is also set to `true`.
+    #
+    # @option params [String] :policy
+    #   The tag policy to check resources against for compliance. If supplied,
+    #   the compliance check follows the specified tag policy instead of
+    #   following the effective tag policy. Using this parameter to specify a
+    #   tag policy is useful for testing new tag policies before attaching
+    #   them to a target.
+    #
+    #   You can only use this parameter if the `IncludeComplianceDetails`
+    #   parameter is also set to `true`.
+    #
     # @return [Types::GetResourcesOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetResourcesOutput#pagination_token #pagination_token} => String
@@ -359,6 +711,9 @@ module Aws::ResourceGroupsTaggingAPI
     #     resources_per_page: 1,
     #     tags_per_page: 1,
     #     resource_type_filters: ["AmazonResourceType"],
+    #     include_compliance_details: false,
+    #     exclude_compliant_resources: false,
+    #     policy: "Policy",
     #   })
     #
     # @example Response structure
@@ -369,6 +724,13 @@ module Aws::ResourceGroupsTaggingAPI
     #   resp.resource_tag_mapping_list[0].tags #=> Array
     #   resp.resource_tag_mapping_list[0].tags[0].key #=> String
     #   resp.resource_tag_mapping_list[0].tags[0].value #=> String
+    #   resp.resource_tag_mapping_list[0].compliance_details.missing_keys #=> Array
+    #   resp.resource_tag_mapping_list[0].compliance_details.missing_keys[0] #=> String
+    #   resp.resource_tag_mapping_list[0].compliance_details.invalid_keys #=> Array
+    #   resp.resource_tag_mapping_list[0].compliance_details.invalid_keys[0] #=> String
+    #   resp.resource_tag_mapping_list[0].compliance_details.invalid_values #=> Array
+    #   resp.resource_tag_mapping_list[0].compliance_details.invalid_values[0] #=> String
+    #   resp.resource_tag_mapping_list[0].compliance_details.compliance_status #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/GetResources AWS API Documentation
     #
@@ -379,14 +741,25 @@ module Aws::ResourceGroupsTaggingAPI
       req.send_request(options)
     end
 
-    # Returns all tag keys in the specified region for the AWS account.
+    # Returns all tag keys in the specified Region for the AWS account.
+    #
+    # <note markdown="1"> You can check the `PaginationToken` response parameter to determine if
+    # a query completed. Queries can occasionally return fewer results on a
+    # page than allowed. The `PaginationToken` response parameter value is
+    # `null` *only* when there are no more results to display.
+    #
+    #  </note>
     #
     # @option params [String] :pagination_token
     #   A string that indicates that additional data is available. Leave this
     #   value empty for your initial request. If the response includes a
-    #   PaginationToken, use that string for this value to request an
+    #   `PaginationToken`, use that string for this value to request an
     #   additional page of data.
     #
+    # @option params [Integer] :max_results
+    #   A limit that restricts the number of results that are returned per
+    #   page.
+    #
     # @return [Types::GetTagKeysOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetTagKeysOutput#pagination_token #pagination_token} => String
@@ -396,6 +769,7 @@ module Aws::ResourceGroupsTaggingAPI
     #
     #   resp = client.get_tag_keys({
     #     pagination_token: "PaginationToken",
+    #     max_results: 1,
     #   })
     #
     # @example Response structure
@@ -413,18 +787,68 @@ module Aws::ResourceGroupsTaggingAPI
       req.send_request(options)
     end
 
-    # Returns all tag values for the specified key in the specified region
+    # Returns the policy that is attached to the specified target.
+    #
+    # You can call this operation from the organization's master account
+    # only and from the us-east-1 Region only.
+    #
+    # @option params [required, String] :target_id
+    #   The account ID or the root identifier of the organization. If you
+    #   don't know the root ID, you can call the AWS Organizations
+    #   [ListRoots][1] API to find it.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html
+    #
+    # @return [Types::GetTagPolicyOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetTagPolicyOutput#policy #policy} => String
+    #   * {Types::GetTagPolicyOutput#last_updated #last_updated} => Time
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_tag_policy({
+    #     target_id: "TargetId", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy #=> String
+    #   resp.last_updated #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/GetTagPolicy AWS API Documentation
+    #
+    # @overload get_tag_policy(params = {})
+    # @param [Hash] params ({})
+    def get_tag_policy(params = {}, options = {})
+      req = build_request(:get_tag_policy, params)
+      req.send_request(options)
+    end
+
+    # Returns all tag values for the specified key in the specified Region
     # for the AWS account.
     #
+    # <note markdown="1"> You can check the `PaginationToken` response parameter to determine if
+    # a query completed. Queries can occasionally return fewer results on a
+    # page than allowed. The `PaginationToken` response parameter value is
+    # `null` *only* when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [String] :pagination_token
     #   A string that indicates that additional data is available. Leave this
     #   value empty for your initial request. If the response includes a
-    #   PaginationToken, use that string for this value to request an
+    #   `PaginationToken`, use that string for this value to request an
     #   additional page of data.
     #
     # @option params [required, String] :key
     #   The key for which you want to list all existing values in the
-    #   specified region for the AWS account.
+    #   specified Region for the AWS account.
+    #
+    # @option params [Integer] :max_results
+    #   A limit that restricts the number of results that are returned per
+    #   page.
     #
     # @return [Types::GetTagValuesOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -436,6 +860,7 @@ module Aws::ResourceGroupsTaggingAPI
     #   resp = client.get_tag_values({
     #     pagination_token: "PaginationToken",
     #     key: "TagKey", # required
+    #     max_results: 1,
     #   })
     #
     # @example Response structure
@@ -453,36 +878,120 @@ module Aws::ResourceGroupsTaggingAPI
       req.send_request(options)
     end
 
+    # Validates the tag policy and then attaches it to the account or
+    # organization root. This policy determines whether a resource is
+    # compliant.
+    #
+    # Validating the tag policy includes checking that the tag policy
+    # document includes the required components, uses JSON syntax, and has
+    # fewer than 5,000 characters (including spaces). For more information,
+    # see [Tag Policy Structure][1] in the *AWS Resource Groups User Guide.*
+    #
+    # <note markdown="1"> If you later call this operation to attach a tag policy to the same
+    # organization root or account, it overwrites the original call without
+    # prompting you to confirm.
+    #
+    #  </note>
+    #
+    # You can call this operation from the organization's master account
+    # only, and from the us-east-1 Region only.
+    #
+    #
+    #
+    # [1]: http://docs.aws.amazon.com/ARG/latest/userguide/tag-policies-structure.html
+    #
+    # @option params [required, String] :target_id
+    #   The account ID or the root identifier of the organization. If you
+    #   don't know the root ID, you can call the AWS Organizations
+    #   [ListRoots][1] API to find it.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/organizations/latest/APIReference/API_ListRoots.html
+    #
+    # @option params [required, String] :policy
+    #   The tag policy to attach to the target.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_tag_policy({
+    #     target_id: "TargetId", # required
+    #     policy: "Policy", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/PutTagPolicy AWS API Documentation
+    #
+    # @overload put_tag_policy(params = {})
+    # @param [Hash] params ({})
+    def put_tag_policy(params = {}, options = {})
+      req = build_request(:put_tag_policy, params)
+      req.send_request(options)
+    end
+
+    # Generates a report that lists all tagged resources in accounts across
+    # your organization, and whether each resource is compliant with the
+    # effective tag policy.
+    #
+    # You can call this operation from the organization's master account
+    # only and from the us-east-1 Region only.
+    #
+    # @option params [required, String] :s3_bucket
+    #   The name of the Amazon S3 bucket where the report will be stored.
+    #
+    #   For more information on S3 bucket requirements, including an example
+    #   bucket policy, see [Additional Requirements for Running
+    #   Organization-Wide Tag Compliance Report][1] in the *AWS Resource
+    #   Groups User Guide.*
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/ARG/latest/userguide/tag-policies-prereqs.html#bucket-policy-org-report
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.start_report_creation({
+    #     s3_bucket: "S3Bucket", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/resourcegroupstaggingapi-2017-01-26/StartReportCreation AWS API Documentation
+    #
+    # @overload start_report_creation(params = {})
+    # @param [Hash] params ({})
+    def start_report_creation(params = {}, options = {})
+      req = build_request(:start_report_creation, params)
+      req.send_request(options)
+    end
+
     # Applies one or more tags to the specified resources. Note the
     # following:
     #
     # * Not all resources can have tags. For a list of resources that
-    #   support tagging, see [Supported Resources][1] in the *AWS Resource
-    #   Groups and Tag Editor User Guide*.
+    #   support tagging, see [this list][1].
     #
-    # * Each resource can have up to 50 tags. For other limits, see [Tag
-    #   Restrictions][2] in the *Amazon EC2 User Guide for Linux Instances*.
+    # * Each resource can have up to 50 tags.
     #
-    # * You can only tag resources that are located in the specified region
+    # * You can only tag resources that are located in the specified Region
     #   for the AWS account.
     #
     # * To add tags to a resource, you need the necessary permissions for
     #   the service that the resource belongs to as well as permissions for
-    #   adding tags. For more information, see [Obtaining Permissions for
-    #   Tagging][3] in the *AWS Resource Groups and Tag Editor User Guide*.
+    #   adding tags. For more information, see [Set Up Permissions][2] in
+    #   the *AWS Resource Groups User Guide.*
     #
     #
     #
-    # [1]: http://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/supported-resources.html
-    # [2]: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#tag-restrictions
-    # [3]: http://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/obtaining-permissions-for-tagging.html
+    # [1]: https://docs.aws.amazon.com/resourcegroupstagging/latest/APIReference/Welcome.html
+    # [2]: http://docs.aws.amazon.com/ARG/latest/userguide/gettingstarted-prereqs.html#rg-permissions
     #
     # @option params [required, Array<String>] :resource_arn_list
     #   A list of ARNs. An ARN (Amazon Resource Name) uniquely identifies a
     #   resource. You can specify a minimum of 1 and a maximum of 20 ARNs
-    #   (resources) to tag. An ARN can be set to a maximum of 1600 characters.
-    #   For more information, see [Amazon Resource Names (ARNs) and AWS
-    #   Service Namespaces][1] in the *AWS General Reference*.
+    #   (resources) to tag. For more information, see [Amazon Resource Names
+    #   (ARNs) and AWS Service Namespaces][1] in the *AWS General Reference*.
     #
     #
     #
@@ -528,23 +1037,21 @@ module Aws::ResourceGroupsTaggingAPI
     #
     # * To remove tags from a resource, you need the necessary permissions
     #   for the service that the resource belongs to as well as permissions
-    #   for removing tags. For more information, see [Obtaining Permissions
-    #   for Tagging][1] in the *AWS Resource Groups and Tag Editor User
-    #   Guide*.
+    #   for removing tags. For more information, see [Set Up Permissions][1]
+    #   in the *AWS Resource Groups User Guide.*
     #
-    # * You can only tag resources that are located in the specified region
+    # * You can only tag resources that are located in the specified Region
     #   for the AWS account.
     #
     #
     #
-    # [1]: http://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/obtaining-permissions-for-tagging.html
+    # [1]: http://docs.aws.amazon.com/ARG/latest/userguide/gettingstarted-prereqs.html#rg-permissions
     #
     # @option params [required, Array<String>] :resource_arn_list
     #   A list of ARNs. An ARN (Amazon Resource Name) uniquely identifies a
     #   resource. You can specify a minimum of 1 and a maximum of 20 ARNs
-    #   (resources) to untag. An ARN can be set to a maximum of 1600
-    #   characters. For more information, see [Amazon Resource Names (ARNs)
-    #   and AWS Service Namespaces][1] in the *AWS General Reference*.
+    #   (resources) to untag. For more information, see [Amazon Resource Names
+    #   (ARNs) and AWS Service Namespaces][1] in the *AWS General Reference*.
     #
     #
     #
@@ -594,7 +1101,7 @@ module Aws::ResourceGroupsTaggingAPI
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-resourcegroupstaggingapi'
-      context[:gem_version] = '1.13.0'
+      context[:gem_version] = '1.14.0'
       Seahorse::Client::Request.new(handlers, context)
     end