@aws-sdk/client-auditmanager 3.42.0 → 3.47.0

package/dist-types/models/models_0.d.ts

@@ -8,12 +8,6 @@ export interface AccessDeniedException extends __SmithyException, $MetadataBeare
     $fault: "client";
     message: string | undefined;
 }
-export declare namespace AccessDeniedException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AccessDeniedException) => any;
-}
 export declare enum AccountStatus {
     ACTIVE = "ACTIVE",
     INACTIVE = "INACTIVE",
@@ -930,12 +924,6 @@ export interface InternalServerException extends __SmithyException, $MetadataBea
     $fault: "server";
     message: string | undefined;
 }
-export declare namespace InternalServerException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: InternalServerException) => any;
-}
 /**
  * <p> The resource that's specified in the request can't be found. </p>
  */
@@ -952,12 +940,6 @@ export interface ResourceNotFoundException extends __SmithyException, $MetadataB
      */
     resourceType: string | undefined;
 }
-export declare namespace ResourceNotFoundException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ResourceNotFoundException) => any;
-}
 /**
  * <p> Indicates that the request has invalid or missing parameters for the field. </p>
  */
@@ -999,12 +981,6 @@ export interface ValidationException extends __SmithyException, $MetadataBearer
      */
     fields?: ValidationExceptionField[];
 }
-export declare namespace ValidationException {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ValidationException) => any;
-}
 export interface BatchAssociateAssessmentReportEvidenceRequest {
     /**
      * <p> The identifier for the assessment. </p>
@@ -1848,7 +1824,7 @@ export declare namespace DeleteAssessmentResponse {
 }
 export interface DeleteAssessmentFrameworkRequest {
     /**
-     * <p> The identifier for the framework. </p>
+     * <p> The identifier for the custom framework. </p>
      */
     frameworkId: string | undefined;
 }
@@ -1896,7 +1872,7 @@ export declare namespace DeleteAssessmentFrameworkShareResponse {
 }
 export interface DeleteAssessmentReportRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**
@@ -1920,7 +1896,7 @@ export declare namespace DeleteAssessmentReportResponse {
 }
 export interface DeleteControlRequest {
     /**
-     * <p> The identifier for the control. </p>
+     * <p> The unique identifier for the control. </p>
      */
     controlId: string | undefined;
 }
@@ -1980,11 +1956,11 @@ export declare namespace DeregisterOrganizationAdminAccountResponse {
 }
 export interface DisassociateAssessmentReportEvidenceFolderRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**
-     * <p> The identifier for the folder in which evidence is stored. </p>
+     * <p> The unique identifier for the folder that the evidence is stored in. </p>
      */
     evidenceFolderId: string | undefined;
 }
@@ -2024,7 +2000,7 @@ export declare namespace GetAccountStatusResponse {
 }
 export interface GetAssessmentRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p>The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
 }
@@ -2080,11 +2056,11 @@ export declare namespace GetAssessmentFrameworkResponse {
 }
 export interface GetAssessmentReportUrlRequest {
     /**
-     * <p> The identifier for the assessment report. </p>
+     * <p> The unique identifier for the assessment report. </p>
      */
     assessmentReportId: string | undefined;
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
 }
@@ -2129,15 +2105,15 @@ export declare namespace GetAssessmentReportUrlResponse {
 }
 export interface GetChangeLogsRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p>The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**
-     * <p> The identifier for the control set. </p>
+     * <p> The unique identifier for the control set. </p>
      */
     controlSetId?: string;
     /**
-     * <p> The identifier for the control. </p>
+     * <p> The unique identifier for the control. </p>
      */
     controlId?: string;
     /**
@@ -2145,7 +2121,7 @@ export interface GetChangeLogsRequest {
      */
     nextToken?: string;
     /**
-     * <p> Represents the maximum number of results on a page or for an API request call. </p>
+     * <p>Represents the maximum number of results on a page or for an API request call. </p>
      */
     maxResults?: number;
 }
@@ -2197,11 +2173,11 @@ export declare namespace ChangeLog {
 }
 export interface GetChangeLogsResponse {
     /**
-     * <p> The list of user activity for the control. </p>
+     * <p>The list of user activity for the control. </p>
      */
     changeLogs?: ChangeLog[];
     /**
-     * <p> The pagination token that's used to fetch the next set of results. </p>
+     * <p>The pagination token that's used to fetch the next set of results. </p>
      */
     nextToken?: string;
 }
@@ -2308,19 +2284,19 @@ export declare namespace GetDelegationsResponse {
 }
 export interface GetEvidenceRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**
-     * <p> The identifier for the control set. </p>
+     * <p> The unique identifier for the control set. </p>
      */
     controlSetId: string | undefined;
     /**
-     * <p> The identifier for the folder that the evidence is stored in. </p>
+     * <p> The unique identifier for the folder that the evidence is stored in. </p>
      */
     evidenceFolderId: string | undefined;
     /**
-     * <p> The identifier for the evidence. </p>
+     * <p> The unique identifier for the evidence. </p>
      */
     evidenceId: string | undefined;
 }
@@ -2490,15 +2466,15 @@ export declare namespace GetEvidenceByEvidenceFolderResponse {
 }
 export interface GetEvidenceFolderRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**
-     * <p> The identifier for the control set. </p>
+     * <p> The unique identifier for the control set. </p>
      */
     controlSetId: string | undefined;
     /**
-     * <p> The identifier for the folder that the evidence is stored in. </p>
+     * <p> The unique identifier for the folder that the evidence is stored in. </p>
      */
     evidenceFolderId: string | undefined;
 }
@@ -2522,7 +2498,7 @@ export declare namespace GetEvidenceFolderResponse {
 }
 export interface GetEvidenceFoldersByAssessmentRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**
@@ -2602,6 +2578,205 @@ export declare namespace GetEvidenceFoldersByAssessmentControlResponse {
      */
     const filterSensitiveLog: (obj: GetEvidenceFoldersByAssessmentControlResponse) => any;
 }
+export interface GetInsightsRequest {
+}
+export declare namespace GetInsightsRequest {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: GetInsightsRequest) => any;
+}
+/**
+ * <p>A summary of the latest analytics data for all your active assessments. </p>
+ *          <p>This summary is a snapshot of the data that your active assessments collected on the
+ *          <code>lastUpdated</code> date. It’s important to understand that the following totals
+ *          are daily counts based on this date — they aren’t a total sum to date. </p>
+ *          <p>The <code>Insights</code> data is eventually consistent. This means that, when you read
+ *          data from <code>Insights</code>, the response might not instantly reflect the results of a
+ *          recently completed write or update operation. If you repeat your read request after a few
+ *          hours, the response should return the latest data.</p>
+ *          <note>
+ *             <p>If you delete an assessment or change its status to inactive,
+ *             <code>InsightsByAssessment</code> includes data for that assessment as
+ *             follows.</p>
+ *             <ul>
+ *                <li>
+ *                   <p>
+ *                      <b>Inactive assessments</b> - If Audit Manager collected
+ *                evidence for your assessment before you changed it inactive, that evidence is
+ *                included in the <code>InsightsByAssessment</code> counts for that day.</p>
+ *                </li>
+ *                <li>
+ *                   <p>
+ *                      <b>Deleted assessments</b> - If Audit Manager collected
+ *                evidence for your assessment before you deleted it, that evidence isn't included
+ *                in the <code>InsightsByAssessment</code> counts for that day.</p>
+ *                </li>
+ *             </ul>
+ *          </note>
+ */
+export interface Insights {
+    /**
+     * <p>The number of active assessments in Audit Manager. </p>
+     */
+    activeAssessmentsCount?: number;
+    /**
+     * <p>The number of compliance check evidence that Audit Manager classified as non-compliant
+     *          on the <code>lastUpdated</code> date. This includes evidence that was collected from
+     *          Security Hub with a <i>Fail</i> ruling, or collected from
+     *          Config with a <i>Non-compliant</i> ruling. </p>
+     */
+    noncompliantEvidenceCount?: number;
+    /**
+     * <p>The number of compliance check evidence that Audit Manager classified as compliant on
+     *          the <code>lastUpdated</code> date. This includes evidence that was collected from Security Hub with a <i>Pass</i> ruling, or collected from Config with a <i>Compliant</i> ruling. </p>
+     */
+    compliantEvidenceCount?: number;
+    /**
+     * <p>The number of evidence without a compliance check ruling. Evidence is inconclusive when the
+     *          associated control uses Security Hub or Config as a data source
+     *          but you didn't enable those services. This is also the case when a control uses a data
+     *          source that doesn’t support compliance checks (for example: manual evidence, API calls, or
+     *          CloudTrail). </p>
+     *          <note>
+     *             <p>If evidence has a compliance check status of <i>not applicable</i>, it's classed
+     *          as <i>inconclusive</i> in <code>Insights</code> data.</p>
+     *          </note>
+     */
+    inconclusiveEvidenceCount?: number;
+    /**
+     * <p>The number of assessment controls that collected non-compliant evidence on the
+     *          <code>lastUpdated</code> date. </p>
+     */
+    assessmentControlsCountByNoncompliantEvidence?: number;
+    /**
+     * <p>The total number of controls across all active assessments. </p>
+     */
+    totalAssessmentControlsCount?: number;
+    /**
+     * <p>The time when the cross-assessment insights were last updated. </p>
+     */
+    lastUpdated?: Date;
+}
+export declare namespace Insights {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: Insights) => any;
+}
+export interface GetInsightsResponse {
+    /**
+     * <p>The analytics data that the <code>GetInsights</code> API returned. </p>
+     */
+    insights?: Insights;
+}
+export declare namespace GetInsightsResponse {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: GetInsightsResponse) => any;
+}
+export interface GetInsightsByAssessmentRequest {
+    /**
+     * <p>The unique identifier for the assessment. </p>
+     */
+    assessmentId: string | undefined;
+}
+export declare namespace GetInsightsByAssessmentRequest {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: GetInsightsByAssessmentRequest) => any;
+}
+/**
+ * <p>A summary of the latest analytics data for a specific active assessment.</p>
+ *          <p>This summary is a snapshot of the data that was collected on the <code>lastUpdated</code>
+ *          date. It’s important to understand that the totals in <code>InsightsByAssessment</code> are
+ *          daily counts based on this date — they aren’t a total sum to date. </p>
+ *          <p>The <code>InsightsByAssessment</code> data is eventually consistent. This means that
+ *          when you read data from <code>InsightsByAssessment</code>, the response might not instantly
+ *          reflect the results of a recently completed write or update operation. If you repeat your
+ *          read request after a few hours, the response returns the latest data.</p>
+ *          <note>
+ *             <p>If you delete an assessment or change its status to inactive,
+ *             <code>InsightsByAssessment</code> includes data for that assessment as
+ *             follows.</p>
+ *             <ul>
+ *                <li>
+ *                   <p>
+ *                      <b>Inactive assessments</b> - If Audit Manager collected
+ *                evidence for your assessment before you changed it inactive, that evidence is
+ *                included in the <code>InsightsByAssessment</code> counts for that day.</p>
+ *                </li>
+ *                <li>
+ *                   <p>
+ *                      <b>Deleted assessments</b> - If Audit Manager collected
+ *                evidence for your assessment before you deleted it, that evidence isn't included
+ *                in the <code>InsightsByAssessment</code> counts for that day.</p>
+ *                </li>
+ *             </ul>
+ *          </note>
+ */
+export interface InsightsByAssessment {
+    /**
+     * <p>The number of compliance check evidence that Audit Manager classified as non-compliant.
+     *          This includes evidence that was collected from Security Hub with a
+     *          <i>Fail</i> ruling, or collected from Config with a
+     *          <i>Non-compliant</i> ruling. </p>
+     */
+    noncompliantEvidenceCount?: number;
+    /**
+     * <p>The number of compliance check evidence that Audit Manager classified as compliant.
+     *          This includes evidence that was collected from Security Hub with a
+     *          <i>Pass</i> ruling, or collected from Config with a
+     *          <i>Compliant</i> ruling. </p>
+     */
+    compliantEvidenceCount?: number;
+    /**
+     * <p>The amount of evidence without a compliance check ruling. Evidence is inconclusive if the
+     *          associated control uses Security Hub or Config as a data source
+     *          and you didn't enable those services. This is also the case if a control uses a data source
+     *          that doesn’t support compliance checks (for example, manual evidence, API calls, or CloudTrail). </p>
+     *          <note>
+     *             <p>If evidence has a compliance check status of <i>not applicable</i>, it's
+     *          classified as <i>inconclusive</i> in <code>InsightsByAssessment</code>
+     *          data.</p>
+     *          </note>
+     */
+    inconclusiveEvidenceCount?: number;
+    /**
+     * <p>The number of assessment controls that collected non-compliant evidence on the
+     *          <code>lastUpdated</code> date. </p>
+     */
+    assessmentControlsCountByNoncompliantEvidence?: number;
+    /**
+     * <p>The total number of controls in the assessment. </p>
+     */
+    totalAssessmentControlsCount?: number;
+    /**
+     * <p>The time when the assessment insights were last updated.</p>
+     */
+    lastUpdated?: Date;
+}
+export declare namespace InsightsByAssessment {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: InsightsByAssessment) => any;
+}
+export interface GetInsightsByAssessmentResponse {
+    /**
+     * <p> The assessment analytics data that the <code>GetInsightsByAssessment</code> API
+     *          returned. </p>
+     */
+    insights?: InsightsByAssessment;
+}
+export declare namespace GetInsightsByAssessmentResponse {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: GetInsightsByAssessmentResponse) => any;
+}
 export interface GetOrganizationAdminAccountRequest {
 }
 export declare namespace GetOrganizationAdminAccountRequest {
@@ -2736,6 +2911,120 @@ export declare namespace GetSettingsResponse {
      */
     const filterSensitiveLog: (obj: GetSettingsResponse) => any;
 }
+export interface ListAssessmentControlInsightsByControlDomainRequest {
+    /**
+     * <p>The unique identifier for the control domain. </p>
+     */
+    controlDomainId: string | undefined;
+    /**
+     * <p>The unique identifier for the active assessment. </p>
+     */
+    assessmentId: string | undefined;
+    /**
+     * <p>The pagination token that's used to fetch the next set of results. </p>
+     */
+    nextToken?: string;
+    /**
+     * <p>Represents the maximum number of results on a page or for an API request call. </p>
+     */
+    maxResults?: number;
+}
+export declare namespace ListAssessmentControlInsightsByControlDomainRequest {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ListAssessmentControlInsightsByControlDomainRequest) => any;
+}
+/**
+ * <p>A breakdown of the latest compliance check status for the evidence in your Audit Manager
+ *          assessments. </p>
+ */
+export interface EvidenceInsights {
+    /**
+     * <p>The number of compliance check evidence that Audit Manager classified as non-compliant.
+     *          This includes evidence that was collected from Security Hub with a
+     *          <i>Fail</i> ruling, or collected from Config with a
+     *          <i>Non-compliant</i> ruling. </p>
+     */
+    noncompliantEvidenceCount?: number;
+    /**
+     * <p>The number of compliance check evidence that Audit Manager classified as compliant. This
+     *          includes evidence that was collected from Security Hub with a
+     *          <i>Pass</i> ruling, or collected from Config with a
+     *          <i>Compliant</i> ruling. </p>
+     */
+    compliantEvidenceCount?: number;
+    /**
+     * <p>The number of evidence that a compliance check ruling isn't available for. Evidence is
+     *          inconclusive when the associated control uses Security Hub or Config as a data source but you didn't enable those services. This is also the case when a
+     *          control uses a data source that doesn’t support compliance checks (for example, manual
+     *          evidence, API calls, or CloudTrail). </p>
+     *          <note>
+     *             <p>If evidence has a compliance check status of <i>not applicable</i> in the
+     *          console, it's classified as <i>inconclusive</i> in
+     *          <code>EvidenceInsights</code> data.</p>
+     *          </note>
+     */
+    inconclusiveEvidenceCount?: number;
+}
+export declare namespace EvidenceInsights {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: EvidenceInsights) => any;
+}
+/**
+ * <p>A summary of the latest analytics data for a specific control in a specific active
+ *          assessment.</p>
+ *          <p>Control insights are grouped by control domain, and ranked by the highest total count of non-compliant evidence.
+ *       </p>
+ */
+export interface ControlInsightsMetadataByAssessmentItem {
+    /**
+     * <p>The name of the assessment control. </p>
+     */
+    name?: string;
+    /**
+     * <p>The unique identifier for the assessment control. </p>
+     */
+    id?: string;
+    /**
+     * <p>A breakdown of the compliance check status for the evidence that’s associated with the
+     *          assessment control. </p>
+     */
+    evidenceInsights?: EvidenceInsights;
+    /**
+     * <p>The name of the control set that the assessment control belongs to. </p>
+     */
+    controlSetName?: string;
+    /**
+     * <p>The time when the assessment control insights were last updated. </p>
+     */
+    lastUpdated?: Date;
+}
+export declare namespace ControlInsightsMetadataByAssessmentItem {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ControlInsightsMetadataByAssessmentItem) => any;
+}
+export interface ListAssessmentControlInsightsByControlDomainResponse {
+    /**
+     * <p>The assessment control analytics data that the
+     *          <code>ListAssessmentControlInsightsByControlDomain</code> API returned. </p>
+     */
+    controlInsightsByAssessment?: ControlInsightsMetadataByAssessmentItem[];
+    /**
+     * <p>The pagination token that's used to fetch the next set of results. </p>
+     */
+    nextToken?: string;
+}
+export declare namespace ListAssessmentControlInsightsByControlDomainResponse {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ListAssessmentControlInsightsByControlDomainResponse) => any;
+}
 export interface ListAssessmentFrameworksRequest {
     /**
      * <p> The type of framework, such as a standard framework or a custom framework. </p>
@@ -2843,6 +3132,10 @@ export declare namespace ListAssessmentReportsResponse {
     const filterSensitiveLog: (obj: ListAssessmentReportsResponse) => any;
 }
 export interface ListAssessmentsRequest {
+    /**
+     * <p> The current status of the assessment.</p>
+     */
+    status?: AssessmentStatus | string;
     /**
      * <p> The pagination token that's used to fetch the next set of results. </p>
      */
@@ -2874,6 +3167,180 @@ export declare namespace ListAssessmentsResponse {
      */
     const filterSensitiveLog: (obj: ListAssessmentsResponse) => any;
 }
+export interface ListControlDomainInsightsRequest {
+    /**
+     * <p>The pagination token that's used to fetch the next set of results. </p>
+     */
+    nextToken?: string;
+    /**
+     * <p>Represents the maximum number of results on a page or for an API request call. </p>
+     */
+    maxResults?: number;
+}
+export declare namespace ListControlDomainInsightsRequest {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ListControlDomainInsightsRequest) => any;
+}
+/**
+ * <p>A summary of the latest analytics data for a specific control domain.</p>
+ *          <p>Control domain insights are grouped by control domain, and ranked by the highest total count of non-compliant evidence.</p>
+ */
+export interface ControlDomainInsights {
+    /**
+     * <p>The name of the control domain. </p>
+     */
+    name?: string;
+    /**
+     * <p>The unique identifier for the control domain. </p>
+     */
+    id?: string;
+    /**
+     * <p>The number of controls in the control domain that collected non-compliant evidence on the
+     *          <code>lastUpdated</code> date. </p>
+     */
+    controlsCountByNoncompliantEvidence?: number;
+    /**
+     * <p>The total number of controls in the control domain. </p>
+     */
+    totalControlsCount?: number;
+    /**
+     * <p>A breakdown of the compliance check status for the evidence that’s associated with the control
+     *          domain. </p>
+     */
+    evidenceInsights?: EvidenceInsights;
+    /**
+     * <p>The time when the control domain insights were last updated. </p>
+     */
+    lastUpdated?: Date;
+}
+export declare namespace ControlDomainInsights {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ControlDomainInsights) => any;
+}
+export interface ListControlDomainInsightsResponse {
+    /**
+     * <p>The control domain analytics data that the <code>ListControlDomainInsights</code> API
+     *          returned. </p>
+     */
+    controlDomainInsights?: ControlDomainInsights[];
+    /**
+     * <p>The pagination token that's used to fetch the next set of results. </p>
+     */
+    nextToken?: string;
+}
+export declare namespace ListControlDomainInsightsResponse {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ListControlDomainInsightsResponse) => any;
+}
+export interface ListControlDomainInsightsByAssessmentRequest {
+    /**
+     * <p>The unique identifier for the active assessment. </p>
+     */
+    assessmentId: string | undefined;
+    /**
+     * <p>The pagination token that's used to fetch the next set of results. </p>
+     */
+    nextToken?: string;
+    /**
+     * <p>Represents the maximum number of results on a page or for an API request call. </p>
+     */
+    maxResults?: number;
+}
+export declare namespace ListControlDomainInsightsByAssessmentRequest {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ListControlDomainInsightsByAssessmentRequest) => any;
+}
+export interface ListControlDomainInsightsByAssessmentResponse {
+    /**
+     * <p>The control domain analytics data that the
+     *          <code>ListControlDomainInsightsByAssessment</code> API returned. </p>
+     */
+    controlDomainInsights?: ControlDomainInsights[];
+    /**
+     * <p>The pagination token that's used to fetch the next set of results. </p>
+     */
+    nextToken?: string;
+}
+export declare namespace ListControlDomainInsightsByAssessmentResponse {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ListControlDomainInsightsByAssessmentResponse) => any;
+}
+export interface ListControlInsightsByControlDomainRequest {
+    /**
+     * <p>The unique identifier for the control domain. </p>
+     */
+    controlDomainId: string | undefined;
+    /**
+     * <p>The pagination token that's used to fetch the next set of results. </p>
+     */
+    nextToken?: string;
+    /**
+     * <p>Represents the maximum number of results on a page or for an API request call. </p>
+     */
+    maxResults?: number;
+}
+export declare namespace ListControlInsightsByControlDomainRequest {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ListControlInsightsByControlDomainRequest) => any;
+}
+/**
+ * <p>A summary of the latest analytics data for a specific control. </p>
+ *          <p>This data reflects the total counts for the specified control across all active assessments. Control insights are grouped by control domain, and ranked by the highest total count of non-compliant evidence.</p>
+ */
+export interface ControlInsightsMetadataItem {
+    /**
+     * <p>The name of the control. </p>
+     */
+    name?: string;
+    /**
+     * <p>The unique identifier for the control. </p>
+     */
+    id?: string;
+    /**
+     * <p>A breakdown of the compliance check status for the evidence that’s associated with the
+     *          control. </p>
+     */
+    evidenceInsights?: EvidenceInsights;
+    /**
+     * <p>The time when the control insights were last updated. </p>
+     */
+    lastUpdated?: Date;
+}
+export declare namespace ControlInsightsMetadataItem {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ControlInsightsMetadataItem) => any;
+}
+export interface ListControlInsightsByControlDomainResponse {
+    /**
+     * <p>The control analytics data that the <code>ListControlInsightsByControlDomain</code> API
+     *          returned. </p>
+     */
+    controlInsightsMetadata?: ControlInsightsMetadataItem[];
+    /**
+     * <p>The pagination token that's used to fetch the next set of results. </p>
+     */
+    nextToken?: string;
+}
+export declare namespace ListControlInsightsByControlDomainResponse {
+    /**
+     * @internal
+     */
+    const filterSensitiveLog: (obj: ListControlInsightsByControlDomainResponse) => any;
+}
 export interface ListControlsRequest {
     /**
      * <p> The type of control, such as a standard control or a custom control. </p>
@@ -3231,7 +3698,7 @@ export declare namespace UntagResourceResponse {
 }
 export interface UpdateAssessmentRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**
@@ -3277,15 +3744,15 @@ export declare namespace UpdateAssessmentResponse {
 }
 export interface UpdateAssessmentControlRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**
-     * <p> The identifier for the control set. </p>
+     * <p> The unique identifier for the control set. </p>
      */
     controlSetId: string | undefined;
     /**
-     * <p> The identifier for the control. </p>
+     * <p> The unique identifier for the control. </p>
      */
     controlId: string | undefined;
     /**
@@ -3318,11 +3785,11 @@ export declare namespace UpdateAssessmentControlResponse {
 }
 export interface UpdateAssessmentControlSetStatusRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**
-     * <p> The identifier for the control set. </p>
+     * <p> The unique identifier for the control set. </p>
      */
     controlSetId: string | undefined;
     /**
@@ -3378,7 +3845,7 @@ export declare namespace UpdateAssessmentFrameworkControlSet {
 }
 export interface UpdateAssessmentFrameworkRequest {
     /**
-     * <p> The identifier for the framework. </p>
+     * <p> The unique identifier for the framework. </p>
      */
     frameworkId: string | undefined;
     /**
@@ -3457,7 +3924,7 @@ export declare namespace UpdateAssessmentFrameworkShareResponse {
 }
 export interface UpdateAssessmentStatusRequest {
     /**
-     * <p> The identifier for the assessment. </p>
+     * <p> The unique identifier for the assessment. </p>
      */
     assessmentId: string | undefined;
     /**