@aws-sdk/client-config-service 3.137.0 → 3.142.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (58) hide show
  1. package/CHANGELOG.md +30 -0
  2. package/README.md +1 -1
  3. package/dist-cjs/ConfigService.js +15 -0
  4. package/dist-cjs/commands/ListConformancePackComplianceScoresCommand.js +36 -0
  5. package/dist-cjs/commands/PutConformancePackCommand.js +2 -1
  6. package/dist-cjs/commands/PutDeliveryChannelCommand.js +2 -2
  7. package/dist-cjs/commands/PutEvaluationsCommand.js +3 -3
  8. package/dist-cjs/commands/PutExternalEvaluationCommand.js +3 -3
  9. package/dist-cjs/commands/index.js +1 -0
  10. package/dist-cjs/models/models_0.js +30 -29
  11. package/dist-cjs/models/models_1.js +25 -1
  12. package/dist-cjs/pagination/ListConformancePackComplianceScoresPaginator.js +36 -0
  13. package/dist-cjs/pagination/index.js +1 -0
  14. package/dist-cjs/protocols/Aws_json1_1.js +550 -828
  15. package/dist-es/ConfigService.js +15 -0
  16. package/dist-es/commands/ListConformancePackComplianceScoresCommand.js +39 -0
  17. package/dist-es/commands/PutConformancePackCommand.js +2 -1
  18. package/dist-es/commands/PutDeliveryChannelCommand.js +1 -1
  19. package/dist-es/commands/PutEvaluationsCommand.js +1 -1
  20. package/dist-es/commands/PutExternalEvaluationCommand.js +1 -1
  21. package/dist-es/commands/index.js +1 -0
  22. package/dist-es/models/models_0.js +13 -6
  23. package/dist-es/models/models_1.js +6 -0
  24. package/dist-es/pagination/ListConformancePackComplianceScoresPaginator.js +75 -0
  25. package/dist-es/pagination/index.js +1 -0
  26. package/dist-es/protocols/Aws_json1_1.js +820 -826
  27. package/dist-types/ConfigService.d.ts +70 -38
  28. package/dist-types/ConfigServiceClient.d.ts +3 -2
  29. package/dist-types/commands/ListConformancePackComplianceScoresCommand.d.ts +41 -0
  30. package/dist-types/commands/PutConfigRuleCommand.d.ts +27 -21
  31. package/dist-types/commands/PutConfigurationAggregatorCommand.d.ts +1 -1
  32. package/dist-types/commands/PutConformancePackCommand.d.ts +4 -3
  33. package/dist-types/commands/PutDeliveryChannelCommand.d.ts +1 -1
  34. package/dist-types/commands/PutEvaluationsCommand.d.ts +1 -1
  35. package/dist-types/commands/PutExternalEvaluationCommand.d.ts +1 -1
  36. package/dist-types/commands/PutOrganizationConfigRuleCommand.d.ts +24 -11
  37. package/dist-types/commands/PutOrganizationConformancePackCommand.d.ts +2 -2
  38. package/dist-types/commands/SelectResourceConfigCommand.d.ts +1 -1
  39. package/dist-types/commands/index.d.ts +1 -0
  40. package/dist-types/models/models_0.d.ts +114 -117
  41. package/dist-types/models/models_1.d.ts +104 -5
  42. package/dist-types/pagination/ListConformancePackComplianceScoresPaginator.d.ts +4 -0
  43. package/dist-types/pagination/index.d.ts +1 -0
  44. package/dist-types/protocols/Aws_json1_1.d.ts +3 -0
  45. package/dist-types/ts3.4/ConfigService.d.ts +5 -0
  46. package/dist-types/ts3.4/ConfigServiceClient.d.ts +3 -2
  47. package/dist-types/ts3.4/commands/ListConformancePackComplianceScoresCommand.d.ts +17 -0
  48. package/dist-types/ts3.4/commands/PutConformancePackCommand.d.ts +2 -1
  49. package/dist-types/ts3.4/commands/PutDeliveryChannelCommand.d.ts +1 -1
  50. package/dist-types/ts3.4/commands/PutEvaluationsCommand.d.ts +1 -1
  51. package/dist-types/ts3.4/commands/PutExternalEvaluationCommand.d.ts +1 -1
  52. package/dist-types/ts3.4/commands/index.d.ts +1 -0
  53. package/dist-types/ts3.4/models/models_0.d.ts +47 -43
  54. package/dist-types/ts3.4/models/models_1.d.ts +44 -1
  55. package/dist-types/ts3.4/pagination/ListConformancePackComplianceScoresPaginator.d.ts +4 -0
  56. package/dist-types/ts3.4/pagination/index.d.ts +1 -0
  57. package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts +3 -0
  58. package/package.json +6 -6
@@ -61,6 +61,7 @@ import { GetOrganizationCustomRulePolicyCommandInput, GetOrganizationCustomRuleP
61
61
  import { GetResourceConfigHistoryCommandInput, GetResourceConfigHistoryCommandOutput } from "./commands/GetResourceConfigHistoryCommand";
62
62
  import { GetStoredQueryCommandInput, GetStoredQueryCommandOutput } from "./commands/GetStoredQueryCommand";
63
63
  import { ListAggregateDiscoveredResourcesCommandInput, ListAggregateDiscoveredResourcesCommandOutput } from "./commands/ListAggregateDiscoveredResourcesCommand";
64
+ import { ListConformancePackComplianceScoresCommandInput, ListConformancePackComplianceScoresCommandOutput } from "./commands/ListConformancePackComplianceScoresCommand";
64
65
  import { ListDiscoveredResourcesCommandInput, ListDiscoveredResourcesCommandOutput } from "./commands/ListDiscoveredResourcesCommand";
65
66
  import { ListStoredQueriesCommandInput, ListStoredQueriesCommandOutput } from "./commands/ListStoredQueriesCommand";
66
67
  import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
@@ -875,6 +876,18 @@ export declare class ConfigService extends ConfigServiceClient {
875
876
  listAggregateDiscoveredResources(args: ListAggregateDiscoveredResourcesCommandInput, options?: __HttpHandlerOptions): Promise<ListAggregateDiscoveredResourcesCommandOutput>;
876
877
  listAggregateDiscoveredResources(args: ListAggregateDiscoveredResourcesCommandInput, cb: (err: any, data?: ListAggregateDiscoveredResourcesCommandOutput) => void): void;
877
878
  listAggregateDiscoveredResources(args: ListAggregateDiscoveredResourcesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAggregateDiscoveredResourcesCommandOutput) => void): void;
879
+ /**
880
+ * <p>Returns a list of conformance pack compliance scores.
881
+ * A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack.
882
+ * This metric provides you with a high-level view of the compliance state of your conformance packs, and can be used to identify, investigate, and understand
883
+ * the level of compliance in your conformance packs.</p>
884
+ * <note>
885
+ * <p>Conformance packs with no evaluation results will have a compliance score of <code>INSUFFICIENT_DATA</code>.</p>
886
+ * </note>
887
+ */
888
+ listConformancePackComplianceScores(args: ListConformancePackComplianceScoresCommandInput, options?: __HttpHandlerOptions): Promise<ListConformancePackComplianceScoresCommandOutput>;
889
+ listConformancePackComplianceScores(args: ListConformancePackComplianceScoresCommandInput, cb: (err: any, data?: ListConformancePackComplianceScoresCommandOutput) => void): void;
890
+ listConformancePackComplianceScores(args: ListConformancePackComplianceScoresCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListConformancePackComplianceScoresCommandOutput) => void): void;
878
891
  /**
879
892
  * <p>Accepts a resource type and returns a list of resource
880
893
  * identifiers for the resources of that type. A resource identifier
@@ -917,23 +930,33 @@ export declare class ConfigService extends ConfigServiceClient {
917
930
  putAggregationAuthorization(args: PutAggregationAuthorizationCommandInput, cb: (err: any, data?: PutAggregationAuthorizationCommandOutput) => void): void;
918
931
  putAggregationAuthorization(args: PutAggregationAuthorizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutAggregationAuthorizationCommandOutput) => void): void;
919
932
  /**
920
- * <p>Adds or updates an Config rule for evaluating whether your
921
- * Amazon Web Services resources comply with your desired configurations.</p>
922
- * <p>You can use this action for Config custom rules and Config
923
- * managed rules. A Config custom rule is a rule that you
924
- * develop and maintain. An Config managed rule is a customizable,
925
- * predefined rule that Config provides.</p>
926
- * <p>If you are adding a new Config custom rule, you must first
927
- * create the Lambda function that the rule invokes to evaluate
928
- * your resources. When you use the <code>PutConfigRule</code> action
929
- * to add the rule to Config, you must specify the Amazon Resource
930
- * Name (ARN) that Lambda assigns to the function. Specify the ARN
931
- * for the <code>SourceIdentifier</code> key. This key is part of the
932
- * <code>Source</code> object, which is part of the
933
- * <code>ConfigRule</code> object. </p>
934
- * <p>If you are adding an Config managed rule, specify the
935
- * rule's identifier for the <code>SourceIdentifier</code> key. To
936
- * reference Config managed rule identifiers, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html">About Config managed rules</a>.</p>
933
+ * <p>Adds or updates an Config rule to evaluate if your
934
+ * Amazon Web Services resources comply with your desired configurations. For information on how many Config rules you can have per account,
935
+ * see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
936
+ * <b>Service Limits</b>
937
+ * </a> in the <i>Config Developer Guide</i>.</p>
938
+ *
939
+ * <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
940
+ * You can use <code>PutConfigRule</code> to create both Config custom rules and Config managed rules.</p>
941
+ *
942
+ * <p>Custom rules are rules that you can create using either Guard or Lambda functions.
943
+ * Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
944
+ * Repository</a>) is a policy-as-code language that allows you to write policies that
945
+ * are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
946
+ * evaluate a custom rule. If you are adding a new Custom Lambda rule,
947
+ * you first need to create an Lambda function that the rule invokes to evaluate
948
+ * your resources. When you use <code>PutConfigRule</code> to add a Custom Lambda rule to Config, you must specify the Amazon Resource
949
+ * Name (ARN) that Lambda assigns to the function. You specify the ARN
950
+ * in the <code>SourceIdentifier</code> key. This key is part of the
951
+ * <code>Source</code> object, which is part of the
952
+ * <code>ConfigRule</code> object. </p>
953
+ *
954
+ * <p>Managed rules are predefined,
955
+ * customizable rules created by Config. For a list of managed rules, see
956
+ * <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
957
+ * Managed Rules</a>. If you are adding an Config managed rule, you must specify the
958
+ * rule's identifier for the <code>SourceIdentifier</code> key.</p>
959
+ *
937
960
  * <p>For any new rule that you add, specify the
938
961
  * <code>ConfigRuleName</code> in the <code>ConfigRule</code>
939
962
  * object. Do not specify the <code>ConfigRuleArn</code> or the
@@ -943,10 +966,6 @@ export declare class ConfigService extends ConfigServiceClient {
943
966
  * <code>ConfigRuleId</code>, or <code>ConfigRuleArn</code> in the
944
967
  * <code>ConfigRule</code> data type that you use in this
945
968
  * request.</p>
946
- * <p>For information on how many Config rules you can have per account,
947
- * see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
948
- * <b>Service Limits</b>
949
- * </a> in the Config Developer Guide.</p>
950
969
  *
951
970
  * <p>For more information about developing and using Config
952
971
  * rules, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html">Evaluating Amazon Web Services resource Configurations with Config</a>
@@ -970,7 +989,7 @@ export declare class ConfigService extends ConfigServiceClient {
970
989
  * <p>If your source type is an organization, you must be signed in to the management account or a registered delegated administrator and all the features must be enabled in your organization.
971
990
  * If the caller is a management account, Config calls <code>EnableAwsServiceAccess</code> API to enable integration between Config and Organizations.
972
991
  * If the caller is a registered delegated administrator, Config calls <code>ListDelegatedAdministrators</code> API to verify whether the caller is a valid delegated administrator.</p>
973
- * <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the Config developer guide. </p>
992
+ * <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the <i>Config developer guide</i>. </p>
974
993
  * </note>
975
994
  */
976
995
  putConfigurationAggregator(args: PutConfigurationAggregatorCommandInput, options?: __HttpHandlerOptions): Promise<PutConfigurationAggregatorCommandOutput>;
@@ -1001,8 +1020,8 @@ export declare class ConfigService extends ConfigServiceClient {
1001
1020
  * see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
1002
1021
  * <b>Service Limits</b>
1003
1022
  * </a> in the Config Developer Guide.</p>
1004
- * <p>This API creates a service linked role <code>AWSServiceRoleForConfigConforms</code> in your account.
1005
- * The service linked role is created only when the role does not exist in your account. </p>
1023
+ * <p>This API creates a service-linked role <code>AWSServiceRoleForConfigConforms</code> in your account.
1024
+ * The service-linked role is created only when the role does not exist in your account. </p>
1006
1025
  * <note>
1007
1026
  * <p>You must specify either the <code>TemplateS3Uri</code> or the <code>TemplateBody</code> parameter, but not both.
1008
1027
  * If you provide both Config uses the <code>TemplateS3Uri</code> parameter and ignores the <code>TemplateBody</code> parameter.</p>
@@ -1049,29 +1068,42 @@ export declare class ConfigService extends ConfigServiceClient {
1049
1068
  putExternalEvaluation(args: PutExternalEvaluationCommandInput, cb: (err: any, data?: PutExternalEvaluationCommandOutput) => void): void;
1050
1069
  putExternalEvaluation(args: PutExternalEvaluationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutExternalEvaluationCommandOutput) => void): void;
1051
1070
  /**
1052
- * <p>Adds or updates organization Config rule for your entire organization evaluating whether your Amazon Web Services resources comply with your
1071
+ * <p>Adds or updates an Config rule for your entire organization to evaluate if your Amazon Web Services resources comply with your
1053
1072
  * desired configurations. For information on how many organization Config rules you can have per account,
1054
1073
  * see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
1055
1074
  * <b>Service Limits</b>
1056
- * </a> in the Config Developer Guide.</p>
1075
+ * </a> in the <i>Config Developer Guide</i>.</p>
1057
1076
  * <p> Only a master account and a delegated administrator can create or update an organization Config rule.
1058
1077
  * When calling this API with a delegated administrator, you must ensure Organizations
1059
1078
  * <code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
1060
- * <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service linked
1079
+ * <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service-linked
1061
1080
  * role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
1062
- * The service linked role is created only when the role does not exist in the caller account.
1081
+ * The service-linked role is created only when the role does not exist in the caller account.
1063
1082
  * Config verifies the existence of role with <code>GetRole</code> action.</p>
1064
1083
  * <p>To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
1065
1084
  * <code>register-delegated-administrator</code> for <code>config-multiaccountsetup.amazonaws.com</code>. </p>
1066
- * <p>You can use this action to create both Config custom rules and Config managed rules.
1067
- * If you are adding a new Config custom rule, you must first create Lambda function in the master account or a delegated
1068
- * administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed-account that can be assumed by the Lambda function.
1069
- * When you use the <code>PutOrganizationConfigRule</code> action to add the rule to Config, you must
1070
- * specify the Amazon Resource Name (ARN) that Lambda assigns to the function.
1071
- * If you are adding an Config managed rule, specify the rule's identifier for the <code>RuleIdentifier</code> key.</p>
1085
+ *
1086
+ * <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
1087
+ * You can use <code>PutOrganizationConfigRule</code> to create both Config custom rules and Config managed rules.</p>
1088
+ *
1089
+ * <p>Custom rules are rules that you can create using either Guard or Lambda functions.
1090
+ * Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
1091
+ * Repository</a>) is a policy-as-code language that allows you to write policies that
1092
+ * are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
1093
+ * evaluate a custom rule. If you are adding a new Custom Lambda rule, you first need to create an Lambda function in the master account or a delegated
1094
+ * administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed account that can be assumed by the Lambda function.
1095
+ * When you use <code>PutOrganizationConfigRule</code> to add a Custom Lambda rule to Config, you must
1096
+ * specify the Amazon Resource Name (ARN) that Lambda assigns to the function.</p>
1097
+ *
1098
+ * <p>Managed rules are predefined,
1099
+ * customizable rules created by Config. For a list of managed rules, see
1100
+ * <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
1101
+ * Managed Rules</a>. If you are adding an Config managed rule, you must specify the rule's identifier for the <code>RuleIdentifier</code> key.</p>
1102
+ *
1103
+ *
1072
1104
  * <note>
1073
1105
  * <p>Prerequisite: Ensure you call <code>EnableAllFeatures</code> API to enable all features in an organization.</p>
1074
- * <p>Specify either <code>OrganizationCustomRuleMetadata</code> or <code>OrganizationManagedRuleMetadata</code>.</p>
1106
+ * <p>Make sure to specify one of either <code>OrganizationCustomPolicyRuleMetadata</code> for Custom Policy rules, <code>OrganizationCustomRuleMetadata</code> for Custom Lambda rules, or <code>OrganizationManagedRuleMetadata</code> for managed rules.</p>
1075
1107
  * </note>
1076
1108
  */
1077
1109
  putOrganizationConfigRule(args: PutOrganizationConfigRuleCommandInput, options?: __HttpHandlerOptions): Promise<PutOrganizationConfigRuleCommandOutput>;
@@ -1087,8 +1119,8 @@ export declare class ConfigService extends ConfigServiceClient {
1087
1119
  * <code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
1088
1120
  * <p>This API enables organization service access for <code>config-multiaccountsetup.amazonaws.com</code>
1089
1121
  * through the <code>EnableAWSServiceAccess</code> action and creates a
1090
- * service linked role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
1091
- * The service linked role is created only when the role does not exist in the caller account.
1122
+ * service-linked role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
1123
+ * The service-linked role is created only when the role does not exist in the caller account.
1092
1124
  * To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
1093
1125
  * <code>register-delegate-admin</code> for <code>config-multiaccountsetup.amazonaws.com</code>.</p>
1094
1126
  *
@@ -1198,7 +1230,7 @@ export declare class ConfigService extends ConfigServiceClient {
1198
1230
  * <p>For more information about query components, see the
1199
1231
  * <a href="https://docs.aws.amazon.com/config/latest/developerguide/query-components.html">
1200
1232
  * <b>Query Components</b>
1201
- * </a> section in the Config Developer Guide.</p>
1233
+ * </a> section in the <i>Config Developer Guide</i>.</p>
1202
1234
  */
1203
1235
  selectResourceConfig(args: SelectResourceConfigCommandInput, options?: __HttpHandlerOptions): Promise<SelectResourceConfigCommandOutput>;
1204
1236
  selectResourceConfig(args: SelectResourceConfigCommandInput, cb: (err: any, data?: SelectResourceConfigCommandOutput) => void): void;
@@ -68,6 +68,7 @@ import { GetOrganizationCustomRulePolicyCommandInput, GetOrganizationCustomRuleP
68
68
  import { GetResourceConfigHistoryCommandInput, GetResourceConfigHistoryCommandOutput } from "./commands/GetResourceConfigHistoryCommand";
69
69
  import { GetStoredQueryCommandInput, GetStoredQueryCommandOutput } from "./commands/GetStoredQueryCommand";
70
70
  import { ListAggregateDiscoveredResourcesCommandInput, ListAggregateDiscoveredResourcesCommandOutput } from "./commands/ListAggregateDiscoveredResourcesCommand";
71
+ import { ListConformancePackComplianceScoresCommandInput, ListConformancePackComplianceScoresCommandOutput } from "./commands/ListConformancePackComplianceScoresCommand";
71
72
  import { ListDiscoveredResourcesCommandInput, ListDiscoveredResourcesCommandOutput } from "./commands/ListDiscoveredResourcesCommand";
72
73
  import { ListStoredQueriesCommandInput, ListStoredQueriesCommandOutput } from "./commands/ListStoredQueriesCommand";
73
74
  import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
@@ -94,8 +95,8 @@ import { StartRemediationExecutionCommandInput, StartRemediationExecutionCommand
94
95
  import { StopConfigurationRecorderCommandInput, StopConfigurationRecorderCommandOutput } from "./commands/StopConfigurationRecorderCommand";
95
96
  import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/TagResourceCommand";
96
97
  import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
97
- export declare type ServiceInputTypes = BatchGetAggregateResourceConfigCommandInput | BatchGetResourceConfigCommandInput | DeleteAggregationAuthorizationCommandInput | DeleteConfigRuleCommandInput | DeleteConfigurationAggregatorCommandInput | DeleteConfigurationRecorderCommandInput | DeleteConformancePackCommandInput | DeleteDeliveryChannelCommandInput | DeleteEvaluationResultsCommandInput | DeleteOrganizationConfigRuleCommandInput | DeleteOrganizationConformancePackCommandInput | DeletePendingAggregationRequestCommandInput | DeleteRemediationConfigurationCommandInput | DeleteRemediationExceptionsCommandInput | DeleteResourceConfigCommandInput | DeleteRetentionConfigurationCommandInput | DeleteStoredQueryCommandInput | DeliverConfigSnapshotCommandInput | DescribeAggregateComplianceByConfigRulesCommandInput | DescribeAggregateComplianceByConformancePacksCommandInput | DescribeAggregationAuthorizationsCommandInput | DescribeComplianceByConfigRuleCommandInput | DescribeComplianceByResourceCommandInput | DescribeConfigRuleEvaluationStatusCommandInput | DescribeConfigRulesCommandInput | DescribeConfigurationAggregatorSourcesStatusCommandInput | DescribeConfigurationAggregatorsCommandInput | DescribeConfigurationRecorderStatusCommandInput | DescribeConfigurationRecordersCommandInput | DescribeConformancePackComplianceCommandInput | DescribeConformancePackStatusCommandInput | DescribeConformancePacksCommandInput | DescribeDeliveryChannelStatusCommandInput | DescribeDeliveryChannelsCommandInput | DescribeOrganizationConfigRuleStatusesCommandInput | DescribeOrganizationConfigRulesCommandInput | DescribeOrganizationConformancePackStatusesCommandInput | DescribeOrganizationConformancePacksCommandInput | DescribePendingAggregationRequestsCommandInput | DescribeRemediationConfigurationsCommandInput | DescribeRemediationExceptionsCommandInput | DescribeRemediationExecutionStatusCommandInput | DescribeRetentionConfigurationsCommandInput | GetAggregateComplianceDetailsByConfigRuleCommandInput | GetAggregateConfigRuleComplianceSummaryCommandInput | GetAggregateConformancePackComplianceSummaryCommandInput | GetAggregateDiscoveredResourceCountsCommandInput | GetAggregateResourceConfigCommandInput | GetComplianceDetailsByConfigRuleCommandInput | GetComplianceDetailsByResourceCommandInput | GetComplianceSummaryByConfigRuleCommandInput | GetComplianceSummaryByResourceTypeCommandInput | GetConformancePackComplianceDetailsCommandInput | GetConformancePackComplianceSummaryCommandInput | GetCustomRulePolicyCommandInput | GetDiscoveredResourceCountsCommandInput | GetOrganizationConfigRuleDetailedStatusCommandInput | GetOrganizationConformancePackDetailedStatusCommandInput | GetOrganizationCustomRulePolicyCommandInput | GetResourceConfigHistoryCommandInput | GetStoredQueryCommandInput | ListAggregateDiscoveredResourcesCommandInput | ListDiscoveredResourcesCommandInput | ListStoredQueriesCommandInput | ListTagsForResourceCommandInput | PutAggregationAuthorizationCommandInput | PutConfigRuleCommandInput | PutConfigurationAggregatorCommandInput | PutConfigurationRecorderCommandInput | PutConformancePackCommandInput | PutDeliveryChannelCommandInput | PutEvaluationsCommandInput | PutExternalEvaluationCommandInput | PutOrganizationConfigRuleCommandInput | PutOrganizationConformancePackCommandInput | PutRemediationConfigurationsCommandInput | PutRemediationExceptionsCommandInput | PutResourceConfigCommandInput | PutRetentionConfigurationCommandInput | PutStoredQueryCommandInput | SelectAggregateResourceConfigCommandInput | SelectResourceConfigCommandInput | StartConfigRulesEvaluationCommandInput | StartConfigurationRecorderCommandInput | StartRemediationExecutionCommandInput | StopConfigurationRecorderCommandInput | TagResourceCommandInput | UntagResourceCommandInput;
98
- export declare type ServiceOutputTypes = BatchGetAggregateResourceConfigCommandOutput | BatchGetResourceConfigCommandOutput | DeleteAggregationAuthorizationCommandOutput | DeleteConfigRuleCommandOutput | DeleteConfigurationAggregatorCommandOutput | DeleteConfigurationRecorderCommandOutput | DeleteConformancePackCommandOutput | DeleteDeliveryChannelCommandOutput | DeleteEvaluationResultsCommandOutput | DeleteOrganizationConfigRuleCommandOutput | DeleteOrganizationConformancePackCommandOutput | DeletePendingAggregationRequestCommandOutput | DeleteRemediationConfigurationCommandOutput | DeleteRemediationExceptionsCommandOutput | DeleteResourceConfigCommandOutput | DeleteRetentionConfigurationCommandOutput | DeleteStoredQueryCommandOutput | DeliverConfigSnapshotCommandOutput | DescribeAggregateComplianceByConfigRulesCommandOutput | DescribeAggregateComplianceByConformancePacksCommandOutput | DescribeAggregationAuthorizationsCommandOutput | DescribeComplianceByConfigRuleCommandOutput | DescribeComplianceByResourceCommandOutput | DescribeConfigRuleEvaluationStatusCommandOutput | DescribeConfigRulesCommandOutput | DescribeConfigurationAggregatorSourcesStatusCommandOutput | DescribeConfigurationAggregatorsCommandOutput | DescribeConfigurationRecorderStatusCommandOutput | DescribeConfigurationRecordersCommandOutput | DescribeConformancePackComplianceCommandOutput | DescribeConformancePackStatusCommandOutput | DescribeConformancePacksCommandOutput | DescribeDeliveryChannelStatusCommandOutput | DescribeDeliveryChannelsCommandOutput | DescribeOrganizationConfigRuleStatusesCommandOutput | DescribeOrganizationConfigRulesCommandOutput | DescribeOrganizationConformancePackStatusesCommandOutput | DescribeOrganizationConformancePacksCommandOutput | DescribePendingAggregationRequestsCommandOutput | DescribeRemediationConfigurationsCommandOutput | DescribeRemediationExceptionsCommandOutput | DescribeRemediationExecutionStatusCommandOutput | DescribeRetentionConfigurationsCommandOutput | GetAggregateComplianceDetailsByConfigRuleCommandOutput | GetAggregateConfigRuleComplianceSummaryCommandOutput | GetAggregateConformancePackComplianceSummaryCommandOutput | GetAggregateDiscoveredResourceCountsCommandOutput | GetAggregateResourceConfigCommandOutput | GetComplianceDetailsByConfigRuleCommandOutput | GetComplianceDetailsByResourceCommandOutput | GetComplianceSummaryByConfigRuleCommandOutput | GetComplianceSummaryByResourceTypeCommandOutput | GetConformancePackComplianceDetailsCommandOutput | GetConformancePackComplianceSummaryCommandOutput | GetCustomRulePolicyCommandOutput | GetDiscoveredResourceCountsCommandOutput | GetOrganizationConfigRuleDetailedStatusCommandOutput | GetOrganizationConformancePackDetailedStatusCommandOutput | GetOrganizationCustomRulePolicyCommandOutput | GetResourceConfigHistoryCommandOutput | GetStoredQueryCommandOutput | ListAggregateDiscoveredResourcesCommandOutput | ListDiscoveredResourcesCommandOutput | ListStoredQueriesCommandOutput | ListTagsForResourceCommandOutput | PutAggregationAuthorizationCommandOutput | PutConfigRuleCommandOutput | PutConfigurationAggregatorCommandOutput | PutConfigurationRecorderCommandOutput | PutConformancePackCommandOutput | PutDeliveryChannelCommandOutput | PutEvaluationsCommandOutput | PutExternalEvaluationCommandOutput | PutOrganizationConfigRuleCommandOutput | PutOrganizationConformancePackCommandOutput | PutRemediationConfigurationsCommandOutput | PutRemediationExceptionsCommandOutput | PutResourceConfigCommandOutput | PutRetentionConfigurationCommandOutput | PutStoredQueryCommandOutput | SelectAggregateResourceConfigCommandOutput | SelectResourceConfigCommandOutput | StartConfigRulesEvaluationCommandOutput | StartConfigurationRecorderCommandOutput | StartRemediationExecutionCommandOutput | StopConfigurationRecorderCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput;
98
+ export declare type ServiceInputTypes = BatchGetAggregateResourceConfigCommandInput | BatchGetResourceConfigCommandInput | DeleteAggregationAuthorizationCommandInput | DeleteConfigRuleCommandInput | DeleteConfigurationAggregatorCommandInput | DeleteConfigurationRecorderCommandInput | DeleteConformancePackCommandInput | DeleteDeliveryChannelCommandInput | DeleteEvaluationResultsCommandInput | DeleteOrganizationConfigRuleCommandInput | DeleteOrganizationConformancePackCommandInput | DeletePendingAggregationRequestCommandInput | DeleteRemediationConfigurationCommandInput | DeleteRemediationExceptionsCommandInput | DeleteResourceConfigCommandInput | DeleteRetentionConfigurationCommandInput | DeleteStoredQueryCommandInput | DeliverConfigSnapshotCommandInput | DescribeAggregateComplianceByConfigRulesCommandInput | DescribeAggregateComplianceByConformancePacksCommandInput | DescribeAggregationAuthorizationsCommandInput | DescribeComplianceByConfigRuleCommandInput | DescribeComplianceByResourceCommandInput | DescribeConfigRuleEvaluationStatusCommandInput | DescribeConfigRulesCommandInput | DescribeConfigurationAggregatorSourcesStatusCommandInput | DescribeConfigurationAggregatorsCommandInput | DescribeConfigurationRecorderStatusCommandInput | DescribeConfigurationRecordersCommandInput | DescribeConformancePackComplianceCommandInput | DescribeConformancePackStatusCommandInput | DescribeConformancePacksCommandInput | DescribeDeliveryChannelStatusCommandInput | DescribeDeliveryChannelsCommandInput | DescribeOrganizationConfigRuleStatusesCommandInput | DescribeOrganizationConfigRulesCommandInput | DescribeOrganizationConformancePackStatusesCommandInput | DescribeOrganizationConformancePacksCommandInput | DescribePendingAggregationRequestsCommandInput | DescribeRemediationConfigurationsCommandInput | DescribeRemediationExceptionsCommandInput | DescribeRemediationExecutionStatusCommandInput | DescribeRetentionConfigurationsCommandInput | GetAggregateComplianceDetailsByConfigRuleCommandInput | GetAggregateConfigRuleComplianceSummaryCommandInput | GetAggregateConformancePackComplianceSummaryCommandInput | GetAggregateDiscoveredResourceCountsCommandInput | GetAggregateResourceConfigCommandInput | GetComplianceDetailsByConfigRuleCommandInput | GetComplianceDetailsByResourceCommandInput | GetComplianceSummaryByConfigRuleCommandInput | GetComplianceSummaryByResourceTypeCommandInput | GetConformancePackComplianceDetailsCommandInput | GetConformancePackComplianceSummaryCommandInput | GetCustomRulePolicyCommandInput | GetDiscoveredResourceCountsCommandInput | GetOrganizationConfigRuleDetailedStatusCommandInput | GetOrganizationConformancePackDetailedStatusCommandInput | GetOrganizationCustomRulePolicyCommandInput | GetResourceConfigHistoryCommandInput | GetStoredQueryCommandInput | ListAggregateDiscoveredResourcesCommandInput | ListConformancePackComplianceScoresCommandInput | ListDiscoveredResourcesCommandInput | ListStoredQueriesCommandInput | ListTagsForResourceCommandInput | PutAggregationAuthorizationCommandInput | PutConfigRuleCommandInput | PutConfigurationAggregatorCommandInput | PutConfigurationRecorderCommandInput | PutConformancePackCommandInput | PutDeliveryChannelCommandInput | PutEvaluationsCommandInput | PutExternalEvaluationCommandInput | PutOrganizationConfigRuleCommandInput | PutOrganizationConformancePackCommandInput | PutRemediationConfigurationsCommandInput | PutRemediationExceptionsCommandInput | PutResourceConfigCommandInput | PutRetentionConfigurationCommandInput | PutStoredQueryCommandInput | SelectAggregateResourceConfigCommandInput | SelectResourceConfigCommandInput | StartConfigRulesEvaluationCommandInput | StartConfigurationRecorderCommandInput | StartRemediationExecutionCommandInput | StopConfigurationRecorderCommandInput | TagResourceCommandInput | UntagResourceCommandInput;
99
+ export declare type ServiceOutputTypes = BatchGetAggregateResourceConfigCommandOutput | BatchGetResourceConfigCommandOutput | DeleteAggregationAuthorizationCommandOutput | DeleteConfigRuleCommandOutput | DeleteConfigurationAggregatorCommandOutput | DeleteConfigurationRecorderCommandOutput | DeleteConformancePackCommandOutput | DeleteDeliveryChannelCommandOutput | DeleteEvaluationResultsCommandOutput | DeleteOrganizationConfigRuleCommandOutput | DeleteOrganizationConformancePackCommandOutput | DeletePendingAggregationRequestCommandOutput | DeleteRemediationConfigurationCommandOutput | DeleteRemediationExceptionsCommandOutput | DeleteResourceConfigCommandOutput | DeleteRetentionConfigurationCommandOutput | DeleteStoredQueryCommandOutput | DeliverConfigSnapshotCommandOutput | DescribeAggregateComplianceByConfigRulesCommandOutput | DescribeAggregateComplianceByConformancePacksCommandOutput | DescribeAggregationAuthorizationsCommandOutput | DescribeComplianceByConfigRuleCommandOutput | DescribeComplianceByResourceCommandOutput | DescribeConfigRuleEvaluationStatusCommandOutput | DescribeConfigRulesCommandOutput | DescribeConfigurationAggregatorSourcesStatusCommandOutput | DescribeConfigurationAggregatorsCommandOutput | DescribeConfigurationRecorderStatusCommandOutput | DescribeConfigurationRecordersCommandOutput | DescribeConformancePackComplianceCommandOutput | DescribeConformancePackStatusCommandOutput | DescribeConformancePacksCommandOutput | DescribeDeliveryChannelStatusCommandOutput | DescribeDeliveryChannelsCommandOutput | DescribeOrganizationConfigRuleStatusesCommandOutput | DescribeOrganizationConfigRulesCommandOutput | DescribeOrganizationConformancePackStatusesCommandOutput | DescribeOrganizationConformancePacksCommandOutput | DescribePendingAggregationRequestsCommandOutput | DescribeRemediationConfigurationsCommandOutput | DescribeRemediationExceptionsCommandOutput | DescribeRemediationExecutionStatusCommandOutput | DescribeRetentionConfigurationsCommandOutput | GetAggregateComplianceDetailsByConfigRuleCommandOutput | GetAggregateConfigRuleComplianceSummaryCommandOutput | GetAggregateConformancePackComplianceSummaryCommandOutput | GetAggregateDiscoveredResourceCountsCommandOutput | GetAggregateResourceConfigCommandOutput | GetComplianceDetailsByConfigRuleCommandOutput | GetComplianceDetailsByResourceCommandOutput | GetComplianceSummaryByConfigRuleCommandOutput | GetComplianceSummaryByResourceTypeCommandOutput | GetConformancePackComplianceDetailsCommandOutput | GetConformancePackComplianceSummaryCommandOutput | GetCustomRulePolicyCommandOutput | GetDiscoveredResourceCountsCommandOutput | GetOrganizationConfigRuleDetailedStatusCommandOutput | GetOrganizationConformancePackDetailedStatusCommandOutput | GetOrganizationCustomRulePolicyCommandOutput | GetResourceConfigHistoryCommandOutput | GetStoredQueryCommandOutput | ListAggregateDiscoveredResourcesCommandOutput | ListConformancePackComplianceScoresCommandOutput | ListDiscoveredResourcesCommandOutput | ListStoredQueriesCommandOutput | ListTagsForResourceCommandOutput | PutAggregationAuthorizationCommandOutput | PutConfigRuleCommandOutput | PutConfigurationAggregatorCommandOutput | PutConfigurationRecorderCommandOutput | PutConformancePackCommandOutput | PutDeliveryChannelCommandOutput | PutEvaluationsCommandOutput | PutExternalEvaluationCommandOutput | PutOrganizationConfigRuleCommandOutput | PutOrganizationConformancePackCommandOutput | PutRemediationConfigurationsCommandOutput | PutRemediationExceptionsCommandOutput | PutResourceConfigCommandOutput | PutRetentionConfigurationCommandOutput | PutStoredQueryCommandOutput | SelectAggregateResourceConfigCommandOutput | SelectResourceConfigCommandOutput | StartConfigRulesEvaluationCommandOutput | StartConfigurationRecorderCommandOutput | StartRemediationExecutionCommandOutput | StopConfigurationRecorderCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput;
99
100
  export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__HttpHandlerOptions>> {
100
101
  /**
101
102
  * The HTTP handler to use. Fetch in browser and Https in Nodejs.
@@ -0,0 +1,41 @@
1
+ import { Command as $Command } from "@aws-sdk/smithy-client";
2
+ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
3
+ import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
4
+ import { ListConformancePackComplianceScoresRequest, ListConformancePackComplianceScoresResponse } from "../models/models_0";
5
+ export interface ListConformancePackComplianceScoresCommandInput extends ListConformancePackComplianceScoresRequest {
6
+ }
7
+ export interface ListConformancePackComplianceScoresCommandOutput extends ListConformancePackComplianceScoresResponse, __MetadataBearer {
8
+ }
9
+ /**
10
+ * <p>Returns a list of conformance pack compliance scores.
11
+ * A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack.
12
+ * This metric provides you with a high-level view of the compliance state of your conformance packs, and can be used to identify, investigate, and understand
13
+ * the level of compliance in your conformance packs.</p>
14
+ * <note>
15
+ * <p>Conformance packs with no evaluation results will have a compliance score of <code>INSUFFICIENT_DATA</code>.</p>
16
+ * </note>
17
+ * @example
18
+ * Use a bare-bones client and the command you need to make an API call.
19
+ * ```javascript
20
+ * import { ConfigServiceClient, ListConformancePackComplianceScoresCommand } from "@aws-sdk/client-config-service"; // ES Modules import
21
+ * // const { ConfigServiceClient, ListConformancePackComplianceScoresCommand } = require("@aws-sdk/client-config-service"); // CommonJS import
22
+ * const client = new ConfigServiceClient(config);
23
+ * const command = new ListConformancePackComplianceScoresCommand(input);
24
+ * const response = await client.send(command);
25
+ * ```
26
+ *
27
+ * @see {@link ListConformancePackComplianceScoresCommandInput} for command's `input` shape.
28
+ * @see {@link ListConformancePackComplianceScoresCommandOutput} for command's `response` shape.
29
+ * @see {@link ConfigServiceClientResolvedConfig | config} for ConfigServiceClient's `config` shape.
30
+ *
31
+ */
32
+ export declare class ListConformancePackComplianceScoresCommand extends $Command<ListConformancePackComplianceScoresCommandInput, ListConformancePackComplianceScoresCommandOutput, ConfigServiceClientResolvedConfig> {
33
+ readonly input: ListConformancePackComplianceScoresCommandInput;
34
+ constructor(input: ListConformancePackComplianceScoresCommandInput);
35
+ /**
36
+ * @internal
37
+ */
38
+ resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ConfigServiceClientResolvedConfig, options?: __HttpHandlerOptions): Handler<ListConformancePackComplianceScoresCommandInput, ListConformancePackComplianceScoresCommandOutput>;
39
+ private serialize;
40
+ private deserialize;
41
+ }
@@ -7,23 +7,33 @@ export interface PutConfigRuleCommandInput extends PutConfigRuleRequest {
7
7
  export interface PutConfigRuleCommandOutput extends __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Adds or updates an Config rule for evaluating whether your
11
- * Amazon Web Services resources comply with your desired configurations.</p>
12
- * <p>You can use this action for Config custom rules and Config
13
- * managed rules. A Config custom rule is a rule that you
14
- * develop and maintain. An Config managed rule is a customizable,
15
- * predefined rule that Config provides.</p>
16
- * <p>If you are adding a new Config custom rule, you must first
17
- * create the Lambda function that the rule invokes to evaluate
18
- * your resources. When you use the <code>PutConfigRule</code> action
19
- * to add the rule to Config, you must specify the Amazon Resource
20
- * Name (ARN) that Lambda assigns to the function. Specify the ARN
21
- * for the <code>SourceIdentifier</code> key. This key is part of the
22
- * <code>Source</code> object, which is part of the
23
- * <code>ConfigRule</code> object. </p>
24
- * <p>If you are adding an Config managed rule, specify the
25
- * rule's identifier for the <code>SourceIdentifier</code> key. To
26
- * reference Config managed rule identifiers, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html">About Config managed rules</a>.</p>
10
+ * <p>Adds or updates an Config rule to evaluate if your
11
+ * Amazon Web Services resources comply with your desired configurations. For information on how many Config rules you can have per account,
12
+ * see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
13
+ * <b>Service Limits</b>
14
+ * </a> in the <i>Config Developer Guide</i>.</p>
15
+ *
16
+ * <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
17
+ * You can use <code>PutConfigRule</code> to create both Config custom rules and Config managed rules.</p>
18
+ *
19
+ * <p>Custom rules are rules that you can create using either Guard or Lambda functions.
20
+ * Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
21
+ * Repository</a>) is a policy-as-code language that allows you to write policies that
22
+ * are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
23
+ * evaluate a custom rule. If you are adding a new Custom Lambda rule,
24
+ * you first need to create an Lambda function that the rule invokes to evaluate
25
+ * your resources. When you use <code>PutConfigRule</code> to add a Custom Lambda rule to Config, you must specify the Amazon Resource
26
+ * Name (ARN) that Lambda assigns to the function. You specify the ARN
27
+ * in the <code>SourceIdentifier</code> key. This key is part of the
28
+ * <code>Source</code> object, which is part of the
29
+ * <code>ConfigRule</code> object. </p>
30
+ *
31
+ * <p>Managed rules are predefined,
32
+ * customizable rules created by Config. For a list of managed rules, see
33
+ * <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
34
+ * Managed Rules</a>. If you are adding an Config managed rule, you must specify the
35
+ * rule's identifier for the <code>SourceIdentifier</code> key.</p>
36
+ *
27
37
  * <p>For any new rule that you add, specify the
28
38
  * <code>ConfigRuleName</code> in the <code>ConfigRule</code>
29
39
  * object. Do not specify the <code>ConfigRuleArn</code> or the
@@ -33,10 +43,6 @@ export interface PutConfigRuleCommandOutput extends __MetadataBearer {
33
43
  * <code>ConfigRuleId</code>, or <code>ConfigRuleArn</code> in the
34
44
  * <code>ConfigRule</code> data type that you use in this
35
45
  * request.</p>
36
- * <p>For information on how many Config rules you can have per account,
37
- * see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
38
- * <b>Service Limits</b>
39
- * </a> in the Config Developer Guide.</p>
40
46
  *
41
47
  * <p>For more information about developing and using Config
42
48
  * rules, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html">Evaluating Amazon Web Services resource Configurations with Config</a>
@@ -21,7 +21,7 @@ export interface PutConfigurationAggregatorCommandOutput extends PutConfiguratio
21
21
  * <p>If your source type is an organization, you must be signed in to the management account or a registered delegated administrator and all the features must be enabled in your organization.
22
22
  * If the caller is a management account, Config calls <code>EnableAwsServiceAccess</code> API to enable integration between Config and Organizations.
23
23
  * If the caller is a registered delegated administrator, Config calls <code>ListDelegatedAdministrators</code> API to verify whether the caller is a valid delegated administrator.</p>
24
- * <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the Config developer guide. </p>
24
+ * <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the <i>Config developer guide</i>. </p>
25
25
  * </note>
26
26
  * @example
27
27
  * Use a bare-bones client and the command you need to make an API call.
@@ -1,7 +1,8 @@
1
1
  import { Command as $Command } from "@aws-sdk/smithy-client";
2
2
  import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
3
3
  import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
4
- import { PutConformancePackRequest, PutConformancePackResponse } from "../models/models_0";
4
+ import { PutConformancePackRequest } from "../models/models_0";
5
+ import { PutConformancePackResponse } from "../models/models_1";
5
6
  export interface PutConformancePackCommandInput extends PutConformancePackRequest {
6
7
  }
7
8
  export interface PutConformancePackCommandOutput extends PutConformancePackResponse, __MetadataBearer {
@@ -12,8 +13,8 @@ export interface PutConformancePackCommandOutput extends PutConformancePackRespo
12
13
  * see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
13
14
  * <b>Service Limits</b>
14
15
  * </a> in the Config Developer Guide.</p>
15
- * <p>This API creates a service linked role <code>AWSServiceRoleForConfigConforms</code> in your account.
16
- * The service linked role is created only when the role does not exist in your account. </p>
16
+ * <p>This API creates a service-linked role <code>AWSServiceRoleForConfigConforms</code> in your account.
17
+ * The service-linked role is created only when the role does not exist in your account. </p>
17
18
  * <note>
18
19
  * <p>You must specify either the <code>TemplateS3Uri</code> or the <code>TemplateBody</code> parameter, but not both.
19
20
  * If you provide both Config uses the <code>TemplateS3Uri</code> parameter and ignores the <code>TemplateBody</code> parameter.</p>
@@ -1,7 +1,7 @@
1
1
  import { Command as $Command } from "@aws-sdk/smithy-client";
2
2
  import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
3
3
  import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
4
- import { PutDeliveryChannelRequest } from "../models/models_0";
4
+ import { PutDeliveryChannelRequest } from "../models/models_1";
5
5
  export interface PutDeliveryChannelCommandInput extends PutDeliveryChannelRequest {
6
6
  }
7
7
  export interface PutDeliveryChannelCommandOutput extends __MetadataBearer {
@@ -1,7 +1,7 @@
1
1
  import { Command as $Command } from "@aws-sdk/smithy-client";
2
2
  import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
3
3
  import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
4
- import { PutEvaluationsRequest, PutEvaluationsResponse } from "../models/models_0";
4
+ import { PutEvaluationsRequest, PutEvaluationsResponse } from "../models/models_1";
5
5
  export interface PutEvaluationsCommandInput extends PutEvaluationsRequest {
6
6
  }
7
7
  export interface PutEvaluationsCommandOutput extends PutEvaluationsResponse, __MetadataBearer {
@@ -1,7 +1,7 @@
1
1
  import { Command as $Command } from "@aws-sdk/smithy-client";
2
2
  import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
3
3
  import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
4
- import { PutExternalEvaluationRequest, PutExternalEvaluationResponse } from "../models/models_0";
4
+ import { PutExternalEvaluationRequest, PutExternalEvaluationResponse } from "../models/models_1";
5
5
  export interface PutExternalEvaluationCommandInput extends PutExternalEvaluationRequest {
6
6
  }
7
7
  export interface PutExternalEvaluationCommandOutput extends PutExternalEvaluationResponse, __MetadataBearer {
@@ -7,29 +7,42 @@ export interface PutOrganizationConfigRuleCommandInput extends PutOrganizationCo
7
7
  export interface PutOrganizationConfigRuleCommandOutput extends PutOrganizationConfigRuleResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Adds or updates organization Config rule for your entire organization evaluating whether your Amazon Web Services resources comply with your
10
+ * <p>Adds or updates an Config rule for your entire organization to evaluate if your Amazon Web Services resources comply with your
11
11
  * desired configurations. For information on how many organization Config rules you can have per account,
12
12
  * see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
13
13
  * <b>Service Limits</b>
14
- * </a> in the Config Developer Guide.</p>
14
+ * </a> in the <i>Config Developer Guide</i>.</p>
15
15
  * <p> Only a master account and a delegated administrator can create or update an organization Config rule.
16
16
  * When calling this API with a delegated administrator, you must ensure Organizations
17
17
  * <code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
18
- * <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service linked
18
+ * <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service-linked
19
19
  * role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
20
- * The service linked role is created only when the role does not exist in the caller account.
20
+ * The service-linked role is created only when the role does not exist in the caller account.
21
21
  * Config verifies the existence of role with <code>GetRole</code> action.</p>
22
22
  * <p>To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
23
23
  * <code>register-delegated-administrator</code> for <code>config-multiaccountsetup.amazonaws.com</code>. </p>
24
- * <p>You can use this action to create both Config custom rules and Config managed rules.
25
- * If you are adding a new Config custom rule, you must first create Lambda function in the master account or a delegated
26
- * administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed-account that can be assumed by the Lambda function.
27
- * When you use the <code>PutOrganizationConfigRule</code> action to add the rule to Config, you must
28
- * specify the Amazon Resource Name (ARN) that Lambda assigns to the function.
29
- * If you are adding an Config managed rule, specify the rule's identifier for the <code>RuleIdentifier</code> key.</p>
24
+ *
25
+ * <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
26
+ * You can use <code>PutOrganizationConfigRule</code> to create both Config custom rules and Config managed rules.</p>
27
+ *
28
+ * <p>Custom rules are rules that you can create using either Guard or Lambda functions.
29
+ * Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
30
+ * Repository</a>) is a policy-as-code language that allows you to write policies that
31
+ * are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
32
+ * evaluate a custom rule. If you are adding a new Custom Lambda rule, you first need to create an Lambda function in the master account or a delegated
33
+ * administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed account that can be assumed by the Lambda function.
34
+ * When you use <code>PutOrganizationConfigRule</code> to add a Custom Lambda rule to Config, you must
35
+ * specify the Amazon Resource Name (ARN) that Lambda assigns to the function.</p>
36
+ *
37
+ * <p>Managed rules are predefined,
38
+ * customizable rules created by Config. For a list of managed rules, see
39
+ * <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
40
+ * Managed Rules</a>. If you are adding an Config managed rule, you must specify the rule's identifier for the <code>RuleIdentifier</code> key.</p>
41
+ *
42
+ *
30
43
  * <note>
31
44
  * <p>Prerequisite: Ensure you call <code>EnableAllFeatures</code> API to enable all features in an organization.</p>
32
- * <p>Specify either <code>OrganizationCustomRuleMetadata</code> or <code>OrganizationManagedRuleMetadata</code>.</p>
45
+ * <p>Make sure to specify one of either <code>OrganizationCustomPolicyRuleMetadata</code> for Custom Policy rules, <code>OrganizationCustomRuleMetadata</code> for Custom Lambda rules, or <code>OrganizationManagedRuleMetadata</code> for managed rules.</p>
33
46
  * </note>
34
47
  * @example
35
48
  * Use a bare-bones client and the command you need to make an API call.
@@ -16,8 +16,8 @@ export interface PutOrganizationConformancePackCommandOutput extends PutOrganiza
16
16
  * <code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
17
17
  * <p>This API enables organization service access for <code>config-multiaccountsetup.amazonaws.com</code>
18
18
  * through the <code>EnableAWSServiceAccess</code> action and creates a
19
- * service linked role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
20
- * The service linked role is created only when the role does not exist in the caller account.
19
+ * service-linked role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
20
+ * The service-linked role is created only when the role does not exist in the caller account.
21
21
  * To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
22
22
  * <code>register-delegate-admin</code> for <code>config-multiaccountsetup.amazonaws.com</code>.</p>
23
23
  *
@@ -11,7 +11,7 @@ export interface SelectResourceConfigCommandOutput extends SelectResourceConfigR
11
11
  * <p>For more information about query components, see the
12
12
  * <a href="https://docs.aws.amazon.com/config/latest/developerguide/query-components.html">
13
13
  * <b>Query Components</b>
14
- * </a> section in the Config Developer Guide.</p>
14
+ * </a> section in the <i>Config Developer Guide</i>.</p>
15
15
  * @example
16
16
  * Use a bare-bones client and the command you need to make an API call.
17
17
  * ```javascript
@@ -60,6 +60,7 @@ export * from "./GetOrganizationCustomRulePolicyCommand";
60
60
  export * from "./GetResourceConfigHistoryCommand";
61
61
  export * from "./GetStoredQueryCommand";
62
62
  export * from "./ListAggregateDiscoveredResourcesCommand";
63
+ export * from "./ListConformancePackComplianceScoresCommand";
63
64
  export * from "./ListDiscoveredResourcesCommand";
64
65
  export * from "./ListStoredQueriesCommand";
65
66
  export * from "./ListTagsForResourceCommand";