@aws-sdk/client-config-service 3.137.0 → 3.142.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +30 -0
- package/README.md +1 -1
- package/dist-cjs/ConfigService.js +15 -0
- package/dist-cjs/commands/ListConformancePackComplianceScoresCommand.js +36 -0
- package/dist-cjs/commands/PutConformancePackCommand.js +2 -1
- package/dist-cjs/commands/PutDeliveryChannelCommand.js +2 -2
- package/dist-cjs/commands/PutEvaluationsCommand.js +3 -3
- package/dist-cjs/commands/PutExternalEvaluationCommand.js +3 -3
- package/dist-cjs/commands/index.js +1 -0
- package/dist-cjs/models/models_0.js +30 -29
- package/dist-cjs/models/models_1.js +25 -1
- package/dist-cjs/pagination/ListConformancePackComplianceScoresPaginator.js +36 -0
- package/dist-cjs/pagination/index.js +1 -0
- package/dist-cjs/protocols/Aws_json1_1.js +550 -828
- package/dist-es/ConfigService.js +15 -0
- package/dist-es/commands/ListConformancePackComplianceScoresCommand.js +39 -0
- package/dist-es/commands/PutConformancePackCommand.js +2 -1
- package/dist-es/commands/PutDeliveryChannelCommand.js +1 -1
- package/dist-es/commands/PutEvaluationsCommand.js +1 -1
- package/dist-es/commands/PutExternalEvaluationCommand.js +1 -1
- package/dist-es/commands/index.js +1 -0
- package/dist-es/models/models_0.js +13 -6
- package/dist-es/models/models_1.js +6 -0
- package/dist-es/pagination/ListConformancePackComplianceScoresPaginator.js +75 -0
- package/dist-es/pagination/index.js +1 -0
- package/dist-es/protocols/Aws_json1_1.js +820 -826
- package/dist-types/ConfigService.d.ts +70 -38
- package/dist-types/ConfigServiceClient.d.ts +3 -2
- package/dist-types/commands/ListConformancePackComplianceScoresCommand.d.ts +41 -0
- package/dist-types/commands/PutConfigRuleCommand.d.ts +27 -21
- package/dist-types/commands/PutConfigurationAggregatorCommand.d.ts +1 -1
- package/dist-types/commands/PutConformancePackCommand.d.ts +4 -3
- package/dist-types/commands/PutDeliveryChannelCommand.d.ts +1 -1
- package/dist-types/commands/PutEvaluationsCommand.d.ts +1 -1
- package/dist-types/commands/PutExternalEvaluationCommand.d.ts +1 -1
- package/dist-types/commands/PutOrganizationConfigRuleCommand.d.ts +24 -11
- package/dist-types/commands/PutOrganizationConformancePackCommand.d.ts +2 -2
- package/dist-types/commands/SelectResourceConfigCommand.d.ts +1 -1
- package/dist-types/commands/index.d.ts +1 -0
- package/dist-types/models/models_0.d.ts +114 -117
- package/dist-types/models/models_1.d.ts +104 -5
- package/dist-types/pagination/ListConformancePackComplianceScoresPaginator.d.ts +4 -0
- package/dist-types/pagination/index.d.ts +1 -0
- package/dist-types/protocols/Aws_json1_1.d.ts +3 -0
- package/dist-types/ts3.4/ConfigService.d.ts +5 -0
- package/dist-types/ts3.4/ConfigServiceClient.d.ts +3 -2
- package/dist-types/ts3.4/commands/ListConformancePackComplianceScoresCommand.d.ts +17 -0
- package/dist-types/ts3.4/commands/PutConformancePackCommand.d.ts +2 -1
- package/dist-types/ts3.4/commands/PutDeliveryChannelCommand.d.ts +1 -1
- package/dist-types/ts3.4/commands/PutEvaluationsCommand.d.ts +1 -1
- package/dist-types/ts3.4/commands/PutExternalEvaluationCommand.d.ts +1 -1
- package/dist-types/ts3.4/commands/index.d.ts +1 -0
- package/dist-types/ts3.4/models/models_0.d.ts +47 -43
- package/dist-types/ts3.4/models/models_1.d.ts +44 -1
- package/dist-types/ts3.4/pagination/ListConformancePackComplianceScoresPaginator.d.ts +4 -0
- package/dist-types/ts3.4/pagination/index.d.ts +1 -0
- package/dist-types/ts3.4/protocols/Aws_json1_1.d.ts +3 -0
- package/package.json +6 -6
|
@@ -61,6 +61,7 @@ import { GetOrganizationCustomRulePolicyCommandInput, GetOrganizationCustomRuleP
|
|
|
61
61
|
import { GetResourceConfigHistoryCommandInput, GetResourceConfigHistoryCommandOutput } from "./commands/GetResourceConfigHistoryCommand";
|
|
62
62
|
import { GetStoredQueryCommandInput, GetStoredQueryCommandOutput } from "./commands/GetStoredQueryCommand";
|
|
63
63
|
import { ListAggregateDiscoveredResourcesCommandInput, ListAggregateDiscoveredResourcesCommandOutput } from "./commands/ListAggregateDiscoveredResourcesCommand";
|
|
64
|
+
import { ListConformancePackComplianceScoresCommandInput, ListConformancePackComplianceScoresCommandOutput } from "./commands/ListConformancePackComplianceScoresCommand";
|
|
64
65
|
import { ListDiscoveredResourcesCommandInput, ListDiscoveredResourcesCommandOutput } from "./commands/ListDiscoveredResourcesCommand";
|
|
65
66
|
import { ListStoredQueriesCommandInput, ListStoredQueriesCommandOutput } from "./commands/ListStoredQueriesCommand";
|
|
66
67
|
import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
|
|
@@ -875,6 +876,18 @@ export declare class ConfigService extends ConfigServiceClient {
|
|
|
875
876
|
listAggregateDiscoveredResources(args: ListAggregateDiscoveredResourcesCommandInput, options?: __HttpHandlerOptions): Promise<ListAggregateDiscoveredResourcesCommandOutput>;
|
|
876
877
|
listAggregateDiscoveredResources(args: ListAggregateDiscoveredResourcesCommandInput, cb: (err: any, data?: ListAggregateDiscoveredResourcesCommandOutput) => void): void;
|
|
877
878
|
listAggregateDiscoveredResources(args: ListAggregateDiscoveredResourcesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAggregateDiscoveredResourcesCommandOutput) => void): void;
|
|
879
|
+
/**
|
|
880
|
+
* <p>Returns a list of conformance pack compliance scores.
|
|
881
|
+
* A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack.
|
|
882
|
+
* This metric provides you with a high-level view of the compliance state of your conformance packs, and can be used to identify, investigate, and understand
|
|
883
|
+
* the level of compliance in your conformance packs.</p>
|
|
884
|
+
* <note>
|
|
885
|
+
* <p>Conformance packs with no evaluation results will have a compliance score of <code>INSUFFICIENT_DATA</code>.</p>
|
|
886
|
+
* </note>
|
|
887
|
+
*/
|
|
888
|
+
listConformancePackComplianceScores(args: ListConformancePackComplianceScoresCommandInput, options?: __HttpHandlerOptions): Promise<ListConformancePackComplianceScoresCommandOutput>;
|
|
889
|
+
listConformancePackComplianceScores(args: ListConformancePackComplianceScoresCommandInput, cb: (err: any, data?: ListConformancePackComplianceScoresCommandOutput) => void): void;
|
|
890
|
+
listConformancePackComplianceScores(args: ListConformancePackComplianceScoresCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListConformancePackComplianceScoresCommandOutput) => void): void;
|
|
878
891
|
/**
|
|
879
892
|
* <p>Accepts a resource type and returns a list of resource
|
|
880
893
|
* identifiers for the resources of that type. A resource identifier
|
|
@@ -917,23 +930,33 @@ export declare class ConfigService extends ConfigServiceClient {
|
|
|
917
930
|
putAggregationAuthorization(args: PutAggregationAuthorizationCommandInput, cb: (err: any, data?: PutAggregationAuthorizationCommandOutput) => void): void;
|
|
918
931
|
putAggregationAuthorization(args: PutAggregationAuthorizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutAggregationAuthorizationCommandOutput) => void): void;
|
|
919
932
|
/**
|
|
920
|
-
* <p>Adds or updates an Config rule
|
|
921
|
-
* Amazon Web Services resources comply with your desired configurations
|
|
922
|
-
*
|
|
923
|
-
*
|
|
924
|
-
*
|
|
925
|
-
*
|
|
926
|
-
* <p>
|
|
927
|
-
* create
|
|
928
|
-
*
|
|
929
|
-
*
|
|
930
|
-
*
|
|
931
|
-
*
|
|
932
|
-
*
|
|
933
|
-
*
|
|
934
|
-
*
|
|
935
|
-
*
|
|
936
|
-
*
|
|
933
|
+
* <p>Adds or updates an Config rule to evaluate if your
|
|
934
|
+
* Amazon Web Services resources comply with your desired configurations. For information on how many Config rules you can have per account,
|
|
935
|
+
* see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
|
|
936
|
+
* <b>Service Limits</b>
|
|
937
|
+
* </a> in the <i>Config Developer Guide</i>.</p>
|
|
938
|
+
*
|
|
939
|
+
* <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
|
|
940
|
+
* You can use <code>PutConfigRule</code> to create both Config custom rules and Config managed rules.</p>
|
|
941
|
+
*
|
|
942
|
+
* <p>Custom rules are rules that you can create using either Guard or Lambda functions.
|
|
943
|
+
* Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
|
|
944
|
+
* Repository</a>) is a policy-as-code language that allows you to write policies that
|
|
945
|
+
* are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
|
|
946
|
+
* evaluate a custom rule. If you are adding a new Custom Lambda rule,
|
|
947
|
+
* you first need to create an Lambda function that the rule invokes to evaluate
|
|
948
|
+
* your resources. When you use <code>PutConfigRule</code> to add a Custom Lambda rule to Config, you must specify the Amazon Resource
|
|
949
|
+
* Name (ARN) that Lambda assigns to the function. You specify the ARN
|
|
950
|
+
* in the <code>SourceIdentifier</code> key. This key is part of the
|
|
951
|
+
* <code>Source</code> object, which is part of the
|
|
952
|
+
* <code>ConfigRule</code> object. </p>
|
|
953
|
+
*
|
|
954
|
+
* <p>Managed rules are predefined,
|
|
955
|
+
* customizable rules created by Config. For a list of managed rules, see
|
|
956
|
+
* <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
|
|
957
|
+
* Managed Rules</a>. If you are adding an Config managed rule, you must specify the
|
|
958
|
+
* rule's identifier for the <code>SourceIdentifier</code> key.</p>
|
|
959
|
+
*
|
|
937
960
|
* <p>For any new rule that you add, specify the
|
|
938
961
|
* <code>ConfigRuleName</code> in the <code>ConfigRule</code>
|
|
939
962
|
* object. Do not specify the <code>ConfigRuleArn</code> or the
|
|
@@ -943,10 +966,6 @@ export declare class ConfigService extends ConfigServiceClient {
|
|
|
943
966
|
* <code>ConfigRuleId</code>, or <code>ConfigRuleArn</code> in the
|
|
944
967
|
* <code>ConfigRule</code> data type that you use in this
|
|
945
968
|
* request.</p>
|
|
946
|
-
* <p>For information on how many Config rules you can have per account,
|
|
947
|
-
* see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
|
|
948
|
-
* <b>Service Limits</b>
|
|
949
|
-
* </a> in the Config Developer Guide.</p>
|
|
950
969
|
*
|
|
951
970
|
* <p>For more information about developing and using Config
|
|
952
971
|
* rules, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html">Evaluating Amazon Web Services resource Configurations with Config</a>
|
|
@@ -970,7 +989,7 @@ export declare class ConfigService extends ConfigServiceClient {
|
|
|
970
989
|
* <p>If your source type is an organization, you must be signed in to the management account or a registered delegated administrator and all the features must be enabled in your organization.
|
|
971
990
|
* If the caller is a management account, Config calls <code>EnableAwsServiceAccess</code> API to enable integration between Config and Organizations.
|
|
972
991
|
* If the caller is a registered delegated administrator, Config calls <code>ListDelegatedAdministrators</code> API to verify whether the caller is a valid delegated administrator.</p>
|
|
973
|
-
* <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the Config developer guide
|
|
992
|
+
* <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the <i>Config developer guide</i>. </p>
|
|
974
993
|
* </note>
|
|
975
994
|
*/
|
|
976
995
|
putConfigurationAggregator(args: PutConfigurationAggregatorCommandInput, options?: __HttpHandlerOptions): Promise<PutConfigurationAggregatorCommandOutput>;
|
|
@@ -1001,8 +1020,8 @@ export declare class ConfigService extends ConfigServiceClient {
|
|
|
1001
1020
|
* see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
|
|
1002
1021
|
* <b>Service Limits</b>
|
|
1003
1022
|
* </a> in the Config Developer Guide.</p>
|
|
1004
|
-
* <p>This API creates a service
|
|
1005
|
-
* The service
|
|
1023
|
+
* <p>This API creates a service-linked role <code>AWSServiceRoleForConfigConforms</code> in your account.
|
|
1024
|
+
* The service-linked role is created only when the role does not exist in your account. </p>
|
|
1006
1025
|
* <note>
|
|
1007
1026
|
* <p>You must specify either the <code>TemplateS3Uri</code> or the <code>TemplateBody</code> parameter, but not both.
|
|
1008
1027
|
* If you provide both Config uses the <code>TemplateS3Uri</code> parameter and ignores the <code>TemplateBody</code> parameter.</p>
|
|
@@ -1049,29 +1068,42 @@ export declare class ConfigService extends ConfigServiceClient {
|
|
|
1049
1068
|
putExternalEvaluation(args: PutExternalEvaluationCommandInput, cb: (err: any, data?: PutExternalEvaluationCommandOutput) => void): void;
|
|
1050
1069
|
putExternalEvaluation(args: PutExternalEvaluationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutExternalEvaluationCommandOutput) => void): void;
|
|
1051
1070
|
/**
|
|
1052
|
-
* <p>Adds or updates
|
|
1071
|
+
* <p>Adds or updates an Config rule for your entire organization to evaluate if your Amazon Web Services resources comply with your
|
|
1053
1072
|
* desired configurations. For information on how many organization Config rules you can have per account,
|
|
1054
1073
|
* see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
|
|
1055
1074
|
* <b>Service Limits</b>
|
|
1056
|
-
* </a> in the Config Developer Guide
|
|
1075
|
+
* </a> in the <i>Config Developer Guide</i>.</p>
|
|
1057
1076
|
* <p> Only a master account and a delegated administrator can create or update an organization Config rule.
|
|
1058
1077
|
* When calling this API with a delegated administrator, you must ensure Organizations
|
|
1059
1078
|
* <code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
|
|
1060
|
-
* <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service
|
|
1079
|
+
* <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service-linked
|
|
1061
1080
|
* role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
|
|
1062
|
-
* The service
|
|
1081
|
+
* The service-linked role is created only when the role does not exist in the caller account.
|
|
1063
1082
|
* Config verifies the existence of role with <code>GetRole</code> action.</p>
|
|
1064
1083
|
* <p>To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
|
|
1065
1084
|
* <code>register-delegated-administrator</code> for <code>config-multiaccountsetup.amazonaws.com</code>. </p>
|
|
1066
|
-
*
|
|
1067
|
-
*
|
|
1068
|
-
*
|
|
1069
|
-
*
|
|
1070
|
-
*
|
|
1071
|
-
*
|
|
1085
|
+
*
|
|
1086
|
+
* <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
|
|
1087
|
+
* You can use <code>PutOrganizationConfigRule</code> to create both Config custom rules and Config managed rules.</p>
|
|
1088
|
+
*
|
|
1089
|
+
* <p>Custom rules are rules that you can create using either Guard or Lambda functions.
|
|
1090
|
+
* Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
|
|
1091
|
+
* Repository</a>) is a policy-as-code language that allows you to write policies that
|
|
1092
|
+
* are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
|
|
1093
|
+
* evaluate a custom rule. If you are adding a new Custom Lambda rule, you first need to create an Lambda function in the master account or a delegated
|
|
1094
|
+
* administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed account that can be assumed by the Lambda function.
|
|
1095
|
+
* When you use <code>PutOrganizationConfigRule</code> to add a Custom Lambda rule to Config, you must
|
|
1096
|
+
* specify the Amazon Resource Name (ARN) that Lambda assigns to the function.</p>
|
|
1097
|
+
*
|
|
1098
|
+
* <p>Managed rules are predefined,
|
|
1099
|
+
* customizable rules created by Config. For a list of managed rules, see
|
|
1100
|
+
* <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
|
|
1101
|
+
* Managed Rules</a>. If you are adding an Config managed rule, you must specify the rule's identifier for the <code>RuleIdentifier</code> key.</p>
|
|
1102
|
+
*
|
|
1103
|
+
*
|
|
1072
1104
|
* <note>
|
|
1073
1105
|
* <p>Prerequisite: Ensure you call <code>EnableAllFeatures</code> API to enable all features in an organization.</p>
|
|
1074
|
-
* <p>
|
|
1106
|
+
* <p>Make sure to specify one of either <code>OrganizationCustomPolicyRuleMetadata</code> for Custom Policy rules, <code>OrganizationCustomRuleMetadata</code> for Custom Lambda rules, or <code>OrganizationManagedRuleMetadata</code> for managed rules.</p>
|
|
1075
1107
|
* </note>
|
|
1076
1108
|
*/
|
|
1077
1109
|
putOrganizationConfigRule(args: PutOrganizationConfigRuleCommandInput, options?: __HttpHandlerOptions): Promise<PutOrganizationConfigRuleCommandOutput>;
|
|
@@ -1087,8 +1119,8 @@ export declare class ConfigService extends ConfigServiceClient {
|
|
|
1087
1119
|
* <code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
|
|
1088
1120
|
* <p>This API enables organization service access for <code>config-multiaccountsetup.amazonaws.com</code>
|
|
1089
1121
|
* through the <code>EnableAWSServiceAccess</code> action and creates a
|
|
1090
|
-
* service
|
|
1091
|
-
* The service
|
|
1122
|
+
* service-linked role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
|
|
1123
|
+
* The service-linked role is created only when the role does not exist in the caller account.
|
|
1092
1124
|
* To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
|
|
1093
1125
|
* <code>register-delegate-admin</code> for <code>config-multiaccountsetup.amazonaws.com</code>.</p>
|
|
1094
1126
|
*
|
|
@@ -1198,7 +1230,7 @@ export declare class ConfigService extends ConfigServiceClient {
|
|
|
1198
1230
|
* <p>For more information about query components, see the
|
|
1199
1231
|
* <a href="https://docs.aws.amazon.com/config/latest/developerguide/query-components.html">
|
|
1200
1232
|
* <b>Query Components</b>
|
|
1201
|
-
* </a> section in the Config Developer Guide
|
|
1233
|
+
* </a> section in the <i>Config Developer Guide</i>.</p>
|
|
1202
1234
|
*/
|
|
1203
1235
|
selectResourceConfig(args: SelectResourceConfigCommandInput, options?: __HttpHandlerOptions): Promise<SelectResourceConfigCommandOutput>;
|
|
1204
1236
|
selectResourceConfig(args: SelectResourceConfigCommandInput, cb: (err: any, data?: SelectResourceConfigCommandOutput) => void): void;
|
|
@@ -68,6 +68,7 @@ import { GetOrganizationCustomRulePolicyCommandInput, GetOrganizationCustomRuleP
|
|
|
68
68
|
import { GetResourceConfigHistoryCommandInput, GetResourceConfigHistoryCommandOutput } from "./commands/GetResourceConfigHistoryCommand";
|
|
69
69
|
import { GetStoredQueryCommandInput, GetStoredQueryCommandOutput } from "./commands/GetStoredQueryCommand";
|
|
70
70
|
import { ListAggregateDiscoveredResourcesCommandInput, ListAggregateDiscoveredResourcesCommandOutput } from "./commands/ListAggregateDiscoveredResourcesCommand";
|
|
71
|
+
import { ListConformancePackComplianceScoresCommandInput, ListConformancePackComplianceScoresCommandOutput } from "./commands/ListConformancePackComplianceScoresCommand";
|
|
71
72
|
import { ListDiscoveredResourcesCommandInput, ListDiscoveredResourcesCommandOutput } from "./commands/ListDiscoveredResourcesCommand";
|
|
72
73
|
import { ListStoredQueriesCommandInput, ListStoredQueriesCommandOutput } from "./commands/ListStoredQueriesCommand";
|
|
73
74
|
import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
|
|
@@ -94,8 +95,8 @@ import { StartRemediationExecutionCommandInput, StartRemediationExecutionCommand
|
|
|
94
95
|
import { StopConfigurationRecorderCommandInput, StopConfigurationRecorderCommandOutput } from "./commands/StopConfigurationRecorderCommand";
|
|
95
96
|
import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/TagResourceCommand";
|
|
96
97
|
import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
|
|
97
|
-
export declare type ServiceInputTypes = BatchGetAggregateResourceConfigCommandInput | BatchGetResourceConfigCommandInput | DeleteAggregationAuthorizationCommandInput | DeleteConfigRuleCommandInput | DeleteConfigurationAggregatorCommandInput | DeleteConfigurationRecorderCommandInput | DeleteConformancePackCommandInput | DeleteDeliveryChannelCommandInput | DeleteEvaluationResultsCommandInput | DeleteOrganizationConfigRuleCommandInput | DeleteOrganizationConformancePackCommandInput | DeletePendingAggregationRequestCommandInput | DeleteRemediationConfigurationCommandInput | DeleteRemediationExceptionsCommandInput | DeleteResourceConfigCommandInput | DeleteRetentionConfigurationCommandInput | DeleteStoredQueryCommandInput | DeliverConfigSnapshotCommandInput | DescribeAggregateComplianceByConfigRulesCommandInput | DescribeAggregateComplianceByConformancePacksCommandInput | DescribeAggregationAuthorizationsCommandInput | DescribeComplianceByConfigRuleCommandInput | DescribeComplianceByResourceCommandInput | DescribeConfigRuleEvaluationStatusCommandInput | DescribeConfigRulesCommandInput | DescribeConfigurationAggregatorSourcesStatusCommandInput | DescribeConfigurationAggregatorsCommandInput | DescribeConfigurationRecorderStatusCommandInput | DescribeConfigurationRecordersCommandInput | DescribeConformancePackComplianceCommandInput | DescribeConformancePackStatusCommandInput | DescribeConformancePacksCommandInput | DescribeDeliveryChannelStatusCommandInput | DescribeDeliveryChannelsCommandInput | DescribeOrganizationConfigRuleStatusesCommandInput | DescribeOrganizationConfigRulesCommandInput | DescribeOrganizationConformancePackStatusesCommandInput | DescribeOrganizationConformancePacksCommandInput | DescribePendingAggregationRequestsCommandInput | DescribeRemediationConfigurationsCommandInput | DescribeRemediationExceptionsCommandInput | DescribeRemediationExecutionStatusCommandInput | DescribeRetentionConfigurationsCommandInput | GetAggregateComplianceDetailsByConfigRuleCommandInput | GetAggregateConfigRuleComplianceSummaryCommandInput | GetAggregateConformancePackComplianceSummaryCommandInput | GetAggregateDiscoveredResourceCountsCommandInput | GetAggregateResourceConfigCommandInput | GetComplianceDetailsByConfigRuleCommandInput | GetComplianceDetailsByResourceCommandInput | GetComplianceSummaryByConfigRuleCommandInput | GetComplianceSummaryByResourceTypeCommandInput | GetConformancePackComplianceDetailsCommandInput | GetConformancePackComplianceSummaryCommandInput | GetCustomRulePolicyCommandInput | GetDiscoveredResourceCountsCommandInput | GetOrganizationConfigRuleDetailedStatusCommandInput | GetOrganizationConformancePackDetailedStatusCommandInput | GetOrganizationCustomRulePolicyCommandInput | GetResourceConfigHistoryCommandInput | GetStoredQueryCommandInput | ListAggregateDiscoveredResourcesCommandInput | ListDiscoveredResourcesCommandInput | ListStoredQueriesCommandInput | ListTagsForResourceCommandInput | PutAggregationAuthorizationCommandInput | PutConfigRuleCommandInput | PutConfigurationAggregatorCommandInput | PutConfigurationRecorderCommandInput | PutConformancePackCommandInput | PutDeliveryChannelCommandInput | PutEvaluationsCommandInput | PutExternalEvaluationCommandInput | PutOrganizationConfigRuleCommandInput | PutOrganizationConformancePackCommandInput | PutRemediationConfigurationsCommandInput | PutRemediationExceptionsCommandInput | PutResourceConfigCommandInput | PutRetentionConfigurationCommandInput | PutStoredQueryCommandInput | SelectAggregateResourceConfigCommandInput | SelectResourceConfigCommandInput | StartConfigRulesEvaluationCommandInput | StartConfigurationRecorderCommandInput | StartRemediationExecutionCommandInput | StopConfigurationRecorderCommandInput | TagResourceCommandInput | UntagResourceCommandInput;
|
|
98
|
-
export declare type ServiceOutputTypes = BatchGetAggregateResourceConfigCommandOutput | BatchGetResourceConfigCommandOutput | DeleteAggregationAuthorizationCommandOutput | DeleteConfigRuleCommandOutput | DeleteConfigurationAggregatorCommandOutput | DeleteConfigurationRecorderCommandOutput | DeleteConformancePackCommandOutput | DeleteDeliveryChannelCommandOutput | DeleteEvaluationResultsCommandOutput | DeleteOrganizationConfigRuleCommandOutput | DeleteOrganizationConformancePackCommandOutput | DeletePendingAggregationRequestCommandOutput | DeleteRemediationConfigurationCommandOutput | DeleteRemediationExceptionsCommandOutput | DeleteResourceConfigCommandOutput | DeleteRetentionConfigurationCommandOutput | DeleteStoredQueryCommandOutput | DeliverConfigSnapshotCommandOutput | DescribeAggregateComplianceByConfigRulesCommandOutput | DescribeAggregateComplianceByConformancePacksCommandOutput | DescribeAggregationAuthorizationsCommandOutput | DescribeComplianceByConfigRuleCommandOutput | DescribeComplianceByResourceCommandOutput | DescribeConfigRuleEvaluationStatusCommandOutput | DescribeConfigRulesCommandOutput | DescribeConfigurationAggregatorSourcesStatusCommandOutput | DescribeConfigurationAggregatorsCommandOutput | DescribeConfigurationRecorderStatusCommandOutput | DescribeConfigurationRecordersCommandOutput | DescribeConformancePackComplianceCommandOutput | DescribeConformancePackStatusCommandOutput | DescribeConformancePacksCommandOutput | DescribeDeliveryChannelStatusCommandOutput | DescribeDeliveryChannelsCommandOutput | DescribeOrganizationConfigRuleStatusesCommandOutput | DescribeOrganizationConfigRulesCommandOutput | DescribeOrganizationConformancePackStatusesCommandOutput | DescribeOrganizationConformancePacksCommandOutput | DescribePendingAggregationRequestsCommandOutput | DescribeRemediationConfigurationsCommandOutput | DescribeRemediationExceptionsCommandOutput | DescribeRemediationExecutionStatusCommandOutput | DescribeRetentionConfigurationsCommandOutput | GetAggregateComplianceDetailsByConfigRuleCommandOutput | GetAggregateConfigRuleComplianceSummaryCommandOutput | GetAggregateConformancePackComplianceSummaryCommandOutput | GetAggregateDiscoveredResourceCountsCommandOutput | GetAggregateResourceConfigCommandOutput | GetComplianceDetailsByConfigRuleCommandOutput | GetComplianceDetailsByResourceCommandOutput | GetComplianceSummaryByConfigRuleCommandOutput | GetComplianceSummaryByResourceTypeCommandOutput | GetConformancePackComplianceDetailsCommandOutput | GetConformancePackComplianceSummaryCommandOutput | GetCustomRulePolicyCommandOutput | GetDiscoveredResourceCountsCommandOutput | GetOrganizationConfigRuleDetailedStatusCommandOutput | GetOrganizationConformancePackDetailedStatusCommandOutput | GetOrganizationCustomRulePolicyCommandOutput | GetResourceConfigHistoryCommandOutput | GetStoredQueryCommandOutput | ListAggregateDiscoveredResourcesCommandOutput | ListDiscoveredResourcesCommandOutput | ListStoredQueriesCommandOutput | ListTagsForResourceCommandOutput | PutAggregationAuthorizationCommandOutput | PutConfigRuleCommandOutput | PutConfigurationAggregatorCommandOutput | PutConfigurationRecorderCommandOutput | PutConformancePackCommandOutput | PutDeliveryChannelCommandOutput | PutEvaluationsCommandOutput | PutExternalEvaluationCommandOutput | PutOrganizationConfigRuleCommandOutput | PutOrganizationConformancePackCommandOutput | PutRemediationConfigurationsCommandOutput | PutRemediationExceptionsCommandOutput | PutResourceConfigCommandOutput | PutRetentionConfigurationCommandOutput | PutStoredQueryCommandOutput | SelectAggregateResourceConfigCommandOutput | SelectResourceConfigCommandOutput | StartConfigRulesEvaluationCommandOutput | StartConfigurationRecorderCommandOutput | StartRemediationExecutionCommandOutput | StopConfigurationRecorderCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput;
|
|
98
|
+
export declare type ServiceInputTypes = BatchGetAggregateResourceConfigCommandInput | BatchGetResourceConfigCommandInput | DeleteAggregationAuthorizationCommandInput | DeleteConfigRuleCommandInput | DeleteConfigurationAggregatorCommandInput | DeleteConfigurationRecorderCommandInput | DeleteConformancePackCommandInput | DeleteDeliveryChannelCommandInput | DeleteEvaluationResultsCommandInput | DeleteOrganizationConfigRuleCommandInput | DeleteOrganizationConformancePackCommandInput | DeletePendingAggregationRequestCommandInput | DeleteRemediationConfigurationCommandInput | DeleteRemediationExceptionsCommandInput | DeleteResourceConfigCommandInput | DeleteRetentionConfigurationCommandInput | DeleteStoredQueryCommandInput | DeliverConfigSnapshotCommandInput | DescribeAggregateComplianceByConfigRulesCommandInput | DescribeAggregateComplianceByConformancePacksCommandInput | DescribeAggregationAuthorizationsCommandInput | DescribeComplianceByConfigRuleCommandInput | DescribeComplianceByResourceCommandInput | DescribeConfigRuleEvaluationStatusCommandInput | DescribeConfigRulesCommandInput | DescribeConfigurationAggregatorSourcesStatusCommandInput | DescribeConfigurationAggregatorsCommandInput | DescribeConfigurationRecorderStatusCommandInput | DescribeConfigurationRecordersCommandInput | DescribeConformancePackComplianceCommandInput | DescribeConformancePackStatusCommandInput | DescribeConformancePacksCommandInput | DescribeDeliveryChannelStatusCommandInput | DescribeDeliveryChannelsCommandInput | DescribeOrganizationConfigRuleStatusesCommandInput | DescribeOrganizationConfigRulesCommandInput | DescribeOrganizationConformancePackStatusesCommandInput | DescribeOrganizationConformancePacksCommandInput | DescribePendingAggregationRequestsCommandInput | DescribeRemediationConfigurationsCommandInput | DescribeRemediationExceptionsCommandInput | DescribeRemediationExecutionStatusCommandInput | DescribeRetentionConfigurationsCommandInput | GetAggregateComplianceDetailsByConfigRuleCommandInput | GetAggregateConfigRuleComplianceSummaryCommandInput | GetAggregateConformancePackComplianceSummaryCommandInput | GetAggregateDiscoveredResourceCountsCommandInput | GetAggregateResourceConfigCommandInput | GetComplianceDetailsByConfigRuleCommandInput | GetComplianceDetailsByResourceCommandInput | GetComplianceSummaryByConfigRuleCommandInput | GetComplianceSummaryByResourceTypeCommandInput | GetConformancePackComplianceDetailsCommandInput | GetConformancePackComplianceSummaryCommandInput | GetCustomRulePolicyCommandInput | GetDiscoveredResourceCountsCommandInput | GetOrganizationConfigRuleDetailedStatusCommandInput | GetOrganizationConformancePackDetailedStatusCommandInput | GetOrganizationCustomRulePolicyCommandInput | GetResourceConfigHistoryCommandInput | GetStoredQueryCommandInput | ListAggregateDiscoveredResourcesCommandInput | ListConformancePackComplianceScoresCommandInput | ListDiscoveredResourcesCommandInput | ListStoredQueriesCommandInput | ListTagsForResourceCommandInput | PutAggregationAuthorizationCommandInput | PutConfigRuleCommandInput | PutConfigurationAggregatorCommandInput | PutConfigurationRecorderCommandInput | PutConformancePackCommandInput | PutDeliveryChannelCommandInput | PutEvaluationsCommandInput | PutExternalEvaluationCommandInput | PutOrganizationConfigRuleCommandInput | PutOrganizationConformancePackCommandInput | PutRemediationConfigurationsCommandInput | PutRemediationExceptionsCommandInput | PutResourceConfigCommandInput | PutRetentionConfigurationCommandInput | PutStoredQueryCommandInput | SelectAggregateResourceConfigCommandInput | SelectResourceConfigCommandInput | StartConfigRulesEvaluationCommandInput | StartConfigurationRecorderCommandInput | StartRemediationExecutionCommandInput | StopConfigurationRecorderCommandInput | TagResourceCommandInput | UntagResourceCommandInput;
|
|
99
|
+
export declare type ServiceOutputTypes = BatchGetAggregateResourceConfigCommandOutput | BatchGetResourceConfigCommandOutput | DeleteAggregationAuthorizationCommandOutput | DeleteConfigRuleCommandOutput | DeleteConfigurationAggregatorCommandOutput | DeleteConfigurationRecorderCommandOutput | DeleteConformancePackCommandOutput | DeleteDeliveryChannelCommandOutput | DeleteEvaluationResultsCommandOutput | DeleteOrganizationConfigRuleCommandOutput | DeleteOrganizationConformancePackCommandOutput | DeletePendingAggregationRequestCommandOutput | DeleteRemediationConfigurationCommandOutput | DeleteRemediationExceptionsCommandOutput | DeleteResourceConfigCommandOutput | DeleteRetentionConfigurationCommandOutput | DeleteStoredQueryCommandOutput | DeliverConfigSnapshotCommandOutput | DescribeAggregateComplianceByConfigRulesCommandOutput | DescribeAggregateComplianceByConformancePacksCommandOutput | DescribeAggregationAuthorizationsCommandOutput | DescribeComplianceByConfigRuleCommandOutput | DescribeComplianceByResourceCommandOutput | DescribeConfigRuleEvaluationStatusCommandOutput | DescribeConfigRulesCommandOutput | DescribeConfigurationAggregatorSourcesStatusCommandOutput | DescribeConfigurationAggregatorsCommandOutput | DescribeConfigurationRecorderStatusCommandOutput | DescribeConfigurationRecordersCommandOutput | DescribeConformancePackComplianceCommandOutput | DescribeConformancePackStatusCommandOutput | DescribeConformancePacksCommandOutput | DescribeDeliveryChannelStatusCommandOutput | DescribeDeliveryChannelsCommandOutput | DescribeOrganizationConfigRuleStatusesCommandOutput | DescribeOrganizationConfigRulesCommandOutput | DescribeOrganizationConformancePackStatusesCommandOutput | DescribeOrganizationConformancePacksCommandOutput | DescribePendingAggregationRequestsCommandOutput | DescribeRemediationConfigurationsCommandOutput | DescribeRemediationExceptionsCommandOutput | DescribeRemediationExecutionStatusCommandOutput | DescribeRetentionConfigurationsCommandOutput | GetAggregateComplianceDetailsByConfigRuleCommandOutput | GetAggregateConfigRuleComplianceSummaryCommandOutput | GetAggregateConformancePackComplianceSummaryCommandOutput | GetAggregateDiscoveredResourceCountsCommandOutput | GetAggregateResourceConfigCommandOutput | GetComplianceDetailsByConfigRuleCommandOutput | GetComplianceDetailsByResourceCommandOutput | GetComplianceSummaryByConfigRuleCommandOutput | GetComplianceSummaryByResourceTypeCommandOutput | GetConformancePackComplianceDetailsCommandOutput | GetConformancePackComplianceSummaryCommandOutput | GetCustomRulePolicyCommandOutput | GetDiscoveredResourceCountsCommandOutput | GetOrganizationConfigRuleDetailedStatusCommandOutput | GetOrganizationConformancePackDetailedStatusCommandOutput | GetOrganizationCustomRulePolicyCommandOutput | GetResourceConfigHistoryCommandOutput | GetStoredQueryCommandOutput | ListAggregateDiscoveredResourcesCommandOutput | ListConformancePackComplianceScoresCommandOutput | ListDiscoveredResourcesCommandOutput | ListStoredQueriesCommandOutput | ListTagsForResourceCommandOutput | PutAggregationAuthorizationCommandOutput | PutConfigRuleCommandOutput | PutConfigurationAggregatorCommandOutput | PutConfigurationRecorderCommandOutput | PutConformancePackCommandOutput | PutDeliveryChannelCommandOutput | PutEvaluationsCommandOutput | PutExternalEvaluationCommandOutput | PutOrganizationConfigRuleCommandOutput | PutOrganizationConformancePackCommandOutput | PutRemediationConfigurationsCommandOutput | PutRemediationExceptionsCommandOutput | PutResourceConfigCommandOutput | PutRetentionConfigurationCommandOutput | PutStoredQueryCommandOutput | SelectAggregateResourceConfigCommandOutput | SelectResourceConfigCommandOutput | StartConfigRulesEvaluationCommandOutput | StartConfigurationRecorderCommandOutput | StartRemediationExecutionCommandOutput | StopConfigurationRecorderCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput;
|
|
99
100
|
export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__HttpHandlerOptions>> {
|
|
100
101
|
/**
|
|
101
102
|
* The HTTP handler to use. Fetch in browser and Https in Nodejs.
|
|
@@ -0,0 +1,41 @@
|
|
|
1
|
+
import { Command as $Command } from "@aws-sdk/smithy-client";
|
|
2
|
+
import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
|
|
3
|
+
import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
|
|
4
|
+
import { ListConformancePackComplianceScoresRequest, ListConformancePackComplianceScoresResponse } from "../models/models_0";
|
|
5
|
+
export interface ListConformancePackComplianceScoresCommandInput extends ListConformancePackComplianceScoresRequest {
|
|
6
|
+
}
|
|
7
|
+
export interface ListConformancePackComplianceScoresCommandOutput extends ListConformancePackComplianceScoresResponse, __MetadataBearer {
|
|
8
|
+
}
|
|
9
|
+
/**
|
|
10
|
+
* <p>Returns a list of conformance pack compliance scores.
|
|
11
|
+
* A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack.
|
|
12
|
+
* This metric provides you with a high-level view of the compliance state of your conformance packs, and can be used to identify, investigate, and understand
|
|
13
|
+
* the level of compliance in your conformance packs.</p>
|
|
14
|
+
* <note>
|
|
15
|
+
* <p>Conformance packs with no evaluation results will have a compliance score of <code>INSUFFICIENT_DATA</code>.</p>
|
|
16
|
+
* </note>
|
|
17
|
+
* @example
|
|
18
|
+
* Use a bare-bones client and the command you need to make an API call.
|
|
19
|
+
* ```javascript
|
|
20
|
+
* import { ConfigServiceClient, ListConformancePackComplianceScoresCommand } from "@aws-sdk/client-config-service"; // ES Modules import
|
|
21
|
+
* // const { ConfigServiceClient, ListConformancePackComplianceScoresCommand } = require("@aws-sdk/client-config-service"); // CommonJS import
|
|
22
|
+
* const client = new ConfigServiceClient(config);
|
|
23
|
+
* const command = new ListConformancePackComplianceScoresCommand(input);
|
|
24
|
+
* const response = await client.send(command);
|
|
25
|
+
* ```
|
|
26
|
+
*
|
|
27
|
+
* @see {@link ListConformancePackComplianceScoresCommandInput} for command's `input` shape.
|
|
28
|
+
* @see {@link ListConformancePackComplianceScoresCommandOutput} for command's `response` shape.
|
|
29
|
+
* @see {@link ConfigServiceClientResolvedConfig | config} for ConfigServiceClient's `config` shape.
|
|
30
|
+
*
|
|
31
|
+
*/
|
|
32
|
+
export declare class ListConformancePackComplianceScoresCommand extends $Command<ListConformancePackComplianceScoresCommandInput, ListConformancePackComplianceScoresCommandOutput, ConfigServiceClientResolvedConfig> {
|
|
33
|
+
readonly input: ListConformancePackComplianceScoresCommandInput;
|
|
34
|
+
constructor(input: ListConformancePackComplianceScoresCommandInput);
|
|
35
|
+
/**
|
|
36
|
+
* @internal
|
|
37
|
+
*/
|
|
38
|
+
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: ConfigServiceClientResolvedConfig, options?: __HttpHandlerOptions): Handler<ListConformancePackComplianceScoresCommandInput, ListConformancePackComplianceScoresCommandOutput>;
|
|
39
|
+
private serialize;
|
|
40
|
+
private deserialize;
|
|
41
|
+
}
|
|
@@ -7,23 +7,33 @@ export interface PutConfigRuleCommandInput extends PutConfigRuleRequest {
|
|
|
7
7
|
export interface PutConfigRuleCommandOutput extends __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Adds or updates an Config rule
|
|
11
|
-
* Amazon Web Services resources comply with your desired configurations
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
*
|
|
16
|
-
* <p>
|
|
17
|
-
* create
|
|
18
|
-
*
|
|
19
|
-
*
|
|
20
|
-
*
|
|
21
|
-
*
|
|
22
|
-
*
|
|
23
|
-
*
|
|
24
|
-
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
10
|
+
* <p>Adds or updates an Config rule to evaluate if your
|
|
11
|
+
* Amazon Web Services resources comply with your desired configurations. For information on how many Config rules you can have per account,
|
|
12
|
+
* see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
|
|
13
|
+
* <b>Service Limits</b>
|
|
14
|
+
* </a> in the <i>Config Developer Guide</i>.</p>
|
|
15
|
+
*
|
|
16
|
+
* <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
|
|
17
|
+
* You can use <code>PutConfigRule</code> to create both Config custom rules and Config managed rules.</p>
|
|
18
|
+
*
|
|
19
|
+
* <p>Custom rules are rules that you can create using either Guard or Lambda functions.
|
|
20
|
+
* Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
|
|
21
|
+
* Repository</a>) is a policy-as-code language that allows you to write policies that
|
|
22
|
+
* are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
|
|
23
|
+
* evaluate a custom rule. If you are adding a new Custom Lambda rule,
|
|
24
|
+
* you first need to create an Lambda function that the rule invokes to evaluate
|
|
25
|
+
* your resources. When you use <code>PutConfigRule</code> to add a Custom Lambda rule to Config, you must specify the Amazon Resource
|
|
26
|
+
* Name (ARN) that Lambda assigns to the function. You specify the ARN
|
|
27
|
+
* in the <code>SourceIdentifier</code> key. This key is part of the
|
|
28
|
+
* <code>Source</code> object, which is part of the
|
|
29
|
+
* <code>ConfigRule</code> object. </p>
|
|
30
|
+
*
|
|
31
|
+
* <p>Managed rules are predefined,
|
|
32
|
+
* customizable rules created by Config. For a list of managed rules, see
|
|
33
|
+
* <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
|
|
34
|
+
* Managed Rules</a>. If you are adding an Config managed rule, you must specify the
|
|
35
|
+
* rule's identifier for the <code>SourceIdentifier</code> key.</p>
|
|
36
|
+
*
|
|
27
37
|
* <p>For any new rule that you add, specify the
|
|
28
38
|
* <code>ConfigRuleName</code> in the <code>ConfigRule</code>
|
|
29
39
|
* object. Do not specify the <code>ConfigRuleArn</code> or the
|
|
@@ -33,10 +43,6 @@ export interface PutConfigRuleCommandOutput extends __MetadataBearer {
|
|
|
33
43
|
* <code>ConfigRuleId</code>, or <code>ConfigRuleArn</code> in the
|
|
34
44
|
* <code>ConfigRule</code> data type that you use in this
|
|
35
45
|
* request.</p>
|
|
36
|
-
* <p>For information on how many Config rules you can have per account,
|
|
37
|
-
* see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
|
|
38
|
-
* <b>Service Limits</b>
|
|
39
|
-
* </a> in the Config Developer Guide.</p>
|
|
40
46
|
*
|
|
41
47
|
* <p>For more information about developing and using Config
|
|
42
48
|
* rules, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html">Evaluating Amazon Web Services resource Configurations with Config</a>
|
|
@@ -21,7 +21,7 @@ export interface PutConfigurationAggregatorCommandOutput extends PutConfiguratio
|
|
|
21
21
|
* <p>If your source type is an organization, you must be signed in to the management account or a registered delegated administrator and all the features must be enabled in your organization.
|
|
22
22
|
* If the caller is a management account, Config calls <code>EnableAwsServiceAccess</code> API to enable integration between Config and Organizations.
|
|
23
23
|
* If the caller is a registered delegated administrator, Config calls <code>ListDelegatedAdministrators</code> API to verify whether the caller is a valid delegated administrator.</p>
|
|
24
|
-
* <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the Config developer guide
|
|
24
|
+
* <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the <i>Config developer guide</i>. </p>
|
|
25
25
|
* </note>
|
|
26
26
|
* @example
|
|
27
27
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
import { Command as $Command } from "@aws-sdk/smithy-client";
|
|
2
2
|
import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
|
|
3
3
|
import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
|
|
4
|
-
import { PutConformancePackRequest
|
|
4
|
+
import { PutConformancePackRequest } from "../models/models_0";
|
|
5
|
+
import { PutConformancePackResponse } from "../models/models_1";
|
|
5
6
|
export interface PutConformancePackCommandInput extends PutConformancePackRequest {
|
|
6
7
|
}
|
|
7
8
|
export interface PutConformancePackCommandOutput extends PutConformancePackResponse, __MetadataBearer {
|
|
@@ -12,8 +13,8 @@ export interface PutConformancePackCommandOutput extends PutConformancePackRespo
|
|
|
12
13
|
* see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
|
|
13
14
|
* <b>Service Limits</b>
|
|
14
15
|
* </a> in the Config Developer Guide.</p>
|
|
15
|
-
* <p>This API creates a service
|
|
16
|
-
* The service
|
|
16
|
+
* <p>This API creates a service-linked role <code>AWSServiceRoleForConfigConforms</code> in your account.
|
|
17
|
+
* The service-linked role is created only when the role does not exist in your account. </p>
|
|
17
18
|
* <note>
|
|
18
19
|
* <p>You must specify either the <code>TemplateS3Uri</code> or the <code>TemplateBody</code> parameter, but not both.
|
|
19
20
|
* If you provide both Config uses the <code>TemplateS3Uri</code> parameter and ignores the <code>TemplateBody</code> parameter.</p>
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { Command as $Command } from "@aws-sdk/smithy-client";
|
|
2
2
|
import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
|
|
3
3
|
import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
|
|
4
|
-
import { PutDeliveryChannelRequest } from "../models/
|
|
4
|
+
import { PutDeliveryChannelRequest } from "../models/models_1";
|
|
5
5
|
export interface PutDeliveryChannelCommandInput extends PutDeliveryChannelRequest {
|
|
6
6
|
}
|
|
7
7
|
export interface PutDeliveryChannelCommandOutput extends __MetadataBearer {
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { Command as $Command } from "@aws-sdk/smithy-client";
|
|
2
2
|
import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
|
|
3
3
|
import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
|
|
4
|
-
import { PutEvaluationsRequest, PutEvaluationsResponse } from "../models/
|
|
4
|
+
import { PutEvaluationsRequest, PutEvaluationsResponse } from "../models/models_1";
|
|
5
5
|
export interface PutEvaluationsCommandInput extends PutEvaluationsRequest {
|
|
6
6
|
}
|
|
7
7
|
export interface PutEvaluationsCommandOutput extends PutEvaluationsResponse, __MetadataBearer {
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { Command as $Command } from "@aws-sdk/smithy-client";
|
|
2
2
|
import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@aws-sdk/types";
|
|
3
3
|
import { ConfigServiceClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ConfigServiceClient";
|
|
4
|
-
import { PutExternalEvaluationRequest, PutExternalEvaluationResponse } from "../models/
|
|
4
|
+
import { PutExternalEvaluationRequest, PutExternalEvaluationResponse } from "../models/models_1";
|
|
5
5
|
export interface PutExternalEvaluationCommandInput extends PutExternalEvaluationRequest {
|
|
6
6
|
}
|
|
7
7
|
export interface PutExternalEvaluationCommandOutput extends PutExternalEvaluationResponse, __MetadataBearer {
|
|
@@ -7,29 +7,42 @@ export interface PutOrganizationConfigRuleCommandInput extends PutOrganizationCo
|
|
|
7
7
|
export interface PutOrganizationConfigRuleCommandOutput extends PutOrganizationConfigRuleResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Adds or updates
|
|
10
|
+
* <p>Adds or updates an Config rule for your entire organization to evaluate if your Amazon Web Services resources comply with your
|
|
11
11
|
* desired configurations. For information on how many organization Config rules you can have per account,
|
|
12
12
|
* see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
|
|
13
13
|
* <b>Service Limits</b>
|
|
14
|
-
* </a> in the Config Developer Guide
|
|
14
|
+
* </a> in the <i>Config Developer Guide</i>.</p>
|
|
15
15
|
* <p> Only a master account and a delegated administrator can create or update an organization Config rule.
|
|
16
16
|
* When calling this API with a delegated administrator, you must ensure Organizations
|
|
17
17
|
* <code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
|
|
18
|
-
* <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service
|
|
18
|
+
* <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service-linked
|
|
19
19
|
* role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
|
|
20
|
-
* The service
|
|
20
|
+
* The service-linked role is created only when the role does not exist in the caller account.
|
|
21
21
|
* Config verifies the existence of role with <code>GetRole</code> action.</p>
|
|
22
22
|
* <p>To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
|
|
23
23
|
* <code>register-delegated-administrator</code> for <code>config-multiaccountsetup.amazonaws.com</code>. </p>
|
|
24
|
-
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
27
|
-
*
|
|
28
|
-
*
|
|
29
|
-
*
|
|
24
|
+
*
|
|
25
|
+
* <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
|
|
26
|
+
* You can use <code>PutOrganizationConfigRule</code> to create both Config custom rules and Config managed rules.</p>
|
|
27
|
+
*
|
|
28
|
+
* <p>Custom rules are rules that you can create using either Guard or Lambda functions.
|
|
29
|
+
* Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
|
|
30
|
+
* Repository</a>) is a policy-as-code language that allows you to write policies that
|
|
31
|
+
* are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
|
|
32
|
+
* evaluate a custom rule. If you are adding a new Custom Lambda rule, you first need to create an Lambda function in the master account or a delegated
|
|
33
|
+
* administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed account that can be assumed by the Lambda function.
|
|
34
|
+
* When you use <code>PutOrganizationConfigRule</code> to add a Custom Lambda rule to Config, you must
|
|
35
|
+
* specify the Amazon Resource Name (ARN) that Lambda assigns to the function.</p>
|
|
36
|
+
*
|
|
37
|
+
* <p>Managed rules are predefined,
|
|
38
|
+
* customizable rules created by Config. For a list of managed rules, see
|
|
39
|
+
* <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
|
|
40
|
+
* Managed Rules</a>. If you are adding an Config managed rule, you must specify the rule's identifier for the <code>RuleIdentifier</code> key.</p>
|
|
41
|
+
*
|
|
42
|
+
*
|
|
30
43
|
* <note>
|
|
31
44
|
* <p>Prerequisite: Ensure you call <code>EnableAllFeatures</code> API to enable all features in an organization.</p>
|
|
32
|
-
* <p>
|
|
45
|
+
* <p>Make sure to specify one of either <code>OrganizationCustomPolicyRuleMetadata</code> for Custom Policy rules, <code>OrganizationCustomRuleMetadata</code> for Custom Lambda rules, or <code>OrganizationManagedRuleMetadata</code> for managed rules.</p>
|
|
33
46
|
* </note>
|
|
34
47
|
* @example
|
|
35
48
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -16,8 +16,8 @@ export interface PutOrganizationConformancePackCommandOutput extends PutOrganiza
|
|
|
16
16
|
* <code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
|
|
17
17
|
* <p>This API enables organization service access for <code>config-multiaccountsetup.amazonaws.com</code>
|
|
18
18
|
* through the <code>EnableAWSServiceAccess</code> action and creates a
|
|
19
|
-
* service
|
|
20
|
-
* The service
|
|
19
|
+
* service-linked role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the master or delegated administrator account of your organization.
|
|
20
|
+
* The service-linked role is created only when the role does not exist in the caller account.
|
|
21
21
|
* To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
|
|
22
22
|
* <code>register-delegate-admin</code> for <code>config-multiaccountsetup.amazonaws.com</code>.</p>
|
|
23
23
|
*
|
|
@@ -11,7 +11,7 @@ export interface SelectResourceConfigCommandOutput extends SelectResourceConfigR
|
|
|
11
11
|
* <p>For more information about query components, see the
|
|
12
12
|
* <a href="https://docs.aws.amazon.com/config/latest/developerguide/query-components.html">
|
|
13
13
|
* <b>Query Components</b>
|
|
14
|
-
* </a> section in the Config Developer Guide
|
|
14
|
+
* </a> section in the <i>Config Developer Guide</i>.</p>
|
|
15
15
|
* @example
|
|
16
16
|
* Use a bare-bones client and the command you need to make an API call.
|
|
17
17
|
* ```javascript
|
|
@@ -60,6 +60,7 @@ export * from "./GetOrganizationCustomRulePolicyCommand";
|
|
|
60
60
|
export * from "./GetResourceConfigHistoryCommand";
|
|
61
61
|
export * from "./GetStoredQueryCommand";
|
|
62
62
|
export * from "./ListAggregateDiscoveredResourcesCommand";
|
|
63
|
+
export * from "./ListConformancePackComplianceScoresCommand";
|
|
63
64
|
export * from "./ListDiscoveredResourcesCommand";
|
|
64
65
|
export * from "./ListStoredQueriesCommand";
|
|
65
66
|
export * from "./ListTagsForResourceCommand";
|