@aws-sdk/client-config-service 3.218.0 → 3.219.0

package/dist-types/models/models_0.d.ts

@@ -133,7 +133,8 @@ export interface AggregateConformancePackCompliance {
  * <p>Provides aggregate compliance of the conformance pack. Indicates whether a conformance pack is compliant based on the name of the conformance pack, account ID, and region.</p>
  * 		       <p>A conformance pack is compliant if all of the rules in a conformance packs are compliant. It is noncompliant if any of the rules are not compliant.
  * 			The compliance status of a conformance pack is INSUFFICIENT_DATA only if all rules within a conformance pack cannot be evaluated due to insufficient data.
- * 			If some of the rules in a conformance pack are compliant but the compliance status of other rules in that same conformance pack is INSUFFICIENT_DATA, the conformance pack shows compliant.</p>
+ * 			If some of the rules in a conformance pack are compliant but the compliance status of other rules in that same conformance pack is INSUFFICIENT_DATA, the conformance pack shows
+ * 			compliant.</p>
  */
 export interface AggregateComplianceByConformancePack {
     /**
@@ -315,6 +316,10 @@ export interface AggregatedSourceStatus {
      */
     LastErrorMessage?: string;
 }
+export declare enum EvaluationMode {
+    DETECTIVE = "DETECTIVE",
+    PROACTIVE = "PROACTIVE"
+}
 /**
  * <p>Identifies an Config rule that evaluated an Amazon Web Services resource,
  * 			and provides the type and ID of the resource that the rule
@@ -334,6 +339,10 @@ export interface EvaluationResultQualifier {
      * <p>The ID of the evaluated Amazon Web Services resource.</p>
      */
     ResourceId?: string;
+    /**
+     * <p>The mode of an evaluation. The valid values are Detective or Proactive.</p>
+     */
+    EvaluationMode?: EvaluationMode | string;
 }
 /**
  * <p>Uniquely identifies an evaluation result.</p>
@@ -351,6 +360,10 @@ export interface EvaluationResultIdentifier {
      * 			event triggered the evaluation.</p>
      */
     OrderingTimestamp?: Date;
+    /**
+     * <p>A Unique ID for an evaluation result.</p>
+     */
+    ResourceEvaluationId?: string;
 }
 /**
  * <p>The details of an Config evaluation for an account ID and
@@ -899,6 +912,15 @@ export declare enum ConfigRuleState {
     DELETING_RESULTS = "DELETING_RESULTS",
     EVALUATING = "EVALUATING"
 }
+/**
+ * <p>The configuration object for Config rule evaluation mode. The Supported valid values are Detective or Proactive.</p>
+ */
+export interface EvaluationModeConfiguration {
+    /**
+     * <p>The mode of an evaluation. The valid values are Detective or Proactive.</p>
+     */
+    Mode?: EvaluationMode | string;
+}
 export declare enum MaximumExecutionFrequency {
     One_Hour = "One_Hour",
     Six_Hours = "Six_Hours",
@@ -1218,6 +1240,10 @@ export interface ConfigRule {
      * 		       </note>
      */
     CreatedBy?: string;
+    /**
+     * <p>The modes the Config rule can be evaluated in. The valid values are distinct objects. By default, the value is Detective evaluation mode only.</p>
+     */
+    EvaluationModes?: EvaluationModeConfiguration[];
 }
 /**
  * <p>Filters the compliance results based on account ID, region,
@@ -1652,36 +1678,40 @@ export interface ConfigurationItem {
     supplementaryConfiguration?: Record<string, string>;
 }
 /**
- * <p>Specifies the types of Amazon Web Services resource for which Config
- * 			records configuration changes.</p>
- * 		       <p>In the recording group, you specify whether all supported types
- * 			or specific types of resources are recorded.</p>
- * 		       <p>By default, Config records configuration changes for all
- * 			supported types of regional resources that Config discovers in
- * 			the region in which it is running. Regional resources are tied to a
- * 			region and can be used only in that region. Examples of regional
- * 			resources are EC2 instances and EBS volumes.</p>
- * 		       <p>You can also have Config record configuration changes for
- * 			supported types of global resources (for example, IAM resources).
- * 			Global resources are not tied to an individual region and can be
- * 			used in all regions.</p>
+ * <p>Specifies which Amazon Web Services resource types Config
+ * 			records for configuration changes. In the recording group, you specify whether you want to record all supported resource types
+ * 			or only specific types of resources.</p>
+ *
+ * 	 	      <p>By default, Config records the configuration changes for all supported types of
+ * 				<i>regional resources</i> that Config discovers in the region in which it is
+ * 				running. Regional resources are tied to a region and can be used only in that region. Examples
+ * 				of regional resources are EC2 instances and EBS volumes.</p>
+ * 			      <p>You can also have Config record supported types of <i>global resources</i>.
+ * 				Global resources are not tied to a specific region and can be used in all regions. The global
+ * 				resource types that Config supports include  IAM users, groups, roles, and customer managed
+ * 				policies.</p>
+ *
  * 		       <important>
- * 			         <p>The configuration details for any global resource are the
- * 				same in all regions. If you customize Config in multiple
- * 				regions to record global resources, it will create multiple
- * 				configuration items each time a global resource changes: one
- * 				configuration item for each region. These configuration items
- * 				will contain identical data. To prevent duplicate configuration
- * 				items, you should consider customizing Config in only one
- * 				region to record global resources, unless you want the
- * 				configuration items to be available in multiple
- * 				regions.</p>
+ * 			         <p>Global resource types onboarded to Config recording after February 2022 will only be
+ * 				recorded in the service's home region for the commercial partition and
+ * 				Amazon Web Services GovCloud (US) West for the GovCloud partition. You can view the Configuration Items for
+ * 				these new global resource types only in their home region and Amazon Web Services GovCloud (US) West.</p>
+ *
+ * 			         <p>Supported global resource types onboarded before February 2022 such as
+ * 				<code>AWS::IAM::Group</code>, <code>AWS::IAM::Policy</code>, <code>AWS::IAM::Role</code>,
+ * 				<code>AWS::IAM::User</code> remain unchanged, and they will continue to deliver
+ * 				Configuration Items in all supported regions in Config. The change will only affect new global
+ * 				resource types onboarded after February 2022.</p>
+ *
+ * 			         <p>To record global resource types onboarded after February 2022,
+ * 				enable All Supported Resource Types in the home region of the global resource type you want to record.</p>
  * 		       </important>
+ *
  * 		       <p>If you don't want Config to record all resources, you can
  * 			specify which types of resources it will record with the
  * 				<code>resourceTypes</code> parameter.</p>
  * 		       <p>For a list of supported resource types, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources">Supported Resource Types</a>.</p>
- * 		       <p>For more information, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html">Selecting Which Resources Config Records</a>.</p>
+ * 		       <p>For more information and a table of the Home Regions for Global Resource Types Onboarded after February 2022, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html">Selecting Which Resources Config Records</a>.</p>
  */
 export interface RecordingGroup {
     /**
@@ -2841,6 +2871,15 @@ export interface DescribeConfigRuleEvaluationStatusResponse {
      */
     NextToken?: string;
 }
+/**
+ * <p>Returns a filtered list of Detective or Proactive Config rules. By default, if the filter is not defined, this API returns an unfiltered list.</p>
+ */
+export interface DescribeConfigRulesFilters {
+    /**
+     * <p>The mode of an evaluation. The valid values are Detective or Proactive.</p>
+     */
+    EvaluationMode?: EvaluationMode | string;
+}
 /**
  * <p></p>
  */
@@ -2857,6 +2896,10 @@ export interface DescribeConfigRulesRequest {
      * 			response.</p>
      */
     NextToken?: string;
+    /**
+     * <p>Returns a list of Detecive or Proactive Config rules. By default, this API returns an unfiltered list.</p>
+     */
+    Filters?: DescribeConfigRulesFilters;
 }
 /**
  * <p></p>
@@ -4051,6 +4094,16 @@ export interface Evaluation {
      */
     OrderingTimestamp: Date | undefined;
 }
+/**
+ * <p>Use EvaluationContext to group independently initiated proactive resource evaluations. For example, CFN Stack.
+ * 			If you want to check just a resource definition, you do not need to provide evaluation context.</p>
+ */
+export interface EvaluationContext {
+    /**
+     * <p>A unique EvaluationContextIdentifier ID for an EvaluationContext.</p>
+     */
+    EvaluationContextIdentifier?: string;
+}
 /**
  * <p>The details of an Config evaluation. Provides the Amazon Web Services
  * 			resource that was evaluated, the compliance of the resource, related
@@ -4092,6 +4145,24 @@ export interface EvaluationResult {
      */
     ResultToken?: string;
 }
+export declare enum ResourceEvaluationStatus {
+    FAILED = "FAILED",
+    IN_PROGRESS = "IN_PROGRESS",
+    SUCCEEDED = "SUCCEEDED"
+}
+/**
+ * <p>Returns status details of an evaluation.</p>
+ */
+export interface EvaluationStatus {
+    /**
+     * <p>The status of an execution. The valid values are In_Progress, Succeeded or Failed. </p>
+     */
+    Status: ResourceEvaluationStatus | string | undefined;
+    /**
+     * <p>An explanation for failed execution status.</p>
+     */
+    FailureReason?: string;
+}
 /**
  * <p>Identifies an Amazon Web Services resource and indicates whether it complies with the Config rule that it was evaluated against.</p>
  */
@@ -4448,12 +4519,12 @@ export interface GetComplianceDetailsByResourceRequest {
      * <p>The type of the Amazon Web Services resource for which you want compliance
      * 			information.</p>
      */
-    ResourceType: string | undefined;
+    ResourceType?: string;
     /**
      * <p>The ID of the Amazon Web Services resource for which you want compliance
      * 			information.</p>
      */
-    ResourceId: string | undefined;
+    ResourceId?: string;
     /**
      * <p>Filters the results by compliance.</p>
      * 		       <p>The allowed values are <code>COMPLIANT</code>,
@@ -4467,6 +4538,13 @@ export interface GetComplianceDetailsByResourceRequest {
      * 			response.</p>
      */
     NextToken?: string;
+    /**
+     * <p>The unique ID of Amazon Web Services resource execution for which you want to retrieve evaluation results. </p>
+     * 		       <note>
+     *             <p>You need to only provide either a <code>ResourceEvaluationID</code> or a <code>ResourceID </code>and <code>ResourceType</code>.</p>
+     *          </note>
+     */
+    ResourceEvaluationId?: string;
 }
 /**
  * <p></p>
@@ -5102,6 +5180,66 @@ export declare class InvalidTimeRangeException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<InvalidTimeRangeException, __BaseException>);
 }
+export interface GetResourceEvaluationSummaryRequest {
+    /**
+     * <p>The unique <code>ResourceEvaluationId</code> of Amazon Web Services resource execution for which you want to retrieve the evaluation summary.</p>
+     */
+    ResourceEvaluationId: string | undefined;
+}
+export declare enum ResourceConfigurationSchemaType {
+    CFN_RESOURCE_SCHEMA = "CFN_RESOURCE_SCHEMA"
+}
+/**
+ * <p>Returns information about the resource being evaluated. </p>
+ */
+export interface ResourceDetails {
+    /**
+     * <p>A unique resource ID for an evaluation.</p>
+     */
+    ResourceId: string | undefined;
+    /**
+     * <p>The type of resource being evaluated.</p>
+     */
+    ResourceType: string | undefined;
+    /**
+     * <p>The resource definition to be evaluated as per the resource configuration schema type.</p>
+     */
+    ResourceConfiguration: string | undefined;
+    /**
+     * <p>The schema type of the resource configuration.</p>
+     */
+    ResourceConfigurationSchemaType?: ResourceConfigurationSchemaType | string;
+}
+export interface GetResourceEvaluationSummaryResponse {
+    /**
+     * <p>The unique <code>ResourceEvaluationId</code> of Amazon Web Services resource execution for which you want to retrieve the evaluation summary.</p>
+     */
+    ResourceEvaluationId?: string;
+    /**
+     * <p>Lists results of the mode that you requested to retrieve the resource evaluation summary. The valid values are Detective or Proactive.</p>
+     */
+    EvaluationMode?: EvaluationMode | string;
+    /**
+     * <p>Returns an <code>EvaluationStatus</code> object.</p>
+     */
+    EvaluationStatus?: EvaluationStatus;
+    /**
+     * <p>The start timestamp when Config rule starts evaluating compliance for the provided resource details.</p>
+     */
+    EvaluationStartTimestamp?: Date;
+    /**
+     * <p>The compliance status of the resource evaluation summary.</p>
+     */
+    Compliance?: ComplianceType | string;
+    /**
+     * <p>Returns an <code>EvaluationContext</code> object.</p>
+     */
+    EvaluationContext?: EvaluationContext;
+    /**
+     * <p>Returns a <code>ResourceDetails</code> object.</p>
+     */
+    ResourceDetails?: ResourceDetails;
+}
 export interface GetStoredQueryRequest {
     /**
      * <p>The name of the query.</p>
@@ -5146,6 +5284,17 @@ export interface GetStoredQueryResponse {
      */
     StoredQuery?: StoredQuery;
 }
+/**
+ * <p>Using the same client token with one or more different parameters. Specify a new client token with the parameter changes and try again.</p>
+ */
+export declare class IdempotentParameterMismatch extends __BaseException {
+    readonly name: "IdempotentParameterMismatch";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<IdempotentParameterMismatch, __BaseException>);
+}
 /**
  * <p>Your Amazon S3 bucket policy does not permit Config to
  * 			write to it.</p>
@@ -5449,6 +5598,78 @@ export interface ListDiscoveredResourcesResponse {
      */
     nextToken?: string;
 }
+/**
+ * <p>Filters evaluation results based on start and end times.</p>
+ */
+export interface TimeWindow {
+    /**
+     * <p>The start time of an execution.</p>
+     */
+    StartTime?: Date;
+    /**
+     * <p>The end time of an execution. The end time must be after the start date.</p>
+     */
+    EndTime?: Date;
+}
+/**
+ * <p>Returns details of a resource evaluation based on the selected filter.</p>
+ */
+export interface ResourceEvaluationFilters {
+    /**
+     * <p>Filters all resource evaluations results based on an evaluation mode. the valid value for this API is <code>Proactive</code>.</p>
+     */
+    EvaluationMode?: EvaluationMode | string;
+    /**
+     * <p>Returns a <code>TimeWindow</code> object.</p>
+     */
+    TimeWindow?: TimeWindow;
+    /**
+     * <p>Filters evaluations for a given infrastructure deployment. For example: CFN Stack.</p>
+     */
+    EvaluationContextIdentifier?: string;
+}
+export interface ListResourceEvaluationsRequest {
+    /**
+     * <p>Returns a <code>ResourceEvaluationFilters</code> object.</p>
+     */
+    Filters?: ResourceEvaluationFilters;
+    /**
+     * <p>The maximum number of evaluations returned on each page. The default is 10.
+     * 			You cannot specify a number greater than 100. If you specify 0, Config uses the default.</p>
+     */
+    Limit?: number;
+    /**
+     * <p>The <code>nextToken</code> string returned on a previous page that you use to get the next page of results in a paginated response.</p>
+     */
+    NextToken?: string;
+}
+/**
+ * <p>Returns details of a resource evaluation.</p>
+ */
+export interface ResourceEvaluation {
+    /**
+     * <p>The ResourceEvaluationId of a evaluation.</p>
+     */
+    ResourceEvaluationId?: string;
+    /**
+     * <p>The mode of an evaluation. The valid values are Detective or Proactive.</p>
+     */
+    EvaluationMode?: EvaluationMode | string;
+    /**
+     * <p>The starting time of an execution.</p>
+     */
+    EvaluationStartTimestamp?: Date;
+}
+export interface ListResourceEvaluationsResponse {
+    /**
+     * <p>Returns a <code>ResourceEvaluations</code> object.</p>
+     */
+    ResourceEvaluations?: ResourceEvaluation[];
+    /**
+     * <p>The <code>nextToken</code> string returned on a previous page that you use to get the next page of results in a paginated response.</p>
+     */
+    NextToken?: string;
+}
 export interface ListStoredQueriesRequest {
     /**
      * <p>The nextToken string returned in a previous request that you use to request the next page of results in a paginated response.</p>
@@ -5582,250 +5803,6 @@ export declare class MaxNumberOfConformancePacksExceededException extends __Base
      */
     constructor(opts: __ExceptionOptionType<MaxNumberOfConformancePacksExceededException, __BaseException>);
 }
-/**
- * <p>You have reached the limit of the number of delivery channels
- * 			you can create.</p>
- */
-export declare class MaxNumberOfDeliveryChannelsExceededException extends __BaseException {
-    readonly name: "MaxNumberOfDeliveryChannelsExceededException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<MaxNumberOfDeliveryChannelsExceededException, __BaseException>);
-}
-/**
- * <p>You have reached the limit of the number of organization Config rules you can create. For more information, see see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
- *                <b>Service Limits</b>
- *             </a> in the Config Developer Guide.</p>
- */
-export declare class MaxNumberOfOrganizationConfigRulesExceededException extends __BaseException {
-    readonly name: "MaxNumberOfOrganizationConfigRulesExceededException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<MaxNumberOfOrganizationConfigRulesExceededException, __BaseException>);
-}
-/**
- * <p>You have reached the limit of the number of organization conformance packs you can create in an account. For more information, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
- *                <b>Service Limits</b>
- *             </a> in the Config Developer Guide.</p>
- */
-export declare class MaxNumberOfOrganizationConformancePacksExceededException extends __BaseException {
-    readonly name: "MaxNumberOfOrganizationConformancePacksExceededException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<MaxNumberOfOrganizationConformancePacksExceededException, __BaseException>);
-}
-/**
- * <p>Failed to add the retention configuration because a retention configuration with that name already exists.</p>
- */
-export declare class MaxNumberOfRetentionConfigurationsExceededException extends __BaseException {
-    readonly name: "MaxNumberOfRetentionConfigurationsExceededException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<MaxNumberOfRetentionConfigurationsExceededException, __BaseException>);
-}
-/**
- * <p>There is no delivery channel available to record
- * 			configurations.</p>
- */
-export declare class NoAvailableDeliveryChannelException extends __BaseException {
-    readonly name: "NoAvailableDeliveryChannelException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<NoAvailableDeliveryChannelException, __BaseException>);
-}
-/**
- * <p>Organization is no longer available.</p>
- */
-export declare class NoAvailableOrganizationException extends __BaseException {
-    readonly name: "NoAvailableOrganizationException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<NoAvailableOrganizationException, __BaseException>);
-}
-/**
- * <p>The specified Amazon S3 bucket does not exist.</p>
- */
-export declare class NoSuchBucketException extends __BaseException {
-    readonly name: "NoSuchBucketException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<NoSuchBucketException, __BaseException>);
-}
-/**
- * <p>Config resource cannot be created because your organization does not have all features enabled.</p>
- */
-export declare class OrganizationAllFeaturesNotEnabledException extends __BaseException {
-    readonly name: "OrganizationAllFeaturesNotEnabledException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<OrganizationAllFeaturesNotEnabledException, __BaseException>);
-}
-/**
- * <p>You have specified a template that is invalid or supported.</p>
- */
-export declare class OrganizationConformancePackTemplateValidationException extends __BaseException {
-    readonly name: "OrganizationConformancePackTemplateValidationException";
-    readonly $fault: "client";
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<OrganizationConformancePackTemplateValidationException, __BaseException>);
-}
-/**
- * <p>An
- * 			object that specifies metadata for your organization's Config Custom Policy rule. The metadata includes the runtime system in use, which accounts have
- * 			debug logging enabled, and other custom rule metadata, such as resource type, resource
- * 			ID of Amazon Web Services resource, and organization trigger types that initiate Config to evaluate Amazon Web Services resources against a rule.</p>
- */
-export interface OrganizationCustomPolicyRuleMetadata {
-    /**
-     * <p>The description that you provide for your organization Config Custom Policy rule.</p>
-     */
-    Description?: string;
-    /**
-     * <p>The type of notification that initiates Config to run an evaluation for a rule.
-     * 			For Config Custom Policy rules, Config supports change-initiated notification types:</p>
-     *
-     * 		       <ul>
-     *             <li>
-     *                <p>
-     *                   <code>ConfigurationItemChangeNotification</code> - Initiates an evaluation when Config delivers a configuration item as a result of a resource
-     * 					change.</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>OversizedConfigurationItemChangeNotification</code> - Initiates an evaluation when
-     * 						Config delivers an oversized configuration item. Config may generate this notification type when a resource changes and the
-     * 					notification exceeds the maximum size allowed by Amazon SNS.</p>
-     *             </li>
-     *          </ul>
-     */
-    OrganizationConfigRuleTriggerTypes?: (OrganizationConfigRuleTriggerTypeNoSN | string)[];
-    /**
-     * <p>A string, in JSON format, that is passed to your organization Config Custom Policy rule.</p>
-     */
-    InputParameters?: string;
-    /**
-     * <p>The maximum frequency with which Config runs evaluations for a rule. Your
-     * 			Config Custom Policy rule is triggered when Config delivers
-     * 			the configuration snapshot. For more information, see <a>ConfigSnapshotDeliveryProperties</a>.</p>
-     */
-    MaximumExecutionFrequency?: MaximumExecutionFrequency | string;
-    /**
-     * <p>The type of the Amazon Web Services resource that was evaluated.</p>
-     */
-    ResourceTypesScope?: string[];
-    /**
-     * <p>The ID of the Amazon Web Services resource that was evaluated.</p>
-     */
-    ResourceIdScope?: string;
-    /**
-     * <p>One part of a key-value pair that make up a tag. A key is a general label that acts like a category for more specific tag values.</p>
-     */
-    TagKeyScope?: string;
-    /**
-     * <p>The optional part of a key-value pair that make up a tag. A value acts as a descriptor within a tag category (key).</p>
-     */
-    TagValueScope?: string;
-    /**
-     * <p>The runtime system for your organization Config Custom Policy rules. Guard is a policy-as-code language that allows you to write policies that are enforced by Config Custom Policy rules. For more information about Guard, see the <a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
-     * 			Repository</a>.</p>
-     */
-    PolicyRuntime: string | undefined;
-    /**
-     * <p>The policy definition containing the logic for your organization Config Custom Policy rule.</p>
-     */
-    PolicyText: string | undefined;
-    /**
-     * <p>A list of accounts that you can enable debug logging for your organization Config Custom Policy rule. List is null when debug logging is enabled for all accounts.</p>
-     */
-    DebugLogDeliveryAccounts?: string[];
-}
-export interface PutAggregationAuthorizationRequest {
-    /**
-     * <p>The 12-digit account ID of the account authorized to aggregate data.</p>
-     */
-    AuthorizedAccountId: string | undefined;
-    /**
-     * <p>The region authorized to collect aggregated data.</p>
-     */
-    AuthorizedAwsRegion: string | undefined;
-    /**
-     * <p>An array of tag object.</p>
-     */
-    Tags?: Tag[];
-}
-export interface PutAggregationAuthorizationResponse {
-    /**
-     * <p>Returns an AggregationAuthorization object.
-     *
-     * 		</p>
-     */
-    AggregationAuthorization?: AggregationAuthorization;
-}
-export interface PutConfigRuleRequest {
-    /**
-     * <p>The rule that you want to add to your account.</p>
-     */
-    ConfigRule: ConfigRule | undefined;
-    /**
-     * <p>An array of tag object.</p>
-     */
-    Tags?: Tag[];
-}
-export interface PutConfigurationAggregatorRequest {
-    /**
-     * <p>The name of the configuration aggregator.</p>
-     */
-    ConfigurationAggregatorName: string | undefined;
-    /**
-     * <p>A list of AccountAggregationSource object.
-     *
-     * 		</p>
-     */
-    AccountAggregationSources?: AccountAggregationSource[];
-    /**
-     * <p>An OrganizationAggregationSource object.</p>
-     */
-    OrganizationAggregationSource?: OrganizationAggregationSource;
-    /**
-     * <p>An array of tag object.</p>
-     */
-    Tags?: Tag[];
-}
-export interface PutConfigurationAggregatorResponse {
-    /**
-     * <p>Returns a ConfigurationAggregator object.</p>
-     */
-    ConfigurationAggregator?: ConfigurationAggregator;
-}
-/**
- * <p>The input for the <a>PutConfigurationRecorder</a>
- * 			action.</p>
- */
-export interface PutConfigurationRecorderRequest {
-    /**
-     * <p>The configuration recorder object that records each
-     * 			configuration change made to the resources.</p>
-     */
-    ConfigurationRecorder: ConfigurationRecorder | undefined;
-}
 /**
  * @internal
  */
@@ -5938,6 +5915,10 @@ export declare const ComplianceSummaryByResourceTypeFilterSensitiveLog: (obj: Co
  * @internal
  */
 export declare const ConfigExportDeliveryInfoFilterSensitiveLog: (obj: ConfigExportDeliveryInfo) => any;
+/**
+ * @internal
+ */
+export declare const EvaluationModeConfigurationFilterSensitiveLog: (obj: EvaluationModeConfiguration) => any;
 /**
  * @internal
  */
@@ -6198,6 +6179,10 @@ export declare const DescribeConfigRuleEvaluationStatusRequestFilterSensitiveLog
  * @internal
  */
 export declare const DescribeConfigRuleEvaluationStatusResponseFilterSensitiveLog: (obj: DescribeConfigRuleEvaluationStatusResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeConfigRulesFiltersFilterSensitiveLog: (obj: DescribeConfigRulesFilters) => any;
 /**
  * @internal
  */
@@ -6426,10 +6411,18 @@ export declare const DescribeRetentionConfigurationsResponseFilterSensitiveLog:
  * @internal
  */
 export declare const EvaluationFilterSensitiveLog: (obj: Evaluation) => any;
+/**
+ * @internal
+ */
+export declare const EvaluationContextFilterSensitiveLog: (obj: EvaluationContext) => any;
 /**
  * @internal
  */
 export declare const EvaluationResultFilterSensitiveLog: (obj: EvaluationResult) => any;
+/**
+ * @internal
+ */
+export declare const EvaluationStatusFilterSensitiveLog: (obj: EvaluationStatus) => any;
 /**
  * @internal
  */
@@ -6606,6 +6599,18 @@ export declare const GetResourceConfigHistoryRequestFilterSensitiveLog: (obj: Ge
  * @internal
  */
 export declare const GetResourceConfigHistoryResponseFilterSensitiveLog: (obj: GetResourceConfigHistoryResponse) => any;
+/**
+ * @internal
+ */
+export declare const GetResourceEvaluationSummaryRequestFilterSensitiveLog: (obj: GetResourceEvaluationSummaryRequest) => any;
+/**
+ * @internal
+ */
+export declare const ResourceDetailsFilterSensitiveLog: (obj: ResourceDetails) => any;
+/**
+ * @internal
+ */
+export declare const GetResourceEvaluationSummaryResponseFilterSensitiveLog: (obj: GetResourceEvaluationSummaryResponse) => any;
 /**
  * @internal
  */
@@ -6653,52 +6658,44 @@ export declare const ListDiscoveredResourcesResponseFilterSensitiveLog: (obj: Li
 /**
  * @internal
  */
-export declare const ListStoredQueriesRequestFilterSensitiveLog: (obj: ListStoredQueriesRequest) => any;
+export declare const TimeWindowFilterSensitiveLog: (obj: TimeWindow) => any;
 /**
  * @internal
  */
-export declare const StoredQueryMetadataFilterSensitiveLog: (obj: StoredQueryMetadata) => any;
+export declare const ResourceEvaluationFiltersFilterSensitiveLog: (obj: ResourceEvaluationFilters) => any;
 /**
  * @internal
  */
-export declare const ListStoredQueriesResponseFilterSensitiveLog: (obj: ListStoredQueriesResponse) => any;
+export declare const ListResourceEvaluationsRequestFilterSensitiveLog: (obj: ListResourceEvaluationsRequest) => any;
 /**
  * @internal
  */
-export declare const ListTagsForResourceRequestFilterSensitiveLog: (obj: ListTagsForResourceRequest) => any;
+export declare const ResourceEvaluationFilterSensitiveLog: (obj: ResourceEvaluation) => any;
 /**
  * @internal
  */
-export declare const TagFilterSensitiveLog: (obj: Tag) => any;
+export declare const ListResourceEvaluationsResponseFilterSensitiveLog: (obj: ListResourceEvaluationsResponse) => any;
 /**
  * @internal
  */
-export declare const ListTagsForResourceResponseFilterSensitiveLog: (obj: ListTagsForResourceResponse) => any;
-/**
- * @internal
- */
-export declare const OrganizationCustomPolicyRuleMetadataFilterSensitiveLog: (obj: OrganizationCustomPolicyRuleMetadata) => any;
-/**
- * @internal
- */
-export declare const PutAggregationAuthorizationRequestFilterSensitiveLog: (obj: PutAggregationAuthorizationRequest) => any;
+export declare const ListStoredQueriesRequestFilterSensitiveLog: (obj: ListStoredQueriesRequest) => any;
 /**
  * @internal
  */
-export declare const PutAggregationAuthorizationResponseFilterSensitiveLog: (obj: PutAggregationAuthorizationResponse) => any;
+export declare const StoredQueryMetadataFilterSensitiveLog: (obj: StoredQueryMetadata) => any;
 /**
  * @internal
  */
-export declare const PutConfigRuleRequestFilterSensitiveLog: (obj: PutConfigRuleRequest) => any;
+export declare const ListStoredQueriesResponseFilterSensitiveLog: (obj: ListStoredQueriesResponse) => any;
 /**
  * @internal
  */
-export declare const PutConfigurationAggregatorRequestFilterSensitiveLog: (obj: PutConfigurationAggregatorRequest) => any;
+export declare const ListTagsForResourceRequestFilterSensitiveLog: (obj: ListTagsForResourceRequest) => any;
 /**
  * @internal
  */
-export declare const PutConfigurationAggregatorResponseFilterSensitiveLog: (obj: PutConfigurationAggregatorResponse) => any;
+export declare const TagFilterSensitiveLog: (obj: Tag) => any;
 /**
  * @internal
  */
-export declare const PutConfigurationRecorderRequestFilterSensitiveLog: (obj: PutConfigurationRecorderRequest) => any;
+export declare const ListTagsForResourceResponseFilterSensitiveLog: (obj: ListTagsForResourceResponse) => any;