@aws-sdk/client-config-service 3.292.0 → 3.294.0

package/dist-types/commands/PutConfigRuleCommand.d.ts

@@ -19,41 +19,44 @@ export interface PutConfigRuleCommandOutput extends __MetadataBearer {
  * 			see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
  *                <b>Service Limits</b>
  *             </a> in the <i>Config Developer Guide</i>.</p>
+ *          <p>There are two types of rules: <i>Config Managed Rules</i> and <i>Config Custom Rules</i>.
+ * 			You can use <code>PutConfigRule</code> to create both Config Managed Rules and  Config Custom Rules.</p>
+ *          <p>Config Managed Rules are predefined,
+ * 			customizable rules created by Config. For a list of managed rules, see
+ * 			<a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
+ * 				Managed Rules</a>. If you are adding an Config managed rule, you must specify the
+ * 			rule's identifier for the <code>SourceIdentifier</code> key.</p>
+ *          <p>Config Custom Rules are rules that you create from scratch. There are two ways to create Config custom rules: with Lambda functions
+ * 			(<a href="https://docs.aws.amazon.com/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function"> Lambda Developer Guide</a>) and with Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
+ * 					Repository</a>), a policy-as-code language.
  *
- * 		       <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
- * 			You can use <code>PutConfigRule</code> to create both Config custom rules and Config managed rules.</p>
- *
- * 		       <p>Custom rules are rules that you can create using either Guard or Lambda functions.
- * 			Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
- * 				Repository</a>) is a policy-as-code language that allows you to write policies that
- * 			are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
- * 			evaluate a custom rule. If you are adding a new Custom Lambda rule,
+ * 			Config custom rules created with Lambda
+ * 			are called <i>Config Custom Lambda Rules</i> and Config custom rules created with
+ * 			Guard are called <i>Config Custom Policy Rules</i>.</p>
+ *          <p>If you are adding a new Config Custom Lambda rule,
  * 			you first need to create an Lambda function that the rule invokes to evaluate
  * 			your resources. When you use <code>PutConfigRule</code> to add a Custom Lambda rule to Config, you must specify the Amazon Resource
  * 			Name (ARN) that Lambda assigns to the function. You specify the ARN
  * 			in the <code>SourceIdentifier</code> key. This key is part of the
  * 			<code>Source</code> object, which is part of the
  * 			<code>ConfigRule</code> object. </p>
- *
- * 		       <p>Managed rules are predefined,
- * 			customizable rules created by Config. For a list of managed rules, see
- * 			<a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
- * 				Managed Rules</a>. If you are adding an Config managed rule, you must specify the
- * 			rule's identifier for the <code>SourceIdentifier</code> key.</p>
- *
- * 		       <p>For any new rule that you add, specify the
+ *          <p>For any new Config rule that you add, specify the
  * 				<code>ConfigRuleName</code> in the <code>ConfigRule</code>
  * 			object. Do not specify the <code>ConfigRuleArn</code> or the
  * 			<code>ConfigRuleId</code>. These values are generated by Config for new rules.</p>
- * 		       <p>If you are updating a rule that you added previously, you can
+ *          <p>If you are updating a rule that you added previously, you can
  * 			specify the rule by <code>ConfigRuleName</code>,
  * 				<code>ConfigRuleId</code>, or <code>ConfigRuleArn</code> in the
  * 				<code>ConfigRule</code> data type that you use in this
  * 			request.</p>
- *
- * 		       <p>For more information about developing and using Config
- * 			rules, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html">Evaluating Amazon Web Services resource Configurations with Config</a>
+ *          <p>For more information about developing and using Config
+ * 			rules, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html">Evaluating Resources with Config Rules</a>
  * 			in the <i>Config Developer Guide</i>.</p>
+ *          <note>
+ *             <p>
+ *                <code>PutConfigRule</code> is an idempotent API. Subsequent requests won’t create a duplicate resource if one was already created. If a following request has different <code>tags</code> values,
+ * 			Config will ignore these differences and treat it as an idempotent request of the previous. In this case, <code>tags</code> will not be updated, even if they are different.</p>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -70,7 +73,7 @@ export interface PutConfigRuleCommandOutput extends __MetadataBearer {
  *
  * @throws {@link InsufficientPermissionsException} (client fault)
  *  <p>Indicates one of the following errors:</p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>For PutConfigRule, the rule cannot be created because the IAM role assigned to Config lacks permissions to perform the config:Put* action.</p>
  *             </li>
@@ -82,7 +85,7 @@ export interface PutConfigRuleCommandOutput extends __MetadataBearer {
  *             </li>
  *             <li>
  *                <p>For PutConformancePack and PutOrganizationConformancePack, a conformance pack cannot be created because you do not have the following permissions: </p>
- * 				           <ul>
+ *                <ul>
  *                   <li>
  *                      <p>You do not have permission to call IAM <code>GetRole</code> action or create a service-linked role.</p>
  *                   </li>
@@ -90,11 +93,11 @@ export interface PutConfigRuleCommandOutput extends __MetadataBearer {
  *                      <p>You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.</p>
  *                   </li>
  *                </ul>
- * 			         </li>
+ *             </li>
  *          </ul>
  *
  * @throws {@link InvalidParameterValueException} (client fault)
- *  <p>One or more of the specified parameters are invalid. Verify
+ *  <p>One or more of the specified parameters are not valid. Verify
  * 			that your parameters are valid and try again.</p>
  *
  * @throws {@link MaxNumberOfConfigRulesExceededException} (client fault)
@@ -109,7 +112,7 @@ export interface PutConfigRuleCommandOutput extends __MetadataBearer {
  *
  * @throws {@link ResourceInUseException} (client fault)
  *  <p>You see this exception in the following cases: </p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>For DeleteConfigRule, Config is deleting this rule. Try your request again later.</p>
  *             </li>

package/dist-types/commands/PutConfigurationAggregatorCommand.d.ts

@@ -17,19 +17,22 @@ export interface PutConfigurationAggregatorCommandOutput extends PutConfiguratio
  * <p>Creates and updates the configuration aggregator with the
  * 			selected source accounts and regions. The source account can be
  * 			individual account(s) or an organization.</p>
- *
- * 		       <p>
+ *          <p>
  *             <code>accountIds</code> that are passed will be replaced with existing accounts.
  * 			If you want to add additional accounts into the aggregator, call <code>DescribeConfigurationAggregators</code> to get the previous accounts and then append new ones.</p>
- * 		       <note>
- * 			         <p>Config should be enabled in source accounts and regions
+ *          <note>
+ *             <p>Config should be enabled in source accounts and regions
  * 				you want to aggregate.</p>
- *
- * 			         <p>If your source type is an organization, you must be signed in to the management account or a registered delegated administrator and all the features must be enabled in your organization.
+ *             <p>If your source type is an organization, you must be signed in to the management account or a registered delegated administrator and all the features must be enabled in your organization.
  * 				If the caller is a management account, Config calls <code>EnableAwsServiceAccess</code> API to enable integration between Config and Organizations.
  * 				If the caller is a registered delegated administrator, Config calls <code>ListDelegatedAdministrators</code> API to verify whether the caller is a valid delegated administrator.</p>
- * 			         <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the <i>Config developer guide</i>. </p>
- * 		       </note>
+ *             <p>To register a delegated administrator, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli">Register a Delegated Administrator</a> in the <i>Config developer guide</i>. </p>
+ *          </note>
+ *          <note>
+ *             <p>
+ *                <code>PutConfigurationAggregator</code> is an idempotent API. Subsequent requests won’t create a duplicate resource if one was already created. If a following request has different <code>tags</code> values,
+ * 			Config will ignore these differences and treat it as an idempotent request of the previous. In this case, <code>tags</code> will not be updated, even if they are different.</p>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -45,7 +48,7 @@ export interface PutConfigurationAggregatorCommandOutput extends PutConfiguratio
  * @see {@link ConfigServiceClientResolvedConfig | config} for ConfigServiceClient's `config` shape.
  *
  * @throws {@link InvalidParameterValueException} (client fault)
- *  <p>One or more of the specified parameters are invalid. Verify
+ *  <p>One or more of the specified parameters are not valid. Verify
  * 			that your parameters are valid and try again.</p>
  *
  * @throws {@link InvalidRoleException} (client fault)
@@ -55,7 +58,7 @@ export interface PutConfigurationAggregatorCommandOutput extends PutConfiguratio
  *  <p>For <code>StartConfigRulesEvaluation</code> API, this exception
  * 			is thrown if an evaluation is in progress or if you call the <a>StartConfigRulesEvaluation</a> API more than once per
  * 			minute.</p>
- * 		       <p>For <code>PutConfigurationAggregator</code> API, this exception
+ *          <p>For <code>PutConfigurationAggregator</code> API, this exception
  * 			is thrown if the number of accounts and aggregators exceeds the
  * 			limit.</p>
  *
@@ -64,7 +67,7 @@ export interface PutConfigurationAggregatorCommandOutput extends PutConfiguratio
  *
  * @throws {@link OrganizationAccessDeniedException} (client fault)
  *  <p>For <code>PutConfigurationAggregator</code> API, you can see this exception for the following reasons:</p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>No permission to call <code>EnableAWSServiceAccess</code> API</p>
  *             </li>
@@ -81,7 +84,7 @@ export interface PutConfigurationAggregatorCommandOutput extends PutConfiguratio
  * 			Ensure that the management account registers delagated administrator for Config service principle name before the delegated administrator creates an aggregator.</p>
  *             </li>
  *          </ul>
- * 		       <p>For all <code>OrganizationConfigRule</code> and <code>OrganizationConformancePack</code> APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.</p>
+ *          <p>For all <code>OrganizationConfigRule</code> and <code>OrganizationConformancePack</code> APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.</p>
  *
  * @throws {@link OrganizationAllFeaturesNotEnabledException} (client fault)
  *  <p>Config resource cannot be created because your organization does not have all features enabled.</p>

package/dist-types/commands/PutConfigurationRecorderCommand.d.ts

@@ -16,18 +16,18 @@ export interface PutConfigurationRecorderCommandOutput extends __MetadataBearer
 /**
  * <p>Creates a new configuration recorder to record the selected
  * 			resource configurations.</p>
- * 		       <p>You can use this action to change the role <code>roleARN</code>
+ *          <p>You can use this action to change the role <code>roleARN</code>
  * 			or the <code>recordingGroup</code> of an existing recorder. To
  * 			change the role, call the action on the existing configuration
  * 			recorder and specify a role.</p>
- * 		       <note>
- * 			         <p>Currently, you can specify only one configuration recorder
+ *          <note>
+ *             <p>Currently, you can specify only one configuration recorder
  * 				per region in your account.</p>
- * 			         <p>If <code>ConfigurationRecorder</code> does not have the
+ *             <p>If <code>ConfigurationRecorder</code> does not have the
  * 					<b>recordingGroup</b> parameter
  * 				specified, the default is to record all supported resource
  * 				types.</p>
- * 		       </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -47,7 +47,7 @@ export interface PutConfigurationRecorderCommandOutput extends __MetadataBearer
  * 			valid.</p>
  *
  * @throws {@link InvalidRecordingGroupException} (client fault)
- *  <p>Config throws an exception if the recording group does not contain a valid list of resource types. Invalid values might also be incorrectly formatted.</p>
+ *  <p>Config throws an exception if the recording group does not contain a valid list of resource types. Values that are not valid might also be incorrectly formatted.</p>
  *
  * @throws {@link InvalidRoleException} (client fault)
  *  <p>You have provided a null or empty role ARN.</p>

package/dist-types/commands/PutConformancePackCommand.d.ts

@@ -19,9 +19,9 @@ export interface PutConformancePackCommandOutput extends PutConformancePackRespo
  * 			see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
  *                <b>Service Limits</b>
  *             </a> in the Config Developer Guide.</p>
- * 		       <p>This API creates a service-linked role <code>AWSServiceRoleForConfigConforms</code> in your account.
+ *          <p>This API creates a service-linked role <code>AWSServiceRoleForConfigConforms</code> in your account.
  * 		The service-linked role is created only when the role does not exist in your account. </p>
- * 		       <note>
+ *          <note>
  *             <p>You must specify only one of the follow parameters: <code>TemplateS3Uri</code>, <code>TemplateBody</code> or <code>TemplateSSMDocumentDetails</code>.</p>
  *          </note>
  * @example
@@ -39,11 +39,11 @@ export interface PutConformancePackCommandOutput extends PutConformancePackRespo
  * @see {@link ConfigServiceClientResolvedConfig | config} for ConfigServiceClient's `config` shape.
  *
  * @throws {@link ConformancePackTemplateValidationException} (client fault)
- *  <p>You have specified a template that is invalid or supported.</p>
+ *  <p>You have specified a template that is not valid or supported.</p>
  *
  * @throws {@link InsufficientPermissionsException} (client fault)
  *  <p>Indicates one of the following errors:</p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>For PutConfigRule, the rule cannot be created because the IAM role assigned to Config lacks permissions to perform the config:Put* action.</p>
  *             </li>
@@ -55,7 +55,7 @@ export interface PutConformancePackCommandOutput extends PutConformancePackRespo
  *             </li>
  *             <li>
  *                <p>For PutConformancePack and PutOrganizationConformancePack, a conformance pack cannot be created because you do not have the following permissions: </p>
- * 				           <ul>
+ *                <ul>
  *                   <li>
  *                      <p>You do not have permission to call IAM <code>GetRole</code> action or create a service-linked role.</p>
  *                   </li>
@@ -63,11 +63,11 @@ export interface PutConformancePackCommandOutput extends PutConformancePackRespo
  *                      <p>You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.</p>
  *                   </li>
  *                </ul>
- * 			         </li>
+ *             </li>
  *          </ul>
  *
  * @throws {@link InvalidParameterValueException} (client fault)
- *  <p>One or more of the specified parameters are invalid. Verify
+ *  <p>One or more of the specified parameters are not valid. Verify
  * 			that your parameters are valid and try again.</p>
  *
  * @throws {@link MaxNumberOfConformancePacksExceededException} (client fault)
@@ -77,7 +77,7 @@ export interface PutConformancePackCommandOutput extends PutConformancePackRespo
  *
  * @throws {@link ResourceInUseException} (client fault)
  *  <p>You see this exception in the following cases: </p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>For DeleteConfigRule, Config is deleting this rule. Try your request again later.</p>
  *             </li>

package/dist-types/commands/PutDeliveryChannelCommand.d.ts

@@ -16,21 +16,19 @@ export interface PutDeliveryChannelCommandOutput extends __MetadataBearer {
 /**
  * <p>Creates a delivery channel object to deliver configuration
  * 			information to an Amazon S3 bucket and Amazon SNS topic.</p>
- * 		       <p>Before you can create a delivery channel, you must create a
+ *          <p>Before you can create a delivery channel, you must create a
  * 			configuration recorder.</p>
- * 		       <p>You can use this action to change the Amazon S3 bucket or an
+ *          <p>You can use this action to change the Amazon S3 bucket or an
  * 			Amazon SNS topic of the existing delivery channel. To change the
  * 			Amazon S3 bucket or an Amazon SNS topic, call this action and
  * 			specify the changed values for the S3 bucket and the SNS topic. If
  * 			you specify a different value for either the S3 bucket or the SNS
  * 			topic, this action will keep the existing value for the parameter
  * 			that is not changed.</p>
- * 		       <note>
- * 			         <p>You can have only one delivery channel per region in your
+ *          <note>
+ *             <p>You can have only one delivery channel per region in your
  * 				account.</p>
- *
- *
- * 		       </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -50,13 +48,13 @@ export interface PutDeliveryChannelCommandOutput extends __MetadataBearer {
  * 			write to it.</p>
  *
  * @throws {@link InvalidDeliveryChannelNameException} (client fault)
- *  <p>The specified delivery channel name is invalid.</p>
+ *  <p>The specified delivery channel name is not valid.</p>
  *
  * @throws {@link InvalidS3KeyPrefixException} (client fault)
- *  <p>The specified Amazon S3 key prefix is invalid.</p>
+ *  <p>The specified Amazon S3 key prefix is not valid.</p>
  *
  * @throws {@link InvalidS3KmsKeyArnException} (client fault)
- *  <p>The specified Amazon KMS Key ARN is invalid.</p>
+ *  <p>The specified Amazon KMS Key ARN is not valid.</p>
  *
  * @throws {@link InvalidSNSTopicARNException} (client fault)
  *  <p>The specified Amazon SNS topic does not exist.</p>

package/dist-types/commands/PutEvaluationsCommand.d.ts

@@ -32,14 +32,14 @@ export interface PutEvaluationsCommandOutput extends PutEvaluationsResponse, __M
  * @see {@link ConfigServiceClientResolvedConfig | config} for ConfigServiceClient's `config` shape.
  *
  * @throws {@link InvalidParameterValueException} (client fault)
- *  <p>One or more of the specified parameters are invalid. Verify
+ *  <p>One or more of the specified parameters are not valid. Verify
  * 			that your parameters are valid and try again.</p>
  *
  * @throws {@link InvalidResultTokenException} (client fault)
- *  <p>The specified <code>ResultToken</code> is invalid.</p>
+ *  <p>The specified <code>ResultToken</code> is not valid.</p>
  *
  * @throws {@link NoSuchConfigRuleException} (client fault)
- *  <p>The Config rule in the request is invalid. Verify that the rule is an Config Custom Policy rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.</p>
+ *  <p>The Config rule in the request is not valid. Verify that the rule is an Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.</p>
  *
  *
  */

package/dist-types/commands/PutExternalEvaluationCommand.d.ts

@@ -31,11 +31,11 @@ export interface PutExternalEvaluationCommandOutput extends PutExternalEvaluatio
  * @see {@link ConfigServiceClientResolvedConfig | config} for ConfigServiceClient's `config` shape.
  *
  * @throws {@link InvalidParameterValueException} (client fault)
- *  <p>One or more of the specified parameters are invalid. Verify
+ *  <p>One or more of the specified parameters are not valid. Verify
  * 			that your parameters are valid and try again.</p>
  *
  * @throws {@link NoSuchConfigRuleException} (client fault)
- *  <p>The Config rule in the request is invalid. Verify that the rule is an Config Custom Policy rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.</p>
+ *  <p>The Config rule in the request is not valid. Verify that the rule is an Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.</p>
  *
  *
  */

package/dist-types/commands/PutOrganizationConfigRuleCommand.d.ts

@@ -19,38 +19,36 @@ export interface PutOrganizationConfigRuleCommandOutput extends PutOrganizationC
  * 			see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
  *                <b>Service Limits</b>
  *             </a> in the <i>Config Developer Guide</i>.</p>
- * 	        <p> Only a management account and a delegated administrator can create or update an organization Config rule.
+ *          <p> Only a management account and a delegated administrator can create or update an organization Config rule.
  * 		When calling this API with a delegated administrator, you must ensure Organizations
  * 		<code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
- * 		       <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service-linked
+ *          <p>This API enables organization service access through the <code>EnableAWSServiceAccess</code> action and creates a service-linked
  * 			role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the management or delegated administrator account of your organization.
  * 			The service-linked role is created only when the role does not exist in the caller account.
  * 			Config verifies the existence of role with <code>GetRole</code> action.</p>
- * 		       <p>To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
+ *          <p>To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
  * 			<code>register-delegated-administrator</code> for <code>config-multiaccountsetup.amazonaws.com</code>. </p>
- *
- * 		       <p>There are two types of rules: Config Custom Rules and Config Managed Rules.
- * 			You can use <code>PutOrganizationConfigRule</code> to create both Config custom rules and Config managed rules.</p>
- *
- * 		       <p>Custom rules are rules that you can create using either Guard or Lambda functions.
- * 			Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
- * 				Repository</a>) is a policy-as-code language that allows you to write policies that
- * 			are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to
- * 			evaluate a custom rule. If you are adding a new Custom Lambda rule, you first need to create an Lambda function in the management account or a delegated
- * 		administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed account that can be assumed by the Lambda function.
- * 		When you use <code>PutOrganizationConfigRule</code> to add a Custom Lambda rule to Config, you must
- * 			specify the Amazon Resource Name (ARN) that Lambda assigns to the function.</p>
- *
- * 		       <p>Managed rules are predefined,
+ *          <p>There are two types of rules: <i>Config Managed Rules</i> and <i>Config Custom Rules</i>.
+ * 			You can use <code>PutOrganizationConfigRule</code> to create both Config Managed Rules and Config Custom Rules.</p>
+ *          <p>Config Managed Rules are predefined,
  * 			customizable rules created by Config. For a list of managed rules, see
  * 			<a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">List of Config
  * 				Managed Rules</a>. If you are adding an Config managed rule, you must specify the rule's identifier for the <code>RuleIdentifier</code> key.</p>
- *
- *
- * 		       <note>
+ *          <p>Config Custom Rules are rules that you create from scratch. There are two ways to create Config custom rules: with Lambda functions
+ * 			(<a href="https://docs.aws.amazon.com/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function"> Lambda Developer Guide</a>) and with Guard (<a href="https://github.com/aws-cloudformation/cloudformation-guard">Guard GitHub
+ * 					Repository</a>), a policy-as-code language.
+ *
+ * 			Config custom rules created with Lambda
+ * 			are called <i>Config Custom Lambda Rules</i> and Config custom rules created with
+ * 			Guard are called <i>Config Custom Policy Rules</i>.</p>
+ *          <p>If you are adding a new Config Custom Lambda rule, you first need to create an Lambda function in the management account or a delegated
+ * 		administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed account that can be assumed by the Lambda function.
+ * 		When you use <code>PutOrganizationConfigRule</code> to add a Custom Lambda rule to Config, you must
+ * 			specify the Amazon Resource Name (ARN) that Lambda assigns to the function.</p>
+ *          <note>
  *             <p>Prerequisite: Ensure you call <code>EnableAllFeatures</code> API to enable all features in an organization.</p>
- * 			         <p>Make sure to specify one of either <code>OrganizationCustomPolicyRuleMetadata</code> for Custom Policy rules, <code>OrganizationCustomRuleMetadata</code> for Custom Lambda rules, or <code>OrganizationManagedRuleMetadata</code> for managed rules.</p>
- * 			      </note>
+ *             <p>Make sure to specify one of either <code>OrganizationCustomPolicyRuleMetadata</code> for Custom Policy rules, <code>OrganizationCustomRuleMetadata</code> for Custom Lambda rules, or <code>OrganizationManagedRuleMetadata</code> for managed rules.</p>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -67,7 +65,7 @@ export interface PutOrganizationConfigRuleCommandOutput extends PutOrganizationC
  *
  * @throws {@link InsufficientPermissionsException} (client fault)
  *  <p>Indicates one of the following errors:</p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>For PutConfigRule, the rule cannot be created because the IAM role assigned to Config lacks permissions to perform the config:Put* action.</p>
  *             </li>
@@ -79,7 +77,7 @@ export interface PutOrganizationConfigRuleCommandOutput extends PutOrganizationC
  *             </li>
  *             <li>
  *                <p>For PutConformancePack and PutOrganizationConformancePack, a conformance pack cannot be created because you do not have the following permissions: </p>
- * 				           <ul>
+ *                <ul>
  *                   <li>
  *                      <p>You do not have permission to call IAM <code>GetRole</code> action or create a service-linked role.</p>
  *                   </li>
@@ -87,11 +85,11 @@ export interface PutOrganizationConfigRuleCommandOutput extends PutOrganizationC
  *                      <p>You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.</p>
  *                   </li>
  *                </ul>
- * 			         </li>
+ *             </li>
  *          </ul>
  *
  * @throws {@link InvalidParameterValueException} (client fault)
- *  <p>One or more of the specified parameters are invalid. Verify
+ *  <p>One or more of the specified parameters are not valid. Verify
  * 			that your parameters are valid and try again.</p>
  *
  * @throws {@link MaxNumberOfOrganizationConfigRulesExceededException} (client fault)
@@ -104,7 +102,7 @@ export interface PutOrganizationConfigRuleCommandOutput extends PutOrganizationC
  *
  * @throws {@link OrganizationAccessDeniedException} (client fault)
  *  <p>For <code>PutConfigurationAggregator</code> API, you can see this exception for the following reasons:</p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>No permission to call <code>EnableAWSServiceAccess</code> API</p>
  *             </li>
@@ -121,14 +119,14 @@ export interface PutOrganizationConfigRuleCommandOutput extends PutOrganizationC
  * 			Ensure that the management account registers delagated administrator for Config service principle name before the delegated administrator creates an aggregator.</p>
  *             </li>
  *          </ul>
- * 		       <p>For all <code>OrganizationConfigRule</code> and <code>OrganizationConformancePack</code> APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.</p>
+ *          <p>For all <code>OrganizationConfigRule</code> and <code>OrganizationConformancePack</code> APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.</p>
  *
  * @throws {@link OrganizationAllFeaturesNotEnabledException} (client fault)
  *  <p>Config resource cannot be created because your organization does not have all features enabled.</p>
  *
  * @throws {@link ResourceInUseException} (client fault)
  *  <p>You see this exception in the following cases: </p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>For DeleteConfigRule, Config is deleting this rule. Try your request again later.</p>
  *             </li>
@@ -153,9 +151,9 @@ export interface PutOrganizationConfigRuleCommandOutput extends PutOrganizationC
  *          </ul>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The requested action is invalid.</p>
- * 		       <p>For PutStoredQuery, you will see this exception if there are missing required fields or if the input value fails the validation, or if you are trying to create more than 300 queries.</p>
- * 		       <p>For GetStoredQuery, ListStoredQuery, and DeleteStoredQuery you will see this exception if there are missing required fields or if the input value fails the validation.</p>
+ *  <p>The requested action is not valid.</p>
+ *          <p>For PutStoredQuery, you will see this exception if there are missing required fields or if the input value fails the validation, or if you are trying to create more than 300 queries.</p>
+ *          <p>For GetStoredQuery, ListStoredQuery, and DeleteStoredQuery you will see this exception if there are missing required fields or if the input value fails the validation.</p>
  *
  *
  */

package/dist-types/commands/PutOrganizationConformancePackCommand.d.ts

@@ -18,23 +18,20 @@ export interface PutOrganizationConformancePackCommandOutput extends PutOrganiza
  * 			see <a href="https://docs.aws.amazon.com/config/latest/developerguide/configlimits.html">
  *                <b>Service Limits</b>
  *             </a> in the Config Developer Guide.</p>
- * 		       <p>Only a management account and a delegated administrator can call this API.
+ *          <p>Only a management account and a delegated administrator can call this API.
  * 			When calling this API with a delegated administrator, you must ensure Organizations
  * 			<code>ListDelegatedAdministrator</code> permissions are added. An organization can have up to 3 delegated administrators.</p>
- * 		       <p>This API enables organization service access for <code>config-multiaccountsetup.amazonaws.com</code>
+ *          <p>This API enables organization service access for <code>config-multiaccountsetup.amazonaws.com</code>
  * 			through the <code>EnableAWSServiceAccess</code> action and creates a
  * 			service-linked role <code>AWSServiceRoleForConfigMultiAccountSetup</code> in the management or delegated administrator account of your organization.
  * 			The service-linked role is created only when the role does not exist in the caller account.
  * 			To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization
  * 			<code>register-delegate-admin</code> for <code>config-multiaccountsetup.amazonaws.com</code>.</p>
- *
- *
- *
- * 		       <note>
- * 			         <p>Prerequisite: Ensure you call <code>EnableAllFeatures</code> API to enable all features in an organization.</p>
- * 			         <p>You must specify either the <code>TemplateS3Uri</code> or the <code>TemplateBody</code> parameter, but not both.
+ *          <note>
+ *             <p>Prerequisite: Ensure you call <code>EnableAllFeatures</code> API to enable all features in an organization.</p>
+ *             <p>You must specify either the <code>TemplateS3Uri</code> or the <code>TemplateBody</code> parameter, but not both.
  * 			If you provide both Config uses the <code>TemplateS3Uri</code> parameter and ignores the <code>TemplateBody</code> parameter.</p>
- * 			         <p>Config sets the state of a conformance pack to CREATE_IN_PROGRESS and UPDATE_IN_PROGRESS until the conformance pack is created or updated.
+ *             <p>Config sets the state of a conformance pack to CREATE_IN_PROGRESS and UPDATE_IN_PROGRESS until the conformance pack is created or updated.
  * 				You cannot update a conformance pack while it is in this state.</p>
  *          </note>
  * @example
@@ -53,7 +50,7 @@ export interface PutOrganizationConformancePackCommandOutput extends PutOrganiza
  *
  * @throws {@link InsufficientPermissionsException} (client fault)
  *  <p>Indicates one of the following errors:</p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>For PutConfigRule, the rule cannot be created because the IAM role assigned to Config lacks permissions to perform the config:Put* action.</p>
  *             </li>
@@ -65,7 +62,7 @@ export interface PutOrganizationConformancePackCommandOutput extends PutOrganiza
  *             </li>
  *             <li>
  *                <p>For PutConformancePack and PutOrganizationConformancePack, a conformance pack cannot be created because you do not have the following permissions: </p>
- * 				           <ul>
+ *                <ul>
  *                   <li>
  *                      <p>You do not have permission to call IAM <code>GetRole</code> action or create a service-linked role.</p>
  *                   </li>
@@ -73,7 +70,7 @@ export interface PutOrganizationConformancePackCommandOutput extends PutOrganiza
  *                      <p>You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.</p>
  *                   </li>
  *                </ul>
- * 			         </li>
+ *             </li>
  *          </ul>
  *
  * @throws {@link MaxNumberOfOrganizationConformancePacksExceededException} (client fault)
@@ -86,7 +83,7 @@ export interface PutOrganizationConformancePackCommandOutput extends PutOrganiza
  *
  * @throws {@link OrganizationAccessDeniedException} (client fault)
  *  <p>For <code>PutConfigurationAggregator</code> API, you can see this exception for the following reasons:</p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>No permission to call <code>EnableAWSServiceAccess</code> API</p>
  *             </li>
@@ -103,17 +100,17 @@ export interface PutOrganizationConformancePackCommandOutput extends PutOrganiza
  * 			Ensure that the management account registers delagated administrator for Config service principle name before the delegated administrator creates an aggregator.</p>
  *             </li>
  *          </ul>
- * 		       <p>For all <code>OrganizationConfigRule</code> and <code>OrganizationConformancePack</code> APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.</p>
+ *          <p>For all <code>OrganizationConfigRule</code> and <code>OrganizationConformancePack</code> APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.</p>
  *
  * @throws {@link OrganizationAllFeaturesNotEnabledException} (client fault)
  *  <p>Config resource cannot be created because your organization does not have all features enabled.</p>
  *
  * @throws {@link OrganizationConformancePackTemplateValidationException} (client fault)
- *  <p>You have specified a template that is invalid or supported.</p>
+ *  <p>You have specified a template that is not valid or supported.</p>
  *
  * @throws {@link ResourceInUseException} (client fault)
  *  <p>You see this exception in the following cases: </p>
- * 		       <ul>
+ *          <ul>
  *             <li>
  *                <p>For DeleteConfigRule, Config is deleting this rule. Try your request again later.</p>
  *             </li>
@@ -138,9 +135,9 @@ export interface PutOrganizationConformancePackCommandOutput extends PutOrganiza
  *          </ul>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The requested action is invalid.</p>
- * 		       <p>For PutStoredQuery, you will see this exception if there are missing required fields or if the input value fails the validation, or if you are trying to create more than 300 queries.</p>
- * 		       <p>For GetStoredQuery, ListStoredQuery, and DeleteStoredQuery you will see this exception if there are missing required fields or if the input value fails the validation.</p>
+ *  <p>The requested action is not valid.</p>
+ *          <p>For PutStoredQuery, you will see this exception if there are missing required fields or if the input value fails the validation, or if you are trying to create more than 300 queries.</p>
+ *          <p>For GetStoredQuery, ListStoredQuery, and DeleteStoredQuery you will see this exception if there are missing required fields or if the input value fails the validation.</p>
  *
  *
  */