@aws-sdk/client-config-service 3.427.0 → 3.428.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. package/dist-cjs/models/models_0.js +19 -0
  2. package/dist-es/models/models_0.js +19 -0
  3. package/dist-types/commands/BatchGetAggregateResourceConfigCommand.d.ts +3 -3
  4. package/dist-types/commands/BatchGetResourceConfigCommand.d.ts +3 -3
  5. package/dist-types/commands/DescribeConfigurationRecordersCommand.d.ts +2 -2
  6. package/dist-types/commands/DescribeRemediationExecutionStatusCommand.d.ts +2 -2
  7. package/dist-types/commands/GetAggregateDiscoveredResourceCountsCommand.d.ts +1 -1
  8. package/dist-types/commands/GetAggregateResourceConfigCommand.d.ts +3 -3
  9. package/dist-types/commands/GetDiscoveredResourceCountsCommand.d.ts +1 -1
  10. package/dist-types/commands/GetResourceConfigHistoryCommand.d.ts +8 -4
  11. package/dist-types/commands/ListAggregateDiscoveredResourcesCommand.d.ts +2 -2
  12. package/dist-types/commands/ListDiscoveredResourcesCommand.d.ts +2 -2
  13. package/dist-types/commands/PutConfigurationRecorderCommand.d.ts +2 -2
  14. package/dist-types/commands/PutDeliveryChannelCommand.d.ts +3 -1
  15. package/dist-types/commands/StartRemediationExecutionCommand.d.ts +2 -2
  16. package/dist-types/models/models_0.d.ts +230 -51
  17. package/dist-types/models/models_1.d.ts +4 -2
  18. package/dist-types/ts3.4/models/models_0.d.ts +19 -0
  19. package/package.json +31 -31
package/dist-types/models/models_0.d.ts CHANGED
@@ -532,6 +532,7 @@ export interface AggregateEvaluationResult {
532
532
  */
533
533
  export declare const ResourceType: {
534
534
  readonly ACMPCACertificateAuthority: "AWS::ACMPCA::CertificateAuthority";
535
+ readonly APSRuleGroupsNamespace: "AWS::APS::RuleGroupsNamespace";
535
536
  readonly AccessAnalyzerAnalyzer: "AWS::AccessAnalyzer::Analyzer";
536
537
  readonly AccountPublicAccessBlock: "AWS::S3::AccountPublicAccessBlock";
537
538
  readonly Alarm: "AWS::CloudWatch::Alarm";
@@ -555,6 +556,7 @@ export declare const ResourceType: {
555
556
  readonly AppRunnerVpcConnector: "AWS::AppRunner::VpcConnector";
556
557
  readonly AppStreamApplication: "AWS::AppStream::Application";
557
558
  readonly AppStreamDirectoryConfig: "AWS::AppStream::DirectoryConfig";
559
+ readonly AppStreamStack: "AWS::AppStream::Stack";
558
560
  readonly AppSyncGraphQLApi: "AWS::AppSync::GraphQLApi";
559
561
  readonly Application: "AWS::ElasticBeanstalk::Application";
560
562
  readonly ApplicationVersion: "AWS::ElasticBeanstalk::ApplicationVersion";
@@ -572,6 +574,7 @@ export declare const ResourceType: {
572
574
  readonly BackupVault: "AWS::Backup::BackupVault";
573
575
  readonly BatchComputeEnvironment: "AWS::Batch::ComputeEnvironment";
574
576
  readonly BatchJobQueue: "AWS::Batch::JobQueue";
577
+ readonly BatchSchedulingPolicy: "AWS::Batch::SchedulingPolicy";
575
578
  readonly Bucket: "AWS::S3::Bucket";
576
579
  readonly BudgetsBudgetsAction: "AWS::Budgets::BudgetsAction";
577
580
  readonly CassandraKeyspace: "AWS::Cassandra::Keyspace";
@@ -586,9 +589,11 @@ export declare const ResourceType: {
586
589
  readonly ClusterSnapshot: "AWS::Redshift::ClusterSnapshot";
587
590
  readonly ClusterSubnetGroup: "AWS::Redshift::ClusterSubnetGroup";
588
591
  readonly CodeArtifactRepository: "AWS::CodeArtifact::Repository";
592
+ readonly CodeBuildReportGroup: "AWS::CodeBuild::ReportGroup";
589
593
  readonly CodeDeployApplication: "AWS::CodeDeploy::Application";
590
594
  readonly CodeDeployDeploymentConfig: "AWS::CodeDeploy::DeploymentConfig";
591
595
  readonly CodeDeployDeploymentGroup: "AWS::CodeDeploy::DeploymentGroup";
596
+ readonly CodeGuruProfilerProfilingGroup: "AWS::CodeGuruProfiler::ProfilingGroup";
592
597
  readonly CodeGuruReviewerRepositoryAssociation: "AWS::CodeGuruReviewer::RepositoryAssociation";
593
598
  readonly ConformancePackCompliance: "AWS::Config::ConformancePackCompliance";
594
599
  readonly ConnectPhoneNumber: "AWS::Connect::PhoneNumber";
@@ -701,6 +706,7 @@ export declare const ResourceType: {
701
706
  readonly ImageBuilderDistributionConfiguration: "AWS::ImageBuilder::DistributionConfiguration";
702
707
  readonly ImageBuilderImagePipeline: "AWS::ImageBuilder::ImagePipeline";
703
708
  readonly ImageBuilderInfrastructureConfiguration: "AWS::ImageBuilder::InfrastructureConfiguration";
709
+ readonly InspectorV2Filter: "AWS::InspectorV2::Filter";
704
710
  readonly Instance: "AWS::EC2::Instance";
705
711
  readonly InternetGateway: "AWS::EC2::InternetGateway";
706
712
  readonly IoTAccountAuditConfiguration: "AWS::IoT::AccountAuditConfiguration";
@@ -715,8 +721,10 @@ export declare const ResourceType: {
715
721
  readonly IoTEventsDetectorModel: "AWS::IoTEvents::DetectorModel";
716
722
  readonly IoTEventsInput: "AWS::IoTEvents::Input";
717
723
  readonly IoTFleetMetric: "AWS::IoT::FleetMetric";
724
+ readonly IoTJobTemplate: "AWS::IoT::JobTemplate";
718
725
  readonly IoTMitigationAction: "AWS::IoT::MitigationAction";
719
726
  readonly IoTPolicy: "AWS::IoT::Policy";
727
+ readonly IoTProvisioningTemplate: "AWS::IoT::ProvisioningTemplate";
720
728
  readonly IoTRoleAlias: "AWS::IoT::RoleAlias";
721
729
  readonly IoTScheduledAudit: "AWS::IoT::ScheduledAudit";
722
730
  readonly IoTSecurityProfile: "AWS::IoT::SecurityProfile";
@@ -725,9 +733,12 @@ export declare const ResourceType: {
725
733
  readonly IoTSiteWiseGateway: "AWS::IoTSiteWise::Gateway";
726
734
  readonly IoTSiteWisePortal: "AWS::IoTSiteWise::Portal";
727
735
  readonly IoTSiteWiseProject: "AWS::IoTSiteWise::Project";
736
+ readonly IoTTwinMakerComponentType: "AWS::IoTTwinMaker::ComponentType";
728
737
  readonly IoTTwinMakerEntity: "AWS::IoTTwinMaker::Entity";
729
738
  readonly IoTTwinMakerScene: "AWS::IoTTwinMaker::Scene";
730
739
  readonly IoTTwinMakerWorkspace: "AWS::IoTTwinMaker::Workspace";
740
+ readonly IoTWirelessFuotaTask: "AWS::IoTWireless::FuotaTask";
741
+ readonly IoTWirelessMulticastGroup: "AWS::IoTWireless::MulticastGroup";
731
742
  readonly IoTWirelessServiceProfile: "AWS::IoTWireless::ServiceProfile";
732
743
  readonly KendraIndex: "AWS::Kendra::Index";
733
744
  readonly Key: "AWS::KMS::Key";
@@ -751,11 +762,13 @@ export declare const ResourceType: {
751
762
  readonly LogsDestination: "AWS::Logs::Destination";
752
763
  readonly LookoutMetricsAlert: "AWS::LookoutMetrics::Alert";
753
764
  readonly LookoutVisionProject: "AWS::LookoutVision::Project";
765
+ readonly MSKBatchScramSecret: "AWS::MSK::BatchScramSecret";
754
766
  readonly MSKCluster: "AWS::MSK::Cluster";
755
767
  readonly MSKConfiguration: "AWS::MSK::Configuration";
756
768
  readonly ManagedInstanceInventory: "AWS::SSM::ManagedInstanceInventory";
757
769
  readonly ManagedRuleSetV2: "AWS::WAFv2::ManagedRuleSet";
758
770
  readonly MediaConnectFlowEntitlement: "AWS::MediaConnect::FlowEntitlement";
771
+ readonly MediaConnectFlowSource: "AWS::MediaConnect::FlowSource";
759
772
  readonly MediaConnectFlowVpcInterface: "AWS::MediaConnect::FlowVpcInterface";
760
773
  readonly MediaPackagePackagingConfiguration: "AWS::MediaPackage::PackagingConfiguration";
761
774
  readonly MediaPackagePackagingGroup: "AWS::MediaPackage::PackagingGroup";
@@ -778,6 +791,7 @@ export declare const ResourceType: {
778
791
  readonly PanoramaPackage: "AWS::Panorama::Package";
779
792
  readonly PatchCompliance: "AWS::SSM::PatchCompliance";
780
793
  readonly PersonalizeDataset: "AWS::Personalize::Dataset";
794
+ readonly PersonalizeDatasetGroup: "AWS::Personalize::DatasetGroup";
781
795
  readonly PersonalizeSchema: "AWS::Personalize::Schema";
782
796
  readonly PersonalizeSolution: "AWS::Personalize::Solution";
783
797
  readonly PinpointApp: "AWS::Pinpoint::App";
@@ -827,6 +841,8 @@ export declare const ResourceType: {
827
841
  readonly Route53ResolverFirewallDomainList: "AWS::Route53Resolver::FirewallDomainList";
828
842
  readonly Route53ResolverFirewallRuleGroupAssociation: "AWS::Route53Resolver::FirewallRuleGroupAssociation";
829
843
  readonly Route53ResolverResolverEndpoint: "AWS::Route53Resolver::ResolverEndpoint";
844
+ readonly Route53ResolverResolverQueryLoggingConfig: "AWS::Route53Resolver::ResolverQueryLoggingConfig";
845
+ readonly Route53ResolverResolverQueryLoggingConfigAssociation: "AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation";
830
846
  readonly Route53ResolverResolverRule: "AWS::Route53Resolver::ResolverRule";
831
847
  readonly Route53ResolverResolverRuleAssociation: "AWS::Route53Resolver::ResolverRuleAssociation";
832
848
  readonly RouteTable: "AWS::EC2::RouteTable";
@@ -844,6 +860,7 @@ export declare const ResourceType: {
844
860
  readonly SageMakerAppImageConfig: "AWS::SageMaker::AppImageConfig";
845
861
  readonly SageMakerCodeRepository: "AWS::SageMaker::CodeRepository";
846
862
  readonly SageMakerDomain: "AWS::SageMaker::Domain";
863
+ readonly SageMakerFeatureGroup: "AWS::SageMaker::FeatureGroup";
847
864
  readonly SageMakerImage: "AWS::SageMaker::Image";
848
865
  readonly SageMakerModel: "AWS::SageMaker::Model";
849
866
  readonly SageMakerNotebookInstanceLifecycleConfig: "AWS::SageMaker::NotebookInstanceLifecycleConfig";
@@ -853,6 +870,7 @@ export declare const ResourceType: {
853
870
  readonly Secret: "AWS::SecretsManager::Secret";
854
871
  readonly SecurityGroup: "AWS::EC2::SecurityGroup";
855
872
  readonly ServiceDiscoveryHttpNamespace: "AWS::ServiceDiscovery::HttpNamespace";
873
+ readonly ServiceDiscoveryInstance: "AWS::ServiceDiscovery::Instance";
856
874
  readonly ServiceDiscoveryPublicDnsNamespace: "AWS::ServiceDiscovery::PublicDnsNamespace";
857
875
  readonly ServiceDiscoveryService: "AWS::ServiceDiscovery::Service";
858
876
  readonly SignerSigningProfile: "AWS::Signer::SigningProfile";
@@ -867,6 +885,7 @@ export declare const ResourceType: {
867
885
  readonly Topic: "AWS::SNS::Topic";
868
886
  readonly Trail: "AWS::CloudTrail::Trail";
869
887
  readonly TransferAgreement: "AWS::Transfer::Agreement";
888
+ readonly TransferCertificate: "AWS::Transfer::Certificate";
870
889
  readonly TransferConnector: "AWS::Transfer::Connector";
871
890
  readonly TransferWorkflow: "AWS::Transfer::Workflow";
872
891
  readonly TransitGateway: "AWS::EC2::TransitGateway";
@@ -1005,9 +1024,6 @@ export interface BaseConfigurationItem {
1005
1024
  * <p>ResourceDeletedNotRecorded – The resource was deleted but its configuration was not recorded since the recorder excludes the recording of resources of this type</p>
1006
1025
  * </li>
1007
1026
  * </ul>
1008
- * <note>
1009
- * <p>The CIs do not incur any cost.</p>
1010
- * </note>
1011
1027
  */
1012
1028
  configurationItemStatus?: ConfigurationItemStatus | string;
1013
1029
  /**
@@ -1328,7 +1344,7 @@ export declare const ConfigRuleState: {
1328
1344
  export type ConfigRuleState = (typeof ConfigRuleState)[keyof typeof ConfigRuleState];
1329
1345
  /**
1330
1346
  * @public
1331
- * <p>The configuration object for Config rule evaluation mode. The Supported valid values are Detective or Proactive.</p>
1347
+ * <p>The configuration object for Config rule evaluation mode. The supported valid values are Detective or Proactive.</p>
1332
1348
  */
1333
1349
  export interface EvaluationModeConfiguration {
1334
1350
  /**
@@ -2111,9 +2127,6 @@ export interface ConfigurationItem {
2111
2127
  * <p>ResourceDeletedNotRecorded – The resource was deleted but its configuration was not recorded since the recorder excludes the recording of resources of this type</p>
2112
2128
  * </li>
2113
2129
  * </ul>
2114
- * <note>
2115
- * <p>The CIs do not incur any cost.</p>
2116
- * </note>
2117
2130
  */
2118
2131
  configurationItemStatus?: ConfigurationItemStatus | string;
2119
2132
  /**
@@ -2204,8 +2217,46 @@ export interface ConfigurationItem {
2204
2217
  }
2205
2218
  /**
2206
2219
  * @public
2207
- * <p>Specifies whether the configuration recorder excludes resource types from being recorded.
2208
- * Use the <code>resourceTypes</code> field to enter a comma-separated list of resource types to exclude as exemptions.</p>
2220
+ * <p>Specifies whether the configuration recorder excludes certain resource types from being recorded.
2221
+ * Use the <code>resourceTypes</code> field to enter a comma-separated list of resource types you want to exclude from recording.</p>
2222
+ * <p>By default, when Config adds support for a new resource type in the Region where you set up the configuration recorder,
2223
+ * including global resource types, Config starts recording resources of that type automatically.</p>
2224
+ * <note>
2225
+ * <p>
2226
+ * <b>How to use</b>
2227
+ * </p>
2228
+ * <p>To use this option, you must set the <code>useOnly</code>
2229
+ * field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html">RecordingStrategy</a>
2230
+ * to <code>EXCLUSION_BY_RESOURCE_TYPES</code>.</p>
2231
+ * <p>Config will then record configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded.</p>
2232
+ * <p>
2233
+ * <b>Globally recorded resources</b>
2234
+ * </p>
2235
+ * <p>Unless specifically listed as exclusions,
2236
+ * <code>AWS::RDS::GlobalCluster</code> will be recorded automatically in all supported Config Regions were the configuration recorder is enabled.
2237
+ * IAM users, groups, roles, and customer managed policies will be recorded automatically in all enabled Config Regions where Config was available before February 2022.
2238
+ * This list does not include the following Regions:</p>
2239
+ * <ul>
2240
+ * <li>
2241
+ * <p>Asia Pacific (Hyderabad)</p>
2242
+ * </li>
2243
+ * <li>
2244
+ * <p>Asia Pacific (Melbourne)</p>
2245
+ * </li>
2246
+ * <li>
2247
+ * <p>Europe (Spain)</p>
2248
+ * </li>
2249
+ * <li>
2250
+ * <p>Europe (Zurich)</p>
2251
+ * </li>
2252
+ * <li>
2253
+ * <p>Israel (Tel Aviv)</p>
2254
+ * </li>
2255
+ * <li>
2256
+ * <p>Middle East (UAE)</p>
2257
+ * </li>
2258
+ * </ul>
2259
+ * </note>
2209
2260
  */
2210
2261
  export interface ExclusionByResourceTypes {
2211
2262
  /**
@@ -2238,8 +2289,9 @@ export interface RecordingStrategy {
2238
2289
  * <p>The recording strategy for the configuration recorder.</p>
2239
2290
  * <ul>
2240
2291
  * <li>
2241
- * <p>If you set this option to <code>ALL_SUPPORTED_RESOURCE_TYPES</code>, Config records configuration changes for all supported regional resource types. You also must set the <code>allSupported</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a> to <code>true</code>.</p>
2242
- * <p>When Config adds support for a new type of regional resource, Config automatically starts recording resources of that type. For a list of supported resource types,
2292
+ * <p>If you set this option to <code>ALL_SUPPORTED_RESOURCE_TYPES</code>, Config records configuration changes for all supported regionally recorded resource types.
2293
+ * You also must set the <code>allSupported</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a> to <code>true</code>.
2294
+ * When Config adds support for a new regionally recorded resource type, Config automatically starts recording resources of that type. For a list of supported resource types,
2243
2295
  * see <a href="https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources">Supported Resource Types</a> in the <i>Config developer guide</i>.</p>
2244
2296
  * </li>
2245
2297
  * <li>
@@ -2250,11 +2302,14 @@ export interface RecordingStrategy {
2250
2302
  * <li>
2251
2303
  * <p>If you set this option to <code>EXCLUSION_BY_RESOURCE_TYPES</code>, Config records
2252
2304
  * configuration changes for all supported resource types, except the resource
2253
- * types that you specify as exemptions to exclude from being recorded in the
2305
+ * types that you specify to exclude from being recorded in the
2254
2306
  * <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html">ExclusionByResourceTypes</a>.</p>
2255
2307
  * </li>
2256
2308
  * </ul>
2257
2309
  * <note>
2310
+ * <p>
2311
+ * <b>Required and optional fields</b>
2312
+ * </p>
2258
2313
  * <p>The <code>recordingStrategy</code> field is optional when you set the
2259
2314
  * <code>allSupported</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a> to <code>true</code>.</p>
2260
2315
  * <p>The <code>recordingStrategy</code> field is optional when you list resource types in the
@@ -2262,12 +2317,44 @@ export interface RecordingStrategy {
2262
2317
  * <p>The <code>recordingStrategy</code> field is required if you list resource types to exclude from recording in the <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html">ExclusionByResourceTypes</a>.</p>
2263
2318
  * </note>
2264
2319
  * <note>
2320
+ * <p>
2321
+ * <b>Overriding fields</b>
2322
+ * </p>
2265
2323
  * <p>If you choose <code>EXCLUSION_BY_RESOURCE_TYPES</code> for the recording strategy, the <code>exclusionByResourceTypes</code> field will override other properties in the request.</p>
2266
- * <p>For example, even if you set <code>includeGlobalResourceTypes</code> to false, global resource types will still be automatically
2267
- * recorded in this option unless those resource types are specifically listed as exemptions in the <code>resourceTypes</code> field of <code>exclusionByResourceTypes</code>.</p>
2324
+ * <p>For example, even if you set <code>includeGlobalResourceTypes</code> to false, globally recorded IAM resource types will still be automatically
2325
+ * recorded in this option unless those resource types are specifically listed as exclusions in the <code>resourceTypes</code> field of <code>exclusionByResourceTypes</code>.</p>
2326
+ * </note>
2327
+ * <note>
2328
+ * <p>
2329
+ * <b>Global resource types and the exclusion recording strategy</b>
2330
+ * </p>
2268
2331
  * <p>By default, if you choose the <code>EXCLUSION_BY_RESOURCE_TYPES</code> recording strategy,
2269
2332
  * when Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types,
2270
2333
  * Config starts recording resources of that type automatically.</p>
2334
+ * <p>In addition, unless specifically listed as exclusions,
2335
+ * <code>AWS::RDS::GlobalCluster</code> will be recorded automatically in all supported Config Regions were the configuration recorder is enabled.
2336
+ * IAM users, groups, roles, and customer managed policies will be recorded automatically in all enabled Config Regions where Config was available before February 2022.
2337
+ * This list does not include the following Regions:</p>
2338
+ * <ul>
2339
+ * <li>
2340
+ * <p>Asia Pacific (Hyderabad)</p>
2341
+ * </li>
2342
+ * <li>
2343
+ * <p>Asia Pacific (Melbourne)</p>
2344
+ * </li>
2345
+ * <li>
2346
+ * <p>Europe (Spain)</p>
2347
+ * </li>
2348
+ * <li>
2349
+ * <p>Europe (Zurich)</p>
2350
+ * </li>
2351
+ * <li>
2352
+ * <p>Israel (Tel Aviv)</p>
2353
+ * </li>
2354
+ * <li>
2355
+ * <p>Middle East (UAE)</p>
2356
+ * </li>
2357
+ * </ul>
2271
2358
  * </note>
2272
2359
  */
2273
2360
  useOnly?: RecordingStrategyType | string;
@@ -2275,50 +2362,107 @@ export interface RecordingStrategy {
2275
2362
  /**
2276
2363
  * @public
2277
2364
  * <p>Specifies which resource types Config
2278
- * records for configuration changes.
2279
- * In the recording group, you specify whether you want to record all supported resource types or to include or exclude specific types of resources.</p>
2280
- * <p>By default, Config records configuration changes for all supported types of
2281
- * <i>Regional resources</i> that Config discovers in the
2282
- * Amazon Web Services Region in which it is running. Regional resources are tied to a
2283
- * Region and can be used only in that Region. Examples of Regional resources are Amazon EC2 instances and Amazon EBS volumes.</p>
2284
- * <p>You can also have Config record supported types of <i>global resources</i>.
2285
- * Global resources are not tied to a specific Region and can be used in all Regions. The global
2286
- * resource types that Config supports include IAM users, groups, roles, and customer managed
2287
- * policies.</p>
2365
+ * records for configuration changes. By default, Config records configuration changes for all current and future supported resource types in the Amazon Web Services Region where you have enabled Config
2366
+ * (excluding the globally recorded IAM resource types: IAM users, groups, roles, and customer managed policies).</p>
2367
+ * <p>In the recording group, you specify whether you want to record all supported current and future supported resource types or to include or exclude specific resources types.
2368
+ * For a list of supported resource types, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources">Supported Resource Types</a> in the <i>Config developer guide</i>.</p>
2369
+ * <p>If you don't want Config to record all current and future supported resource types, use one of the following recording strategies:</p>
2370
+ * <ol>
2371
+ * <li>
2372
+ * <p>
2373
+ * <b>Record all current and future resource types with exclusions</b> (<code>EXCLUSION_BY_RESOURCE_TYPES</code>), or</p>
2374
+ * </li>
2375
+ * <li>
2376
+ * <p>
2377
+ * <b>Record specific resource types</b> (<code>INCLUSION_BY_RESOURCE_TYPES</code>).</p>
2378
+ * </li>
2379
+ * </ol>
2288
2380
  * <important>
2289
- * <p>Global resource types onboarded to Config recording after February 2022 will
2290
- * be recorded only in the service's home Region for the commercial partition and
2291
- * Amazon Web Services GovCloud (US-West) for the Amazon Web Services GovCloud (US) partition. You can view the
2292
- * Configuration Items for these new global resource types only in their home Region
2293
- * and Amazon Web Services GovCloud (US-West).</p>
2381
+ * <p>
2382
+ * <b>Aurora global clusters are automatically globally recorded</b>
2383
+ * </p>
2384
+ * <p>The <code>AWS::RDS::GlobalCluster</code> resource type
2385
+ * will be recorded in all supported Config Regions where the configuration recorder is enabled.</p>
2386
+ * <p>If you do not want to record <code>AWS::RDS::GlobalCluster</code> in all enabled Regions, use the <code>EXCLUSION_BY_RESOURCE_TYPES</code> or <code>INCLUSION_BY_RESOURCE_TYPES</code> recording strategy.</p>
2294
2387
  * </important>
2295
- * <p>If you don't want Config to record all resources, you can specify which types of resources Config records with the <code>resourceTypes</code> parameter.</p>
2296
- * <p>For a list of supported resource types, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources">Supported Resource Types</a> in the <i>Config developer guide</i>.</p>
2297
- * <p>For more information and a table of the Home Regions for Global Resource Types Onboarded after February 2022, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html">Selecting Which Resources Config Records</a> in the <i>Config developer guide</i>.</p>
2298
2388
  */
2299
2389
  export interface RecordingGroup {
2300
2390
  /**
2301
2391
  * @public
2302
- * <p>Specifies whether Config records configuration changes for all supported regional resource types.</p>
2392
+ * <p>Specifies whether Config records configuration changes for all supported regionally recorded resource types.</p>
2303
2393
  * <p>If you set this field to <code>true</code>, when Config
2304
- * adds support for a new type of regional resource, Config starts recording resources of that type automatically.</p>
2394
+ * adds support for a new regionally recorded resource type, Config starts recording resources of that type automatically.</p>
2305
2395
  * <p>If you set this field to <code>true</code>,
2306
2396
  * you cannot enumerate specific resource types to record in the <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a>, or to exclude in the <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html">ExclusionByResourceTypes</a>.</p>
2397
+ * <note>
2398
+ * <p>
2399
+ * <b>Region Availability</b>
2400
+ * </p>
2401
+ * <p>Check <a href="https://docs.aws.amazon.com/config/latest/developerguide/what-is-resource-config-coverage.html">Resource Coverage by Region Availability</a>
2402
+ * to see if a resource type is supported in the Amazon Web Services Region where you set up Config.</p>
2403
+ * </note>
2307
2404
  */
2308
2405
  allSupported?: boolean;
2309
2406
  /**
2310
2407
  * @public
2311
- * <p>Specifies whether Config records configuration changes for all supported global resources.</p>
2312
- * <p>Before you set this field to <code>true</code>,
2408
+ * <p>A legacy field which <b>only applies to the globally recorded IAM resource types</b>: IAM users, groups, roles, and customer managed policies.
2409
+ * If you select this option, these resource types will be recorded in all enabled Config regions where Config was available before February 2022.
2410
+ * This list does not include the following Regions:</p>
2411
+ * <ul>
2412
+ * <li>
2413
+ * <p>Asia Pacific (Hyderabad)</p>
2414
+ * </li>
2415
+ * <li>
2416
+ * <p>Asia Pacific (Melbourne)</p>
2417
+ * </li>
2418
+ * <li>
2419
+ * <p>Europe (Spain)</p>
2420
+ * </li>
2421
+ * <li>
2422
+ * <p>Europe (Zurich)</p>
2423
+ * </li>
2424
+ * <li>
2425
+ * <p>Israel (Tel Aviv)</p>
2426
+ * </li>
2427
+ * <li>
2428
+ * <p>Middle East (UAE)</p>
2429
+ * </li>
2430
+ * </ul>
2431
+ * <important>
2432
+ * <p>
2433
+ * <b>Aurora global clusters are automatically globally recorded</b>
2434
+ * </p>
2435
+ * <p>The <code>AWS::RDS::GlobalCluster</code> resource type will be recorded in all supported Config Regions where the configuration recorder is enabled, even if <code>includeGlobalResourceTypes</code> is not set to <code>true</code>.
2436
+ * <code>includeGlobalResourceTypes</code> is a legacy field which only applies to IAM users, groups, roles, and customer managed policies.
2437
+ * </p>
2438
+ * <p>If you do not want to record <code>AWS::RDS::GlobalCluster</code> in all enabled Regions, use one of the following recording strategies:</p>
2439
+ * <ol>
2440
+ * <li>
2441
+ * <p>
2442
+ * <b>Record all current and future resource types with exclusions</b> (<code>EXCLUSION_BY_RESOURCE_TYPES</code>), or</p>
2443
+ * </li>
2444
+ * <li>
2445
+ * <p>
2446
+ * <b>Record specific resource types</b> (<code>INCLUSION_BY_RESOURCE_TYPES</code>).</p>
2447
+ * </li>
2448
+ * </ol>
2449
+ * <p>For more information, see <a href="https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html#select-resources-all">Selecting Which Resources are Recorded</a> in the <i>Config developer guide</i>.</p>
2450
+ * </important>
2451
+ * <note>
2452
+ * <p>
2453
+ * <b>Required and optional fields</b>
2454
+ * </p>
2455
+ * <p>Before you set this field to <code>true</code>,
2313
2456
  * set the <code>allSupported</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a> to
2314
2457
  * <code>true</code>. Optionally, you can set the <code>useOnly</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html">RecordingStrategy</a> to <code>ALL_SUPPORTED_RESOURCE_TYPES</code>.</p>
2315
- * <p>If you set this field to <code>true</code>, when Config
2316
- * adds support for a new type of global resource in the Region where you set up the configuration recorder, Config starts recording
2317
- * resources of that type automatically.</p>
2458
+ * </note>
2318
2459
  * <note>
2319
- * <p>If you set this field to <code>false</code> but list global resource types in the <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a>,
2460
+ * <p>
2461
+ * <b>Overriding fields</b>
2462
+ * </p>
2463
+ * <p>If you set this field to <code>false</code> but list globally recorded IAM resource types in the <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a>,
2320
2464
  * Config will still record configuration changes for those specified resource types <i>regardless</i> of if you set the <code>includeGlobalResourceTypes</code> field to false.</p>
2321
- * <p>If you do not want to record configuration changes to global resource types, make sure to not list them in the <code>resourceTypes</code> field
2465
+ * <p>If you do not want to record configuration changes to the globally recorded IAM resource types (IAM users, groups, roles, and customer managed policies), make sure to not list them in the <code>resourceTypes</code> field
2322
2466
  * in addition to setting the <code>includeGlobalResourceTypes</code> field to false.</p>
2323
2467
  * </note>
2324
2468
  */
@@ -2360,17 +2504,20 @@ export interface RecordingGroup {
2360
2504
  * <p>An object that specifies the recording strategy for the configuration recorder.</p>
2361
2505
  * <ul>
2362
2506
  * <li>
2363
- * <p>If you set the <code>useOnly</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html">RecordingStrategy</a> to <code>ALL_SUPPORTED_RESOURCE_TYPES</code>, Config records configuration changes for all supported regional resource types. You also must set the <code>allSupported</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a> to <code>true</code>. When Config adds support for a new type of regional resource, Config automatically starts recording resources of that type.</p>
2507
+ * <p>If you set the <code>useOnly</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html">RecordingStrategy</a> to <code>ALL_SUPPORTED_RESOURCE_TYPES</code>, Config records configuration changes for all supported regionally recorded resource types. You also must set the <code>allSupported</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a> to <code>true</code>. When Config adds support for a new regionally recorded resource type, Config automatically starts recording resources of that type.</p>
2364
2508
  * </li>
2365
2509
  * <li>
2366
2510
  * <p>If you set the <code>useOnly</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html">RecordingStrategy</a> to <code>INCLUSION_BY_RESOURCE_TYPES</code>, Config records configuration changes for only the resource types you specify in the <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a>.</p>
2367
2511
  * </li>
2368
2512
  * <li>
2369
2513
  * <p>If you set the <code>useOnly</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html">RecordingStrategy</a> to <code>EXCLUSION_BY_RESOURCE_TYPES</code>, Config records configuration changes for all supported resource types
2370
- * except the resource types that you specify as exemptions to exclude from being recorded in the <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html">ExclusionByResourceTypes</a>.</p>
2514
+ * except the resource types that you specify to exclude from being recorded in the <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html">ExclusionByResourceTypes</a>.</p>
2371
2515
  * </li>
2372
2516
  * </ul>
2373
2517
  * <note>
2518
+ * <p>
2519
+ * <b>Required and optional fields</b>
2520
+ * </p>
2374
2521
  * <p>The <code>recordingStrategy</code> field is optional when you set the
2375
2522
  * <code>allSupported</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html">RecordingGroup</a> to <code>true</code>.</p>
2376
2523
  * <p>The <code>recordingStrategy</code> field is optional when you list resource types in the
@@ -2378,12 +2525,44 @@ export interface RecordingGroup {
2378
2525
  * <p>The <code>recordingStrategy</code> field is required if you list resource types to exclude from recording in the <code>resourceTypes</code> field of <a href="https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html">ExclusionByResourceTypes</a>.</p>
2379
2526
  * </note>
2380
2527
  * <note>
2528
+ * <p>
2529
+ * <b>Overriding fields</b>
2530
+ * </p>
2381
2531
  * <p>If you choose <code>EXCLUSION_BY_RESOURCE_TYPES</code> for the recording strategy, the <code>exclusionByResourceTypes</code> field will override other properties in the request.</p>
2382
- * <p>For example, even if you set <code>includeGlobalResourceTypes</code> to false, global resource types will still be automatically
2383
- * recorded in this option unless those resource types are specifically listed as exemptions in the <code>resourceTypes</code> field of <code>exclusionByResourceTypes</code>.</p>
2532
+ * <p>For example, even if you set <code>includeGlobalResourceTypes</code> to false, globally recorded IAM resource types will still be automatically
2533
+ * recorded in this option unless those resource types are specifically listed as exclusions in the <code>resourceTypes</code> field of <code>exclusionByResourceTypes</code>.</p>
2534
+ * </note>
2535
+ * <note>
2536
+ * <p>
2537
+ * <b>Global resources types and the resource exclusion recording strategy</b>
2538
+ * </p>
2384
2539
  * <p>By default, if you choose the <code>EXCLUSION_BY_RESOURCE_TYPES</code> recording strategy,
2385
- * when Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types,
2386
- * Config starts recording resources of that type automatically.</p>
2540
+ * when Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types,
2541
+ * Config starts recording resources of that type automatically.</p>
2542
+ * <p>In addition, unless specifically listed as exclusions,
2543
+ * <code>AWS::RDS::GlobalCluster</code> will be recorded automatically in all supported Config Regions were the configuration recorder is enabled.
2544
+ * IAM users, groups, roles, and customer managed policies will be recorded automatically in all enabled Config Regions where Config was available before February 2022.
2545
+ * This list does not include the following Regions:</p>
2546
+ * <ul>
2547
+ * <li>
2548
+ * <p>Asia Pacific (Hyderabad)</p>
2549
+ * </li>
2550
+ * <li>
2551
+ * <p>Asia Pacific (Melbourne)</p>
2552
+ * </li>
2553
+ * <li>
2554
+ * <p>Europe (Spain)</p>
2555
+ * </li>
2556
+ * <li>
2557
+ * <p>Europe (Zurich)</p>
2558
+ * </li>
2559
+ * <li>
2560
+ * <p>Israel (Tel Aviv)</p>
2561
+ * </li>
2562
+ * <li>
2563
+ * <p>Middle East (UAE)</p>
2564
+ * </li>
2565
+ * </ul>
2387
2566
  * </note>
2388
2567
  */
2389
2568
  recordingStrategy?: RecordingStrategy;
@@ -4286,7 +4465,7 @@ export declare const OrganizationConfigRuleTriggerType: {
4286
4465
  export type OrganizationConfigRuleTriggerType = (typeof OrganizationConfigRuleTriggerType)[keyof typeof OrganizationConfigRuleTriggerType];
4287
4466
  /**
4288
4467
  * @public
4289
- * <p> organization custom rule metadata such as resource type, resource ID of Amazon Web Services resource, Lambda function ARN,
4468
+ * <p>An object that specifies organization custom rule metadata such as resource type, resource ID of Amazon Web Services resource, Lambda function ARN,
4290
4469
  * and organization trigger types that trigger Config to evaluate your Amazon Web Services resources against a rule.
4291
4470
  * It also provides the frequency with which you want Config to run evaluations for the rule if the trigger type is periodic.</p>
4292
4471
  */
@@ -4361,7 +4540,7 @@ export interface OrganizationCustomRuleMetadata {
4361
4540
  }
4362
4541
  /**
4363
4542
  * @public
4364
- * <p> organization managed rule metadata such as resource type and ID of Amazon Web Services resource along with the rule identifier.
4543
+ * <p>An object that specifies organization managed rule metadata such as resource type and ID of Amazon Web Services resource along with the rule identifier.
4365
4544
  * It also provides the frequency with which you want Config to run evaluations for the rule if the trigger type is periodic.</p>
4366
4545
  */
4367
4546
  export interface OrganizationManagedRuleMetadata {
@@ -6648,13 +6827,13 @@ export interface GetResourceConfigHistoryRequest {
6648
6827
  resourceId: string | undefined;
6649
6828
  /**
6650
6829
  * @public
6651
- * <p>The time stamp that indicates a later time. If not specified,
6830
+ * <p>The chronologically latest time in the time range for which the history requested. If not specified,
6652
6831
  * current time is taken.</p>
6653
6832
  */
6654
6833
  laterTime?: Date;
6655
6834
  /**
6656
6835
  * @public
6657
- * <p>The time stamp that indicates an earlier time. If not
6836
+ * <p>The chronologically earliest time in the time range for which the history requested. If not
6658
6837
  * specified, the action returns paginated results that contain
6659
6838
  * configuration items that start when the first configuration item was
6660
6839
  * recorded.</p>
package/dist-types/models/models_1.d.ts CHANGED
@@ -346,7 +346,8 @@ export interface PutConformancePackRequest {
346
346
  * @public
347
347
  * <p>The location of the file containing the template body (<code>s3://bucketname/prefix</code>). The uri must point to a conformance pack template (max size: 300 KB) that is located in an Amazon S3 bucket in the same Region as the conformance pack. </p>
348
348
  * <note>
349
- * <p>You must have access to read Amazon S3 bucket.</p>
349
+ * <p>You must have access to read Amazon S3 bucket.
350
+ * In addition, in order to ensure a successful deployment, the template object must not be in an <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html">archived storage class</a> if this parameter is passed.</p>
350
351
  * </note>
351
352
  */
352
353
  TemplateS3Uri?: string;
@@ -535,7 +536,8 @@ export interface PutOrganizationConformancePackRequest {
535
536
  * <p>Location of file containing the template body. The uri must point to the conformance pack template
536
537
  * (max size: 300 KB).</p>
537
538
  * <note>
538
- * <p>You must have access to read Amazon S3 bucket.</p>
539
+ * <p>You must have access to read Amazon S3 bucket.
540
+ * In addition, in order to ensure a successful deployment, the template object must not be in an <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/storage-class-intro.html">archived storage class</a> if this parameter is passed.</p>
539
541
  * </note>
540
542
  */
541
543
  TemplateS3Uri?: string;