@aws-sdk/client-controltower 3.926.0 → 3.928.0

package/dist-cjs/index.js

@@ -259,6 +259,9 @@ const LandingZoneOperationStatus = {
     IN_PROGRESS: "IN_PROGRESS",
     SUCCEEDED: "SUCCEEDED",
 };
+const RemediationType = {
+    INHERITANCE_DRIFT: "INHERITANCE_DRIFT",
+};
 const LandingZoneDriftStatus = {
     DRIFTED: "DRIFTED",
     IN_SYNC: "IN_SYNC",
@@ -278,6 +281,7 @@ const se_CreateLandingZoneCommand = async (input, context) => {
     let body;
     body = JSON.stringify(smithyClient.take(input, {
         manifest: (_) => se_Manifest(_),
+        remediationTypes: (_) => smithyClient._json(_),
         tags: (_) => smithyClient._json(_),
         version: [],
     }));
@@ -319,6 +323,7 @@ const se_DisableControlCommand = async (input, context) => {
     let body;
     body = JSON.stringify(smithyClient.take(input, {
         controlIdentifier: [],
+        enabledControlIdentifier: [],
         targetIdentifier: [],
     }));
     b.m("POST").h(headers).b(body);
@@ -502,6 +507,7 @@ const se_ListEnabledControlsCommand = async (input, context) => {
     let body;
     body = JSON.stringify(smithyClient.take(input, {
         filter: (_) => smithyClient._json(_),
+        includeChildren: [],
         maxResults: [],
         nextToken: [],
         targetIdentifier: [],
@@ -651,6 +657,7 @@ const se_UpdateLandingZoneCommand = async (input, context) => {
     body = JSON.stringify(smithyClient.take(input, {
         landingZoneIdentifier: [],
         manifest: (_) => se_Manifest(_),
+        remediationTypes: (_) => smithyClient._json(_),
         version: [],
     }));
     b.m("POST").h(headers).b(body);
@@ -1298,6 +1305,7 @@ const de_EnabledControlDetails = (output, context) => {
         controlIdentifier: smithyClient.expectString,
         driftStatusSummary: smithyClient._json,
         parameters: (_) => de_EnabledControlParameterSummaries(_),
+        parentIdentifier: smithyClient.expectString,
         statusSummary: smithyClient._json,
         targetIdentifier: smithyClient.expectString,
         targetRegions: smithyClient._json,
@@ -1323,6 +1331,7 @@ const de_LandingZoneDetail = (output, context) => {
         driftStatus: smithyClient._json,
         latestAvailableVersion: smithyClient.expectString,
         manifest: (_) => de_Manifest(_),
+        remediationTypes: smithyClient._json,
         status: smithyClient.expectString,
         version: smithyClient.expectString,
     });
@@ -1920,6 +1929,7 @@ exports.ListEnabledControlsCommand = ListEnabledControlsCommand;
 exports.ListLandingZoneOperationsCommand = ListLandingZoneOperationsCommand;
 exports.ListLandingZonesCommand = ListLandingZonesCommand;
 exports.ListTagsForResourceCommand = ListTagsForResourceCommand;
+exports.RemediationType = RemediationType;
 exports.ResetEnabledBaselineCommand = ResetEnabledBaselineCommand;
 exports.ResetEnabledControlCommand = ResetEnabledControlCommand;
 exports.ResetLandingZoneCommand = ResetLandingZoneCommand;

package/dist-es/models/models_0.js

@@ -141,6 +141,9 @@ export const LandingZoneOperationStatus = {
     IN_PROGRESS: "IN_PROGRESS",
     SUCCEEDED: "SUCCEEDED",
 };
+export const RemediationType = {
+    INHERITANCE_DRIFT: "INHERITANCE_DRIFT",
+};
 export const LandingZoneDriftStatus = {
     DRIFTED: "DRIFTED",
     IN_SYNC: "IN_SYNC",

package/dist-es/protocols/Aws_restJson1.js

@@ -12,6 +12,7 @@ export const se_CreateLandingZoneCommand = async (input, context) => {
     let body;
     body = JSON.stringify(take(input, {
         manifest: (_) => se_Manifest(_, context),
+        remediationTypes: (_) => _json(_),
         tags: (_) => _json(_),
         version: [],
     }));
@@ -53,6 +54,7 @@ export const se_DisableControlCommand = async (input, context) => {
     let body;
     body = JSON.stringify(take(input, {
         controlIdentifier: [],
+        enabledControlIdentifier: [],
         targetIdentifier: [],
     }));
     b.m("POST").h(headers).b(body);
@@ -236,6 +238,7 @@ export const se_ListEnabledControlsCommand = async (input, context) => {
     let body;
     body = JSON.stringify(take(input, {
         filter: (_) => _json(_),
+        includeChildren: [],
         maxResults: [],
         nextToken: [],
         targetIdentifier: [],
@@ -385,6 +388,7 @@ export const se_UpdateLandingZoneCommand = async (input, context) => {
     body = JSON.stringify(take(input, {
         landingZoneIdentifier: [],
         manifest: (_) => se_Manifest(_, context),
+        remediationTypes: (_) => _json(_),
         version: [],
     }));
     b.m("POST").h(headers).b(body);
@@ -1032,6 +1036,7 @@ const de_EnabledControlDetails = (output, context) => {
         controlIdentifier: __expectString,
         driftStatusSummary: _json,
         parameters: (_) => de_EnabledControlParameterSummaries(_, context),
+        parentIdentifier: __expectString,
         statusSummary: _json,
         targetIdentifier: __expectString,
         targetRegions: _json,
@@ -1057,6 +1062,7 @@ const de_LandingZoneDetail = (output, context) => {
         driftStatus: _json,
         latestAvailableVersion: __expectString,
         manifest: (_) => de_Manifest(_, context),
+        remediationTypes: _json,
         status: __expectString,
         version: __expectString,
     });

package/dist-types/ControlTower.d.ts

@@ -50,6 +50,7 @@ export interface ControlTower {
     /**
      * @see {@link DisableControlCommand}
      */
+    disableControl(): Promise<DisableControlCommandOutput>;
     disableControl(args: DisableControlCommandInput, options?: __HttpHandlerOptions): Promise<DisableControlCommandOutput>;
     disableControl(args: DisableControlCommandInput, cb: (err: any, data?: DisableControlCommandOutput) => void): void;
     disableControl(args: DisableControlCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisableControlCommandOutput) => void): void;

package/dist-types/commands/CreateLandingZoneCommand.d.ts

@@ -39,6 +39,9 @@ declare const CreateLandingZoneCommand_base: {
  * const input = { // CreateLandingZoneInput
  *   version: "STRING_VALUE", // required
  *   manifest: "DOCUMENT_VALUE", // required
+ *   remediationTypes: [ // RemediationTypes
+ *     "INHERITANCE_DRIFT",
+ *   ],
  *   tags: { // TagMap
  *     "<keys>": "STRING_VALUE",
  *   },

package/dist-types/commands/DeleteLandingZoneCommand.d.ts

@@ -27,7 +27,7 @@ declare const DeleteLandingZoneCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Decommissions a landing zone. This API call starts an asynchronous operation that deletes Amazon Web Services Control Tower resources deployed in accounts managed by Amazon Web Services Control Tower.</p>
+ * <p>Decommissions a landing zone. This API call starts an asynchronous operation that deletes Amazon Web Services Control Tower resources deployed in accounts managed by Amazon Web Services Control Tower.</p> <p>Decommissioning a landing zone is a process with significant consequences, and it cannot be undone. We strongly recommend that you perform this decommissioning process only if you intend to stop using your landing zone.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DisableBaselineCommand.d.ts

@@ -66,7 +66,7 @@ declare const DisableBaselineCommand_base: {
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ServiceQuotaExceededException} (client fault)
- *  <p>The request would cause a service quota to be exceeded. The limit is 100 concurrent operations.</p>
+ *  <p>The request would cause a service quota to be exceeded. See <a href="https://docs.aws.amazon.com/controltower/latest/userguide/request-an-increase.html">Service quotas</a>.</p>
  *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>The request was denied due to request throttling.</p>

package/dist-types/commands/DisableControlCommand.d.ts

@@ -23,7 +23,7 @@ export interface DisableControlCommandOutput extends DisableControlOutput, __Met
 }
 declare const DisableControlCommand_base: {
     new (input: DisableControlCommandInput): import("@smithy/smithy-client").CommandImpl<DisableControlCommandInput, DisableControlCommandOutput, ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
-    new (input: DisableControlCommandInput): import("@smithy/smithy-client").CommandImpl<DisableControlCommandInput, DisableControlCommandOutput, ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (...[input]: [] | [DisableControlCommandInput]): import("@smithy/smithy-client").CommandImpl<DisableControlCommandInput, DisableControlCommandOutput, ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
@@ -37,8 +37,9 @@ declare const DisableControlCommand_base: {
  * const config = {}; // type is ControlTowerClientConfig
  * const client = new ControlTowerClient(config);
  * const input = { // DisableControlInput
- *   controlIdentifier: "STRING_VALUE", // required
- *   targetIdentifier: "STRING_VALUE", // required
+ *   controlIdentifier: "STRING_VALUE",
+ *   targetIdentifier: "STRING_VALUE",
+ *   enabledControlIdentifier: "STRING_VALUE",
  * };
  * const command = new DisableControlCommand(input);
  * const response = await client.send(command);
@@ -67,7 +68,7 @@ declare const DisableControlCommand_base: {
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ServiceQuotaExceededException} (client fault)
- *  <p>The request would cause a service quota to be exceeded. The limit is 100 concurrent operations.</p>
+ *  <p>The request would cause a service quota to be exceeded. See <a href="https://docs.aws.amazon.com/controltower/latest/userguide/request-an-increase.html">Service quotas</a>.</p>
  *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>The request was denied due to request throttling.</p>

package/dist-types/commands/EnableBaselineCommand.d.ts

@@ -78,7 +78,7 @@ declare const EnableBaselineCommand_base: {
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ServiceQuotaExceededException} (client fault)
- *  <p>The request would cause a service quota to be exceeded. The limit is 100 concurrent operations.</p>
+ *  <p>The request would cause a service quota to be exceeded. See <a href="https://docs.aws.amazon.com/controltower/latest/userguide/request-an-increase.html">Service quotas</a>.</p>
  *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>The request was denied due to request throttling.</p>

package/dist-types/commands/EnableControlCommand.d.ts

@@ -77,7 +77,7 @@ declare const EnableControlCommand_base: {
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ServiceQuotaExceededException} (client fault)
- *  <p>The request would cause a service quota to be exceeded. The limit is 100 concurrent operations.</p>
+ *  <p>The request would cause a service quota to be exceeded. See <a href="https://docs.aws.amazon.com/controltower/latest/userguide/request-an-increase.html">Service quotas</a>.</p>
  *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>The request was denied due to request throttling.</p>

package/dist-types/commands/GetEnabledControlCommand.d.ts

@@ -46,18 +46,27 @@ declare const GetEnabledControlCommand_base: {
  * //     arn: "STRING_VALUE",
  * //     controlIdentifier: "STRING_VALUE",
  * //     targetIdentifier: "STRING_VALUE",
- * //     targetRegions: [ // TargetRegions
- * //       { // Region
- * //         name: "STRING_VALUE",
- * //       },
- * //     ],
  * //     statusSummary: { // EnablementStatusSummary
  * //       status: "SUCCEEDED" || "FAILED" || "UNDER_CHANGE",
  * //       lastOperationIdentifier: "STRING_VALUE",
  * //     },
  * //     driftStatusSummary: { // DriftStatusSummary
  * //       driftStatus: "DRIFTED" || "IN_SYNC" || "NOT_CHECKING" || "UNKNOWN",
+ * //       types: { // EnabledControlDriftTypes
+ * //         inheritance: { // EnabledControlInheritanceDrift
+ * //           status: "DRIFTED" || "IN_SYNC" || "NOT_CHECKING" || "UNKNOWN",
+ * //         },
+ * //         resource: { // EnabledControlResourceDrift
+ * //           status: "DRIFTED" || "IN_SYNC" || "NOT_CHECKING" || "UNKNOWN",
+ * //         },
+ * //       },
  * //     },
+ * //     parentIdentifier: "STRING_VALUE",
+ * //     targetRegions: [ // TargetRegions
+ * //       { // Region
+ * //         name: "STRING_VALUE",
+ * //       },
+ * //     ],
  * //     parameters: [ // EnabledControlParameterSummaries
  * //       { // EnabledControlParameterSummary
  * //         key: "STRING_VALUE", // required

package/dist-types/commands/GetLandingZoneCommand.d.ts

@@ -45,6 +45,9 @@ declare const GetLandingZoneCommand_base: {
  * //   landingZone: { // LandingZoneDetail
  * //     version: "STRING_VALUE", // required
  * //     manifest: "DOCUMENT_VALUE", // required
+ * //     remediationTypes: [ // RemediationTypes
+ * //       "INHERITANCE_DRIFT",
+ * //     ],
  * //     arn: "STRING_VALUE",
  * //     status: "ACTIVE" || "PROCESSING" || "FAILED",
  * //     latestAvailableVersion: "STRING_VALUE",

package/dist-types/commands/ListEnabledControlsCommand.d.ts

@@ -50,15 +50,25 @@ declare const ListEnabledControlsCommand_base: {
  *     driftStatuses: [ // DriftStatuses
  *       "DRIFTED" || "IN_SYNC" || "NOT_CHECKING" || "UNKNOWN",
  *     ],
+ *     parentIdentifiers: [ // ParentIdentifiers
+ *       "STRING_VALUE",
+ *     ],
+ *     inheritanceDriftStatuses: [
+ *       "DRIFTED" || "IN_SYNC" || "NOT_CHECKING" || "UNKNOWN",
+ *     ],
+ *     resourceDriftStatuses: [
+ *       "DRIFTED" || "IN_SYNC" || "NOT_CHECKING" || "UNKNOWN",
+ *     ],
  *   },
+ *   includeChildren: true || false,
  * };
  * const command = new ListEnabledControlsCommand(input);
  * const response = await client.send(command);
  * // { // ListEnabledControlsOutput
  * //   enabledControls: [ // EnabledControls // required
  * //     { // EnabledControlSummary
- * //       controlIdentifier: "STRING_VALUE",
  * //       arn: "STRING_VALUE",
+ * //       controlIdentifier: "STRING_VALUE",
  * //       targetIdentifier: "STRING_VALUE",
  * //       statusSummary: { // EnablementStatusSummary
  * //         status: "SUCCEEDED" || "FAILED" || "UNDER_CHANGE",
@@ -66,7 +76,16 @@ declare const ListEnabledControlsCommand_base: {
  * //       },
  * //       driftStatusSummary: { // DriftStatusSummary
  * //         driftStatus: "DRIFTED" || "IN_SYNC" || "NOT_CHECKING" || "UNKNOWN",
+ * //         types: { // EnabledControlDriftTypes
+ * //           inheritance: { // EnabledControlInheritanceDrift
+ * //             status: "DRIFTED" || "IN_SYNC" || "NOT_CHECKING" || "UNKNOWN",
+ * //           },
+ * //           resource: { // EnabledControlResourceDrift
+ * //             status: "DRIFTED" || "IN_SYNC" || "NOT_CHECKING" || "UNKNOWN",
+ * //           },
+ * //         },
  * //       },
+ * //       parentIdentifier: "STRING_VALUE",
  * //     },
  * //   ],
  * //   nextToken: "STRING_VALUE",

package/dist-types/commands/ResetEnabledBaselineCommand.d.ts

@@ -66,7 +66,7 @@ declare const ResetEnabledBaselineCommand_base: {
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ServiceQuotaExceededException} (client fault)
- *  <p>The request would cause a service quota to be exceeded. The limit is 100 concurrent operations.</p>
+ *  <p>The request would cause a service quota to be exceeded. See <a href="https://docs.aws.amazon.com/controltower/latest/userguide/request-an-increase.html">Service quotas</a>.</p>
  *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>The request was denied due to request throttling.</p>

package/dist-types/commands/ResetEnabledControlCommand.d.ts

@@ -27,7 +27,7 @@ declare const ResetEnabledControlCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Resets an enabled control.</p>
+ * <p>Resets an enabled control. Does not work for controls implemented with SCPs.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -66,7 +66,7 @@ declare const ResetEnabledControlCommand_base: {
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ServiceQuotaExceededException} (client fault)
- *  <p>The request would cause a service quota to be exceeded. The limit is 100 concurrent operations.</p>
+ *  <p>The request would cause a service quota to be exceeded. See <a href="https://docs.aws.amazon.com/controltower/latest/userguide/request-an-increase.html">Service quotas</a>.</p>
  *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>The request was denied due to request throttling.</p>

package/dist-types/commands/UpdateEnabledBaselineCommand.d.ts

@@ -73,7 +73,7 @@ declare const UpdateEnabledBaselineCommand_base: {
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ServiceQuotaExceededException} (client fault)
- *  <p>The request would cause a service quota to be exceeded. The limit is 100 concurrent operations.</p>
+ *  <p>The request would cause a service quota to be exceeded. See <a href="https://docs.aws.amazon.com/controltower/latest/userguide/request-an-increase.html">Service quotas</a>.</p>
  *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>The request was denied due to request throttling.</p>

package/dist-types/commands/UpdateEnabledControlCommand.d.ts

@@ -72,7 +72,7 @@ declare const UpdateEnabledControlCommand_base: {
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ServiceQuotaExceededException} (client fault)
- *  <p>The request would cause a service quota to be exceeded. The limit is 100 concurrent operations.</p>
+ *  <p>The request would cause a service quota to be exceeded. See <a href="https://docs.aws.amazon.com/controltower/latest/userguide/request-an-increase.html">Service quotas</a>.</p>
  *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>The request was denied due to request throttling.</p>

package/dist-types/commands/UpdateLandingZoneCommand.d.ts

@@ -39,6 +39,9 @@ declare const UpdateLandingZoneCommand_base: {
  * const input = { // UpdateLandingZoneInput
  *   version: "STRING_VALUE", // required
  *   manifest: "DOCUMENT_VALUE", // required
+ *   remediationTypes: [ // RemediationTypes
+ *     "INHERITANCE_DRIFT",
+ *   ],
  *   landingZoneIdentifier: "STRING_VALUE", // required
  * };
  * const command = new UpdateLandingZoneCommand(input);

package/dist-types/models/models_0.d.ts

@@ -479,12 +479,17 @@ export interface DisableControlInput {
      * <p>The ARN of the control. Only <b>Strongly recommended</b> and <b>Elective</b> controls are permitted, with the exception of the <b>Region deny</b> control. For information on how to find the <code>controlIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
      * @public
      */
-    controlIdentifier: string | undefined;
+    controlIdentifier?: string | undefined;
     /**
      * <p>The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
      * @public
      */
-    targetIdentifier: string | undefined;
+    targetIdentifier?: string | undefined;
+    /**
+     * <p>The ARN of the enabled control to be disabled, which uniquely identifies the control instance on the target organizational unit.</p>
+     * @public
+     */
+    enabledControlIdentifier?: string | undefined;
 }
 /**
  * @public
@@ -497,7 +502,7 @@ export interface DisableControlOutput {
     operationIdentifier: string | undefined;
 }
 /**
- * <p>The request would cause a service quota to be exceeded. The limit is 100 concurrent operations.</p>
+ * <p>The request would cause a service quota to be exceeded. See <a href="https://docs.aws.amazon.com/controltower/latest/userguide/request-an-increase.html">Service quotas</a>.</p>
  * @public
  */
 export declare class ServiceQuotaExceededException extends __BaseException {
@@ -987,6 +992,44 @@ export declare const DriftStatus: {
  * @public
  */
 export type DriftStatus = (typeof DriftStatus)[keyof typeof DriftStatus];
+/**
+ * <p>Represents drift information related to control inheritance between organizational units.</p>
+ * @public
+ */
+export interface EnabledControlInheritanceDrift {
+    /**
+     * <p>The status of inheritance drift for the enabled control, indicating whether inheritance configuration matches expectations.</p>
+     * @public
+     */
+    status?: DriftStatus | undefined;
+}
+/**
+ * <p>Represents drift information related to the underlying Amazon Web Services resources managed by the control.</p>
+ * @public
+ */
+export interface EnabledControlResourceDrift {
+    /**
+     * <p>The status of resource drift for the enabled control, indicating whether the underlying resources match the expected configuration.</p>
+     * @public
+     */
+    status?: DriftStatus | undefined;
+}
+/**
+ * <p>Defines the various categories of drift that can occur for an enabled control resource.</p>
+ * @public
+ */
+export interface EnabledControlDriftTypes {
+    /**
+     * <p>Indicates drift related to inheritance configuration between parent and child controls.</p>
+     * @public
+     */
+    inheritance?: EnabledControlInheritanceDrift | undefined;
+    /**
+     * <p>Indicates drift related to the underlying Amazon Web Services resources managed by the control.</p>
+     * @public
+     */
+    resource?: EnabledControlResourceDrift | undefined;
+}
 /**
  * <p>The drift summary of the enabled control.</p> <p>Amazon Web Services Control Tower expects the enabled control configuration to include all supported and governed Regions. If the enabled control differs from the expected configuration, it is defined to be in a state of drift. You can repair this drift by resetting the enabled control.</p>
  * @public
@@ -997,6 +1040,11 @@ export interface DriftStatusSummary {
      * @public
      */
     driftStatus?: DriftStatus | undefined;
+    /**
+     * <p>An object that categorizes the different types of drift detected for the enabled control.</p>
+     * @public
+     */
+    types?: EnabledControlDriftTypes | undefined;
 }
 /**
  * <p>Returns a summary of information about the parameters of an enabled control.</p>
@@ -1045,11 +1093,6 @@ export interface EnabledControlDetails {
      * @public
      */
     targetIdentifier?: string | undefined;
-    /**
-     * <p>Target Amazon Web Services Regions for the enabled control.</p>
-     * @public
-     */
-    targetRegions?: Region[] | undefined;
     /**
      * <p>The deployment summary of the enabled control.</p>
      * @public
@@ -1060,6 +1103,16 @@ export interface EnabledControlDetails {
      * @public
      */
     driftStatusSummary?: DriftStatusSummary | undefined;
+    /**
+     * <p>The ARN of the parent enabled control from which this control inherits its configuration, if applicable.</p>
+     * @public
+     */
+    parentIdentifier?: string | undefined;
+    /**
+     * <p>Target Amazon Web Services Regions for the enabled control.</p>
+     * @public
+     */
+    targetRegions?: Region[] | undefined;
     /**
      * <p>Array of <code>EnabledControlParameter</code> objects.</p>
      * @public
@@ -1096,6 +1149,21 @@ export interface EnabledControlFilter {
      * @public
      */
     driftStatuses?: DriftStatus[] | undefined;
+    /**
+     * <p>Filters enabled controls by their parent control identifiers, allowing you to find child controls of specific parent controls.</p>
+     * @public
+     */
+    parentIdentifiers?: string[] | undefined;
+    /**
+     * <p>Filters enabled controls by their inheritance drift status, allowing you to find controls with specific inheritance-related drift conditions.</p>
+     * @public
+     */
+    inheritanceDriftStatuses?: DriftStatus[] | undefined;
+    /**
+     * <p>Filters enabled controls by their resource drift status, allowing you to find controls with specific resource-related drift conditions.</p>
+     * @public
+     */
+    resourceDriftStatuses?: DriftStatus[] | undefined;
 }
 /**
  * @public
@@ -1121,6 +1189,11 @@ export interface ListEnabledControlsInput {
      * @public
      */
     filter?: EnabledControlFilter | undefined;
+    /**
+     * <p>A boolean value that determines whether to include enabled controls from child organizational units in the response.</p>
+     * @public
+     */
+    includeChildren?: boolean | undefined;
 }
 /**
  * <p>Returns a summary of information about an enabled control.</p>
@@ -1128,15 +1201,15 @@ export interface ListEnabledControlsInput {
  */
 export interface EnabledControlSummary {
     /**
-     * <p>The <code>controlIdentifier</code> of the enabled control.</p>
+     * <p>The ARN of the enabled control.</p>
      * @public
      */
-    controlIdentifier?: string | undefined;
+    arn?: string | undefined;
     /**
-     * <p>The ARN of the enabled control.</p>
+     * <p>The <code>controlIdentifier</code> of the enabled control.</p>
      * @public
      */
-    arn?: string | undefined;
+    controlIdentifier?: string | undefined;
     /**
      * <p>The ARN of the organizational unit.</p>
      * @public
@@ -1152,6 +1225,11 @@ export interface EnabledControlSummary {
      * @public
      */
     driftStatusSummary?: DriftStatusSummary | undefined;
+    /**
+     * <p>The ARN of the parent enabled control from which this control inherits its configuration, if applicable.</p>
+     * @public
+     */
+    parentIdentifier?: string | undefined;
 }
 /**
  * @public
@@ -1368,6 +1446,17 @@ export interface ListLandingZoneOperationsOutput {
      */
     nextToken?: string | undefined;
 }
+/**
+ * @public
+ * @enum
+ */
+export declare const RemediationType: {
+    readonly INHERITANCE_DRIFT: "INHERITANCE_DRIFT";
+};
+/**
+ * @public
+ */
+export type RemediationType = (typeof RemediationType)[keyof typeof RemediationType];
 /**
  * @public
  */
@@ -1382,6 +1471,11 @@ export interface CreateLandingZoneInput {
      * @public
      */
     manifest: __DocumentType | undefined;
+    /**
+     * <p>Specifies the types of remediation actions to apply when creating the landing zone, such as automatic drift correction or compliance enforcement.</p>
+     * @public
+     */
+    remediationTypes?: RemediationType[] | undefined;
     /**
      * <p>Tags to be applied to the landing zone. </p>
      * @public
@@ -1484,6 +1578,11 @@ export interface LandingZoneDetail {
      * @public
      */
     manifest: __DocumentType | undefined;
+    /**
+     * <p>The types of remediation actions configured for the landing zone, such as automatic drift correction or compliance enforcement.</p>
+     * @public
+     */
+    remediationTypes?: RemediationType[] | undefined;
     /**
      * <p>The ARN of the landing zone.</p>
      * @public
@@ -1590,6 +1689,11 @@ export interface UpdateLandingZoneInput {
      * @public
      */
     manifest: __DocumentType | undefined;
+    /**
+     * <p>Specifies the types of remediation actions to apply when updating the landing zone configuration.</p>
+     * @public
+     */
+    remediationTypes?: RemediationType[] | undefined;
     /**
      * <p>The unique identifier of the landing zone.</p>
      * @public

package/dist-types/ts3.4/ControlTower.d.ts

@@ -152,6 +152,7 @@ export interface ControlTower {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: DisableBaselineCommandOutput) => void
   ): void;
+  disableControl(): Promise<DisableControlCommandOutput>;
   disableControl(
     args: DisableControlCommandInput,
     options?: __HttpHandlerOptions

package/dist-types/ts3.4/commands/DisableControlCommand.d.ts

@@ -23,7 +23,7 @@ declare const DisableControlCommand_base: {
     ServiceOutputTypes
   >;
   new (
-    input: DisableControlCommandInput
+    ...[input]: [] | [DisableControlCommandInput]
   ): import("@smithy/smithy-client").CommandImpl<
     DisableControlCommandInput,
     DisableControlCommandOutput,

package/dist-types/ts3.4/models/models_0.d.ts

@@ -158,8 +158,9 @@ export declare class ConflictException extends __BaseException {
   constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
 }
 export interface DisableControlInput {
-  controlIdentifier: string | undefined;
-  targetIdentifier: string | undefined;
+  controlIdentifier?: string | undefined;
+  targetIdentifier?: string | undefined;
+  enabledControlIdentifier?: string | undefined;
 }
 export interface DisableControlOutput {
   operationIdentifier: string | undefined;
@@ -302,8 +303,19 @@ export declare const DriftStatus: {
   readonly UNKNOWN: "UNKNOWN";
 };
 export type DriftStatus = (typeof DriftStatus)[keyof typeof DriftStatus];
+export interface EnabledControlInheritanceDrift {
+  status?: DriftStatus | undefined;
+}
+export interface EnabledControlResourceDrift {
+  status?: DriftStatus | undefined;
+}
+export interface EnabledControlDriftTypes {
+  inheritance?: EnabledControlInheritanceDrift | undefined;
+  resource?: EnabledControlResourceDrift | undefined;
+}
 export interface DriftStatusSummary {
   driftStatus?: DriftStatus | undefined;
+  types?: EnabledControlDriftTypes | undefined;
 }
 export interface EnabledControlParameterSummary {
   key: string | undefined;
@@ -316,9 +328,10 @@ export interface EnabledControlDetails {
   arn?: string | undefined;
   controlIdentifier?: string | undefined;
   targetIdentifier?: string | undefined;
-  targetRegions?: Region[] | undefined;
   statusSummary?: EnablementStatusSummary | undefined;
   driftStatusSummary?: DriftStatusSummary | undefined;
+  parentIdentifier?: string | undefined;
+  targetRegions?: Region[] | undefined;
   parameters?: EnabledControlParameterSummary[] | undefined;
 }
 export interface GetEnabledControlOutput {
@@ -328,19 +341,24 @@ export interface EnabledControlFilter {
   controlIdentifiers?: string[] | undefined;
   statuses?: EnablementStatus[] | undefined;
   driftStatuses?: DriftStatus[] | undefined;
+  parentIdentifiers?: string[] | undefined;
+  inheritanceDriftStatuses?: DriftStatus[] | undefined;
+  resourceDriftStatuses?: DriftStatus[] | undefined;
 }
 export interface ListEnabledControlsInput {
   targetIdentifier?: string | undefined;
   nextToken?: string | undefined;
   maxResults?: number | undefined;
   filter?: EnabledControlFilter | undefined;
+  includeChildren?: boolean | undefined;
 }
 export interface EnabledControlSummary {
-  controlIdentifier?: string | undefined;
   arn?: string | undefined;
+  controlIdentifier?: string | undefined;
   targetIdentifier?: string | undefined;
   statusSummary?: EnablementStatusSummary | undefined;
   driftStatusSummary?: DriftStatusSummary | undefined;
+  parentIdentifier?: string | undefined;
 }
 export interface ListEnabledControlsOutput {
   enabledControls: EnabledControlSummary[] | undefined;
@@ -406,9 +424,15 @@ export interface ListLandingZoneOperationsOutput {
   landingZoneOperations: LandingZoneOperationSummary[] | undefined;
   nextToken?: string | undefined;
 }
+export declare const RemediationType: {
+  readonly INHERITANCE_DRIFT: "INHERITANCE_DRIFT";
+};
+export type RemediationType =
+  (typeof RemediationType)[keyof typeof RemediationType];
 export interface CreateLandingZoneInput {
   version: string | undefined;
   manifest: __DocumentType | undefined;
+  remediationTypes?: RemediationType[] | undefined;
   tags?: Record<string, string> | undefined;
 }
 export interface CreateLandingZoneOutput {
@@ -443,6 +467,7 @@ export type LandingZoneStatus =
 export interface LandingZoneDetail {
   version: string | undefined;
   manifest: __DocumentType | undefined;
+  remediationTypes?: RemediationType[] | undefined;
   arn?: string | undefined;
   status?: LandingZoneStatus | undefined;
   latestAvailableVersion?: string | undefined;
@@ -471,6 +496,7 @@ export interface ResetLandingZoneOutput {
 export interface UpdateLandingZoneInput {
   version: string | undefined;
   manifest: __DocumentType | undefined;
+  remediationTypes?: RemediationType[] | undefined;
   landingZoneIdentifier: string | undefined;
 }
 export interface UpdateLandingZoneOutput {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-controltower",
   "description": "AWS SDK for JavaScript Controltower Client for Node.js, Browser and React Native",
-  "version": "3.926.0",
+  "version": "3.928.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-controltower",
@@ -20,17 +20,17 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/core": "3.926.0",
-    "@aws-sdk/credential-provider-node": "3.926.0",
+    "@aws-sdk/core": "3.928.0",
+    "@aws-sdk/credential-provider-node": "3.928.0",
     "@aws-sdk/middleware-host-header": "3.922.0",
     "@aws-sdk/middleware-logger": "3.922.0",
     "@aws-sdk/middleware-recursion-detection": "3.922.0",
-    "@aws-sdk/middleware-user-agent": "3.926.0",
+    "@aws-sdk/middleware-user-agent": "3.928.0",
     "@aws-sdk/region-config-resolver": "3.925.0",
     "@aws-sdk/types": "3.922.0",
     "@aws-sdk/util-endpoints": "3.922.0",
     "@aws-sdk/util-user-agent-browser": "3.922.0",
-    "@aws-sdk/util-user-agent-node": "3.926.0",
+    "@aws-sdk/util-user-agent-node": "3.928.0",
     "@smithy/config-resolver": "^4.4.2",
     "@smithy/core": "^3.17.2",
     "@smithy/fetch-http-handler": "^5.3.5",