@aws-sdk/client-securitylake 3.370.0 → 3.374.0

package/dist-es/protocols/Aws_restJson1.js

@@ -55,6 +55,7 @@ export const se_CreateDataLakeCommand = async (input, context) => {
     body = JSON.stringify(take(input, {
         configurations: (_) => _json(_),
         metaStoreManagerRoleArn: [],
+        tags: (_) => _json(_),
     }));
     return new __HttpRequest({
         protocol,
@@ -121,6 +122,7 @@ export const se_CreateSubscriberCommand = async (input, context) => {
         subscriberDescription: [],
         subscriberIdentity: (_) => _json(_),
         subscriberName: [],
+        tags: (_) => _json(_),
     }));
     return new __HttpRequest({
         protocol,
@@ -464,6 +466,22 @@ export const se_ListSubscribersCommand = async (input, context) => {
         body,
     });
 };
+export const se_ListTagsForResourceCommand = async (input, context) => {
+    const { hostname, protocol = "https", port, path: basePath } = await context.endpoint();
+    const headers = {};
+    let resolvedPath = `${basePath?.endsWith("/") ? basePath.slice(0, -1) : basePath || ""}` + "/v1/tags/{resourceArn}";
+    resolvedPath = __resolvedPath(resolvedPath, input, "resourceArn", () => input.resourceArn, "{resourceArn}", false);
+    let body;
+    return new __HttpRequest({
+        protocol,
+        hostname,
+        port,
+        method: "GET",
+        headers,
+        path: resolvedPath,
+        body,
+    });
+};
 export const se_RegisterDataLakeDelegatedAdministratorCommand = async (input, context) => {
     const { hostname, protocol = "https", port, path: basePath } = await context.endpoint();
     const headers = {
@@ -484,6 +502,50 @@ export const se_RegisterDataLakeDelegatedAdministratorCommand = async (input, co
         body,
     });
 };
+export const se_TagResourceCommand = async (input, context) => {
+    const { hostname, protocol = "https", port, path: basePath } = await context.endpoint();
+    const headers = {
+        "content-type": "application/json",
+    };
+    let resolvedPath = `${basePath?.endsWith("/") ? basePath.slice(0, -1) : basePath || ""}` + "/v1/tags/{resourceArn}";
+    resolvedPath = __resolvedPath(resolvedPath, input, "resourceArn", () => input.resourceArn, "{resourceArn}", false);
+    let body;
+    body = JSON.stringify(take(input, {
+        tags: (_) => _json(_),
+    }));
+    return new __HttpRequest({
+        protocol,
+        hostname,
+        port,
+        method: "POST",
+        headers,
+        path: resolvedPath,
+        body,
+    });
+};
+export const se_UntagResourceCommand = async (input, context) => {
+    const { hostname, protocol = "https", port, path: basePath } = await context.endpoint();
+    const headers = {};
+    let resolvedPath = `${basePath?.endsWith("/") ? basePath.slice(0, -1) : basePath || ""}` + "/v1/tags/{resourceArn}";
+    resolvedPath = __resolvedPath(resolvedPath, input, "resourceArn", () => input.resourceArn, "{resourceArn}", false);
+    const query = map({
+        tagKeys: [
+            __expectNonNull(input.tagKeys, `tagKeys`) != null,
+            () => (input.tagKeys || []).map((_entry) => _entry),
+        ],
+    });
+    let body;
+    return new __HttpRequest({
+        protocol,
+        hostname,
+        port,
+        method: "DELETE",
+        headers,
+        path: resolvedPath,
+        query,
+        body,
+    });
+};
 export const se_UpdateDataLakeCommand = async (input, context) => {
     const { hostname, protocol = "https", port, path: basePath } = await context.endpoint();
     const headers = {
@@ -1647,6 +1709,54 @@ const de_ListSubscribersCommandError = async (output, context) => {
             });
     }
 };
+export const de_ListTagsForResourceCommand = async (output, context) => {
+    if (output.statusCode !== 200 && output.statusCode >= 300) {
+        return de_ListTagsForResourceCommandError(output, context);
+    }
+    const contents = map({
+        $metadata: deserializeMetadata(output),
+    });
+    const data = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+    const doc = take(data, {
+        tags: _json,
+    });
+    Object.assign(contents, doc);
+    return contents;
+};
+const de_ListTagsForResourceCommandError = async (output, context) => {
+    const parsedOutput = {
+        ...output,
+        body: await parseErrorBody(output.body, context),
+    };
+    const errorCode = loadRestJsonErrorCode(output, parsedOutput.body);
+    switch (errorCode) {
+        case "AccessDeniedException":
+        case "com.amazonaws.securitylake#AccessDeniedException":
+            throw await de_AccessDeniedExceptionRes(parsedOutput, context);
+        case "BadRequestException":
+        case "com.amazonaws.securitylake#BadRequestException":
+            throw await de_BadRequestExceptionRes(parsedOutput, context);
+        case "ConflictException":
+        case "com.amazonaws.securitylake#ConflictException":
+            throw await de_ConflictExceptionRes(parsedOutput, context);
+        case "InternalServerException":
+        case "com.amazonaws.securitylake#InternalServerException":
+            throw await de_InternalServerExceptionRes(parsedOutput, context);
+        case "ResourceNotFoundException":
+        case "com.amazonaws.securitylake#ResourceNotFoundException":
+            throw await de_ResourceNotFoundExceptionRes(parsedOutput, context);
+        case "ThrottlingException":
+        case "com.amazonaws.securitylake#ThrottlingException":
+            throw await de_ThrottlingExceptionRes(parsedOutput, context);
+        default:
+            const parsedBody = parsedOutput.body;
+            return throwDefaultError({
+                output,
+                parsedBody,
+                errorCode,
+            });
+    }
+};
 export const de_RegisterDataLakeDelegatedAdministratorCommand = async (output, context) => {
     if (output.statusCode !== 200 && output.statusCode >= 300) {
         return de_RegisterDataLakeDelegatedAdministratorCommandError(output, context);
@@ -1691,6 +1801,94 @@ const de_RegisterDataLakeDelegatedAdministratorCommandError = async (output, con
             });
     }
 };
+export const de_TagResourceCommand = async (output, context) => {
+    if (output.statusCode !== 200 && output.statusCode >= 300) {
+        return de_TagResourceCommandError(output, context);
+    }
+    const contents = map({
+        $metadata: deserializeMetadata(output),
+    });
+    await collectBody(output.body, context);
+    return contents;
+};
+const de_TagResourceCommandError = async (output, context) => {
+    const parsedOutput = {
+        ...output,
+        body: await parseErrorBody(output.body, context),
+    };
+    const errorCode = loadRestJsonErrorCode(output, parsedOutput.body);
+    switch (errorCode) {
+        case "AccessDeniedException":
+        case "com.amazonaws.securitylake#AccessDeniedException":
+            throw await de_AccessDeniedExceptionRes(parsedOutput, context);
+        case "BadRequestException":
+        case "com.amazonaws.securitylake#BadRequestException":
+            throw await de_BadRequestExceptionRes(parsedOutput, context);
+        case "ConflictException":
+        case "com.amazonaws.securitylake#ConflictException":
+            throw await de_ConflictExceptionRes(parsedOutput, context);
+        case "InternalServerException":
+        case "com.amazonaws.securitylake#InternalServerException":
+            throw await de_InternalServerExceptionRes(parsedOutput, context);
+        case "ResourceNotFoundException":
+        case "com.amazonaws.securitylake#ResourceNotFoundException":
+            throw await de_ResourceNotFoundExceptionRes(parsedOutput, context);
+        case "ThrottlingException":
+        case "com.amazonaws.securitylake#ThrottlingException":
+            throw await de_ThrottlingExceptionRes(parsedOutput, context);
+        default:
+            const parsedBody = parsedOutput.body;
+            return throwDefaultError({
+                output,
+                parsedBody,
+                errorCode,
+            });
+    }
+};
+export const de_UntagResourceCommand = async (output, context) => {
+    if (output.statusCode !== 200 && output.statusCode >= 300) {
+        return de_UntagResourceCommandError(output, context);
+    }
+    const contents = map({
+        $metadata: deserializeMetadata(output),
+    });
+    await collectBody(output.body, context);
+    return contents;
+};
+const de_UntagResourceCommandError = async (output, context) => {
+    const parsedOutput = {
+        ...output,
+        body: await parseErrorBody(output.body, context),
+    };
+    const errorCode = loadRestJsonErrorCode(output, parsedOutput.body);
+    switch (errorCode) {
+        case "AccessDeniedException":
+        case "com.amazonaws.securitylake#AccessDeniedException":
+            throw await de_AccessDeniedExceptionRes(parsedOutput, context);
+        case "BadRequestException":
+        case "com.amazonaws.securitylake#BadRequestException":
+            throw await de_BadRequestExceptionRes(parsedOutput, context);
+        case "ConflictException":
+        case "com.amazonaws.securitylake#ConflictException":
+            throw await de_ConflictExceptionRes(parsedOutput, context);
+        case "InternalServerException":
+        case "com.amazonaws.securitylake#InternalServerException":
+            throw await de_InternalServerExceptionRes(parsedOutput, context);
+        case "ResourceNotFoundException":
+        case "com.amazonaws.securitylake#ResourceNotFoundException":
+            throw await de_ResourceNotFoundExceptionRes(parsedOutput, context);
+        case "ThrottlingException":
+        case "com.amazonaws.securitylake#ThrottlingException":
+            throw await de_ThrottlingExceptionRes(parsedOutput, context);
+        default:
+            const parsedBody = parsedOutput.body;
+            return throwDefaultError({
+                output,
+                parsedBody,
+                errorCode,
+            });
+    }
+};
 export const de_UpdateDataLakeCommand = async (output, context) => {
     if (output.statusCode !== 200 && output.statusCode >= 300) {
         return de_UpdateDataLakeCommandError(output, context);

package/dist-types/SecurityLake.d.ts

@@ -22,7 +22,10 @@ import { ListDataLakeExceptionsCommandInput, ListDataLakeExceptionsCommandOutput
 import { ListDataLakesCommandInput, ListDataLakesCommandOutput } from "./commands/ListDataLakesCommand";
 import { ListLogSourcesCommandInput, ListLogSourcesCommandOutput } from "./commands/ListLogSourcesCommand";
 import { ListSubscribersCommandInput, ListSubscribersCommandOutput } from "./commands/ListSubscribersCommand";
+import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
 import { RegisterDataLakeDelegatedAdministratorCommandInput, RegisterDataLakeDelegatedAdministratorCommandOutput } from "./commands/RegisterDataLakeDelegatedAdministratorCommand";
+import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/TagResourceCommand";
+import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
 import { UpdateDataLakeCommandInput, UpdateDataLakeCommandOutput } from "./commands/UpdateDataLakeCommand";
 import { UpdateDataLakeExceptionSubscriptionCommandInput, UpdateDataLakeExceptionSubscriptionCommandOutput } from "./commands/UpdateDataLakeExceptionSubscriptionCommand";
 import { UpdateSubscriberCommandInput, UpdateSubscriberCommandOutput } from "./commands/UpdateSubscriberCommand";
@@ -167,12 +170,30 @@ export interface SecurityLake {
     listSubscribers(args: ListSubscribersCommandInput, options?: __HttpHandlerOptions): Promise<ListSubscribersCommandOutput>;
     listSubscribers(args: ListSubscribersCommandInput, cb: (err: any, data?: ListSubscribersCommandOutput) => void): void;
     listSubscribers(args: ListSubscribersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListSubscribersCommandOutput) => void): void;
+    /**
+     * @see {@link ListTagsForResourceCommand}
+     */
+    listTagsForResource(args: ListTagsForResourceCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsForResourceCommandOutput>;
+    listTagsForResource(args: ListTagsForResourceCommandInput, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
+    listTagsForResource(args: ListTagsForResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
     /**
      * @see {@link RegisterDataLakeDelegatedAdministratorCommand}
      */
     registerDataLakeDelegatedAdministrator(args: RegisterDataLakeDelegatedAdministratorCommandInput, options?: __HttpHandlerOptions): Promise<RegisterDataLakeDelegatedAdministratorCommandOutput>;
     registerDataLakeDelegatedAdministrator(args: RegisterDataLakeDelegatedAdministratorCommandInput, cb: (err: any, data?: RegisterDataLakeDelegatedAdministratorCommandOutput) => void): void;
     registerDataLakeDelegatedAdministrator(args: RegisterDataLakeDelegatedAdministratorCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RegisterDataLakeDelegatedAdministratorCommandOutput) => void): void;
+    /**
+     * @see {@link TagResourceCommand}
+     */
+    tagResource(args: TagResourceCommandInput, options?: __HttpHandlerOptions): Promise<TagResourceCommandOutput>;
+    tagResource(args: TagResourceCommandInput, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
+    tagResource(args: TagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
+    /**
+     * @see {@link UntagResourceCommand}
+     */
+    untagResource(args: UntagResourceCommandInput, options?: __HttpHandlerOptions): Promise<UntagResourceCommandOutput>;
+    untagResource(args: UntagResourceCommandInput, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
+    untagResource(args: UntagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
     /**
      * @see {@link UpdateDataLakeCommand}
      */

package/dist-types/SecurityLakeClient.d.ts

@@ -31,7 +31,10 @@ import { ListDataLakeExceptionsCommandInput, ListDataLakeExceptionsCommandOutput
 import { ListDataLakesCommandInput, ListDataLakesCommandOutput } from "./commands/ListDataLakesCommand";
 import { ListLogSourcesCommandInput, ListLogSourcesCommandOutput } from "./commands/ListLogSourcesCommand";
 import { ListSubscribersCommandInput, ListSubscribersCommandOutput } from "./commands/ListSubscribersCommand";
+import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "./commands/ListTagsForResourceCommand";
 import { RegisterDataLakeDelegatedAdministratorCommandInput, RegisterDataLakeDelegatedAdministratorCommandOutput } from "./commands/RegisterDataLakeDelegatedAdministratorCommand";
+import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/TagResourceCommand";
+import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
 import { UpdateDataLakeCommandInput, UpdateDataLakeCommandOutput } from "./commands/UpdateDataLakeCommand";
 import { UpdateDataLakeExceptionSubscriptionCommandInput, UpdateDataLakeExceptionSubscriptionCommandOutput } from "./commands/UpdateDataLakeExceptionSubscriptionCommand";
 import { UpdateSubscriberCommandInput, UpdateSubscriberCommandOutput } from "./commands/UpdateSubscriberCommand";
@@ -41,11 +44,11 @@ export { __Client };
 /**
  * @public
  */
-export type ServiceInputTypes = CreateAwsLogSourceCommandInput | CreateCustomLogSourceCommandInput | CreateDataLakeCommandInput | CreateDataLakeExceptionSubscriptionCommandInput | CreateDataLakeOrganizationConfigurationCommandInput | CreateSubscriberCommandInput | CreateSubscriberNotificationCommandInput | DeleteAwsLogSourceCommandInput | DeleteCustomLogSourceCommandInput | DeleteDataLakeCommandInput | DeleteDataLakeExceptionSubscriptionCommandInput | DeleteDataLakeOrganizationConfigurationCommandInput | DeleteSubscriberCommandInput | DeleteSubscriberNotificationCommandInput | DeregisterDataLakeDelegatedAdministratorCommandInput | GetDataLakeExceptionSubscriptionCommandInput | GetDataLakeOrganizationConfigurationCommandInput | GetDataLakeSourcesCommandInput | GetSubscriberCommandInput | ListDataLakeExceptionsCommandInput | ListDataLakesCommandInput | ListLogSourcesCommandInput | ListSubscribersCommandInput | RegisterDataLakeDelegatedAdministratorCommandInput | UpdateDataLakeCommandInput | UpdateDataLakeExceptionSubscriptionCommandInput | UpdateSubscriberCommandInput | UpdateSubscriberNotificationCommandInput;
+export type ServiceInputTypes = CreateAwsLogSourceCommandInput | CreateCustomLogSourceCommandInput | CreateDataLakeCommandInput | CreateDataLakeExceptionSubscriptionCommandInput | CreateDataLakeOrganizationConfigurationCommandInput | CreateSubscriberCommandInput | CreateSubscriberNotificationCommandInput | DeleteAwsLogSourceCommandInput | DeleteCustomLogSourceCommandInput | DeleteDataLakeCommandInput | DeleteDataLakeExceptionSubscriptionCommandInput | DeleteDataLakeOrganizationConfigurationCommandInput | DeleteSubscriberCommandInput | DeleteSubscriberNotificationCommandInput | DeregisterDataLakeDelegatedAdministratorCommandInput | GetDataLakeExceptionSubscriptionCommandInput | GetDataLakeOrganizationConfigurationCommandInput | GetDataLakeSourcesCommandInput | GetSubscriberCommandInput | ListDataLakeExceptionsCommandInput | ListDataLakesCommandInput | ListLogSourcesCommandInput | ListSubscribersCommandInput | ListTagsForResourceCommandInput | RegisterDataLakeDelegatedAdministratorCommandInput | TagResourceCommandInput | UntagResourceCommandInput | UpdateDataLakeCommandInput | UpdateDataLakeExceptionSubscriptionCommandInput | UpdateSubscriberCommandInput | UpdateSubscriberNotificationCommandInput;
 /**
  * @public
  */
-export type ServiceOutputTypes = CreateAwsLogSourceCommandOutput | CreateCustomLogSourceCommandOutput | CreateDataLakeCommandOutput | CreateDataLakeExceptionSubscriptionCommandOutput | CreateDataLakeOrganizationConfigurationCommandOutput | CreateSubscriberCommandOutput | CreateSubscriberNotificationCommandOutput | DeleteAwsLogSourceCommandOutput | DeleteCustomLogSourceCommandOutput | DeleteDataLakeCommandOutput | DeleteDataLakeExceptionSubscriptionCommandOutput | DeleteDataLakeOrganizationConfigurationCommandOutput | DeleteSubscriberCommandOutput | DeleteSubscriberNotificationCommandOutput | DeregisterDataLakeDelegatedAdministratorCommandOutput | GetDataLakeExceptionSubscriptionCommandOutput | GetDataLakeOrganizationConfigurationCommandOutput | GetDataLakeSourcesCommandOutput | GetSubscriberCommandOutput | ListDataLakeExceptionsCommandOutput | ListDataLakesCommandOutput | ListLogSourcesCommandOutput | ListSubscribersCommandOutput | RegisterDataLakeDelegatedAdministratorCommandOutput | UpdateDataLakeCommandOutput | UpdateDataLakeExceptionSubscriptionCommandOutput | UpdateSubscriberCommandOutput | UpdateSubscriberNotificationCommandOutput;
+export type ServiceOutputTypes = CreateAwsLogSourceCommandOutput | CreateCustomLogSourceCommandOutput | CreateDataLakeCommandOutput | CreateDataLakeExceptionSubscriptionCommandOutput | CreateDataLakeOrganizationConfigurationCommandOutput | CreateSubscriberCommandOutput | CreateSubscriberNotificationCommandOutput | DeleteAwsLogSourceCommandOutput | DeleteCustomLogSourceCommandOutput | DeleteDataLakeCommandOutput | DeleteDataLakeExceptionSubscriptionCommandOutput | DeleteDataLakeOrganizationConfigurationCommandOutput | DeleteSubscriberCommandOutput | DeleteSubscriberNotificationCommandOutput | DeregisterDataLakeDelegatedAdministratorCommandOutput | GetDataLakeExceptionSubscriptionCommandOutput | GetDataLakeOrganizationConfigurationCommandOutput | GetDataLakeSourcesCommandOutput | GetSubscriberCommandOutput | ListDataLakeExceptionsCommandOutput | ListDataLakesCommandOutput | ListLogSourcesCommandOutput | ListSubscribersCommandOutput | ListTagsForResourceCommandOutput | RegisterDataLakeDelegatedAdministratorCommandOutput | TagResourceCommandOutput | UntagResourceCommandOutput | UpdateDataLakeCommandOutput | UpdateDataLakeExceptionSubscriptionCommandOutput | UpdateSubscriberCommandOutput | UpdateSubscriberNotificationCommandOutput;
 /**
  * @public
  */

package/dist-types/commands/CreateAwsLogSourceCommand.d.ts

@@ -26,7 +26,7 @@ export interface CreateAwsLogSourceCommandOutput extends CreateAwsLogSourceRespo
  * <p>Adds a natively supported Amazon Web Service as an Amazon Security Lake source. Enables
  *          source types for member accounts in required Amazon Web Services Regions, based on the
  *          parameters you specify. You can choose any source type in any Region for either accounts
- *          that are part of a trusted organization or standalone accounts. Once you add an Amazon Web Service as a source, Security Lake starts collecting logs and events from it, </p>
+ *          that are part of a trusted organization or standalone accounts. Once you add an Amazon Web Service as a source, Security Lake starts collecting logs and events from it.</p>
  *          <p>You can use this API only to enable natively supported Amazon Web Services as a
  *          source. Use <code>CreateCustomLogSource</code> to enable data collection from a custom
  *          source.</p>

package/dist-types/commands/CreateDataLakeCommand.d.ts

@@ -25,8 +25,7 @@ export interface CreateDataLakeCommandOutput extends CreateDataLakeResponse, __M
  * @public
  * <p>Initializes an Amazon Security Lake instance with the provided (or default) configuration. You
  *          can enable Security Lake in Amazon Web Services Regions with customized settings before enabling
- *          log collection in Regions. By default, the <code>CreateDataLake</code> Security Lake in all
- *          Regions. To specify particular Regions, configure these Regions using the
+ *          log collection in Regions. To specify particular Regions, configure these Regions using the
  *             <code>configurations</code> parameter. If you have already enabled Security Lake in a Region
  *          when you call this command, the command will update the Region if you provide new
  *          configuration parameters. If you have not already enabled Security Lake in the Region when you
@@ -71,6 +70,12 @@ export interface CreateDataLakeCommandOutput extends CreateDataLakeResponse, __M
  *     },
  *   ],
  *   metaStoreManagerRoleArn: "STRING_VALUE", // required
+ *   tags: [ // TagList
+ *     { // Tag
+ *       key: "STRING_VALUE", // required
+ *       value: "STRING_VALUE", // required
+ *     },
+ *   ],
  * };
  * const command = new CreateDataLakeCommand(input);
  * const response = await client.send(command);

package/dist-types/commands/CreateSubscriberCommand.d.ts

@@ -62,6 +62,12 @@ export interface CreateSubscriberCommandOutput extends CreateSubscriberResponse,
  *   accessTypes: [ // AccessTypeList
  *     "LAKEFORMATION" || "S3",
  *   ],
+ *   tags: [ // TagList
+ *     { // Tag
+ *       key: "STRING_VALUE", // required
+ *       value: "STRING_VALUE", // required
+ *     },
+ *   ],
  * };
  * const command = new CreateSubscriberCommand(input);
  * const response = await client.send(command);

package/dist-types/commands/DeleteDataLakeOrganizationConfigurationCommand.d.ts

@@ -23,11 +23,9 @@ export interface DeleteDataLakeOrganizationConfigurationCommandOutput extends De
 }
 /**
  * @public
- * <p>Removes automatic the enablement of configuration settings for new member accounts (but
- *          retains the settings for the delegated administrator) from Amazon Security Lake. You must run this
- *          API using the credentials of the delegated administrator. When you run this API, new member
- *          accounts that are added after the organization enables Security Lake won't contribute to the
- *          data lake.</p>
+ * <p>Turns off automatic enablement of Amazon Security Lake for member accounts that are added to an organization in Organizations. Only the delegated
+ *          Security Lake administrator for an organization can perform this operation. If the delegated Security Lake administrator performs this operation, new member
+ *          accounts won't automatically contribute data to the data lake.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ListDataLakesCommand.d.ts

@@ -23,8 +23,8 @@ export interface ListDataLakesCommandOutput extends ListDataLakesResponse, __Met
 }
 /**
  * @public
- * <p>Retrieves the Amazon Security Lake configuration object for the specified Amazon Web Services account ID. You can use the <code>ListDataLakes</code> API to know whether
- *          Security Lake is enabled for any region.</p>
+ * <p>Retrieves the Amazon Security Lake configuration object for the specified Amazon Web Services Regions. You can use this operation to determine whether
+ *          Security Lake is enabled for a Region.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/ListTagsForResourceCommand.d.ts

@@ -0,0 +1,104 @@
+import { EndpointParameterInstructions } from "@smithy/middleware-endpoint";
+import { Command as $Command } from "@smithy/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@smithy/types";
+import { ListTagsForResourceRequest, ListTagsForResourceResponse } from "../models/models_0";
+import { SecurityLakeClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityLakeClient";
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link ListTagsForResourceCommand}.
+ */
+export interface ListTagsForResourceCommandInput extends ListTagsForResourceRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link ListTagsForResourceCommand}.
+ */
+export interface ListTagsForResourceCommandOutput extends ListTagsForResourceResponse, __MetadataBearer {
+}
+/**
+ * @public
+ * <p>Retrieves the tags (keys and values) that are associated with an Amazon Security Lake resource: a subscriber, or the data lake configuration for
+ *          your Amazon Web Services account in a particular Amazon Web Services Region.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SecurityLakeClient, ListTagsForResourceCommand } from "@aws-sdk/client-securitylake"; // ES Modules import
+ * // const { SecurityLakeClient, ListTagsForResourceCommand } = require("@aws-sdk/client-securitylake"); // CommonJS import
+ * const client = new SecurityLakeClient(config);
+ * const input = { // ListTagsForResourceRequest
+ *   resourceArn: "STRING_VALUE", // required
+ * };
+ * const command = new ListTagsForResourceCommand(input);
+ * const response = await client.send(command);
+ * // { // ListTagsForResourceResponse
+ * //   tags: [ // TagList
+ * //     { // Tag
+ * //       key: "STRING_VALUE", // required
+ * //       value: "STRING_VALUE", // required
+ * //     },
+ * //   ],
+ * // };
+ *
+ * ```
+ *
+ * @param ListTagsForResourceCommandInput - {@link ListTagsForResourceCommandInput}
+ * @returns {@link ListTagsForResourceCommandOutput}
+ * @see {@link ListTagsForResourceCommandInput} for command's `input` shape.
+ * @see {@link ListTagsForResourceCommandOutput} for command's `response` shape.
+ * @see {@link SecurityLakeClientResolvedConfig | config} for SecurityLakeClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action. Access denied errors appear when Amazon Security Lake explicitly or implicitly denies an authorization
+ *          request. An explicit denial occurs when a policy contains a Deny statement for the specific
+ *          Amazon Web Services action. An implicit denial occurs when there is no applicable Deny statement and also
+ *          no applicable Allow statement.</p>
+ *
+ * @throws {@link BadRequestException} (client fault)
+ *  <p>The request is malformed or contains an error such as an invalid parameter value or a missing required parameter.</p>
+ *
+ * @throws {@link ConflictException} (client fault)
+ *  <p>Occurs when a conflict with a previous successful write is detected. This generally
+ *          occurs when the previous write did not have time to propagate to the host serving the
+ *          current request. A retry (with appropriate backoff logic) is the recommended response to
+ *          this exception.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>Internal service exceptions are sometimes caused by transient issues. Before you start
+ *          troubleshooting, perform the operation again.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The resource could not be found.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The limit on the number of requests per second was exceeded.</p>
+ *
+ * @throws {@link SecurityLakeServiceException}
+ * <p>Base exception class for all service exceptions from SecurityLake service.</p>
+ *
+ */
+export declare class ListTagsForResourceCommand extends $Command<ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput, SecurityLakeClientResolvedConfig> {
+    readonly input: ListTagsForResourceCommandInput;
+    static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
+    constructor(input: ListTagsForResourceCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: SecurityLakeClientResolvedConfig, options?: __HttpHandlerOptions): Handler<ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput>;
+    /**
+     * @internal
+     */
+    private serialize;
+    /**
+     * @internal
+     */
+    private deserialize;
+}

package/dist-types/commands/TagResourceCommand.d.ts

@@ -0,0 +1,109 @@
+import { EndpointParameterInstructions } from "@smithy/middleware-endpoint";
+import { Command as $Command } from "@smithy/smithy-client";
+import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@smithy/types";
+import { TagResourceRequest, TagResourceResponse } from "../models/models_0";
+import { SecurityLakeClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityLakeClient";
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link TagResourceCommand}.
+ */
+export interface TagResourceCommandInput extends TagResourceRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link TagResourceCommand}.
+ */
+export interface TagResourceCommandOutput extends TagResourceResponse, __MetadataBearer {
+}
+/**
+ * @public
+ * <p>Adds or updates one or more tags that are associated with an Amazon Security Lake resource: a subscriber, or the data lake configuration for your
+ *          Amazon Web Services account in a particular Amazon Web Services Region. A <i>tag</i> is a label that you can define and associate with
+ *          Amazon Web Services resources. Each tag consists of a required <i>tag key</i> and an associated <i>tag value</i>. A
+ *          <i>tag key</i> is a general label that acts as a category for a more specific tag value. A <i>tag value</i> acts as a
+ *          descriptor for a tag key. Tags can help you identify, categorize, and manage resources in different ways, such as by owner, environment, or other
+ *          criteria. For more information, see
+ *          <a href="https://docs.aws.amazon.com/security-lake/latest/userguide/tagging-resources.html">Tagging Amazon Security Lake resources</a> in the
+ *          <i>Amazon Security Lake User Guide</i>.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SecurityLakeClient, TagResourceCommand } from "@aws-sdk/client-securitylake"; // ES Modules import
+ * // const { SecurityLakeClient, TagResourceCommand } = require("@aws-sdk/client-securitylake"); // CommonJS import
+ * const client = new SecurityLakeClient(config);
+ * const input = { // TagResourceRequest
+ *   resourceArn: "STRING_VALUE", // required
+ *   tags: [ // TagList // required
+ *     { // Tag
+ *       key: "STRING_VALUE", // required
+ *       value: "STRING_VALUE", // required
+ *     },
+ *   ],
+ * };
+ * const command = new TagResourceCommand(input);
+ * const response = await client.send(command);
+ * // {};
+ *
+ * ```
+ *
+ * @param TagResourceCommandInput - {@link TagResourceCommandInput}
+ * @returns {@link TagResourceCommandOutput}
+ * @see {@link TagResourceCommandInput} for command's `input` shape.
+ * @see {@link TagResourceCommandOutput} for command's `response` shape.
+ * @see {@link SecurityLakeClientResolvedConfig | config} for SecurityLakeClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action. Access denied errors appear when Amazon Security Lake explicitly or implicitly denies an authorization
+ *          request. An explicit denial occurs when a policy contains a Deny statement for the specific
+ *          Amazon Web Services action. An implicit denial occurs when there is no applicable Deny statement and also
+ *          no applicable Allow statement.</p>
+ *
+ * @throws {@link BadRequestException} (client fault)
+ *  <p>The request is malformed or contains an error such as an invalid parameter value or a missing required parameter.</p>
+ *
+ * @throws {@link ConflictException} (client fault)
+ *  <p>Occurs when a conflict with a previous successful write is detected. This generally
+ *          occurs when the previous write did not have time to propagate to the host serving the
+ *          current request. A retry (with appropriate backoff logic) is the recommended response to
+ *          this exception.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>Internal service exceptions are sometimes caused by transient issues. Before you start
+ *          troubleshooting, perform the operation again.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The resource could not be found.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The limit on the number of requests per second was exceeded.</p>
+ *
+ * @throws {@link SecurityLakeServiceException}
+ * <p>Base exception class for all service exceptions from SecurityLake service.</p>
+ *
+ */
+export declare class TagResourceCommand extends $Command<TagResourceCommandInput, TagResourceCommandOutput, SecurityLakeClientResolvedConfig> {
+    readonly input: TagResourceCommandInput;
+    static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
+    constructor(input: TagResourceCommandInput);
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: SecurityLakeClientResolvedConfig, options?: __HttpHandlerOptions): Handler<TagResourceCommandInput, TagResourceCommandOutput>;
+    /**
+     * @internal
+     */
+    private serialize;
+    /**
+     * @internal
+     */
+    private deserialize;
+}