aws-sdk 2.978.0 → 2.982.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +27 -1
- package/README.md +1 -1
- package/apis/acm-pca-2017-08-22.min.json +26 -14
- package/apis/cloudformation-2010-05-15.min.json +27 -1
- package/apis/ec2-2016-11-15.min.json +731 -727
- package/apis/elasticfilesystem-2015-02-01.min.json +2 -1
- package/apis/firehose-2015-08-04.min.json +104 -79
- package/apis/fsx-2018-03-01.min.json +639 -66
- package/apis/fsx-2018-03-01.paginators.json +15 -0
- package/apis/iot-2015-05-28.min.json +481 -232
- package/apis/iot-2015-05-28.paginators.json +12 -0
- package/apis/kms-2014-11-01.examples.json +100 -94
- package/apis/kms-2014-11-01.min.json +54 -34
- package/apis/mediatailor-2018-04-23.min.json +144 -116
- package/apis/quicksight-2018-04-01.min.json +162 -127
- package/apis/s3control-2018-08-20.min.json +470 -24
- package/apis/s3control-2018-08-20.paginators.json +5 -0
- package/apis/schemas-2019-12-02.min.json +49 -31
- package/apis/securityhub-2018-10-26.min.json +492 -205
- package/apis/securityhub-2018-10-26.paginators.json +22 -11
- package/apis/servicecatalog-appregistry-2020-06-24.min.json +68 -0
- package/apis/transfer-2018-11-05.min.json +403 -9
- package/apis/transfer-2018-11-05.paginators.json +10 -0
- package/clients/accessanalyzer.d.ts +46 -43
- package/clients/acmpca.d.ts +21 -7
- package/clients/cloudformation.d.ts +116 -80
- package/clients/cloudtrail.d.ts +72 -72
- package/clients/codebuild.d.ts +3 -3
- package/clients/computeoptimizer.d.ts +1 -1
- package/clients/configservice.d.ts +323 -323
- package/clients/ebs.d.ts +1 -1
- package/clients/ec2.d.ts +22 -13
- package/clients/efs.d.ts +57 -31
- package/clients/firehose.d.ts +39 -10
- package/clients/fsx.d.ts +694 -52
- package/clients/iot.d.ts +829 -506
- package/clients/kms.d.ts +293 -280
- package/clients/lexmodelbuildingservice.d.ts +1 -1
- package/clients/mediatailor.d.ts +45 -8
- package/clients/memorydb.d.ts +2 -2
- package/clients/polly.d.ts +2 -2
- package/clients/quicksight.d.ts +343 -310
- package/clients/s3control.d.ts +439 -44
- package/clients/schemas.d.ts +25 -0
- package/clients/securityhub.d.ts +524 -21
- package/clients/servicecatalogappregistry.d.ts +81 -3
- package/clients/sqs.d.ts +4 -4
- package/clients/transfer.d.ts +556 -28
- package/dist/aws-sdk-core-react-native.js +1 -1
- package/dist/aws-sdk-react-native.js +25 -27
- package/dist/aws-sdk.js +1414 -1077
- package/dist/aws-sdk.min.js +85 -85
- package/dist/xml2js.js +2 -3
- package/lib/core.js +1 -1
- package/package.json +1 -1
|
@@ -12,19 +12,19 @@ declare class ConfigService extends Service {
|
|
|
12
12
|
constructor(options?: ConfigService.Types.ClientConfiguration)
|
|
13
13
|
config: Config & ConfigService.Types.ClientConfiguration;
|
|
14
14
|
/**
|
|
15
|
-
* Returns the current configuration items for resources that are present in your
|
|
15
|
+
* Returns the current configuration items for resources that are present in your Config aggregator. The operation also returns a list of resources that are not processed in the current request. If there are no unprocessed resources, the operation returns an empty unprocessedResourceIdentifiers list. The API does not return results for deleted resources. The API does not return tags and relationships.
|
|
16
16
|
*/
|
|
17
17
|
batchGetAggregateResourceConfig(params: ConfigService.Types.BatchGetAggregateResourceConfigRequest, callback?: (err: AWSError, data: ConfigService.Types.BatchGetAggregateResourceConfigResponse) => void): Request<ConfigService.Types.BatchGetAggregateResourceConfigResponse, AWSError>;
|
|
18
18
|
/**
|
|
19
|
-
* Returns the current configuration items for resources that are present in your
|
|
19
|
+
* Returns the current configuration items for resources that are present in your Config aggregator. The operation also returns a list of resources that are not processed in the current request. If there are no unprocessed resources, the operation returns an empty unprocessedResourceIdentifiers list. The API does not return results for deleted resources. The API does not return tags and relationships.
|
|
20
20
|
*/
|
|
21
21
|
batchGetAggregateResourceConfig(callback?: (err: AWSError, data: ConfigService.Types.BatchGetAggregateResourceConfigResponse) => void): Request<ConfigService.Types.BatchGetAggregateResourceConfigResponse, AWSError>;
|
|
22
22
|
/**
|
|
23
|
-
* Returns the
|
|
23
|
+
* Returns the BaseConfigurationItem for one or more requested resources. The operation also returns a list of resources that are not processed in the current request. If there are no unprocessed resources, the operation returns an empty unprocessedResourceKeys list. The API does not return results for deleted resources. The API does not return any tags for the requested resources. This information is filtered out of the supplementaryConfiguration section of the API response.
|
|
24
24
|
*/
|
|
25
25
|
batchGetResourceConfig(params: ConfigService.Types.BatchGetResourceConfigRequest, callback?: (err: AWSError, data: ConfigService.Types.BatchGetResourceConfigResponse) => void): Request<ConfigService.Types.BatchGetResourceConfigResponse, AWSError>;
|
|
26
26
|
/**
|
|
27
|
-
* Returns the
|
|
27
|
+
* Returns the BaseConfigurationItem for one or more requested resources. The operation also returns a list of resources that are not processed in the current request. If there are no unprocessed resources, the operation returns an empty unprocessedResourceKeys list. The API does not return results for deleted resources. The API does not return any tags for the requested resources. This information is filtered out of the supplementaryConfiguration section of the API response.
|
|
28
28
|
*/
|
|
29
29
|
batchGetResourceConfig(callback?: (err: AWSError, data: ConfigService.Types.BatchGetResourceConfigResponse) => void): Request<ConfigService.Types.BatchGetResourceConfigResponse, AWSError>;
|
|
30
30
|
/**
|
|
@@ -36,11 +36,11 @@ declare class ConfigService extends Service {
|
|
|
36
36
|
*/
|
|
37
37
|
deleteAggregationAuthorization(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
38
38
|
/**
|
|
39
|
-
* Deletes the specified
|
|
39
|
+
* Deletes the specified Config rule and all of its evaluation results. Config sets the state of a rule to DELETING until the deletion is complete. You cannot update a rule while it is in this state. If you make a PutConfigRule or DeleteConfigRule request for the rule, you will receive a ResourceInUseException. You can check the state of a rule by using the DescribeConfigRules request.
|
|
40
40
|
*/
|
|
41
41
|
deleteConfigRule(params: ConfigService.Types.DeleteConfigRuleRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
42
42
|
/**
|
|
43
|
-
* Deletes the specified
|
|
43
|
+
* Deletes the specified Config rule and all of its evaluation results. Config sets the state of a rule to DELETING until the deletion is complete. You cannot update a rule while it is in this state. If you make a PutConfigRule or DeleteConfigRule request for the rule, you will receive a ResourceInUseException. You can check the state of a rule by using the DescribeConfigRules request.
|
|
44
44
|
*/
|
|
45
45
|
deleteConfigRule(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
46
46
|
/**
|
|
@@ -52,19 +52,19 @@ declare class ConfigService extends Service {
|
|
|
52
52
|
*/
|
|
53
53
|
deleteConfigurationAggregator(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
54
54
|
/**
|
|
55
|
-
* Deletes the configuration recorder. After the configuration recorder is deleted,
|
|
55
|
+
* Deletes the configuration recorder. After the configuration recorder is deleted, Config will not record resource configuration changes until you create a new configuration recorder. This action does not delete the configuration information that was previously recorded. You will be able to access the previously recorded information by using the GetResourceConfigHistory action, but you will not be able to access this information in the Config console until you create a new configuration recorder.
|
|
56
56
|
*/
|
|
57
57
|
deleteConfigurationRecorder(params: ConfigService.Types.DeleteConfigurationRecorderRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
58
58
|
/**
|
|
59
|
-
* Deletes the configuration recorder. After the configuration recorder is deleted,
|
|
59
|
+
* Deletes the configuration recorder. After the configuration recorder is deleted, Config will not record resource configuration changes until you create a new configuration recorder. This action does not delete the configuration information that was previously recorded. You will be able to access the previously recorded information by using the GetResourceConfigHistory action, but you will not be able to access this information in the Config console until you create a new configuration recorder.
|
|
60
60
|
*/
|
|
61
61
|
deleteConfigurationRecorder(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
62
62
|
/**
|
|
63
|
-
* Deletes the specified conformance pack and all the
|
|
63
|
+
* Deletes the specified conformance pack and all the Config rules, remediation actions, and all evaluation results within that conformance pack. Config sets the conformance pack to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a conformance pack while it is in this state.
|
|
64
64
|
*/
|
|
65
65
|
deleteConformancePack(params: ConfigService.Types.DeleteConformancePackRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
66
66
|
/**
|
|
67
|
-
* Deletes the specified conformance pack and all the
|
|
67
|
+
* Deletes the specified conformance pack and all the Config rules, remediation actions, and all evaluation results within that conformance pack. Config sets the conformance pack to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a conformance pack while it is in this state.
|
|
68
68
|
*/
|
|
69
69
|
deleteConformancePack(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
70
70
|
/**
|
|
@@ -76,27 +76,27 @@ declare class ConfigService extends Service {
|
|
|
76
76
|
*/
|
|
77
77
|
deleteDeliveryChannel(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
78
78
|
/**
|
|
79
|
-
* Deletes the evaluation results for the specified
|
|
79
|
+
* Deletes the evaluation results for the specified Config rule. You can specify one Config rule per request. After you delete the evaluation results, you can call the StartConfigRulesEvaluation API to start evaluating your Amazon Web Services resources against the rule.
|
|
80
80
|
*/
|
|
81
81
|
deleteEvaluationResults(params: ConfigService.Types.DeleteEvaluationResultsRequest, callback?: (err: AWSError, data: ConfigService.Types.DeleteEvaluationResultsResponse) => void): Request<ConfigService.Types.DeleteEvaluationResultsResponse, AWSError>;
|
|
82
82
|
/**
|
|
83
|
-
* Deletes the evaluation results for the specified
|
|
83
|
+
* Deletes the evaluation results for the specified Config rule. You can specify one Config rule per request. After you delete the evaluation results, you can call the StartConfigRulesEvaluation API to start evaluating your Amazon Web Services resources against the rule.
|
|
84
84
|
*/
|
|
85
85
|
deleteEvaluationResults(callback?: (err: AWSError, data: ConfigService.Types.DeleteEvaluationResultsResponse) => void): Request<ConfigService.Types.DeleteEvaluationResultsResponse, AWSError>;
|
|
86
86
|
/**
|
|
87
|
-
* Deletes the specified organization config rule and all of its evaluation results from all member accounts in that organization. Only a master account and a delegated administrator account can delete an organization config rule. When calling this API with a delegated administrator, you must ensure
|
|
87
|
+
* Deletes the specified organization config rule and all of its evaluation results from all member accounts in that organization. Only a master account and a delegated administrator account can delete an organization config rule. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added. Config sets the state of a rule to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a rule while it is in this state.
|
|
88
88
|
*/
|
|
89
89
|
deleteOrganizationConfigRule(params: ConfigService.Types.DeleteOrganizationConfigRuleRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
90
90
|
/**
|
|
91
|
-
* Deletes the specified organization config rule and all of its evaluation results from all member accounts in that organization. Only a master account and a delegated administrator account can delete an organization config rule. When calling this API with a delegated administrator, you must ensure
|
|
91
|
+
* Deletes the specified organization config rule and all of its evaluation results from all member accounts in that organization. Only a master account and a delegated administrator account can delete an organization config rule. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added. Config sets the state of a rule to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a rule while it is in this state.
|
|
92
92
|
*/
|
|
93
93
|
deleteOrganizationConfigRule(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
94
94
|
/**
|
|
95
|
-
* Deletes the specified organization conformance pack and all of the config rules and remediation actions from all member accounts in that organization. Only a master account or a delegated administrator account can delete an organization conformance pack. When calling this API with a delegated administrator, you must ensure
|
|
95
|
+
* Deletes the specified organization conformance pack and all of the config rules and remediation actions from all member accounts in that organization. Only a master account or a delegated administrator account can delete an organization conformance pack. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added. Config sets the state of a conformance pack to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a conformance pack while it is in this state.
|
|
96
96
|
*/
|
|
97
97
|
deleteOrganizationConformancePack(params: ConfigService.Types.DeleteOrganizationConformancePackRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
98
98
|
/**
|
|
99
|
-
* Deletes the specified organization conformance pack and all of the config rules and remediation actions from all member accounts in that organization. Only a master account or a delegated administrator account can delete an organization conformance pack. When calling this API with a delegated administrator, you must ensure
|
|
99
|
+
* Deletes the specified organization conformance pack and all of the config rules and remediation actions from all member accounts in that organization. Only a master account or a delegated administrator account can delete an organization conformance pack. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added. Config sets the state of a conformance pack to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a conformance pack while it is in this state.
|
|
100
100
|
*/
|
|
101
101
|
deleteOrganizationConformancePack(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
102
102
|
/**
|
|
@@ -116,19 +116,19 @@ declare class ConfigService extends Service {
|
|
|
116
116
|
*/
|
|
117
117
|
deleteRemediationConfiguration(callback?: (err: AWSError, data: ConfigService.Types.DeleteRemediationConfigurationResponse) => void): Request<ConfigService.Types.DeleteRemediationConfigurationResponse, AWSError>;
|
|
118
118
|
/**
|
|
119
|
-
* Deletes one or more remediation exceptions mentioned in the resource keys.
|
|
119
|
+
* Deletes one or more remediation exceptions mentioned in the resource keys. Config generates a remediation exception when a problem occurs executing a remediation action to a specific resource. Remediation exceptions blocks auto-remediation until the exception is cleared.
|
|
120
120
|
*/
|
|
121
121
|
deleteRemediationExceptions(params: ConfigService.Types.DeleteRemediationExceptionsRequest, callback?: (err: AWSError, data: ConfigService.Types.DeleteRemediationExceptionsResponse) => void): Request<ConfigService.Types.DeleteRemediationExceptionsResponse, AWSError>;
|
|
122
122
|
/**
|
|
123
|
-
* Deletes one or more remediation exceptions mentioned in the resource keys.
|
|
123
|
+
* Deletes one or more remediation exceptions mentioned in the resource keys. Config generates a remediation exception when a problem occurs executing a remediation action to a specific resource. Remediation exceptions blocks auto-remediation until the exception is cleared.
|
|
124
124
|
*/
|
|
125
125
|
deleteRemediationExceptions(callback?: (err: AWSError, data: ConfigService.Types.DeleteRemediationExceptionsResponse) => void): Request<ConfigService.Types.DeleteRemediationExceptionsResponse, AWSError>;
|
|
126
126
|
/**
|
|
127
|
-
* Records the configuration state for a custom resource that has been deleted. This API records a new ConfigurationItem with a ResourceDeleted status. You can retrieve the ConfigurationItems recorded for this resource in your
|
|
127
|
+
* Records the configuration state for a custom resource that has been deleted. This API records a new ConfigurationItem with a ResourceDeleted status. You can retrieve the ConfigurationItems recorded for this resource in your Config History.
|
|
128
128
|
*/
|
|
129
129
|
deleteResourceConfig(params: ConfigService.Types.DeleteResourceConfigRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
130
130
|
/**
|
|
131
|
-
* Records the configuration state for a custom resource that has been deleted. This API records a new ConfigurationItem with a ResourceDeleted status. You can retrieve the ConfigurationItems recorded for this resource in your
|
|
131
|
+
* Records the configuration state for a custom resource that has been deleted. This API records a new ConfigurationItem with a ResourceDeleted status. You can retrieve the ConfigurationItems recorded for this resource in your Config History.
|
|
132
132
|
*/
|
|
133
133
|
deleteResourceConfig(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
134
134
|
/**
|
|
@@ -140,35 +140,35 @@ declare class ConfigService extends Service {
|
|
|
140
140
|
*/
|
|
141
141
|
deleteRetentionConfiguration(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
142
142
|
/**
|
|
143
|
-
* Deletes the stored query for a single
|
|
143
|
+
* Deletes the stored query for a single Amazon Web Services account and a single Amazon Web Services Region.
|
|
144
144
|
*/
|
|
145
145
|
deleteStoredQuery(params: ConfigService.Types.DeleteStoredQueryRequest, callback?: (err: AWSError, data: ConfigService.Types.DeleteStoredQueryResponse) => void): Request<ConfigService.Types.DeleteStoredQueryResponse, AWSError>;
|
|
146
146
|
/**
|
|
147
|
-
* Deletes the stored query for a single
|
|
147
|
+
* Deletes the stored query for a single Amazon Web Services account and a single Amazon Web Services Region.
|
|
148
148
|
*/
|
|
149
149
|
deleteStoredQuery(callback?: (err: AWSError, data: ConfigService.Types.DeleteStoredQueryResponse) => void): Request<ConfigService.Types.DeleteStoredQueryResponse, AWSError>;
|
|
150
150
|
/**
|
|
151
|
-
* Schedules delivery of a configuration snapshot to the Amazon S3 bucket in the specified delivery channel. After the delivery has started,
|
|
151
|
+
* Schedules delivery of a configuration snapshot to the Amazon S3 bucket in the specified delivery channel. After the delivery has started, Config sends the following notifications using an Amazon SNS topic that you have specified. Notification of the start of the delivery. Notification of the completion of the delivery, if the delivery was successfully completed. Notification of delivery failure, if the delivery failed.
|
|
152
152
|
*/
|
|
153
153
|
deliverConfigSnapshot(params: ConfigService.Types.DeliverConfigSnapshotRequest, callback?: (err: AWSError, data: ConfigService.Types.DeliverConfigSnapshotResponse) => void): Request<ConfigService.Types.DeliverConfigSnapshotResponse, AWSError>;
|
|
154
154
|
/**
|
|
155
|
-
* Schedules delivery of a configuration snapshot to the Amazon S3 bucket in the specified delivery channel. After the delivery has started,
|
|
155
|
+
* Schedules delivery of a configuration snapshot to the Amazon S3 bucket in the specified delivery channel. After the delivery has started, Config sends the following notifications using an Amazon SNS topic that you have specified. Notification of the start of the delivery. Notification of the completion of the delivery, if the delivery was successfully completed. Notification of delivery failure, if the delivery failed.
|
|
156
156
|
*/
|
|
157
157
|
deliverConfigSnapshot(callback?: (err: AWSError, data: ConfigService.Types.DeliverConfigSnapshotResponse) => void): Request<ConfigService.Types.DeliverConfigSnapshotResponse, AWSError>;
|
|
158
158
|
/**
|
|
159
|
-
* Returns a list of compliant and noncompliant rules with the number of resources for compliant and noncompliant rules. The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.
|
|
159
|
+
* Returns a list of compliant and noncompliant rules with the number of resources for compliant and noncompliant rules. Does not display rules that do not have compliance results. The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.
|
|
160
160
|
*/
|
|
161
161
|
describeAggregateComplianceByConfigRules(params: ConfigService.Types.DescribeAggregateComplianceByConfigRulesRequest, callback?: (err: AWSError, data: ConfigService.Types.DescribeAggregateComplianceByConfigRulesResponse) => void): Request<ConfigService.Types.DescribeAggregateComplianceByConfigRulesResponse, AWSError>;
|
|
162
162
|
/**
|
|
163
|
-
* Returns a list of compliant and noncompliant rules with the number of resources for compliant and noncompliant rules. The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.
|
|
163
|
+
* Returns a list of compliant and noncompliant rules with the number of resources for compliant and noncompliant rules. Does not display rules that do not have compliance results. The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.
|
|
164
164
|
*/
|
|
165
165
|
describeAggregateComplianceByConfigRules(callback?: (err: AWSError, data: ConfigService.Types.DescribeAggregateComplianceByConfigRulesResponse) => void): Request<ConfigService.Types.DescribeAggregateComplianceByConfigRulesResponse, AWSError>;
|
|
166
166
|
/**
|
|
167
|
-
* Returns a list of the conformance packs and their associated compliance status with the count of compliant and noncompliant
|
|
167
|
+
* Returns a list of the conformance packs and their associated compliance status with the count of compliant and noncompliant Config rules within each conformance pack. Also returns the total rule count which includes compliant rules, noncompliant rules, and rules that cannot be evaluated due to insufficient data. The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.
|
|
168
168
|
*/
|
|
169
169
|
describeAggregateComplianceByConformancePacks(params: ConfigService.Types.DescribeAggregateComplianceByConformancePacksRequest, callback?: (err: AWSError, data: ConfigService.Types.DescribeAggregateComplianceByConformancePacksResponse) => void): Request<ConfigService.Types.DescribeAggregateComplianceByConformancePacksResponse, AWSError>;
|
|
170
170
|
/**
|
|
171
|
-
* Returns a list of the conformance packs and their associated compliance status with the count of compliant and noncompliant
|
|
171
|
+
* Returns a list of the conformance packs and their associated compliance status with the count of compliant and noncompliant Config rules within each conformance pack. Also returns the total rule count which includes compliant rules, noncompliant rules, and rules that cannot be evaluated due to insufficient data. The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.
|
|
172
172
|
*/
|
|
173
173
|
describeAggregateComplianceByConformancePacks(callback?: (err: AWSError, data: ConfigService.Types.DescribeAggregateComplianceByConformancePacksResponse) => void): Request<ConfigService.Types.DescribeAggregateComplianceByConformancePacksResponse, AWSError>;
|
|
174
174
|
/**
|
|
@@ -180,43 +180,43 @@ declare class ConfigService extends Service {
|
|
|
180
180
|
*/
|
|
181
181
|
describeAggregationAuthorizations(callback?: (err: AWSError, data: ConfigService.Types.DescribeAggregationAuthorizationsResponse) => void): Request<ConfigService.Types.DescribeAggregationAuthorizationsResponse, AWSError>;
|
|
182
182
|
/**
|
|
183
|
-
* Indicates whether the specified
|
|
183
|
+
* Indicates whether the specified Config rules are compliant. If a rule is noncompliant, this action returns the number of Amazon Web Services resources that do not comply with the rule. A rule is compliant if all of the evaluated resources comply with it. It is noncompliant if any of these resources do not comply. If Config has no current evaluation results for the rule, it returns INSUFFICIENT_DATA. This result might indicate one of the following conditions: Config has never invoked an evaluation for the rule. To check whether it has, use the DescribeConfigRuleEvaluationStatus action to get the LastSuccessfulInvocationTime and LastFailedInvocationTime. The rule's Lambda function is failing to send evaluation results to Config. Verify that the role you assigned to your configuration recorder includes the config:PutEvaluations permission. If the rule is a custom rule, verify that the Lambda execution role includes the config:PutEvaluations permission. The rule's Lambda function has returned NOT_APPLICABLE for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.
|
|
184
184
|
*/
|
|
185
185
|
describeComplianceByConfigRule(params: ConfigService.Types.DescribeComplianceByConfigRuleRequest, callback?: (err: AWSError, data: ConfigService.Types.DescribeComplianceByConfigRuleResponse) => void): Request<ConfigService.Types.DescribeComplianceByConfigRuleResponse, AWSError>;
|
|
186
186
|
/**
|
|
187
|
-
* Indicates whether the specified
|
|
187
|
+
* Indicates whether the specified Config rules are compliant. If a rule is noncompliant, this action returns the number of Amazon Web Services resources that do not comply with the rule. A rule is compliant if all of the evaluated resources comply with it. It is noncompliant if any of these resources do not comply. If Config has no current evaluation results for the rule, it returns INSUFFICIENT_DATA. This result might indicate one of the following conditions: Config has never invoked an evaluation for the rule. To check whether it has, use the DescribeConfigRuleEvaluationStatus action to get the LastSuccessfulInvocationTime and LastFailedInvocationTime. The rule's Lambda function is failing to send evaluation results to Config. Verify that the role you assigned to your configuration recorder includes the config:PutEvaluations permission. If the rule is a custom rule, verify that the Lambda execution role includes the config:PutEvaluations permission. The rule's Lambda function has returned NOT_APPLICABLE for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.
|
|
188
188
|
*/
|
|
189
189
|
describeComplianceByConfigRule(callback?: (err: AWSError, data: ConfigService.Types.DescribeComplianceByConfigRuleResponse) => void): Request<ConfigService.Types.DescribeComplianceByConfigRuleResponse, AWSError>;
|
|
190
190
|
/**
|
|
191
|
-
* Indicates whether the specified
|
|
191
|
+
* Indicates whether the specified Amazon Web Services resources are compliant. If a resource is noncompliant, this action returns the number of Config rules that the resource does not comply with. A resource is compliant if it complies with all the Config rules that evaluate it. It is noncompliant if it does not comply with one or more of these rules. If Config has no current evaluation results for the resource, it returns INSUFFICIENT_DATA. This result might indicate one of the following conditions about the rules that evaluate the resource: Config has never invoked an evaluation for the rule. To check whether it has, use the DescribeConfigRuleEvaluationStatus action to get the LastSuccessfulInvocationTime and LastFailedInvocationTime. The rule's Lambda function is failing to send evaluation results to Config. Verify that the role that you assigned to your configuration recorder includes the config:PutEvaluations permission. If the rule is a custom rule, verify that the Lambda execution role includes the config:PutEvaluations permission. The rule's Lambda function has returned NOT_APPLICABLE for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.
|
|
192
192
|
*/
|
|
193
193
|
describeComplianceByResource(params: ConfigService.Types.DescribeComplianceByResourceRequest, callback?: (err: AWSError, data: ConfigService.Types.DescribeComplianceByResourceResponse) => void): Request<ConfigService.Types.DescribeComplianceByResourceResponse, AWSError>;
|
|
194
194
|
/**
|
|
195
|
-
* Indicates whether the specified
|
|
195
|
+
* Indicates whether the specified Amazon Web Services resources are compliant. If a resource is noncompliant, this action returns the number of Config rules that the resource does not comply with. A resource is compliant if it complies with all the Config rules that evaluate it. It is noncompliant if it does not comply with one or more of these rules. If Config has no current evaluation results for the resource, it returns INSUFFICIENT_DATA. This result might indicate one of the following conditions about the rules that evaluate the resource: Config has never invoked an evaluation for the rule. To check whether it has, use the DescribeConfigRuleEvaluationStatus action to get the LastSuccessfulInvocationTime and LastFailedInvocationTime. The rule's Lambda function is failing to send evaluation results to Config. Verify that the role that you assigned to your configuration recorder includes the config:PutEvaluations permission. If the rule is a custom rule, verify that the Lambda execution role includes the config:PutEvaluations permission. The rule's Lambda function has returned NOT_APPLICABLE for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.
|
|
196
196
|
*/
|
|
197
197
|
describeComplianceByResource(callback?: (err: AWSError, data: ConfigService.Types.DescribeComplianceByResourceResponse) => void): Request<ConfigService.Types.DescribeComplianceByResourceResponse, AWSError>;
|
|
198
198
|
/**
|
|
199
|
-
* Returns status information for each of your
|
|
199
|
+
* Returns status information for each of your Config managed rules. The status includes information such as the last time Config invoked the rule, the last time Config failed to invoke the rule, and the related error for the last failure.
|
|
200
200
|
*/
|
|
201
201
|
describeConfigRuleEvaluationStatus(params: ConfigService.Types.DescribeConfigRuleEvaluationStatusRequest, callback?: (err: AWSError, data: ConfigService.Types.DescribeConfigRuleEvaluationStatusResponse) => void): Request<ConfigService.Types.DescribeConfigRuleEvaluationStatusResponse, AWSError>;
|
|
202
202
|
/**
|
|
203
|
-
* Returns status information for each of your
|
|
203
|
+
* Returns status information for each of your Config managed rules. The status includes information such as the last time Config invoked the rule, the last time Config failed to invoke the rule, and the related error for the last failure.
|
|
204
204
|
*/
|
|
205
205
|
describeConfigRuleEvaluationStatus(callback?: (err: AWSError, data: ConfigService.Types.DescribeConfigRuleEvaluationStatusResponse) => void): Request<ConfigService.Types.DescribeConfigRuleEvaluationStatusResponse, AWSError>;
|
|
206
206
|
/**
|
|
207
|
-
* Returns details about your
|
|
207
|
+
* Returns details about your Config rules.
|
|
208
208
|
*/
|
|
209
209
|
describeConfigRules(params: ConfigService.Types.DescribeConfigRulesRequest, callback?: (err: AWSError, data: ConfigService.Types.DescribeConfigRulesResponse) => void): Request<ConfigService.Types.DescribeConfigRulesResponse, AWSError>;
|
|
210
210
|
/**
|
|
211
|
-
* Returns details about your
|
|
211
|
+
* Returns details about your Config rules.
|
|
212
212
|
*/
|
|
213
213
|
describeConfigRules(callback?: (err: AWSError, data: ConfigService.Types.DescribeConfigRulesResponse) => void): Request<ConfigService.Types.DescribeConfigRulesResponse, AWSError>;
|
|
214
214
|
/**
|
|
215
|
-
* Returns status information for sources within an aggregator. The status includes information about the last time
|
|
215
|
+
* Returns status information for sources within an aggregator. The status includes information about the last time Config verified authorization between the source account and an aggregator account. In case of a failure, the status contains the related error code or message.
|
|
216
216
|
*/
|
|
217
217
|
describeConfigurationAggregatorSourcesStatus(params: ConfigService.Types.DescribeConfigurationAggregatorSourcesStatusRequest, callback?: (err: AWSError, data: ConfigService.Types.DescribeConfigurationAggregatorSourcesStatusResponse) => void): Request<ConfigService.Types.DescribeConfigurationAggregatorSourcesStatusResponse, AWSError>;
|
|
218
218
|
/**
|
|
219
|
-
* Returns status information for sources within an aggregator. The status includes information about the last time
|
|
219
|
+
* Returns status information for sources within an aggregator. The status includes information about the last time Config verified authorization between the source account and an aggregator account. In case of a failure, the status contains the related error code or message.
|
|
220
220
|
*/
|
|
221
221
|
describeConfigurationAggregatorSourcesStatus(callback?: (err: AWSError, data: ConfigService.Types.DescribeConfigurationAggregatorSourcesStatusResponse) => void): Request<ConfigService.Types.DescribeConfigurationAggregatorSourcesStatusResponse, AWSError>;
|
|
222
222
|
/**
|
|
@@ -332,11 +332,11 @@ declare class ConfigService extends Service {
|
|
|
332
332
|
*/
|
|
333
333
|
describeRemediationConfigurations(callback?: (err: AWSError, data: ConfigService.Types.DescribeRemediationConfigurationsResponse) => void): Request<ConfigService.Types.DescribeRemediationConfigurationsResponse, AWSError>;
|
|
334
334
|
/**
|
|
335
|
-
* Returns the details of one or more remediation exceptions. A detailed view of a remediation exception for a set of resources that includes an explanation of an exception and the time when the exception will be deleted. When you specify the limit and the next token, you receive a paginated response.
|
|
335
|
+
* Returns the details of one or more remediation exceptions. A detailed view of a remediation exception for a set of resources that includes an explanation of an exception and the time when the exception will be deleted. When you specify the limit and the next token, you receive a paginated response. Config generates a remediation exception when a problem occurs executing a remediation action to a specific resource. Remediation exceptions blocks auto-remediation until the exception is cleared. When you specify the limit and the next token, you receive a paginated response. Limit and next token are not applicable if you request resources in batch. It is only applicable, when you request all resources.
|
|
336
336
|
*/
|
|
337
337
|
describeRemediationExceptions(params: ConfigService.Types.DescribeRemediationExceptionsRequest, callback?: (err: AWSError, data: ConfigService.Types.DescribeRemediationExceptionsResponse) => void): Request<ConfigService.Types.DescribeRemediationExceptionsResponse, AWSError>;
|
|
338
338
|
/**
|
|
339
|
-
* Returns the details of one or more remediation exceptions. A detailed view of a remediation exception for a set of resources that includes an explanation of an exception and the time when the exception will be deleted. When you specify the limit and the next token, you receive a paginated response.
|
|
339
|
+
* Returns the details of one or more remediation exceptions. A detailed view of a remediation exception for a set of resources that includes an explanation of an exception and the time when the exception will be deleted. When you specify the limit and the next token, you receive a paginated response. Config generates a remediation exception when a problem occurs executing a remediation action to a specific resource. Remediation exceptions blocks auto-remediation until the exception is cleared. When you specify the limit and the next token, you receive a paginated response. Limit and next token are not applicable if you request resources in batch. It is only applicable, when you request all resources.
|
|
340
340
|
*/
|
|
341
341
|
describeRemediationExceptions(callback?: (err: AWSError, data: ConfigService.Types.DescribeRemediationExceptionsResponse) => void): Request<ConfigService.Types.DescribeRemediationExceptionsResponse, AWSError>;
|
|
342
342
|
/**
|
|
@@ -348,19 +348,19 @@ declare class ConfigService extends Service {
|
|
|
348
348
|
*/
|
|
349
349
|
describeRemediationExecutionStatus(callback?: (err: AWSError, data: ConfigService.Types.DescribeRemediationExecutionStatusResponse) => void): Request<ConfigService.Types.DescribeRemediationExecutionStatusResponse, AWSError>;
|
|
350
350
|
/**
|
|
351
|
-
* Returns the details of one or more retention configurations. If the retention configuration name is not specified, this action returns the details for all the retention configurations for that account. Currently,
|
|
351
|
+
* Returns the details of one or more retention configurations. If the retention configuration name is not specified, this action returns the details for all the retention configurations for that account. Currently, Config supports only one retention configuration per region in your account.
|
|
352
352
|
*/
|
|
353
353
|
describeRetentionConfigurations(params: ConfigService.Types.DescribeRetentionConfigurationsRequest, callback?: (err: AWSError, data: ConfigService.Types.DescribeRetentionConfigurationsResponse) => void): Request<ConfigService.Types.DescribeRetentionConfigurationsResponse, AWSError>;
|
|
354
354
|
/**
|
|
355
|
-
* Returns the details of one or more retention configurations. If the retention configuration name is not specified, this action returns the details for all the retention configurations for that account. Currently,
|
|
355
|
+
* Returns the details of one or more retention configurations. If the retention configuration name is not specified, this action returns the details for all the retention configurations for that account. Currently, Config supports only one retention configuration per region in your account.
|
|
356
356
|
*/
|
|
357
357
|
describeRetentionConfigurations(callback?: (err: AWSError, data: ConfigService.Types.DescribeRetentionConfigurationsResponse) => void): Request<ConfigService.Types.DescribeRetentionConfigurationsResponse, AWSError>;
|
|
358
358
|
/**
|
|
359
|
-
* Returns the evaluation results for the specified
|
|
359
|
+
* Returns the evaluation results for the specified Config rule for a specific resource in a rule. The results indicate which Amazon Web Services resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule. The results can return an empty result page. But if you have a nextToken, the results are displayed on the next page.
|
|
360
360
|
*/
|
|
361
361
|
getAggregateComplianceDetailsByConfigRule(params: ConfigService.Types.GetAggregateComplianceDetailsByConfigRuleRequest, callback?: (err: AWSError, data: ConfigService.Types.GetAggregateComplianceDetailsByConfigRuleResponse) => void): Request<ConfigService.Types.GetAggregateComplianceDetailsByConfigRuleResponse, AWSError>;
|
|
362
362
|
/**
|
|
363
|
-
* Returns the evaluation results for the specified
|
|
363
|
+
* Returns the evaluation results for the specified Config rule for a specific resource in a rule. The results indicate which Amazon Web Services resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule. The results can return an empty result page. But if you have a nextToken, the results are displayed on the next page.
|
|
364
364
|
*/
|
|
365
365
|
getAggregateComplianceDetailsByConfigRule(callback?: (err: AWSError, data: ConfigService.Types.GetAggregateComplianceDetailsByConfigRuleResponse) => void): Request<ConfigService.Types.GetAggregateComplianceDetailsByConfigRuleResponse, AWSError>;
|
|
366
366
|
/**
|
|
@@ -372,19 +372,19 @@ declare class ConfigService extends Service {
|
|
|
372
372
|
*/
|
|
373
373
|
getAggregateConfigRuleComplianceSummary(callback?: (err: AWSError, data: ConfigService.Types.GetAggregateConfigRuleComplianceSummaryResponse) => void): Request<ConfigService.Types.GetAggregateConfigRuleComplianceSummaryResponse, AWSError>;
|
|
374
374
|
/**
|
|
375
|
-
* Returns the count of compliant and noncompliant conformance packs across all
|
|
375
|
+
* Returns the count of compliant and noncompliant conformance packs across all Amazon Web Services accounts and Amazon Web Services Regions in an aggregator. You can filter based on Amazon Web Services account ID or Amazon Web Services Region. The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.
|
|
376
376
|
*/
|
|
377
377
|
getAggregateConformancePackComplianceSummary(params: ConfigService.Types.GetAggregateConformancePackComplianceSummaryRequest, callback?: (err: AWSError, data: ConfigService.Types.GetAggregateConformancePackComplianceSummaryResponse) => void): Request<ConfigService.Types.GetAggregateConformancePackComplianceSummaryResponse, AWSError>;
|
|
378
378
|
/**
|
|
379
|
-
* Returns the count of compliant and noncompliant conformance packs across all
|
|
379
|
+
* Returns the count of compliant and noncompliant conformance packs across all Amazon Web Services accounts and Amazon Web Services Regions in an aggregator. You can filter based on Amazon Web Services account ID or Amazon Web Services Region. The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.
|
|
380
380
|
*/
|
|
381
381
|
getAggregateConformancePackComplianceSummary(callback?: (err: AWSError, data: ConfigService.Types.GetAggregateConformancePackComplianceSummaryResponse) => void): Request<ConfigService.Types.GetAggregateConformancePackComplianceSummaryResponse, AWSError>;
|
|
382
382
|
/**
|
|
383
|
-
* Returns the resource counts across accounts and regions that are present in your
|
|
383
|
+
* Returns the resource counts across accounts and regions that are present in your Config aggregator. You can request the resource counts by providing filters and GroupByKey. For example, if the input contains accountID 12345678910 and region us-east-1 in filters, the API returns the count of resources in account ID 12345678910 and region us-east-1. If the input contains ACCOUNT_ID as a GroupByKey, the API returns resource counts for all source accounts that are present in your aggregator.
|
|
384
384
|
*/
|
|
385
385
|
getAggregateDiscoveredResourceCounts(params: ConfigService.Types.GetAggregateDiscoveredResourceCountsRequest, callback?: (err: AWSError, data: ConfigService.Types.GetAggregateDiscoveredResourceCountsResponse) => void): Request<ConfigService.Types.GetAggregateDiscoveredResourceCountsResponse, AWSError>;
|
|
386
386
|
/**
|
|
387
|
-
* Returns the resource counts across accounts and regions that are present in your
|
|
387
|
+
* Returns the resource counts across accounts and regions that are present in your Config aggregator. You can request the resource counts by providing filters and GroupByKey. For example, if the input contains accountID 12345678910 and region us-east-1 in filters, the API returns the count of resources in account ID 12345678910 and region us-east-1. If the input contains ACCOUNT_ID as a GroupByKey, the API returns resource counts for all source accounts that are present in your aggregator.
|
|
388
388
|
*/
|
|
389
389
|
getAggregateDiscoveredResourceCounts(callback?: (err: AWSError, data: ConfigService.Types.GetAggregateDiscoveredResourceCountsResponse) => void): Request<ConfigService.Types.GetAggregateDiscoveredResourceCountsResponse, AWSError>;
|
|
390
390
|
/**
|
|
@@ -396,23 +396,23 @@ declare class ConfigService extends Service {
|
|
|
396
396
|
*/
|
|
397
397
|
getAggregateResourceConfig(callback?: (err: AWSError, data: ConfigService.Types.GetAggregateResourceConfigResponse) => void): Request<ConfigService.Types.GetAggregateResourceConfigResponse, AWSError>;
|
|
398
398
|
/**
|
|
399
|
-
* Returns the evaluation results for the specified
|
|
399
|
+
* Returns the evaluation results for the specified Config rule. The results indicate which Amazon Web Services resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule.
|
|
400
400
|
*/
|
|
401
401
|
getComplianceDetailsByConfigRule(params: ConfigService.Types.GetComplianceDetailsByConfigRuleRequest, callback?: (err: AWSError, data: ConfigService.Types.GetComplianceDetailsByConfigRuleResponse) => void): Request<ConfigService.Types.GetComplianceDetailsByConfigRuleResponse, AWSError>;
|
|
402
402
|
/**
|
|
403
|
-
* Returns the evaluation results for the specified
|
|
403
|
+
* Returns the evaluation results for the specified Config rule. The results indicate which Amazon Web Services resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule.
|
|
404
404
|
*/
|
|
405
405
|
getComplianceDetailsByConfigRule(callback?: (err: AWSError, data: ConfigService.Types.GetComplianceDetailsByConfigRuleResponse) => void): Request<ConfigService.Types.GetComplianceDetailsByConfigRuleResponse, AWSError>;
|
|
406
406
|
/**
|
|
407
|
-
* Returns the evaluation results for the specified
|
|
407
|
+
* Returns the evaluation results for the specified Amazon Web Services resource. The results indicate which Config rules were used to evaluate the resource, when each rule was last used, and whether the resource complies with each rule.
|
|
408
408
|
*/
|
|
409
409
|
getComplianceDetailsByResource(params: ConfigService.Types.GetComplianceDetailsByResourceRequest, callback?: (err: AWSError, data: ConfigService.Types.GetComplianceDetailsByResourceResponse) => void): Request<ConfigService.Types.GetComplianceDetailsByResourceResponse, AWSError>;
|
|
410
410
|
/**
|
|
411
|
-
* Returns the evaluation results for the specified
|
|
411
|
+
* Returns the evaluation results for the specified Amazon Web Services resource. The results indicate which Config rules were used to evaluate the resource, when each rule was last used, and whether the resource complies with each rule.
|
|
412
412
|
*/
|
|
413
413
|
getComplianceDetailsByResource(callback?: (err: AWSError, data: ConfigService.Types.GetComplianceDetailsByResourceResponse) => void): Request<ConfigService.Types.GetComplianceDetailsByResourceResponse, AWSError>;
|
|
414
414
|
/**
|
|
415
|
-
* Returns the number of
|
|
415
|
+
* Returns the number of Config rules that are compliant and noncompliant, up to a maximum of 25 for each.
|
|
416
416
|
*/
|
|
417
417
|
getComplianceSummaryByConfigRule(callback?: (err: AWSError, data: ConfigService.Types.GetComplianceSummaryByConfigRuleResponse) => void): Request<ConfigService.Types.GetComplianceSummaryByConfigRuleResponse, AWSError>;
|
|
418
418
|
/**
|
|
@@ -424,11 +424,11 @@ declare class ConfigService extends Service {
|
|
|
424
424
|
*/
|
|
425
425
|
getComplianceSummaryByResourceType(callback?: (err: AWSError, data: ConfigService.Types.GetComplianceSummaryByResourceTypeResponse) => void): Request<ConfigService.Types.GetComplianceSummaryByResourceTypeResponse, AWSError>;
|
|
426
426
|
/**
|
|
427
|
-
* Returns compliance details of a conformance pack for all
|
|
427
|
+
* Returns compliance details of a conformance pack for all Amazon Web Services resources that are monitered by conformance pack.
|
|
428
428
|
*/
|
|
429
429
|
getConformancePackComplianceDetails(params: ConfigService.Types.GetConformancePackComplianceDetailsRequest, callback?: (err: AWSError, data: ConfigService.Types.GetConformancePackComplianceDetailsResponse) => void): Request<ConfigService.Types.GetConformancePackComplianceDetailsResponse, AWSError>;
|
|
430
430
|
/**
|
|
431
|
-
* Returns compliance details of a conformance pack for all
|
|
431
|
+
* Returns compliance details of a conformance pack for all Amazon Web Services resources that are monitered by conformance pack.
|
|
432
432
|
*/
|
|
433
433
|
getConformancePackComplianceDetails(callback?: (err: AWSError, data: ConfigService.Types.GetConformancePackComplianceDetailsResponse) => void): Request<ConfigService.Types.GetConformancePackComplianceDetailsResponse, AWSError>;
|
|
434
434
|
/**
|
|
@@ -440,11 +440,11 @@ declare class ConfigService extends Service {
|
|
|
440
440
|
*/
|
|
441
441
|
getConformancePackComplianceSummary(callback?: (err: AWSError, data: ConfigService.Types.GetConformancePackComplianceSummaryResponse) => void): Request<ConfigService.Types.GetConformancePackComplianceSummaryResponse, AWSError>;
|
|
442
442
|
/**
|
|
443
|
-
* Returns the resource types, the number of each resource type, and the total number of resources that
|
|
443
|
+
* Returns the resource types, the number of each resource type, and the total number of resources that Config is recording in this region for your Amazon Web Services account. Example Config is recording three resource types in the US East (Ohio) Region for your account: 25 EC2 instances, 20 IAM users, and 15 S3 buckets. You make a call to the GetDiscoveredResourceCounts action and specify that you want all resource types. Config returns the following: The resource types (EC2 instances, IAM users, and S3 buckets). The number of each resource type (25, 20, and 15). The total number of all resources (60). The response is paginated. By default, Config lists 100 ResourceCount objects on each page. You can customize this number with the limit parameter. The response includes a nextToken string. To get the next page of results, run the request again and specify the string for the nextToken parameter. If you make a call to the GetDiscoveredResourceCounts action, you might not immediately receive resource counts in the following situations: You are a new Config customer. You just enabled resource recording. It might take a few minutes for Config to record and count your resources. Wait a few minutes and then retry the GetDiscoveredResourceCounts action.
|
|
444
444
|
*/
|
|
445
445
|
getDiscoveredResourceCounts(params: ConfigService.Types.GetDiscoveredResourceCountsRequest, callback?: (err: AWSError, data: ConfigService.Types.GetDiscoveredResourceCountsResponse) => void): Request<ConfigService.Types.GetDiscoveredResourceCountsResponse, AWSError>;
|
|
446
446
|
/**
|
|
447
|
-
* Returns the resource types, the number of each resource type, and the total number of resources that
|
|
447
|
+
* Returns the resource types, the number of each resource type, and the total number of resources that Config is recording in this region for your Amazon Web Services account. Example Config is recording three resource types in the US East (Ohio) Region for your account: 25 EC2 instances, 20 IAM users, and 15 S3 buckets. You make a call to the GetDiscoveredResourceCounts action and specify that you want all resource types. Config returns the following: The resource types (EC2 instances, IAM users, and S3 buckets). The number of each resource type (25, 20, and 15). The total number of all resources (60). The response is paginated. By default, Config lists 100 ResourceCount objects on each page. You can customize this number with the limit parameter. The response includes a nextToken string. To get the next page of results, run the request again and specify the string for the nextToken parameter. If you make a call to the GetDiscoveredResourceCounts action, you might not immediately receive resource counts in the following situations: You are a new Config customer. You just enabled resource recording. It might take a few minutes for Config to record and count your resources. Wait a few minutes and then retry the GetDiscoveredResourceCounts action.
|
|
448
448
|
*/
|
|
449
449
|
getDiscoveredResourceCounts(callback?: (err: AWSError, data: ConfigService.Types.GetDiscoveredResourceCountsResponse) => void): Request<ConfigService.Types.GetDiscoveredResourceCountsResponse, AWSError>;
|
|
450
450
|
/**
|
|
@@ -464,11 +464,11 @@ declare class ConfigService extends Service {
|
|
|
464
464
|
*/
|
|
465
465
|
getOrganizationConformancePackDetailedStatus(callback?: (err: AWSError, data: ConfigService.Types.GetOrganizationConformancePackDetailedStatusResponse) => void): Request<ConfigService.Types.GetOrganizationConformancePackDetailedStatusResponse, AWSError>;
|
|
466
466
|
/**
|
|
467
|
-
* Returns a list of
|
|
467
|
+
* Returns a list of ConfigurationItems for the specified resource. The list contains details about each state of the resource during the specified time interval. If you specified a retention period to retain your ConfigurationItems between a minimum of 30 days and a maximum of 7 years (2557 days), Config returns the ConfigurationItems for the specified retention period. The response is paginated. By default, Config returns a limit of 10 configuration items per page. You can customize this number with the limit parameter. The response includes a nextToken string. To get the next page of results, run the request again and specify the string for the nextToken parameter. Each call to the API is limited to span a duration of seven days. It is likely that the number of records returned is smaller than the specified limit. In such cases, you can make another call, using the nextToken.
|
|
468
468
|
*/
|
|
469
469
|
getResourceConfigHistory(params: ConfigService.Types.GetResourceConfigHistoryRequest, callback?: (err: AWSError, data: ConfigService.Types.GetResourceConfigHistoryResponse) => void): Request<ConfigService.Types.GetResourceConfigHistoryResponse, AWSError>;
|
|
470
470
|
/**
|
|
471
|
-
* Returns a list of
|
|
471
|
+
* Returns a list of ConfigurationItems for the specified resource. The list contains details about each state of the resource during the specified time interval. If you specified a retention period to retain your ConfigurationItems between a minimum of 30 days and a maximum of 7 years (2557 days), Config returns the ConfigurationItems for the specified retention period. The response is paginated. By default, Config returns a limit of 10 configuration items per page. You can customize this number with the limit parameter. The response includes a nextToken string. To get the next page of results, run the request again and specify the string for the nextToken parameter. Each call to the API is limited to span a duration of seven days. It is likely that the number of records returned is smaller than the specified limit. In such cases, you can make another call, using the nextToken.
|
|
472
472
|
*/
|
|
473
473
|
getResourceConfigHistory(callback?: (err: AWSError, data: ConfigService.Types.GetResourceConfigHistoryResponse) => void): Request<ConfigService.Types.GetResourceConfigHistoryResponse, AWSError>;
|
|
474
474
|
/**
|
|
@@ -488,27 +488,27 @@ declare class ConfigService extends Service {
|
|
|
488
488
|
*/
|
|
489
489
|
listAggregateDiscoveredResources(callback?: (err: AWSError, data: ConfigService.Types.ListAggregateDiscoveredResourcesResponse) => void): Request<ConfigService.Types.ListAggregateDiscoveredResourcesResponse, AWSError>;
|
|
490
490
|
/**
|
|
491
|
-
* Accepts a resource type and returns a list of resource identifiers for the resources of that type. A resource identifier includes the resource type, ID, and (if available) the custom resource name. The results consist of resources that
|
|
491
|
+
* Accepts a resource type and returns a list of resource identifiers for the resources of that type. A resource identifier includes the resource type, ID, and (if available) the custom resource name. The results consist of resources that Config has discovered, including those that Config is not currently recording. You can narrow the results to include only resources that have specific resource IDs or a resource name. You can specify either resource IDs or a resource name, but not both, in the same request. The response is paginated. By default, Config lists 100 resource identifiers on each page. You can customize this number with the limit parameter. The response includes a nextToken string. To get the next page of results, run the request again and specify the string for the nextToken parameter.
|
|
492
492
|
*/
|
|
493
493
|
listDiscoveredResources(params: ConfigService.Types.ListDiscoveredResourcesRequest, callback?: (err: AWSError, data: ConfigService.Types.ListDiscoveredResourcesResponse) => void): Request<ConfigService.Types.ListDiscoveredResourcesResponse, AWSError>;
|
|
494
494
|
/**
|
|
495
|
-
* Accepts a resource type and returns a list of resource identifiers for the resources of that type. A resource identifier includes the resource type, ID, and (if available) the custom resource name. The results consist of resources that
|
|
495
|
+
* Accepts a resource type and returns a list of resource identifiers for the resources of that type. A resource identifier includes the resource type, ID, and (if available) the custom resource name. The results consist of resources that Config has discovered, including those that Config is not currently recording. You can narrow the results to include only resources that have specific resource IDs or a resource name. You can specify either resource IDs or a resource name, but not both, in the same request. The response is paginated. By default, Config lists 100 resource identifiers on each page. You can customize this number with the limit parameter. The response includes a nextToken string. To get the next page of results, run the request again and specify the string for the nextToken parameter.
|
|
496
496
|
*/
|
|
497
497
|
listDiscoveredResources(callback?: (err: AWSError, data: ConfigService.Types.ListDiscoveredResourcesResponse) => void): Request<ConfigService.Types.ListDiscoveredResourcesResponse, AWSError>;
|
|
498
498
|
/**
|
|
499
|
-
* Lists the stored queries for a single
|
|
499
|
+
* Lists the stored queries for a single Amazon Web Services account and a single Amazon Web Services Region. The default is 100.
|
|
500
500
|
*/
|
|
501
501
|
listStoredQueries(params: ConfigService.Types.ListStoredQueriesRequest, callback?: (err: AWSError, data: ConfigService.Types.ListStoredQueriesResponse) => void): Request<ConfigService.Types.ListStoredQueriesResponse, AWSError>;
|
|
502
502
|
/**
|
|
503
|
-
* Lists the stored queries for a single
|
|
503
|
+
* Lists the stored queries for a single Amazon Web Services account and a single Amazon Web Services Region. The default is 100.
|
|
504
504
|
*/
|
|
505
505
|
listStoredQueries(callback?: (err: AWSError, data: ConfigService.Types.ListStoredQueriesResponse) => void): Request<ConfigService.Types.ListStoredQueriesResponse, AWSError>;
|
|
506
506
|
/**
|
|
507
|
-
* List the tags for
|
|
507
|
+
* List the tags for Config resource.
|
|
508
508
|
*/
|
|
509
509
|
listTagsForResource(params: ConfigService.Types.ListTagsForResourceRequest, callback?: (err: AWSError, data: ConfigService.Types.ListTagsForResourceResponse) => void): Request<ConfigService.Types.ListTagsForResourceResponse, AWSError>;
|
|
510
510
|
/**
|
|
511
|
-
* List the tags for
|
|
511
|
+
* List the tags for Config resource.
|
|
512
512
|
*/
|
|
513
513
|
listTagsForResource(callback?: (err: AWSError, data: ConfigService.Types.ListTagsForResourceResponse) => void): Request<ConfigService.Types.ListTagsForResourceResponse, AWSError>;
|
|
514
514
|
/**
|
|
@@ -520,19 +520,19 @@ declare class ConfigService extends Service {
|
|
|
520
520
|
*/
|
|
521
521
|
putAggregationAuthorization(callback?: (err: AWSError, data: ConfigService.Types.PutAggregationAuthorizationResponse) => void): Request<ConfigService.Types.PutAggregationAuthorizationResponse, AWSError>;
|
|
522
522
|
/**
|
|
523
|
-
* Adds or updates an
|
|
523
|
+
* Adds or updates an Config rule for evaluating whether your Amazon Web Services resources comply with your desired configurations. You can use this action for custom Config rules and Config managed rules. A custom Config rule is a rule that you develop and maintain. An Config managed rule is a customizable, predefined rule that Config provides. If you are adding a new custom Config rule, you must first create the Lambda function that the rule invokes to evaluate your resources. When you use the PutConfigRule action to add the rule to Config, you must specify the Amazon Resource Name (ARN) that Lambda assigns to the function. Specify the ARN for the SourceIdentifier key. This key is part of the Source object, which is part of the ConfigRule object. If you are adding an Config managed rule, specify the rule's identifier for the SourceIdentifier key. To reference Config managed rule identifiers, see About Config managed rules. For any new rule that you add, specify the ConfigRuleName in the ConfigRule object. Do not specify the ConfigRuleArn or the ConfigRuleId. These values are generated by Config for new rules. If you are updating a rule that you added previously, you can specify the rule by ConfigRuleName, ConfigRuleId, or ConfigRuleArn in the ConfigRule data type that you use in this request. The maximum number of rules that Config supports is 150. For information about requesting a rule limit increase, see Config Limits in the Amazon Web Services General Reference Guide. For more information about developing and using Config rules, see Evaluating Amazon Web Services resource Configurations with Config in the Config Developer Guide.
|
|
524
524
|
*/
|
|
525
525
|
putConfigRule(params: ConfigService.Types.PutConfigRuleRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
526
526
|
/**
|
|
527
|
-
* Adds or updates an
|
|
527
|
+
* Adds or updates an Config rule for evaluating whether your Amazon Web Services resources comply with your desired configurations. You can use this action for custom Config rules and Config managed rules. A custom Config rule is a rule that you develop and maintain. An Config managed rule is a customizable, predefined rule that Config provides. If you are adding a new custom Config rule, you must first create the Lambda function that the rule invokes to evaluate your resources. When you use the PutConfigRule action to add the rule to Config, you must specify the Amazon Resource Name (ARN) that Lambda assigns to the function. Specify the ARN for the SourceIdentifier key. This key is part of the Source object, which is part of the ConfigRule object. If you are adding an Config managed rule, specify the rule's identifier for the SourceIdentifier key. To reference Config managed rule identifiers, see About Config managed rules. For any new rule that you add, specify the ConfigRuleName in the ConfigRule object. Do not specify the ConfigRuleArn or the ConfigRuleId. These values are generated by Config for new rules. If you are updating a rule that you added previously, you can specify the rule by ConfigRuleName, ConfigRuleId, or ConfigRuleArn in the ConfigRule data type that you use in this request. The maximum number of rules that Config supports is 150. For information about requesting a rule limit increase, see Config Limits in the Amazon Web Services General Reference Guide. For more information about developing and using Config rules, see Evaluating Amazon Web Services resource Configurations with Config in the Config Developer Guide.
|
|
528
528
|
*/
|
|
529
529
|
putConfigRule(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
530
530
|
/**
|
|
531
|
-
* Creates and updates the configuration aggregator with the selected source accounts and regions. The source account can be individual account(s) or an organization. accountIds that are passed will be replaced with existing accounts. If you want to add additional accounts into the aggregator, call DescribeAggregator to get the previous accounts and then append new ones.
|
|
531
|
+
* Creates and updates the configuration aggregator with the selected source accounts and regions. The source account can be individual account(s) or an organization. accountIds that are passed will be replaced with existing accounts. If you want to add additional accounts into the aggregator, call DescribeAggregator to get the previous accounts and then append new ones. Config should be enabled in source accounts and regions you want to aggregate. If your source type is an organization, you must be signed in to the management account or a registered delegated administrator and all the features must be enabled in your organization. If the caller is a management account, Config calls EnableAwsServiceAccess API to enable integration between Config and Organizations. If the caller is a registered delegated administrator, Config calls ListDelegatedAdministrators API to verify whether the caller is a valid delegated administrator. To register a delegated administrator, see Register a Delegated Administrator in the Config developer guide.
|
|
532
532
|
*/
|
|
533
533
|
putConfigurationAggregator(params: ConfigService.Types.PutConfigurationAggregatorRequest, callback?: (err: AWSError, data: ConfigService.Types.PutConfigurationAggregatorResponse) => void): Request<ConfigService.Types.PutConfigurationAggregatorResponse, AWSError>;
|
|
534
534
|
/**
|
|
535
|
-
* Creates and updates the configuration aggregator with the selected source accounts and regions. The source account can be individual account(s) or an organization. accountIds that are passed will be replaced with existing accounts. If you want to add additional accounts into the aggregator, call DescribeAggregator to get the previous accounts and then append new ones.
|
|
535
|
+
* Creates and updates the configuration aggregator with the selected source accounts and regions. The source account can be individual account(s) or an organization. accountIds that are passed will be replaced with existing accounts. If you want to add additional accounts into the aggregator, call DescribeAggregator to get the previous accounts and then append new ones. Config should be enabled in source accounts and regions you want to aggregate. If your source type is an organization, you must be signed in to the management account or a registered delegated administrator and all the features must be enabled in your organization. If the caller is a management account, Config calls EnableAwsServiceAccess API to enable integration between Config and Organizations. If the caller is a registered delegated administrator, Config calls ListDelegatedAdministrators API to verify whether the caller is a valid delegated administrator. To register a delegated administrator, see Register a Delegated Administrator in the Config developer guide.
|
|
536
536
|
*/
|
|
537
537
|
putConfigurationAggregator(callback?: (err: AWSError, data: ConfigService.Types.PutConfigurationAggregatorResponse) => void): Request<ConfigService.Types.PutConfigurationAggregatorResponse, AWSError>;
|
|
538
538
|
/**
|
|
@@ -544,11 +544,11 @@ declare class ConfigService extends Service {
|
|
|
544
544
|
*/
|
|
545
545
|
putConfigurationRecorder(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
546
546
|
/**
|
|
547
|
-
* Creates or updates a conformance pack. A conformance pack is a collection of
|
|
547
|
+
* Creates or updates a conformance pack. A conformance pack is a collection of Config rules that can be easily deployed in an account and a region and across Amazon Web Services Organization. This API creates a service linked role AWSServiceRoleForConfigConforms in your account. The service linked role is created only when the role does not exist in your account. You must specify either the TemplateS3Uri or the TemplateBody parameter, but not both. If you provide both Config uses the TemplateS3Uri parameter and ignores the TemplateBody parameter.
|
|
548
548
|
*/
|
|
549
549
|
putConformancePack(params: ConfigService.Types.PutConformancePackRequest, callback?: (err: AWSError, data: ConfigService.Types.PutConformancePackResponse) => void): Request<ConfigService.Types.PutConformancePackResponse, AWSError>;
|
|
550
550
|
/**
|
|
551
|
-
* Creates or updates a conformance pack. A conformance pack is a collection of
|
|
551
|
+
* Creates or updates a conformance pack. A conformance pack is a collection of Config rules that can be easily deployed in an account and a region and across Amazon Web Services Organization. This API creates a service linked role AWSServiceRoleForConfigConforms in your account. The service linked role is created only when the role does not exist in your account. You must specify either the TemplateS3Uri or the TemplateBody parameter, but not both. If you provide both Config uses the TemplateS3Uri parameter and ignores the TemplateBody parameter.
|
|
552
552
|
*/
|
|
553
553
|
putConformancePack(callback?: (err: AWSError, data: ConfigService.Types.PutConformancePackResponse) => void): Request<ConfigService.Types.PutConformancePackResponse, AWSError>;
|
|
554
554
|
/**
|
|
@@ -560,123 +560,123 @@ declare class ConfigService extends Service {
|
|
|
560
560
|
*/
|
|
561
561
|
putDeliveryChannel(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
562
562
|
/**
|
|
563
|
-
* Used by an
|
|
563
|
+
* Used by an Lambda function to deliver evaluation results to Config. This action is required in every Lambda function that is invoked by an Config rule.
|
|
564
564
|
*/
|
|
565
565
|
putEvaluations(params: ConfigService.Types.PutEvaluationsRequest, callback?: (err: AWSError, data: ConfigService.Types.PutEvaluationsResponse) => void): Request<ConfigService.Types.PutEvaluationsResponse, AWSError>;
|
|
566
566
|
/**
|
|
567
|
-
* Used by an
|
|
567
|
+
* Used by an Lambda function to deliver evaluation results to Config. This action is required in every Lambda function that is invoked by an Config rule.
|
|
568
568
|
*/
|
|
569
569
|
putEvaluations(callback?: (err: AWSError, data: ConfigService.Types.PutEvaluationsResponse) => void): Request<ConfigService.Types.PutEvaluationsResponse, AWSError>;
|
|
570
570
|
/**
|
|
571
|
-
* Add or updates the evaluations for process checks. This API checks if the rule is a process check when the name of the
|
|
571
|
+
* Add or updates the evaluations for process checks. This API checks if the rule is a process check when the name of the Config rule is provided.
|
|
572
572
|
*/
|
|
573
573
|
putExternalEvaluation(params: ConfigService.Types.PutExternalEvaluationRequest, callback?: (err: AWSError, data: ConfigService.Types.PutExternalEvaluationResponse) => void): Request<ConfigService.Types.PutExternalEvaluationResponse, AWSError>;
|
|
574
574
|
/**
|
|
575
|
-
* Add or updates the evaluations for process checks. This API checks if the rule is a process check when the name of the
|
|
575
|
+
* Add or updates the evaluations for process checks. This API checks if the rule is a process check when the name of the Config rule is provided.
|
|
576
576
|
*/
|
|
577
577
|
putExternalEvaluation(callback?: (err: AWSError, data: ConfigService.Types.PutExternalEvaluationResponse) => void): Request<ConfigService.Types.PutExternalEvaluationResponse, AWSError>;
|
|
578
578
|
/**
|
|
579
|
-
* Adds or updates organization config rule for your entire organization evaluating whether your
|
|
579
|
+
* Adds or updates organization config rule for your entire organization evaluating whether your Amazon Web Services resources comply with your desired configurations. Only a master account and a delegated administrator can create or update an organization config rule. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added. This API enables organization service access through the EnableAWSServiceAccess action and creates a service linked role AWSServiceRoleForConfigMultiAccountSetup in the master or delegated administrator account of your organization. The service linked role is created only when the role does not exist in the caller account. Config verifies the existence of role with GetRole action. To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization register-delegated-administrator for config-multiaccountsetup.amazonaws.com. You can use this action to create both custom Config rules and Config managed rules. If you are adding a new custom Config rule, you must first create Lambda function in the master account or a delegated administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed-account that can be assumed by the Lambda function. When you use the PutOrganizationConfigRule action to add the rule to Config, you must specify the Amazon Resource Name (ARN) that Lambda assigns to the function. If you are adding an Config managed rule, specify the rule's identifier for the RuleIdentifier key. The maximum number of organization config rules that Config supports is 150 and 3 delegated administrator per organization. Prerequisite: Ensure you call EnableAllFeatures API to enable all features in an organization. Specify either OrganizationCustomRuleMetadata or OrganizationManagedRuleMetadata.
|
|
580
580
|
*/
|
|
581
581
|
putOrganizationConfigRule(params: ConfigService.Types.PutOrganizationConfigRuleRequest, callback?: (err: AWSError, data: ConfigService.Types.PutOrganizationConfigRuleResponse) => void): Request<ConfigService.Types.PutOrganizationConfigRuleResponse, AWSError>;
|
|
582
582
|
/**
|
|
583
|
-
* Adds or updates organization config rule for your entire organization evaluating whether your
|
|
583
|
+
* Adds or updates organization config rule for your entire organization evaluating whether your Amazon Web Services resources comply with your desired configurations. Only a master account and a delegated administrator can create or update an organization config rule. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added. This API enables organization service access through the EnableAWSServiceAccess action and creates a service linked role AWSServiceRoleForConfigMultiAccountSetup in the master or delegated administrator account of your organization. The service linked role is created only when the role does not exist in the caller account. Config verifies the existence of role with GetRole action. To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization register-delegated-administrator for config-multiaccountsetup.amazonaws.com. You can use this action to create both custom Config rules and Config managed rules. If you are adding a new custom Config rule, you must first create Lambda function in the master account or a delegated administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed-account that can be assumed by the Lambda function. When you use the PutOrganizationConfigRule action to add the rule to Config, you must specify the Amazon Resource Name (ARN) that Lambda assigns to the function. If you are adding an Config managed rule, specify the rule's identifier for the RuleIdentifier key. The maximum number of organization config rules that Config supports is 150 and 3 delegated administrator per organization. Prerequisite: Ensure you call EnableAllFeatures API to enable all features in an organization. Specify either OrganizationCustomRuleMetadata or OrganizationManagedRuleMetadata.
|
|
584
584
|
*/
|
|
585
585
|
putOrganizationConfigRule(callback?: (err: AWSError, data: ConfigService.Types.PutOrganizationConfigRuleResponse) => void): Request<ConfigService.Types.PutOrganizationConfigRuleResponse, AWSError>;
|
|
586
586
|
/**
|
|
587
|
-
* Deploys conformance packs across member accounts in an
|
|
587
|
+
* Deploys conformance packs across member accounts in an Amazon Web Services Organization. Only a master account and a delegated administrator can call this API. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added. This API enables organization service access for config-multiaccountsetup.amazonaws.com through the EnableAWSServiceAccess action and creates a service linked role AWSServiceRoleForConfigMultiAccountSetup in the master or delegated administrator account of your organization. The service linked role is created only when the role does not exist in the caller account. To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization register-delegate-admin for config-multiaccountsetup.amazonaws.com. Prerequisite: Ensure you call EnableAllFeatures API to enable all features in an organization. You must specify either the TemplateS3Uri or the TemplateBody parameter, but not both. If you provide both Config uses the TemplateS3Uri parameter and ignores the TemplateBody parameter. Config sets the state of a conformance pack to CREATE_IN_PROGRESS and UPDATE_IN_PROGRESS until the conformance pack is created or updated. You cannot update a conformance pack while it is in this state. You can create 50 conformance packs with 25 Config rules in each pack and 3 delegated administrator per organization.
|
|
588
588
|
*/
|
|
589
589
|
putOrganizationConformancePack(params: ConfigService.Types.PutOrganizationConformancePackRequest, callback?: (err: AWSError, data: ConfigService.Types.PutOrganizationConformancePackResponse) => void): Request<ConfigService.Types.PutOrganizationConformancePackResponse, AWSError>;
|
|
590
590
|
/**
|
|
591
|
-
* Deploys conformance packs across member accounts in an
|
|
591
|
+
* Deploys conformance packs across member accounts in an Amazon Web Services Organization. Only a master account and a delegated administrator can call this API. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added. This API enables organization service access for config-multiaccountsetup.amazonaws.com through the EnableAWSServiceAccess action and creates a service linked role AWSServiceRoleForConfigMultiAccountSetup in the master or delegated administrator account of your organization. The service linked role is created only when the role does not exist in the caller account. To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization register-delegate-admin for config-multiaccountsetup.amazonaws.com. Prerequisite: Ensure you call EnableAllFeatures API to enable all features in an organization. You must specify either the TemplateS3Uri or the TemplateBody parameter, but not both. If you provide both Config uses the TemplateS3Uri parameter and ignores the TemplateBody parameter. Config sets the state of a conformance pack to CREATE_IN_PROGRESS and UPDATE_IN_PROGRESS until the conformance pack is created or updated. You cannot update a conformance pack while it is in this state. You can create 50 conformance packs with 25 Config rules in each pack and 3 delegated administrator per organization.
|
|
592
592
|
*/
|
|
593
593
|
putOrganizationConformancePack(callback?: (err: AWSError, data: ConfigService.Types.PutOrganizationConformancePackResponse) => void): Request<ConfigService.Types.PutOrganizationConformancePackResponse, AWSError>;
|
|
594
594
|
/**
|
|
595
|
-
* Adds or updates the remediation configuration with a specific
|
|
595
|
+
* Adds or updates the remediation configuration with a specific Config rule with the selected target or action. The API creates the RemediationConfiguration object for the Config rule. The Config rule must already exist for you to add a remediation configuration. The target (SSM document) must exist and have permissions to use the target. If you make backward incompatible changes to the SSM document, you must call this again to ensure the remediations can run. This API does not support adding remediation configurations for service-linked Config Rules such as Organization Config rules, the rules deployed by conformance packs, and rules deployed by Amazon Web Services Security Hub.
|
|
596
596
|
*/
|
|
597
597
|
putRemediationConfigurations(params: ConfigService.Types.PutRemediationConfigurationsRequest, callback?: (err: AWSError, data: ConfigService.Types.PutRemediationConfigurationsResponse) => void): Request<ConfigService.Types.PutRemediationConfigurationsResponse, AWSError>;
|
|
598
598
|
/**
|
|
599
|
-
* Adds or updates the remediation configuration with a specific
|
|
599
|
+
* Adds or updates the remediation configuration with a specific Config rule with the selected target or action. The API creates the RemediationConfiguration object for the Config rule. The Config rule must already exist for you to add a remediation configuration. The target (SSM document) must exist and have permissions to use the target. If you make backward incompatible changes to the SSM document, you must call this again to ensure the remediations can run. This API does not support adding remediation configurations for service-linked Config Rules such as Organization Config rules, the rules deployed by conformance packs, and rules deployed by Amazon Web Services Security Hub.
|
|
600
600
|
*/
|
|
601
601
|
putRemediationConfigurations(callback?: (err: AWSError, data: ConfigService.Types.PutRemediationConfigurationsResponse) => void): Request<ConfigService.Types.PutRemediationConfigurationsResponse, AWSError>;
|
|
602
602
|
/**
|
|
603
|
-
* A remediation exception is when a specific resource is no longer considered for auto-remediation. This API adds a new exception or updates an existing exception for a specific resource with a specific
|
|
603
|
+
* A remediation exception is when a specific resource is no longer considered for auto-remediation. This API adds a new exception or updates an existing exception for a specific resource with a specific Config rule. Config generates a remediation exception when a problem occurs executing a remediation action to a specific resource. Remediation exceptions blocks auto-remediation until the exception is cleared.
|
|
604
604
|
*/
|
|
605
605
|
putRemediationExceptions(params: ConfigService.Types.PutRemediationExceptionsRequest, callback?: (err: AWSError, data: ConfigService.Types.PutRemediationExceptionsResponse) => void): Request<ConfigService.Types.PutRemediationExceptionsResponse, AWSError>;
|
|
606
606
|
/**
|
|
607
|
-
* A remediation exception is when a specific resource is no longer considered for auto-remediation. This API adds a new exception or updates an existing exception for a specific resource with a specific
|
|
607
|
+
* A remediation exception is when a specific resource is no longer considered for auto-remediation. This API adds a new exception or updates an existing exception for a specific resource with a specific Config rule. Config generates a remediation exception when a problem occurs executing a remediation action to a specific resource. Remediation exceptions blocks auto-remediation until the exception is cleared.
|
|
608
608
|
*/
|
|
609
609
|
putRemediationExceptions(callback?: (err: AWSError, data: ConfigService.Types.PutRemediationExceptionsResponse) => void): Request<ConfigService.Types.PutRemediationExceptionsResponse, AWSError>;
|
|
610
610
|
/**
|
|
611
|
-
* Records the configuration state for the resource provided in the request. The configuration state of a resource is represented in
|
|
611
|
+
* Records the configuration state for the resource provided in the request. The configuration state of a resource is represented in Config as Configuration Items. Once this API records the configuration item, you can retrieve the list of configuration items for the custom resource type using existing Config APIs. The custom resource type must be registered with CloudFormation. This API accepts the configuration item registered with CloudFormation. When you call this API, Config only stores configuration state of the resource provided in the request. This API does not change or remediate the configuration of the resource. Write-only schema properites are not recorded as part of the published configuration item.
|
|
612
612
|
*/
|
|
613
613
|
putResourceConfig(params: ConfigService.Types.PutResourceConfigRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
614
614
|
/**
|
|
615
|
-
* Records the configuration state for the resource provided in the request. The configuration state of a resource is represented in
|
|
615
|
+
* Records the configuration state for the resource provided in the request. The configuration state of a resource is represented in Config as Configuration Items. Once this API records the configuration item, you can retrieve the list of configuration items for the custom resource type using existing Config APIs. The custom resource type must be registered with CloudFormation. This API accepts the configuration item registered with CloudFormation. When you call this API, Config only stores configuration state of the resource provided in the request. This API does not change or remediate the configuration of the resource. Write-only schema properites are not recorded as part of the published configuration item.
|
|
616
616
|
*/
|
|
617
617
|
putResourceConfig(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
618
618
|
/**
|
|
619
|
-
* Creates and updates the retention configuration with details about retention period (number of days) that
|
|
619
|
+
* Creates and updates the retention configuration with details about retention period (number of days) that Config stores your historical information. The API creates the RetentionConfiguration object and names the object as default. When you have a RetentionConfiguration object named default, calling the API modifies the default object. Currently, Config supports only one retention configuration per region in your account.
|
|
620
620
|
*/
|
|
621
621
|
putRetentionConfiguration(params: ConfigService.Types.PutRetentionConfigurationRequest, callback?: (err: AWSError, data: ConfigService.Types.PutRetentionConfigurationResponse) => void): Request<ConfigService.Types.PutRetentionConfigurationResponse, AWSError>;
|
|
622
622
|
/**
|
|
623
|
-
* Creates and updates the retention configuration with details about retention period (number of days) that
|
|
623
|
+
* Creates and updates the retention configuration with details about retention period (number of days) that Config stores your historical information. The API creates the RetentionConfiguration object and names the object as default. When you have a RetentionConfiguration object named default, calling the API modifies the default object. Currently, Config supports only one retention configuration per region in your account.
|
|
624
624
|
*/
|
|
625
625
|
putRetentionConfiguration(callback?: (err: AWSError, data: ConfigService.Types.PutRetentionConfigurationResponse) => void): Request<ConfigService.Types.PutRetentionConfigurationResponse, AWSError>;
|
|
626
626
|
/**
|
|
627
|
-
* Saves a new query or updates an existing saved query. The QueryName must be unique for a single
|
|
627
|
+
* Saves a new query or updates an existing saved query. The QueryName must be unique for a single Amazon Web Services account and a single Amazon Web Services Region. You can create upto 300 queries in a single Amazon Web Services account and a single Amazon Web Services Region.
|
|
628
628
|
*/
|
|
629
629
|
putStoredQuery(params: ConfigService.Types.PutStoredQueryRequest, callback?: (err: AWSError, data: ConfigService.Types.PutStoredQueryResponse) => void): Request<ConfigService.Types.PutStoredQueryResponse, AWSError>;
|
|
630
630
|
/**
|
|
631
|
-
* Saves a new query or updates an existing saved query. The QueryName must be unique for a single
|
|
631
|
+
* Saves a new query or updates an existing saved query. The QueryName must be unique for a single Amazon Web Services account and a single Amazon Web Services Region. You can create upto 300 queries in a single Amazon Web Services account and a single Amazon Web Services Region.
|
|
632
632
|
*/
|
|
633
633
|
putStoredQuery(callback?: (err: AWSError, data: ConfigService.Types.PutStoredQueryResponse) => void): Request<ConfigService.Types.PutStoredQueryResponse, AWSError>;
|
|
634
634
|
/**
|
|
635
|
-
* Accepts a structured query language (SQL) SELECT command and an aggregator to query configuration state of
|
|
635
|
+
* Accepts a structured query language (SQL) SELECT command and an aggregator to query configuration state of Amazon Web Services resources across multiple accounts and regions, performs the corresponding search, and returns resource configurations matching the properties. For more information about query components, see the Query Components section in the Config Developer Guide. If you run an aggregation query (i.e., using GROUP BY or using aggregate functions such as COUNT; e.g., SELECT resourceId, COUNT(*) WHERE resourceType = 'AWS::IAM::Role' GROUP BY resourceId) and do not specify the MaxResults or the Limit query parameters, the default page size is set to 500. If you run a non-aggregation query (i.e., not using GROUP BY or aggregate function; e.g., SELECT * WHERE resourceType = 'AWS::IAM::Role') and do not specify the MaxResults or the Limit query parameters, the default page size is set to 25.
|
|
636
636
|
*/
|
|
637
637
|
selectAggregateResourceConfig(params: ConfigService.Types.SelectAggregateResourceConfigRequest, callback?: (err: AWSError, data: ConfigService.Types.SelectAggregateResourceConfigResponse) => void): Request<ConfigService.Types.SelectAggregateResourceConfigResponse, AWSError>;
|
|
638
638
|
/**
|
|
639
|
-
* Accepts a structured query language (SQL) SELECT command and an aggregator to query configuration state of
|
|
639
|
+
* Accepts a structured query language (SQL) SELECT command and an aggregator to query configuration state of Amazon Web Services resources across multiple accounts and regions, performs the corresponding search, and returns resource configurations matching the properties. For more information about query components, see the Query Components section in the Config Developer Guide. If you run an aggregation query (i.e., using GROUP BY or using aggregate functions such as COUNT; e.g., SELECT resourceId, COUNT(*) WHERE resourceType = 'AWS::IAM::Role' GROUP BY resourceId) and do not specify the MaxResults or the Limit query parameters, the default page size is set to 500. If you run a non-aggregation query (i.e., not using GROUP BY or aggregate function; e.g., SELECT * WHERE resourceType = 'AWS::IAM::Role') and do not specify the MaxResults or the Limit query parameters, the default page size is set to 25.
|
|
640
640
|
*/
|
|
641
641
|
selectAggregateResourceConfig(callback?: (err: AWSError, data: ConfigService.Types.SelectAggregateResourceConfigResponse) => void): Request<ConfigService.Types.SelectAggregateResourceConfigResponse, AWSError>;
|
|
642
642
|
/**
|
|
643
|
-
* Accepts a structured query language (SQL) SELECT command, performs the corresponding search, and returns resource configurations matching the properties. For more information about query components, see the Query Components section in the
|
|
643
|
+
* Accepts a structured query language (SQL) SELECT command, performs the corresponding search, and returns resource configurations matching the properties. For more information about query components, see the Query Components section in the Config Developer Guide.
|
|
644
644
|
*/
|
|
645
645
|
selectResourceConfig(params: ConfigService.Types.SelectResourceConfigRequest, callback?: (err: AWSError, data: ConfigService.Types.SelectResourceConfigResponse) => void): Request<ConfigService.Types.SelectResourceConfigResponse, AWSError>;
|
|
646
646
|
/**
|
|
647
|
-
* Accepts a structured query language (SQL) SELECT command, performs the corresponding search, and returns resource configurations matching the properties. For more information about query components, see the Query Components section in the
|
|
647
|
+
* Accepts a structured query language (SQL) SELECT command, performs the corresponding search, and returns resource configurations matching the properties. For more information about query components, see the Query Components section in the Config Developer Guide.
|
|
648
648
|
*/
|
|
649
649
|
selectResourceConfig(callback?: (err: AWSError, data: ConfigService.Types.SelectResourceConfigResponse) => void): Request<ConfigService.Types.SelectResourceConfigResponse, AWSError>;
|
|
650
650
|
/**
|
|
651
|
-
* Runs an on-demand evaluation for the specified
|
|
651
|
+
* Runs an on-demand evaluation for the specified Config rules against the last known configuration state of the resources. Use StartConfigRulesEvaluation when you want to test that a rule you updated is working as expected. StartConfigRulesEvaluation does not re-record the latest configuration state for your resources. It re-runs an evaluation against the last known state of your resources. You can specify up to 25 Config rules per request. An existing StartConfigRulesEvaluation call for the specified rules must complete before you can call the API again. If you chose to have Config stream to an Amazon SNS topic, you will receive a ConfigRuleEvaluationStarted notification when the evaluation starts. You don't need to call the StartConfigRulesEvaluation API to run an evaluation for a new rule. When you create a rule, Config evaluates your resources against the rule automatically. The StartConfigRulesEvaluation API is useful if you want to run on-demand evaluations, such as the following example: You have a custom rule that evaluates your IAM resources every 24 hours. You update your Lambda function to add additional conditions to your rule. Instead of waiting for the next periodic evaluation, you call the StartConfigRulesEvaluation API. Config invokes your Lambda function and evaluates your IAM resources. Your custom rule will still run periodic evaluations every 24 hours.
|
|
652
652
|
*/
|
|
653
653
|
startConfigRulesEvaluation(params: ConfigService.Types.StartConfigRulesEvaluationRequest, callback?: (err: AWSError, data: ConfigService.Types.StartConfigRulesEvaluationResponse) => void): Request<ConfigService.Types.StartConfigRulesEvaluationResponse, AWSError>;
|
|
654
654
|
/**
|
|
655
|
-
* Runs an on-demand evaluation for the specified
|
|
655
|
+
* Runs an on-demand evaluation for the specified Config rules against the last known configuration state of the resources. Use StartConfigRulesEvaluation when you want to test that a rule you updated is working as expected. StartConfigRulesEvaluation does not re-record the latest configuration state for your resources. It re-runs an evaluation against the last known state of your resources. You can specify up to 25 Config rules per request. An existing StartConfigRulesEvaluation call for the specified rules must complete before you can call the API again. If you chose to have Config stream to an Amazon SNS topic, you will receive a ConfigRuleEvaluationStarted notification when the evaluation starts. You don't need to call the StartConfigRulesEvaluation API to run an evaluation for a new rule. When you create a rule, Config evaluates your resources against the rule automatically. The StartConfigRulesEvaluation API is useful if you want to run on-demand evaluations, such as the following example: You have a custom rule that evaluates your IAM resources every 24 hours. You update your Lambda function to add additional conditions to your rule. Instead of waiting for the next periodic evaluation, you call the StartConfigRulesEvaluation API. Config invokes your Lambda function and evaluates your IAM resources. Your custom rule will still run periodic evaluations every 24 hours.
|
|
656
656
|
*/
|
|
657
657
|
startConfigRulesEvaluation(callback?: (err: AWSError, data: ConfigService.Types.StartConfigRulesEvaluationResponse) => void): Request<ConfigService.Types.StartConfigRulesEvaluationResponse, AWSError>;
|
|
658
658
|
/**
|
|
659
|
-
* Starts recording configurations of the
|
|
659
|
+
* Starts recording configurations of the Amazon Web Services resources you have selected to record in your Amazon Web Services account. You must have created at least one delivery channel to successfully start the configuration recorder.
|
|
660
660
|
*/
|
|
661
661
|
startConfigurationRecorder(params: ConfigService.Types.StartConfigurationRecorderRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
662
662
|
/**
|
|
663
|
-
* Starts recording configurations of the
|
|
663
|
+
* Starts recording configurations of the Amazon Web Services resources you have selected to record in your Amazon Web Services account. You must have created at least one delivery channel to successfully start the configuration recorder.
|
|
664
664
|
*/
|
|
665
665
|
startConfigurationRecorder(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
666
666
|
/**
|
|
667
|
-
* Runs an on-demand remediation for the specified
|
|
667
|
+
* Runs an on-demand remediation for the specified Config rules against the last known remediation configuration. It runs an execution against the current state of your resources. Remediation execution is asynchronous. You can specify up to 100 resource keys per request. An existing StartRemediationExecution call for the specified resource keys must complete before you can call the API again.
|
|
668
668
|
*/
|
|
669
669
|
startRemediationExecution(params: ConfigService.Types.StartRemediationExecutionRequest, callback?: (err: AWSError, data: ConfigService.Types.StartRemediationExecutionResponse) => void): Request<ConfigService.Types.StartRemediationExecutionResponse, AWSError>;
|
|
670
670
|
/**
|
|
671
|
-
* Runs an on-demand remediation for the specified
|
|
671
|
+
* Runs an on-demand remediation for the specified Config rules against the last known remediation configuration. It runs an execution against the current state of your resources. Remediation execution is asynchronous. You can specify up to 100 resource keys per request. An existing StartRemediationExecution call for the specified resource keys must complete before you can call the API again.
|
|
672
672
|
*/
|
|
673
673
|
startRemediationExecution(callback?: (err: AWSError, data: ConfigService.Types.StartRemediationExecutionResponse) => void): Request<ConfigService.Types.StartRemediationExecutionResponse, AWSError>;
|
|
674
674
|
/**
|
|
675
|
-
* Stops recording configurations of the
|
|
675
|
+
* Stops recording configurations of the Amazon Web Services resources you have selected to record in your Amazon Web Services account.
|
|
676
676
|
*/
|
|
677
677
|
stopConfigurationRecorder(params: ConfigService.Types.StopConfigurationRecorderRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
678
678
|
/**
|
|
679
|
-
* Stops recording configurations of the
|
|
679
|
+
* Stops recording configurations of the Amazon Web Services resources you have selected to record in your Amazon Web Services account.
|
|
680
680
|
*/
|
|
681
681
|
stopConfigurationRecorder(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
|
|
682
682
|
/**
|
|
@@ -704,7 +704,7 @@ declare namespace ConfigService {
|
|
|
704
704
|
*/
|
|
705
705
|
AccountIds: AccountAggregationSourceAccountList;
|
|
706
706
|
/**
|
|
707
|
-
* If true, aggregate existing
|
|
707
|
+
* If true, aggregate existing Config regions and future regions.
|
|
708
708
|
*/
|
|
709
709
|
AllAwsRegions?: Boolean;
|
|
710
710
|
/**
|
|
@@ -717,11 +717,11 @@ declare namespace ConfigService {
|
|
|
717
717
|
export type AccountId = string;
|
|
718
718
|
export interface AggregateComplianceByConfigRule {
|
|
719
719
|
/**
|
|
720
|
-
* The name of the
|
|
720
|
+
* The name of the Config rule.
|
|
721
721
|
*/
|
|
722
722
|
ConfigRuleName?: ConfigRuleName;
|
|
723
723
|
/**
|
|
724
|
-
* Indicates whether an
|
|
724
|
+
* Indicates whether an Amazon Web Services resource or Config rule is compliant and provides the number of contributors that affect the compliance.
|
|
725
725
|
*/
|
|
726
726
|
Compliance?: Compliance;
|
|
727
727
|
/**
|
|
@@ -744,11 +744,11 @@ declare namespace ConfigService {
|
|
|
744
744
|
*/
|
|
745
745
|
Compliance?: AggregateConformancePackCompliance;
|
|
746
746
|
/**
|
|
747
|
-
* The 12-digit
|
|
747
|
+
* The 12-digit Amazon Web Services account ID of the source account.
|
|
748
748
|
*/
|
|
749
749
|
AccountId?: AccountId;
|
|
750
750
|
/**
|
|
751
|
-
* The source
|
|
751
|
+
* The source Amazon Web Services Region from where the data is aggregated.
|
|
752
752
|
*/
|
|
753
753
|
AwsRegion?: AwsRegion;
|
|
754
754
|
}
|
|
@@ -759,7 +759,7 @@ declare namespace ConfigService {
|
|
|
759
759
|
*/
|
|
760
760
|
GroupName?: StringWithCharLimit256;
|
|
761
761
|
/**
|
|
762
|
-
* The number of compliant and noncompliant
|
|
762
|
+
* The number of compliant and noncompliant Config rules.
|
|
763
763
|
*/
|
|
764
764
|
ComplianceSummary?: ComplianceSummary;
|
|
765
765
|
}
|
|
@@ -770,11 +770,11 @@ declare namespace ConfigService {
|
|
|
770
770
|
*/
|
|
771
771
|
ComplianceType?: ConformancePackComplianceType;
|
|
772
772
|
/**
|
|
773
|
-
* The number of compliant
|
|
773
|
+
* The number of compliant Config Rules.
|
|
774
774
|
*/
|
|
775
775
|
CompliantRuleCount?: Integer;
|
|
776
776
|
/**
|
|
777
|
-
* The number of noncompliant
|
|
777
|
+
* The number of noncompliant Config Rules.
|
|
778
778
|
*/
|
|
779
779
|
NonCompliantRuleCount?: Integer;
|
|
780
780
|
/**
|
|
@@ -802,11 +802,11 @@ declare namespace ConfigService {
|
|
|
802
802
|
*/
|
|
803
803
|
ComplianceType?: ConformancePackComplianceType;
|
|
804
804
|
/**
|
|
805
|
-
* The 12-digit
|
|
805
|
+
* The 12-digit Amazon Web Services account ID of the source account.
|
|
806
806
|
*/
|
|
807
807
|
AccountId?: AccountId;
|
|
808
808
|
/**
|
|
809
|
-
* The source
|
|
809
|
+
* The source Amazon Web Services Region from where the data is aggregated.
|
|
810
810
|
*/
|
|
811
811
|
AwsRegion?: AwsRegion;
|
|
812
812
|
}
|
|
@@ -816,17 +816,17 @@ declare namespace ConfigService {
|
|
|
816
816
|
*/
|
|
817
817
|
ComplianceSummary?: AggregateConformancePackComplianceCount;
|
|
818
818
|
/**
|
|
819
|
-
* Groups the result based on
|
|
819
|
+
* Groups the result based on Amazon Web Services account ID or Amazon Web Services Region.
|
|
820
820
|
*/
|
|
821
821
|
GroupName?: StringWithCharLimit256;
|
|
822
822
|
}
|
|
823
823
|
export interface AggregateConformancePackComplianceSummaryFilters {
|
|
824
824
|
/**
|
|
825
|
-
* The 12-digit
|
|
825
|
+
* The 12-digit Amazon Web Services account ID of the source account.
|
|
826
826
|
*/
|
|
827
827
|
AccountId?: AccountId;
|
|
828
828
|
/**
|
|
829
|
-
* The source
|
|
829
|
+
* The source Amazon Web Services Region from where the data is aggregated.
|
|
830
830
|
*/
|
|
831
831
|
AwsRegion?: AwsRegion;
|
|
832
832
|
}
|
|
@@ -838,15 +838,15 @@ declare namespace ConfigService {
|
|
|
838
838
|
*/
|
|
839
839
|
EvaluationResultIdentifier?: EvaluationResultIdentifier;
|
|
840
840
|
/**
|
|
841
|
-
* The resource compliance status. For the AggregationEvaluationResult data type,
|
|
841
|
+
* The resource compliance status. For the AggregationEvaluationResult data type, Config supports only the COMPLIANT and NON_COMPLIANT. Config does not support the NOT_APPLICABLE and INSUFFICIENT_DATA value.
|
|
842
842
|
*/
|
|
843
843
|
ComplianceType?: ComplianceType;
|
|
844
844
|
/**
|
|
845
|
-
* The time when
|
|
845
|
+
* The time when Config recorded the aggregate evaluation result.
|
|
846
846
|
*/
|
|
847
847
|
ResultRecordedTime?: _Date;
|
|
848
848
|
/**
|
|
849
|
-
* The time when the
|
|
849
|
+
* The time when the Config rule evaluated the Amazon Web Services resource.
|
|
850
850
|
*/
|
|
851
851
|
ConfigRuleInvokedTime?: _Date;
|
|
852
852
|
/**
|
|
@@ -873,15 +873,15 @@ declare namespace ConfigService {
|
|
|
873
873
|
*/
|
|
874
874
|
SourceRegion: AwsRegion;
|
|
875
875
|
/**
|
|
876
|
-
* The ID of the
|
|
876
|
+
* The ID of the Amazon Web Services resource.
|
|
877
877
|
*/
|
|
878
878
|
ResourceId: ResourceId;
|
|
879
879
|
/**
|
|
880
|
-
* The type of the
|
|
880
|
+
* The type of the Amazon Web Services resource.
|
|
881
881
|
*/
|
|
882
882
|
ResourceType: ResourceType;
|
|
883
883
|
/**
|
|
884
|
-
* The name of the
|
|
884
|
+
* The name of the Amazon Web Services resource.
|
|
885
885
|
*/
|
|
886
886
|
ResourceName?: ResourceName;
|
|
887
887
|
}
|
|
@@ -907,7 +907,7 @@ declare namespace ConfigService {
|
|
|
907
907
|
*/
|
|
908
908
|
LastUpdateTime?: _Date;
|
|
909
909
|
/**
|
|
910
|
-
* The error code that
|
|
910
|
+
* The error code that Config returned when the source account aggregation last failed.
|
|
911
911
|
*/
|
|
912
912
|
LastErrorCode?: String;
|
|
913
913
|
/**
|
|
@@ -952,7 +952,7 @@ declare namespace ConfigService {
|
|
|
952
952
|
*/
|
|
953
953
|
version?: Version;
|
|
954
954
|
/**
|
|
955
|
-
* The 12-digit
|
|
955
|
+
* The 12-digit Amazon Web Services account ID associated with the resource.
|
|
956
956
|
*/
|
|
957
957
|
accountId?: AccountId;
|
|
958
958
|
/**
|
|
@@ -972,7 +972,7 @@ declare namespace ConfigService {
|
|
|
972
972
|
*/
|
|
973
973
|
arn?: ARN;
|
|
974
974
|
/**
|
|
975
|
-
* The type of
|
|
975
|
+
* The type of Amazon Web Services resource.
|
|
976
976
|
*/
|
|
977
977
|
resourceType?: ResourceType;
|
|
978
978
|
/**
|
|
@@ -1000,7 +1000,7 @@ declare namespace ConfigService {
|
|
|
1000
1000
|
*/
|
|
1001
1001
|
configuration?: Configuration;
|
|
1002
1002
|
/**
|
|
1003
|
-
* Configuration attributes that
|
|
1003
|
+
* Configuration attributes that Config returns for certain resource types to supplement the information returned for the configuration parameter.
|
|
1004
1004
|
*/
|
|
1005
1005
|
supplementaryConfiguration?: SupplementaryConfiguration;
|
|
1006
1006
|
}
|
|
@@ -1047,43 +1047,43 @@ declare namespace ConfigService {
|
|
|
1047
1047
|
export type ChronologicalOrder = "Reverse"|"Forward"|string;
|
|
1048
1048
|
export interface Compliance {
|
|
1049
1049
|
/**
|
|
1050
|
-
* Indicates whether an
|
|
1050
|
+
* Indicates whether an Amazon Web Services resource or Config rule is compliant. A resource is compliant if it complies with all of the Config rules that evaluate it. A resource is noncompliant if it does not comply with one or more of these rules. A rule is compliant if all of the resources that the rule evaluates comply with it. A rule is noncompliant if any of these resources do not comply. Config returns the INSUFFICIENT_DATA value when no evaluation results are available for the Amazon Web Services resource or Config rule. For the Compliance data type, Config supports only COMPLIANT, NON_COMPLIANT, and INSUFFICIENT_DATA values. Config does not support the NOT_APPLICABLE value for the Compliance data type.
|
|
1051
1051
|
*/
|
|
1052
1052
|
ComplianceType?: ComplianceType;
|
|
1053
1053
|
/**
|
|
1054
|
-
* The number of
|
|
1054
|
+
* The number of Amazon Web Services resources or Config rules that cause a result of NON_COMPLIANT, up to a maximum number.
|
|
1055
1055
|
*/
|
|
1056
1056
|
ComplianceContributorCount?: ComplianceContributorCount;
|
|
1057
1057
|
}
|
|
1058
1058
|
export interface ComplianceByConfigRule {
|
|
1059
1059
|
/**
|
|
1060
|
-
* The name of the
|
|
1060
|
+
* The name of the Config rule.
|
|
1061
1061
|
*/
|
|
1062
1062
|
ConfigRuleName?: StringWithCharLimit64;
|
|
1063
1063
|
/**
|
|
1064
|
-
* Indicates whether the
|
|
1064
|
+
* Indicates whether the Config rule is compliant.
|
|
1065
1065
|
*/
|
|
1066
1066
|
Compliance?: Compliance;
|
|
1067
1067
|
}
|
|
1068
1068
|
export type ComplianceByConfigRules = ComplianceByConfigRule[];
|
|
1069
1069
|
export interface ComplianceByResource {
|
|
1070
1070
|
/**
|
|
1071
|
-
* The type of the
|
|
1071
|
+
* The type of the Amazon Web Services resource that was evaluated.
|
|
1072
1072
|
*/
|
|
1073
1073
|
ResourceType?: StringWithCharLimit256;
|
|
1074
1074
|
/**
|
|
1075
|
-
* The ID of the
|
|
1075
|
+
* The ID of the Amazon Web Services resource that was evaluated.
|
|
1076
1076
|
*/
|
|
1077
1077
|
ResourceId?: BaseResourceId;
|
|
1078
1078
|
/**
|
|
1079
|
-
* Indicates whether the
|
|
1079
|
+
* Indicates whether the Amazon Web Services resource complies with all of the Config rules that evaluated it.
|
|
1080
1080
|
*/
|
|
1081
1081
|
Compliance?: Compliance;
|
|
1082
1082
|
}
|
|
1083
1083
|
export type ComplianceByResources = ComplianceByResource[];
|
|
1084
1084
|
export interface ComplianceContributorCount {
|
|
1085
1085
|
/**
|
|
1086
|
-
* The number of
|
|
1086
|
+
* The number of Amazon Web Services resources or Config rules responsible for the current compliance of the item.
|
|
1087
1087
|
*/
|
|
1088
1088
|
CappedCount?: Integer;
|
|
1089
1089
|
/**
|
|
@@ -1095,25 +1095,25 @@ declare namespace ConfigService {
|
|
|
1095
1095
|
export type ComplianceSummariesByResourceType = ComplianceSummaryByResourceType[];
|
|
1096
1096
|
export interface ComplianceSummary {
|
|
1097
1097
|
/**
|
|
1098
|
-
* The number of
|
|
1098
|
+
* The number of Config rules or Amazon Web Services resources that are compliant, up to a maximum of 25 for rules and 100 for resources.
|
|
1099
1099
|
*/
|
|
1100
1100
|
CompliantResourceCount?: ComplianceContributorCount;
|
|
1101
1101
|
/**
|
|
1102
|
-
* The number of
|
|
1102
|
+
* The number of Config rules or Amazon Web Services resources that are noncompliant, up to a maximum of 25 for rules and 100 for resources.
|
|
1103
1103
|
*/
|
|
1104
1104
|
NonCompliantResourceCount?: ComplianceContributorCount;
|
|
1105
1105
|
/**
|
|
1106
|
-
* The time that
|
|
1106
|
+
* The time that Config created the compliance summary.
|
|
1107
1107
|
*/
|
|
1108
1108
|
ComplianceSummaryTimestamp?: _Date;
|
|
1109
1109
|
}
|
|
1110
1110
|
export interface ComplianceSummaryByResourceType {
|
|
1111
1111
|
/**
|
|
1112
|
-
* The type of
|
|
1112
|
+
* The type of Amazon Web Services resource.
|
|
1113
1113
|
*/
|
|
1114
1114
|
ResourceType?: StringWithCharLimit256;
|
|
1115
1115
|
/**
|
|
1116
|
-
* The number of
|
|
1116
|
+
* The number of Amazon Web Services resources that are compliant or noncompliant, up to a maximum of 100 for each.
|
|
1117
1117
|
*/
|
|
1118
1118
|
ComplianceSummary?: ComplianceSummary;
|
|
1119
1119
|
}
|
|
@@ -1147,19 +1147,19 @@ declare namespace ConfigService {
|
|
|
1147
1147
|
}
|
|
1148
1148
|
export interface ConfigRule {
|
|
1149
1149
|
/**
|
|
1150
|
-
* The name that you assign to the
|
|
1150
|
+
* The name that you assign to the Config rule. The name is required if you are adding a new rule.
|
|
1151
1151
|
*/
|
|
1152
1152
|
ConfigRuleName?: ConfigRuleName;
|
|
1153
1153
|
/**
|
|
1154
|
-
* The Amazon Resource Name (ARN) of the
|
|
1154
|
+
* The Amazon Resource Name (ARN) of the Config rule.
|
|
1155
1155
|
*/
|
|
1156
1156
|
ConfigRuleArn?: StringWithCharLimit256;
|
|
1157
1157
|
/**
|
|
1158
|
-
* The ID of the
|
|
1158
|
+
* The ID of the Config rule.
|
|
1159
1159
|
*/
|
|
1160
1160
|
ConfigRuleId?: StringWithCharLimit64;
|
|
1161
1161
|
/**
|
|
1162
|
-
* The description that you provide for the
|
|
1162
|
+
* The description that you provide for the Config rule.
|
|
1163
1163
|
*/
|
|
1164
1164
|
Description?: EmptiableStringWithCharLimit256;
|
|
1165
1165
|
/**
|
|
@@ -1167,19 +1167,19 @@ declare namespace ConfigService {
|
|
|
1167
1167
|
*/
|
|
1168
1168
|
Scope?: Scope;
|
|
1169
1169
|
/**
|
|
1170
|
-
* Provides the rule owner (
|
|
1170
|
+
* Provides the rule owner (Amazon Web Services or customer), the rule identifier, and the notifications that cause the function to evaluate your Amazon Web Services resources.
|
|
1171
1171
|
*/
|
|
1172
1172
|
Source: Source;
|
|
1173
1173
|
/**
|
|
1174
|
-
* A string, in JSON format, that is passed to the
|
|
1174
|
+
* A string, in JSON format, that is passed to the Config rule Lambda function.
|
|
1175
1175
|
*/
|
|
1176
1176
|
InputParameters?: StringWithCharLimit1024;
|
|
1177
1177
|
/**
|
|
1178
|
-
* The maximum frequency with which
|
|
1178
|
+
* The maximum frequency with which Config runs evaluations for a rule. You can specify a value for MaximumExecutionFrequency when: You are using an Config managed rule that is triggered at a periodic frequency. Your custom rule is triggered when Config delivers the configuration snapshot. For more information, see ConfigSnapshotDeliveryProperties. By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the MaximumExecutionFrequency parameter.
|
|
1179
1179
|
*/
|
|
1180
1180
|
MaximumExecutionFrequency?: MaximumExecutionFrequency;
|
|
1181
1181
|
/**
|
|
1182
|
-
* Indicates whether the
|
|
1182
|
+
* Indicates whether the Config rule is active or is currently being deleted by Config. It can also indicate the evaluation status for the Config rule. Config sets the state of the rule to EVALUATING temporarily after you use the StartConfigRulesEvaluation request to evaluate your resources against the Config rule. Config sets the state of the rule to DELETING_RESULTS temporarily after you use the DeleteEvaluationResults request to delete the current evaluation results for the Config rule. Config temporarily sets the state of a rule to DELETING after you use the DeleteConfigRule request to delete the rule. After Config deletes the rule, the rule and all of its evaluations are erased and are no longer available.
|
|
1183
1183
|
*/
|
|
1184
1184
|
ConfigRuleState?: ConfigRuleState;
|
|
1185
1185
|
/**
|
|
@@ -1189,11 +1189,11 @@ declare namespace ConfigService {
|
|
|
1189
1189
|
}
|
|
1190
1190
|
export interface ConfigRuleComplianceFilters {
|
|
1191
1191
|
/**
|
|
1192
|
-
* The name of the
|
|
1192
|
+
* The name of the Config rule.
|
|
1193
1193
|
*/
|
|
1194
1194
|
ConfigRuleName?: ConfigRuleName;
|
|
1195
1195
|
/**
|
|
1196
|
-
* The rule compliance status. For the ConfigRuleComplianceFilters data type,
|
|
1196
|
+
* The rule compliance status. For the ConfigRuleComplianceFilters data type, Config supports only COMPLIANT and NON_COMPLIANT. Config does not support the NOT_APPLICABLE and the INSUFFICIENT_DATA values.
|
|
1197
1197
|
*/
|
|
1198
1198
|
ComplianceType?: ComplianceType;
|
|
1199
1199
|
/**
|
|
@@ -1218,51 +1218,51 @@ declare namespace ConfigService {
|
|
|
1218
1218
|
export type ConfigRuleComplianceSummaryGroupKey = "ACCOUNT_ID"|"AWS_REGION"|string;
|
|
1219
1219
|
export interface ConfigRuleEvaluationStatus {
|
|
1220
1220
|
/**
|
|
1221
|
-
* The name of the
|
|
1221
|
+
* The name of the Config rule.
|
|
1222
1222
|
*/
|
|
1223
1223
|
ConfigRuleName?: ConfigRuleName;
|
|
1224
1224
|
/**
|
|
1225
|
-
* The Amazon Resource Name (ARN) of the
|
|
1225
|
+
* The Amazon Resource Name (ARN) of the Config rule.
|
|
1226
1226
|
*/
|
|
1227
1227
|
ConfigRuleArn?: String;
|
|
1228
1228
|
/**
|
|
1229
|
-
* The ID of the
|
|
1229
|
+
* The ID of the Config rule.
|
|
1230
1230
|
*/
|
|
1231
1231
|
ConfigRuleId?: String;
|
|
1232
1232
|
/**
|
|
1233
|
-
* The time that
|
|
1233
|
+
* The time that Config last successfully invoked the Config rule to evaluate your Amazon Web Services resources.
|
|
1234
1234
|
*/
|
|
1235
1235
|
LastSuccessfulInvocationTime?: _Date;
|
|
1236
1236
|
/**
|
|
1237
|
-
* The time that
|
|
1237
|
+
* The time that Config last failed to invoke the Config rule to evaluate your Amazon Web Services resources.
|
|
1238
1238
|
*/
|
|
1239
1239
|
LastFailedInvocationTime?: _Date;
|
|
1240
1240
|
/**
|
|
1241
|
-
* The time that
|
|
1241
|
+
* The time that Config last successfully evaluated your Amazon Web Services resources against the rule.
|
|
1242
1242
|
*/
|
|
1243
1243
|
LastSuccessfulEvaluationTime?: _Date;
|
|
1244
1244
|
/**
|
|
1245
|
-
* The time that
|
|
1245
|
+
* The time that Config last failed to evaluate your Amazon Web Services resources against the rule.
|
|
1246
1246
|
*/
|
|
1247
1247
|
LastFailedEvaluationTime?: _Date;
|
|
1248
1248
|
/**
|
|
1249
|
-
* The time that you first activated the
|
|
1249
|
+
* The time that you first activated the Config rule.
|
|
1250
1250
|
*/
|
|
1251
1251
|
FirstActivatedTime?: _Date;
|
|
1252
1252
|
/**
|
|
1253
|
-
* The time that you last turned off the
|
|
1253
|
+
* The time that you last turned off the Config rule.
|
|
1254
1254
|
*/
|
|
1255
1255
|
LastDeactivatedTime?: _Date;
|
|
1256
1256
|
/**
|
|
1257
|
-
* The error code that
|
|
1257
|
+
* The error code that Config returned when the rule last failed.
|
|
1258
1258
|
*/
|
|
1259
1259
|
LastErrorCode?: String;
|
|
1260
1260
|
/**
|
|
1261
|
-
* The error message that
|
|
1261
|
+
* The error message that Config returned when the rule last failed.
|
|
1262
1262
|
*/
|
|
1263
1263
|
LastErrorMessage?: String;
|
|
1264
1264
|
/**
|
|
1265
|
-
* Indicates whether
|
|
1265
|
+
* Indicates whether Config has evaluated your resources against the rule at least once. true - Config has evaluated your Amazon Web Services resources against the rule at least once. false - Config has not once finished evaluating your Amazon Web Services resources against the rule.
|
|
1266
1266
|
*/
|
|
1267
1267
|
FirstEvaluationStarted?: Boolean;
|
|
1268
1268
|
}
|
|
@@ -1273,13 +1273,13 @@ declare namespace ConfigService {
|
|
|
1273
1273
|
export type ConfigRules = ConfigRule[];
|
|
1274
1274
|
export interface ConfigSnapshotDeliveryProperties {
|
|
1275
1275
|
/**
|
|
1276
|
-
* The frequency with which
|
|
1276
|
+
* The frequency with which Config delivers configuration snapshots.
|
|
1277
1277
|
*/
|
|
1278
1278
|
deliveryFrequency?: MaximumExecutionFrequency;
|
|
1279
1279
|
}
|
|
1280
1280
|
export interface ConfigStreamDeliveryInfo {
|
|
1281
1281
|
/**
|
|
1282
|
-
* Status of the last attempted delivery. Note Providing an SNS topic on a DeliveryChannel for
|
|
1282
|
+
* Status of the last attempted delivery. Note Providing an SNS topic on a DeliveryChannel for Config is optional. If the SNS delivery is turned off, the last status will be Not_Applicable.
|
|
1283
1283
|
*/
|
|
1284
1284
|
lastStatus?: DeliveryStatus;
|
|
1285
1285
|
/**
|
|
@@ -1322,7 +1322,7 @@ declare namespace ConfigService {
|
|
|
1322
1322
|
*/
|
|
1323
1323
|
LastUpdatedTime?: _Date;
|
|
1324
1324
|
/**
|
|
1325
|
-
*
|
|
1325
|
+
* Amazon Web Services service that created the configuration aggregator.
|
|
1326
1326
|
*/
|
|
1327
1327
|
CreatedBy?: StringWithCharLimit256;
|
|
1328
1328
|
}
|
|
@@ -1336,7 +1336,7 @@ declare namespace ConfigService {
|
|
|
1336
1336
|
*/
|
|
1337
1337
|
version?: Version;
|
|
1338
1338
|
/**
|
|
1339
|
-
* The 12-digit
|
|
1339
|
+
* The 12-digit Amazon Web Services account ID associated with the resource.
|
|
1340
1340
|
*/
|
|
1341
1341
|
accountId?: AccountId;
|
|
1342
1342
|
/**
|
|
@@ -1360,7 +1360,7 @@ declare namespace ConfigService {
|
|
|
1360
1360
|
*/
|
|
1361
1361
|
arn?: ARN;
|
|
1362
1362
|
/**
|
|
1363
|
-
* The type of
|
|
1363
|
+
* The type of Amazon Web Services resource.
|
|
1364
1364
|
*/
|
|
1365
1365
|
resourceType?: ResourceType;
|
|
1366
1366
|
/**
|
|
@@ -1388,11 +1388,11 @@ declare namespace ConfigService {
|
|
|
1388
1388
|
*/
|
|
1389
1389
|
tags?: Tags;
|
|
1390
1390
|
/**
|
|
1391
|
-
* A list of CloudTrail event IDs. A populated field indicates that the current configuration was initiated by the events recorded in the CloudTrail log. For more information about CloudTrail, see What Is
|
|
1391
|
+
* A list of CloudTrail event IDs. A populated field indicates that the current configuration was initiated by the events recorded in the CloudTrail log. For more information about CloudTrail, see What Is CloudTrail. An empty field indicates that the current configuration was not initiated by any event. As of Version 1.3, the relatedEvents field is empty. You can access the LookupEvents API in the CloudTrail API Reference to retrieve the events for the resource.
|
|
1392
1392
|
*/
|
|
1393
1393
|
relatedEvents?: RelatedEventList;
|
|
1394
1394
|
/**
|
|
1395
|
-
* A list of related
|
|
1395
|
+
* A list of related Amazon Web Services resources.
|
|
1396
1396
|
*/
|
|
1397
1397
|
relationships?: RelationshipList;
|
|
1398
1398
|
/**
|
|
@@ -1400,7 +1400,7 @@ declare namespace ConfigService {
|
|
|
1400
1400
|
*/
|
|
1401
1401
|
configuration?: Configuration;
|
|
1402
1402
|
/**
|
|
1403
|
-
* Configuration attributes that
|
|
1403
|
+
* Configuration attributes that Config returns for certain resource types to supplement the information returned for the configuration parameter.
|
|
1404
1404
|
*/
|
|
1405
1405
|
supplementaryConfiguration?: SupplementaryConfiguration;
|
|
1406
1406
|
}
|
|
@@ -1410,15 +1410,15 @@ declare namespace ConfigService {
|
|
|
1410
1410
|
export type ConfigurationItemStatus = "OK"|"ResourceDiscovered"|"ResourceNotRecorded"|"ResourceDeleted"|"ResourceDeletedNotRecorded"|string;
|
|
1411
1411
|
export interface ConfigurationRecorder {
|
|
1412
1412
|
/**
|
|
1413
|
-
* The name of the recorder. By default,
|
|
1413
|
+
* The name of the recorder. By default, Config automatically assigns the name "default" when creating the configuration recorder. You cannot change the assigned name.
|
|
1414
1414
|
*/
|
|
1415
1415
|
name?: RecorderName;
|
|
1416
1416
|
/**
|
|
1417
|
-
* Amazon Resource Name (ARN) of the IAM role used to describe the
|
|
1417
|
+
* Amazon Resource Name (ARN) of the IAM role used to describe the Amazon Web Services resources associated with the account.
|
|
1418
1418
|
*/
|
|
1419
1419
|
roleARN?: String;
|
|
1420
1420
|
/**
|
|
1421
|
-
* Specifies the types of
|
|
1421
|
+
* Specifies the types of Amazon Web Services resources for which Config records configuration changes.
|
|
1422
1422
|
*/
|
|
1423
1423
|
recordingGroup?: RecordingGroup;
|
|
1424
1424
|
}
|
|
@@ -1463,7 +1463,7 @@ declare namespace ConfigService {
|
|
|
1463
1463
|
export type ConformancePackArn = string;
|
|
1464
1464
|
export interface ConformancePackComplianceFilters {
|
|
1465
1465
|
/**
|
|
1466
|
-
* Filters the results by
|
|
1466
|
+
* Filters the results by Config rule names.
|
|
1467
1467
|
*/
|
|
1468
1468
|
ConfigRuleNames?: ConformancePackConfigRuleNames;
|
|
1469
1469
|
/**
|
|
@@ -1499,7 +1499,7 @@ declare namespace ConfigService {
|
|
|
1499
1499
|
*/
|
|
1500
1500
|
ConformancePackId: ConformancePackId;
|
|
1501
1501
|
/**
|
|
1502
|
-
* Amazon S3 bucket where
|
|
1502
|
+
* The name of the Amazon S3 bucket where Config stores conformance pack templates. This field is optional.
|
|
1503
1503
|
*/
|
|
1504
1504
|
DeliveryS3Bucket?: DeliveryS3Bucket;
|
|
1505
1505
|
/**
|
|
@@ -1515,14 +1515,14 @@ declare namespace ConfigService {
|
|
|
1515
1515
|
*/
|
|
1516
1516
|
LastUpdateRequestedTime?: _Date;
|
|
1517
1517
|
/**
|
|
1518
|
-
*
|
|
1518
|
+
* Amazon Web Services service that created the conformance pack.
|
|
1519
1519
|
*/
|
|
1520
1520
|
CreatedBy?: StringWithCharLimit256;
|
|
1521
1521
|
}
|
|
1522
1522
|
export type ConformancePackDetailList = ConformancePackDetail[];
|
|
1523
1523
|
export interface ConformancePackEvaluationFilters {
|
|
1524
1524
|
/**
|
|
1525
|
-
* Filters the results by
|
|
1525
|
+
* Filters the results by Config rule names.
|
|
1526
1526
|
*/
|
|
1527
1527
|
ConfigRuleNames?: ConformancePackConfigRuleNames;
|
|
1528
1528
|
/**
|
|
@@ -1545,11 +1545,11 @@ declare namespace ConfigService {
|
|
|
1545
1545
|
ComplianceType: ConformancePackComplianceType;
|
|
1546
1546
|
EvaluationResultIdentifier: EvaluationResultIdentifier;
|
|
1547
1547
|
/**
|
|
1548
|
-
* The time when
|
|
1548
|
+
* The time when Config rule evaluated Amazon Web Services resource.
|
|
1549
1549
|
*/
|
|
1550
1550
|
ConfigRuleInvokedTime: _Date;
|
|
1551
1551
|
/**
|
|
1552
|
-
* The time when
|
|
1552
|
+
* The time when Config recorded the evaluation result.
|
|
1553
1553
|
*/
|
|
1554
1554
|
ResultRecordedTime: _Date;
|
|
1555
1555
|
/**
|
|
@@ -1578,7 +1578,7 @@ declare namespace ConfigService {
|
|
|
1578
1578
|
*/
|
|
1579
1579
|
ConfigRuleName?: ConfigRuleName;
|
|
1580
1580
|
/**
|
|
1581
|
-
* Compliance of the
|
|
1581
|
+
* Compliance of the Config rule. The allowed values are COMPLIANT, NON_COMPLIANT, and INSUFFICIENT_DATA.
|
|
1582
1582
|
*/
|
|
1583
1583
|
ComplianceType?: ConformancePackComplianceType;
|
|
1584
1584
|
/**
|
|
@@ -1603,11 +1603,11 @@ declare namespace ConfigService {
|
|
|
1603
1603
|
*/
|
|
1604
1604
|
ConformancePackArn: ConformancePackArn;
|
|
1605
1605
|
/**
|
|
1606
|
-
* Indicates deployment status of conformance pack.
|
|
1606
|
+
* Indicates deployment status of conformance pack. Config sets the state of the conformance pack to: CREATE_IN_PROGRESS when a conformance pack creation is in progress for an account. CREATE_COMPLETE when a conformance pack has been successfully created in your account. CREATE_FAILED when a conformance pack creation failed in your account. DELETE_IN_PROGRESS when a conformance pack deletion is in progress. DELETE_FAILED when a conformance pack deletion failed in your account.
|
|
1607
1607
|
*/
|
|
1608
1608
|
ConformancePackState: ConformancePackState;
|
|
1609
1609
|
/**
|
|
1610
|
-
* Amazon Resource Name (ARN) of
|
|
1610
|
+
* Amazon Resource Name (ARN) of CloudFormation stack.
|
|
1611
1611
|
*/
|
|
1612
1612
|
StackArn: StackArn;
|
|
1613
1613
|
/**
|
|
@@ -1640,7 +1640,7 @@ declare namespace ConfigService {
|
|
|
1640
1640
|
}
|
|
1641
1641
|
export interface DeleteConfigRuleRequest {
|
|
1642
1642
|
/**
|
|
1643
|
-
* The name of the
|
|
1643
|
+
* The name of the Config rule that you want to delete.
|
|
1644
1644
|
*/
|
|
1645
1645
|
ConfigRuleName: ConfigRuleName;
|
|
1646
1646
|
}
|
|
@@ -1670,7 +1670,7 @@ declare namespace ConfigService {
|
|
|
1670
1670
|
}
|
|
1671
1671
|
export interface DeleteEvaluationResultsRequest {
|
|
1672
1672
|
/**
|
|
1673
|
-
* The name of the
|
|
1673
|
+
* The name of the Config rule for which you want to delete the evaluation results.
|
|
1674
1674
|
*/
|
|
1675
1675
|
ConfigRuleName: StringWithCharLimit64;
|
|
1676
1676
|
}
|
|
@@ -1700,7 +1700,7 @@ declare namespace ConfigService {
|
|
|
1700
1700
|
}
|
|
1701
1701
|
export interface DeleteRemediationConfigurationRequest {
|
|
1702
1702
|
/**
|
|
1703
|
-
* The name of the
|
|
1703
|
+
* The name of the Config rule for which you want to delete remediation configuration.
|
|
1704
1704
|
*/
|
|
1705
1705
|
ConfigRuleName: ConfigRuleName;
|
|
1706
1706
|
/**
|
|
@@ -1712,11 +1712,11 @@ declare namespace ConfigService {
|
|
|
1712
1712
|
}
|
|
1713
1713
|
export interface DeleteRemediationExceptionsRequest {
|
|
1714
1714
|
/**
|
|
1715
|
-
* The name of the
|
|
1715
|
+
* The name of the Config rule for which you want to delete remediation exception configuration.
|
|
1716
1716
|
*/
|
|
1717
1717
|
ConfigRuleName: ConfigRuleName;
|
|
1718
1718
|
/**
|
|
1719
|
-
* An exception list of resource exception keys to be processed with the current request.
|
|
1719
|
+
* An exception list of resource exception keys to be processed with the current request. Config adds exception for each resource key. For example, Config adds 3 exceptions for 3 resource keys.
|
|
1720
1720
|
*/
|
|
1721
1721
|
ResourceKeys: RemediationExceptionResourceKeys;
|
|
1722
1722
|
}
|
|
@@ -1764,11 +1764,11 @@ declare namespace ConfigService {
|
|
|
1764
1764
|
}
|
|
1765
1765
|
export interface DeliveryChannel {
|
|
1766
1766
|
/**
|
|
1767
|
-
* The name of the delivery channel. By default,
|
|
1767
|
+
* The name of the delivery channel. By default, Config assigns the name "default" when creating the delivery channel. To change the delivery channel name, you must use the DeleteDeliveryChannel action to delete your current delivery channel, and then you must use the PutDeliveryChannel command to create a delivery channel that has the desired name.
|
|
1768
1768
|
*/
|
|
1769
1769
|
name?: ChannelName;
|
|
1770
1770
|
/**
|
|
1771
|
-
* The name of the Amazon S3 bucket to which
|
|
1771
|
+
* The name of the Amazon S3 bucket to which Config delivers configuration snapshots and configuration history files. If you specify a bucket that belongs to another Amazon Web Services account, that bucket must have policies that grant access permissions to Config. For more information, see Permissions for the Amazon S3 Bucket in the Config Developer Guide.
|
|
1772
1772
|
*/
|
|
1773
1773
|
s3BucketName?: String;
|
|
1774
1774
|
/**
|
|
@@ -1776,15 +1776,15 @@ declare namespace ConfigService {
|
|
|
1776
1776
|
*/
|
|
1777
1777
|
s3KeyPrefix?: String;
|
|
1778
1778
|
/**
|
|
1779
|
-
* The Amazon Resource Name (ARN) of the
|
|
1779
|
+
* The Amazon Resource Name (ARN) of the Key Management Service (KMS ) KMS key (KMS key) used to encrypt objects delivered by Config. Must belong to the same Region as the destination S3 bucket.
|
|
1780
1780
|
*/
|
|
1781
1781
|
s3KmsKeyArn?: String;
|
|
1782
1782
|
/**
|
|
1783
|
-
* The Amazon Resource Name (ARN) of the Amazon SNS topic to which
|
|
1783
|
+
* The Amazon Resource Name (ARN) of the Amazon SNS topic to which Config sends notifications about configuration changes. If you choose a topic from another account, the topic must have policies that grant access permissions to Config. For more information, see Permissions for the Amazon SNS Topic in the Config Developer Guide.
|
|
1784
1784
|
*/
|
|
1785
1785
|
snsTopicARN?: String;
|
|
1786
1786
|
/**
|
|
1787
|
-
* The options for how often
|
|
1787
|
+
* The options for how often Config delivers configuration snapshots to the Amazon S3 bucket.
|
|
1788
1788
|
*/
|
|
1789
1789
|
configSnapshotDeliveryProperties?: ConfigSnapshotDeliveryProperties;
|
|
1790
1790
|
}
|
|
@@ -1822,7 +1822,7 @@ declare namespace ConfigService {
|
|
|
1822
1822
|
*/
|
|
1823
1823
|
Filters?: ConfigRuleComplianceFilters;
|
|
1824
1824
|
/**
|
|
1825
|
-
* The maximum number of evaluation results returned on each page. The default is maximum. If you specify 0,
|
|
1825
|
+
* The maximum number of evaluation results returned on each page. The default is maximum. If you specify 0, Config uses the default.
|
|
1826
1826
|
*/
|
|
1827
1827
|
Limit?: GroupByAPILimit;
|
|
1828
1828
|
/**
|
|
@@ -1850,7 +1850,7 @@ declare namespace ConfigService {
|
|
|
1850
1850
|
*/
|
|
1851
1851
|
Filters?: AggregateConformancePackComplianceFilters;
|
|
1852
1852
|
/**
|
|
1853
|
-
* The maximum number of conformance packs compliance details returned on each page. The default is maximum. If you specify 0,
|
|
1853
|
+
* The maximum number of conformance packs compliance details returned on each page. The default is maximum. If you specify 0, Config uses the default.
|
|
1854
1854
|
*/
|
|
1855
1855
|
Limit?: Limit;
|
|
1856
1856
|
/**
|
|
@@ -1870,7 +1870,7 @@ declare namespace ConfigService {
|
|
|
1870
1870
|
}
|
|
1871
1871
|
export interface DescribeAggregationAuthorizationsRequest {
|
|
1872
1872
|
/**
|
|
1873
|
-
* The maximum number of AggregationAuthorizations returned on each page. The default is maximum. If you specify 0,
|
|
1873
|
+
* The maximum number of AggregationAuthorizations returned on each page. The default is maximum. If you specify 0, Config uses the default.
|
|
1874
1874
|
*/
|
|
1875
1875
|
Limit?: Limit;
|
|
1876
1876
|
/**
|
|
@@ -1890,7 +1890,7 @@ declare namespace ConfigService {
|
|
|
1890
1890
|
}
|
|
1891
1891
|
export interface DescribeComplianceByConfigRuleRequest {
|
|
1892
1892
|
/**
|
|
1893
|
-
* Specify one or more
|
|
1893
|
+
* Specify one or more Config rule names to filter the results by rule.
|
|
1894
1894
|
*/
|
|
1895
1895
|
ConfigRuleNames?: ConfigRuleNames;
|
|
1896
1896
|
/**
|
|
@@ -1904,7 +1904,7 @@ declare namespace ConfigService {
|
|
|
1904
1904
|
}
|
|
1905
1905
|
export interface DescribeComplianceByConfigRuleResponse {
|
|
1906
1906
|
/**
|
|
1907
|
-
* Indicates whether each of the specified
|
|
1907
|
+
* Indicates whether each of the specified Config rules is compliant.
|
|
1908
1908
|
*/
|
|
1909
1909
|
ComplianceByConfigRules?: ComplianceByConfigRules;
|
|
1910
1910
|
/**
|
|
@@ -1914,11 +1914,11 @@ declare namespace ConfigService {
|
|
|
1914
1914
|
}
|
|
1915
1915
|
export interface DescribeComplianceByResourceRequest {
|
|
1916
1916
|
/**
|
|
1917
|
-
* The types of
|
|
1917
|
+
* The types of Amazon Web Services resources for which you want compliance information (for example, AWS::EC2::Instance). For this action, you can specify that the resource type is an Amazon Web Services account by specifying AWS::::Account.
|
|
1918
1918
|
*/
|
|
1919
1919
|
ResourceType?: StringWithCharLimit256;
|
|
1920
1920
|
/**
|
|
1921
|
-
* The ID of the
|
|
1921
|
+
* The ID of the Amazon Web Services resource for which you want compliance information. You can specify only one resource ID. If you specify a resource ID, you must also specify a type for ResourceType.
|
|
1922
1922
|
*/
|
|
1923
1923
|
ResourceId?: BaseResourceId;
|
|
1924
1924
|
/**
|
|
@@ -1926,7 +1926,7 @@ declare namespace ConfigService {
|
|
|
1926
1926
|
*/
|
|
1927
1927
|
ComplianceTypes?: ComplianceTypes;
|
|
1928
1928
|
/**
|
|
1929
|
-
* The maximum number of evaluation results returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0,
|
|
1929
|
+
* The maximum number of evaluation results returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0, Config uses the default.
|
|
1930
1930
|
*/
|
|
1931
1931
|
Limit?: Limit;
|
|
1932
1932
|
/**
|
|
@@ -1936,7 +1936,7 @@ declare namespace ConfigService {
|
|
|
1936
1936
|
}
|
|
1937
1937
|
export interface DescribeComplianceByResourceResponse {
|
|
1938
1938
|
/**
|
|
1939
|
-
* Indicates whether the specified
|
|
1939
|
+
* Indicates whether the specified Amazon Web Services resource complies with all of the Config rules that evaluate it.
|
|
1940
1940
|
*/
|
|
1941
1941
|
ComplianceByResources?: ComplianceByResources;
|
|
1942
1942
|
/**
|
|
@@ -1946,7 +1946,7 @@ declare namespace ConfigService {
|
|
|
1946
1946
|
}
|
|
1947
1947
|
export interface DescribeConfigRuleEvaluationStatusRequest {
|
|
1948
1948
|
/**
|
|
1949
|
-
* The name of the
|
|
1949
|
+
* The name of the Config managed rules for which you want status information. If you do not specify any names, Config returns status information for all Config managed rules that you use.
|
|
1950
1950
|
*/
|
|
1951
1951
|
ConfigRuleNames?: ConfigRuleNames;
|
|
1952
1952
|
/**
|
|
@@ -1954,13 +1954,13 @@ declare namespace ConfigService {
|
|
|
1954
1954
|
*/
|
|
1955
1955
|
NextToken?: String;
|
|
1956
1956
|
/**
|
|
1957
|
-
* The number of rule evaluation results that you want returned. This parameter is required if the rule limit for your account is more than the default of 150 rules. For information about requesting a rule limit increase, see
|
|
1957
|
+
* The number of rule evaluation results that you want returned. This parameter is required if the rule limit for your account is more than the default of 150 rules. For information about requesting a rule limit increase, see Config Limits in the Amazon Web Services General Reference Guide.
|
|
1958
1958
|
*/
|
|
1959
1959
|
Limit?: RuleLimit;
|
|
1960
1960
|
}
|
|
1961
1961
|
export interface DescribeConfigRuleEvaluationStatusResponse {
|
|
1962
1962
|
/**
|
|
1963
|
-
* Status information about your
|
|
1963
|
+
* Status information about your Config managed rules.
|
|
1964
1964
|
*/
|
|
1965
1965
|
ConfigRulesEvaluationStatus?: ConfigRuleEvaluationStatusList;
|
|
1966
1966
|
/**
|
|
@@ -1970,7 +1970,7 @@ declare namespace ConfigService {
|
|
|
1970
1970
|
}
|
|
1971
1971
|
export interface DescribeConfigRulesRequest {
|
|
1972
1972
|
/**
|
|
1973
|
-
* The names of the
|
|
1973
|
+
* The names of the Config rules for which you want details. If you do not specify any names, Config returns details for all your rules.
|
|
1974
1974
|
*/
|
|
1975
1975
|
ConfigRuleNames?: ConfigRuleNames;
|
|
1976
1976
|
/**
|
|
@@ -1980,7 +1980,7 @@ declare namespace ConfigService {
|
|
|
1980
1980
|
}
|
|
1981
1981
|
export interface DescribeConfigRulesResponse {
|
|
1982
1982
|
/**
|
|
1983
|
-
* The details about your
|
|
1983
|
+
* The details about your Config rules.
|
|
1984
1984
|
*/
|
|
1985
1985
|
ConfigRules?: ConfigRules;
|
|
1986
1986
|
/**
|
|
@@ -2002,7 +2002,7 @@ declare namespace ConfigService {
|
|
|
2002
2002
|
*/
|
|
2003
2003
|
NextToken?: String;
|
|
2004
2004
|
/**
|
|
2005
|
-
* The maximum number of AggregatorSourceStatus returned on each page. The default is maximum. If you specify 0,
|
|
2005
|
+
* The maximum number of AggregatorSourceStatus returned on each page. The default is maximum. If you specify 0, Config uses the default.
|
|
2006
2006
|
*/
|
|
2007
2007
|
Limit?: Limit;
|
|
2008
2008
|
}
|
|
@@ -2026,7 +2026,7 @@ declare namespace ConfigService {
|
|
|
2026
2026
|
*/
|
|
2027
2027
|
NextToken?: String;
|
|
2028
2028
|
/**
|
|
2029
|
-
* The maximum number of configuration aggregators returned on each page. The default is maximum. If you specify 0,
|
|
2029
|
+
* The maximum number of configuration aggregators returned on each page. The default is maximum. If you specify 0, Config uses the default.
|
|
2030
2030
|
*/
|
|
2031
2031
|
Limit?: Limit;
|
|
2032
2032
|
}
|
|
@@ -2075,7 +2075,7 @@ declare namespace ConfigService {
|
|
|
2075
2075
|
*/
|
|
2076
2076
|
Filters?: ConformancePackComplianceFilters;
|
|
2077
2077
|
/**
|
|
2078
|
-
* The maximum number of
|
|
2078
|
+
* The maximum number of Config rules within a conformance pack are returned on each page.
|
|
2079
2079
|
*/
|
|
2080
2080
|
Limit?: DescribeConformancePackComplianceLimit;
|
|
2081
2081
|
/**
|
|
@@ -2123,7 +2123,7 @@ declare namespace ConfigService {
|
|
|
2123
2123
|
}
|
|
2124
2124
|
export interface DescribeConformancePacksRequest {
|
|
2125
2125
|
/**
|
|
2126
|
-
* Comma-separated list of conformance pack names for which you want details. If you do not specify any names,
|
|
2126
|
+
* Comma-separated list of conformance pack names for which you want details. If you do not specify any names, Config returns details for all your conformance packs.
|
|
2127
2127
|
*/
|
|
2128
2128
|
ConformancePackNames?: ConformancePackNamesList;
|
|
2129
2129
|
/**
|
|
@@ -2171,11 +2171,11 @@ declare namespace ConfigService {
|
|
|
2171
2171
|
}
|
|
2172
2172
|
export interface DescribeOrganizationConfigRuleStatusesRequest {
|
|
2173
2173
|
/**
|
|
2174
|
-
* The names of organization config rules for which you want status details. If you do not specify any names,
|
|
2174
|
+
* The names of organization config rules for which you want status details. If you do not specify any names, Config returns details for all your organization Config rules.
|
|
2175
2175
|
*/
|
|
2176
2176
|
OrganizationConfigRuleNames?: OrganizationConfigRuleNames;
|
|
2177
2177
|
/**
|
|
2178
|
-
* The maximum number of OrganizationConfigRuleStatuses returned on each page. If you do no specify a number,
|
|
2178
|
+
* The maximum number of OrganizationConfigRuleStatuses returned on each page. If you do no specify a number, Config uses the default. The default is 100.
|
|
2179
2179
|
*/
|
|
2180
2180
|
Limit?: CosmosPageLimit;
|
|
2181
2181
|
/**
|
|
@@ -2195,11 +2195,11 @@ declare namespace ConfigService {
|
|
|
2195
2195
|
}
|
|
2196
2196
|
export interface DescribeOrganizationConfigRulesRequest {
|
|
2197
2197
|
/**
|
|
2198
|
-
* The names of organization config rules for which you want details. If you do not specify any names,
|
|
2198
|
+
* The names of organization config rules for which you want details. If you do not specify any names, Config returns details for all your organization config rules.
|
|
2199
2199
|
*/
|
|
2200
2200
|
OrganizationConfigRuleNames?: OrganizationConfigRuleNames;
|
|
2201
2201
|
/**
|
|
2202
|
-
* The maximum number of organization config rules returned on each page. If you do no specify a number,
|
|
2202
|
+
* The maximum number of organization config rules returned on each page. If you do no specify a number, Config uses the default. The default is 100.
|
|
2203
2203
|
*/
|
|
2204
2204
|
Limit?: CosmosPageLimit;
|
|
2205
2205
|
/**
|
|
@@ -2219,11 +2219,11 @@ declare namespace ConfigService {
|
|
|
2219
2219
|
}
|
|
2220
2220
|
export interface DescribeOrganizationConformancePackStatusesRequest {
|
|
2221
2221
|
/**
|
|
2222
|
-
* The names of organization conformance packs for which you want status details. If you do not specify any names,
|
|
2222
|
+
* The names of organization conformance packs for which you want status details. If you do not specify any names, Config returns details for all your organization conformance packs.
|
|
2223
2223
|
*/
|
|
2224
2224
|
OrganizationConformancePackNames?: OrganizationConformancePackNames;
|
|
2225
2225
|
/**
|
|
2226
|
-
* The maximum number of OrganizationConformancePackStatuses returned on each page. If you do no specify a number,
|
|
2226
|
+
* The maximum number of OrganizationConformancePackStatuses returned on each page. If you do no specify a number, Config uses the default. The default is 100.
|
|
2227
2227
|
*/
|
|
2228
2228
|
Limit?: CosmosPageLimit;
|
|
2229
2229
|
/**
|
|
@@ -2247,7 +2247,7 @@ declare namespace ConfigService {
|
|
|
2247
2247
|
*/
|
|
2248
2248
|
OrganizationConformancePackNames?: OrganizationConformancePackNames;
|
|
2249
2249
|
/**
|
|
2250
|
-
* The maximum number of organization config packs returned on each page. If you do no specify a number,
|
|
2250
|
+
* The maximum number of organization config packs returned on each page. If you do no specify a number, Config uses the default. The default is 100.
|
|
2251
2251
|
*/
|
|
2252
2252
|
Limit?: CosmosPageLimit;
|
|
2253
2253
|
/**
|
|
@@ -2268,7 +2268,7 @@ declare namespace ConfigService {
|
|
|
2268
2268
|
export type DescribePendingAggregationRequestsLimit = number;
|
|
2269
2269
|
export interface DescribePendingAggregationRequestsRequest {
|
|
2270
2270
|
/**
|
|
2271
|
-
* The maximum number of evaluation results returned on each page. The default is maximum. If you specify 0,
|
|
2271
|
+
* The maximum number of evaluation results returned on each page. The default is maximum. If you specify 0, Config uses the default.
|
|
2272
2272
|
*/
|
|
2273
2273
|
Limit?: DescribePendingAggregationRequestsLimit;
|
|
2274
2274
|
/**
|
|
@@ -2288,7 +2288,7 @@ declare namespace ConfigService {
|
|
|
2288
2288
|
}
|
|
2289
2289
|
export interface DescribeRemediationConfigurationsRequest {
|
|
2290
2290
|
/**
|
|
2291
|
-
* A list of
|
|
2291
|
+
* A list of Config rule names of remediation configurations for which you want details.
|
|
2292
2292
|
*/
|
|
2293
2293
|
ConfigRuleNames: ConfigRuleNames;
|
|
2294
2294
|
}
|
|
@@ -2300,15 +2300,15 @@ declare namespace ConfigService {
|
|
|
2300
2300
|
}
|
|
2301
2301
|
export interface DescribeRemediationExceptionsRequest {
|
|
2302
2302
|
/**
|
|
2303
|
-
* The name of the
|
|
2303
|
+
* The name of the Config rule.
|
|
2304
2304
|
*/
|
|
2305
2305
|
ConfigRuleName: ConfigRuleName;
|
|
2306
2306
|
/**
|
|
2307
|
-
* An exception list of resource exception keys to be processed with the current request.
|
|
2307
|
+
* An exception list of resource exception keys to be processed with the current request. Config adds exception for each resource key. For example, Config adds 3 exceptions for 3 resource keys.
|
|
2308
2308
|
*/
|
|
2309
2309
|
ResourceKeys?: RemediationExceptionResourceKeys;
|
|
2310
2310
|
/**
|
|
2311
|
-
* The maximum number of RemediationExceptionResourceKey returned on each page. The default is 25. If you specify 0,
|
|
2311
|
+
* The maximum number of RemediationExceptionResourceKey returned on each page. The default is 25. If you specify 0, Config uses the default.
|
|
2312
2312
|
*/
|
|
2313
2313
|
Limit?: Limit;
|
|
2314
2314
|
/**
|
|
@@ -2328,7 +2328,7 @@ declare namespace ConfigService {
|
|
|
2328
2328
|
}
|
|
2329
2329
|
export interface DescribeRemediationExecutionStatusRequest {
|
|
2330
2330
|
/**
|
|
2331
|
-
* A list of
|
|
2331
|
+
* A list of Config rule names.
|
|
2332
2332
|
*/
|
|
2333
2333
|
ConfigRuleName: ConfigRuleName;
|
|
2334
2334
|
/**
|
|
@@ -2336,7 +2336,7 @@ declare namespace ConfigService {
|
|
|
2336
2336
|
*/
|
|
2337
2337
|
ResourceKeys?: ResourceKeys;
|
|
2338
2338
|
/**
|
|
2339
|
-
* The maximum number of RemediationExecutionStatuses returned on each page. The default is maximum. If you specify 0,
|
|
2339
|
+
* The maximum number of RemediationExecutionStatuses returned on each page. The default is maximum. If you specify 0, Config uses the default.
|
|
2340
2340
|
*/
|
|
2341
2341
|
Limit?: Limit;
|
|
2342
2342
|
/**
|
|
@@ -2356,7 +2356,7 @@ declare namespace ConfigService {
|
|
|
2356
2356
|
}
|
|
2357
2357
|
export interface DescribeRetentionConfigurationsRequest {
|
|
2358
2358
|
/**
|
|
2359
|
-
* A list of names of retention configurations for which you want details. If you do not specify a name,
|
|
2359
|
+
* A list of names of retention configurations for which you want details. If you do not specify a name, Config returns details for all the retention configurations for that account. Currently, Config supports only one retention configuration per region in your account.
|
|
2360
2360
|
*/
|
|
2361
2361
|
RetentionConfigurationNames?: RetentionConfigurationNameList;
|
|
2362
2362
|
/**
|
|
@@ -2379,15 +2379,15 @@ declare namespace ConfigService {
|
|
|
2379
2379
|
export type EmptiableStringWithCharLimit256 = string;
|
|
2380
2380
|
export interface Evaluation {
|
|
2381
2381
|
/**
|
|
2382
|
-
* The type of
|
|
2382
|
+
* The type of Amazon Web Services resource that was evaluated.
|
|
2383
2383
|
*/
|
|
2384
2384
|
ComplianceResourceType: StringWithCharLimit256;
|
|
2385
2385
|
/**
|
|
2386
|
-
* The ID of the
|
|
2386
|
+
* The ID of the Amazon Web Services resource that was evaluated.
|
|
2387
2387
|
*/
|
|
2388
2388
|
ComplianceResourceId: BaseResourceId;
|
|
2389
2389
|
/**
|
|
2390
|
-
* Indicates whether the
|
|
2390
|
+
* Indicates whether the Amazon Web Services resource complies with the Config rule that it was evaluated against. For the Evaluation data type, Config supports only the COMPLIANT, NON_COMPLIANT, and NOT_APPLICABLE values. Config does not support the INSUFFICIENT_DATA value for this data type. Similarly, Config does not accept INSUFFICIENT_DATA as the value for ComplianceType from a PutEvaluations request. For example, an Lambda function for a custom Config rule cannot pass an INSUFFICIENT_DATA value to Config.
|
|
2391
2391
|
*/
|
|
2392
2392
|
ComplianceType: ComplianceType;
|
|
2393
2393
|
/**
|
|
@@ -2395,7 +2395,7 @@ declare namespace ConfigService {
|
|
|
2395
2395
|
*/
|
|
2396
2396
|
Annotation?: StringWithCharLimit256;
|
|
2397
2397
|
/**
|
|
2398
|
-
* The time of the event in
|
|
2398
|
+
* The time of the event in Config that triggered the evaluation. For event-based evaluations, the time indicates when Config created the configuration item that triggered the evaluation. For periodic evaluations, the time indicates when Config triggered the evaluation at the frequency that you specified (for example, every 24 hours).
|
|
2399
2399
|
*/
|
|
2400
2400
|
OrderingTimestamp: OrderingTimestamp;
|
|
2401
2401
|
}
|
|
@@ -2405,15 +2405,15 @@ declare namespace ConfigService {
|
|
|
2405
2405
|
*/
|
|
2406
2406
|
EvaluationResultIdentifier?: EvaluationResultIdentifier;
|
|
2407
2407
|
/**
|
|
2408
|
-
* Indicates whether the
|
|
2408
|
+
* Indicates whether the Amazon Web Services resource complies with the Config rule that evaluated it. For the EvaluationResult data type, Config supports only the COMPLIANT, NON_COMPLIANT, and NOT_APPLICABLE values. Config does not support the INSUFFICIENT_DATA value for the EvaluationResult data type.
|
|
2409
2409
|
*/
|
|
2410
2410
|
ComplianceType?: ComplianceType;
|
|
2411
2411
|
/**
|
|
2412
|
-
* The time when
|
|
2412
|
+
* The time when Config recorded the evaluation result.
|
|
2413
2413
|
*/
|
|
2414
2414
|
ResultRecordedTime?: _Date;
|
|
2415
2415
|
/**
|
|
2416
|
-
* The time when the
|
|
2416
|
+
* The time when the Config rule evaluated the Amazon Web Services resource.
|
|
2417
2417
|
*/
|
|
2418
2418
|
ConfigRuleInvokedTime?: _Date;
|
|
2419
2419
|
/**
|
|
@@ -2421,31 +2421,31 @@ declare namespace ConfigService {
|
|
|
2421
2421
|
*/
|
|
2422
2422
|
Annotation?: StringWithCharLimit256;
|
|
2423
2423
|
/**
|
|
2424
|
-
* An encrypted token that associates an evaluation with an
|
|
2424
|
+
* An encrypted token that associates an evaluation with an Config rule. The token identifies the rule, the Amazon Web Services resource being evaluated, and the event that triggered the evaluation.
|
|
2425
2425
|
*/
|
|
2426
2426
|
ResultToken?: String;
|
|
2427
2427
|
}
|
|
2428
2428
|
export interface EvaluationResultIdentifier {
|
|
2429
2429
|
/**
|
|
2430
|
-
* Identifies an
|
|
2430
|
+
* Identifies an Config rule used to evaluate an Amazon Web Services resource, and provides the type and ID of the evaluated resource.
|
|
2431
2431
|
*/
|
|
2432
2432
|
EvaluationResultQualifier?: EvaluationResultQualifier;
|
|
2433
2433
|
/**
|
|
2434
|
-
* The time of the event that triggered the evaluation of your
|
|
2434
|
+
* The time of the event that triggered the evaluation of your Amazon Web Services resources. The time can indicate when Config delivered a configuration item change notification, or it can indicate when Config delivered the configuration snapshot, depending on which event triggered the evaluation.
|
|
2435
2435
|
*/
|
|
2436
2436
|
OrderingTimestamp?: _Date;
|
|
2437
2437
|
}
|
|
2438
2438
|
export interface EvaluationResultQualifier {
|
|
2439
2439
|
/**
|
|
2440
|
-
* The name of the
|
|
2440
|
+
* The name of the Config rule that was used in the evaluation.
|
|
2441
2441
|
*/
|
|
2442
2442
|
ConfigRuleName?: ConfigRuleName;
|
|
2443
2443
|
/**
|
|
2444
|
-
* The type of
|
|
2444
|
+
* The type of Amazon Web Services resource that was evaluated.
|
|
2445
2445
|
*/
|
|
2446
2446
|
ResourceType?: StringWithCharLimit256;
|
|
2447
2447
|
/**
|
|
2448
|
-
* The ID of the evaluated
|
|
2448
|
+
* The ID of the evaluated Amazon Web Services resource.
|
|
2449
2449
|
*/
|
|
2450
2450
|
ResourceId?: BaseResourceId;
|
|
2451
2451
|
}
|
|
@@ -2462,15 +2462,15 @@ declare namespace ConfigService {
|
|
|
2462
2462
|
export type Expression = string;
|
|
2463
2463
|
export interface ExternalEvaluation {
|
|
2464
2464
|
/**
|
|
2465
|
-
* The evaluated compliance resource type.
|
|
2465
|
+
* The evaluated compliance resource type. Config accepts AWS::::Account resource type.
|
|
2466
2466
|
*/
|
|
2467
2467
|
ComplianceResourceType: StringWithCharLimit256;
|
|
2468
2468
|
/**
|
|
2469
|
-
* The evaluated compliance resource ID.
|
|
2469
|
+
* The evaluated compliance resource ID. Config accepts only Amazon Web Services account ID.
|
|
2470
2470
|
*/
|
|
2471
2471
|
ComplianceResourceId: BaseResourceId;
|
|
2472
2472
|
/**
|
|
2473
|
-
* The compliance of the
|
|
2473
|
+
* The compliance of the Amazon Web Services resource. The valid values are COMPLIANT, NON_COMPLIANT, and NOT_APPLICABLE.
|
|
2474
2474
|
*/
|
|
2475
2475
|
ComplianceType: ComplianceType;
|
|
2476
2476
|
/**
|
|
@@ -2484,7 +2484,7 @@ declare namespace ConfigService {
|
|
|
2484
2484
|
}
|
|
2485
2485
|
export interface FailedDeleteRemediationExceptionsBatch {
|
|
2486
2486
|
/**
|
|
2487
|
-
* Returns a failure message for delete remediation exception. For example,
|
|
2487
|
+
* Returns a failure message for delete remediation exception. For example, Config creates an exception due to an internal error.
|
|
2488
2488
|
*/
|
|
2489
2489
|
FailureMessage?: String;
|
|
2490
2490
|
/**
|
|
@@ -2529,7 +2529,7 @@ declare namespace ConfigService {
|
|
|
2529
2529
|
*/
|
|
2530
2530
|
ConfigurationAggregatorName: ConfigurationAggregatorName;
|
|
2531
2531
|
/**
|
|
2532
|
-
* The name of the
|
|
2532
|
+
* The name of the Config rule for which you want compliance information.
|
|
2533
2533
|
*/
|
|
2534
2534
|
ConfigRuleName: ConfigRuleName;
|
|
2535
2535
|
/**
|
|
@@ -2541,11 +2541,11 @@ declare namespace ConfigService {
|
|
|
2541
2541
|
*/
|
|
2542
2542
|
AwsRegion: AwsRegion;
|
|
2543
2543
|
/**
|
|
2544
|
-
* The resource compliance status. For the GetAggregateComplianceDetailsByConfigRuleRequest data type,
|
|
2544
|
+
* The resource compliance status. For the GetAggregateComplianceDetailsByConfigRuleRequest data type, Config supports only the COMPLIANT and NON_COMPLIANT. Config does not support the NOT_APPLICABLE and INSUFFICIENT_DATA values.
|
|
2545
2545
|
*/
|
|
2546
2546
|
ComplianceType?: ComplianceType;
|
|
2547
2547
|
/**
|
|
2548
|
-
* The maximum number of evaluation results returned on each page. The default is 50. You cannot specify a number greater than 100. If you specify 0,
|
|
2548
|
+
* The maximum number of evaluation results returned on each page. The default is 50. You cannot specify a number greater than 100. If you specify 0, Config uses the default.
|
|
2549
2549
|
*/
|
|
2550
2550
|
Limit?: Limit;
|
|
2551
2551
|
/**
|
|
@@ -2577,7 +2577,7 @@ declare namespace ConfigService {
|
|
|
2577
2577
|
*/
|
|
2578
2578
|
GroupByKey?: ConfigRuleComplianceSummaryGroupKey;
|
|
2579
2579
|
/**
|
|
2580
|
-
* The maximum number of evaluation results returned on each page. The default is 1000. You cannot specify a number greater than 1000. If you specify 0,
|
|
2580
|
+
* The maximum number of evaluation results returned on each page. The default is 1000. You cannot specify a number greater than 1000. If you specify 0, Config uses the default.
|
|
2581
2581
|
*/
|
|
2582
2582
|
Limit?: GroupByAPILimit;
|
|
2583
2583
|
/**
|
|
@@ -2609,11 +2609,11 @@ declare namespace ConfigService {
|
|
|
2609
2609
|
*/
|
|
2610
2610
|
Filters?: AggregateConformancePackComplianceSummaryFilters;
|
|
2611
2611
|
/**
|
|
2612
|
-
* Groups the result based on
|
|
2612
|
+
* Groups the result based on Amazon Web Services account ID or Amazon Web Services Region.
|
|
2613
2613
|
*/
|
|
2614
2614
|
GroupByKey?: AggregateConformancePackComplianceSummaryGroupKey;
|
|
2615
2615
|
/**
|
|
2616
|
-
* The maximum number of results returned on each page. The default is maximum. If you specify 0,
|
|
2616
|
+
* The maximum number of results returned on each page. The default is maximum. If you specify 0, Config uses the default.
|
|
2617
2617
|
*/
|
|
2618
2618
|
Limit?: Limit;
|
|
2619
2619
|
/**
|
|
@@ -2627,7 +2627,7 @@ declare namespace ConfigService {
|
|
|
2627
2627
|
*/
|
|
2628
2628
|
AggregateConformancePackComplianceSummaries?: AggregateConformancePackComplianceSummaryList;
|
|
2629
2629
|
/**
|
|
2630
|
-
* Groups the result based on
|
|
2630
|
+
* Groups the result based on Amazon Web Services account ID or Amazon Web Services Region.
|
|
2631
2631
|
*/
|
|
2632
2632
|
GroupByKey?: StringWithCharLimit256;
|
|
2633
2633
|
/**
|
|
@@ -2649,7 +2649,7 @@ declare namespace ConfigService {
|
|
|
2649
2649
|
*/
|
|
2650
2650
|
GroupByKey?: ResourceCountGroupKey;
|
|
2651
2651
|
/**
|
|
2652
|
-
* The maximum number of GroupedResourceCount objects returned on each page. The default is 1000. You cannot specify a number greater than 1000. If you specify 0,
|
|
2652
|
+
* The maximum number of GroupedResourceCount objects returned on each page. The default is 1000. You cannot specify a number greater than 1000. If you specify 0, Config uses the default.
|
|
2653
2653
|
*/
|
|
2654
2654
|
Limit?: GroupByAPILimit;
|
|
2655
2655
|
/**
|
|
@@ -2693,7 +2693,7 @@ declare namespace ConfigService {
|
|
|
2693
2693
|
}
|
|
2694
2694
|
export interface GetComplianceDetailsByConfigRuleRequest {
|
|
2695
2695
|
/**
|
|
2696
|
-
* The name of the
|
|
2696
|
+
* The name of the Config rule for which you want compliance information.
|
|
2697
2697
|
*/
|
|
2698
2698
|
ConfigRuleName: StringWithCharLimit64;
|
|
2699
2699
|
/**
|
|
@@ -2701,7 +2701,7 @@ declare namespace ConfigService {
|
|
|
2701
2701
|
*/
|
|
2702
2702
|
ComplianceTypes?: ComplianceTypes;
|
|
2703
2703
|
/**
|
|
2704
|
-
* The maximum number of evaluation results returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0,
|
|
2704
|
+
* The maximum number of evaluation results returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0, Config uses the default.
|
|
2705
2705
|
*/
|
|
2706
2706
|
Limit?: Limit;
|
|
2707
2707
|
/**
|
|
@@ -2711,7 +2711,7 @@ declare namespace ConfigService {
|
|
|
2711
2711
|
}
|
|
2712
2712
|
export interface GetComplianceDetailsByConfigRuleResponse {
|
|
2713
2713
|
/**
|
|
2714
|
-
* Indicates whether the
|
|
2714
|
+
* Indicates whether the Amazon Web Services resource complies with the specified Config rule.
|
|
2715
2715
|
*/
|
|
2716
2716
|
EvaluationResults?: EvaluationResults;
|
|
2717
2717
|
/**
|
|
@@ -2721,11 +2721,11 @@ declare namespace ConfigService {
|
|
|
2721
2721
|
}
|
|
2722
2722
|
export interface GetComplianceDetailsByResourceRequest {
|
|
2723
2723
|
/**
|
|
2724
|
-
* The type of the
|
|
2724
|
+
* The type of the Amazon Web Services resource for which you want compliance information.
|
|
2725
2725
|
*/
|
|
2726
2726
|
ResourceType: StringWithCharLimit256;
|
|
2727
2727
|
/**
|
|
2728
|
-
* The ID of the
|
|
2728
|
+
* The ID of the Amazon Web Services resource for which you want compliance information.
|
|
2729
2729
|
*/
|
|
2730
2730
|
ResourceId: BaseResourceId;
|
|
2731
2731
|
/**
|
|
@@ -2739,7 +2739,7 @@ declare namespace ConfigService {
|
|
|
2739
2739
|
}
|
|
2740
2740
|
export interface GetComplianceDetailsByResourceResponse {
|
|
2741
2741
|
/**
|
|
2742
|
-
* Indicates whether the specified
|
|
2742
|
+
* Indicates whether the specified Amazon Web Services resource complies each Config rule.
|
|
2743
2743
|
*/
|
|
2744
2744
|
EvaluationResults?: EvaluationResults;
|
|
2745
2745
|
/**
|
|
@@ -2749,13 +2749,13 @@ declare namespace ConfigService {
|
|
|
2749
2749
|
}
|
|
2750
2750
|
export interface GetComplianceSummaryByConfigRuleResponse {
|
|
2751
2751
|
/**
|
|
2752
|
-
* The number of
|
|
2752
|
+
* The number of Config rules that are compliant and the number that are noncompliant, up to a maximum of 25 for each.
|
|
2753
2753
|
*/
|
|
2754
2754
|
ComplianceSummary?: ComplianceSummary;
|
|
2755
2755
|
}
|
|
2756
2756
|
export interface GetComplianceSummaryByResourceTypeRequest {
|
|
2757
2757
|
/**
|
|
2758
|
-
* Specify one or more resource types to get the number of resources that are compliant and the number that are noncompliant for each resource type. For this request, you can specify an
|
|
2758
|
+
* Specify one or more resource types to get the number of resources that are compliant and the number that are noncompliant for each resource type. For this request, you can specify an Amazon Web Services resource type such as AWS::EC2::Instance. You can specify that the resource type is an Amazon Web Services account by specifying AWS::::Account.
|
|
2759
2759
|
*/
|
|
2760
2760
|
ResourceTypes?: ResourceTypes;
|
|
2761
2761
|
}
|
|
@@ -2776,7 +2776,7 @@ declare namespace ConfigService {
|
|
|
2776
2776
|
*/
|
|
2777
2777
|
Filters?: ConformancePackEvaluationFilters;
|
|
2778
2778
|
/**
|
|
2779
|
-
* The maximum number of evaluation results returned on each page. If you do no specify a number,
|
|
2779
|
+
* The maximum number of evaluation results returned on each page. If you do no specify a number, Config uses the default. The default is 100.
|
|
2780
2780
|
*/
|
|
2781
2781
|
Limit?: GetConformancePackComplianceDetailsLimit;
|
|
2782
2782
|
/**
|
|
@@ -2824,11 +2824,11 @@ declare namespace ConfigService {
|
|
|
2824
2824
|
}
|
|
2825
2825
|
export interface GetDiscoveredResourceCountsRequest {
|
|
2826
2826
|
/**
|
|
2827
|
-
* The comma-separated list that specifies the resource types that you want
|
|
2827
|
+
* The comma-separated list that specifies the resource types that you want Config to return (for example, "AWS::EC2::Instance", "AWS::IAM::User"). If a value for resourceTypes is not specified, Config returns all resource types that Config is recording in the region for your account. If the configuration recorder is turned off, Config returns an empty list of ResourceCount objects. If the configuration recorder is not recording a specific resource type (for example, S3 buckets), that resource type is not returned in the list of ResourceCount objects.
|
|
2828
2828
|
*/
|
|
2829
2829
|
resourceTypes?: ResourceTypes;
|
|
2830
2830
|
/**
|
|
2831
|
-
* The maximum number of ResourceCount objects returned on each page. The default is 100. You cannot specify a number greater than 100. If you specify 0,
|
|
2831
|
+
* The maximum number of ResourceCount objects returned on each page. The default is 100. You cannot specify a number greater than 100. If you specify 0, Config uses the default.
|
|
2832
2832
|
*/
|
|
2833
2833
|
limit?: Limit;
|
|
2834
2834
|
/**
|
|
@@ -2838,7 +2838,7 @@ declare namespace ConfigService {
|
|
|
2838
2838
|
}
|
|
2839
2839
|
export interface GetDiscoveredResourceCountsResponse {
|
|
2840
2840
|
/**
|
|
2841
|
-
* The total number of resources that
|
|
2841
|
+
* The total number of resources that Config is recording in the region for your account. If you specify resource types in the request, Config returns only the total number of resources for those resource types. Example Config is recording three resource types in the US East (Ohio) Region for your account: 25 EC2 instances, 20 IAM users, and 15 S3 buckets, for a total of 60 resources. You make a call to the GetDiscoveredResourceCounts action and specify the resource type, "AWS::EC2::Instances", in the request. Config returns 25 for totalDiscoveredResources.
|
|
2842
2842
|
*/
|
|
2843
2843
|
totalDiscoveredResources?: Long;
|
|
2844
2844
|
/**
|
|
@@ -2860,7 +2860,7 @@ declare namespace ConfigService {
|
|
|
2860
2860
|
*/
|
|
2861
2861
|
Filters?: StatusDetailFilters;
|
|
2862
2862
|
/**
|
|
2863
|
-
* The maximum number of OrganizationConfigRuleDetailedStatus returned on each page. If you do not specify a number,
|
|
2863
|
+
* The maximum number of OrganizationConfigRuleDetailedStatus returned on each page. If you do not specify a number, Config uses the default. The default is 100.
|
|
2864
2864
|
*/
|
|
2865
2865
|
Limit?: CosmosPageLimit;
|
|
2866
2866
|
/**
|
|
@@ -2888,7 +2888,7 @@ declare namespace ConfigService {
|
|
|
2888
2888
|
*/
|
|
2889
2889
|
Filters?: OrganizationResourceDetailedStatusFilters;
|
|
2890
2890
|
/**
|
|
2891
|
-
* The maximum number of OrganizationConformancePackDetailedStatuses returned on each page. If you do not specify a number,
|
|
2891
|
+
* The maximum number of OrganizationConformancePackDetailedStatuses returned on each page. If you do not specify a number, Config uses the default. The default is 100.
|
|
2892
2892
|
*/
|
|
2893
2893
|
Limit?: CosmosPageLimit;
|
|
2894
2894
|
/**
|
|
@@ -2928,7 +2928,7 @@ declare namespace ConfigService {
|
|
|
2928
2928
|
*/
|
|
2929
2929
|
chronologicalOrder?: ChronologicalOrder;
|
|
2930
2930
|
/**
|
|
2931
|
-
* The maximum number of configuration items returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0,
|
|
2931
|
+
* The maximum number of configuration items returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0, Config uses the default.
|
|
2932
2932
|
*/
|
|
2933
2933
|
limit?: Limit;
|
|
2934
2934
|
/**
|
|
@@ -2980,7 +2980,7 @@ declare namespace ConfigService {
|
|
|
2980
2980
|
*/
|
|
2981
2981
|
ConfigurationAggregatorName: ConfigurationAggregatorName;
|
|
2982
2982
|
/**
|
|
2983
|
-
* The type of resources that you want
|
|
2983
|
+
* The type of resources that you want Config to list in the response.
|
|
2984
2984
|
*/
|
|
2985
2985
|
ResourceType: ResourceType;
|
|
2986
2986
|
/**
|
|
@@ -2988,7 +2988,7 @@ declare namespace ConfigService {
|
|
|
2988
2988
|
*/
|
|
2989
2989
|
Filters?: ResourceFilters;
|
|
2990
2990
|
/**
|
|
2991
|
-
* The maximum number of resource identifiers returned on each page. You cannot specify a number greater than 100. If you specify 0,
|
|
2991
|
+
* The maximum number of resource identifiers returned on each page. You cannot specify a number greater than 100. If you specify 0, Config uses the default.
|
|
2992
2992
|
*/
|
|
2993
2993
|
Limit?: Limit;
|
|
2994
2994
|
/**
|
|
@@ -3008,23 +3008,23 @@ declare namespace ConfigService {
|
|
|
3008
3008
|
}
|
|
3009
3009
|
export interface ListDiscoveredResourcesRequest {
|
|
3010
3010
|
/**
|
|
3011
|
-
* The type of resources that you want
|
|
3011
|
+
* The type of resources that you want Config to list in the response.
|
|
3012
3012
|
*/
|
|
3013
3013
|
resourceType: ResourceType;
|
|
3014
3014
|
/**
|
|
3015
|
-
* The IDs of only those resources that you want
|
|
3015
|
+
* The IDs of only those resources that you want Config to list in the response. If you do not specify this parameter, Config lists all resources of the specified type that it has discovered.
|
|
3016
3016
|
*/
|
|
3017
3017
|
resourceIds?: ResourceIdList;
|
|
3018
3018
|
/**
|
|
3019
|
-
* The custom name of only those resources that you want
|
|
3019
|
+
* The custom name of only those resources that you want Config to list in the response. If you do not specify this parameter, Config lists all resources of the specified type that it has discovered.
|
|
3020
3020
|
*/
|
|
3021
3021
|
resourceName?: ResourceName;
|
|
3022
3022
|
/**
|
|
3023
|
-
* The maximum number of resource identifiers returned on each page. The default is 100. You cannot specify a number greater than 100. If you specify 0,
|
|
3023
|
+
* The maximum number of resource identifiers returned on each page. The default is 100. You cannot specify a number greater than 100. If you specify 0, Config uses the default.
|
|
3024
3024
|
*/
|
|
3025
3025
|
limit?: Limit;
|
|
3026
3026
|
/**
|
|
3027
|
-
* Specifies whether
|
|
3027
|
+
* Specifies whether Config includes deleted resources in the results. By default, deleted resources are not included.
|
|
3028
3028
|
*/
|
|
3029
3029
|
includeDeletedResources?: Boolean;
|
|
3030
3030
|
/**
|
|
@@ -3034,7 +3034,7 @@ declare namespace ConfigService {
|
|
|
3034
3034
|
}
|
|
3035
3035
|
export interface ListDiscoveredResourcesResponse {
|
|
3036
3036
|
/**
|
|
3037
|
-
* The details that identify a resource that is discovered by
|
|
3037
|
+
* The details that identify a resource that is discovered by Config, including the resource type, ID, and (if available) the custom resource name.
|
|
3038
3038
|
*/
|
|
3039
3039
|
resourceIdentifiers?: ResourceIdentifierList;
|
|
3040
3040
|
/**
|
|
@@ -3068,7 +3068,7 @@ declare namespace ConfigService {
|
|
|
3068
3068
|
*/
|
|
3069
3069
|
ResourceArn: AmazonResourceName;
|
|
3070
3070
|
/**
|
|
3071
|
-
* The maximum number of tags returned on each page. The limit maximum is 50. You cannot specify a number greater than 50. If you specify 0,
|
|
3071
|
+
* The maximum number of tags returned on each page. The limit maximum is 50. You cannot specify a number greater than 50. If you specify 0, Config uses the default.
|
|
3072
3072
|
*/
|
|
3073
3073
|
Limit?: Limit;
|
|
3074
3074
|
/**
|
|
@@ -3099,7 +3099,7 @@ declare namespace ConfigService {
|
|
|
3099
3099
|
*/
|
|
3100
3100
|
ConfigRuleName: StringWithCharLimit64;
|
|
3101
3101
|
/**
|
|
3102
|
-
* Indicates deployment status for config rule in the member account. When master account calls PutOrganizationConfigRule action for the first time, config rule status is created in the member account. When master account calls PutOrganizationConfigRule action for the second time, config rule status is updated in the member account. Config rule status is deleted when the master account deletes OrganizationConfigRule and disables service access for config-multiaccountsetup.amazonaws.com.
|
|
3102
|
+
* Indicates deployment status for config rule in the member account. When master account calls PutOrganizationConfigRule action for the first time, config rule status is created in the member account. When master account calls PutOrganizationConfigRule action for the second time, config rule status is updated in the member account. Config rule status is deleted when the master account deletes OrganizationConfigRule and disables service access for config-multiaccountsetup.amazonaws.com. Config sets the state of the rule to: CREATE_SUCCESSFUL when config rule has been created in the member account. CREATE_IN_PROGRESS when config rule is being created in the member account. CREATE_FAILED when config rule creation has failed in the member account. DELETE_FAILED when config rule deletion has failed in the member account. DELETE_IN_PROGRESS when config rule is being deleted in the member account. DELETE_SUCCESSFUL when config rule has been deleted in the member account. UPDATE_SUCCESSFUL when config rule has been updated in the member account. UPDATE_IN_PROGRESS when config rule is being updated in the member account. UPDATE_FAILED when config rule deletion has failed in the member account.
|
|
3103
3103
|
*/
|
|
3104
3104
|
MemberAccountRuleStatus: MemberAccountRuleStatus;
|
|
3105
3105
|
/**
|
|
@@ -3121,7 +3121,7 @@ declare namespace ConfigService {
|
|
|
3121
3121
|
export type OrderingTimestamp = Date;
|
|
3122
3122
|
export interface OrganizationAggregationSource {
|
|
3123
3123
|
/**
|
|
3124
|
-
* ARN of the IAM role used to retrieve
|
|
3124
|
+
* ARN of the IAM role used to retrieve Amazon Web Services Organization details associated with the aggregator account.
|
|
3125
3125
|
*/
|
|
3126
3126
|
RoleArn: String;
|
|
3127
3127
|
/**
|
|
@@ -3129,7 +3129,7 @@ declare namespace ConfigService {
|
|
|
3129
3129
|
*/
|
|
3130
3130
|
AwsRegions?: AggregatorRegionList;
|
|
3131
3131
|
/**
|
|
3132
|
-
* If true, aggregate existing
|
|
3132
|
+
* If true, aggregate existing Config regions and future regions.
|
|
3133
3133
|
*/
|
|
3134
3134
|
AllAwsRegions?: Boolean;
|
|
3135
3135
|
}
|
|
@@ -3168,7 +3168,7 @@ declare namespace ConfigService {
|
|
|
3168
3168
|
*/
|
|
3169
3169
|
OrganizationConfigRuleName: OrganizationConfigRuleName;
|
|
3170
3170
|
/**
|
|
3171
|
-
* Indicates deployment status of an organization config rule. When master account calls PutOrganizationConfigRule action for the first time, config rule status is created in all the member accounts. When master account calls PutOrganizationConfigRule action for the second time, config rule status is updated in all the member accounts. Additionally, config rule status is updated when one or more member accounts join or leave an organization. Config rule status is deleted when the master account deletes OrganizationConfigRule in all the member accounts and disables service access for config-multiaccountsetup.amazonaws.com.
|
|
3171
|
+
* Indicates deployment status of an organization config rule. When master account calls PutOrganizationConfigRule action for the first time, config rule status is created in all the member accounts. When master account calls PutOrganizationConfigRule action for the second time, config rule status is updated in all the member accounts. Additionally, config rule status is updated when one or more member accounts join or leave an organization. Config rule status is deleted when the master account deletes OrganizationConfigRule in all the member accounts and disables service access for config-multiaccountsetup.amazonaws.com. Config sets the state of the rule to: CREATE_SUCCESSFUL when an organization config rule has been successfully created in all the member accounts. CREATE_IN_PROGRESS when an organization config rule creation is in progress. CREATE_FAILED when an organization config rule creation failed in one or more member accounts within that organization. DELETE_FAILED when an organization config rule deletion failed in one or more member accounts within that organization. DELETE_IN_PROGRESS when an organization config rule deletion is in progress. DELETE_SUCCESSFUL when an organization config rule has been successfully deleted from all the member accounts. UPDATE_SUCCESSFUL when an organization config rule has been successfully updated in all the member accounts. UPDATE_IN_PROGRESS when an organization config rule update is in progress. UPDATE_FAILED when an organization config rule update failed in one or more member accounts within that organization.
|
|
3172
3172
|
*/
|
|
3173
3173
|
OrganizationRuleStatus: OrganizationRuleStatus;
|
|
3174
3174
|
/**
|
|
@@ -3198,7 +3198,7 @@ declare namespace ConfigService {
|
|
|
3198
3198
|
*/
|
|
3199
3199
|
OrganizationConformancePackArn: StringWithCharLimit256;
|
|
3200
3200
|
/**
|
|
3201
|
-
* Amazon S3 bucket where
|
|
3201
|
+
* The name of the Amazon S3 bucket where Config stores conformance pack templates. This field is optional.
|
|
3202
3202
|
*/
|
|
3203
3203
|
DeliveryS3Bucket?: DeliveryS3Bucket;
|
|
3204
3204
|
/**
|
|
@@ -3228,7 +3228,7 @@ declare namespace ConfigService {
|
|
|
3228
3228
|
*/
|
|
3229
3229
|
ConformancePackName: StringWithCharLimit256;
|
|
3230
3230
|
/**
|
|
3231
|
-
* Indicates deployment status for conformance pack in a member account. When master account calls PutOrganizationConformancePack action for the first time, conformance pack status is created in the member account. When master account calls PutOrganizationConformancePack action for the second time, conformance pack status is updated in the member account. Conformance pack status is deleted when the master account deletes OrganizationConformancePack and disables service access for config-multiaccountsetup.amazonaws.com.
|
|
3231
|
+
* Indicates deployment status for conformance pack in a member account. When master account calls PutOrganizationConformancePack action for the first time, conformance pack status is created in the member account. When master account calls PutOrganizationConformancePack action for the second time, conformance pack status is updated in the member account. Conformance pack status is deleted when the master account deletes OrganizationConformancePack and disables service access for config-multiaccountsetup.amazonaws.com. Config sets the state of the conformance pack to: CREATE_SUCCESSFUL when conformance pack has been created in the member account. CREATE_IN_PROGRESS when conformance pack is being created in the member account. CREATE_FAILED when conformance pack creation has failed in the member account. DELETE_FAILED when conformance pack deletion has failed in the member account. DELETE_IN_PROGRESS when conformance pack is being deleted in the member account. DELETE_SUCCESSFUL when conformance pack has been deleted in the member account. UPDATE_SUCCESSFUL when conformance pack has been updated in the member account. UPDATE_IN_PROGRESS when conformance pack is being updated in the member account. UPDATE_FAILED when conformance pack deletion has failed in the member account.
|
|
3232
3232
|
*/
|
|
3233
3233
|
Status: OrganizationResourceDetailedStatus;
|
|
3234
3234
|
/**
|
|
@@ -3253,7 +3253,7 @@ declare namespace ConfigService {
|
|
|
3253
3253
|
*/
|
|
3254
3254
|
OrganizationConformancePackName: OrganizationConformancePackName;
|
|
3255
3255
|
/**
|
|
3256
|
-
* Indicates deployment status of an organization conformance pack. When master account calls PutOrganizationConformancePack for the first time, conformance pack status is created in all the member accounts. When master account calls PutOrganizationConformancePack for the second time, conformance pack status is updated in all the member accounts. Additionally, conformance pack status is updated when one or more member accounts join or leave an organization. Conformance pack status is deleted when the master account deletes OrganizationConformancePack in all the member accounts and disables service access for config-multiaccountsetup.amazonaws.com.
|
|
3256
|
+
* Indicates deployment status of an organization conformance pack. When master account calls PutOrganizationConformancePack for the first time, conformance pack status is created in all the member accounts. When master account calls PutOrganizationConformancePack for the second time, conformance pack status is updated in all the member accounts. Additionally, conformance pack status is updated when one or more member accounts join or leave an organization. Conformance pack status is deleted when the master account deletes OrganizationConformancePack in all the member accounts and disables service access for config-multiaccountsetup.amazonaws.com. Config sets the state of the conformance pack to: CREATE_SUCCESSFUL when an organization conformance pack has been successfully created in all the member accounts. CREATE_IN_PROGRESS when an organization conformance pack creation is in progress. CREATE_FAILED when an organization conformance pack creation failed in one or more member accounts within that organization. DELETE_FAILED when an organization conformance pack deletion failed in one or more member accounts within that organization. DELETE_IN_PROGRESS when an organization conformance pack deletion is in progress. DELETE_SUCCESSFUL when an organization conformance pack has been successfully deleted from all the member accounts. UPDATE_SUCCESSFUL when an organization conformance pack has been successfully updated in all the member accounts. UPDATE_IN_PROGRESS when an organization conformance pack update is in progress. UPDATE_FAILED when an organization conformance pack update failed in one or more member accounts within that organization.
|
|
3257
3257
|
*/
|
|
3258
3258
|
Status: OrganizationResourceStatus;
|
|
3259
3259
|
/**
|
|
@@ -3281,7 +3281,7 @@ declare namespace ConfigService {
|
|
|
3281
3281
|
*/
|
|
3282
3282
|
LambdaFunctionArn: StringWithCharLimit256;
|
|
3283
3283
|
/**
|
|
3284
|
-
* The type of notification that triggers
|
|
3284
|
+
* The type of notification that triggers Config to run an evaluation for a rule. You can specify the following notification types: ConfigurationItemChangeNotification - Triggers an evaluation when Config delivers a configuration item as a result of a resource change. OversizedConfigurationItemChangeNotification - Triggers an evaluation when Config delivers an oversized configuration item. Config may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS. ScheduledNotification - Triggers a periodic evaluation at the frequency specified for MaximumExecutionFrequency.
|
|
3285
3285
|
*/
|
|
3286
3286
|
OrganizationConfigRuleTriggerTypes: OrganizationConfigRuleTriggerTypes;
|
|
3287
3287
|
/**
|
|
@@ -3289,15 +3289,15 @@ declare namespace ConfigService {
|
|
|
3289
3289
|
*/
|
|
3290
3290
|
InputParameters?: StringWithCharLimit2048;
|
|
3291
3291
|
/**
|
|
3292
|
-
* The maximum frequency with which
|
|
3292
|
+
* The maximum frequency with which Config runs evaluations for a rule. Your custom rule is triggered when Config delivers the configuration snapshot. For more information, see ConfigSnapshotDeliveryProperties. By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the MaximumExecutionFrequency parameter.
|
|
3293
3293
|
*/
|
|
3294
3294
|
MaximumExecutionFrequency?: MaximumExecutionFrequency;
|
|
3295
3295
|
/**
|
|
3296
|
-
* The type of the
|
|
3296
|
+
* The type of the Amazon Web Services resource that was evaluated.
|
|
3297
3297
|
*/
|
|
3298
3298
|
ResourceTypesScope?: ResourceTypesScope;
|
|
3299
3299
|
/**
|
|
3300
|
-
* The ID of the
|
|
3300
|
+
* The ID of the Amazon Web Services resource that was evaluated.
|
|
3301
3301
|
*/
|
|
3302
3302
|
ResourceIdScope?: StringWithCharLimit768;
|
|
3303
3303
|
/**
|
|
@@ -3315,7 +3315,7 @@ declare namespace ConfigService {
|
|
|
3315
3315
|
*/
|
|
3316
3316
|
Description?: StringWithCharLimit256Min0;
|
|
3317
3317
|
/**
|
|
3318
|
-
* For organization config managed rules, a predefined identifier from a list. For example, IAM_PASSWORD_POLICY is a managed rule. To reference a managed rule, see Using
|
|
3318
|
+
* For organization config managed rules, a predefined identifier from a list. For example, IAM_PASSWORD_POLICY is a managed rule. To reference a managed rule, see Using Config managed rules.
|
|
3319
3319
|
*/
|
|
3320
3320
|
RuleIdentifier: StringWithCharLimit256;
|
|
3321
3321
|
/**
|
|
@@ -3323,15 +3323,15 @@ declare namespace ConfigService {
|
|
|
3323
3323
|
*/
|
|
3324
3324
|
InputParameters?: StringWithCharLimit2048;
|
|
3325
3325
|
/**
|
|
3326
|
-
* The maximum frequency with which
|
|
3326
|
+
* The maximum frequency with which Config runs evaluations for a rule. You are using an Config managed rule that is triggered at a periodic frequency. By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the MaximumExecutionFrequency parameter.
|
|
3327
3327
|
*/
|
|
3328
3328
|
MaximumExecutionFrequency?: MaximumExecutionFrequency;
|
|
3329
3329
|
/**
|
|
3330
|
-
* The type of the
|
|
3330
|
+
* The type of the Amazon Web Services resource that was evaluated.
|
|
3331
3331
|
*/
|
|
3332
3332
|
ResourceTypesScope?: ResourceTypesScope;
|
|
3333
3333
|
/**
|
|
3334
|
-
* The ID of the
|
|
3334
|
+
* The ID of the Amazon Web Services resource that was evaluated.
|
|
3335
3335
|
*/
|
|
3336
3336
|
ResourceIdScope?: StringWithCharLimit768;
|
|
3337
3337
|
/**
|
|
@@ -3350,7 +3350,7 @@ declare namespace ConfigService {
|
|
|
3350
3350
|
*/
|
|
3351
3351
|
AccountId?: AccountId;
|
|
3352
3352
|
/**
|
|
3353
|
-
* Indicates deployment status for conformance pack in a member account. When master account calls PutOrganizationConformancePack action for the first time, conformance pack status is created in the member account. When master account calls PutOrganizationConformancePack action for the second time, conformance pack status is updated in the member account. Conformance pack status is deleted when the master account deletes OrganizationConformancePack and disables service access for config-multiaccountsetup.amazonaws.com.
|
|
3353
|
+
* Indicates deployment status for conformance pack in a member account. When master account calls PutOrganizationConformancePack action for the first time, conformance pack status is created in the member account. When master account calls PutOrganizationConformancePack action for the second time, conformance pack status is updated in the member account. Conformance pack status is deleted when the master account deletes OrganizationConformancePack and disables service access for config-multiaccountsetup.amazonaws.com. Config sets the state of the conformance pack to: CREATE_SUCCESSFUL when conformance pack has been created in the member account. CREATE_IN_PROGRESS when conformance pack is being created in the member account. CREATE_FAILED when conformance pack creation has failed in the member account. DELETE_FAILED when conformance pack deletion has failed in the member account. DELETE_IN_PROGRESS when conformance pack is being deleted in the member account. DELETE_SUCCESSFUL when conformance pack has been deleted in the member account. UPDATE_SUCCESSFUL when conformance pack has been updated in the member account. UPDATE_IN_PROGRESS when conformance pack is being updated in the member account. UPDATE_FAILED when conformance pack deletion has failed in the member account.
|
|
3354
3354
|
*/
|
|
3355
3355
|
Status?: OrganizationResourceDetailedStatus;
|
|
3356
3356
|
}
|
|
@@ -3446,7 +3446,7 @@ declare namespace ConfigService {
|
|
|
3446
3446
|
*/
|
|
3447
3447
|
TemplateBody?: TemplateBody;
|
|
3448
3448
|
/**
|
|
3449
|
-
* Amazon S3 bucket where
|
|
3449
|
+
* The name of the Amazon S3 bucket where Config stores conformance pack templates. This field is optional.
|
|
3450
3450
|
*/
|
|
3451
3451
|
DeliveryS3Bucket?: DeliveryS3Bucket;
|
|
3452
3452
|
/**
|
|
@@ -3472,15 +3472,15 @@ declare namespace ConfigService {
|
|
|
3472
3472
|
}
|
|
3473
3473
|
export interface PutEvaluationsRequest {
|
|
3474
3474
|
/**
|
|
3475
|
-
* The assessments that the
|
|
3475
|
+
* The assessments that the Lambda function performs. Each evaluation identifies an Amazon Web Services resource and indicates whether it complies with the Config rule that invokes the Lambda function.
|
|
3476
3476
|
*/
|
|
3477
3477
|
Evaluations?: Evaluations;
|
|
3478
3478
|
/**
|
|
3479
|
-
* An encrypted token that associates an evaluation with an
|
|
3479
|
+
* An encrypted token that associates an evaluation with an Config rule. Identifies the rule and the event that triggered the evaluation.
|
|
3480
3480
|
*/
|
|
3481
3481
|
ResultToken: String;
|
|
3482
3482
|
/**
|
|
3483
|
-
* Use this parameter to specify a test run for PutEvaluations. You can verify whether your
|
|
3483
|
+
* Use this parameter to specify a test run for PutEvaluations. You can verify whether your Lambda function will deliver evaluation results to Config. No updates occur to your existing evaluations, and evaluation results are not sent to Config. When TestMode is true, PutEvaluations doesn't require a valid value for the ResultToken parameter, but the value cannot be null.
|
|
3484
3484
|
*/
|
|
3485
3485
|
TestMode?: Boolean;
|
|
3486
3486
|
}
|
|
@@ -3492,7 +3492,7 @@ declare namespace ConfigService {
|
|
|
3492
3492
|
}
|
|
3493
3493
|
export interface PutExternalEvaluationRequest {
|
|
3494
3494
|
/**
|
|
3495
|
-
* The name of the
|
|
3495
|
+
* The name of the Config rule.
|
|
3496
3496
|
*/
|
|
3497
3497
|
ConfigRuleName: ConfigRuleName;
|
|
3498
3498
|
/**
|
|
@@ -3540,7 +3540,7 @@ declare namespace ConfigService {
|
|
|
3540
3540
|
*/
|
|
3541
3541
|
TemplateBody?: TemplateBody;
|
|
3542
3542
|
/**
|
|
3543
|
-
* Amazon S3 bucket where
|
|
3543
|
+
* The name of the Amazon S3 bucket where Config stores conformance pack templates. This field is optional. If used, it must be prefixed with awsconfigconforms.
|
|
3544
3544
|
*/
|
|
3545
3545
|
DeliveryS3Bucket?: DeliveryS3Bucket;
|
|
3546
3546
|
/**
|
|
@@ -3552,7 +3552,7 @@ declare namespace ConfigService {
|
|
|
3552
3552
|
*/
|
|
3553
3553
|
ConformancePackInputParameters?: ConformancePackInputParameters;
|
|
3554
3554
|
/**
|
|
3555
|
-
* A list of
|
|
3555
|
+
* A list of Amazon Web Services accounts to be excluded from an organization conformance pack while deploying a conformance pack.
|
|
3556
3556
|
*/
|
|
3557
3557
|
ExcludedAccounts?: ExcludedAccounts;
|
|
3558
3558
|
}
|
|
@@ -3576,11 +3576,11 @@ declare namespace ConfigService {
|
|
|
3576
3576
|
}
|
|
3577
3577
|
export interface PutRemediationExceptionsRequest {
|
|
3578
3578
|
/**
|
|
3579
|
-
* The name of the
|
|
3579
|
+
* The name of the Config rule for which you want to create remediation exception.
|
|
3580
3580
|
*/
|
|
3581
3581
|
ConfigRuleName: ConfigRuleName;
|
|
3582
3582
|
/**
|
|
3583
|
-
* An exception list of resource exception keys to be processed with the current request.
|
|
3583
|
+
* An exception list of resource exception keys to be processed with the current request. Config adds exception for each resource key. For example, Config adds 3 exceptions for 3 resource keys.
|
|
3584
3584
|
*/
|
|
3585
3585
|
ResourceKeys: RemediationExceptionResourceKeys;
|
|
3586
3586
|
/**
|
|
@@ -3600,11 +3600,11 @@ declare namespace ConfigService {
|
|
|
3600
3600
|
}
|
|
3601
3601
|
export interface PutResourceConfigRequest {
|
|
3602
3602
|
/**
|
|
3603
|
-
* The type of the resource. The custom resource type must be registered with
|
|
3603
|
+
* The type of the resource. The custom resource type must be registered with CloudFormation. You cannot use the organization names “amzn”, “amazon”, “alexa”, “custom” with custom resource types. It is the first part of the ResourceType up to the first ::.
|
|
3604
3604
|
*/
|
|
3605
3605
|
ResourceType: ResourceTypeString;
|
|
3606
3606
|
/**
|
|
3607
|
-
* Version of the schema registered for the ResourceType in
|
|
3607
|
+
* Version of the schema registered for the ResourceType in CloudFormation.
|
|
3608
3608
|
*/
|
|
3609
3609
|
SchemaVersionId: SchemaVersionId;
|
|
3610
3610
|
/**
|
|
@@ -3616,7 +3616,7 @@ declare namespace ConfigService {
|
|
|
3616
3616
|
*/
|
|
3617
3617
|
ResourceName?: ResourceName;
|
|
3618
3618
|
/**
|
|
3619
|
-
* The configuration object of the resource in valid JSON format. It must match the schema registered with
|
|
3619
|
+
* The configuration object of the resource in valid JSON format. It must match the schema registered with CloudFormation. The configuration JSON must not exceed 64 KB.
|
|
3620
3620
|
*/
|
|
3621
3621
|
Configuration: Configuration;
|
|
3622
3622
|
/**
|
|
@@ -3626,7 +3626,7 @@ declare namespace ConfigService {
|
|
|
3626
3626
|
}
|
|
3627
3627
|
export interface PutRetentionConfigurationRequest {
|
|
3628
3628
|
/**
|
|
3629
|
-
* Number of days
|
|
3629
|
+
* Number of days Config stores your historical information. Currently, only applicable to the configuration item history.
|
|
3630
3630
|
*/
|
|
3631
3631
|
RetentionPeriodInDays: RetentionPeriodInDays;
|
|
3632
3632
|
}
|
|
@@ -3667,15 +3667,15 @@ declare namespace ConfigService {
|
|
|
3667
3667
|
export type RecorderStatus = "Pending"|"Success"|"Failure"|string;
|
|
3668
3668
|
export interface RecordingGroup {
|
|
3669
3669
|
/**
|
|
3670
|
-
* Specifies whether
|
|
3670
|
+
* Specifies whether Config records configuration changes for every supported type of regional resource. If you set this option to true, when Config adds support for a new type of regional resource, it starts recording resources of that type automatically. If you set this option to true, you cannot enumerate a list of resourceTypes.
|
|
3671
3671
|
*/
|
|
3672
3672
|
allSupported?: AllSupported;
|
|
3673
3673
|
/**
|
|
3674
|
-
* Specifies whether
|
|
3674
|
+
* Specifies whether Config includes all supported types of global resources (for example, IAM resources) with the resources that it records. Before you can set this option to true, you must set the allSupported option to true. If you set this option to true, when Config adds support for a new type of global resource, it starts recording resources of that type automatically. The configuration details for any global resource are the same in all regions. To prevent duplicate configuration items, you should consider customizing Config in only one region to record global resources.
|
|
3675
3675
|
*/
|
|
3676
3676
|
includeGlobalResourceTypes?: IncludeGlobalResourceTypes;
|
|
3677
3677
|
/**
|
|
3678
|
-
* A comma-separated list that specifies the types of
|
|
3678
|
+
* A comma-separated list that specifies the types of Amazon Web Services resources for which Config records configuration changes (for example, AWS::EC2::Instance or AWS::CloudTrail::Trail). To record all configuration changes, you must set the allSupported option to true. If you set this option to false, when Config adds support for a new type of resource, it will not record resources of that type unless you manually add that type to your recording group. For a list of valid resourceTypes values, see the resourceType Value column in Supported Amazon Web Services resource Types.
|
|
3679
3679
|
*/
|
|
3680
3680
|
resourceTypes?: ResourceTypeList;
|
|
3681
3681
|
}
|
|
@@ -3704,7 +3704,7 @@ declare namespace ConfigService {
|
|
|
3704
3704
|
export type RelationshipName = string;
|
|
3705
3705
|
export interface RemediationConfiguration {
|
|
3706
3706
|
/**
|
|
3707
|
-
* The name of the
|
|
3707
|
+
* The name of the Config rule.
|
|
3708
3708
|
*/
|
|
3709
3709
|
ConfigRuleName: ConfigRuleName;
|
|
3710
3710
|
/**
|
|
@@ -3736,11 +3736,11 @@ declare namespace ConfigService {
|
|
|
3736
3736
|
*/
|
|
3737
3737
|
ExecutionControls?: ExecutionControls;
|
|
3738
3738
|
/**
|
|
3739
|
-
* The maximum number of failed attempts for auto-remediation. If you do not select a number, the default is 5. For example, if you specify MaximumAutomaticAttempts as 5 with RetryAttemptSeconds as 50 seconds,
|
|
3739
|
+
* The maximum number of failed attempts for auto-remediation. If you do not select a number, the default is 5. For example, if you specify MaximumAutomaticAttempts as 5 with RetryAttemptSeconds as 50 seconds, Config will put a RemediationException on your behalf for the failing resource after the 5th failed attempt within 50 seconds.
|
|
3740
3740
|
*/
|
|
3741
3741
|
MaximumAutomaticAttempts?: AutoRemediationAttempts;
|
|
3742
3742
|
/**
|
|
3743
|
-
* Maximum time in seconds that
|
|
3743
|
+
* Maximum time in seconds that Config runs auto-remediation. If you do not select a number, the default is 60 seconds. For example, if you specify RetryAttemptSeconds as 50 seconds and MaximumAutomaticAttempts as 5, Config will run auto-remediations 5 times within 50 seconds before throwing an exception.
|
|
3744
3744
|
*/
|
|
3745
3745
|
RetryAttemptSeconds?: AutoRemediationAttemptSeconds;
|
|
3746
3746
|
/**
|
|
@@ -3755,7 +3755,7 @@ declare namespace ConfigService {
|
|
|
3755
3755
|
export type RemediationConfigurations = RemediationConfiguration[];
|
|
3756
3756
|
export interface RemediationException {
|
|
3757
3757
|
/**
|
|
3758
|
-
* The name of the
|
|
3758
|
+
* The name of the Config rule.
|
|
3759
3759
|
*/
|
|
3760
3760
|
ConfigRuleName: ConfigRuleName;
|
|
3761
3761
|
/**
|
|
@@ -3856,7 +3856,7 @@ declare namespace ConfigService {
|
|
|
3856
3856
|
}
|
|
3857
3857
|
export interface ResourceCountFilters {
|
|
3858
3858
|
/**
|
|
3859
|
-
* The type of the
|
|
3859
|
+
* The type of the Amazon Web Services resource.
|
|
3860
3860
|
*/
|
|
3861
3861
|
ResourceType?: ResourceType;
|
|
3862
3862
|
/**
|
|
@@ -3943,7 +3943,7 @@ declare namespace ConfigService {
|
|
|
3943
3943
|
*/
|
|
3944
3944
|
Name: RetentionConfigurationName;
|
|
3945
3945
|
/**
|
|
3946
|
-
* Number of days
|
|
3946
|
+
* Number of days Config stores your historical information. Currently, only applicable to the configuration item history.
|
|
3947
3947
|
*/
|
|
3948
3948
|
RetentionPeriodInDays: RetentionPeriodInDays;
|
|
3949
3949
|
}
|
|
@@ -3955,19 +3955,19 @@ declare namespace ConfigService {
|
|
|
3955
3955
|
export type SchemaVersionId = string;
|
|
3956
3956
|
export interface Scope {
|
|
3957
3957
|
/**
|
|
3958
|
-
* The resource types of only those
|
|
3958
|
+
* The resource types of only those Amazon Web Services resources that you want to trigger an evaluation for the rule. You can only specify one type if you also specify a resource ID for ComplianceResourceId.
|
|
3959
3959
|
*/
|
|
3960
3960
|
ComplianceResourceTypes?: ComplianceResourceTypes;
|
|
3961
3961
|
/**
|
|
3962
|
-
* The tag key that is applied to only those
|
|
3962
|
+
* The tag key that is applied to only those Amazon Web Services resources that you want to trigger an evaluation for the rule.
|
|
3963
3963
|
*/
|
|
3964
3964
|
TagKey?: StringWithCharLimit128;
|
|
3965
3965
|
/**
|
|
3966
|
-
* The tag value applied to only those
|
|
3966
|
+
* The tag value applied to only those Amazon Web Services resources that you want to trigger an evaluation for the rule. If you specify a value for TagValue, you must also specify a value for TagKey.
|
|
3967
3967
|
*/
|
|
3968
3968
|
TagValue?: StringWithCharLimit256;
|
|
3969
3969
|
/**
|
|
3970
|
-
* The ID of the only
|
|
3970
|
+
* The ID of the only Amazon Web Services resource that you want to trigger an evaluation for the rule. If you specify a resource ID, you must specify one resource type for ComplianceResourceTypes.
|
|
3971
3971
|
*/
|
|
3972
3972
|
ComplianceResourceId?: BaseResourceId;
|
|
3973
3973
|
}
|
|
@@ -3985,7 +3985,7 @@ declare namespace ConfigService {
|
|
|
3985
3985
|
*/
|
|
3986
3986
|
Limit?: Limit;
|
|
3987
3987
|
/**
|
|
3988
|
-
* The maximum number of query results returned on each page.
|
|
3988
|
+
* The maximum number of query results returned on each page. Config also allows the Limit request parameter.
|
|
3989
3989
|
*/
|
|
3990
3990
|
MaxResults?: Limit;
|
|
3991
3991
|
/**
|
|
@@ -4034,29 +4034,29 @@ declare namespace ConfigService {
|
|
|
4034
4034
|
}
|
|
4035
4035
|
export interface Source {
|
|
4036
4036
|
/**
|
|
4037
|
-
* Indicates whether
|
|
4037
|
+
* Indicates whether Amazon Web Services or the customer owns and manages the Config rule.
|
|
4038
4038
|
*/
|
|
4039
4039
|
Owner: Owner;
|
|
4040
4040
|
/**
|
|
4041
|
-
* For
|
|
4041
|
+
* For Config managed rules, a predefined identifier from a list. For example, IAM_PASSWORD_POLICY is a managed rule. To reference a managed rule, see Using Config managed rules. For custom rules, the identifier is the Amazon Resource Name (ARN) of the rule's Lambda function, such as arn:aws:lambda:us-east-2:123456789012:function:custom_rule_name.
|
|
4042
4042
|
*/
|
|
4043
4043
|
SourceIdentifier: StringWithCharLimit256;
|
|
4044
4044
|
/**
|
|
4045
|
-
* Provides the source and type of the event that causes
|
|
4045
|
+
* Provides the source and type of the event that causes Config to evaluate your Amazon Web Services resources.
|
|
4046
4046
|
*/
|
|
4047
4047
|
SourceDetails?: SourceDetails;
|
|
4048
4048
|
}
|
|
4049
4049
|
export interface SourceDetail {
|
|
4050
4050
|
/**
|
|
4051
|
-
* The source of the event, such as an
|
|
4051
|
+
* The source of the event, such as an Amazon Web Services service, that triggers Config to evaluate your Amazon Web Services resources.
|
|
4052
4052
|
*/
|
|
4053
4053
|
EventSource?: EventSource;
|
|
4054
4054
|
/**
|
|
4055
|
-
* The type of notification that triggers
|
|
4055
|
+
* The type of notification that triggers Config to run an evaluation for a rule. You can specify the following notification types: ConfigurationItemChangeNotification - Triggers an evaluation when Config delivers a configuration item as a result of a resource change. OversizedConfigurationItemChangeNotification - Triggers an evaluation when Config delivers an oversized configuration item. Config may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS. ScheduledNotification - Triggers a periodic evaluation at the frequency specified for MaximumExecutionFrequency. ConfigurationSnapshotDeliveryCompleted - Triggers a periodic evaluation when Config delivers a configuration snapshot. If you want your custom rule to be triggered by configuration changes, specify two SourceDetail objects, one for ConfigurationItemChangeNotification and one for OversizedConfigurationItemChangeNotification.
|
|
4056
4056
|
*/
|
|
4057
4057
|
MessageType?: MessageType;
|
|
4058
4058
|
/**
|
|
4059
|
-
* The frequency at which you want
|
|
4059
|
+
* The frequency at which you want Config to run evaluations for a custom rule with a periodic trigger. If you specify a value for MaximumExecutionFrequency, then MessageType must use the ScheduledNotification value. By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the MaximumExecutionFrequency parameter. Based on the valid value you choose, Config runs evaluations once for each valid value. For example, if you choose Three_Hours, Config runs evaluations once every three hours. In this case, Three_Hours is the frequency of this rule.
|
|
4060
4060
|
*/
|
|
4061
4061
|
MaximumExecutionFrequency?: MaximumExecutionFrequency;
|
|
4062
4062
|
}
|
|
@@ -4074,7 +4074,7 @@ declare namespace ConfigService {
|
|
|
4074
4074
|
export type StackArn = string;
|
|
4075
4075
|
export interface StartConfigRulesEvaluationRequest {
|
|
4076
4076
|
/**
|
|
4077
|
-
* The list of names of
|
|
4077
|
+
* The list of names of Config rules that you want to run evaluations for.
|
|
4078
4078
|
*/
|
|
4079
4079
|
ConfigRuleNames?: ReevaluateConfigRuleNames;
|
|
4080
4080
|
}
|
|
@@ -4088,7 +4088,7 @@ declare namespace ConfigService {
|
|
|
4088
4088
|
}
|
|
4089
4089
|
export interface StartRemediationExecutionRequest {
|
|
4090
4090
|
/**
|
|
4091
|
-
* The list of names of
|
|
4091
|
+
* The list of names of Config rules that you want to run remediation execution for.
|
|
4092
4092
|
*/
|
|
4093
4093
|
ConfigRuleName: ConfigRuleName;
|
|
4094
4094
|
/**
|
|
@@ -4119,7 +4119,7 @@ declare namespace ConfigService {
|
|
|
4119
4119
|
*/
|
|
4120
4120
|
AccountId?: AccountId;
|
|
4121
4121
|
/**
|
|
4122
|
-
* Indicates deployment status for config rule in the member account. When master account calls PutOrganizationConfigRule action for the first time, config rule status is created in the member account. When master account calls PutOrganizationConfigRule action for the second time, config rule status is updated in the member account. Config rule status is deleted when the master account deletes OrganizationConfigRule and disables service access for config-multiaccountsetup.amazonaws.com.
|
|
4122
|
+
* Indicates deployment status for config rule in the member account. When master account calls PutOrganizationConfigRule action for the first time, config rule status is created in the member account. When master account calls PutOrganizationConfigRule action for the second time, config rule status is updated in the member account. Config rule status is deleted when the master account deletes OrganizationConfigRule and disables service access for config-multiaccountsetup.amazonaws.com. Config sets the state of the rule to: CREATE_SUCCESSFUL when config rule has been created in the member account. CREATE_IN_PROGRESS when config rule is being created in the member account. CREATE_FAILED when config rule creation has failed in the member account. DELETE_FAILED when config rule deletion has failed in the member account. DELETE_IN_PROGRESS when config rule is being deleted in the member account. DELETE_SUCCESSFUL when config rule has been deleted in the member account. UPDATE_SUCCESSFUL when config rule has been updated in the member account. UPDATE_IN_PROGRESS when config rule is being updated in the member account. UPDATE_FAILED when config rule deletion has failed in the member account.
|
|
4123
4123
|
*/
|
|
4124
4124
|
MemberAccountRuleStatus?: MemberAccountRuleStatus;
|
|
4125
4125
|
}
|