cdk-comprehend-s3olap 2.0.84 → 2.0.87

package/node_modules/aws-sdk/clients/cognitoidentityserviceprovider.d.ts

@@ -1575,6 +1575,7 @@ declare namespace CognitoIdentityServiceProvider {
   export type AuthEventsType = AuthEventType[];
   export type AuthFlowType = "USER_SRP_AUTH"|"REFRESH_TOKEN_AUTH"|"REFRESH_TOKEN"|"CUSTOM_AUTH"|"ADMIN_NO_SRP_AUTH"|"USER_PASSWORD_AUTH"|"ADMIN_USER_PASSWORD_AUTH"|string;
   export type AuthParametersType = {[key: string]: StringType};
+  export type AuthSessionValidityType = number;
   export interface AuthenticationResultType {
     /**
      * A valid access token that Amazon Cognito issued to the user who you want to authenticate.
@@ -1985,6 +1986,10 @@ declare namespace CognitoIdentityServiceProvider {
      * Activates the propagation of additional user context data. For more information about propagation of user context data, see  Adding advanced security to a user pool. If you don’t include this parameter, you can't send device fingerprint information, including source IP address, to Amazon Cognito advanced security. You can only activate EnablePropagateAdditionalUserContextData in an app client that has a client secret.
      */
     EnablePropagateAdditionalUserContextData?: WrappedBooleanType;
+    /**
+     * Amazon Cognito creates a session token for each API request in an authentication flow. AuthSessionValidity is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.
+     */
+    AuthSessionValidity?: AuthSessionValidityType;
   }
   export interface CreateUserPoolClientResponse {
     /**
@@ -2038,15 +2043,15 @@ declare namespace CognitoIdentityServiceProvider {
      */
     UsernameAttributes?: UsernameAttributesListType;
     /**
-     * A string representing the SMS verification message.
+     * This parameter is no longer used. See VerificationMessageTemplateType.
      */
     SmsVerificationMessage?: SmsVerificationMessageType;
     /**
-     * A string representing the email verification message. EmailVerificationMessage is allowed only if EmailSendingAccount is DEVELOPER. 
+     * This parameter is no longer used. See VerificationMessageTemplateType.
      */
     EmailVerificationMessage?: EmailVerificationMessageType;
     /**
-     * A string representing the email verification subject. EmailVerificationSubject is allowed only if EmailSendingAccount is DEVELOPER. 
+     * This parameter is no longer used. See VerificationMessageTemplateType.
      */
     EmailVerificationSubject?: EmailVerificationSubjectType;
     /**
@@ -2325,11 +2330,11 @@ declare namespace CognitoIdentityServiceProvider {
   export type DescriptionType = string;
   export interface DeviceConfigurationType {
     /**
-     * When true, device authentication can replace SMS and time-based one-time password (TOTP) factors for multi-factor authentication (MFA).  Regardless of the value of this field, users that sign in with new devices that have not been confirmed or remembered must provide a second factor if your user pool requires MFA. 
+     * When true, a remembered device can sign in with device authentication instead of SMS and time-based one-time password (TOTP) factors for multi-factor authentication (MFA).  Whether or not ChallengeRequiredOnNewDevice is true, users who sign in with devices that have not been confirmed or remembered must still provide a second factor in a user pool that requires MFA. 
      */
     ChallengeRequiredOnNewDevice?: BooleanType;
     /**
-     * When true, Amazon Cognito doesn't remember newly-confirmed devices. Users who want to authenticate with their device can instead opt in to remembering their device. To collect a choice from your user, create an input prompt in your app and return the value that the user chooses in an UpdateDeviceStatus API request.
+     * When true, Amazon Cognito doesn't automatically remember a user's device when your app sends a  ConfirmDevice API request. In your app, create a prompt for your user to choose whether they want to remember their device. Return the user's choice in an  UpdateDeviceStatus API request. When DeviceOnlyRememberedOnUserPrompt is false, Amazon Cognito immediately remembers devices that you register in a ConfirmDevice API request.
      */
     DeviceOnlyRememberedOnUserPrompt?: BooleanType;
   }
@@ -4074,6 +4079,10 @@ declare namespace CognitoIdentityServiceProvider {
      * Activates the propagation of additional user context data. For more information about propagation of user context data, see  Adding advanced security to a user pool. If you don’t include this parameter, you can't send device fingerprint information, including source IP address, to Amazon Cognito advanced security. You can only activate EnablePropagateAdditionalUserContextData in an app client that has a client secret.
      */
     EnablePropagateAdditionalUserContextData?: WrappedBooleanType;
+    /**
+     * Amazon Cognito creates a session token for each API request in an authentication flow. AuthSessionValidity is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.
+     */
+    AuthSessionValidity?: AuthSessionValidityType;
   }
   export interface UpdateUserPoolClientResponse {
     /**
@@ -4119,15 +4128,15 @@ declare namespace CognitoIdentityServiceProvider {
      */
     AutoVerifiedAttributes?: VerifiedAttributesListType;
     /**
-     * A container with information about the SMS verification message.
+     * This parameter is no longer used. See VerificationMessageTemplateType.
      */
     SmsVerificationMessage?: SmsVerificationMessageType;
     /**
-     * The contents of the email verification message.
+     * This parameter is no longer used. See VerificationMessageTemplateType.
      */
     EmailVerificationMessage?: EmailVerificationMessageType;
     /**
-     * The subject of the email verification message.
+     * This parameter is no longer used. See VerificationMessageTemplateType.
      */
     EmailVerificationSubject?: EmailVerificationSubjectType;
     /**
@@ -4371,6 +4380,10 @@ declare namespace CognitoIdentityServiceProvider {
      * When EnablePropagateAdditionalUserContextData is true, Amazon Cognito accepts an IpAddress value that you send in the UserContextData parameter. The UserContextData parameter sends information to Amazon Cognito advanced security for risk analysis. You can send UserContextData when you sign in Amazon Cognito native users with the InitiateAuth and RespondToAuthChallenge API operations. When EnablePropagateAdditionalUserContextData is false, you can't send your user's source IP address to Amazon Cognito advanced security with unauthenticated API operations. EnablePropagateAdditionalUserContextData doesn't affect whether you can send a source IP address in a ContextData parameter with the authenticated API operations AdminInitiateAuth and AdminRespondToAuthChallenge. You can only activate EnablePropagateAdditionalUserContextData in an app client that has a client secret. For more information about propagation of user context data, see Adding user device and session data to API requests.
      */
     EnablePropagateAdditionalUserContextData?: WrappedBooleanType;
+    /**
+     * Amazon Cognito creates a session token for each API request in an authentication flow. AuthSessionValidity is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.
+     */
+    AuthSessionValidity?: AuthSessionValidityType;
   }
   export interface UserPoolDescriptionType {
     /**
@@ -4456,15 +4469,15 @@ declare namespace CognitoIdentityServiceProvider {
      */
     UsernameAttributes?: UsernameAttributesListType;
     /**
-     * The contents of the SMS verification message.
+     * This parameter is no longer used. See VerificationMessageTemplateType.
      */
     SmsVerificationMessage?: SmsVerificationMessageType;
     /**
-     * The contents of the email verification message.
+     * This parameter is no longer used. See VerificationMessageTemplateType.
      */
     EmailVerificationMessage?: EmailVerificationMessageType;
     /**
-     * The subject of the email verification message.
+     * This parameter is no longer used. See VerificationMessageTemplateType.
      */
     EmailVerificationSubject?: EmailVerificationSubjectType;
     /**

package/node_modules/aws-sdk/clients/connect.d.ts

@@ -324,11 +324,11 @@ declare class Connect extends Service {
    */
   describeAgentStatus(callback?: (err: AWSError, data: Connect.Types.DescribeAgentStatusResponse) => void): Request<Connect.Types.DescribeAgentStatusResponse, AWSError>;
   /**
-   * This API is in preview release for Amazon Connect and is subject to change. Describes the specified contact.   Contact information remains available in Amazon Connect for 24 months, and then it is deleted. 
+   * This API is in preview release for Amazon Connect and is subject to change. Describes the specified contact.   Contact information remains available in Amazon Connect for 24 months, and then it is deleted. Only data from November 12, 2021, and later is returned by this API. 
    */
   describeContact(params: Connect.Types.DescribeContactRequest, callback?: (err: AWSError, data: Connect.Types.DescribeContactResponse) => void): Request<Connect.Types.DescribeContactResponse, AWSError>;
   /**
-   * This API is in preview release for Amazon Connect and is subject to change. Describes the specified contact.   Contact information remains available in Amazon Connect for 24 months, and then it is deleted. 
+   * This API is in preview release for Amazon Connect and is subject to change. Describes the specified contact.   Contact information remains available in Amazon Connect for 24 months, and then it is deleted. Only data from November 12, 2021, and later is returned by this API. 
    */
   describeContact(callback?: (err: AWSError, data: Connect.Types.DescribeContactResponse) => void): Request<Connect.Types.DescribeContactResponse, AWSError>;
   /**
@@ -588,11 +588,11 @@ declare class Connect extends Service {
    */
   listApprovedOrigins(callback?: (err: AWSError, data: Connect.Types.ListApprovedOriginsResponse) => void): Request<Connect.Types.ListApprovedOriginsResponse, AWSError>;
   /**
-   * This API is in preview release for Amazon Connect and is subject to change. For the specified version of Amazon Lex, returns a paginated list of all the Amazon Lex bots currently associated with the instance. 
+   * This API is in preview release for Amazon Connect and is subject to change. For the specified version of Amazon Lex, returns a paginated list of all the Amazon Lex bots currently associated with the instance. Use this API to returns both Amazon Lex V1 and V2 bots.
    */
   listBots(params: Connect.Types.ListBotsRequest, callback?: (err: AWSError, data: Connect.Types.ListBotsResponse) => void): Request<Connect.Types.ListBotsResponse, AWSError>;
   /**
-   * This API is in preview release for Amazon Connect and is subject to change. For the specified version of Amazon Lex, returns a paginated list of all the Amazon Lex bots currently associated with the instance. 
+   * This API is in preview release for Amazon Connect and is subject to change. For the specified version of Amazon Lex, returns a paginated list of all the Amazon Lex bots currently associated with the instance. Use this API to returns both Amazon Lex V1 and V2 bots.
    */
   listBots(callback?: (err: AWSError, data: Connect.Types.ListBotsResponse) => void): Request<Connect.Types.ListBotsResponse, AWSError>;
   /**
@@ -676,11 +676,11 @@ declare class Connect extends Service {
    */
   listLambdaFunctions(callback?: (err: AWSError, data: Connect.Types.ListLambdaFunctionsResponse) => void): Request<Connect.Types.ListLambdaFunctionsResponse, AWSError>;
   /**
-   * This API is in preview release for Amazon Connect and is subject to change. Returns a paginated list of all the Amazon Lex bots currently associated with the instance.
+   * This API is in preview release for Amazon Connect and is subject to change. Returns a paginated list of all the Amazon Lex V1 bots currently associated with the instance. To return both Amazon Lex V1 and V2 bots, use the ListBots API. 
    */
   listLexBots(params: Connect.Types.ListLexBotsRequest, callback?: (err: AWSError, data: Connect.Types.ListLexBotsResponse) => void): Request<Connect.Types.ListLexBotsResponse, AWSError>;
   /**
-   * This API is in preview release for Amazon Connect and is subject to change. Returns a paginated list of all the Amazon Lex bots currently associated with the instance.
+   * This API is in preview release for Amazon Connect and is subject to change. Returns a paginated list of all the Amazon Lex V1 bots currently associated with the instance. To return both Amazon Lex V1 and V2 bots, use the ListBots API. 
    */
   listLexBots(callback?: (err: AWSError, data: Connect.Types.ListLexBotsResponse) => void): Request<Connect.Types.ListLexBotsResponse, AWSError>;
   /**
@@ -843,6 +843,22 @@ declare class Connect extends Service {
    * Searches for available phone numbers that you can claim to your Amazon Connect instance.
    */
   searchAvailablePhoneNumbers(callback?: (err: AWSError, data: Connect.Types.SearchAvailablePhoneNumbersResponse) => void): Request<Connect.Types.SearchAvailablePhoneNumbersResponse, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. Searches queues in an Amazon Connect instance, with optional filtering.
+   */
+  searchQueues(params: Connect.Types.SearchQueuesRequest, callback?: (err: AWSError, data: Connect.Types.SearchQueuesResponse) => void): Request<Connect.Types.SearchQueuesResponse, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. Searches queues in an Amazon Connect instance, with optional filtering.
+   */
+  searchQueues(callback?: (err: AWSError, data: Connect.Types.SearchQueuesResponse) => void): Request<Connect.Types.SearchQueuesResponse, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. Searches routing profiles in an Amazon Connect instance, with optional filtering.
+   */
+  searchRoutingProfiles(params: Connect.Types.SearchRoutingProfilesRequest, callback?: (err: AWSError, data: Connect.Types.SearchRoutingProfilesResponse) => void): Request<Connect.Types.SearchRoutingProfilesResponse, AWSError>;
+  /**
+   * This API is in preview release for Amazon Connect and is subject to change. Searches routing profiles in an Amazon Connect instance, with optional filtering.
+   */
+  searchRoutingProfiles(callback?: (err: AWSError, data: Connect.Types.SearchRoutingProfilesResponse) => void): Request<Connect.Types.SearchRoutingProfilesResponse, AWSError>;
   /**
    * This API is in preview release for Amazon Connect and is subject to change. Searches security profiles in an Amazon Connect instance, with optional filtering.
    */
@@ -2188,7 +2204,7 @@ declare namespace Connect {
      */
     Description?: SecurityProfileDescription;
     /**
-     * Permissions assigned to the security profile.
+     * Permissions assigned to the security profile. For a list of valid permissions, see List of security profile permissions. 
      */
     Permissions?: PermissionsList;
     /**
@@ -4432,7 +4448,7 @@ declare namespace Connect {
   }
   export interface ListSecurityProfilePermissionsResponse {
     /**
-     * The permissions granted to the security profile.
+     * The permissions granted to the security profile. For a complete list of valid permissions, see List of security profile permissions.
      */
     Permissions?: PermissionsList;
     /**
@@ -4584,6 +4600,7 @@ declare namespace Connect {
      */
     NextToken?: NextToken;
   }
+  export type Long = number;
   export type MaxResult10 = number;
   export type MaxResult100 = number;
   export type MaxResult1000 = number;
@@ -4801,6 +4818,26 @@ declare namespace Connect {
      */
     Arn?: ARN;
   }
+  export type QueueSearchConditionList = QueueSearchCriteria[];
+  export interface QueueSearchCriteria {
+    /**
+     * A list of conditions which would be applied together with an OR condition.
+     */
+    OrConditions?: QueueSearchConditionList;
+    /**
+     * A list of conditions which would be applied together with an AND condition.
+     */
+    AndConditions?: QueueSearchConditionList;
+    StringCondition?: StringCondition;
+    /**
+     * The type of queue.
+     */
+    QueueTypeCondition?: SearchableQueueType;
+  }
+  export interface QueueSearchFilter {
+    TagFilter?: ControlPlaneTagFilter;
+  }
+  export type QueueSearchSummaryList = Queue[];
   export type QueueStatus = "ENABLED"|"DISABLED"|string;
   export interface QueueSummary {
     /**
@@ -5008,9 +5045,18 @@ declare namespace Connect {
      * The tags used to organize, track, or control access for this resource. For example, { "tags": {"key1":"value1", "key2":"value2"} }.
      */
     Tags?: TagMap;
+    /**
+     * The number of associated queues in routing profile.
+     */
+    NumberOfAssociatedQueues?: Long;
+    /**
+     * The number of associated users in routing profile.
+     */
+    NumberOfAssociatedUsers?: Long;
   }
   export type RoutingProfileDescription = string;
   export type RoutingProfileId = string;
+  export type RoutingProfileList = RoutingProfile[];
   export type RoutingProfileName = string;
   export interface RoutingProfileQueueConfig {
     /**
@@ -5075,6 +5121,21 @@ declare namespace Connect {
      */
     Arn?: ARN;
   }
+  export type RoutingProfileSearchConditionList = RoutingProfileSearchCriteria[];
+  export interface RoutingProfileSearchCriteria {
+    /**
+     * A list of conditions which would be applied together with an OR condition.
+     */
+    OrConditions?: RoutingProfileSearchConditionList;
+    /**
+     * A list of conditions which would be applied together with an AND condition.
+     */
+    AndConditions?: RoutingProfileSearchConditionList;
+    StringCondition?: StringCondition;
+  }
+  export interface RoutingProfileSearchFilter {
+    TagFilter?: ControlPlaneTagFilter;
+  }
   export interface RoutingProfileSummary {
     /**
      * The identifier of the routing profile.
@@ -5140,6 +5201,78 @@ declare namespace Connect {
      */
     AvailableNumbersList?: AvailableNumbersList;
   }
+  export interface SearchQueuesRequest {
+    /**
+     * The identifier of the Amazon Connect instance. You can find the instanceId in the ARN of the instance.
+     */
+    InstanceId: InstanceId;
+    /**
+     * The token for the next set of results. Use the value returned in the previous response in the next request to retrieve the next set of results.
+     */
+    NextToken?: NextToken2500;
+    /**
+     * The maximum number of results to return per page.
+     */
+    MaxResults?: MaxResult100;
+    /**
+     * Filters to be applied to search results.
+     */
+    SearchFilter?: QueueSearchFilter;
+    /**
+     * The search criteria to be used to return queues.
+     */
+    SearchCriteria?: QueueSearchCriteria;
+  }
+  export interface SearchQueuesResponse {
+    /**
+     * Information about the queues.
+     */
+    Queues?: QueueSearchSummaryList;
+    /**
+     * If there are additional results, this is the token for the next set of results.
+     */
+    NextToken?: NextToken2500;
+    /**
+     * The total number of queues which matched your search query.
+     */
+    ApproximateTotalCount?: ApproximateTotalCount;
+  }
+  export interface SearchRoutingProfilesRequest {
+    /**
+     * The identifier of the Amazon Connect instance. You can find the instanceId in the ARN of the instance.
+     */
+    InstanceId: InstanceId;
+    /**
+     * The token for the next set of results. Use the value returned in the previous response in the next request to retrieve the next set of results.
+     */
+    NextToken?: NextToken2500;
+    /**
+     * The maximum number of results to return per page.
+     */
+    MaxResults?: MaxResult100;
+    /**
+     * Filters to be applied to search results.
+     */
+    SearchFilter?: RoutingProfileSearchFilter;
+    /**
+     * The search criteria to be used to return routing profiles.
+     */
+    SearchCriteria?: RoutingProfileSearchCriteria;
+  }
+  export interface SearchRoutingProfilesResponse {
+    /**
+     * Information about the routing profiles.
+     */
+    RoutingProfiles?: RoutingProfileList;
+    /**
+     * If there are additional results, this is the token for the next set of results.
+     */
+    NextToken?: NextToken2500;
+    /**
+     * The total number of routing profiles which matched your search query.
+     */
+    ApproximateTotalCount?: ApproximateTotalCount;
+  }
   export interface SearchSecurityProfilesRequest {
     /**
      * The identifier of the Amazon Connect instance. You can find the instanceId in the ARN of the instance.
@@ -5245,6 +5378,7 @@ declare namespace Connect {
      */
     NextToken?: VocabularyNextToken;
   }
+  export type SearchableQueueType = "STANDARD"|string;
   export interface SecurityKey {
     /**
      * The existing association identifier that uniquely identifies the resource type and storage config for the given instance ID.
@@ -5892,7 +6026,7 @@ declare namespace Connect {
      */
     ContactFlowId: ContactFlowId;
     /**
-     * TThe name of the flow.
+     * The name of the flow.
      */
     Name?: ContactFlowName;
     /**
@@ -6255,7 +6389,7 @@ declare namespace Connect {
      */
     Description?: SecurityProfileDescription;
     /**
-     * The permissions granted to a security profile.
+     * The permissions granted to a security profile. For a list of valid permissions, see List of security profile permissions.
      */
     Permissions?: PermissionsList;
     /**

package/node_modules/aws-sdk/clients/controltower.d.ts

@@ -0,0 +1,169 @@
+import {Request} from '../lib/request';
+import {Response} from '../lib/response';
+import {AWSError} from '../lib/error';
+import {Service} from '../lib/service';
+import {ServiceConfigurationOptions} from '../lib/service';
+import {ConfigBase as Config} from '../lib/config-base';
+interface Blob {}
+declare class ControlTower extends Service {
+  /**
+   * Constructs a service object. This object has one method for each API operation.
+   */
+  constructor(options?: ControlTower.Types.ClientConfiguration)
+  config: Config & ControlTower.Types.ClientConfiguration;
+  /**
+   * This API call turns off a control. It starts an asynchronous operation that deletes AWS resources on the specified organizational unit and the accounts it contains. The resources will vary according to the control that you specify.
+   */
+  disableControl(params: ControlTower.Types.DisableControlInput, callback?: (err: AWSError, data: ControlTower.Types.DisableControlOutput) => void): Request<ControlTower.Types.DisableControlOutput, AWSError>;
+  /**
+   * This API call turns off a control. It starts an asynchronous operation that deletes AWS resources on the specified organizational unit and the accounts it contains. The resources will vary according to the control that you specify.
+   */
+  disableControl(callback?: (err: AWSError, data: ControlTower.Types.DisableControlOutput) => void): Request<ControlTower.Types.DisableControlOutput, AWSError>;
+  /**
+   * This API call activates a control. It starts an asynchronous operation that creates AWS resources on the specified organizational unit and the accounts it contains. The resources created will vary according to the control that you specify.
+   */
+  enableControl(params: ControlTower.Types.EnableControlInput, callback?: (err: AWSError, data: ControlTower.Types.EnableControlOutput) => void): Request<ControlTower.Types.EnableControlOutput, AWSError>;
+  /**
+   * This API call activates a control. It starts an asynchronous operation that creates AWS resources on the specified organizational unit and the accounts it contains. The resources created will vary according to the control that you specify.
+   */
+  enableControl(callback?: (err: AWSError, data: ControlTower.Types.EnableControlOutput) => void): Request<ControlTower.Types.EnableControlOutput, AWSError>;
+  /**
+   * Returns the status of a particular EnableControl or DisableControl operation. Displays a message in case of error. Details for an operation are available for 90 days.
+   */
+  getControlOperation(params: ControlTower.Types.GetControlOperationInput, callback?: (err: AWSError, data: ControlTower.Types.GetControlOperationOutput) => void): Request<ControlTower.Types.GetControlOperationOutput, AWSError>;
+  /**
+   * Returns the status of a particular EnableControl or DisableControl operation. Displays a message in case of error. Details for an operation are available for 90 days.
+   */
+  getControlOperation(callback?: (err: AWSError, data: ControlTower.Types.GetControlOperationOutput) => void): Request<ControlTower.Types.GetControlOperationOutput, AWSError>;
+  /**
+   * Lists the controls enabled by AWS Control Tower on the specified organizational unit and the accounts it contains.
+   */
+  listEnabledControls(params: ControlTower.Types.ListEnabledControlsInput, callback?: (err: AWSError, data: ControlTower.Types.ListEnabledControlsOutput) => void): Request<ControlTower.Types.ListEnabledControlsOutput, AWSError>;
+  /**
+   * Lists the controls enabled by AWS Control Tower on the specified organizational unit and the accounts it contains.
+   */
+  listEnabledControls(callback?: (err: AWSError, data: ControlTower.Types.ListEnabledControlsOutput) => void): Request<ControlTower.Types.ListEnabledControlsOutput, AWSError>;
+}
+declare namespace ControlTower {
+  export type ControlIdentifier = string;
+  export interface ControlOperation {
+    /**
+     * The time that the operation finished.
+     */
+    endTime?: SyntheticTimestamp_date_time;
+    /**
+     * One of ENABLE_CONTROL or DISABLE_CONTROL.
+     */
+    operationType?: ControlOperationType;
+    /**
+     * The time that the operation began.
+     */
+    startTime?: SyntheticTimestamp_date_time;
+    /**
+     * One of IN_PROGRESS, SUCEEDED, or FAILED.
+     */
+    status?: ControlOperationStatus;
+    /**
+     * If the operation result is FAILED, this string contains a message explaining why the operation failed.
+     */
+    statusMessage?: String;
+  }
+  export type ControlOperationStatus = "SUCCEEDED"|"FAILED"|"IN_PROGRESS"|string;
+  export type ControlOperationType = "ENABLE_CONTROL"|"DISABLE_CONTROL"|string;
+  export interface DisableControlInput {
+    /**
+     * The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the Region deny guardrail.
+     */
+    controlIdentifier: ControlIdentifier;
+    /**
+     * The ARN of the organizational unit.
+     */
+    targetIdentifier: TargetIdentifier;
+  }
+  export interface DisableControlOutput {
+    /**
+     * The ID of the asynchronous operation, which is used to track status. The operation is available for 90 days.
+     */
+    operationIdentifier: OperationIdentifier;
+  }
+  export interface EnableControlInput {
+    /**
+     * The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the Region deny guardrail.
+     */
+    controlIdentifier: ControlIdentifier;
+    /**
+     * The ARN of the organizational unit.
+     */
+    targetIdentifier: TargetIdentifier;
+  }
+  export interface EnableControlOutput {
+    /**
+     * The ID of the asynchronous operation, which is used to track status. The operation is available for 90 days.
+     */
+    operationIdentifier: OperationIdentifier;
+  }
+  export interface EnabledControlSummary {
+    /**
+     * The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the Region deny guardrail.
+     */
+    controlIdentifier?: ControlIdentifier;
+  }
+  export type EnabledControls = EnabledControlSummary[];
+  export interface GetControlOperationInput {
+    /**
+     * The ID of the asynchronous operation, which is used to track status. The operation is available for 90 days.
+     */
+    operationIdentifier: OperationIdentifier;
+  }
+  export interface GetControlOperationOutput {
+    /**
+     * 
+     */
+    controlOperation: ControlOperation;
+  }
+  export interface ListEnabledControlsInput {
+    /**
+     * How many results to return per API call.
+     */
+    maxResults?: MaxResults;
+    /**
+     * The token to continue the list from a previous API call with the same parameters.
+     */
+    nextToken?: String;
+    /**
+     * The ARN of the organizational unit.
+     */
+    targetIdentifier: TargetIdentifier;
+  }
+  export interface ListEnabledControlsOutput {
+    /**
+     * Lists the controls enabled by AWS Control Tower on the specified organizational unit and the accounts it contains.
+     */
+    enabledControls: EnabledControls;
+    /**
+     * Retrieves the next page of results. If the string is empty, the current response is the end of the results.
+     */
+    nextToken?: String;
+  }
+  export type MaxResults = number;
+  export type OperationIdentifier = string;
+  export type String = string;
+  export type SyntheticTimestamp_date_time = Date;
+  export type TargetIdentifier = string;
+  /**
+   * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
+   */
+  export type apiVersion = "2018-05-10"|"latest"|string;
+  export interface ClientApiVersions {
+    /**
+     * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
+     */
+    apiVersion?: apiVersion;
+  }
+  export type ClientConfiguration = ServiceConfigurationOptions & ClientApiVersions;
+  /**
+   * Contains interfaces for use with the ControlTower client.
+   */
+  export import Types = ControlTower;
+}
+export = ControlTower;

package/node_modules/aws-sdk/clients/controltower.js

@@ -0,0 +1,18 @@
+require('../lib/node_loader');
+var AWS = require('../lib/core');
+var Service = AWS.Service;
+var apiLoader = AWS.apiLoader;
+
+apiLoader.services['controltower'] = {};
+AWS.ControlTower = Service.defineService('controltower', ['2018-05-10']);
+Object.defineProperty(apiLoader.services['controltower'], '2018-05-10', {
+  get: function get() {
+    var model = require('../apis/controltower-2018-05-10.min.json');
+    model.paginators = require('../apis/controltower-2018-05-10.paginators.json').pagination;
+    return model;
+  },
+  enumerable: true,
+  configurable: true
+});
+
+module.exports = AWS.ControlTower;