Copyright | (c) 2013-2021 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
Deploys conformance packs across member accounts in an Amazon Web Services Organization.
Only a master account and a delegated administrator can call this API.
When calling this API with a delegated administrator, you must ensure
Organizations ListDelegatedAdministrator
permissions are added.
This API enables organization service access for
config-multiaccountsetup.amazonaws.com
through the
EnableAWSServiceAccess
action and creates a service linked role
AWSServiceRoleForConfigMultiAccountSetup
in the master or delegated
administrator account of your organization. The service linked role is
created only when the role does not exist in the caller account. To use
this API with delegated administrator, register a delegated
administrator by calling Amazon Web Services Organization
register-delegate-admin
for config-multiaccountsetup.amazonaws.com
.
Prerequisite: Ensure you call EnableAllFeatures
API to enable all
features in an organization.
You must specify either the TemplateS3Uri
or the TemplateBody
parameter, but not both. If you provide both Config uses the
TemplateS3Uri
parameter and ignores the TemplateBody
parameter.
Config sets the state of a conformance pack to CREATE_IN_PROGRESS and UPDATE_IN_PROGRESS until the conformance pack is created or updated. You cannot update a conformance pack while it is in this state.
You can create 50 conformance packs with 25 Config rules in each pack and 3 delegated administrator per organization.
Synopsis
- data PutOrganizationConformancePack = PutOrganizationConformancePack' {}
- newPutOrganizationConformancePack :: Text -> PutOrganizationConformancePack
- putOrganizationConformancePack_deliveryS3Bucket :: Lens' PutOrganizationConformancePack (Maybe Text)
- putOrganizationConformancePack_deliveryS3KeyPrefix :: Lens' PutOrganizationConformancePack (Maybe Text)
- putOrganizationConformancePack_templateS3Uri :: Lens' PutOrganizationConformancePack (Maybe Text)
- putOrganizationConformancePack_conformancePackInputParameters :: Lens' PutOrganizationConformancePack (Maybe [ConformancePackInputParameter])
- putOrganizationConformancePack_excludedAccounts :: Lens' PutOrganizationConformancePack (Maybe [Text])
- putOrganizationConformancePack_templateBody :: Lens' PutOrganizationConformancePack (Maybe Text)
- putOrganizationConformancePack_organizationConformancePackName :: Lens' PutOrganizationConformancePack Text
- data PutOrganizationConformancePackResponse = PutOrganizationConformancePackResponse' {}
- newPutOrganizationConformancePackResponse :: Int -> PutOrganizationConformancePackResponse
- putOrganizationConformancePackResponse_organizationConformancePackArn :: Lens' PutOrganizationConformancePackResponse (Maybe Text)
- putOrganizationConformancePackResponse_httpStatus :: Lens' PutOrganizationConformancePackResponse Int
Creating a Request
data PutOrganizationConformancePack Source #
See: newPutOrganizationConformancePack
smart constructor.
PutOrganizationConformancePack' | |
|
Instances
newPutOrganizationConformancePack Source #
:: Text |
|
-> PutOrganizationConformancePack |
Create a value of PutOrganizationConformancePack
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:deliveryS3Bucket:PutOrganizationConformancePack'
, putOrganizationConformancePack_deliveryS3Bucket
- The name of the Amazon S3 bucket where Config stores conformance pack
templates.
This field is optional. If used, it must be prefixed with
awsconfigconforms
.
$sel:deliveryS3KeyPrefix:PutOrganizationConformancePack'
, putOrganizationConformancePack_deliveryS3KeyPrefix
- The prefix for the Amazon S3 bucket.
This field is optional.
$sel:templateS3Uri:PutOrganizationConformancePack'
, putOrganizationConformancePack_templateS3Uri
- Location of file containing the template body. The uri must point to the
conformance pack template (max size: 300 KB).
You must have access to read Amazon S3 bucket.
$sel:conformancePackInputParameters:PutOrganizationConformancePack'
, putOrganizationConformancePack_conformancePackInputParameters
- A list of ConformancePackInputParameter
objects.
$sel:excludedAccounts:PutOrganizationConformancePack'
, putOrganizationConformancePack_excludedAccounts
- A list of Amazon Web Services accounts to be excluded from an
organization conformance pack while deploying a conformance pack.
$sel:templateBody:PutOrganizationConformancePack'
, putOrganizationConformancePack_templateBody
- A string containing full conformance pack template body. Structure
containing the template body with a minimum length of 1 byte and a
maximum length of 51,200 bytes.
$sel:organizationConformancePackName:PutOrganizationConformancePack'
, putOrganizationConformancePack_organizationConformancePackName
- Name of the organization conformance pack you want to create.
Request Lenses
putOrganizationConformancePack_deliveryS3Bucket :: Lens' PutOrganizationConformancePack (Maybe Text) Source #
The name of the Amazon S3 bucket where Config stores conformance pack templates.
This field is optional. If used, it must be prefixed with
awsconfigconforms
.
putOrganizationConformancePack_deliveryS3KeyPrefix :: Lens' PutOrganizationConformancePack (Maybe Text) Source #
The prefix for the Amazon S3 bucket.
This field is optional.
putOrganizationConformancePack_templateS3Uri :: Lens' PutOrganizationConformancePack (Maybe Text) Source #
Location of file containing the template body. The uri must point to the conformance pack template (max size: 300 KB).
You must have access to read Amazon S3 bucket.
putOrganizationConformancePack_conformancePackInputParameters :: Lens' PutOrganizationConformancePack (Maybe [ConformancePackInputParameter]) Source #
A list of ConformancePackInputParameter
objects.
putOrganizationConformancePack_excludedAccounts :: Lens' PutOrganizationConformancePack (Maybe [Text]) Source #
A list of Amazon Web Services accounts to be excluded from an organization conformance pack while deploying a conformance pack.
putOrganizationConformancePack_templateBody :: Lens' PutOrganizationConformancePack (Maybe Text) Source #
A string containing full conformance pack template body. Structure containing the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.
putOrganizationConformancePack_organizationConformancePackName :: Lens' PutOrganizationConformancePack Text Source #
Name of the organization conformance pack you want to create.
Destructuring the Response
data PutOrganizationConformancePackResponse Source #
See: newPutOrganizationConformancePackResponse
smart constructor.
PutOrganizationConformancePackResponse' | |
|
Instances
newPutOrganizationConformancePackResponse Source #
Create a value of PutOrganizationConformancePackResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:organizationConformancePackArn:PutOrganizationConformancePackResponse'
, putOrganizationConformancePackResponse_organizationConformancePackArn
- ARN of the organization conformance pack.
$sel:httpStatus:PutOrganizationConformancePackResponse'
, putOrganizationConformancePackResponse_httpStatus
- The response's http status code.
Response Lenses
putOrganizationConformancePackResponse_organizationConformancePackArn :: Lens' PutOrganizationConformancePackResponse (Maybe Text) Source #
ARN of the organization conformance pack.
putOrganizationConformancePackResponse_httpStatus :: Lens' PutOrganizationConformancePackResponse Int Source #
The response's http status code.