Documentation ¶
Overview ¶
Package controltower provides the API client, operations, and parameter types for AWS Control Tower.
Amazon Web Services Control Tower offers application programming interface (API) operations that support programmatic interaction with these types of resources:
For more information about these types of resources, see the Amazon Web Services Control Tower User Guide.
About control APIs ¶
These interfaces allow you to apply the Amazon Web Services library of pre-defined controls to your organizational units, programmatically. In Amazon Web Services Control Tower, the terms "control" and "guardrail" are synonyms.
To call these APIs, you'll need to know:
the controlIdentifier for the control--or guardrail--you are targeting.
the ARN associated with the target organizational unit (OU), which we call the targetIdentifier .
the ARN associated with a resource that you wish to tag or untag.
To get the controlIdentifier for your Amazon Web Services Control Tower control:
The controlIdentifier is an ARN that is specified for each control. You can view the controlIdentifier in the console on the Control details page, as well as in the documentation.
About identifiers for Amazon Web Services Control Tower ¶
The Amazon Web Services Control Tower controlIdentifier is unique in each Amazon Web Services Region for each control. You can find the controlIdentifier for each Region and control in the Tables of control metadataor the Control availability by Region tables in the Amazon Web Services Control Tower Controls Reference Guide.
A quick-reference list of control identifers for the Amazon Web Services Control Tower legacy Strongly recommended and Elective controls is given in Resource identifiers for APIs and controlsin the Amazon Web Services Control Tower Controls Reference Guide. Remember that Mandatory controls cannot be added or removed.
Some controls have two identifiers
- ARN format for Amazon Web Services Control Tower: arn:aws:controltower:{REGION}::control/{CONTROL_TOWER_OPAQUE_ID}
Example:
arn:aws:controltower:us-west-2::control/AWS-GR_AUTOSCALING_LAUNCH_CONFIG_PUBLIC_IP_DISABLED - ARN format for Amazon Web Services Control Catalog: arn:{PARTITION}:controlcatalog:::control/{CONTROL_CATALOG_OPAQUE_ID}
You can find the {CONTROL_CATALOG_OPAQUE_ID} in the Amazon Web Services Control Tower Controls Reference Guide, or in the Amazon Web Services Control Tower console, on the Control details page.
The Amazon Web Services Control Tower APIs for enabled controls, such as GetEnabledControl and ListEnabledControls always return an ARN of the same type given when the control was enabled.
To get the targetIdentifier :
The targetIdentifier is the ARN for an OU.
In the Amazon Web Services Organizations console, you can find the ARN for the OU on the Organizational unit details page associated with that OU.
OU ARN format:
arn:${Partition}:organizations::${MasterAccountId}:ou/o-${OrganizationId}/ou-${OrganizationalUnitId}
About landing zone APIs ¶
You can configure and launch an Amazon Web Services Control Tower landing zone with APIs. For an introduction and steps, see Getting started with Amazon Web Services Control Tower using APIs.
For an overview of landing zone API operations, see Amazon Web Services Control Tower supports landing zone APIs. The individual API operations for landing zones are detailed in this document, the API reference manual, in the "Actions" section.
About baseline APIs ¶
You can apply the AWSControlTowerBaseline baseline to an organizational unit (OU) as a way to register the OU with Amazon Web Services Control Tower, programmatically. For a general overview of this capability, see Amazon Web Services Control Tower supports APIs for OU registration and configuration with baselines.
You can call the baseline API operations to view the baselines that Amazon Web Services Control Tower enables for your landing zone, on your behalf, when setting up the landing zone. These baselines are read-only baselines.
The individual API operations for baselines are detailed in this document, the API reference manual , in the "Actions" section. For usage examples, see Baseline API input and output examples with CLI.
About Amazon Web Services Control Catalog identifiers
The EnableControl and DisableControl API operations can be called by specifying either the Amazon Web Services Control Tower identifer or the Amazon Web Services Control Catalog identifier. The API response returns the same type of identifier that you specified when calling the API.
If you use an Amazon Web Services Control Tower identifier to call the EnableControl API, and then call EnableControl again with an Amazon Web Services Control Catalog identifier, Amazon Web Services Control Tower returns an error message stating that the control is already enabled. Similar behavior applies to the DisableControl API operation.
Mandatory controls and the landing-zone-level Region deny control have Amazon Web Services Control Tower identifiers only.
Details and examples ¶
Control API input and output examples with CLI
Baseline API input and output examples with CLI
Enable controls with CloudFormation
Launch a landing zone with CloudFormation
Control metadata tables (large page)
Control availability by Region tables (large page)
List of identifiers for legacy controls
Creating Amazon Web Services Control Tower resources with Amazon Web Services CloudFormation
To view the open source resource repository on GitHub, see aws-cloudformation/aws-cloudformation-resource-providers-controltower
Recording API Requests ¶
Amazon Web Services Control Tower supports Amazon Web Services CloudTrail, a service that records Amazon Web Services API calls for your Amazon Web Services account and delivers log files to an Amazon S3 bucket. By using information collected by CloudTrail, you can determine which requests the Amazon Web Services Control Tower service received, who made the request and when, and so on. For more about Amazon Web Services Control Tower and its support for CloudTrail, see Logging Amazon Web Services Control Tower Actions with Amazon Web Services CloudTrailin the Amazon Web Services Control Tower User Guide. To learn more about CloudTrail, including how to turn it on and find your log files, see the Amazon Web Services CloudTrail User Guide.
Index ¶
- Constants
- func NewDefaultEndpointResolver() *internalendpoints.Resolver
- func WithAPIOptions(optFns ...func(*middleware.Stack) error) func(*Options)
- func WithEndpointResolver(v EndpointResolver) func(*Options)deprecated
- func WithEndpointResolverV2(v EndpointResolverV2) func(*Options)
- func WithSigV4SigningName(name string) func(*Options)
- func WithSigV4SigningRegion(region string) func(*Options)
- type AuthResolverParameters
- type AuthSchemeResolver
- type Client
- func (c *Client) CreateLandingZone(ctx context.Context, params *CreateLandingZoneInput, optFns ...func(*Options)) (*CreateLandingZoneOutput, error)
- func (c *Client) DeleteLandingZone(ctx context.Context, params *DeleteLandingZoneInput, optFns ...func(*Options)) (*DeleteLandingZoneOutput, error)
- func (c *Client) DisableBaseline(ctx context.Context, params *DisableBaselineInput, optFns ...func(*Options)) (*DisableBaselineOutput, error)
- func (c *Client) DisableControl(ctx context.Context, params *DisableControlInput, optFns ...func(*Options)) (*DisableControlOutput, error)
- func (c *Client) EnableBaseline(ctx context.Context, params *EnableBaselineInput, optFns ...func(*Options)) (*EnableBaselineOutput, error)
- func (c *Client) EnableControl(ctx context.Context, params *EnableControlInput, optFns ...func(*Options)) (*EnableControlOutput, error)
- func (c *Client) GetBaseline(ctx context.Context, params *GetBaselineInput, optFns ...func(*Options)) (*GetBaselineOutput, error)
- func (c *Client) GetBaselineOperation(ctx context.Context, params *GetBaselineOperationInput, ...) (*GetBaselineOperationOutput, error)
- func (c *Client) GetControlOperation(ctx context.Context, params *GetControlOperationInput, ...) (*GetControlOperationOutput, error)
- func (c *Client) GetEnabledBaseline(ctx context.Context, params *GetEnabledBaselineInput, optFns ...func(*Options)) (*GetEnabledBaselineOutput, error)
- func (c *Client) GetEnabledControl(ctx context.Context, params *GetEnabledControlInput, optFns ...func(*Options)) (*GetEnabledControlOutput, error)
- func (c *Client) GetLandingZone(ctx context.Context, params *GetLandingZoneInput, optFns ...func(*Options)) (*GetLandingZoneOutput, error)
- func (c *Client) GetLandingZoneOperation(ctx context.Context, params *GetLandingZoneOperationInput, ...) (*GetLandingZoneOperationOutput, error)
- func (c *Client) ListBaselines(ctx context.Context, params *ListBaselinesInput, optFns ...func(*Options)) (*ListBaselinesOutput, error)
- func (c *Client) ListControlOperations(ctx context.Context, params *ListControlOperationsInput, ...) (*ListControlOperationsOutput, error)
- func (c *Client) ListEnabledBaselines(ctx context.Context, params *ListEnabledBaselinesInput, ...) (*ListEnabledBaselinesOutput, error)
- func (c *Client) ListEnabledControls(ctx context.Context, params *ListEnabledControlsInput, ...) (*ListEnabledControlsOutput, error)
- func (c *Client) ListLandingZoneOperations(ctx context.Context, params *ListLandingZoneOperationsInput, ...) (*ListLandingZoneOperationsOutput, error)
- func (c *Client) ListLandingZones(ctx context.Context, params *ListLandingZonesInput, optFns ...func(*Options)) (*ListLandingZonesOutput, error)
- func (c *Client) ListTagsForResource(ctx context.Context, params *ListTagsForResourceInput, ...) (*ListTagsForResourceOutput, error)
- func (c *Client) Options() Options
- func (c *Client) ResetEnabledBaseline(ctx context.Context, params *ResetEnabledBaselineInput, ...) (*ResetEnabledBaselineOutput, error)
- func (c *Client) ResetLandingZone(ctx context.Context, params *ResetLandingZoneInput, optFns ...func(*Options)) (*ResetLandingZoneOutput, error)
- func (c *Client) TagResource(ctx context.Context, params *TagResourceInput, optFns ...func(*Options)) (*TagResourceOutput, error)
- func (c *Client) UntagResource(ctx context.Context, params *UntagResourceInput, optFns ...func(*Options)) (*UntagResourceOutput, error)
- func (c *Client) UpdateEnabledBaseline(ctx context.Context, params *UpdateEnabledBaselineInput, ...) (*UpdateEnabledBaselineOutput, error)
- func (c *Client) UpdateEnabledControl(ctx context.Context, params *UpdateEnabledControlInput, ...) (*UpdateEnabledControlOutput, error)
- func (c *Client) UpdateLandingZone(ctx context.Context, params *UpdateLandingZoneInput, optFns ...func(*Options)) (*UpdateLandingZoneOutput, error)
- type CreateLandingZoneInput
- type CreateLandingZoneOutput
- type DeleteLandingZoneInput
- type DeleteLandingZoneOutput
- type DisableBaselineInput
- type DisableBaselineOutput
- type DisableControlInput
- type DisableControlOutput
- type EnableBaselineInput
- type EnableBaselineOutput
- type EnableControlInput
- type EnableControlOutput
- type EndpointParameters
- type EndpointResolver
- type EndpointResolverFunc
- type EndpointResolverOptions
- type EndpointResolverV2
- type GetBaselineInput
- type GetBaselineOperationInput
- type GetBaselineOperationOutput
- type GetBaselineOutput
- type GetControlOperationInput
- type GetControlOperationOutput
- type GetEnabledBaselineInput
- type GetEnabledBaselineOutput
- type GetEnabledControlInput
- type GetEnabledControlOutput
- type GetLandingZoneInput
- type GetLandingZoneOperationInput
- type GetLandingZoneOperationOutput
- type GetLandingZoneOutput
- type HTTPClient
- type HTTPSignerV4
- type ListBaselinesAPIClient
- type ListBaselinesInput
- type ListBaselinesOutput
- type ListBaselinesPaginator
- type ListBaselinesPaginatorOptions
- type ListControlOperationsAPIClient
- type ListControlOperationsInput
- type ListControlOperationsOutput
- type ListControlOperationsPaginator
- type ListControlOperationsPaginatorOptions
- type ListEnabledBaselinesAPIClient
- type ListEnabledBaselinesInput
- type ListEnabledBaselinesOutput
- type ListEnabledBaselinesPaginator
- type ListEnabledBaselinesPaginatorOptions
- type ListEnabledControlsAPIClient
- type ListEnabledControlsInput
- type ListEnabledControlsOutput
- type ListEnabledControlsPaginator
- type ListEnabledControlsPaginatorOptions
- type ListLandingZoneOperationsAPIClient
- type ListLandingZoneOperationsInput
- type ListLandingZoneOperationsOutput
- type ListLandingZoneOperationsPaginator
- type ListLandingZoneOperationsPaginatorOptions
- type ListLandingZonesAPIClient
- type ListLandingZonesInput
- type ListLandingZonesOutput
- type ListLandingZonesPaginator
- type ListLandingZonesPaginatorOptions
- type ListTagsForResourceInput
- type ListTagsForResourceOutput
- type Options
- type ResetEnabledBaselineInput
- type ResetEnabledBaselineOutput
- type ResetLandingZoneInput
- type ResetLandingZoneOutput
- type ResolveEndpoint
- type TagResourceInput
- type TagResourceOutput
- type UntagResourceInput
- type UntagResourceOutput
- type UpdateEnabledBaselineInput
- type UpdateEnabledBaselineOutput
- type UpdateEnabledControlInput
- type UpdateEnabledControlOutput
- type UpdateLandingZoneInput
- type UpdateLandingZoneOutput
Constants ¶
const ServiceAPIVersion = "2018-05-10"
const ServiceID = "ControlTower"
Variables ¶
This section is empty.
Functions ¶
func NewDefaultEndpointResolver ¶
func NewDefaultEndpointResolver() *internalendpoints.Resolver
NewDefaultEndpointResolver constructs a new service endpoint resolver
func WithAPIOptions ¶
func WithAPIOptions(optFns ...func(*middleware.Stack) error) func(*Options)
WithAPIOptions returns a functional option for setting the Client's APIOptions option.
func WithEndpointResolver
deprecated
func WithEndpointResolver(v EndpointResolver) func(*Options)
Deprecated: EndpointResolver and WithEndpointResolver. Providing a value for this field will likely prevent you from using any endpoint-related service features released after the introduction of EndpointResolverV2 and BaseEndpoint.
To migrate an EndpointResolver implementation that uses a custom endpoint, set the client option BaseEndpoint instead.
func WithEndpointResolverV2 ¶ added in v1.2.0
func WithEndpointResolverV2(v EndpointResolverV2) func(*Options)
WithEndpointResolverV2 returns a functional option for setting the Client's EndpointResolverV2 option.
func WithSigV4SigningName ¶ added in v1.7.1
WithSigV4SigningName applies an override to the authentication workflow to use the given signing name for SigV4-authenticated operations.
This is an advanced setting. The value here is FINAL, taking precedence over the resolved signing name from both auth scheme resolution and endpoint resolution.
func WithSigV4SigningRegion ¶ added in v1.7.1
WithSigV4SigningRegion applies an override to the authentication workflow to use the given signing region for SigV4-authenticated operations.
This is an advanced setting. The value here is FINAL, taking precedence over the resolved signing region from both auth scheme resolution and endpoint resolution.
Types ¶
type AuthResolverParameters ¶ added in v1.7.1
type AuthResolverParameters struct { // The name of the operation being invoked. Operation string // The region in which the operation is being invoked. Region string }
AuthResolverParameters contains the set of inputs necessary for auth scheme resolution.
type AuthSchemeResolver ¶ added in v1.7.1
type AuthSchemeResolver interface {
ResolveAuthSchemes(context.Context, *AuthResolverParameters) ([]*smithyauth.Option, error)
}
AuthSchemeResolver returns a set of possible authentication options for an operation.
type Client ¶
type Client struct {
// contains filtered or unexported fields
}
Client provides the API client to make operations call for AWS Control Tower.
func New ¶
New returns an initialized Client based on the functional options. Provide additional functional options to further configure the behavior of the client, such as changing the client's endpoint or adding custom middleware behavior.
func NewFromConfig ¶
NewFromConfig returns a new client from the provided config.
func (*Client) CreateLandingZone ¶ added in v1.8.0
func (c *Client) CreateLandingZone(ctx context.Context, params *CreateLandingZoneInput, optFns ...func(*Options)) (*CreateLandingZoneOutput, error)
Creates a new landing zone. This API call starts an asynchronous operation that creates and configures a landing zone, based on the parameters specified in the manifest JSON file.
func (*Client) DeleteLandingZone ¶ added in v1.8.0
func (c *Client) DeleteLandingZone(ctx context.Context, params *DeleteLandingZoneInput, optFns ...func(*Options)) (*DeleteLandingZoneOutput, error)
Decommissions a landing zone. This API call starts an asynchronous operation that deletes Amazon Web Services Control Tower resources deployed in accounts managed by Amazon Web Services Control Tower.
func (*Client) DisableBaseline ¶ added in v1.12.0
func (c *Client) DisableBaseline(ctx context.Context, params *DisableBaselineInput, optFns ...func(*Options)) (*DisableBaselineOutput, error)
Disable an EnabledBaseline resource on the specified Target. This API starts an asynchronous operation to remove all resources deployed as part of the baseline enablement. The resource will vary depending on the enabled baseline. For usage examples, see the Amazon Web Services Control Tower User Guide.
func (*Client) DisableControl ¶
func (c *Client) DisableControl(ctx context.Context, params *DisableControlInput, optFns ...func(*Options)) (*DisableControlOutput, error)
This API call turns off a control. It starts an asynchronous operation that deletes Amazon Web Services resources on the specified organizational unit and the accounts it contains. The resources will vary according to the control that you specify. For usage examples, see the Controls Reference Guide.
func (*Client) EnableBaseline ¶ added in v1.12.0
func (c *Client) EnableBaseline(ctx context.Context, params *EnableBaselineInput, optFns ...func(*Options)) (*EnableBaselineOutput, error)
Enable (apply) a Baseline to a Target. This API starts an asynchronous operation to deploy resources specified by the Baseline to the specified Target. For usage examples, see the Amazon Web Services Control Tower User Guide.
func (*Client) EnableControl ¶
func (c *Client) EnableControl(ctx context.Context, params *EnableControlInput, optFns ...func(*Options)) (*EnableControlOutput, error)
This API call activates a control. It starts an asynchronous operation that creates Amazon Web Services resources on the specified organizational unit and the accounts it contains. The resources created will vary according to the control that you specify. For usage examples, see the Controls Reference Guide.
func (*Client) GetBaseline ¶ added in v1.12.0
func (c *Client) GetBaseline(ctx context.Context, params *GetBaselineInput, optFns ...func(*Options)) (*GetBaselineOutput, error)
Retrieve details about an existing Baseline resource by specifying its identifier. For usage examples, see the Amazon Web Services Control Tower User Guide.
func (*Client) GetBaselineOperation ¶ added in v1.12.0
func (c *Client) GetBaselineOperation(ctx context.Context, params *GetBaselineOperationInput, optFns ...func(*Options)) (*GetBaselineOperationOutput, error)
Returns the details of an asynchronous baseline operation, as initiated by any of these APIs: EnableBaseline , DisableBaseline , UpdateEnabledBaseline , ResetEnabledBaseline . A status message is displayed in case of operation failure. For usage examples, see the Amazon Web Services Control Tower User Guide.
func (*Client) GetControlOperation ¶
func (c *Client) GetControlOperation(ctx context.Context, params *GetControlOperationInput, optFns ...func(*Options)) (*GetControlOperationOutput, error)
Returns the status of a particular EnableControl or DisableControl operation. Displays a message in case of error. Details for an operation are available for 90 days. For usage examples, see the Controls Reference Guide.
func (*Client) GetEnabledBaseline ¶ added in v1.12.0
func (c *Client) GetEnabledBaseline(ctx context.Context, params *GetEnabledBaselineInput, optFns ...func(*Options)) (*GetEnabledBaselineOutput, error)
Retrieve details of an EnabledBaseline resource by specifying its identifier.
func (*Client) GetEnabledControl ¶ added in v1.4.0
func (c *Client) GetEnabledControl(ctx context.Context, params *GetEnabledControlInput, optFns ...func(*Options)) (*GetEnabledControlOutput, error)
Retrieves details about an enabled control. For usage examples, see the Controls Reference Guide.
func (*Client) GetLandingZone ¶ added in v1.8.0
func (c *Client) GetLandingZone(ctx context.Context, params *GetLandingZoneInput, optFns ...func(*Options)) (*GetLandingZoneOutput, error)
Returns details about the landing zone. Displays a message in case of error.
func (*Client) GetLandingZoneOperation ¶ added in v1.8.0
func (c *Client) GetLandingZoneOperation(ctx context.Context, params *GetLandingZoneOperationInput, optFns ...func(*Options)) (*GetLandingZoneOperationOutput, error)
Returns the status of the specified landing zone operation. Details for an operation are available for 90 days.
func (*Client) ListBaselines ¶ added in v1.12.0
func (c *Client) ListBaselines(ctx context.Context, params *ListBaselinesInput, optFns ...func(*Options)) (*ListBaselinesOutput, error)
Returns a summary list of all available baselines. For usage examples, see the Amazon Web Services Control Tower User Guide.
func (*Client) ListControlOperations ¶ added in v1.14.0
func (c *Client) ListControlOperations(ctx context.Context, params *ListControlOperationsInput, optFns ...func(*Options)) (*ListControlOperationsOutput, error)
Provides a list of operations in progress or queued. For usage examples, see ListControlOperation examples.
func (*Client) ListEnabledBaselines ¶ added in v1.12.0
func (c *Client) ListEnabledBaselines(ctx context.Context, params *ListEnabledBaselinesInput, optFns ...func(*Options)) (*ListEnabledBaselinesOutput, error)
Returns a list of summaries describing EnabledBaseline resources. You can filter the list by the corresponding Baseline or Target of the EnabledBaseline resources. For usage examples, see the Amazon Web Services Control Tower User Guide.
func (*Client) ListEnabledControls ¶
func (c *Client) ListEnabledControls(ctx context.Context, params *ListEnabledControlsInput, optFns ...func(*Options)) (*ListEnabledControlsOutput, error)
Lists the controls enabled by Amazon Web Services Control Tower on the specified organizational unit and the accounts it contains. For usage examples, see the Controls Reference Guide.
func (*Client) ListLandingZoneOperations ¶ added in v1.16.0
func (c *Client) ListLandingZoneOperations(ctx context.Context, params *ListLandingZoneOperationsInput, optFns ...func(*Options)) (*ListLandingZoneOperationsOutput, error)
Lists all landing zone operations from the past 90 days. Results are sorted by time, with the most recent operation first.
func (*Client) ListLandingZones ¶ added in v1.8.0
func (c *Client) ListLandingZones(ctx context.Context, params *ListLandingZonesInput, optFns ...func(*Options)) (*ListLandingZonesOutput, error)
Returns the landing zone ARN for the landing zone deployed in your managed account. This API also creates an ARN for existing accounts that do not yet have a landing zone ARN.
Returns one landing zone ARN.
func (*Client) ListTagsForResource ¶ added in v1.7.0
func (c *Client) ListTagsForResource(ctx context.Context, params *ListTagsForResourceInput, optFns ...func(*Options)) (*ListTagsForResourceOutput, error)
Returns a list of tags associated with the resource. For usage examples, see the Controls Reference Guide.
func (*Client) Options ¶ added in v1.10.0
Options returns a copy of the client configuration.
Callers SHOULD NOT perform mutations on any inner structures within client config. Config overrides should instead be made on a per-operation basis through functional options.
func (*Client) ResetEnabledBaseline ¶ added in v1.12.0
func (c *Client) ResetEnabledBaseline(ctx context.Context, params *ResetEnabledBaselineInput, optFns ...func(*Options)) (*ResetEnabledBaselineOutput, error)
Re-enables an EnabledBaseline resource. For example, this API can re-apply the existing Baseline after a new member account is moved to the target OU. For usage examples, see the Amazon Web Services Control Tower User Guide.
func (*Client) ResetLandingZone ¶ added in v1.8.0
func (c *Client) ResetLandingZone(ctx context.Context, params *ResetLandingZoneInput, optFns ...func(*Options)) (*ResetLandingZoneOutput, error)
This API call resets a landing zone. It starts an asynchronous operation that resets the landing zone to the parameters specified in the original configuration, which you specified in the manifest file. Nothing in the manifest file's original landing zone configuration is changed during the reset process, by default. This API is not the same as a rollback of a landing zone version, which is not a supported operation.
func (*Client) TagResource ¶ added in v1.7.0
func (c *Client) TagResource(ctx context.Context, params *TagResourceInput, optFns ...func(*Options)) (*TagResourceOutput, error)
Applies tags to a resource. For usage examples, see the Controls Reference Guide.
func (*Client) UntagResource ¶ added in v1.7.0
func (c *Client) UntagResource(ctx context.Context, params *UntagResourceInput, optFns ...func(*Options)) (*UntagResourceOutput, error)
Removes tags from a resource. For usage examples, see the Controls Reference Guide.
func (*Client) UpdateEnabledBaseline ¶ added in v1.12.0
func (c *Client) UpdateEnabledBaseline(ctx context.Context, params *UpdateEnabledBaselineInput, optFns ...func(*Options)) (*UpdateEnabledBaselineOutput, error)
Updates an EnabledBaseline resource's applied parameters or version. For usage examples, see the Amazon Web Services Control Tower User Guide.
func (*Client) UpdateEnabledControl ¶ added in v1.9.0
func (c *Client) UpdateEnabledControl(ctx context.Context, params *UpdateEnabledControlInput, optFns ...func(*Options)) (*UpdateEnabledControlOutput, error)
Updates the configuration of an already enabled control.
If the enabled control shows an EnablementStatus of SUCCEEDED, supply parameters that are different from the currently configured parameters. Otherwise, Amazon Web Services Control Tower will not accept the request.
If the enabled control shows an EnablementStatus of FAILED, Amazon Web Services Control Tower updates the control to match any valid parameters that you supply.
If the DriftSummary status for the control shows as DRIFTED, you cannot call this API. Instead, you can update the control by calling DisableControl and again calling EnableControl , or you can run an extending governance operation. For usage examples, see the Controls Reference Guide.
func (*Client) UpdateLandingZone ¶ added in v1.8.0
func (c *Client) UpdateLandingZone(ctx context.Context, params *UpdateLandingZoneInput, optFns ...func(*Options)) (*UpdateLandingZoneOutput, error)
This API call updates the landing zone. It starts an asynchronous operation that updates the landing zone based on the new landing zone version, or on the changed parameters specified in the updated manifest file.
type CreateLandingZoneInput ¶ added in v1.8.0
type CreateLandingZoneInput struct { // The manifest JSON file is a text file that describes your Amazon Web Services // resources. For examples, review [Launch your landing zone]. // // [Launch your landing zone]: https://docs.aws.amazon.com/controltower/latest/userguide/lz-api-launch // // This member is required. Manifest document.Interface // The landing zone version, for example, 3.0. // // This member is required. Version *string // Tags to be applied to the landing zone. Tags map[string]string // contains filtered or unexported fields }
type CreateLandingZoneOutput ¶ added in v1.8.0
type CreateLandingZoneOutput struct { // The ARN of the landing zone resource. // // This member is required. Arn *string // A unique identifier assigned to a CreateLandingZone operation. You can use this // identifier as an input of GetLandingZoneOperation to check the operation's // status. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type DeleteLandingZoneInput ¶ added in v1.8.0
type DeleteLandingZoneInput struct { // The unique identifier of the landing zone. // // This member is required. LandingZoneIdentifier *string // contains filtered or unexported fields }
type DeleteLandingZoneOutput ¶ added in v1.8.0
type DeleteLandingZoneOutput struct { // >A unique identifier assigned to a DeleteLandingZone operation. You can use // this identifier as an input parameter of GetLandingZoneOperation to check the // operation's status. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type DisableBaselineInput ¶ added in v1.12.0
type DisableBaselineInput struct { // Identifier of the EnabledBaseline resource to be deactivated, in ARN format. // // This member is required. EnabledBaselineIdentifier *string // contains filtered or unexported fields }
type DisableBaselineOutput ¶ added in v1.12.0
type DisableBaselineOutput struct { // The ID (in UUID format) of the asynchronous DisableBaseline operation. This // operationIdentifier is used to track status through calls to the // GetBaselineOperation API. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type DisableControlInput ¶
type DisableControlInput struct { // The ARN of the control. Only Strongly recommended and Elective controls are // permitted, with the exception of the Region deny control. For information on how // to find the controlIdentifier , see [the overview page]. // // [the overview page]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html // // This member is required. ControlIdentifier *string // The ARN of the organizational unit. For information on how to find the // targetIdentifier , see [the overview page]. // // [the overview page]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html // // This member is required. TargetIdentifier *string // contains filtered or unexported fields }
type DisableControlOutput ¶
type DisableControlOutput struct { // The ID of the asynchronous operation, which is used to track status. The // operation is available for 90 days. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type EnableBaselineInput ¶ added in v1.12.0
type EnableBaselineInput struct { // The ARN of the baseline to be enabled. // // This member is required. BaselineIdentifier *string // The specific version to be enabled of the specified baseline. // // This member is required. BaselineVersion *string // The ARN of the target on which the baseline will be enabled. Only OUs are // supported as targets. // // This member is required. TargetIdentifier *string // A list of key-value objects that specify enablement parameters, where key is a // string and value is a document of any type. Parameters []types.EnabledBaselineParameter // Tags associated with input to EnableBaseline . Tags map[string]string // contains filtered or unexported fields }
type EnableBaselineOutput ¶ added in v1.12.0
type EnableBaselineOutput struct { // The ARN of the EnabledBaseline resource. // // This member is required. Arn *string // The ID (in UUID format) of the asynchronous EnableBaseline operation. This // operationIdentifier is used to track status through calls to the // GetBaselineOperation API. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type EnableControlInput ¶
type EnableControlInput struct { // The ARN of the control. Only Strongly recommended and Elective controls are // permitted, with the exception of the Region deny control. For information on how // to find the controlIdentifier , see [the overview page]. // // [the overview page]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html // // This member is required. ControlIdentifier *string // The ARN of the organizational unit. For information on how to find the // targetIdentifier , see [the overview page]. // // [the overview page]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html // // This member is required. TargetIdentifier *string // A list of input parameter values, which are specified to configure the control // when you enable it. Parameters []types.EnabledControlParameter // Tags to be applied to the EnabledControl resource. Tags map[string]string // contains filtered or unexported fields }
type EnableControlOutput ¶
type EnableControlOutput struct { // The ID of the asynchronous operation, which is used to track status. The // operation is available for 90 days. // // This member is required. OperationIdentifier *string // The ARN of the EnabledControl resource. Arn *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type EndpointParameters ¶ added in v1.2.0
type EndpointParameters struct { // The AWS region used to dispatch the request. // // Parameter is // required. // // AWS::Region Region *string // When true, use the dual-stack endpoint. If the configured endpoint does not // support dual-stack, dispatching the request MAY return an error. // // Defaults to // false if no value is provided. // // AWS::UseDualStack UseDualStack *bool // When true, send this request to the FIPS-compliant regional endpoint. If the // configured endpoint does not have a FIPS compliant endpoint, dispatching the // request will return an error. // // Defaults to false if no value is // provided. // // AWS::UseFIPS UseFIPS *bool // Override the endpoint used to send this request // // Parameter is // required. // // SDK::Endpoint Endpoint *string }
EndpointParameters provides the parameters that influence how endpoints are resolved.
func (EndpointParameters) ValidateRequired ¶ added in v1.2.0
func (p EndpointParameters) ValidateRequired() error
ValidateRequired validates required parameters are set.
func (EndpointParameters) WithDefaults ¶ added in v1.2.0
func (p EndpointParameters) WithDefaults() EndpointParameters
WithDefaults returns a shallow copy of EndpointParameterswith default values applied to members where applicable.
type EndpointResolver ¶
type EndpointResolver interface {
ResolveEndpoint(region string, options EndpointResolverOptions) (aws.Endpoint, error)
}
EndpointResolver interface for resolving service endpoints.
func EndpointResolverFromURL ¶
func EndpointResolverFromURL(url string, optFns ...func(*aws.Endpoint)) EndpointResolver
EndpointResolverFromURL returns an EndpointResolver configured using the provided endpoint url. By default, the resolved endpoint resolver uses the client region as signing region, and the endpoint source is set to EndpointSourceCustom.You can provide functional options to configure endpoint values for the resolved endpoint.
type EndpointResolverFunc ¶
type EndpointResolverFunc func(region string, options EndpointResolverOptions) (aws.Endpoint, error)
EndpointResolverFunc is a helper utility that wraps a function so it satisfies the EndpointResolver interface. This is useful when you want to add additional endpoint resolving logic, or stub out specific endpoints with custom values.
func (EndpointResolverFunc) ResolveEndpoint ¶
func (fn EndpointResolverFunc) ResolveEndpoint(region string, options EndpointResolverOptions) (endpoint aws.Endpoint, err error)
type EndpointResolverOptions ¶
type EndpointResolverOptions = internalendpoints.Options
EndpointResolverOptions is the service endpoint resolver options
type EndpointResolverV2 ¶ added in v1.2.0
type EndpointResolverV2 interface { // ResolveEndpoint attempts to resolve the endpoint with the provided options, // returning the endpoint if found. Otherwise an error is returned. ResolveEndpoint(ctx context.Context, params EndpointParameters) ( smithyendpoints.Endpoint, error, ) }
EndpointResolverV2 provides the interface for resolving service endpoints.
func NewDefaultEndpointResolverV2 ¶ added in v1.2.0
func NewDefaultEndpointResolverV2() EndpointResolverV2
type GetBaselineInput ¶ added in v1.12.0
type GetBaselineInput struct { // The ARN of the Baseline resource to be retrieved. // // This member is required. BaselineIdentifier *string // contains filtered or unexported fields }
type GetBaselineOperationInput ¶ added in v1.12.0
type GetBaselineOperationInput struct { // The operation ID returned from mutating asynchronous APIs (Enable, Disable, // Update, Reset). // // This member is required. OperationIdentifier *string // contains filtered or unexported fields }
type GetBaselineOperationOutput ¶ added in v1.12.0
type GetBaselineOperationOutput struct { // A baselineOperation object that shows information about the specified operation // ID. // // This member is required. BaselineOperation *types.BaselineOperation // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type GetBaselineOutput ¶ added in v1.12.0
type GetBaselineOutput struct { // The baseline ARN. // // This member is required. Arn *string // A user-friendly name for the baseline. // // This member is required. Name *string // A description of the baseline. Description *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type GetControlOperationInput ¶
type GetControlOperationInput struct { // The ID of the asynchronous operation, which is used to track status. The // operation is available for 90 days. // // This member is required. OperationIdentifier *string // contains filtered or unexported fields }
type GetControlOperationOutput ¶
type GetControlOperationOutput struct { // An operation performed by the control. // // This member is required. ControlOperation *types.ControlOperation // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type GetEnabledBaselineInput ¶ added in v1.12.0
type GetEnabledBaselineInput struct { // Identifier of the EnabledBaseline resource to be retrieved, in ARN format. // // This member is required. EnabledBaselineIdentifier *string // contains filtered or unexported fields }
type GetEnabledBaselineOutput ¶ added in v1.12.0
type GetEnabledBaselineOutput struct { // Details of the EnabledBaseline resource. EnabledBaselineDetails *types.EnabledBaselineDetails // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type GetEnabledControlInput ¶ added in v1.4.0
type GetEnabledControlInput struct { // The controlIdentifier of the enabled control. // // This member is required. EnabledControlIdentifier *string // contains filtered or unexported fields }
type GetEnabledControlOutput ¶ added in v1.4.0
type GetEnabledControlOutput struct { // Information about the enabled control. // // This member is required. EnabledControlDetails *types.EnabledControlDetails // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type GetLandingZoneInput ¶ added in v1.8.0
type GetLandingZoneInput struct { // The unique identifier of the landing zone. // // This member is required. LandingZoneIdentifier *string // contains filtered or unexported fields }
type GetLandingZoneOperationInput ¶ added in v1.8.0
type GetLandingZoneOperationInput struct { // A unique identifier assigned to a landing zone operation. // // This member is required. OperationIdentifier *string // contains filtered or unexported fields }
type GetLandingZoneOperationOutput ¶ added in v1.8.0
type GetLandingZoneOperationOutput struct { // Details about a landing zone operation. // // This member is required. OperationDetails *types.LandingZoneOperationDetail // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type GetLandingZoneOutput ¶ added in v1.8.0
type GetLandingZoneOutput struct { // Information about the landing zone. // // This member is required. LandingZone *types.LandingZoneDetail // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type HTTPSignerV4 ¶
type ListBaselinesAPIClient ¶ added in v1.12.0
type ListBaselinesAPIClient interface {
ListBaselines(context.Context, *ListBaselinesInput, ...func(*Options)) (*ListBaselinesOutput, error)
}
ListBaselinesAPIClient is a client that implements the ListBaselines operation.
type ListBaselinesInput ¶ added in v1.12.0
type ListBaselinesOutput ¶ added in v1.12.0
type ListBaselinesOutput struct { // A list of Baseline object details. // // This member is required. Baselines []types.BaselineSummary // A pagination token. NextToken *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type ListBaselinesPaginator ¶ added in v1.12.0
type ListBaselinesPaginator struct {
// contains filtered or unexported fields
}
ListBaselinesPaginator is a paginator for ListBaselines
func NewListBaselinesPaginator ¶ added in v1.12.0
func NewListBaselinesPaginator(client ListBaselinesAPIClient, params *ListBaselinesInput, optFns ...func(*ListBaselinesPaginatorOptions)) *ListBaselinesPaginator
NewListBaselinesPaginator returns a new ListBaselinesPaginator
func (*ListBaselinesPaginator) HasMorePages ¶ added in v1.12.0
func (p *ListBaselinesPaginator) HasMorePages() bool
HasMorePages returns a boolean indicating whether more pages are available
func (*ListBaselinesPaginator) NextPage ¶ added in v1.12.0
func (p *ListBaselinesPaginator) NextPage(ctx context.Context, optFns ...func(*Options)) (*ListBaselinesOutput, error)
NextPage retrieves the next ListBaselines page.
type ListBaselinesPaginatorOptions ¶ added in v1.12.0
type ListBaselinesPaginatorOptions struct { // The maximum number of results to be shown. Limit int32 // Set to true if pagination should stop if the service returns a pagination token // that matches the most recent token provided to the service. StopOnDuplicateToken bool }
ListBaselinesPaginatorOptions is the paginator options for ListBaselines
type ListControlOperationsAPIClient ¶ added in v1.14.0
type ListControlOperationsAPIClient interface {
ListControlOperations(context.Context, *ListControlOperationsInput, ...func(*Options)) (*ListControlOperationsOutput, error)
}
ListControlOperationsAPIClient is a client that implements the ListControlOperations operation.
type ListControlOperationsInput ¶ added in v1.14.0
type ListControlOperationsInput struct { // An input filter for the ListControlOperations API that lets you select the // types of control operations to view. Filter *types.ControlOperationFilter // The maximum number of results to be shown. MaxResults *int32 // A pagination token. NextToken *string // contains filtered or unexported fields }
type ListControlOperationsOutput ¶ added in v1.14.0
type ListControlOperationsOutput struct { // Returns a list of output from control operations. // // This member is required. ControlOperations []types.ControlOperationSummary // A pagination token. NextToken *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type ListControlOperationsPaginator ¶ added in v1.14.0
type ListControlOperationsPaginator struct {
// contains filtered or unexported fields
}
ListControlOperationsPaginator is a paginator for ListControlOperations
func NewListControlOperationsPaginator ¶ added in v1.14.0
func NewListControlOperationsPaginator(client ListControlOperationsAPIClient, params *ListControlOperationsInput, optFns ...func(*ListControlOperationsPaginatorOptions)) *ListControlOperationsPaginator
NewListControlOperationsPaginator returns a new ListControlOperationsPaginator
func (*ListControlOperationsPaginator) HasMorePages ¶ added in v1.14.0
func (p *ListControlOperationsPaginator) HasMorePages() bool
HasMorePages returns a boolean indicating whether more pages are available
func (*ListControlOperationsPaginator) NextPage ¶ added in v1.14.0
func (p *ListControlOperationsPaginator) NextPage(ctx context.Context, optFns ...func(*Options)) (*ListControlOperationsOutput, error)
NextPage retrieves the next ListControlOperations page.
type ListControlOperationsPaginatorOptions ¶ added in v1.14.0
type ListControlOperationsPaginatorOptions struct { // The maximum number of results to be shown. Limit int32 // Set to true if pagination should stop if the service returns a pagination token // that matches the most recent token provided to the service. StopOnDuplicateToken bool }
ListControlOperationsPaginatorOptions is the paginator options for ListControlOperations
type ListEnabledBaselinesAPIClient ¶ added in v1.12.0
type ListEnabledBaselinesAPIClient interface {
ListEnabledBaselines(context.Context, *ListEnabledBaselinesInput, ...func(*Options)) (*ListEnabledBaselinesOutput, error)
}
ListEnabledBaselinesAPIClient is a client that implements the ListEnabledBaselines operation.
type ListEnabledBaselinesInput ¶ added in v1.12.0
type ListEnabledBaselinesInput struct { // A filter applied on the ListEnabledBaseline operation. Allowed filters are // baselineIdentifiers and targetIdentifiers . The filter can be applied for // either, or both. Filter *types.EnabledBaselineFilter // The maximum number of results to be shown. MaxResults *int32 // A pagination token. NextToken *string // contains filtered or unexported fields }
type ListEnabledBaselinesOutput ¶ added in v1.12.0
type ListEnabledBaselinesOutput struct { // Retuens a list of summaries of EnabledBaseline resources. // // This member is required. EnabledBaselines []types.EnabledBaselineSummary // A pagination token. NextToken *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type ListEnabledBaselinesPaginator ¶ added in v1.12.0
type ListEnabledBaselinesPaginator struct {
// contains filtered or unexported fields
}
ListEnabledBaselinesPaginator is a paginator for ListEnabledBaselines
func NewListEnabledBaselinesPaginator ¶ added in v1.12.0
func NewListEnabledBaselinesPaginator(client ListEnabledBaselinesAPIClient, params *ListEnabledBaselinesInput, optFns ...func(*ListEnabledBaselinesPaginatorOptions)) *ListEnabledBaselinesPaginator
NewListEnabledBaselinesPaginator returns a new ListEnabledBaselinesPaginator
func (*ListEnabledBaselinesPaginator) HasMorePages ¶ added in v1.12.0
func (p *ListEnabledBaselinesPaginator) HasMorePages() bool
HasMorePages returns a boolean indicating whether more pages are available
func (*ListEnabledBaselinesPaginator) NextPage ¶ added in v1.12.0
func (p *ListEnabledBaselinesPaginator) NextPage(ctx context.Context, optFns ...func(*Options)) (*ListEnabledBaselinesOutput, error)
NextPage retrieves the next ListEnabledBaselines page.
type ListEnabledBaselinesPaginatorOptions ¶ added in v1.12.0
type ListEnabledBaselinesPaginatorOptions struct { // The maximum number of results to be shown. Limit int32 // Set to true if pagination should stop if the service returns a pagination token // that matches the most recent token provided to the service. StopOnDuplicateToken bool }
ListEnabledBaselinesPaginatorOptions is the paginator options for ListEnabledBaselines
type ListEnabledControlsAPIClient ¶
type ListEnabledControlsAPIClient interface {
ListEnabledControls(context.Context, *ListEnabledControlsInput, ...func(*Options)) (*ListEnabledControlsOutput, error)
}
ListEnabledControlsAPIClient is a client that implements the ListEnabledControls operation.
type ListEnabledControlsInput ¶
type ListEnabledControlsInput struct { // An input filter for the ListEnabledControls API that lets you select the types // of control operations to view. Filter *types.EnabledControlFilter // How many results to return per API call. MaxResults *int32 // The token to continue the list from a previous API call with the same // parameters. NextToken *string // The ARN of the organizational unit. For information on how to find the // targetIdentifier , see [the overview page]. // // [the overview page]: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html TargetIdentifier *string // contains filtered or unexported fields }
type ListEnabledControlsOutput ¶
type ListEnabledControlsOutput struct { // Lists the controls enabled by Amazon Web Services Control Tower on the // specified organizational unit and the accounts it contains. // // This member is required. EnabledControls []types.EnabledControlSummary // Retrieves the next page of results. If the string is empty, the response is the // end of the results. NextToken *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type ListEnabledControlsPaginator ¶
type ListEnabledControlsPaginator struct {
// contains filtered or unexported fields
}
ListEnabledControlsPaginator is a paginator for ListEnabledControls
func NewListEnabledControlsPaginator ¶
func NewListEnabledControlsPaginator(client ListEnabledControlsAPIClient, params *ListEnabledControlsInput, optFns ...func(*ListEnabledControlsPaginatorOptions)) *ListEnabledControlsPaginator
NewListEnabledControlsPaginator returns a new ListEnabledControlsPaginator
func (*ListEnabledControlsPaginator) HasMorePages ¶
func (p *ListEnabledControlsPaginator) HasMorePages() bool
HasMorePages returns a boolean indicating whether more pages are available
func (*ListEnabledControlsPaginator) NextPage ¶
func (p *ListEnabledControlsPaginator) NextPage(ctx context.Context, optFns ...func(*Options)) (*ListEnabledControlsOutput, error)
NextPage retrieves the next ListEnabledControls page.
type ListEnabledControlsPaginatorOptions ¶
type ListEnabledControlsPaginatorOptions struct { // How many results to return per API call. Limit int32 // Set to true if pagination should stop if the service returns a pagination token // that matches the most recent token provided to the service. StopOnDuplicateToken bool }
ListEnabledControlsPaginatorOptions is the paginator options for ListEnabledControls
type ListLandingZoneOperationsAPIClient ¶ added in v1.16.0
type ListLandingZoneOperationsAPIClient interface {
ListLandingZoneOperations(context.Context, *ListLandingZoneOperationsInput, ...func(*Options)) (*ListLandingZoneOperationsOutput, error)
}
ListLandingZoneOperationsAPIClient is a client that implements the ListLandingZoneOperations operation.
type ListLandingZoneOperationsInput ¶ added in v1.16.0
type ListLandingZoneOperationsInput struct { // An input filter for the ListLandingZoneOperations API that lets you select the // types of landing zone operations to view. Filter *types.LandingZoneOperationFilter // How many results to return per API call. MaxResults *int32 // The token to continue the list from a previous API call with the same // parameters. NextToken *string // contains filtered or unexported fields }
type ListLandingZoneOperationsOutput ¶ added in v1.16.0
type ListLandingZoneOperationsOutput struct { // Lists landing zone operations. // // This member is required. LandingZoneOperations []types.LandingZoneOperationSummary // Retrieves the next page of results. If the string is empty, the response is the // end of the results. NextToken *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type ListLandingZoneOperationsPaginator ¶ added in v1.16.0
type ListLandingZoneOperationsPaginator struct {
// contains filtered or unexported fields
}
ListLandingZoneOperationsPaginator is a paginator for ListLandingZoneOperations
func NewListLandingZoneOperationsPaginator ¶ added in v1.16.0
func NewListLandingZoneOperationsPaginator(client ListLandingZoneOperationsAPIClient, params *ListLandingZoneOperationsInput, optFns ...func(*ListLandingZoneOperationsPaginatorOptions)) *ListLandingZoneOperationsPaginator
NewListLandingZoneOperationsPaginator returns a new ListLandingZoneOperationsPaginator
func (*ListLandingZoneOperationsPaginator) HasMorePages ¶ added in v1.16.0
func (p *ListLandingZoneOperationsPaginator) HasMorePages() bool
HasMorePages returns a boolean indicating whether more pages are available
func (*ListLandingZoneOperationsPaginator) NextPage ¶ added in v1.16.0
func (p *ListLandingZoneOperationsPaginator) NextPage(ctx context.Context, optFns ...func(*Options)) (*ListLandingZoneOperationsOutput, error)
NextPage retrieves the next ListLandingZoneOperations page.
type ListLandingZoneOperationsPaginatorOptions ¶ added in v1.16.0
type ListLandingZoneOperationsPaginatorOptions struct { // How many results to return per API call. Limit int32 // Set to true if pagination should stop if the service returns a pagination token // that matches the most recent token provided to the service. StopOnDuplicateToken bool }
ListLandingZoneOperationsPaginatorOptions is the paginator options for ListLandingZoneOperations
type ListLandingZonesAPIClient ¶ added in v1.8.0
type ListLandingZonesAPIClient interface {
ListLandingZones(context.Context, *ListLandingZonesInput, ...func(*Options)) (*ListLandingZonesOutput, error)
}
ListLandingZonesAPIClient is a client that implements the ListLandingZones operation.
type ListLandingZonesInput ¶ added in v1.8.0
type ListLandingZonesOutput ¶ added in v1.8.0
type ListLandingZonesOutput struct { // The ARN of the landing zone. // // This member is required. LandingZones []types.LandingZoneSummary // Retrieves the next page of results. If the string is empty, the response is the // end of the results. NextToken *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type ListLandingZonesPaginator ¶ added in v1.8.0
type ListLandingZonesPaginator struct {
// contains filtered or unexported fields
}
ListLandingZonesPaginator is a paginator for ListLandingZones
func NewListLandingZonesPaginator ¶ added in v1.8.0
func NewListLandingZonesPaginator(client ListLandingZonesAPIClient, params *ListLandingZonesInput, optFns ...func(*ListLandingZonesPaginatorOptions)) *ListLandingZonesPaginator
NewListLandingZonesPaginator returns a new ListLandingZonesPaginator
func (*ListLandingZonesPaginator) HasMorePages ¶ added in v1.8.0
func (p *ListLandingZonesPaginator) HasMorePages() bool
HasMorePages returns a boolean indicating whether more pages are available
func (*ListLandingZonesPaginator) NextPage ¶ added in v1.8.0
func (p *ListLandingZonesPaginator) NextPage(ctx context.Context, optFns ...func(*Options)) (*ListLandingZonesOutput, error)
NextPage retrieves the next ListLandingZones page.
type ListLandingZonesPaginatorOptions ¶ added in v1.8.0
type ListLandingZonesPaginatorOptions struct { // The maximum number of returned landing zone ARNs, which is one. Limit int32 // Set to true if pagination should stop if the service returns a pagination token // that matches the most recent token provided to the service. StopOnDuplicateToken bool }
ListLandingZonesPaginatorOptions is the paginator options for ListLandingZones
type ListTagsForResourceInput ¶ added in v1.7.0
type ListTagsForResourceInput struct { // The ARN of the resource. // // This member is required. ResourceArn *string // contains filtered or unexported fields }
type ListTagsForResourceOutput ¶ added in v1.7.0
type ListTagsForResourceOutput struct { // A list of tags, as key:value strings. // // This member is required. Tags map[string]string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type Options ¶
type Options struct { // Set of options to modify how an operation is invoked. These apply to all // operations invoked for this client. Use functional options on operation call to // modify this list for per operation behavior. APIOptions []func(*middleware.Stack) error // Indicates how aws account ID is applied in endpoint2.0 routing AccountIDEndpointMode aws.AccountIDEndpointMode // The optional application specific identifier appended to the User-Agent header. AppID string // This endpoint will be given as input to an EndpointResolverV2. It is used for // providing a custom base endpoint that is subject to modifications by the // processing EndpointResolverV2. BaseEndpoint *string // Configures the events that will be sent to the configured logger. ClientLogMode aws.ClientLogMode // The credentials object to use when signing requests. Credentials aws.CredentialsProvider // The configuration DefaultsMode that the SDK should use when constructing the // clients initial default settings. DefaultsMode aws.DefaultsMode // The endpoint options to be used when attempting to resolve an endpoint. EndpointOptions EndpointResolverOptions // The service endpoint resolver. // // Deprecated: Deprecated: EndpointResolver and WithEndpointResolver. Providing a // value for this field will likely prevent you from using any endpoint-related // service features released after the introduction of EndpointResolverV2 and // BaseEndpoint. // // To migrate an EndpointResolver implementation that uses a custom endpoint, set // the client option BaseEndpoint instead. EndpointResolver EndpointResolver // Resolves the endpoint used for a particular service operation. This should be // used over the deprecated EndpointResolver. EndpointResolverV2 EndpointResolverV2 // Signature Version 4 (SigV4) Signer HTTPSignerV4 HTTPSignerV4 // The logger writer interface to write logging messages to. Logger logging.Logger // The region to send requests to. (Required) Region string // RetryMaxAttempts specifies the maximum number attempts an API client will call // an operation that fails with a retryable error. A value of 0 is ignored, and // will not be used to configure the API client created default retryer, or modify // per operation call's retry max attempts. // // If specified in an operation call's functional options with a value that is // different than the constructed client's Options, the Client's Retryer will be // wrapped to use the operation's specific RetryMaxAttempts value. RetryMaxAttempts int // RetryMode specifies the retry mode the API client will be created with, if // Retryer option is not also specified. // // When creating a new API Clients this member will only be used if the Retryer // Options member is nil. This value will be ignored if Retryer is not nil. // // Currently does not support per operation call overrides, may in the future. RetryMode aws.RetryMode // Retryer guides how HTTP requests should be retried in case of recoverable // failures. When nil the API client will use a default retryer. The kind of // default retry created by the API client can be changed with the RetryMode // option. Retryer aws.Retryer // The RuntimeEnvironment configuration, only populated if the DefaultsMode is set // to DefaultsModeAuto and is initialized using config.LoadDefaultConfig . You // should not populate this structure programmatically, or rely on the values here // within your applications. RuntimeEnvironment aws.RuntimeEnvironment // The HTTP client to invoke API calls with. Defaults to client's default HTTP // implementation if nil. HTTPClient HTTPClient // The auth scheme resolver which determines how to authenticate for each // operation. AuthSchemeResolver AuthSchemeResolver // The list of auth schemes supported by the client. AuthSchemes []smithyhttp.AuthScheme // contains filtered or unexported fields }
func (Options) GetIdentityResolver ¶ added in v1.7.1
func (o Options) GetIdentityResolver(schemeID string) smithyauth.IdentityResolver
type ResetEnabledBaselineInput ¶ added in v1.12.0
type ResetEnabledBaselineInput struct { // Specifies the ID of the EnabledBaseline resource to be re-enabled, in ARN // format. // // This member is required. EnabledBaselineIdentifier *string // contains filtered or unexported fields }
type ResetEnabledBaselineOutput ¶ added in v1.12.0
type ResetEnabledBaselineOutput struct { // The ID (in UUID format) of the asynchronous ResetEnabledBaseline operation. // This operationIdentifier is used to track status through calls to the // GetBaselineOperation API. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type ResetLandingZoneInput ¶ added in v1.8.0
type ResetLandingZoneInput struct { // The unique identifier of the landing zone. // // This member is required. LandingZoneIdentifier *string // contains filtered or unexported fields }
type ResetLandingZoneOutput ¶ added in v1.8.0
type ResetLandingZoneOutput struct { // A unique identifier assigned to a ResetLandingZone operation. You can use this // identifier as an input parameter of GetLandingZoneOperation to check the // operation's status. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type ResolveEndpoint ¶
type ResolveEndpoint struct { Resolver EndpointResolver Options EndpointResolverOptions }
func (*ResolveEndpoint) HandleSerialize ¶
func (m *ResolveEndpoint) HandleSerialize(ctx context.Context, in middleware.SerializeInput, next middleware.SerializeHandler) ( out middleware.SerializeOutput, metadata middleware.Metadata, err error, )
func (*ResolveEndpoint) ID ¶
func (*ResolveEndpoint) ID() string
type TagResourceInput ¶ added in v1.7.0
type TagResourceOutput ¶ added in v1.7.0
type TagResourceOutput struct { // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type UntagResourceInput ¶ added in v1.7.0
type UntagResourceOutput ¶ added in v1.7.0
type UntagResourceOutput struct { // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type UpdateEnabledBaselineInput ¶ added in v1.12.0
type UpdateEnabledBaselineInput struct { // Specifies the new Baseline version, to which the EnabledBaseline should be // updated. // // This member is required. BaselineVersion *string // Specifies the EnabledBaseline resource to be updated. // // This member is required. EnabledBaselineIdentifier *string // Parameters to apply when making an update. Parameters []types.EnabledBaselineParameter // contains filtered or unexported fields }
type UpdateEnabledBaselineOutput ¶ added in v1.12.0
type UpdateEnabledBaselineOutput struct { // The ID (in UUID format) of the asynchronous UpdateEnabledBaseline operation. // This operationIdentifier is used to track status through calls to the // GetBaselineOperation API. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type UpdateEnabledControlInput ¶ added in v1.9.0
type UpdateEnabledControlInput struct { // The ARN of the enabled control that will be updated. // // This member is required. EnabledControlIdentifier *string // A key/value pair, where Key is of type String and Value is of type Document . // // This member is required. Parameters []types.EnabledControlParameter // contains filtered or unexported fields }
type UpdateEnabledControlOutput ¶ added in v1.9.0
type UpdateEnabledControlOutput struct { // The operation identifier for this UpdateEnabledControl operation. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
type UpdateLandingZoneInput ¶ added in v1.8.0
type UpdateLandingZoneInput struct { // The unique identifier of the landing zone. // // This member is required. LandingZoneIdentifier *string // The manifest file (JSON) is a text file that describes your Amazon Web Services // resources. For an example, review [Launch your landing zone]. The example manifest file contains each of // the available parameters. The schema for the landing zone's JSON manifest file // is not published, by design. // // [Launch your landing zone]: https://docs.aws.amazon.com/controltower/latest/userguide/lz-api-launch // // This member is required. Manifest document.Interface // The landing zone version, for example, 3.2. // // This member is required. Version *string // contains filtered or unexported fields }
type UpdateLandingZoneOutput ¶ added in v1.8.0
type UpdateLandingZoneOutput struct { // A unique identifier assigned to a UpdateLandingZone operation. You can use this // identifier as an input of GetLandingZoneOperation to check the operation's // status. // // This member is required. OperationIdentifier *string // Metadata pertaining to the operation's result. ResultMetadata middleware.Metadata // contains filtered or unexported fields }
Source Files ¶
- api_client.go
- api_op_CreateLandingZone.go
- api_op_DeleteLandingZone.go
- api_op_DisableBaseline.go
- api_op_DisableControl.go
- api_op_EnableBaseline.go
- api_op_EnableControl.go
- api_op_GetBaseline.go
- api_op_GetBaselineOperation.go
- api_op_GetControlOperation.go
- api_op_GetEnabledBaseline.go
- api_op_GetEnabledControl.go
- api_op_GetLandingZone.go
- api_op_GetLandingZoneOperation.go
- api_op_ListBaselines.go
- api_op_ListControlOperations.go
- api_op_ListEnabledBaselines.go
- api_op_ListEnabledControls.go
- api_op_ListLandingZoneOperations.go
- api_op_ListLandingZones.go
- api_op_ListTagsForResource.go
- api_op_ResetEnabledBaseline.go
- api_op_ResetLandingZone.go
- api_op_TagResource.go
- api_op_UntagResource.go
- api_op_UpdateEnabledBaseline.go
- api_op_UpdateEnabledControl.go
- api_op_UpdateLandingZone.go
- auth.go
- deserializers.go
- doc.go
- endpoints.go
- go_module_metadata.go
- options.go
- serializers.go
- validators.go