types

type AccountAggregationSource struct {

	// The 12-digit account ID of the account being aggregated.
	//
	// This member is required.
	AccountIds []string

	// If true, aggregate existing Config regions and future regions.
	AllAwsRegions bool

	// The source regions being aggregated.
	AwsRegions []string
	// contains filtered or unexported fields
}

type AggregateComplianceByConfigRule struct {

	// The 12-digit account ID of the source account.
	AccountId *string

	// The source region from where the data is aggregated.
	AwsRegion *string

	// Indicates whether an Amazon Web Services resource or Config rule is compliant
	// and provides the number of contributors that affect the compliance.
	Compliance *Compliance

	// The name of the Config rule.
	ConfigRuleName *string
	// contains filtered or unexported fields
}

type AggregateComplianceByConformancePack struct {

	// The 12-digit Amazon Web Services account ID of the source account.
	AccountId *string

	// The source Amazon Web Services Region from where the data is aggregated.
	AwsRegion *string

	// The compliance status of the conformance pack.
	Compliance *AggregateConformancePackCompliance

	// The name of the conformance pack.
	ConformancePackName *string
	// contains filtered or unexported fields
}

type AggregateComplianceCount struct {

	// The number of compliant and noncompliant Config rules.
	ComplianceSummary *ComplianceSummary

	// The 12-digit account ID or region based on the GroupByKey value.
	GroupName *string
	// contains filtered or unexported fields
}

type AggregateConformancePackCompliance struct {

	// The compliance status of the conformance pack.
	ComplianceType ConformancePackComplianceType

	// The number of compliant Config Rules.
	CompliantRuleCount int32

	// The number of noncompliant Config Rules.
	NonCompliantRuleCount int32

	// Total number of compliant rules, noncompliant rules, and the rules that do not
	// have any applicable resources to evaluate upon resulting in insufficient data.
	TotalRuleCount int32
	// contains filtered or unexported fields
}

type AggregateConformancePackComplianceCount struct {

	// Number of compliant conformance packs.
	CompliantConformancePackCount int32

	// Number of noncompliant conformance packs.
	NonCompliantConformancePackCount int32
	// contains filtered or unexported fields
}

type AggregateConformancePackComplianceFilters struct {

	// The 12-digit Amazon Web Services account ID of the source account.
	AccountId *string

	// The source Amazon Web Services Region from where the data is aggregated.
	AwsRegion *string

	// The compliance status of the conformance pack.
	ComplianceType ConformancePackComplianceType

	// The name of the conformance pack.
	ConformancePackName *string
	// contains filtered or unexported fields
}

type AggregateConformancePackComplianceSummary struct {

	// Returns an AggregateConformancePackComplianceCount object.
	ComplianceSummary *AggregateConformancePackComplianceCount

	// Groups the result based on Amazon Web Services account ID or Amazon Web
	// Services Region.
	GroupName *string
	// contains filtered or unexported fields
}

type AggregateConformancePackComplianceSummaryFilters struct {

	// The 12-digit Amazon Web Services account ID of the source account.
	AccountId *string

	// The source Amazon Web Services Region from where the data is aggregated.
	AwsRegion *string
	// contains filtered or unexported fields
}

type AggregateConformancePackComplianceSummaryGroupKey string

type AggregateEvaluationResult struct {

	// The 12-digit account ID of the source account.
	AccountId *string

	// Supplementary information about how the agrregate evaluation determined the
	// compliance.
	Annotation *string

	// The source region from where the data is aggregated.
	AwsRegion *string

	// The resource compliance status. For the AggregationEvaluationResult data type,
	// Config supports only the COMPLIANT and NON_COMPLIANT . Config does not support
	// the NOT_APPLICABLE and INSUFFICIENT_DATA value.
	ComplianceType ComplianceType

	// The time when the Config rule evaluated the Amazon Web Services resource.
	ConfigRuleInvokedTime *time.Time

	// Uniquely identifies the evaluation result.
	EvaluationResultIdentifier *EvaluationResultIdentifier

	// The time when Config recorded the aggregate evaluation result.
	ResultRecordedTime *time.Time
	// contains filtered or unexported fields
}

type AggregateResourceIdentifier struct {

	// The ID of the Amazon Web Services resource.
	//
	// This member is required.
	ResourceId *string

	// The type of the Amazon Web Services resource.
	//
	// This member is required.
	ResourceType ResourceType

	// The 12-digit account ID of the source account.
	//
	// This member is required.
	SourceAccountId *string

	// The source region where data is aggregated.
	//
	// This member is required.
	SourceRegion *string

	// The name of the Amazon Web Services resource.
	ResourceName *string
	// contains filtered or unexported fields
}

type AggregatedSourceStatus struct {

	// The region authorized to collect aggregated data.
	AwsRegion *string

	// The error code that Config returned when the source account aggregation last
	// failed.
	LastErrorCode *string

	// The message indicating that the source account aggregation failed due to an
	// error.
	LastErrorMessage *string

	// Filters the last updated status type.
	//   - Valid value FAILED indicates errors while moving data.
	//   - Valid value SUCCEEDED indicates the data was successfully moved.
	//   - Valid value OUTDATED indicates the data is not the most recent.
	LastUpdateStatus AggregatedSourceStatusType

	// The time of the last update.
	LastUpdateTime *time.Time

	// The source account ID or an organization.
	SourceId *string

	// The source account or an organization.
	SourceType AggregatedSourceType
	// contains filtered or unexported fields
}

type AggregatedSourceStatusType string

type AggregatedSourceType string

type AggregationAuthorization struct {

	// The Amazon Resource Name (ARN) of the aggregation object.
	AggregationAuthorizationArn *string

	// The 12-digit account ID of the account authorized to aggregate data.
	AuthorizedAccountId *string

	// The region authorized to collect aggregated data.
	AuthorizedAwsRegion *string

	// The time stamp when the aggregation authorization was created.
	CreationTime *time.Time
	// contains filtered or unexported fields
}

type BaseConfigurationItem struct {

	// The 12-digit Amazon Web Services account ID associated with the resource.
	AccountId *string

	// The Amazon Resource Name (ARN) of the resource.
	Arn *string

	// The Availability Zone associated with the resource.
	AvailabilityZone *string

	// The region where the resource resides.
	AwsRegion *string

	// The description of the resource configuration.
	Configuration *string

	// The time when the recording of configuration changes was initiated for the
	// resource.
	ConfigurationItemCaptureTime *time.Time

	// The time when configuration changes for the resource were delivered. This field
	// is optional and is not guaranteed to be present in a configuration item (CI). If
	// you are using daily recording, this field will be populated. However, if you are
	// using continuous recording, this field will be omitted since the delivery time
	// is instantaneous as the CI is available right away. For more information on
	// daily recording and continuous recording, see Recording Frequency (https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html#select-resources-recording-frequency)
	// in the Config Developer Guide.
	ConfigurationItemDeliveryTime *time.Time

	// The configuration item status. Valid values include:
	//   - OK – The resource configuration has been updated.
	//   - ResourceDiscovered – The resource was newly discovered.
	//   - ResourceNotRecorded – The resource was discovered, but its configuration
	//   was not recorded since the recorder doesn't record resources of this type.
	//   - ResourceDeleted – The resource was deleted
	//   - ResourceDeletedNotRecorded – The resource was deleted, but its
	//   configuration was not recorded since the recorder doesn't record resources of
	//   this type.
	ConfigurationItemStatus ConfigurationItemStatus

	// An identifier that indicates the ordering of the configuration items of a
	// resource.
	ConfigurationStateId *string

	// The recording frequency that Config uses to record configuration changes for
	// the resource.
	RecordingFrequency RecordingFrequency

	// The time stamp when the resource was created.
	ResourceCreationTime *time.Time

	// The ID of the resource (for example., sg-xxxxxx).
	ResourceId *string

	// The custom name of the resource, if available.
	ResourceName *string

	// The type of Amazon Web Services resource.
	ResourceType ResourceType

	// Configuration attributes that Config returns for certain resource types to
	// supplement the information returned for the configuration parameter.
	SupplementaryConfiguration map[string]string

	// The version number of the resource configuration.
	Version *string
	// contains filtered or unexported fields
}

type ChronologicalOrder string

type Compliance struct {

	// The number of Amazon Web Services resources or Config rules that cause a result
	// of NON_COMPLIANT , up to a maximum number.
	ComplianceContributorCount *ComplianceContributorCount

	// Indicates whether an Amazon Web Services resource or Config rule is compliant.
	// A resource is compliant if it complies with all of the Config rules that
	// evaluate it. A resource is noncompliant if it does not comply with one or more
	// of these rules. A rule is compliant if all of the resources that the rule
	// evaluates comply with it. A rule is noncompliant if any of these resources do
	// not comply. Config returns the INSUFFICIENT_DATA value when no evaluation
	// results are available for the Amazon Web Services resource or Config rule. For
	// the Compliance data type, Config supports only COMPLIANT , NON_COMPLIANT , and
	// INSUFFICIENT_DATA values. Config does not support the NOT_APPLICABLE value for
	// the Compliance data type.
	ComplianceType ComplianceType
	// contains filtered or unexported fields
}

type ComplianceByConfigRule struct {

	// Indicates whether the Config rule is compliant.
	Compliance *Compliance

	// The name of the Config rule.
	ConfigRuleName *string
	// contains filtered or unexported fields
}

type ComplianceByResource struct {

	// Indicates whether the Amazon Web Services resource complies with all of the
	// Config rules that evaluated it.
	Compliance *Compliance

	// The ID of the Amazon Web Services resource that was evaluated.
	ResourceId *string

	// The type of the Amazon Web Services resource that was evaluated.
	ResourceType *string
	// contains filtered or unexported fields
}

type ComplianceContributorCount struct {

	// Indicates whether the maximum count is reached.
	CapExceeded bool

	// The number of Amazon Web Services resources or Config rules responsible for the
	// current compliance of the item.
	CappedCount int32
	// contains filtered or unexported fields
}

type ComplianceSummary struct {

	// The time that Config created the compliance summary.
	ComplianceSummaryTimestamp *time.Time

	// The number of Config rules or Amazon Web Services resources that are compliant,
	// up to a maximum of 25 for rules and 100 for resources.
	CompliantResourceCount *ComplianceContributorCount

	// The number of Config rules or Amazon Web Services resources that are
	// noncompliant, up to a maximum of 25 for rules and 100 for resources.
	NonCompliantResourceCount *ComplianceContributorCount
	// contains filtered or unexported fields
}

type ComplianceSummaryByResourceType struct {

	// The number of Amazon Web Services resources that are compliant or noncompliant,
	// up to a maximum of 100 for each.
	ComplianceSummary *ComplianceSummary

	// The type of Amazon Web Services resource.
	ResourceType *string
	// contains filtered or unexported fields
}

type ComplianceType string

type ConfigExportDeliveryInfo struct {

	// The time of the last attempted delivery.
	LastAttemptTime *time.Time

	// The error code from the last attempted delivery.
	LastErrorCode *string

	// The error message from the last attempted delivery.
	LastErrorMessage *string

	// Status of the last attempted delivery.
	LastStatus DeliveryStatus

	// The time of the last successful delivery.
	LastSuccessfulTime *time.Time

	// The time that the next delivery occurs.
	NextDeliveryTime *time.Time
	// contains filtered or unexported fields
}

type ConfigRule struct {

	// Provides the rule owner ( Amazon Web Services for managed rules, CUSTOM_POLICY
	// for Custom Policy rules, and CUSTOM_LAMBDA for Custom Lambda rules), the rule
	// identifier, and the notifications that cause the function to evaluate your
	// Amazon Web Services resources.
	//
	// This member is required.
	Source *Source

	// The Amazon Resource Name (ARN) of the Config rule.
	ConfigRuleArn *string

	// The ID of the Config rule.
	ConfigRuleId *string

	// The name that you assign to the Config rule. The name is required if you are
	// adding a new rule.
	ConfigRuleName *string

	// Indicates whether the Config rule is active or is currently being deleted by
	// Config. It can also indicate the evaluation status for the Config rule. Config
	// sets the state of the rule to EVALUATING temporarily after you use the
	// StartConfigRulesEvaluation request to evaluate your resources against the Config
	// rule. Config sets the state of the rule to DELETING_RESULTS temporarily after
	// you use the DeleteEvaluationResults request to delete the current evaluation
	// results for the Config rule. Config temporarily sets the state of a rule to
	// DELETING after you use the DeleteConfigRule request to delete the rule. After
	// Config deletes the rule, the rule and all of its evaluations are erased and are
	// no longer available.
	ConfigRuleState ConfigRuleState

	// Service principal name of the service that created the rule. The field is
	// populated only if the service-linked rule is created by a service. The field is
	// empty if you create your own rule.
	CreatedBy *string

	// The description that you provide for the Config rule.
	Description *string

	// The modes the Config rule can be evaluated in. The valid values are distinct
	// objects. By default, the value is Detective evaluation mode only.
	EvaluationModes []EvaluationModeConfiguration

	// A string, in JSON format, that is passed to the Config rule Lambda function.
	InputParameters *string

	// The maximum frequency with which Config runs evaluations for a rule. You can
	// specify a value for MaximumExecutionFrequency when:
	//   - This is for an Config managed rule that is triggered at a periodic
	//   frequency.
	//   - Your custom rule is triggered when Config delivers the configuration
	//   snapshot. For more information, see ConfigSnapshotDeliveryProperties .
	// By default, rules with a periodic trigger are evaluated every 24 hours. To
	// change the frequency, specify a valid value for the MaximumExecutionFrequency
	// parameter.
	MaximumExecutionFrequency MaximumExecutionFrequency

	// Defines which resources can trigger an evaluation for the rule. The scope can
	// include one or more resource types, a combination of one resource type and one
	// resource ID, or a combination of a tag key and value. Specify a scope to
	// constrain the resources that can trigger an evaluation for the rule. If you do
	// not specify a scope, evaluations are triggered when any resource in the
	// recording group changes. The scope can be empty.
	Scope *Scope
	// contains filtered or unexported fields
}

type ConfigRuleComplianceFilters struct {

	// The 12-digit account ID of the source account.
	AccountId *string

	// The source region where the data is aggregated.
	AwsRegion *string

	// The rule compliance status. For the ConfigRuleComplianceFilters data type,
	// Config supports only COMPLIANT and NON_COMPLIANT . Config does not support the
	// NOT_APPLICABLE and the INSUFFICIENT_DATA values.
	ComplianceType ComplianceType

	// The name of the Config rule.
	ConfigRuleName *string
	// contains filtered or unexported fields
}

type ConfigRuleComplianceSummaryFilters struct {

	// The 12-digit account ID of the source account.
	AccountId *string

	// The source region where the data is aggregated.
	AwsRegion *string
	// contains filtered or unexported fields
}

type ConfigRuleComplianceSummaryGroupKey string

type ConfigRuleEvaluationStatus struct {

	// The Amazon Resource Name (ARN) of the Config rule.
	ConfigRuleArn *string

	// The ID of the Config rule.
	ConfigRuleId *string

	// The name of the Config rule.
	ConfigRuleName *string

	// The time that you first activated the Config rule.
	FirstActivatedTime *time.Time

	// Indicates whether Config has evaluated your resources against the rule at least
	// once.
	//   - true - Config has evaluated your Amazon Web Services resources against the
	//   rule at least once.
	//   - false - Config has not finished evaluating your Amazon Web Services
	//   resources against the rule at least once.
	FirstEvaluationStarted bool

	// The time that you last turned off the Config rule.
	LastDeactivatedTime *time.Time

	// The status of the last attempted delivery of a debug log for your Config Custom
	// Policy rules. Either Successful or Failed .
	LastDebugLogDeliveryStatus *string

	// The reason Config was not able to deliver a debug log. This is for the last
	// failed attempt to retrieve a debug log for your Config Custom Policy rules.
	LastDebugLogDeliveryStatusReason *string

	// The time Config last attempted to deliver a debug log for your Config Custom
	// Policy rules.
	LastDebugLogDeliveryTime *time.Time

	// The error code that Config returned when the rule last failed.
	LastErrorCode *string

	// The error message that Config returned when the rule last failed.
	LastErrorMessage *string

	// The time that Config last failed to evaluate your Amazon Web Services resources
	// against the rule.
	LastFailedEvaluationTime *time.Time

	// The time that Config last failed to invoke the Config rule to evaluate your
	// Amazon Web Services resources.
	LastFailedInvocationTime *time.Time

	// The time that Config last successfully evaluated your Amazon Web Services
	// resources against the rule.
	LastSuccessfulEvaluationTime *time.Time

	// The time that Config last successfully invoked the Config rule to evaluate your
	// Amazon Web Services resources.
	LastSuccessfulInvocationTime *time.Time
	// contains filtered or unexported fields
}

type ConfigRuleState string

type ConfigSnapshotDeliveryProperties struct {

	// The frequency with which Config delivers configuration snapshots.
	DeliveryFrequency MaximumExecutionFrequency
	// contains filtered or unexported fields
}

type ConfigStreamDeliveryInfo struct {

	// The error code from the last attempted delivery.
	LastErrorCode *string

	// The error message from the last attempted delivery.
	LastErrorMessage *string

	// Status of the last attempted delivery. Note Providing an SNS topic on a
	// DeliveryChannel (https://docs.aws.amazon.com/config/latest/APIReference/API_DeliveryChannel.html)
	// for Config is optional. If the SNS delivery is turned off, the last status will
	// be Not_Applicable.
	LastStatus DeliveryStatus

	// The time from the last status change.
	LastStatusChangeTime *time.Time
	// contains filtered or unexported fields
}

type ConfigurationAggregator struct {

	// Provides a list of source accounts and regions to be aggregated.
	AccountAggregationSources []AccountAggregationSource

	// The Amazon Resource Name (ARN) of the aggregator.
	ConfigurationAggregatorArn *string

	// The name of the aggregator.
	ConfigurationAggregatorName *string

	// Amazon Web Services service that created the configuration aggregator.
	CreatedBy *string

	// The time stamp when the configuration aggregator was created.
	CreationTime *time.Time

	// The time of the last update.
	LastUpdatedTime *time.Time

	// Provides an organization and list of regions to be aggregated.
	OrganizationAggregationSource *OrganizationAggregationSource
	// contains filtered or unexported fields
}

type ConfigurationItem struct {

	// The 12-digit Amazon Web Services account ID associated with the resource.
	AccountId *string

	// Amazon Resource Name (ARN) associated with the resource.
	Arn *string

	// The Availability Zone associated with the resource.
	AvailabilityZone *string

	// The region where the resource resides.
	AwsRegion *string

	// The description of the resource configuration.
	Configuration *string

	// The time when the recording of configuration changes was initiated for the
	// resource.
	ConfigurationItemCaptureTime *time.Time

	// The time when configuration changes for the resource were delivered. This field
	// is optional and is not guaranteed to be present in a configuration item (CI). If
	// you are using daily recording, this field will be populated. However, if you are
	// using continuous recording, this field will be omitted since the delivery time
	// is instantaneous as the CI is available right away. For more information on
	// daily recording and continuous recording, see Recording Frequency (https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html#select-resources-recording-frequency)
	// in the Config Developer Guide.
	ConfigurationItemDeliveryTime *time.Time

	// Unique MD5 hash that represents the configuration item's state. You can use MD5
	// hash to compare the states of two or more configuration items that are
	// associated with the same resource.
	ConfigurationItemMD5Hash *string

	// The configuration item status. Valid values include:
	//   - OK – The resource configuration has been updated
	//   - ResourceDiscovered – The resource was newly discovered
	//   - ResourceNotRecorded – The resource was discovered but its configuration was
	//   not recorded since the recorder doesn't record resources of this type
	//   - ResourceDeleted – The resource was deleted
	//   - ResourceDeletedNotRecorded – The resource was deleted but its configuration
	//   was not recorded since the recorder doesn't record resources of this type
	ConfigurationItemStatus ConfigurationItemStatus

	// An identifier that indicates the ordering of the configuration items of a
	// resource.
	ConfigurationStateId *string

	// The recording frequency that Config uses to record configuration changes for
	// the resource.
	RecordingFrequency RecordingFrequency

	// A list of CloudTrail event IDs. A populated field indicates that the current
	// configuration was initiated by the events recorded in the CloudTrail log. For
	// more information about CloudTrail, see What Is CloudTrail (https://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cloud_trail_top_level.html)
	// . An empty field indicates that the current configuration was not initiated by
	// any event. As of Version 1.3, the relatedEvents field is empty. You can access
	// the LookupEvents API (https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_LookupEvents.html)
	// in the CloudTrail API Reference to retrieve the events for the resource.
	RelatedEvents []string

	// A list of related Amazon Web Services resources.
	Relationships []Relationship

	// The time stamp when the resource was created.
	ResourceCreationTime *time.Time

	// The ID of the resource (for example, sg-xxxxxx ).
	ResourceId *string

	// The custom name of the resource, if available.
	ResourceName *string

	// The type of Amazon Web Services resource.
	ResourceType ResourceType

	// Configuration attributes that Config returns for certain resource types to
	// supplement the information returned for the configuration parameter.
	SupplementaryConfiguration map[string]string

	// A mapping of key value tags associated with the resource.
	Tags map[string]string

	// The version number of the resource configuration.
	Version *string
	// contains filtered or unexported fields
}

type ConfigurationItemStatus string

type ConfigurationRecorder struct {

	// The name of the configuration recorder. Config automatically assigns the name
	// of "default" when creating the configuration recorder. You cannot change the
	// name of the configuration recorder after it has been created. To change the
	// configuration recorder name, you must delete it and create a new configuration
	// recorder with a new name.
	Name *string

	// Specifies which resource types Config records for configuration changes. High
	// Number of Config Evaluations You may notice increased activity in your account
	// during your initial month recording with Config when compared to subsequent
	// months. During the initial bootstrapping process, Config runs evaluations on all
	// the resources in your account that you have selected for Config to record. If
	// you are running ephemeral workloads, you may see increased activity from Config
	// as it records configuration changes associated with creating and deleting these
	// temporary resources. An ephemeral workload is a temporary use of computing
	// resources that are loaded and run when needed. Examples include Amazon Elastic
	// Compute Cloud (Amazon EC2) Spot Instances, Amazon EMR jobs, and Auto Scaling. If
	// you want to avoid the increased activity from running ephemeral workloads, you
	// can run these types of workloads in a separate account with Config turned off to
	// avoid increased configuration recording and rule evaluations.
	RecordingGroup *RecordingGroup

	// Specifies the default recording frequency that Config uses to record
	// configuration changes. Config supports Continuous recording and Daily recording.
	//
	//   - Continuous recording allows you to record configuration changes
	//   continuously whenever a change occurs.
	//   - Daily recording allows you to receive a configuration item (CI)
	//   representing the most recent state of your resources over the last 24-hour
	//   period, only if it’s different from the previous CI recorded.
	// Firewall Manager depends on continuous recording to monitor your resources. If
	// you are using Firewall Manager, it is recommended that you set the recording
	// frequency to Continuous. You can also override the recording frequency for
	// specific resource types.
	RecordingMode *RecordingMode

	// Amazon Resource Name (ARN) of the IAM role assumed by Config and used by the
	// configuration recorder. While the API model does not require this field, the
	// server will reject a request without a defined roleARN for the configuration
	// recorder. Pre-existing Config role If you have used an Amazon Web Services
	// service that uses Config, such as Security Hub or Control Tower, and an Config
	// role has already been created, make sure that the IAM role that you use when
	// setting up Config keeps the same minimum permissions as the already created
	// Config role. You must do this so that the other Amazon Web Services service
	// continues to run as expected. For example, if Control Tower has an IAM role that
	// allows Config to read Amazon Simple Storage Service (Amazon S3) objects, make
	// sure that the same permissions are granted within the IAM role you use when
	// setting up Config. Otherwise, it may interfere with how Control Tower operates.
	// For more information about IAM roles for Config, see Identity and Access
	// Management for Config  (https://docs.aws.amazon.com/config/latest/developerguide/security-iam.html)
	// in the Config Developer Guide.
	RoleARN *string
	// contains filtered or unexported fields
}

type ConfigurationRecorderStatus struct {

	// The latest error code from when the recorder last failed.
	LastErrorCode *string

	// The latest error message from when the recorder last failed.
	LastErrorMessage *string

	// The time the recorder was last started.
	LastStartTime *time.Time

	// The status of the latest recording event processed by the recorder.
	LastStatus RecorderStatus

	// The time of the latest change in status of an recording event processed by the
	// recorder.
	LastStatusChangeTime *time.Time

	// The time the recorder was last stopped.
	LastStopTime *time.Time

	// The name of the configuration recorder.
	Name *string

	// Specifies whether or not the recorder is currently recording.
	Recording bool
	// contains filtered or unexported fields
}

type ConformancePackComplianceFilters struct {

	// Filters the results by compliance. The allowed values are COMPLIANT and
	// NON_COMPLIANT . INSUFFICIENT_DATA is not supported.
	ComplianceType ConformancePackComplianceType

	// Filters the results by Config rule names.
	ConfigRuleNames []string
	// contains filtered or unexported fields
}

type ConformancePackComplianceScore struct {

	// The name of the conformance pack.
	ConformancePackName *string

	// The time that the conformance pack compliance score was last updated.
	LastUpdatedTime *time.Time

	// Compliance score for the conformance pack. Conformance packs with no evaluation
	// results will have a compliance score of INSUFFICIENT_DATA .
	Score *string
	// contains filtered or unexported fields
}

type ConformancePackComplianceScoresFilters struct {

	// The names of the conformance packs whose compliance scores you want to include
	// in the conformance pack compliance score result set. You can include up to 25
	// conformance packs in the ConformancePackNames array of strings, each with a
	// character limit of 256 characters for the conformance pack name.
	//
	// This member is required.
	ConformancePackNames []string
	// contains filtered or unexported fields
}

type ConformancePackComplianceSummary struct {

	// The status of the conformance pack.
	//
	// This member is required.
	ConformancePackComplianceStatus ConformancePackComplianceType

	// The name of the conformance pack name.
	//
	// This member is required.
	ConformancePackName *string
	// contains filtered or unexported fields
}

type ConformancePackComplianceType string

type ConformancePackDetail struct {

	// Amazon Resource Name (ARN) of the conformance pack.
	//
	// This member is required.
	ConformancePackArn *string

	// ID of the conformance pack.
	//
	// This member is required.
	ConformancePackId *string

	// Name of the conformance pack.
	//
	// This member is required.
	ConformancePackName *string

	// A list of ConformancePackInputParameter objects.
	ConformancePackInputParameters []ConformancePackInputParameter

	// The Amazon Web Services service that created the conformance pack.
	CreatedBy *string

	// The name of the Amazon S3 bucket where Config stores conformance pack
	// templates. This field is optional.
	DeliveryS3Bucket *string

	// The prefix for the Amazon S3 bucket. This field is optional.
	DeliveryS3KeyPrefix *string

	// The last time a conformation pack update was requested.
	LastUpdateRequestedTime *time.Time

	// An object that contains the name or Amazon Resource Name (ARN) of the Amazon
	// Web Services Systems Manager document (SSM document) and the version of the SSM
	// document that is used to create a conformance pack.
	TemplateSSMDocumentDetails *TemplateSSMDocumentDetails
	// contains filtered or unexported fields
}

type ConformancePackEvaluationFilters struct {

	// Filters the results by compliance. The allowed values are COMPLIANT and
	// NON_COMPLIANT . INSUFFICIENT_DATA is not supported.
	ComplianceType ConformancePackComplianceType

	// Filters the results by Config rule names.
	ConfigRuleNames []string

	// Filters the results by resource IDs. This is valid only when you provide
	// resource type. If there is no resource type, you will see an error.
	ResourceIds []string

	// Filters the results by the resource type (for example, "AWS::EC2::Instance" ).
	ResourceType *string
	// contains filtered or unexported fields
}

type ConformancePackEvaluationResult struct {

	// The compliance type. The allowed values are COMPLIANT and NON_COMPLIANT .
	// INSUFFICIENT_DATA is not supported.
	//
	// This member is required.
	ComplianceType ConformancePackComplianceType

	// The time when Config rule evaluated Amazon Web Services resource.
	//
	// This member is required.
	ConfigRuleInvokedTime *time.Time

	// Uniquely identifies an evaluation result.
	//
	// This member is required.
	EvaluationResultIdentifier *EvaluationResultIdentifier

	// The time when Config recorded the evaluation result.
	//
	// This member is required.
	ResultRecordedTime *time.Time

	// Supplementary information about how the evaluation determined the compliance.
	Annotation *string
	// contains filtered or unexported fields
}

type ConformancePackInputParameter struct {

	// One part of a key-value pair.
	//
	// This member is required.
	ParameterName *string

	// Another part of the key-value pair.
	//
	// This member is required.
	ParameterValue *string
	// contains filtered or unexported fields
}

type ConformancePackRuleCompliance struct {

	// Compliance of the Config rule.
	ComplianceType ConformancePackComplianceType

	// Name of the Config rule.
	ConfigRuleName *string

	// Controls for the conformance pack. A control is a process to prevent or detect
	// problems while meeting objectives. A control can align with a specific
	// compliance regime or map to internal controls defined by an organization.
	Controls []string
	// contains filtered or unexported fields
}

type ConformancePackState string

type ConformancePackStatusDetail struct {

	// Amazon Resource Name (ARN) of comformance pack.
	//
	// This member is required.
	ConformancePackArn *string

	// ID of the conformance pack.
	//
	// This member is required.
	ConformancePackId *string

	// Name of the conformance pack.
	//
	// This member is required.
	ConformancePackName *string

	// Indicates deployment status of conformance pack. Config sets the state of the
	// conformance pack to:
	//   - CREATE_IN_PROGRESS when a conformance pack creation is in progress for an
	//   account.
	//   - CREATE_COMPLETE when a conformance pack has been successfully created in
	//   your account.
	//   - CREATE_FAILED when a conformance pack creation failed in your account.
	//   - DELETE_IN_PROGRESS when a conformance pack deletion is in progress.
	//   - DELETE_FAILED when a conformance pack deletion failed in your account.
	//
	// This member is required.
	ConformancePackState ConformancePackState

	// Last time when conformation pack creation and update was requested.
	//
	// This member is required.
	LastUpdateRequestedTime *time.Time

	// Amazon Resource Name (ARN) of CloudFormation stack.
	//
	// This member is required.
	StackArn *string

	// The reason of conformance pack creation failure.
	ConformancePackStatusReason *string

	// Last time when conformation pack creation and update was successful.
	LastUpdateCompletedTime *time.Time
	// contains filtered or unexported fields
}

type ConformancePackTemplateValidationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type CustomPolicyDetails struct {

	// The runtime system for your Config Custom Policy rule. Guard is a
	// policy-as-code language that allows you to write policies that are enforced by
	// Config Custom Policy rules. For more information about Guard, see the Guard
	// GitHub Repository (https://github.com/aws-cloudformation/cloudformation-guard) .
	//
	// This member is required.
	PolicyRuntime *string

	// The policy definition containing the logic for your Config Custom Policy rule.
	//
	// This member is required.
	PolicyText *string

	// The boolean expression for enabling debug logging for your Config Custom Policy
	// rule. The default value is false .
	EnableDebugLogDelivery bool
	// contains filtered or unexported fields
}

type DeliveryChannel struct {

	// The options for how often Config delivers configuration snapshots to the Amazon
	// S3 bucket.
	ConfigSnapshotDeliveryProperties *ConfigSnapshotDeliveryProperties

	// The name of the delivery channel. By default, Config assigns the name "default"
	// when creating the delivery channel. To change the delivery channel name, you
	// must use the DeleteDeliveryChannel action to delete your current delivery
	// channel, and then you must use the PutDeliveryChannel command to create a
	// delivery channel that has the desired name.
	Name *string

	// The name of the Amazon S3 bucket to which Config delivers configuration
	// snapshots and configuration history files. If you specify a bucket that belongs
	// to another Amazon Web Services account, that bucket must have policies that
	// grant access permissions to Config. For more information, see Permissions for
	// the Amazon S3 Bucket (https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-policy.html)
	// in the Config Developer Guide.
	S3BucketName *string

	// The prefix for the specified Amazon S3 bucket.
	S3KeyPrefix *string

	// The Amazon Resource Name (ARN) of the Key Management Service (KMS ) KMS key
	// (KMS key) used to encrypt objects delivered by Config. Must belong to the same
	// Region as the destination S3 bucket.
	S3KmsKeyArn *string

	// The Amazon Resource Name (ARN) of the Amazon SNS topic to which Config sends
	// notifications about configuration changes. If you choose a topic from another
	// account, the topic must have policies that grant access permissions to Config.
	// For more information, see Permissions for the Amazon SNS Topic (https://docs.aws.amazon.com/config/latest/developerguide/sns-topic-policy.html)
	// in the Config Developer Guide.
	SnsTopicARN *string
	// contains filtered or unexported fields
}

type DeliveryChannelStatus struct {

	// A list that contains the status of the delivery of the configuration history to
	// the specified Amazon S3 bucket.
	ConfigHistoryDeliveryInfo *ConfigExportDeliveryInfo

	// A list containing the status of the delivery of the snapshot to the specified
	// Amazon S3 bucket.
	ConfigSnapshotDeliveryInfo *ConfigExportDeliveryInfo

	// A list containing the status of the delivery of the configuration stream
	// notification to the specified Amazon SNS topic.
	ConfigStreamDeliveryInfo *ConfigStreamDeliveryInfo

	// The name of the delivery channel.
	Name *string
	// contains filtered or unexported fields
}

type DeliveryStatus string

type DescribeConfigRulesFilters struct {

	// The mode of an evaluation. The valid values are Detective or Proactive.
	EvaluationMode EvaluationMode
	// contains filtered or unexported fields
}

type Evaluation struct {

	// The ID of the Amazon Web Services resource that was evaluated.
	//
	// This member is required.
	ComplianceResourceId *string

	// The type of Amazon Web Services resource that was evaluated.
	//
	// This member is required.
	ComplianceResourceType *string

	// Indicates whether the Amazon Web Services resource complies with the Config
	// rule that it was evaluated against. For the Evaluation data type, Config
	// supports only the COMPLIANT , NON_COMPLIANT , and NOT_APPLICABLE values. Config
	// does not support the INSUFFICIENT_DATA value for this data type. Similarly,
	// Config does not accept INSUFFICIENT_DATA as the value for ComplianceType from a
	// PutEvaluations request. For example, an Lambda function for a custom Config rule
	// cannot pass an INSUFFICIENT_DATA value to Config.
	//
	// This member is required.
	ComplianceType ComplianceType

	// The time of the event in Config that triggered the evaluation. For event-based
	// evaluations, the time indicates when Config created the configuration item that
	// triggered the evaluation. For periodic evaluations, the time indicates when
	// Config triggered the evaluation at the frequency that you specified (for
	// example, every 24 hours).
	//
	// This member is required.
	OrderingTimestamp *time.Time

	// Supplementary information about how the evaluation determined the compliance.
	Annotation *string
	// contains filtered or unexported fields
}

type EvaluationContext struct {

	// A unique EvaluationContextIdentifier ID for an EvaluationContext.
	EvaluationContextIdentifier *string
	// contains filtered or unexported fields
}

type EvaluationMode string

type EvaluationModeConfiguration struct {

	// The mode of an evaluation. The valid values are Detective or Proactive.
	Mode EvaluationMode
	// contains filtered or unexported fields
}

type EvaluationResult struct {

	// Supplementary information about how the evaluation determined the compliance.
	Annotation *string

	// Indicates whether the Amazon Web Services resource complies with the Config
	// rule that evaluated it. For the EvaluationResult data type, Config supports
	// only the COMPLIANT , NON_COMPLIANT , and NOT_APPLICABLE values. Config does not
	// support the INSUFFICIENT_DATA value for the EvaluationResult data type.
	ComplianceType ComplianceType

	// The time when the Config rule evaluated the Amazon Web Services resource.
	ConfigRuleInvokedTime *time.Time

	// Uniquely identifies the evaluation result.
	EvaluationResultIdentifier *EvaluationResultIdentifier

	// The time when Config recorded the evaluation result.
	ResultRecordedTime *time.Time

	// An encrypted token that associates an evaluation with an Config rule. The token
	// identifies the rule, the Amazon Web Services resource being evaluated, and the
	// event that triggered the evaluation.
	ResultToken *string
	// contains filtered or unexported fields
}

type EvaluationResultIdentifier struct {

	// Identifies an Config rule used to evaluate an Amazon Web Services resource, and
	// provides the type and ID of the evaluated resource.
	EvaluationResultQualifier *EvaluationResultQualifier

	// The time of the event that triggered the evaluation of your Amazon Web Services
	// resources. The time can indicate when Config delivered a configuration item
	// change notification, or it can indicate when Config delivered the configuration
	// snapshot, depending on which event triggered the evaluation.
	OrderingTimestamp *time.Time

	// A Unique ID for an evaluation result.
	ResourceEvaluationId *string
	// contains filtered or unexported fields
}

type EvaluationResultQualifier struct {

	// The name of the Config rule that was used in the evaluation.
	ConfigRuleName *string

	// The mode of an evaluation. The valid values are Detective or Proactive.
	EvaluationMode EvaluationMode

	// The ID of the evaluated Amazon Web Services resource.
	ResourceId *string

	// The type of Amazon Web Services resource that was evaluated.
	ResourceType *string
	// contains filtered or unexported fields
}

type EvaluationStatus struct {

	// The status of an execution. The valid values are In_Progress, Succeeded or
	// Failed.
	//
	// This member is required.
	Status ResourceEvaluationStatus

	// An explanation for failed execution status.
	FailureReason *string
	// contains filtered or unexported fields
}

type EventSource string

type ExclusionByResourceTypes struct {

	// A comma-separated list of resource types to exclude from recording by the
	// configuration recorder.
	ResourceTypes []ResourceType
	// contains filtered or unexported fields
}

type ExecutionControls struct {

	// A SsmControls object.
	SsmControls *SsmControls
	// contains filtered or unexported fields
}

type ExternalEvaluation struct {

	// The evaluated compliance resource ID. Config accepts only Amazon Web Services
	// account ID.
	//
	// This member is required.
	ComplianceResourceId *string

	// The evaluated compliance resource type. Config accepts AWS::::Account resource
	// type.
	//
	// This member is required.
	ComplianceResourceType *string

	// The compliance of the Amazon Web Services resource. The valid values are
	// COMPLIANT, NON_COMPLIANT, and NOT_APPLICABLE .
	//
	// This member is required.
	ComplianceType ComplianceType

	// The time when the compliance was recorded.
	//
	// This member is required.
	OrderingTimestamp *time.Time

	// Supplementary information about the reason of compliance. For example, this
	// task was completed on a specific date.
	Annotation *string
	// contains filtered or unexported fields
}

type FailedDeleteRemediationExceptionsBatch struct {

	// Returns remediation exception resource key object of the failed items.
	FailedItems []RemediationExceptionResourceKey

	// Returns a failure message for delete remediation exception. For example, Config
	// creates an exception due to an internal error.
	FailureMessage *string
	// contains filtered or unexported fields
}

type FailedRemediationBatch struct {

	// Returns remediation configurations of the failed items.
	FailedItems []RemediationConfiguration

	// Returns a failure message. For example, the resource is already compliant.
	FailureMessage *string
	// contains filtered or unexported fields
}

type FailedRemediationExceptionBatch struct {

	// Returns remediation exception resource key object of the failed items.
	FailedItems []RemediationException

	// Returns a failure message. For example, the auto-remediation has failed.
	FailureMessage *string
	// contains filtered or unexported fields
}

type FieldInfo struct {

	// Name of the field.
	Name *string
	// contains filtered or unexported fields
}

type GroupedResourceCount struct {

	// The name of the group that can be region, account ID, or resource type. For
	// example, region1, region2 if the region was chosen as GroupByKey .
	//
	// This member is required.
	GroupName *string

	// The number of resources in the group.
	//
	// This member is required.
	ResourceCount int64
	// contains filtered or unexported fields
}

type IdempotentParameterMismatch struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InsufficientDeliveryPolicyException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InsufficientPermissionsException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidConfigurationRecorderNameException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidDeliveryChannelNameException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidExpressionException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidLimitException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidNextTokenException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidParameterValueException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidRecordingGroupException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidResultTokenException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidRoleException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidS3KeyPrefixException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidS3KmsKeyArnException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidSNSTopicARNException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type InvalidTimeRangeException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type LastDeliveryChannelDeleteFailedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type LimitExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaxActiveResourcesExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaxNumberOfConfigRulesExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaxNumberOfConfigurationRecordersExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaxNumberOfConformancePacksExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaxNumberOfDeliveryChannelsExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaxNumberOfOrganizationConfigRulesExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaxNumberOfOrganizationConformancePacksExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaxNumberOfRetentionConfigurationsExceededException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type MaximumExecutionFrequency string

type MemberAccountRuleStatus string

type MemberAccountStatus struct {

	// The 12-digit account ID of a member account.
	//
	// This member is required.
	AccountId *string

	// The name of Config rule deployed in the member account.
	//
	// This member is required.
	ConfigRuleName *string

	// Indicates deployment status for Config rule in the member account. When
	// management account calls PutOrganizationConfigRule action for the first time,
	// Config rule status is created in the member account. When management account
	// calls PutOrganizationConfigRule action for the second time, Config rule status
	// is updated in the member account. Config rule status is deleted when the
	// management account deletes OrganizationConfigRule and disables service access
	// for config-multiaccountsetup.amazonaws.com . Config sets the state of the rule
	// to:
	//   - CREATE_SUCCESSFUL when Config rule has been created in the member account.
	//   - CREATE_IN_PROGRESS when Config rule is being created in the member account.
	//   - CREATE_FAILED when Config rule creation has failed in the member account.
	//   - DELETE_FAILED when Config rule deletion has failed in the member account.
	//   - DELETE_IN_PROGRESS when Config rule is being deleted in the member account.
	//   - DELETE_SUCCESSFUL when Config rule has been deleted in the member account.
	//   - UPDATE_SUCCESSFUL when Config rule has been updated in the member account.
	//   - UPDATE_IN_PROGRESS when Config rule is being updated in the member account.
	//   - UPDATE_FAILED when Config rule deletion has failed in the member account.
	//
	// This member is required.
	MemberAccountRuleStatus MemberAccountRuleStatus

	// An error code that is returned when Config rule creation or deletion failed in
	// the member account.
	ErrorCode *string

	// An error message indicating that Config rule account creation or deletion has
	// failed due to an error in the member account.
	ErrorMessage *string

	// The timestamp of the last status update.
	LastUpdateTime *time.Time
	// contains filtered or unexported fields
}

type MessageType string

type NoAvailableConfigurationRecorderException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoAvailableDeliveryChannelException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoAvailableOrganizationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoRunningConfigurationRecorderException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchBucketException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchConfigRuleException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchConfigRuleInConformancePackException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchConfigurationAggregatorException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchConfigurationRecorderException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchConformancePackException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchDeliveryChannelException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchOrganizationConfigRuleException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchOrganizationConformancePackException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchRemediationConfigurationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchRemediationExceptionException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type NoSuchRetentionConfigurationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type OrganizationAccessDeniedException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type OrganizationAggregationSource struct {

	// ARN of the IAM role used to retrieve Amazon Web Services Organization details
	// associated with the aggregator account.
	//
	// This member is required.
	RoleArn *string

	// If true, aggregate existing Config regions and future regions.
	AllAwsRegions bool

	// The source regions being aggregated.
	AwsRegions []string
	// contains filtered or unexported fields
}

type OrganizationAllFeaturesNotEnabledException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type OrganizationConfigRule struct {

	// Amazon Resource Name (ARN) of organization Config rule.
	//
	// This member is required.
	OrganizationConfigRuleArn *string

	// The name that you assign to organization Config rule.
	//
	// This member is required.
	OrganizationConfigRuleName *string

	// A comma-separated list of accounts excluded from organization Config rule.
	ExcludedAccounts []string

	// The timestamp of the last update.
	LastUpdateTime *time.Time

	// An object that specifies metadata for your organization's Config Custom Policy
	// rule. The metadata includes the runtime system in use, which accounts have debug
	// logging enabled, and other custom rule metadata, such as resource type, resource
	// ID of Amazon Web Services resource, and organization trigger types that initiate
	// Config to evaluate Amazon Web Services resources against a rule.
	OrganizationCustomPolicyRuleMetadata *OrganizationCustomPolicyRuleMetadataNoPolicy

	// An OrganizationCustomRuleMetadata object.
	OrganizationCustomRuleMetadata *OrganizationCustomRuleMetadata

	// An OrganizationManagedRuleMetadata object.
	OrganizationManagedRuleMetadata *OrganizationManagedRuleMetadata
	// contains filtered or unexported fields
}

type OrganizationConfigRuleStatus struct {

	// The name that you assign to organization Config rule.
	//
	// This member is required.
	OrganizationConfigRuleName *string

	// Indicates deployment status of an organization Config rule. When management
	// account calls PutOrganizationConfigRule action for the first time, Config rule
	// status is created in all the member accounts. When management account calls
	// PutOrganizationConfigRule action for the second time, Config rule status is
	// updated in all the member accounts. Additionally, Config rule status is updated
	// when one or more member accounts join or leave an organization. Config rule
	// status is deleted when the management account deletes OrganizationConfigRule in
	// all the member accounts and disables service access for
	// config-multiaccountsetup.amazonaws.com . Config sets the state of the rule to:
	//   - CREATE_SUCCESSFUL when an organization Config rule has been successfully
	//   created in all the member accounts.
	//   - CREATE_IN_PROGRESS when an organization Config rule creation is in progress.
	//   - CREATE_FAILED when an organization Config rule creation failed in one or
	//   more member accounts within that organization.
	//   - DELETE_FAILED when an organization Config rule deletion failed in one or
	//   more member accounts within that organization.
	//   - DELETE_IN_PROGRESS when an organization Config rule deletion is in progress.
	//   - DELETE_SUCCESSFUL when an organization Config rule has been successfully
	//   deleted from all the member accounts.
	//   - UPDATE_SUCCESSFUL when an organization Config rule has been successfully
	//   updated in all the member accounts.
	//   - UPDATE_IN_PROGRESS when an organization Config rule update is in progress.
	//   - UPDATE_FAILED when an organization Config rule update failed in one or more
	//   member accounts within that organization.
	//
	// This member is required.
	OrganizationRuleStatus OrganizationRuleStatus

	// An error code that is returned when organization Config rule creation or
	// deletion has failed.
	ErrorCode *string

	// An error message indicating that organization Config rule creation or deletion
	// failed due to an error.
	ErrorMessage *string

	// The timestamp of the last update.
	LastUpdateTime *time.Time
	// contains filtered or unexported fields
}

type OrganizationConfigRuleTriggerType string

type OrganizationConfigRuleTriggerTypeNoSN string

type OrganizationConformancePack struct {

	// Last time when organization conformation pack was updated.
	//
	// This member is required.
	LastUpdateTime *time.Time

	// Amazon Resource Name (ARN) of organization conformance pack.
	//
	// This member is required.
	OrganizationConformancePackArn *string

	// The name you assign to an organization conformance pack.
	//
	// This member is required.
	OrganizationConformancePackName *string

	// A list of ConformancePackInputParameter objects.
	ConformancePackInputParameters []ConformancePackInputParameter

	// The name of the Amazon S3 bucket where Config stores conformance pack
	// templates. This field is optional.
	DeliveryS3Bucket *string

	// Any folder structure you want to add to an Amazon S3 bucket. This field is
	// optional.
	DeliveryS3KeyPrefix *string

	// A comma-separated list of accounts excluded from organization conformance pack.
	ExcludedAccounts []string
	// contains filtered or unexported fields
}

type OrganizationConformancePackDetailedStatus struct {

	// The 12-digit account ID of a member account.
	//
	// This member is required.
	AccountId *string

	// The name of conformance pack deployed in the member account.
	//
	// This member is required.
	ConformancePackName *string

	// Indicates deployment status for conformance pack in a member account. When
	// management account calls PutOrganizationConformancePack action for the first
	// time, conformance pack status is created in the member account. When management
	// account calls PutOrganizationConformancePack action for the second time,
	// conformance pack status is updated in the member account. Conformance pack
	// status is deleted when the management account deletes
	// OrganizationConformancePack and disables service access for
	// config-multiaccountsetup.amazonaws.com . Config sets the state of the
	// conformance pack to:
	//   - CREATE_SUCCESSFUL when conformance pack has been created in the member
	//   account.
	//   - CREATE_IN_PROGRESS when conformance pack is being created in the member
	//   account.
	//   - CREATE_FAILED when conformance pack creation has failed in the member
	//   account.
	//   - DELETE_FAILED when conformance pack deletion has failed in the member
	//   account.
	//   - DELETE_IN_PROGRESS when conformance pack is being deleted in the member
	//   account.
	//   - DELETE_SUCCESSFUL when conformance pack has been deleted in the member
	//   account.
	//   - UPDATE_SUCCESSFUL when conformance pack has been updated in the member
	//   account.
	//   - UPDATE_IN_PROGRESS when conformance pack is being updated in the member
	//   account.
	//   - UPDATE_FAILED when conformance pack deletion has failed in the member
	//   account.
	//
	// This member is required.
	Status OrganizationResourceDetailedStatus

	// An error code that is returned when conformance pack creation or deletion
	// failed in the member account.
	ErrorCode *string

	// An error message indicating that conformance pack account creation or deletion
	// has failed due to an error in the member account.
	ErrorMessage *string

	// The timestamp of the last status update.
	LastUpdateTime *time.Time
	// contains filtered or unexported fields
}

type OrganizationConformancePackStatus struct {

	// The name that you assign to organization conformance pack.
	//
	// This member is required.
	OrganizationConformancePackName *string

	// Indicates deployment status of an organization conformance pack. When
	// management account calls PutOrganizationConformancePack for the first time,
	// conformance pack status is created in all the member accounts. When management
	// account calls PutOrganizationConformancePack for the second time, conformance
	// pack status is updated in all the member accounts. Additionally, conformance
	// pack status is updated when one or more member accounts join or leave an
	// organization. Conformance pack status is deleted when the management account
	// deletes OrganizationConformancePack in all the member accounts and disables
	// service access for config-multiaccountsetup.amazonaws.com . Config sets the
	// state of the conformance pack to:
	//   - CREATE_SUCCESSFUL when an organization conformance pack has been
	//   successfully created in all the member accounts.
	//   - CREATE_IN_PROGRESS when an organization conformance pack creation is in
	//   progress.
	//   - CREATE_FAILED when an organization conformance pack creation failed in one
	//   or more member accounts within that organization.
	//   - DELETE_FAILED when an organization conformance pack deletion failed in one
	//   or more member accounts within that organization.
	//   - DELETE_IN_PROGRESS when an organization conformance pack deletion is in
	//   progress.
	//   - DELETE_SUCCESSFUL when an organization conformance pack has been
	//   successfully deleted from all the member accounts.
	//   - UPDATE_SUCCESSFUL when an organization conformance pack has been
	//   successfully updated in all the member accounts.
	//   - UPDATE_IN_PROGRESS when an organization conformance pack update is in
	//   progress.
	//   - UPDATE_FAILED when an organization conformance pack update failed in one or
	//   more member accounts within that organization.
	//
	// This member is required.
	Status OrganizationResourceStatus

	// An error code that is returned when organization conformance pack creation or
	// deletion has failed in a member account.
	ErrorCode *string

	// An error message indicating that organization conformance pack creation or
	// deletion failed due to an error.
	ErrorMessage *string

	// The timestamp of the last update.
	LastUpdateTime *time.Time
	// contains filtered or unexported fields
}

type OrganizationConformancePackTemplateValidationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type OrganizationCustomPolicyRuleMetadata struct {

	// The runtime system for your organization Config Custom Policy rules. Guard is a
	// policy-as-code language that allows you to write policies that are enforced by
	// Config Custom Policy rules. For more information about Guard, see the Guard
	// GitHub Repository (https://github.com/aws-cloudformation/cloudformation-guard) .
	//
	// This member is required.
	PolicyRuntime *string

	// The policy definition containing the logic for your organization Config Custom
	// Policy rule.
	//
	// This member is required.
	PolicyText *string

	// A list of accounts that you can enable debug logging for your organization
	// Config Custom Policy rule. List is null when debug logging is enabled for all
	// accounts.
	DebugLogDeliveryAccounts []string

	// The description that you provide for your organization Config Custom Policy
	// rule.
	Description *string

	// A string, in JSON format, that is passed to your organization Config Custom
	// Policy rule.
	InputParameters *string

	// The maximum frequency with which Config runs evaluations for a rule. Your
	// Config Custom Policy rule is triggered when Config delivers the configuration
	// snapshot. For more information, see ConfigSnapshotDeliveryProperties .
	MaximumExecutionFrequency MaximumExecutionFrequency

	// The type of notification that initiates Config to run an evaluation for a rule.
	// For Config Custom Policy rules, Config supports change-initiated notification
	// types:
	//   - ConfigurationItemChangeNotification - Initiates an evaluation when Config
	//   delivers a configuration item as a result of a resource change.
	//   - OversizedConfigurationItemChangeNotification - Initiates an evaluation when
	//   Config delivers an oversized configuration item. Config may generate this
	//   notification type when a resource changes and the notification exceeds the
	//   maximum size allowed by Amazon SNS.
	OrganizationConfigRuleTriggerTypes []OrganizationConfigRuleTriggerTypeNoSN

	// The ID of the Amazon Web Services resource that was evaluated.
	ResourceIdScope *string

	// The type of the Amazon Web Services resource that was evaluated.
	ResourceTypesScope []string

	// One part of a key-value pair that make up a tag. A key is a general label that
	// acts like a category for more specific tag values.
	TagKeyScope *string

	// The optional part of a key-value pair that make up a tag. A value acts as a
	// descriptor within a tag category (key).
	TagValueScope *string
	// contains filtered or unexported fields
}

type OrganizationCustomPolicyRuleMetadataNoPolicy struct {

	// A list of accounts that you can enable debug logging for your organization
	// Config Custom Policy rule. List is null when debug logging is enabled for all
	// accounts.
	DebugLogDeliveryAccounts []string

	// The description that you provide for your organization Config Custom Policy
	// rule.
	Description *string

	// A string, in JSON format, that is passed to your organization Config Custom
	// Policy rule.
	InputParameters *string

	// The maximum frequency with which Config runs evaluations for a rule. Your
	// Config Custom Policy rule is triggered when Config delivers the configuration
	// snapshot. For more information, see ConfigSnapshotDeliveryProperties .
	MaximumExecutionFrequency MaximumExecutionFrequency

	// The type of notification that triggers Config to run an evaluation for a rule.
	// For Config Custom Policy rules, Config supports change triggered notification
	// types:
	//   - ConfigurationItemChangeNotification - Triggers an evaluation when Config
	//   delivers a configuration item as a result of a resource change.
	//   - OversizedConfigurationItemChangeNotification - Triggers an evaluation when
	//   Config delivers an oversized configuration item. Config may generate this
	//   notification type when a resource changes and the notification exceeds the
	//   maximum size allowed by Amazon SNS.
	OrganizationConfigRuleTriggerTypes []OrganizationConfigRuleTriggerTypeNoSN

	// The runtime system for your organization Config Custom Policy rules. Guard is a
	// policy-as-code language that allows you to write policies that are enforced by
	// Config Custom Policy rules. For more information about Guard, see the Guard
	// GitHub Repository (https://github.com/aws-cloudformation/cloudformation-guard) .
	PolicyRuntime *string

	// The ID of the Amazon Web Services resource that was evaluated.
	ResourceIdScope *string

	// The type of the Amazon Web Services resource that was evaluated.
	ResourceTypesScope []string

	// One part of a key-value pair that make up a tag. A key is a general label that
	// acts like a category for more specific tag values.
	TagKeyScope *string

	// The optional part of a key-value pair that make up a tag. A value acts as a
	// descriptor within a tag category (key).
	TagValueScope *string
	// contains filtered or unexported fields
}

type OrganizationCustomRuleMetadata struct {

	// The lambda function ARN.
	//
	// This member is required.
	LambdaFunctionArn *string

	// The type of notification that triggers Config to run an evaluation for a rule.
	// You can specify the following notification types:
	//   - ConfigurationItemChangeNotification - Triggers an evaluation when Config
	//   delivers a configuration item as a result of a resource change.
	//   - OversizedConfigurationItemChangeNotification - Triggers an evaluation when
	//   Config delivers an oversized configuration item. Config may generate this
	//   notification type when a resource changes and the notification exceeds the
	//   maximum size allowed by Amazon SNS.
	//   - ScheduledNotification - Triggers a periodic evaluation at the frequency
	//   specified for MaximumExecutionFrequency .
	//
	// This member is required.
	OrganizationConfigRuleTriggerTypes []OrganizationConfigRuleTriggerType

	// The description that you provide for your organization Config rule.
	Description *string

	// A string, in JSON format, that is passed to your organization Config rule
	// Lambda function.
	InputParameters *string

	// The maximum frequency with which Config runs evaluations for a rule. Your
	// custom rule is triggered when Config delivers the configuration snapshot. For
	// more information, see ConfigSnapshotDeliveryProperties . By default, rules with
	// a periodic trigger are evaluated every 24 hours. To change the frequency,
	// specify a valid value for the MaximumExecutionFrequency parameter.
	MaximumExecutionFrequency MaximumExecutionFrequency

	// The ID of the Amazon Web Services resource that was evaluated.
	ResourceIdScope *string

	// The type of the Amazon Web Services resource that was evaluated.
	ResourceTypesScope []string

	// One part of a key-value pair that make up a tag. A key is a general label that
	// acts like a category for more specific tag values.
	TagKeyScope *string

	// The optional part of a key-value pair that make up a tag. A value acts as a
	// descriptor within a tag category (key).
	TagValueScope *string
	// contains filtered or unexported fields
}

type OrganizationManagedRuleMetadata struct {

	// For organization config managed rules, a predefined identifier from a list. For
	// example, IAM_PASSWORD_POLICY is a managed rule. To reference a managed rule,
	// see Using Config managed rules (https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html)
	// .
	//
	// This member is required.
	RuleIdentifier *string

	// The description that you provide for your organization Config rule.
	Description *string

	// A string, in JSON format, that is passed to your organization Config rule
	// Lambda function.
	InputParameters *string

	// The maximum frequency with which Config runs evaluations for a rule. This is
	// for an Config managed rule that is triggered at a periodic frequency. By
	// default, rules with a periodic trigger are evaluated every 24 hours. To change
	// the frequency, specify a valid value for the MaximumExecutionFrequency
	// parameter.
	MaximumExecutionFrequency MaximumExecutionFrequency

	// The ID of the Amazon Web Services resource that was evaluated.
	ResourceIdScope *string

	// The type of the Amazon Web Services resource that was evaluated.
	ResourceTypesScope []string

	// One part of a key-value pair that make up a tag. A key is a general label that
	// acts like a category for more specific tag values.
	TagKeyScope *string

	// The optional part of a key-value pair that make up a tag. A value acts as a
	// descriptor within a tag category (key).
	TagValueScope *string
	// contains filtered or unexported fields
}

type OrganizationResourceDetailedStatus string

type OrganizationResourceDetailedStatusFilters struct {

	// The 12-digit account ID of the member account within an organization.
	AccountId *string

	// Indicates deployment status for conformance pack in a member account. When
	// management account calls PutOrganizationConformancePack action for the first
	// time, conformance pack status is created in the member account. When management
	// account calls PutOrganizationConformancePack action for the second time,
	// conformance pack status is updated in the member account. Conformance pack
	// status is deleted when the management account deletes
	// OrganizationConformancePack and disables service access for
	// config-multiaccountsetup.amazonaws.com . Config sets the state of the
	// conformance pack to:
	//   - CREATE_SUCCESSFUL when conformance pack has been created in the member
	//   account.
	//   - CREATE_IN_PROGRESS when conformance pack is being created in the member
	//   account.
	//   - CREATE_FAILED when conformance pack creation has failed in the member
	//   account.
	//   - DELETE_FAILED when conformance pack deletion has failed in the member
	//   account.
	//   - DELETE_IN_PROGRESS when conformance pack is being deleted in the member
	//   account.
	//   - DELETE_SUCCESSFUL when conformance pack has been deleted in the member
	//   account.
	//   - UPDATE_SUCCESSFUL when conformance pack has been updated in the member
	//   account.
	//   - UPDATE_IN_PROGRESS when conformance pack is being updated in the member
	//   account.
	//   - UPDATE_FAILED when conformance pack deletion has failed in the member
	//   account.
	Status OrganizationResourceDetailedStatus
	// contains filtered or unexported fields
}

type OrganizationResourceStatus string

type OrganizationRuleStatus string

type OversizedConfigurationItemException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type Owner string

type PendingAggregationRequest struct {

	// The 12-digit account ID of the account requesting to aggregate data.
	RequesterAccountId *string

	// The region requesting to aggregate data.
	RequesterAwsRegion *string
	// contains filtered or unexported fields
}

type QueryInfo struct {

	// Returns a FieldInfo object.
	SelectFields []FieldInfo
	// contains filtered or unexported fields
}

type RecorderStatus string

type RecordingFrequency string

type RecordingGroup struct {

	// Specifies whether Config records configuration changes for all supported
	// resource types, excluding the global IAM resource types. If you set this field
	// to true , when Config adds support for a new resource type, Config starts
	// recording resources of that type automatically. If you set this field to true ,
	// you cannot enumerate specific resource types to record in the resourceTypes
	// field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	// , or to exclude in the resourceTypes field of ExclusionByResourceTypes (https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html)
	// . Region availability Check Resource Coverage by Region Availability (https://docs.aws.amazon.com/config/latest/developerguide/what-is-resource-config-coverage.html)
	// to see if a resource type is supported in the Amazon Web Services Region where
	// you set up Config.
	AllSupported bool

	// An object that specifies how Config excludes resource types from being recorded
	// by the configuration recorder. Required fields To use this option, you must set
	// the useOnly field of RecordingStrategy (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html)
	// to EXCLUSION_BY_RESOURCE_TYPES .
	ExclusionByResourceTypes *ExclusionByResourceTypes

	// This option is a bundle which only applies to the global IAM resource types:
	// IAM users, groups, roles, and customer managed policies. These global IAM
	// resource types can only be recorded by Config in Regions where Config was
	// available before February 2022. You cannot be record the global IAM resouce
	// types in Regions supported by Config after February 2022. This list where you
	// cannot record the global IAM resource types includes the following Regions:
	//   - Asia Pacific (Hyderabad)
	//   - Asia Pacific (Melbourne)
	//   - Canada West (Calgary)
	//   - Europe (Spain)
	//   - Europe (Zurich)
	//   - Israel (Tel Aviv)
	//   - Middle East (UAE)
	// Aurora global clusters are recorded in all enabled Regions The
	// AWS::RDS::GlobalCluster resource type will be recorded in all supported Config
	// Regions where the configuration recorder is enabled, even if
	// includeGlobalResourceTypes is set false . The includeGlobalResourceTypes option
	// is a bundle which only applies to IAM users, groups, roles, and customer managed
	// policies. If you do not want to record AWS::RDS::GlobalCluster in all enabled
	// Regions, use one of the following recording strategies:
	//   - Record all current and future resource types with exclusions (
	//   EXCLUSION_BY_RESOURCE_TYPES ), or
	//   - Record specific resource types ( INCLUSION_BY_RESOURCE_TYPES ).
	// For more information, see Selecting Which Resources are Recorded (https://docs.aws.amazon.com/config/latest/developerguide/select-resources.html#select-resources-all)
	// in the Config developer guide. includeGlobalResourceTypes and the exclusion
	// recording strategy The includeGlobalResourceTypes field has no impact on the
	// EXCLUSION_BY_RESOURCE_TYPES recording strategy. This means that the global IAM
	// resource types (IAM users, groups, roles, and customer managed policies) will
	// not be automatically added as exclusions for exclusionByResourceTypes when
	// includeGlobalResourceTypes is set to false . The includeGlobalResourceTypes
	// field should only be used to modify the AllSupported field, as the default for
	// the AllSupported field is to record configuration changes for all supported
	// resource types excluding the global IAM resource types. To include the global
	// IAM resource types when AllSupported is set to true , make sure to set
	// includeGlobalResourceTypes to true . To exclude the global IAM resource types
	// for the EXCLUSION_BY_RESOURCE_TYPES recording strategy, you need to manually
	// add them to the resourceTypes field of exclusionByResourceTypes . Required and
	// optional fields Before you set this field to true , set the allSupported field
	// of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	// to true . Optionally, you can set the useOnly field of RecordingStrategy (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html)
	// to ALL_SUPPORTED_RESOURCE_TYPES . Overriding fields If you set this field to
	// false but list global IAM resource types in the resourceTypes field of
	// RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	// , Config will still record configuration changes for those specified resource
	// types regardless of if you set the includeGlobalResourceTypes field to false.
	// If you do not want to record configuration changes to the global IAM resource
	// types (IAM users, groups, roles, and customer managed policies), make sure to
	// not list them in the resourceTypes field in addition to setting the
	// includeGlobalResourceTypes field to false.
	IncludeGlobalResourceTypes bool

	// An object that specifies the recording strategy for the configuration recorder.
	//   - If you set the useOnly field of RecordingStrategy (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html)
	//   to ALL_SUPPORTED_RESOURCE_TYPES , Config records configuration changes for all
	//   supported resource types, excluding the global IAM resource types. You also must
	//   set the allSupported field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	//   to true . When Config adds support for a new resource type, Config
	//   automatically starts recording resources of that type.
	//   - If you set the useOnly field of RecordingStrategy (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html)
	//   to INCLUSION_BY_RESOURCE_TYPES , Config records configuration changes for only
	//   the resource types you specify in the resourceTypes field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	//   .
	//   - If you set the useOnly field of RecordingStrategy (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html)
	//   to EXCLUSION_BY_RESOURCE_TYPES , Config records configuration changes for all
	//   supported resource types except the resource types that you specify to exclude
	//   from being recorded in the resourceTypes field of ExclusionByResourceTypes (https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html)
	//   .
	// Required and optional fields The recordingStrategy field is optional when you
	// set the allSupported field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	// to true . The recordingStrategy field is optional when you list resource types
	// in the resourceTypes field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	// . The recordingStrategy field is required if you list resource types to exclude
	// from recording in the resourceTypes field of ExclusionByResourceTypes (https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html)
	// . Overriding fields If you choose EXCLUSION_BY_RESOURCE_TYPES for the recording
	// strategy, the exclusionByResourceTypes field will override other properties in
	// the request. For example, even if you set includeGlobalResourceTypes to false,
	// global IAM resource types will still be automatically recorded in this option
	// unless those resource types are specifically listed as exclusions in the
	// resourceTypes field of exclusionByResourceTypes . Global resources types and the
	// resource exclusion recording strategy By default, if you choose the
	// EXCLUSION_BY_RESOURCE_TYPES recording strategy, when Config adds support for a
	// new resource type in the Region where you set up the configuration recorder,
	// including global resource types, Config starts recording resources of that type
	// automatically. Unless specifically listed as exclusions, AWS::RDS::GlobalCluster
	// will be recorded automatically in all supported Config Regions were the
	// configuration recorder is enabled. IAM users, groups, roles, and customer
	// managed policies will be recorded in the Region where you set up the
	// configuration recorder if that is a Region where Config was available before
	// February 2022. You cannot be record the global IAM resouce types in Regions
	// supported by Config after February 2022. This list where you cannot record the
	// global IAM resource types includes the following Regions:
	//   - Asia Pacific (Hyderabad)
	//   - Asia Pacific (Melbourne)
	//   - Canada West (Calgary)
	//   - Europe (Spain)
	//   - Europe (Zurich)
	//   - Israel (Tel Aviv)
	//   - Middle East (UAE)
	RecordingStrategy *RecordingStrategy

	// A comma-separated list that specifies which resource types Config records. For
	// a list of valid resourceTypes values, see the Resource Type Value column in
	// Supported Amazon Web Services resource Types (https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources)
	// in the Config developer guide. Required and optional fields Optionally, you can
	// set the useOnly field of RecordingStrategy (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingStrategy.html)
	// to INCLUSION_BY_RESOURCE_TYPES . To record all configuration changes, set the
	// allSupported field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	// to true , and either omit this field or don't specify any resource types in this
	// field. If you set the allSupported field to false and specify values for
	// resourceTypes , when Config adds support for a new type of resource, it will not
	// record resources of that type unless you manually add that type to your
	// recording group. Region availability Before specifying a resource type for
	// Config to track, check Resource Coverage by Region Availability (https://docs.aws.amazon.com/config/latest/developerguide/what-is-resource-config-coverage.html)
	// to see if the resource type is supported in the Amazon Web Services Region where
	// you set up Config. If a resource type is supported by Config in at least one
	// Region, you can enable the recording of that resource type in all Regions
	// supported by Config, even if the specified resource type is not supported in the
	// Amazon Web Services Region where you set up Config.
	ResourceTypes []ResourceType
	// contains filtered or unexported fields
}

type RecordingMode struct {

	// The default recording frequency that Config uses to record configuration
	// changes. Daily recording is not supported for the following resource types:
	//   - AWS::Config::ResourceCompliance
	//   - AWS::Config::ConformancePackCompliance
	//   - AWS::Config::ConfigurationRecorder
	// For the allSupported ( ALL_SUPPORTED_RESOURCE_TYPES ) recording strategy, these
	// resource types will be set to Continuous recording.
	//
	// This member is required.
	RecordingFrequency RecordingFrequency

	// An array of recordingModeOverride objects for you to specify your overrides for
	// the recording mode. The recordingModeOverride object in the
	// recordingModeOverrides array consists of three fields: a description , the new
	// recordingFrequency , and an array of resourceTypes to override.
	RecordingModeOverrides []RecordingModeOverride
	// contains filtered or unexported fields
}

type RecordingModeOverride struct {

	// The recording frequency that will be applied to all the resource types
	// specified in the override.
	//   - Continuous recording allows you to record configuration changes
	//   continuously whenever a change occurs.
	//   - Daily recording allows you to receive a configuration item (CI)
	//   representing the most recent state of your resources over the last 24-hour
	//   period, only if it’s different from the previous CI recorded.
	// Firewall Manager depends on continuous recording to monitor your resources. If
	// you are using Firewall Manager, it is recommended that you set the recording
	// frequency to Continuous.
	//
	// This member is required.
	RecordingFrequency RecordingFrequency

	// A comma-separated list that specifies which resource types Config includes in
	// the override. Daily recording is not supported for the following resource types:
	//
	//   - AWS::Config::ResourceCompliance
	//   - AWS::Config::ConformancePackCompliance
	//   - AWS::Config::ConfigurationRecorder
	//
	// This member is required.
	ResourceTypes []ResourceType

	// A description that you provide for the override.
	Description *string
	// contains filtered or unexported fields
}

type RecordingStrategy struct {

	// The recording strategy for the configuration recorder.
	//   - If you set this option to ALL_SUPPORTED_RESOURCE_TYPES , Config records
	//   configuration changes for all supported resource types, excluding the global IAM
	//   resource types. You also must set the allSupported field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	//   to true . When Config adds support for a new resource type, Config
	//   automatically starts recording resources of that type. For a list of supported
	//   resource types, see Supported Resource Types (https://docs.aws.amazon.com/config/latest/developerguide/resource-config-reference.html#supported-resources)
	//   in the Config developer guide.
	//   - If you set this option to INCLUSION_BY_RESOURCE_TYPES , Config records
	//   configuration changes for only the resource types that you specify in the
	//   resourceTypes field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	//   .
	//   - If you set this option to EXCLUSION_BY_RESOURCE_TYPES , Config records
	//   configuration changes for all supported resource types, except the resource
	//   types that you specify to exclude from being recorded in the resourceTypes
	//   field of ExclusionByResourceTypes (https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html)
	//   .
	// Required and optional fields The recordingStrategy field is optional when you
	// set the allSupported field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	// to true . The recordingStrategy field is optional when you list resource types
	// in the resourceTypes field of RecordingGroup (https://docs.aws.amazon.com/config/latest/APIReference/API_RecordingGroup.html)
	// . The recordingStrategy field is required if you list resource types to exclude
	// from recording in the resourceTypes field of ExclusionByResourceTypes (https://docs.aws.amazon.com/config/latest/APIReference/API_ExclusionByResourceTypes.html)
	// . Overriding fields If you choose EXCLUSION_BY_RESOURCE_TYPES for the recording
	// strategy, the exclusionByResourceTypes field will override other properties in
	// the request. For example, even if you set includeGlobalResourceTypes to false,
	// global IAM resource types will still be automatically recorded in this option
	// unless those resource types are specifically listed as exclusions in the
	// resourceTypes field of exclusionByResourceTypes . Global resource types and the
	// exclusion recording strategy By default, if you choose the
	// EXCLUSION_BY_RESOURCE_TYPES recording strategy, when Config adds support for a
	// new resource type in the Region where you set up the configuration recorder,
	// including global resource types, Config starts recording resources of that type
	// automatically. Unless specifically listed as exclusions, AWS::RDS::GlobalCluster
	// will be recorded automatically in all supported Config Regions were the
	// configuration recorder is enabled. IAM users, groups, roles, and customer
	// managed policies will be recorded in the Region where you set up the
	// configuration recorder if that is a Region where Config was available before
	// February 2022. You cannot be record the global IAM resouce types in Regions
	// supported by Config after February 2022. This list where you cannot record the
	// global IAM resource types includes the following Regions:
	//   - Asia Pacific (Hyderabad)
	//   - Asia Pacific (Melbourne)
	//   - Canada West (Calgary)
	//   - Europe (Spain)
	//   - Europe (Zurich)
	//   - Israel (Tel Aviv)
	//   - Middle East (UAE)
	UseOnly RecordingStrategyType
	// contains filtered or unexported fields
}

type RecordingStrategyType string

type Relationship struct {

	// The type of relationship with the related resource.
	RelationshipName *string

	// The ID of the related resource (for example, sg-xxxxxx ).
	ResourceId *string

	// The custom name of the related resource, if available.
	ResourceName *string

	// The resource type of the related resource.
	ResourceType ResourceType
	// contains filtered or unexported fields
}

type RemediationConfiguration struct {

	// The name of the Config rule.
	//
	// This member is required.
	ConfigRuleName *string

	// Target ID is the name of the SSM document.
	//
	// This member is required.
	TargetId *string

	// The type of the target. Target executes remediation. For example, SSM document.
	//
	// This member is required.
	TargetType RemediationTargetType

	// Amazon Resource Name (ARN) of remediation configuration.
	Arn *string

	// The remediation is triggered automatically.
	Automatic bool

	// Name of the service that owns the service-linked rule, if applicable.
	CreatedByService *string

	// An ExecutionControls object.
	ExecutionControls *ExecutionControls

	// The maximum number of failed attempts for auto-remediation. If you do not
	// select a number, the default is 5. For example, if you specify
	// MaximumAutomaticAttempts as 5 with RetryAttemptSeconds as 50 seconds, Config
	// will put a RemediationException on your behalf for the failing resource after
	// the 5th failed attempt within 50 seconds.
	MaximumAutomaticAttempts *int32

	// An object of the RemediationParameterValue.
	Parameters map[string]RemediationParameterValue

	// The type of a resource.
	ResourceType *string

	// Time window to determine whether or not to add a remediation exception to
	// prevent infinite remediation attempts. If MaximumAutomaticAttempts remediation
	// attempts have been made under RetryAttemptSeconds , a remediation exception will
	// be added to the resource. If you do not select a number, the default is 60
	// seconds. For example, if you specify RetryAttemptSeconds as 50 seconds and
	// MaximumAutomaticAttempts as 5, Config will run auto-remediations 5 times within
	// 50 seconds before adding a remediation exception to the resource.
	RetryAttemptSeconds *int64

	// Version of the target. For example, version of the SSM document. If you make
	// backward incompatible changes to the SSM document, you must call
	// PutRemediationConfiguration API again to ensure the remediations can run.
	TargetVersion *string
	// contains filtered or unexported fields
}

type RemediationException struct {

	// The name of the Config rule.
	//
	// This member is required.
	ConfigRuleName *string

	// The ID of the resource (for example., sg-xxxxxx).
	//
	// This member is required.
	ResourceId *string

	// The type of a resource.
	//
	// This member is required.
	ResourceType *string

	// The time when the remediation exception will be deleted.
	ExpirationTime *time.Time

	// An explanation of an remediation exception.
	Message *string
	// contains filtered or unexported fields
}

type RemediationExceptionResourceKey struct {

	// The ID of the resource (for example., sg-xxxxxx).
	ResourceId *string

	// The type of a resource.
	ResourceType *string
	// contains filtered or unexported fields
}

type RemediationExecutionState string

type RemediationExecutionStatus struct {

	// Start time when the remediation was executed.
	InvocationTime *time.Time

	// The time when the remediation execution was last updated.
	LastUpdatedTime *time.Time

	// The details that identify a resource within Config, including the resource type
	// and resource ID.
	ResourceKey *ResourceKey

	// ENUM of the values.
	State RemediationExecutionState

	// Details of every step.
	StepDetails []RemediationExecutionStep
	// contains filtered or unexported fields
}

type RemediationExecutionStep struct {

	// An error message if the step was interrupted during execution.
	ErrorMessage *string

	// The details of the step.
	Name *string

	// The time when the step started.
	StartTime *time.Time

	// The valid status of the step.
	State RemediationExecutionStepState

	// The time when the step stopped.
	StopTime *time.Time
	// contains filtered or unexported fields
}

type RemediationExecutionStepState string

type RemediationInProgressException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type RemediationParameterValue struct {

	// The value is dynamic and changes at run-time.
	ResourceValue *ResourceValue

	// The value is static and does not change at run-time.
	StaticValue *StaticValue
	// contains filtered or unexported fields
}

type RemediationTargetType string

type ResourceConcurrentModificationException struct {
	Message *string

	ErrorCodeOverride *string
	// contains filtered or unexported fields
}

type ResourceConfigurationSchemaType string

type ResourceCount struct {

	// The number of resources.
	Count int64

	// The resource type (for example, "AWS::EC2::Instance" ).
	ResourceType ResourceType
	// contains filtered or unexported fields
}

type ResourceCountFilters struct {

	// The 12-digit ID of the account.
	AccountId *string

	// The region where the account is located.
	Region *string

	// The type of the Amazon Web Services resource.
	ResourceType ResourceType
	// contains filtered or unexported fields
}

type ResourceCountGroupKey string

type ResourceDetails struct {

	// The resource definition to be evaluated as per the resource configuration
	// schema type.
	//
	// This member is required.
	ResourceConfiguration *string

	// A unique resource ID for an evaluation.
	//
	// This member is required.
	ResourceId *string

	// The type of resource being evaluated.
	//
	// This member is required.
	ResourceType *string

	// The schema type of the resource configuration. You can find the Resource type
	// schema (https://docs.aws.amazon.com/cloudformation-cli/latest/userguide/resource-type-schema.html)
	// , or CFN_RESOURCE_SCHEMA , in "Amazon Web Services public extensions" within the
	// CloudFormation registry or with the following CLI commmand: aws cloudformation
	// describe-type --type-name "AWS::S3::Bucket" --type RESOURCE . For more
	// information, see Managing extensions through the CloudFormation registry (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/registry.html#registry-view)
	// and Amazon Web Services resource and property types reference (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html)
	// in the CloudFormation User Guide.
	ResourceConfigurationSchemaType ResourceConfigurationSchemaType
	// contains filtered or unexported fields
}

type ResourceEvaluation struct {

	// The mode of an evaluation. The valid values are Detective or Proactive.
	EvaluationMode EvaluationMode

	// The starting time of an execution.
	EvaluationStartTimestamp *time.Time

	// The ResourceEvaluationId of a evaluation.
	ResourceEvaluationId *string
	// contains filtered or unexported fields
}

type ResourceEvaluationFilters struct {

	// Filters evaluations for a given infrastructure deployment. For example: CFN
	// Stack.
	EvaluationContextIdentifier *string

	// Filters all resource evaluations results based on an evaluation mode.
	// Currently, DECTECTIVE is not supported as a valid value. Ignore other
	// documentation stating otherwise.
	EvaluationMode EvaluationMode

	// Returns a TimeWindow object.
	TimeWindow *TimeWindow
	// contains filtered or unexported fields
}

type ResourceEvaluationStatus string