feat(client-securityhub): This release adds new StandardsControlsUpdatable field to the StandardsSubscription resource

awstools · awstools · commit 6548ac421ea2 · 2025-03-10T19:06:30.000Z
diff --git a/clients/client-securityhub/src/commands/BatchDisableStandardsCommand.ts b/clients/client-securityhub/src/commands/BatchDisableStandardsCommand.ts
@@ -54,8 +54,9 @@ export interface BatchDisableStandardsCommandOutput extends BatchDisableStandard
  * //         "<keys>": "STRING_VALUE",
  * //       },
  * //       StandardsStatus: "PENDING" || "READY" || "FAILED" || "DELETING" || "INCOMPLETE", // required
+ * //       StandardsControlsUpdatable: "READY_FOR_UPDATES" || "NOT_READY_FOR_UPDATES",
  * //       StandardsStatusReason: { // StandardsStatusReason
- * //         StatusReasonCode: "NO_AVAILABLE_CONFIGURATION_RECORDER" || "INTERNAL_ERROR", // required
+ * //         StatusReasonCode: "NO_AVAILABLE_CONFIGURATION_RECORDER" || "MAXIMUM_NUMBER_OF_CONFIG_RULES_EXCEEDED" || "INTERNAL_ERROR", // required
  * //       },
  * //     },
  * //   ],
diff --git a/clients/client-securityhub/src/commands/BatchEnableStandardsCommand.ts b/clients/client-securityhub/src/commands/BatchEnableStandardsCommand.ts
@@ -60,8 +60,9 @@ export interface BatchEnableStandardsCommandOutput extends BatchEnableStandardsR
  * //         "<keys>": "STRING_VALUE",
  * //       },
  * //       StandardsStatus: "PENDING" || "READY" || "FAILED" || "DELETING" || "INCOMPLETE", // required
+ * //       StandardsControlsUpdatable: "READY_FOR_UPDATES" || "NOT_READY_FOR_UPDATES",
  * //       StandardsStatusReason: { // StandardsStatusReason
- * //         StatusReasonCode: "NO_AVAILABLE_CONFIGURATION_RECORDER" || "INTERNAL_ERROR", // required
+ * //         StatusReasonCode: "NO_AVAILABLE_CONFIGURATION_RECORDER" || "MAXIMUM_NUMBER_OF_CONFIG_RULES_EXCEEDED" || "INTERNAL_ERROR", // required
  * //       },
  * //     },
  * //   ],
diff --git a/clients/client-securityhub/src/commands/BatchGetStandardsControlAssociationsCommand.ts b/clients/client-securityhub/src/commands/BatchGetStandardsControlAssociationsCommand.ts
@@ -39,6 +39,9 @@ export interface BatchGetStandardsControlAssociationsCommandOutput
  * <p>
  *          For a batch of security controls and standards, identifies whether each control is currently enabled or disabled in a standard.
  *       </p>
+ *          <p>
+ *          Calls to this operation return a <code>RESOURCE_NOT_FOUND_EXCEPTION</code> error when the standard subscription for the association has a <code>NOT_READY_FOR_UPDATES</code> value for <code>StandardsControlsUpdatable</code>.
+ *       </p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
diff --git a/clients/client-securityhub/src/commands/DescribeStandardsControlsCommand.ts b/clients/client-securityhub/src/commands/DescribeStandardsControlsCommand.ts
@@ -31,6 +31,7 @@ export interface DescribeStandardsControlsCommandOutput extends DescribeStandard
  * <p>Returns a list of security standards controls.</p>
  *          <p>For each control, the results include information about whether it is currently enabled,
  *          the severity, and a link to remediation information.</p>
+ *          <p>This operation returns an empty list for standard subscriptions where <code>StandardsControlsUpdatable</code> has value <code>NOT_READY_FOR_UPDATES</code>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
diff --git a/clients/client-securityhub/src/commands/GetEnabledStandardsCommand.ts b/clients/client-securityhub/src/commands/GetEnabledStandardsCommand.ts
@@ -53,8 +53,9 @@ export interface GetEnabledStandardsCommandOutput extends GetEnabledStandardsRes
  * //         "<keys>": "STRING_VALUE",
  * //       },
  * //       StandardsStatus: "PENDING" || "READY" || "FAILED" || "DELETING" || "INCOMPLETE", // required
+ * //       StandardsControlsUpdatable: "READY_FOR_UPDATES" || "NOT_READY_FOR_UPDATES",
  * //       StandardsStatusReason: { // StandardsStatusReason
- * //         StatusReasonCode: "NO_AVAILABLE_CONFIGURATION_RECORDER" || "INTERNAL_ERROR", // required
+ * //         StatusReasonCode: "NO_AVAILABLE_CONFIGURATION_RECORDER" || "MAXIMUM_NUMBER_OF_CONFIG_RULES_EXCEEDED" || "INTERNAL_ERROR", // required
  * //       },
  * //     },
  * //   ],
diff --git a/clients/client-securityhub/src/commands/ListStandardsControlAssociationsCommand.ts b/clients/client-securityhub/src/commands/ListStandardsControlAssociationsCommand.ts
@@ -36,6 +36,7 @@ export interface ListStandardsControlAssociationsCommandOutput
  * <p>
  *          Specifies whether a control is currently enabled or disabled in each enabled standard in the calling account.
  *       </p>
+ *          <p>This operation omits standards control associations for standard subscriptions where <code>StandardsControlsUpdatable</code> has value <code>NOT_READY_FOR_UPDATES</code>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
diff --git a/clients/client-securityhub/src/commands/UpdateStandardsControlCommand.ts b/clients/client-securityhub/src/commands/UpdateStandardsControlCommand.ts
@@ -30,6 +30,7 @@ export interface UpdateStandardsControlCommandOutput extends UpdateStandardsCont
 /**
  * <p>Used to control whether an individual security standard control is enabled or
  *          disabled.</p>
+ *          <p>Calls to this operation return a <code>RESOURCE_NOT_FOUND_EXCEPTION</code> error when the standard subscription for the control has <code>StandardsControlsUpdatable</code> value <code>NOT_READY_FOR_UPDATES</code>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
diff --git a/clients/client-securityhub/src/models/models_2.ts b/clients/client-securityhub/src/models/models_2.ts
@@ -4348,6 +4348,20 @@ export interface BatchDisableStandardsRequest {
   StandardsSubscriptionArns: string[] | undefined;
 }
 
+/**
+ * @public
+ * @enum
+ */
+export const StandardsControlsUpdatable = {
+  NOT_READY_FOR_UPDATES: "NOT_READY_FOR_UPDATES",
+  READY_FOR_UPDATES: "READY_FOR_UPDATES",
+} as const;
+
+/**
+ * @public
+ */
+export type StandardsControlsUpdatable = (typeof StandardsControlsUpdatable)[keyof typeof StandardsControlsUpdatable];
+
 /**
  * @public
  * @enum
@@ -4371,6 +4385,7 @@ export type StandardsStatus = (typeof StandardsStatus)[keyof typeof StandardsSta
  */
 export const StatusReasonCode = {
   INTERNAL_ERROR: "INTERNAL_ERROR",
+  MAXIMUM_NUMBER_OF_CONFIG_RULES_EXCEEDED: "MAXIMUM_NUMBER_OF_CONFIG_RULES_EXCEEDED",
   NO_AVAILABLE_CONFIGURATION_RECORDER: "NO_AVAILABLE_CONFIGURATION_RECORDER",
 } as const;
 
@@ -4443,6 +4458,23 @@ export interface StandardsSubscription {
    */
   StandardsStatus: StandardsStatus | undefined;
 
+  /**
+   * <p>Indicates whether the controls associated with this standards subscription can be viewed and updated.</p>
+   *          <p>The values are as follows:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>READY_FOR_UPDATES</code> - Controls associated with this standards subscription can be viewed and updated.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>NOT_READY_FOR_UPDATES</code> - Controls associated with this standards subscription cannot be retrieved or updated yet. Security Hub is still processing a request to create the controls.</p>
+   *             </li>
+   *          </ul>
+   * @public
+   */
+  StandardsControlsUpdatable?: StandardsControlsUpdatable | undefined;
+
   /**
    * <p>The reason for the current status.</p>
    * @public
@@ -5880,6 +5912,9 @@ export interface BatchUpdateStandardsControlAssociationsRequest {
    * <p>
    *          Updates the enablement status of a security control in a specified standard.
    *       </p>
+   *          <p>
+   *          Calls to this operation return a <code>RESOURCE_NOT_FOUND_EXCEPTION</code> error when the standard subscription for the control has <code>StandardsControlsUpdatable</code> value <code>NOT_READY_FOR_UPDATES</code>.
+   *       </p>
    * @public
    */
   StandardsControlAssociationUpdates: StandardsControlAssociationUpdate[] | undefined;
diff --git a/codegen/sdk-codegen/aws-models/securityhub.json b/codegen/sdk-codegen/aws-models/securityhub.json
@@ -21462,7 +21462,7 @@
         }
       ],
       "traits": {
-        "smithy.api#documentation": "<p>\n         For a batch of security controls and standards, identifies whether each control is currently enabled or disabled in a standard.\n      </p>",
+        "smithy.api#documentation": "<p>\n         For a batch of security controls and standards, identifies whether each control is currently enabled or disabled in a standard.\n      </p>\n         <p>\n         Calls to this operation return a <code>RESOURCE_NOT_FOUND_EXCEPTION</code> error when the standard subscription for the association has a <code>NOT_READY_FOR_UPDATES</code> value for <code>StandardsControlsUpdatable</code>.\n      </p>",
         "smithy.api#http": {
           "method": "POST",
           "uri": "/associations/batchGet",
@@ -22024,7 +22024,7 @@
           "target": "com.amazonaws.securityhub#StandardsControlAssociationUpdates",
           "traits": {
             "smithy.api#clientOptional": {},
-            "smithy.api#documentation": "<p>\n         Updates the enablement status of a security control in a specified standard.\n      </p>",
+            "smithy.api#documentation": "<p>\n         Updates the enablement status of a security control in a specified standard.\n      </p>\n         <p>\n         Calls to this operation return a <code>RESOURCE_NOT_FOUND_EXCEPTION</code> error when the standard subscription for the control has <code>StandardsControlsUpdatable</code> value <code>NOT_READY_FOR_UPDATES</code>.\n      </p>",
             "smithy.api#required": {}
           }
         }
@@ -24678,7 +24678,7 @@
         }
       ],
       "traits": {
-        "smithy.api#documentation": "<p>Returns a list of security standards controls.</p>\n         <p>For each control, the results include information about whether it is currently enabled,\n         the severity, and a link to remediation information.</p>",
+        "smithy.api#documentation": "<p>Returns a list of security standards controls.</p>\n         <p>For each control, the results include information about whether it is currently enabled,\n         the severity, and a link to remediation information.</p>\n         <p>This operation returns an empty list for standard subscriptions where <code>StandardsControlsUpdatable</code> has value <code>NOT_READY_FOR_UPDATES</code>.</p>",
         "smithy.api#http": {
           "method": "GET",
           "uri": "/standards/controls/{StandardsSubscriptionArn+}",
@@ -28718,7 +28718,7 @@
         }
       ],
       "traits": {
-        "smithy.api#documentation": "<p>\n         Specifies whether a control is currently enabled or disabled in each enabled standard in the calling account.\n      </p>",
+        "smithy.api#documentation": "<p>\n         Specifies whether a control is currently enabled or disabled in each enabled standard in the calling account.\n      </p>\n         <p>This operation omits standards control associations for standard subscriptions where <code>StandardsControlsUpdatable</code> has value <code>NOT_READY_FOR_UPDATES</code>.</p>",
         "smithy.api#http": {
           "method": "GET",
           "uri": "/associations",
@@ -34145,6 +34145,23 @@
         "target": "com.amazonaws.securityhub#StandardsControl"
       }
     },
+    "com.amazonaws.securityhub#StandardsControlsUpdatable": {
+      "type": "enum",
+      "members": {
+        "READY_FOR_UPDATES": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "READY_FOR_UPDATES"
+          }
+        },
+        "NOT_READY_FOR_UPDATES": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "NOT_READY_FOR_UPDATES"
+          }
+        }
+      }
+    },
     "com.amazonaws.securityhub#StandardsInputParameterMap": {
       "type": "map",
       "key": {
@@ -34260,6 +34277,12 @@
             "smithy.api#required": {}
           }
         },
+        "StandardsControlsUpdatable": {
+          "target": "com.amazonaws.securityhub#StandardsControlsUpdatable",
+          "traits": {
+            "smithy.api#documentation": "<p>Indicates whether the controls associated with this standards subscription can be viewed and updated.</p>\n         <p>The values are as follows:</p>\n         <ul>\n            <li>\n               <p>\n                  <code>READY_FOR_UPDATES</code> - Controls associated with this standards subscription can be viewed and updated.</p>\n            </li>\n            <li>\n               <p>\n                  <code>NOT_READY_FOR_UPDATES</code> - Controls associated with this standards subscription cannot be retrieved or updated yet. Security Hub is still processing a request to create the controls.</p>\n            </li>\n         </ul>"
+          }
+        },
         "StandardsStatusReason": {
           "target": "com.amazonaws.securityhub#StandardsStatusReason",
           "traits": {
@@ -34612,6 +34635,12 @@
             "smithy.api#enumValue": "NO_AVAILABLE_CONFIGURATION_RECORDER"
           }
         },
+        "MAXIMUM_NUMBER_OF_CONFIG_RULES_EXCEEDED": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "MAXIMUM_NUMBER_OF_CONFIG_RULES_EXCEEDED"
+          }
+        },
         "INTERNAL_ERROR": {
           "target": "smithy.api#Unit",
           "traits": {
@@ -36319,7 +36348,7 @@
         }
       ],
       "traits": {
-        "smithy.api#documentation": "<p>Used to control whether an individual security standard control is enabled or\n         disabled.</p>",
+        "smithy.api#documentation": "<p>Used to control whether an individual security standard control is enabled or\n         disabled.</p>\n         <p>Calls to this operation return a <code>RESOURCE_NOT_FOUND_EXCEPTION</code> error when the standard subscription for the control has <code>StandardsControlsUpdatable</code> value <code>NOT_READY_FOR_UPDATES</code>.</p>",
         "smithy.api#examples": [
           {
             "title": "To update the enablement status of a standard control",
