AWS SecurityHub Update: This release adds new StandardsControlsUpdatable field to the StandardsSubscription resource

Author: AWS

.changes/next-release/feature-AWSSecurityHub-b1e40dd.json

@@ -0,0 +1,6 @@
+{
+    "type": "feature",
+    "category": "AWS SecurityHub",
+    "contributor": "",
+    "description": "This release adds new StandardsControlsUpdatable field to the StandardsSubscription resource"
+}

services/securityhub/src/main/resources/codegen-resources/service-2.json

@@ -167,7 +167,7 @@
         {"shape":"InvalidAccessException"},
         {"shape":"InvalidInputException"}
       ],
-      "documentation":"<p> For a batch of security controls and standards, identifies whether each control is currently enabled or disabled in a standard. </p>"
+      "documentation":"<p> For a batch of security controls and standards, identifies whether each control is currently enabled or disabled in a standard. </p> <p> Calls to this operation return a <code>RESOURCE_NOT_FOUND_EXCEPTION</code> error when the standard subscription for the association has a <code>NOT_READY_FOR_UPDATES</code> value for <code>StandardsControlsUpdatable</code>. </p>"
     },
     "BatchImportFindings":{
       "name":"BatchImportFindings",
@@ -553,7 +553,7 @@
         {"shape":"InvalidAccessException"},
         {"shape":"ResourceNotFoundException"}
       ],
-      "documentation":"<p>Returns a list of security standards controls.</p> <p>For each control, the results include information about whether it is currently enabled, the severity, and a link to remediation information.</p>"
+      "documentation":"<p>Returns a list of security standards controls.</p> <p>For each control, the results include information about whether it is currently enabled, the severity, and a link to remediation information.</p> <p>This operation returns an empty list for standard subscriptions where <code>StandardsControlsUpdatable</code> has value <code>NOT_READY_FOR_UPDATES</code>.</p>"
     },
     "DisableImportFindingsForProduct":{
       "name":"DisableImportFindingsForProduct",
@@ -1112,7 +1112,7 @@
         {"shape":"InvalidAccessException"},
         {"shape":"InvalidInputException"}
       ],
-      "documentation":"<p> Specifies whether a control is currently enabled or disabled in each enabled standard in the calling account. </p>"
+      "documentation":"<p> Specifies whether a control is currently enabled or disabled in each enabled standard in the calling account. </p> <p>This operation omits standards control associations for standard subscriptions where <code>StandardsControlsUpdatable</code> has value <code>NOT_READY_FOR_UPDATES</code>.</p>"
     },
     "ListTagsForResource":{
       "name":"ListTagsForResource",
@@ -1356,7 +1356,7 @@
         {"shape":"ResourceNotFoundException"},
         {"shape":"AccessDeniedException"}
       ],
-      "documentation":"<p>Used to control whether an individual security standard control is enabled or disabled.</p>"
+      "documentation":"<p>Used to control whether an individual security standard control is enabled or disabled.</p> <p>Calls to this operation return a <code>RESOURCE_NOT_FOUND_EXCEPTION</code> error when the standard subscription for the control has <code>StandardsControlsUpdatable</code> value <code>NOT_READY_FOR_UPDATES</code>.</p>"
     }
   },
   "shapes":{
@@ -15739,7 +15739,7 @@
       "members":{
         "StandardsControlAssociationUpdates":{
           "shape":"StandardsControlAssociationUpdates",
-          "documentation":"<p> Updates the enablement status of a security control in a specified standard. </p>"
+          "documentation":"<p> Updates the enablement status of a security control in a specified standard. </p> <p> Calls to this operation return a <code>RESOURCE_NOT_FOUND_EXCEPTION</code> error when the standard subscription for the control has <code>StandardsControlsUpdatable</code> value <code>NOT_READY_FOR_UPDATES</code>. </p>"
         }
       }
     },
@@ -21016,6 +21016,13 @@
       "type":"list",
       "member":{"shape":"StandardsControl"}
     },
+    "StandardsControlsUpdatable":{
+      "type":"string",
+      "enum":[
+        "READY_FOR_UPDATES",
+        "NOT_READY_FOR_UPDATES"
+      ]
+    },
     "StandardsInputParameterMap":{
       "type":"map",
       "key":{"shape":"NonEmptyString"},
@@ -21081,6 +21088,10 @@
           "shape":"StandardsStatus",
           "documentation":"<p>The status of the standard subscription.</p> <p>The status values are as follows:</p> <ul> <li> <p> <code>PENDING</code> - Standard is in the process of being enabled.</p> </li> <li> <p> <code>READY</code> - Standard is enabled.</p> </li> <li> <p> <code>INCOMPLETE</code> - Standard could not be enabled completely. Some controls may not be available.</p> </li> <li> <p> <code>DELETING</code> - Standard is in the process of being disabled.</p> </li> <li> <p> <code>FAILED</code> - Standard could not be disabled.</p> </li> </ul>"
         },
+        "StandardsControlsUpdatable":{
+          "shape":"StandardsControlsUpdatable",
+          "documentation":"<p>Indicates whether the controls associated with this standards subscription can be viewed and updated.</p> <p>The values are as follows:</p> <ul> <li> <p> <code>READY_FOR_UPDATES</code> - Controls associated with this standards subscription can be viewed and updated.</p> </li> <li> <p> <code>NOT_READY_FOR_UPDATES</code> - Controls associated with this standards subscription cannot be retrieved or updated yet. Security Hub is still processing a request to create the controls.</p> </li> </ul>"
+        },
         "StandardsStatusReason":{
           "shape":"StandardsStatusReason",
           "documentation":"<p>The reason for the current status.</p>"
@@ -21241,6 +21252,7 @@
       "type":"string",
       "enum":[
         "NO_AVAILABLE_CONFIGURATION_RECORDER",
+        "MAXIMUM_NUMBER_OF_CONFIG_RULES_EXCEEDED",
         "INTERNAL_ERROR"
       ]
     },