Skip to content

Commit 6770938

Browse files
Updated the descriptions for the AWS Control Tower Baseline APIs to make them more intuitive.
1 parent 87832d1 commit 6770938

File tree

4 files changed

+8
-11
lines changed

4 files changed

+8
-11
lines changed

generator/ServiceModels/controltower/controltower-2018-05-10.docs.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -304,7 +304,7 @@
304304
}
305305
},
306306
"EnabledBaselineDriftStatusSummary": {
307-
"base": "<p>The drift summary of the enabled baseline. Amazon Web Services Control Tower reports inheritance drift when an enabled baseline configuration of a member account is different than the configuration that applies to the OU. Amazon Web Services Control Tower reports this type of drift for a parent or child enabled baseline. One way to repair this drift by resetting the parent enabled baseline, on the OU.</p> <p>For example, if an account is moved between OUs that share the same baseline but different versions or parameters, the entity from the previous OU is unlinked; that (previous) OU reports <i>inheritance drift</i>. Also, the parent enabled baseline on the destination OU reports <i>inheritance drift</i>; it is missing the newly moved account. The configurations do not match for either OU, so both are in a state of inheritance drift.</p>",
307+
"base": "<p>The drift summary of the enabled baseline. Amazon Web Services Control Tower reports inheritance drift when an enabled baseline configuration of a member account is different than the configuration that applies to the OU. Amazon Web Services Control Tower reports this type of drift for a parent or child enabled baseline. One way to repair this drift by resetting the parent enabled baseline, on the OU.</p> <p>For example, you may see this type of drift if you move accounts between OUs, but the accounts are not yet (re-)enrolled.</p>",
308308
"refs": {
309309
"EnabledBaselineDetails$driftStatusSummary": "<p>The drift status of the enabled baseline.</p>",
310310
"EnabledBaselineSummary$driftStatusSummary": "<p>The drift status of the enabled baseline.</p>"
@@ -337,7 +337,7 @@
337337
"EnabledBaselineInheritanceDrift": {
338338
"base": "<p>The inheritance drift summary for the enabled baseline. Inheritance drift occurs when any accounts in the target OU do not match the baseline configuration defined on that OU. </p>",
339339
"refs": {
340-
"EnabledBaselineDriftTypes$inheritance": "<p>One or more accounts within the target OU does not match the baseline configuration defined on that OU. An account is in inheritance drift when it does not match the configuration of a parent OU, possibly a new parent OU if the account is moved. </p>"
340+
"EnabledBaselineDriftTypes$inheritance": "<p>At least one account within the target OU does not match the baseline configuration defined on that OU. An account is in inheritance drift when it does not match the configuration of a parent OU, possibly a new parent OU, if the account is moved. </p>"
341341
}
342342
},
343343
"EnabledBaselineParameter": {

generator/ServiceModels/controltower/controltower-2018-05-10.normal.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1088,7 +1088,7 @@
10881088
"documentation":"<p>The types of drift that can be detected for an enabled baseline. Amazon Web Services Control Tower detects inheritance drift on enabled baselines that apply at the OU level. </p>"
10891089
}
10901090
},
1091-
"documentation":"<p>The drift summary of the enabled baseline. Amazon Web Services Control Tower reports inheritance drift when an enabled baseline configuration of a member account is different than the configuration that applies to the OU. Amazon Web Services Control Tower reports this type of drift for a parent or child enabled baseline. One way to repair this drift by resetting the parent enabled baseline, on the OU.</p> <p>For example, if an account is moved between OUs that share the same baseline but different versions or parameters, the entity from the previous OU is unlinked; that (previous) OU reports <i>inheritance drift</i>. Also, the parent enabled baseline on the destination OU reports <i>inheritance drift</i>; it is missing the newly moved account. The configurations do not match for either OU, so both are in a state of inheritance drift.</p>"
1091+
"documentation":"<p>The drift summary of the enabled baseline. Amazon Web Services Control Tower reports inheritance drift when an enabled baseline configuration of a member account is different than the configuration that applies to the OU. Amazon Web Services Control Tower reports this type of drift for a parent or child enabled baseline. One way to repair this drift by resetting the parent enabled baseline, on the OU.</p> <p>For example, you may see this type of drift if you move accounts between OUs, but the accounts are not yet (re-)enrolled.</p>"
10921092
},
10931093
"EnabledBaselineDriftStatuses":{
10941094
"type":"list",
@@ -1101,7 +1101,7 @@
11011101
"members":{
11021102
"inheritance":{
11031103
"shape":"EnabledBaselineInheritanceDrift",
1104-
"documentation":"<p>One or more accounts within the target OU does not match the baseline configuration defined on that OU. An account is in inheritance drift when it does not match the configuration of a parent OU, possibly a new parent OU if the account is moved. </p>"
1104+
"documentation":"<p>At least one account within the target OU does not match the baseline configuration defined on that OU. An account is in inheritance drift when it does not match the configuration of a parent OU, possibly a new parent OU, if the account is moved. </p>"
11051105
}
11061106
},
11071107
"documentation":"<p>The types of drift that can be detected for an enabled baseline.</p> <ul> <li> <p> Amazon Web Services Control Tower detects inheritance drift on the enabled baselines that target OUs: <code>AWSControlTowerBaseline</code> and <code>BackupBaseline</code>. </p> </li> <li> <p>Amazon Web Services Control Tower does not detect drift on the baselines that apply to your landing zone: <code>IdentityCenterBaseline</code>, <code>AuditBaseline</code>, <code>LogArchiveBaseline</code>, <code>BackupCentralVaultBaseline</code>, or <code>BackupAdminBaseline</code>. For more information, see <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/types-of-baselines.html\">Types of baselines</a>.</p> </li> </ul> <p>Baselines enabled on an OU are inherited by its member accounts as child <code>EnabledBaseline</code> resources. The baseline on the OU serves as the parent <code>EnabledBaseline</code>, which governs the configuration of each child <code>EnabledBaseline</code>.</p> <p>If the baseline configuration of a member account in an OU does not match the configuration of the parent OU, the parent and child baseline is in a state of inheritance drift. This drift could occur in the <code>AWSControlTowerBaseline</code> or the <code>BackupBaseline</code> related to that account.</p>"

sdk/src/Services/ControlTower/Generated/Model/EnabledBaselineDriftStatusSummary.cs

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -38,11 +38,8 @@ namespace Amazon.ControlTower.Model
3838
///
3939
///
4040
/// <para>
41-
/// For example, if an account is moved between OUs that share the same baseline but different
42-
/// versions or parameters, the entity from the previous OU is unlinked; that (previous)
43-
/// OU reports <i>inheritance drift</i>. Also, the parent enabled baseline on the destination
44-
/// OU reports <i>inheritance drift</i>; it is missing the newly moved account. The configurations
45-
/// do not match for either OU, so both are in a state of inheritance drift.
41+
/// For example, you may see this type of drift if you move accounts between OUs, but
42+
/// the accounts are not yet (re-)enrolled.
4643
/// </para>
4744
/// </summary>
4845
public partial class EnabledBaselineDriftStatusSummary

sdk/src/Services/ControlTower/Generated/Model/EnabledBaselineDriftTypes.cs

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -66,9 +66,9 @@ public partial class EnabledBaselineDriftTypes
6666
/// <summary>
6767
/// Gets and sets the property Inheritance.
6868
/// <para>
69-
/// One or more accounts within the target OU does not match the baseline configuration
69+
/// At least one account within the target OU does not match the baseline configuration
7070
/// defined on that OU. An account is in inheritance drift when it does not match the
71-
/// configuration of a parent OU, possibly a new parent OU if the account is moved.
71+
/// configuration of a parent OU, possibly a new parent OU, if the account is moved.
7272
/// </para>
7373
/// </summary>
7474
public EnabledBaselineInheritanceDrift Inheritance

0 commit comments

Comments
 (0)