@@ -1144,13 +1144,26 @@ export const CustomerPolicyStatus = {
11441144 */
11451145export type CustomerPolicyStatus = ( typeof CustomerPolicyStatus ) [ keyof typeof CustomerPolicyStatus ] ;
11461146
1147+ /**
1148+ * @public
1149+ * @enum
1150+ */
1151+ export const ResourceTagLogicalOperator = {
1152+ AND : "AND" ,
1153+ OR : "OR" ,
1154+ } as const ;
1155+
1156+ /**
1157+ * @public
1158+ */
1159+ export type ResourceTagLogicalOperator = ( typeof ResourceTagLogicalOperator ) [ keyof typeof ResourceTagLogicalOperator ] ;
1160+
11471161/**
11481162 * <p>The resource tags that Firewall Manager uses to determine if a particular resource
11491163 * should be included or excluded from the Firewall Manager policy. Tags enable you to
11501164 * categorize your Amazon Web Services resources in different ways, for example, by purpose, owner, or
1151- * environment. Each tag consists of a key and an optional value. Firewall Manager combines the
1152- * tags with "AND" so that, if you add more than one tag to a policy scope, a resource must have
1153- * all the specified tags to be included or excluded. For more information, see
1165+ * environment. Each tag consists of a key and an optional value. If you add more than one tag to a policy, you can
1166+ * specify whether to combine them using the logical AND operator or the logical OR operator. For more information, see
11541167 * <a href="https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/tag-editor.html">Working with Tag Editor</a>.</p>
11551168 * <p>Every resource tag must have a string value, either a non-empty string or an empty string. If you don't
11561169 * provide a value for a resource tag, Firewall Manager saves the value as an empty string: "". When Firewall Manager compares tags, it only
@@ -1878,6 +1891,16 @@ export interface Policy {
18781891 * @public
18791892 */
18801893 PolicyStatus ?: CustomerPolicyStatus | undefined ;
1894+
1895+ /**
1896+ * <p>Specifies whether to combine multiple resource tags with AND,
1897+ * so that a resource must have all tags to be included or excluded, or OR,
1898+ * so that a resource must have at least one tag.</p>
1899+ * <p>Default: <code>AND</code>
1900+ * </p>
1901+ * @public
1902+ */
1903+ ResourceTagLogicalOperator ?: ResourceTagLogicalOperator | undefined ;
18811904}
18821905
18831906/**
0 commit comments