1// Code generated by smithy-go-codegen DO NOT EDIT.
2
3package configservice
4
5import (
6	"context"
7	awsmiddleware "github.com/aws/aws-sdk-go-v2/aws/middleware"
8	"github.com/aws/aws-sdk-go-v2/aws/signer/v4"
9	"github.com/aws/aws-sdk-go-v2/service/configservice/types"
10	"github.com/aws/smithy-go/middleware"
11	smithyhttp "github.com/aws/smithy-go/transport/http"
12)
13
14// Adds or updates organization config rule for your entire organization evaluating
15// whether your AWS resources comply with your desired configurations. Only a
16// master account and a delegated administrator can create or update an
17// organization config rule. When calling this API with a delegated administrator,
18// you must ensure AWS Organizations ListDelegatedAdministrator permissions are
19// added. This API enables organization service access through the
20// EnableAWSServiceAccess action and creates a service linked role
21// AWSServiceRoleForConfigMultiAccountSetup in the master or delegated
22// administrator account of your organization. The service linked role is created
23// only when the role does not exist in the caller account. AWS Config verifies the
24// existence of role with GetRole action. To use this API with delegated
25// administrator, register a delegated administrator by calling AWS Organization
26// register-delegated-administrator for config-multiaccountsetup.amazonaws.com. You
27// can use this action to create both custom AWS Config rules and AWS managed
28// Config rules. If you are adding a new custom AWS Config rule, you must first
29// create AWS Lambda function in the master account or a delegated administrator
30// that the rule invokes to evaluate your resources. When you use the
31// PutOrganizationConfigRule action to add the rule to AWS Config, you must specify
32// the Amazon Resource Name (ARN) that AWS Lambda assigns to the function. If you
33// are adding an AWS managed Config rule, specify the rule's identifier for the
34// RuleIdentifier key. The maximum number of organization config rules that AWS
35// Config supports is 150 and 3 delegated administrator per organization.
36// Prerequisite: Ensure you call EnableAllFeatures API to enable all features in an
37// organization. Specify either OrganizationCustomRuleMetadata or
38// OrganizationManagedRuleMetadata.
39func (c *Client) PutOrganizationConfigRule(ctx context.Context, params *PutOrganizationConfigRuleInput, optFns ...func(*Options)) (*PutOrganizationConfigRuleOutput, error) {
40	if params == nil {
41		params = &PutOrganizationConfigRuleInput{}
42	}
43
44	result, metadata, err := c.invokeOperation(ctx, "PutOrganizationConfigRule", params, optFns, addOperationPutOrganizationConfigRuleMiddlewares)
45	if err != nil {
46		return nil, err
47	}
48
49	out := result.(*PutOrganizationConfigRuleOutput)
50	out.ResultMetadata = metadata
51	return out, nil
52}
53
54type PutOrganizationConfigRuleInput struct {
55
56	// The name that you assign to an organization config rule.
57	//
58	// This member is required.
59	OrganizationConfigRuleName *string
60
61	// A comma-separated list of accounts that you want to exclude from an organization
62	// config rule.
63	ExcludedAccounts []string
64
65	// An OrganizationCustomRuleMetadata object.
66	OrganizationCustomRuleMetadata *types.OrganizationCustomRuleMetadata
67
68	// An OrganizationManagedRuleMetadata object.
69	OrganizationManagedRuleMetadata *types.OrganizationManagedRuleMetadata
70}
71
72type PutOrganizationConfigRuleOutput struct {
73
74	// The Amazon Resource Name (ARN) of an organization config rule.
75	OrganizationConfigRuleArn *string
76
77	// Metadata pertaining to the operation's result.
78	ResultMetadata middleware.Metadata
79}
80
81func addOperationPutOrganizationConfigRuleMiddlewares(stack *middleware.Stack, options Options) (err error) {
82	err = stack.Serialize.Add(&awsAwsjson11_serializeOpPutOrganizationConfigRule{}, middleware.After)
83	if err != nil {
84		return err
85	}
86	err = stack.Deserialize.Add(&awsAwsjson11_deserializeOpPutOrganizationConfigRule{}, middleware.After)
87	if err != nil {
88		return err
89	}
90	if err = addSetLoggerMiddleware(stack, options); err != nil {
91		return err
92	}
93	if err = awsmiddleware.AddClientRequestIDMiddleware(stack); err != nil {
94		return err
95	}
96	if err = smithyhttp.AddComputeContentLengthMiddleware(stack); err != nil {
97		return err
98	}
99	if err = addResolveEndpointMiddleware(stack, options); err != nil {
100		return err
101	}
102	if err = v4.AddComputePayloadSHA256Middleware(stack); err != nil {
103		return err
104	}
105	if err = addRetryMiddlewares(stack, options); err != nil {
106		return err
107	}
108	if err = addHTTPSignerV4Middleware(stack, options); err != nil {
109		return err
110	}
111	if err = awsmiddleware.AddRawResponseToMetadata(stack); err != nil {
112		return err
113	}
114	if err = awsmiddleware.AddRecordResponseTiming(stack); err != nil {
115		return err
116	}
117	if err = addClientUserAgent(stack); err != nil {
118		return err
119	}
120	if err = smithyhttp.AddErrorCloseResponseBodyMiddleware(stack); err != nil {
121		return err
122	}
123	if err = smithyhttp.AddCloseResponseBodyMiddleware(stack); err != nil {
124		return err
125	}
126	if err = addOpPutOrganizationConfigRuleValidationMiddleware(stack); err != nil {
127		return err
128	}
129	if err = stack.Initialize.Add(newServiceMetadataMiddleware_opPutOrganizationConfigRule(options.Region), middleware.Before); err != nil {
130		return err
131	}
132	if err = addRequestIDRetrieverMiddleware(stack); err != nil {
133		return err
134	}
135	if err = addResponseErrorMiddleware(stack); err != nil {
136		return err
137	}
138	if err = addRequestResponseLogging(stack, options); err != nil {
139		return err
140	}
141	return nil
142}
143
144func newServiceMetadataMiddleware_opPutOrganizationConfigRule(region string) *awsmiddleware.RegisterServiceMetadata {
145	return &awsmiddleware.RegisterServiceMetadata{
146		Region:        region,
147		ServiceID:     ServiceID,
148		SigningName:   "config",
149		OperationName: "PutOrganizationConfigRule",
150	}
151}
152