CreateLandingZone

$result = $client->createLandingZone([/* ... */]);
$promise = $client->createLandingZoneAsync([/* ... */]);

Creates a new landing zone. This API call starts an asynchronous operation that creates and configures a landing zone, based on the parameters specified in the manifest JSON file.

Parameter Syntax

$result = $client->createLandingZone([
    'manifest' => [ // REQUIRED
    ],
    'tags' => ['<string>', ...],
    'version' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'arn' => '<string>',
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

DeleteLandingZone

$result = $client->deleteLandingZone([/* ... */]);
$promise = $client->deleteLandingZoneAsync([/* ... */]);

Decommissions a landing zone. This API call starts an asynchronous operation that deletes Amazon Web Services Control Tower resources deployed in accounts managed by Amazon Web Services Control Tower.

Parameter Syntax

$result = $client->deleteLandingZone([
    'landingZoneIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

DisableBaseline

$result = $client->disableBaseline([/* ... */]);
$promise = $client->disableBaselineAsync([/* ... */]);

Disable an EnabledBaseline resource on the specified Target. This API starts an asynchronous operation to remove all resources deployed as part of the baseline enablement. The resource will vary depending on the enabled baseline. For usage examples, see the Amazon Web Services Control Tower User Guide .

Parameter Syntax

$result = $client->disableBaseline([
    'enabledBaselineIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

ServiceQuotaExceededException:

The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

DisableControl

$result = $client->disableControl([/* ... */]);
$promise = $client->disableControlAsync([/* ... */]);

This API call turns off a control. It starts an asynchronous operation that deletes Amazon Web Services resources on the specified organizational unit and the accounts it contains. The resources will vary according to the control that you specify. For usage examples, see the Controls Reference Guide .

Parameter Syntax

$result = $client->disableControl([
    'controlIdentifier' => '<string>', // REQUIRED
    'targetIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

ServiceQuotaExceededException:

The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

EnableBaseline

$result = $client->enableBaseline([/* ... */]);
$promise = $client->enableBaselineAsync([/* ... */]);

Enable (apply) a Baseline to a Target. This API starts an asynchronous operation to deploy resources specified by the Baseline to the specified Target. For usage examples, see the Amazon Web Services Control Tower User Guide .

Parameter Syntax

$result = $client->enableBaseline([
    'baselineIdentifier' => '<string>', // REQUIRED
    'baselineVersion' => '<string>', // REQUIRED
    'parameters' => [
        [
            'key' => '<string>', // REQUIRED
            'value' => [ // REQUIRED
            ],
        ],
        // ...
    ],
    'tags' => ['<string>', ...],
    'targetIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'arn' => '<string>',
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

ServiceQuotaExceededException:

The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

EnableControl

$result = $client->enableControl([/* ... */]);
$promise = $client->enableControlAsync([/* ... */]);

This API call activates a control. It starts an asynchronous operation that creates Amazon Web Services resources on the specified organizational unit and the accounts it contains. The resources created will vary according to the control that you specify. For usage examples, see the Controls Reference Guide .

Parameter Syntax

$result = $client->enableControl([
    'controlIdentifier' => '<string>', // REQUIRED
    'parameters' => [
        [
            'key' => '<string>', // REQUIRED
            'value' => [ // REQUIRED
            ],
        ],
        // ...
    ],
    'tags' => ['<string>', ...],
    'targetIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'arn' => '<string>',
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

ServiceQuotaExceededException:

The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

GetBaseline

$result = $client->getBaseline([/* ... */]);
$promise = $client->getBaselineAsync([/* ... */]);

Retrieve details about an existing Baseline resource by specifying its identifier. For usage examples, see the Amazon Web Services Control Tower User Guide .

Parameter Syntax

$result = $client->getBaseline([
    'baselineIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'arn' => '<string>',
    'description' => '<string>',
    'name' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

GetBaselineOperation

$result = $client->getBaselineOperation([/* ... */]);
$promise = $client->getBaselineOperationAsync([/* ... */]);

Returns the details of an asynchronous baseline operation, as initiated by any of these APIs: EnableBaseline, DisableBaseline, UpdateEnabledBaseline, ResetEnabledBaseline. A status message is displayed in case of operation failure. For usage examples, see the Amazon Web Services Control Tower User Guide .

Parameter Syntax

$result = $client->getBaselineOperation([
    'operationIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'baselineOperation' => [
        'endTime' => <DateTime>,
        'operationIdentifier' => '<string>',
        'operationType' => 'ENABLE_BASELINE|DISABLE_BASELINE|UPDATE_ENABLED_BASELINE|RESET_ENABLED_BASELINE',
        'startTime' => <DateTime>,
        'status' => 'SUCCEEDED|FAILED|IN_PROGRESS',
        'statusMessage' => '<string>',
    ],
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

GetControlOperation

$result = $client->getControlOperation([/* ... */]);
$promise = $client->getControlOperationAsync([/* ... */]);

Returns the status of a particular EnableControl or DisableControl operation. Displays a message in case of error. Details for an operation are available for 90 days. For usage examples, see the Controls Reference Guide .

Parameter Syntax

$result = $client->getControlOperation([
    'operationIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'controlOperation' => [
        'controlIdentifier' => '<string>',
        'enabledControlIdentifier' => '<string>',
        'endTime' => <DateTime>,
        'operationIdentifier' => '<string>',
        'operationType' => 'ENABLE_CONTROL|DISABLE_CONTROL|UPDATE_ENABLED_CONTROL|RESET_ENABLED_CONTROL',
        'startTime' => <DateTime>,
        'status' => 'SUCCEEDED|FAILED|IN_PROGRESS',
        'statusMessage' => '<string>',
        'targetIdentifier' => '<string>',
    ],
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

GetEnabledBaseline

$result = $client->getEnabledBaseline([/* ... */]);
$promise = $client->getEnabledBaselineAsync([/* ... */]);

Retrieve details of an EnabledBaseline resource by specifying its identifier.

Parameter Syntax

$result = $client->getEnabledBaseline([
    'enabledBaselineIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'enabledBaselineDetails' => [
        'arn' => '<string>',
        'baselineIdentifier' => '<string>',
        'baselineVersion' => '<string>',
        'parameters' => [
            [
                'key' => '<string>',
                'value' => [
                ],
            ],
            // ...
        ],
        'statusSummary' => [
            'lastOperationIdentifier' => '<string>',
            'status' => 'SUCCEEDED|FAILED|UNDER_CHANGE',
        ],
        'targetIdentifier' => '<string>',
    ],
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

GetEnabledControl

$result = $client->getEnabledControl([/* ... */]);
$promise = $client->getEnabledControlAsync([/* ... */]);

Retrieves details about an enabled control. For usage examples, see the Controls Reference Guide .

Parameter Syntax

$result = $client->getEnabledControl([
    'enabledControlIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'enabledControlDetails' => [
        'arn' => '<string>',
        'controlIdentifier' => '<string>',
        'driftStatusSummary' => [
            'driftStatus' => 'DRIFTED|IN_SYNC|NOT_CHECKING|UNKNOWN',
        ],
        'parameters' => [
            [
                'key' => '<string>',
                'value' => [
                ],
            ],
            // ...
        ],
        'statusSummary' => [
            'lastOperationIdentifier' => '<string>',
            'status' => 'SUCCEEDED|FAILED|UNDER_CHANGE',
        ],
        'targetIdentifier' => '<string>',
        'targetRegions' => [
            [
                'name' => '<string>',
            ],
            // ...
        ],
    ],
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

GetLandingZone

$result = $client->getLandingZone([/* ... */]);
$promise = $client->getLandingZoneAsync([/* ... */]);

Returns details about the landing zone. Displays a message in case of error.

Parameter Syntax

$result = $client->getLandingZone([
    'landingZoneIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'landingZone' => [
        'arn' => '<string>',
        'driftStatus' => [
            'status' => 'DRIFTED|IN_SYNC',
        ],
        'latestAvailableVersion' => '<string>',
        'manifest' => [
        ],
        'status' => 'ACTIVE|PROCESSING|FAILED',
        'version' => '<string>',
    ],
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

GetLandingZoneOperation

$result = $client->getLandingZoneOperation([/* ... */]);
$promise = $client->getLandingZoneOperationAsync([/* ... */]);

Returns the status of the specified landing zone operation. Details for an operation are available for 90 days.

Parameter Syntax

$result = $client->getLandingZoneOperation([
    'operationIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'operationDetails' => [
        'endTime' => <DateTime>,
        'operationIdentifier' => '<string>',
        'operationType' => 'DELETE|CREATE|UPDATE|RESET',
        'startTime' => <DateTime>,
        'status' => 'SUCCEEDED|FAILED|IN_PROGRESS',
        'statusMessage' => '<string>',
    ],
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

ListBaselines

$result = $client->listBaselines([/* ... */]);
$promise = $client->listBaselinesAsync([/* ... */]);

Returns a summary list of all available baselines. For usage examples, see the Amazon Web Services Control Tower User Guide .

Parameter Syntax

$result = $client->listBaselines([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'baselines' => [
        [
            'arn' => '<string>',
            'description' => '<string>',
            'name' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ListControlOperations

$result = $client->listControlOperations([/* ... */]);
$promise = $client->listControlOperationsAsync([/* ... */]);

Provides a list of operations in progress or queued. For usage examples, see ListControlOperation examples.

Parameter Syntax

$result = $client->listControlOperations([
    'filter' => [
        'controlIdentifiers' => ['<string>', ...],
        'controlOperationTypes' => ['<string>', ...],
        'enabledControlIdentifiers' => ['<string>', ...],
        'statuses' => ['<string>', ...],
        'targetIdentifiers' => ['<string>', ...],
    ],
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'controlOperations' => [
        [
            'controlIdentifier' => '<string>',
            'enabledControlIdentifier' => '<string>',
            'endTime' => <DateTime>,
            'operationIdentifier' => '<string>',
            'operationType' => 'ENABLE_CONTROL|DISABLE_CONTROL|UPDATE_ENABLED_CONTROL|RESET_ENABLED_CONTROL',
            'startTime' => <DateTime>,
            'status' => 'SUCCEEDED|FAILED|IN_PROGRESS',
            'statusMessage' => '<string>',
            'targetIdentifier' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ListEnabledBaselines

$result = $client->listEnabledBaselines([/* ... */]);
$promise = $client->listEnabledBaselinesAsync([/* ... */]);

Returns a list of summaries describing EnabledBaseline resources. You can filter the list by the corresponding Baseline or Target of the EnabledBaseline resources. For usage examples, see the Amazon Web Services Control Tower User Guide .

Parameter Syntax

$result = $client->listEnabledBaselines([
    'filter' => [
        'baselineIdentifiers' => ['<string>', ...],
        'targetIdentifiers' => ['<string>', ...],
    ],
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'enabledBaselines' => [
        [
            'arn' => '<string>',
            'baselineIdentifier' => '<string>',
            'baselineVersion' => '<string>',
            'statusSummary' => [
                'lastOperationIdentifier' => '<string>',
                'status' => 'SUCCEEDED|FAILED|UNDER_CHANGE',
            ],
            'targetIdentifier' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ListEnabledControls

$result = $client->listEnabledControls([/* ... */]);
$promise = $client->listEnabledControlsAsync([/* ... */]);

Lists the controls enabled by Amazon Web Services Control Tower on the specified organizational unit and the accounts it contains. For usage examples, see the Controls Reference Guide .

Parameter Syntax

$result = $client->listEnabledControls([
    'filter' => [
        'controlIdentifiers' => ['<string>', ...],
        'driftStatuses' => ['<string>', ...],
        'statuses' => ['<string>', ...],
    ],
    'maxResults' => <integer>,
    'nextToken' => '<string>',
    'targetIdentifier' => '<string>',
]);

Parameter Details

Result Syntax

[
    'enabledControls' => [
        [
            'arn' => '<string>',
            'controlIdentifier' => '<string>',
            'driftStatusSummary' => [
                'driftStatus' => 'DRIFTED|IN_SYNC|NOT_CHECKING|UNKNOWN',
            ],
            'statusSummary' => [
                'lastOperationIdentifier' => '<string>',
                'status' => 'SUCCEEDED|FAILED|UNDER_CHANGE',
            ],
            'targetIdentifier' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

ListLandingZoneOperations

$result = $client->listLandingZoneOperations([/* ... */]);
$promise = $client->listLandingZoneOperationsAsync([/* ... */]);

Lists all landing zone operations from the past 90 days. Results are sorted by time, with the most recent operation first.

Parameter Syntax

$result = $client->listLandingZoneOperations([
    'filter' => [
        'statuses' => ['<string>', ...],
        'types' => ['<string>', ...],
    ],
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'landingZoneOperations' => [
        [
            'operationIdentifier' => '<string>',
            'operationType' => 'DELETE|CREATE|UPDATE|RESET',
            'status' => 'SUCCEEDED|FAILED|IN_PROGRESS',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ListLandingZones

$result = $client->listLandingZones([/* ... */]);
$promise = $client->listLandingZonesAsync([/* ... */]);

Returns the landing zone ARN for the landing zone deployed in your managed account. This API also creates an ARN for existing accounts that do not yet have a landing zone ARN.

Returns one landing zone ARN.

Parameter Syntax

$result = $client->listLandingZones([
    'maxResults' => <integer>,
    'nextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'landingZones' => [
        [
            'arn' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ListTagsForResource

$result = $client->listTagsForResource([/* ... */]);
$promise = $client->listTagsForResourceAsync([/* ... */]);

Returns a list of tags associated with the resource. For usage examples, see the Controls Reference Guide .

Parameter Syntax

$result = $client->listTagsForResource([
    'resourceArn' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'tags' => ['<string>', ...],
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

ResourceNotFoundException:

The request references a resource that does not exist.

ResetEnabledBaseline

$result = $client->resetEnabledBaseline([/* ... */]);
$promise = $client->resetEnabledBaselineAsync([/* ... */]);

Re-enables an EnabledBaseline resource. For example, this API can re-apply the existing Baseline after a new member account is moved to the target OU. For usage examples, see the Amazon Web Services Control Tower User Guide .

Parameter Syntax

$result = $client->resetEnabledBaseline([
    'enabledBaselineIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

ServiceQuotaExceededException:

The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

ResetEnabledControl

$result = $client->resetEnabledControl([/* ... */]);
$promise = $client->resetEnabledControlAsync([/* ... */]);

Resets an enabled control.

Parameter Syntax

$result = $client->resetEnabledControl([
    'enabledControlIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

ServiceQuotaExceededException:

The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

ResetLandingZone

$result = $client->resetLandingZone([/* ... */]);
$promise = $client->resetLandingZoneAsync([/* ... */]);

This API call resets a landing zone. It starts an asynchronous operation that resets the landing zone to the parameters specified in the original configuration, which you specified in the manifest file. Nothing in the manifest file's original landing zone configuration is changed during the reset process, by default. This API is not the same as a rollback of a landing zone version, which is not a supported operation.

Parameter Syntax

$result = $client->resetLandingZone([
    'landingZoneIdentifier' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

TagResource

$result = $client->tagResource([/* ... */]);
$promise = $client->tagResourceAsync([/* ... */]);

Applies tags to a resource. For usage examples, see the Controls Reference Guide .

Parameter Syntax

$result = $client->tagResource([
    'resourceArn' => '<string>', // REQUIRED
    'tags' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

ResourceNotFoundException:

The request references a resource that does not exist.

UntagResource

$result = $client->untagResource([/* ... */]);
$promise = $client->untagResourceAsync([/* ... */]);

Removes tags from a resource. For usage examples, see the Controls Reference Guide .

Parameter Syntax

$result = $client->untagResource([
    'resourceArn' => '<string>', // REQUIRED
    'tagKeys' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

InternalServerException:

An unexpected error occurred during processing of a request.

ResourceNotFoundException:

The request references a resource that does not exist.

UpdateEnabledBaseline

$result = $client->updateEnabledBaseline([/* ... */]);
$promise = $client->updateEnabledBaselineAsync([/* ... */]);

Updates an EnabledBaseline resource's applied parameters or version. For usage examples, see the Amazon Web Services Control Tower User Guide .

Parameter Syntax

$result = $client->updateEnabledBaseline([
    'baselineVersion' => '<string>', // REQUIRED
    'enabledBaselineIdentifier' => '<string>', // REQUIRED
    'parameters' => [
        [
            'key' => '<string>', // REQUIRED
            'value' => [ // REQUIRED
            ],
        ],
        // ...
    ],
]);

Parameter Details

Result Syntax

[
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

ServiceQuotaExceededException:

The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

UpdateEnabledControl

$result = $client->updateEnabledControl([/* ... */]);
$promise = $client->updateEnabledControlAsync([/* ... */]);

Updates the configuration of an already enabled control.

If the enabled control shows an EnablementStatus of SUCCEEDED, supply parameters that are different from the currently configured parameters. Otherwise, Amazon Web Services Control Tower will not accept the request.

If the enabled control shows an EnablementStatus of FAILED, Amazon Web Services Control Tower updates the control to match any valid parameters that you supply.

If the DriftSummary status for the control shows as DRIFTED, you cannot call this API. Instead, you can update the control by calling the ResetEnabledControl API. Alternatively, you can call DisableControl and then call EnableControl again. Also, you can run an extending governance operation to repair drift. For usage examples, see the Controls Reference Guide .

Parameter Syntax

$result = $client->updateEnabledControl([
    'enabledControlIdentifier' => '<string>', // REQUIRED
    'parameters' => [ // REQUIRED
        [
            'key' => '<string>', // REQUIRED
            'value' => [ // REQUIRED
            ],
        ],
        // ...
    ],
]);

Parameter Details

Result Syntax

[
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

ServiceQuotaExceededException:

The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.

UpdateLandingZone

$result = $client->updateLandingZone([/* ... */]);
$promise = $client->updateLandingZoneAsync([/* ... */]);

This API call updates the landing zone. It starts an asynchronous operation that updates the landing zone based on the new landing zone version, or on the changed parameters specified in the updated manifest file.

Parameter Syntax

$result = $client->updateLandingZone([
    'landingZoneIdentifier' => '<string>', // REQUIRED
    'manifest' => [ // REQUIRED
    ],
    'version' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'operationIdentifier' => '<string>',
]

Result Details

Errors

ValidationException:

The input does not satisfy the constraints specified by an Amazon Web Services service.

ConflictException:

Updating or deleting the resource can cause an inconsistent state.

InternalServerException:

An unexpected error occurred during processing of a request.

AccessDeniedException:

You do not have sufficient access to perform this action.

ThrottlingException:

The request was denied due to request throttling.

ResourceNotFoundException:

The request references a resource that does not exist.