feat(client-fms): AWS Firewall Manager now lets you combine multiple …

…resource tags using the logical AND operator or the logical OR operator.
aws · Jan 9, 2025 · e43d607 · e43d607
1 parent 4fb5b7e
commit e43d607
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 3 deletions.
diff --git a/clients/client-fms/src/commands/GetPolicyCommand.ts b/clients/client-fms/src/commands/GetPolicyCommand.ts
@@ -125,6 +125,7 @@ export interface GetPolicyCommandOutput extends GetPolicyResponse, __MetadataBea
  * //     ],
  * //     PolicyDescription: "STRING_VALUE",
  * //     PolicyStatus: "ACTIVE" || "OUT_OF_ADMIN_SCOPE",
+ * //     ResourceTagLogicalOperator: "AND" || "OR",
  * //   },
  * //   PolicyArn: "STRING_VALUE",
  * // };

diff --git a/clients/client-fms/src/commands/PutPolicyCommand.ts b/clients/client-fms/src/commands/PutPolicyCommand.ts
@@ -176,6 +176,7 @@ export interface PutPolicyCommandOutput extends PutPolicyResponse, __MetadataBea
  *     ],
  *     PolicyDescription: "STRING_VALUE",
  *     PolicyStatus: "ACTIVE" || "OUT_OF_ADMIN_SCOPE",
+ *     ResourceTagLogicalOperator: "AND" || "OR",
  *   },
  *   TagList: [ // TagList
  *     { // Tag
@@ -271,6 +272,7 @@ export interface PutPolicyCommandOutput extends PutPolicyResponse, __MetadataBea
  * //     ],
  * //     PolicyDescription: "STRING_VALUE",
  * //     PolicyStatus: "ACTIVE" || "OUT_OF_ADMIN_SCOPE",
+ * //     ResourceTagLogicalOperator: "AND" || "OR",
  * //   },
  * //   PolicyArn: "STRING_VALUE",
  * // };

diff --git a/clients/client-fms/src/models/models_0.ts b/clients/client-fms/src/models/models_0.ts
@@ -1144,13 +1144,26 @@ export const CustomerPolicyStatus = {
  */
 export type CustomerPolicyStatus = (typeof CustomerPolicyStatus)[keyof typeof CustomerPolicyStatus];
 
+/**
+ * @public
+ * @enum
+ */
+export const ResourceTagLogicalOperator = {
+  AND: "AND",
+  OR: "OR",
+} as const;
+
+/**
+ * @public
+ */
+export type ResourceTagLogicalOperator = (typeof ResourceTagLogicalOperator)[keyof typeof ResourceTagLogicalOperator];
+
 /**
  * <p>The resource tags that Firewall Manager uses to determine if a particular resource
  *       should be included or excluded from the Firewall Manager policy. Tags enable you to
  *       categorize your Amazon Web Services resources in different ways, for example, by purpose, owner, or
- *       environment. Each tag consists of a key and an optional value. Firewall Manager combines the
- *       tags with "AND" so that, if you add more than one tag to a policy scope, a resource must have
- *         all the specified tags to be included or excluded. For more information, see
+ *       environment. Each tag consists of a key and an optional value. If you add more than one tag to a policy, you can
+ *       specify whether to combine them using the logical AND operator or the logical OR operator. For more information, see
  *     <a href="https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/tag-editor.html">Working with Tag Editor</a>.</p>
  *          <p>Every resource tag must have a string value, either a non-empty string or an empty string. If you don't
  *         provide a value for a resource tag, Firewall Manager saves the value as an empty string: "". When Firewall Manager compares tags, it only
@@ -1878,6 +1891,16 @@ export interface Policy {
    * @public
    */
   PolicyStatus?: CustomerPolicyStatus | undefined;
+
+  /**
+   * <p>Specifies whether to combine multiple resource tags with AND,
+   *          so that a resource must have all tags to be included or excluded, or OR,
+   *          so that a resource must have at least one tag.</p>
+   *          <p>Default: <code>AND</code>
+   *          </p>
+   * @public
+   */
+  ResourceTagLogicalOperator?: ResourceTagLogicalOperator | undefined;
 }
 
 /**