update_account_audit_configuration ¶

def update_account_audit_configuration(
    self,
    *,
    config_overrides: Optional[IoTClientConfig] = None,
    role_arn: Optional["capo_iot.types.role_arn.RoleArn"] = None,
    audit_notification_target_configurations: Optional[
        "capo_iot.types.audit_notification_target_configurations.AuditNotificationTargetConfigurations"
    ] = None,
    audit_check_configurations: Optional[
        "capo_iot.types.audit_check_configurations.AuditCheckConfigurations"
    ] = None,
) -> "capo_iot.types.update_account_audit_configuration_response.UpdateAccountAuditConfigurationResponse":
    """<p>Configures or reconfigures the Device Defender audit settings for this account. Settings include how audit notifications are sent and which audit checks are enabled or disabled.</p> <p>Requires permission to access the <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions">UpdateAccountAuditConfiguration</a> action.</p>

    Args:
        role_arn: <p>The Amazon Resource Name (ARN) of the role that grants permission to IoT to access information about your devices, policies, certificates, and other items as required when performing an audit.</p>
        audit_notification_target_configurations: <p>Information about the targets to which audit notifications are sent.</p>
        audit_check_configurations: <p>Specifies which audit checks are enabled and disabled for this account. Use <code>DescribeAccountAuditConfiguration</code> to see the list of all checks, including those that are currently enabled.</p> <p>Some data collection might start immediately when certain checks are enabled. When a check is disabled, any data collected so far in relation to the check is deleted.</p> <p>You cannot disable a check if it's used by any scheduled audit. You must first delete the check from the scheduled audit or delete the scheduled audit itself.</p> <p>On the first call to <code>UpdateAccountAuditConfiguration</code>, this parameter is required and must specify at least one enabled check.</p>

    Raises:
        capo_iot.errors.internal_failure_exception.InternalFailureException: <p>An unexpected error has occurred.</p>
        capo_iot.errors.invalid_request_exception.InvalidRequestException: <p>The request is not valid.</p>
        capo_iot.errors.throttling_exception.ThrottlingException: <p>The rate exceeds the limit.</p>
        capo_iot.errors.UnknownServiceError: The service returned an error code this client does not model.
    """

    def _handler(
        req: "OperationRequest[capo_iot.types.update_account_audit_configuration_request.UpdateAccountAuditConfigurationRequest]",
    ) -> OperationResponse[
        "capo_iot.types.update_account_audit_configuration_response.UpdateAccountAuditConfigurationResponse"
    ]:
        import capo_iot._operations.aws_iot_service.update_account_audit_configuration

        output, http_response = (
            capo_iot._operations.aws_iot_service.update_account_audit_configuration.update_account_audit_configuration(
                req.options, req.input
            )
        )
        return OperationResponse(output=output, response=http_response)

    interceptors_, options_ = self.operation_options(
        config_overrides, OperationLogging("UpdateAccountAuditConfiguration")
    )
    input_: capo_iot.types.update_account_audit_configuration_request.UpdateAccountAuditConfigurationRequest = {}
    if role_arn is not None:
        input_["role_arn"] = role_arn
    if audit_notification_target_configurations is not None:
        input_["audit_notification_target_configurations"] = (
            audit_notification_target_configurations
        )
    if audit_check_configurations is not None:
        input_["audit_check_configurations"] = audit_check_configurations

    response = execute_pipeline(
        OperationRequest(input=input_, options=options_),
        handler=_handler,
        interceptors=list(interceptors_),
    )
    response.response.close()
    return response.output