AWS Audit Manager Update: AWS Audit Manager has updated the GetAssessment API operation to include a new response field called userRole. The userRole field indicates the role information and IAM ARN of the API caller.

Author: AWS

.changes/next-release/feature-AWSAuditManager-54c23cb.json

@@ -0,0 +1,6 @@
+{
+    "type": "feature",
+    "category": "AWS Audit Manager",
+    "contributor": "",
+    "description": "AWS Audit Manager has updated the GetAssessment API operation to include a new response field called userRole. The userRole field indicates the role information and IAM ARN of the API caller."
+}

services/auditmanager/src/main/resources/codegen-resources/service-2.json

@@ -861,7 +861,7 @@
       "members":{
         "message":{"shape":"String"}
       },
-      "documentation":"<p> You do not have sufficient access to perform this action. </p>",
+      "documentation":"<p> Your account is not registered with AWS Audit Manager. Check the delegated administrator setup on the AWS Audit Manager settings page, and try again. </p>",
       "error":{"httpStatusCode":403},
       "exception":true
     },
@@ -2816,7 +2816,8 @@
     "GetAssessmentResponse":{
       "type":"structure",
       "members":{
-        "assessment":{"shape":"Assessment"}
+        "assessment":{"shape":"Assessment"},
+        "userRole":{"shape":"Role"}
       }
     },
     "GetChangeLogsRequest":{
@@ -3649,7 +3650,7 @@
           "documentation":"<p> The Amazon Resource Name (ARN) of the IAM role. </p>"
         }
       },
-      "documentation":"<p> The wrapper that contains AWS Audit Manager role information, such as the role type and IAM Amazon Resource Name (ARN). </p>"
+      "documentation":"<p> The wrapper that contains the AWS Audit Manager role information of the current user, such as the role type and IAM Amazon Resource Name (ARN). </p>"
     },
     "RoleType":{
       "type":"string",
@@ -3778,10 +3779,10 @@
         },
         "keywordValue":{
           "shape":"KeywordValue",
-          "documentation":"<p> The value of the keyword used to search AWS CloudTrail logs when mapping a control data source. </p>"
+          "documentation":"<p> The value of the keyword used to search AWS CloudTrail logs, AWS Config rules, AWS Security Hub checks, and AWS API names when mapping a control data source. </p>"
         }
       },
-      "documentation":"<p> The keyword to search for in AWS CloudTrail logs. </p>"
+      "documentation":"<p> The keyword to search for in AWS CloudTrail logs, AWS Config rules, AWS Security Hub checks, and AWS API names. </p>"
     },
     "SourceName":{
       "type":"string",