From adada71649fdab7ea092da7e842da61c82c037ac Mon Sep 17 00:00:00 2001
From: awstools <awstools@amazon.com>
Date: Wed, 14 Feb 2024 19:15:14 +0000
Subject: [PATCH] feat(client-controltower): Adds support for new Baseline and
 EnabledBaseline APIs for automating multi-account governance.

---
 clients/client-controltower/README.md         |   90 +-
 .../client-controltower/src/ControlTower.ts   |  189 ++-
 .../src/ControlTowerClient.ts                 |   43 +-
 .../src/commands/CreateLandingZoneCommand.ts  |    2 +-
 .../src/commands/DeleteLandingZoneCommand.ts  |    2 +-
 .../src/commands/DisableBaselineCommand.ts    |  102 ++
 .../src/commands/DisableControlCommand.ts     |    4 +-
 .../src/commands/EnableBaselineCommand.ts     |  114 ++
 .../src/commands/EnableControlCommand.ts      |    2 +-
 .../src/commands/GetBaselineCommand.ts        |   98 ++
 .../commands/GetBaselineOperationCommand.ts   |  103 ++
 .../commands/GetControlOperationCommand.ts    |    2 +-
 .../src/commands/GetEnabledBaselineCommand.ts |  111 ++
 .../src/commands/GetEnabledControlCommand.ts  |    2 +-
 .../src/commands/GetLandingZoneCommand.ts     |    2 +-
 .../GetLandingZoneOperationCommand.ts         |    2 +-
 .../src/commands/ListBaselinesCommand.ts      |  101 ++
 .../commands/ListEnabledBaselinesCommand.ts   |  114 ++
 .../commands/ListEnabledControlsCommand.ts    |    2 +-
 .../src/commands/ListLandingZonesCommand.ts   |    2 +-
 .../commands/ListTagsForResourceCommand.ts    |    2 +-
 .../commands/ResetEnabledBaselineCommand.ts   |  102 ++
 .../src/commands/ResetLandingZoneCommand.ts   |    2 +-
 .../src/commands/TagResourceCommand.ts        |    2 +-
 .../src/commands/UntagResourceCommand.ts      |    2 +-
 .../commands/UpdateEnabledBaselineCommand.ts  |  109 ++
 .../commands/UpdateEnabledControlCommand.ts   |    2 +-
 .../src/commands/UpdateLandingZoneCommand.ts  |    2 +-
 .../client-controltower/src/commands/index.ts |    9 +
 clients/client-controltower/src/index.ts      |    4 +-
 .../src/models/models_0.ts                    |  861 ++++++++--
 .../src/pagination/ListBaselinesPaginator.ts  |   24 +
 .../ListEnabledBaselinesPaginator.ts          |   24 +
 .../src/pagination/index.ts                   |    2 +
 .../src/protocols/Aws_restJson1.ts            |  529 ++++++
 .../sdk-codegen/aws-models/controltower.json  | 1418 +++++++++++++++--
 36 files changed, 3825 insertions(+), 356 deletions(-)
 create mode 100644 clients/client-controltower/src/commands/DisableBaselineCommand.ts
 create mode 100644 clients/client-controltower/src/commands/EnableBaselineCommand.ts
 create mode 100644 clients/client-controltower/src/commands/GetBaselineCommand.ts
 create mode 100644 clients/client-controltower/src/commands/GetBaselineOperationCommand.ts
 create mode 100644 clients/client-controltower/src/commands/GetEnabledBaselineCommand.ts
 create mode 100644 clients/client-controltower/src/commands/ListBaselinesCommand.ts
 create mode 100644 clients/client-controltower/src/commands/ListEnabledBaselinesCommand.ts
 create mode 100644 clients/client-controltower/src/commands/ResetEnabledBaselineCommand.ts
 create mode 100644 clients/client-controltower/src/commands/UpdateEnabledBaselineCommand.ts
 create mode 100644 clients/client-controltower/src/pagination/ListBaselinesPaginator.ts
 create mode 100644 clients/client-controltower/src/pagination/ListEnabledBaselinesPaginator.ts

diff --git a/clients/client-controltower/README.md b/clients/client-controltower/README.md
index 273e11ec11db..f5cda8e2a342 100644
--- a/clients/client-controltower/README.md
+++ b/clients/client-controltower/README.md
@@ -6,8 +6,8 @@
 
 AWS SDK for JavaScript ControlTower Client for Node.js, Browser and React Native.
 
-<p>These interfaces allow you to apply the  Amazon Web Services library of pre-defined
-<i>controls</i> to your organizational units, programmatically. In  Amazon Web Services Control Tower, the terms "control" and "guardrail" are synonyms.</p>
+<p>These interfaces allow you to apply the Amazon Web Services library of pre-defined
+<i>controls</i> to your organizational units, programmatically. In Amazon Web Services Control Tower, the terms "control" and "guardrail" are synonyms.</p>
 <p>To call these APIs, you'll need to know:</p>
 <ul>
 <li>
@@ -128,16 +128,16 @@ using your favorite package manager:
 
 The AWS SDK is modulized by clients and commands.
 To send a request, you only need to import the `ControlTowerClient` and
-the commands you need, for example `ListLandingZonesCommand`:
+the commands you need, for example `ListBaselinesCommand`:
 
 ```js
 // ES5 example
-const { ControlTowerClient, ListLandingZonesCommand } = require("@aws-sdk/client-controltower");
+const { ControlTowerClient, ListBaselinesCommand } = require("@aws-sdk/client-controltower");
 ```
 
 ```ts
 // ES6+ example
-import { ControlTowerClient, ListLandingZonesCommand } from "@aws-sdk/client-controltower";
+import { ControlTowerClient, ListBaselinesCommand } from "@aws-sdk/client-controltower";
 ```
 
 ### Usage
@@ -156,7 +156,7 @@ const client = new ControlTowerClient({ region: "REGION" });
 const params = {
   /** input parameters */
 };
-const command = new ListLandingZonesCommand(params);
+const command = new ListBaselinesCommand(params);
 ```
 
 #### Async/await
@@ -235,7 +235,7 @@ const client = new AWS.ControlTower({ region: "REGION" });
 
 // async/await.
 try {
-  const data = await client.listLandingZones(params);
+  const data = await client.listBaselines(params);
   // process data.
 } catch (error) {
   // error handling.
@@ -243,7 +243,7 @@ try {
 
 // Promises.
 client
-  .listLandingZones(params)
+  .listBaselines(params)
   .then((data) => {
     // process data.
   })
@@ -252,7 +252,7 @@ client
   });
 
 // callbacks.
-client.listLandingZones(params, (err, data) => {
+client.listBaselines(params, (err, data) => {
   // process err and data.
 });
 ```
@@ -323,6 +323,14 @@ DeleteLandingZone
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/DeleteLandingZoneCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/DeleteLandingZoneCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/DeleteLandingZoneCommandOutput/)
 
+</details>
+<details>
+<summary>
+DisableBaseline
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/DisableBaselineCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/DisableBaselineCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/DisableBaselineCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -331,6 +339,14 @@ DisableControl
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/DisableControlCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/DisableControlCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/DisableControlCommandOutput/)
 
+</details>
+<details>
+<summary>
+EnableBaseline
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/EnableBaselineCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/EnableBaselineCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/EnableBaselineCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -339,6 +355,22 @@ EnableControl
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/EnableControlCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/EnableControlCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/EnableControlCommandOutput/)
 
+</details>
+<details>
+<summary>
+GetBaseline
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/GetBaselineCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetBaselineCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetBaselineCommandOutput/)
+
+</details>
+<details>
+<summary>
+GetBaselineOperation
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/GetBaselineOperationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetBaselineOperationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetBaselineOperationCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -347,6 +379,14 @@ GetControlOperation
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/GetControlOperationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetControlOperationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetControlOperationCommandOutput/)
 
+</details>
+<details>
+<summary>
+GetEnabledBaseline
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/GetEnabledBaselineCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetEnabledBaselineCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetEnabledBaselineCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -371,6 +411,22 @@ GetLandingZoneOperation
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/GetLandingZoneOperationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetLandingZoneOperationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/GetLandingZoneOperationCommandOutput/)
 
+</details>
+<details>
+<summary>
+ListBaselines
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/ListBaselinesCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/ListBaselinesCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/ListBaselinesCommandOutput/)
+
+</details>
+<details>
+<summary>
+ListEnabledBaselines
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/ListEnabledBaselinesCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/ListEnabledBaselinesCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/ListEnabledBaselinesCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -395,6 +451,14 @@ ListTagsForResource
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/ListTagsForResourceCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/ListTagsForResourceCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/ListTagsForResourceCommandOutput/)
 
+</details>
+<details>
+<summary>
+ResetEnabledBaseline
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/ResetEnabledBaselineCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/ResetEnabledBaselineCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/ResetEnabledBaselineCommandOutput/)
+
 </details>
 <details>
 <summary>
@@ -419,6 +483,14 @@ UntagResource
 
 [Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/UntagResourceCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/UntagResourceCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/UntagResourceCommandOutput/)
 
+</details>
+<details>
+<summary>
+UpdateEnabledBaseline
+</summary>
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/controltower/command/UpdateEnabledBaselineCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/UpdateEnabledBaselineCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-controltower/Interface/UpdateEnabledBaselineCommandOutput/)
+
 </details>
 <details>
 <summary>
diff --git a/clients/client-controltower/src/ControlTower.ts b/clients/client-controltower/src/ControlTower.ts
index b5d8a4ebc5d5..f2246748bc44 100644
--- a/clients/client-controltower/src/ControlTower.ts
+++ b/clients/client-controltower/src/ControlTower.ts
@@ -12,21 +12,42 @@ import {
   DeleteLandingZoneCommandInput,
   DeleteLandingZoneCommandOutput,
 } from "./commands/DeleteLandingZoneCommand";
+import {
+  DisableBaselineCommand,
+  DisableBaselineCommandInput,
+  DisableBaselineCommandOutput,
+} from "./commands/DisableBaselineCommand";
 import {
   DisableControlCommand,
   DisableControlCommandInput,
   DisableControlCommandOutput,
 } from "./commands/DisableControlCommand";
+import {
+  EnableBaselineCommand,
+  EnableBaselineCommandInput,
+  EnableBaselineCommandOutput,
+} from "./commands/EnableBaselineCommand";
 import {
   EnableControlCommand,
   EnableControlCommandInput,
   EnableControlCommandOutput,
 } from "./commands/EnableControlCommand";
+import { GetBaselineCommand, GetBaselineCommandInput, GetBaselineCommandOutput } from "./commands/GetBaselineCommand";
+import {
+  GetBaselineOperationCommand,
+  GetBaselineOperationCommandInput,
+  GetBaselineOperationCommandOutput,
+} from "./commands/GetBaselineOperationCommand";
 import {
   GetControlOperationCommand,
   GetControlOperationCommandInput,
   GetControlOperationCommandOutput,
 } from "./commands/GetControlOperationCommand";
+import {
+  GetEnabledBaselineCommand,
+  GetEnabledBaselineCommandInput,
+  GetEnabledBaselineCommandOutput,
+} from "./commands/GetEnabledBaselineCommand";
 import {
   GetEnabledControlCommand,
   GetEnabledControlCommandInput,
@@ -42,6 +63,16 @@ import {
   GetLandingZoneOperationCommandInput,
   GetLandingZoneOperationCommandOutput,
 } from "./commands/GetLandingZoneOperationCommand";
+import {
+  ListBaselinesCommand,
+  ListBaselinesCommandInput,
+  ListBaselinesCommandOutput,
+} from "./commands/ListBaselinesCommand";
+import {
+  ListEnabledBaselinesCommand,
+  ListEnabledBaselinesCommandInput,
+  ListEnabledBaselinesCommandOutput,
+} from "./commands/ListEnabledBaselinesCommand";
 import {
   ListEnabledControlsCommand,
   ListEnabledControlsCommandInput,
@@ -57,6 +88,11 @@ import {
   ListTagsForResourceCommandInput,
   ListTagsForResourceCommandOutput,
 } from "./commands/ListTagsForResourceCommand";
+import {
+  ResetEnabledBaselineCommand,
+  ResetEnabledBaselineCommandInput,
+  ResetEnabledBaselineCommandOutput,
+} from "./commands/ResetEnabledBaselineCommand";
 import {
   ResetLandingZoneCommand,
   ResetLandingZoneCommandInput,
@@ -68,6 +104,11 @@ import {
   UntagResourceCommandInput,
   UntagResourceCommandOutput,
 } from "./commands/UntagResourceCommand";
+import {
+  UpdateEnabledBaselineCommand,
+  UpdateEnabledBaselineCommandInput,
+  UpdateEnabledBaselineCommandOutput,
+} from "./commands/UpdateEnabledBaselineCommand";
 import {
   UpdateEnabledControlCommand,
   UpdateEnabledControlCommandInput,
@@ -83,18 +124,27 @@ import { ControlTowerClient, ControlTowerClientConfig } from "./ControlTowerClie
 const commands = {
   CreateLandingZoneCommand,
   DeleteLandingZoneCommand,
+  DisableBaselineCommand,
   DisableControlCommand,
+  EnableBaselineCommand,
   EnableControlCommand,
+  GetBaselineCommand,
+  GetBaselineOperationCommand,
   GetControlOperationCommand,
+  GetEnabledBaselineCommand,
   GetEnabledControlCommand,
   GetLandingZoneCommand,
   GetLandingZoneOperationCommand,
+  ListBaselinesCommand,
+  ListEnabledBaselinesCommand,
   ListEnabledControlsCommand,
   ListLandingZonesCommand,
   ListTagsForResourceCommand,
+  ResetEnabledBaselineCommand,
   ResetLandingZoneCommand,
   TagResourceCommand,
   UntagResourceCommand,
+  UpdateEnabledBaselineCommand,
   UpdateEnabledControlCommand,
   UpdateLandingZoneCommand,
 };
@@ -134,6 +184,20 @@ export interface ControlTower {
     cb: (err: any, data?: DeleteLandingZoneCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link DisableBaselineCommand}
+   */
+  disableBaseline(
+    args: DisableBaselineCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<DisableBaselineCommandOutput>;
+  disableBaseline(args: DisableBaselineCommandInput, cb: (err: any, data?: DisableBaselineCommandOutput) => void): void;
+  disableBaseline(
+    args: DisableBaselineCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: DisableBaselineCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link DisableControlCommand}
    */
@@ -148,6 +212,20 @@ export interface ControlTower {
     cb: (err: any, data?: DisableControlCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link EnableBaselineCommand}
+   */
+  enableBaseline(
+    args: EnableBaselineCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<EnableBaselineCommandOutput>;
+  enableBaseline(args: EnableBaselineCommandInput, cb: (err: any, data?: EnableBaselineCommandOutput) => void): void;
+  enableBaseline(
+    args: EnableBaselineCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: EnableBaselineCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link EnableControlCommand}
    */
@@ -159,6 +237,34 @@ export interface ControlTower {
     cb: (err: any, data?: EnableControlCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link GetBaselineCommand}
+   */
+  getBaseline(args: GetBaselineCommandInput, options?: __HttpHandlerOptions): Promise<GetBaselineCommandOutput>;
+  getBaseline(args: GetBaselineCommandInput, cb: (err: any, data?: GetBaselineCommandOutput) => void): void;
+  getBaseline(
+    args: GetBaselineCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: GetBaselineCommandOutput) => void
+  ): void;
+
+  /**
+   * @see {@link GetBaselineOperationCommand}
+   */
+  getBaselineOperation(
+    args: GetBaselineOperationCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<GetBaselineOperationCommandOutput>;
+  getBaselineOperation(
+    args: GetBaselineOperationCommandInput,
+    cb: (err: any, data?: GetBaselineOperationCommandOutput) => void
+  ): void;
+  getBaselineOperation(
+    args: GetBaselineOperationCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: GetBaselineOperationCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link GetControlOperationCommand}
    */
@@ -176,6 +282,23 @@ export interface ControlTower {
     cb: (err: any, data?: GetControlOperationCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link GetEnabledBaselineCommand}
+   */
+  getEnabledBaseline(
+    args: GetEnabledBaselineCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<GetEnabledBaselineCommandOutput>;
+  getEnabledBaseline(
+    args: GetEnabledBaselineCommandInput,
+    cb: (err: any, data?: GetEnabledBaselineCommandOutput) => void
+  ): void;
+  getEnabledBaseline(
+    args: GetEnabledBaselineCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: GetEnabledBaselineCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link GetEnabledControlCommand}
    */
@@ -224,6 +347,34 @@ export interface ControlTower {
     cb: (err: any, data?: GetLandingZoneOperationCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link ListBaselinesCommand}
+   */
+  listBaselines(args: ListBaselinesCommandInput, options?: __HttpHandlerOptions): Promise<ListBaselinesCommandOutput>;
+  listBaselines(args: ListBaselinesCommandInput, cb: (err: any, data?: ListBaselinesCommandOutput) => void): void;
+  listBaselines(
+    args: ListBaselinesCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: ListBaselinesCommandOutput) => void
+  ): void;
+
+  /**
+   * @see {@link ListEnabledBaselinesCommand}
+   */
+  listEnabledBaselines(
+    args: ListEnabledBaselinesCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<ListEnabledBaselinesCommandOutput>;
+  listEnabledBaselines(
+    args: ListEnabledBaselinesCommandInput,
+    cb: (err: any, data?: ListEnabledBaselinesCommandOutput) => void
+  ): void;
+  listEnabledBaselines(
+    args: ListEnabledBaselinesCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: ListEnabledBaselinesCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link ListEnabledControlsCommand}
    */
@@ -275,6 +426,23 @@ export interface ControlTower {
     cb: (err: any, data?: ListTagsForResourceCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link ResetEnabledBaselineCommand}
+   */
+  resetEnabledBaseline(
+    args: ResetEnabledBaselineCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<ResetEnabledBaselineCommandOutput>;
+  resetEnabledBaseline(
+    args: ResetEnabledBaselineCommandInput,
+    cb: (err: any, data?: ResetEnabledBaselineCommandOutput) => void
+  ): void;
+  resetEnabledBaseline(
+    args: ResetEnabledBaselineCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: ResetEnabledBaselineCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link ResetLandingZoneCommand}
    */
@@ -314,6 +482,23 @@ export interface ControlTower {
     cb: (err: any, data?: UntagResourceCommandOutput) => void
   ): void;
 
+  /**
+   * @see {@link UpdateEnabledBaselineCommand}
+   */
+  updateEnabledBaseline(
+    args: UpdateEnabledBaselineCommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<UpdateEnabledBaselineCommandOutput>;
+  updateEnabledBaseline(
+    args: UpdateEnabledBaselineCommandInput,
+    cb: (err: any, data?: UpdateEnabledBaselineCommandOutput) => void
+  ): void;
+  updateEnabledBaseline(
+    args: UpdateEnabledBaselineCommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: UpdateEnabledBaselineCommandOutput) => void
+  ): void;
+
   /**
    * @see {@link UpdateEnabledControlCommand}
    */
@@ -351,8 +536,8 @@ export interface ControlTower {
 
 /**
  * @public
- * <p>These interfaces allow you to apply the  Amazon Web Services library of pre-defined
- *          <i>controls</i> to your organizational units, programmatically. In  Amazon Web Services Control Tower, the terms "control" and "guardrail" are synonyms.</p>
+ * <p>These interfaces allow you to apply the Amazon Web Services library of pre-defined
+ *          <i>controls</i> to your organizational units, programmatically. In Amazon Web Services Control Tower, the terms "control" and "guardrail" are synonyms.</p>
  *          <p>To call these APIs, you'll need to know:</p>
  *          <ul>
  *             <li>
diff --git a/clients/client-controltower/src/ControlTowerClient.ts b/clients/client-controltower/src/ControlTowerClient.ts
index 255d71bab3e5..57b21308d714 100644
--- a/clients/client-controltower/src/ControlTowerClient.ts
+++ b/clients/client-controltower/src/ControlTowerClient.ts
@@ -55,18 +55,31 @@ import {
 } from "./auth/httpAuthSchemeProvider";
 import { CreateLandingZoneCommandInput, CreateLandingZoneCommandOutput } from "./commands/CreateLandingZoneCommand";
 import { DeleteLandingZoneCommandInput, DeleteLandingZoneCommandOutput } from "./commands/DeleteLandingZoneCommand";
+import { DisableBaselineCommandInput, DisableBaselineCommandOutput } from "./commands/DisableBaselineCommand";
 import { DisableControlCommandInput, DisableControlCommandOutput } from "./commands/DisableControlCommand";
+import { EnableBaselineCommandInput, EnableBaselineCommandOutput } from "./commands/EnableBaselineCommand";
 import { EnableControlCommandInput, EnableControlCommandOutput } from "./commands/EnableControlCommand";
+import { GetBaselineCommandInput, GetBaselineCommandOutput } from "./commands/GetBaselineCommand";
+import {
+  GetBaselineOperationCommandInput,
+  GetBaselineOperationCommandOutput,
+} from "./commands/GetBaselineOperationCommand";
 import {
   GetControlOperationCommandInput,
   GetControlOperationCommandOutput,
 } from "./commands/GetControlOperationCommand";
+import { GetEnabledBaselineCommandInput, GetEnabledBaselineCommandOutput } from "./commands/GetEnabledBaselineCommand";
 import { GetEnabledControlCommandInput, GetEnabledControlCommandOutput } from "./commands/GetEnabledControlCommand";
 import { GetLandingZoneCommandInput, GetLandingZoneCommandOutput } from "./commands/GetLandingZoneCommand";
 import {
   GetLandingZoneOperationCommandInput,
   GetLandingZoneOperationCommandOutput,
 } from "./commands/GetLandingZoneOperationCommand";
+import { ListBaselinesCommandInput, ListBaselinesCommandOutput } from "./commands/ListBaselinesCommand";
+import {
+  ListEnabledBaselinesCommandInput,
+  ListEnabledBaselinesCommandOutput,
+} from "./commands/ListEnabledBaselinesCommand";
 import {
   ListEnabledControlsCommandInput,
   ListEnabledControlsCommandOutput,
@@ -76,9 +89,17 @@ import {
   ListTagsForResourceCommandInput,
   ListTagsForResourceCommandOutput,
 } from "./commands/ListTagsForResourceCommand";
+import {
+  ResetEnabledBaselineCommandInput,
+  ResetEnabledBaselineCommandOutput,
+} from "./commands/ResetEnabledBaselineCommand";
 import { ResetLandingZoneCommandInput, ResetLandingZoneCommandOutput } from "./commands/ResetLandingZoneCommand";
 import { TagResourceCommandInput, TagResourceCommandOutput } from "./commands/TagResourceCommand";
 import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./commands/UntagResourceCommand";
+import {
+  UpdateEnabledBaselineCommandInput,
+  UpdateEnabledBaselineCommandOutput,
+} from "./commands/UpdateEnabledBaselineCommand";
 import {
   UpdateEnabledControlCommandInput,
   UpdateEnabledControlCommandOutput,
@@ -101,18 +122,27 @@ export { __Client };
 export type ServiceInputTypes =
   | CreateLandingZoneCommandInput
   | DeleteLandingZoneCommandInput
+  | DisableBaselineCommandInput
   | DisableControlCommandInput
+  | EnableBaselineCommandInput
   | EnableControlCommandInput
+  | GetBaselineCommandInput
+  | GetBaselineOperationCommandInput
   | GetControlOperationCommandInput
+  | GetEnabledBaselineCommandInput
   | GetEnabledControlCommandInput
   | GetLandingZoneCommandInput
   | GetLandingZoneOperationCommandInput
+  | ListBaselinesCommandInput
+  | ListEnabledBaselinesCommandInput
   | ListEnabledControlsCommandInput
   | ListLandingZonesCommandInput
   | ListTagsForResourceCommandInput
+  | ResetEnabledBaselineCommandInput
   | ResetLandingZoneCommandInput
   | TagResourceCommandInput
   | UntagResourceCommandInput
+  | UpdateEnabledBaselineCommandInput
   | UpdateEnabledControlCommandInput
   | UpdateLandingZoneCommandInput;
 
@@ -122,18 +152,27 @@ export type ServiceInputTypes =
 export type ServiceOutputTypes =
   | CreateLandingZoneCommandOutput
   | DeleteLandingZoneCommandOutput
+  | DisableBaselineCommandOutput
   | DisableControlCommandOutput
+  | EnableBaselineCommandOutput
   | EnableControlCommandOutput
+  | GetBaselineCommandOutput
+  | GetBaselineOperationCommandOutput
   | GetControlOperationCommandOutput
+  | GetEnabledBaselineCommandOutput
   | GetEnabledControlCommandOutput
   | GetLandingZoneCommandOutput
   | GetLandingZoneOperationCommandOutput
+  | ListBaselinesCommandOutput
+  | ListEnabledBaselinesCommandOutput
   | ListEnabledControlsCommandOutput
   | ListLandingZonesCommandOutput
   | ListTagsForResourceCommandOutput
+  | ResetEnabledBaselineCommandOutput
   | ResetLandingZoneCommandOutput
   | TagResourceCommandOutput
   | UntagResourceCommandOutput
+  | UpdateEnabledBaselineCommandOutput
   | UpdateEnabledControlCommandOutput
   | UpdateLandingZoneCommandOutput;
 
@@ -310,8 +349,8 @@ export interface ControlTowerClientResolvedConfig extends ControlTowerClientReso
 
 /**
  * @public
- * <p>These interfaces allow you to apply the  Amazon Web Services library of pre-defined
- *          <i>controls</i> to your organizational units, programmatically. In  Amazon Web Services Control Tower, the terms "control" and "guardrail" are synonyms.</p>
+ * <p>These interfaces allow you to apply the Amazon Web Services library of pre-defined
+ *          <i>controls</i> to your organizational units, programmatically. In Amazon Web Services Control Tower, the terms "control" and "guardrail" are synonyms.</p>
  *          <p>To call these APIs, you'll need to know:</p>
  *          <ul>
  *             <li>
diff --git a/clients/client-controltower/src/commands/CreateLandingZoneCommand.ts b/clients/client-controltower/src/commands/CreateLandingZoneCommand.ts
index b64418fac774..06a19b306488 100644
--- a/clients/client-controltower/src/commands/CreateLandingZoneCommand.ts
+++ b/clients/client-controltower/src/commands/CreateLandingZoneCommand.ts
@@ -71,7 +71,7 @@ export interface CreateLandingZoneCommandOutput extends CreateLandingZoneOutput,
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/DeleteLandingZoneCommand.ts b/clients/client-controltower/src/commands/DeleteLandingZoneCommand.ts
index d6edbef7ced3..dbc009f3339c 100644
--- a/clients/client-controltower/src/commands/DeleteLandingZoneCommand.ts
+++ b/clients/client-controltower/src/commands/DeleteLandingZoneCommand.ts
@@ -69,7 +69,7 @@ export interface DeleteLandingZoneCommandOutput extends DeleteLandingZoneOutput,
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/DisableBaselineCommand.ts b/clients/client-controltower/src/commands/DisableBaselineCommand.ts
new file mode 100644
index 000000000000..9dc08e931fac
--- /dev/null
+++ b/clients/client-controltower/src/commands/DisableBaselineCommand.ts
@@ -0,0 +1,102 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ControlTowerClient";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { DisableBaselineInput, DisableBaselineOutput } from "../models/models_0";
+import { de_DisableBaselineCommand, se_DisableBaselineCommand } from "../protocols/Aws_restJson1";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link DisableBaselineCommand}.
+ */
+export interface DisableBaselineCommandInput extends DisableBaselineInput {}
+/**
+ * @public
+ *
+ * The output of {@link DisableBaselineCommand}.
+ */
+export interface DisableBaselineCommandOutput extends DisableBaselineOutput, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Disable an <code>EnabledBaseline</code> resource on the specified Target. This API starts an asynchronous operation to remove all resources deployed as part of the baseline enablement. The resource will vary depending on the enabled baseline.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ControlTowerClient, DisableBaselineCommand } from "@aws-sdk/client-controltower"; // ES Modules import
+ * // const { ControlTowerClient, DisableBaselineCommand } = require("@aws-sdk/client-controltower"); // CommonJS import
+ * const client = new ControlTowerClient(config);
+ * const input = { // DisableBaselineInput
+ *   enabledBaselineIdentifier: "STRING_VALUE", // required
+ * };
+ * const command = new DisableBaselineCommand(input);
+ * const response = await client.send(command);
+ * // { // DisableBaselineOutput
+ * //   operationIdentifier: "STRING_VALUE", // required
+ * // };
+ *
+ * ```
+ *
+ * @param DisableBaselineCommandInput - {@link DisableBaselineCommandInput}
+ * @returns {@link DisableBaselineCommandOutput}
+ * @see {@link DisableBaselineCommandInput} for command's `input` shape.
+ * @see {@link DisableBaselineCommandOutput} for command's `response` shape.
+ * @see {@link ControlTowerClientResolvedConfig | config} for ControlTowerClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action.</p>
+ *
+ * @throws {@link ConflictException} (client fault)
+ *  <p>Updating or deleting the resource can cause an inconsistent state.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>An unexpected error occurred during processing of a request.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The request references a resource that does not exist.</p>
+ *
+ * @throws {@link ServiceQuotaExceededException} (client fault)
+ *  <p>The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied due to request throttling.</p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ *
+ * @throws {@link ControlTowerServiceException}
+ * <p>Base exception class for all service exceptions from ControlTower service.</p>
+ *
+ */
+export class DisableBaselineCommand extends $Command
+  .classBuilder<
+    DisableBaselineCommandInput,
+    DisableBaselineCommandOutput,
+    ControlTowerClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep({
+    ...commonParams,
+  })
+  .m(function (this: any, Command: any, cs: any, config: ControlTowerClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AWSControlTowerApis", "DisableBaseline", {})
+  .n("ControlTowerClient", "DisableBaselineCommand")
+  .f(void 0, void 0)
+  .ser(se_DisableBaselineCommand)
+  .de(de_DisableBaselineCommand)
+  .build() {}
diff --git a/clients/client-controltower/src/commands/DisableControlCommand.ts b/clients/client-controltower/src/commands/DisableControlCommand.ts
index e5577ed524b5..8d2dab233917 100644
--- a/clients/client-controltower/src/commands/DisableControlCommand.ts
+++ b/clients/client-controltower/src/commands/DisableControlCommand.ts
@@ -28,7 +28,7 @@ export interface DisableControlCommandOutput extends DisableControlOutput, __Met
 
 /**
  * @public
- * <p>This API call turns off a control. It starts an asynchronous operation that deletes Amazon Web Services
+ * <p>This API call turns off a control. It starts an asynchronous operation that deletes AWS
  *          resources on the specified organizational unit and the accounts it contains. The resources
  *          will vary according to the control that you specify. For usage examples, see <a href="https://docs.aws.amazon.com/controltower/latest/userguide/control-api-examples-short.html">
  *                <i>the Amazon Web Services Control Tower User Guide</i>
@@ -76,7 +76,7 @@ export interface DisableControlCommandOutput extends DisableControlOutput, __Met
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/EnableBaselineCommand.ts b/clients/client-controltower/src/commands/EnableBaselineCommand.ts
new file mode 100644
index 000000000000..a18a5767b80a
--- /dev/null
+++ b/clients/client-controltower/src/commands/EnableBaselineCommand.ts
@@ -0,0 +1,114 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ControlTowerClient";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { EnableBaselineInput, EnableBaselineOutput } from "../models/models_0";
+import { de_EnableBaselineCommand, se_EnableBaselineCommand } from "../protocols/Aws_restJson1";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link EnableBaselineCommand}.
+ */
+export interface EnableBaselineCommandInput extends EnableBaselineInput {}
+/**
+ * @public
+ *
+ * The output of {@link EnableBaselineCommand}.
+ */
+export interface EnableBaselineCommandOutput extends EnableBaselineOutput, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Enable (apply) a <code>Baseline</code> to a Target. This API starts an asynchronous operation to deploy resources specified by the <code>Baseline</code> to the specified Target.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ControlTowerClient, EnableBaselineCommand } from "@aws-sdk/client-controltower"; // ES Modules import
+ * // const { ControlTowerClient, EnableBaselineCommand } = require("@aws-sdk/client-controltower"); // CommonJS import
+ * const client = new ControlTowerClient(config);
+ * const input = { // EnableBaselineInput
+ *   baselineVersion: "STRING_VALUE", // required
+ *   parameters: [ // EnabledBaselineParameters
+ *     { // EnabledBaselineParameter
+ *       key: "STRING_VALUE", // required
+ *       value: "DOCUMENT_VALUE", // required
+ *     },
+ *   ],
+ *   baselineIdentifier: "STRING_VALUE", // required
+ *   targetIdentifier: "STRING_VALUE", // required
+ *   tags: { // TagMap
+ *     "<keys>": "STRING_VALUE",
+ *   },
+ * };
+ * const command = new EnableBaselineCommand(input);
+ * const response = await client.send(command);
+ * // { // EnableBaselineOutput
+ * //   operationIdentifier: "STRING_VALUE", // required
+ * //   arn: "STRING_VALUE", // required
+ * // };
+ *
+ * ```
+ *
+ * @param EnableBaselineCommandInput - {@link EnableBaselineCommandInput}
+ * @returns {@link EnableBaselineCommandOutput}
+ * @see {@link EnableBaselineCommandInput} for command's `input` shape.
+ * @see {@link EnableBaselineCommandOutput} for command's `response` shape.
+ * @see {@link ControlTowerClientResolvedConfig | config} for ControlTowerClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action.</p>
+ *
+ * @throws {@link ConflictException} (client fault)
+ *  <p>Updating or deleting the resource can cause an inconsistent state.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>An unexpected error occurred during processing of a request.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The request references a resource that does not exist.</p>
+ *
+ * @throws {@link ServiceQuotaExceededException} (client fault)
+ *  <p>The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied due to request throttling.</p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ *
+ * @throws {@link ControlTowerServiceException}
+ * <p>Base exception class for all service exceptions from ControlTower service.</p>
+ *
+ */
+export class EnableBaselineCommand extends $Command
+  .classBuilder<
+    EnableBaselineCommandInput,
+    EnableBaselineCommandOutput,
+    ControlTowerClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep({
+    ...commonParams,
+  })
+  .m(function (this: any, Command: any, cs: any, config: ControlTowerClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AWSControlTowerApis", "EnableBaseline", {})
+  .n("ControlTowerClient", "EnableBaselineCommand")
+  .f(void 0, void 0)
+  .ser(se_EnableBaselineCommand)
+  .de(de_EnableBaselineCommand)
+  .build() {}
diff --git a/clients/client-controltower/src/commands/EnableControlCommand.ts b/clients/client-controltower/src/commands/EnableControlCommand.ts
index 38b865b0ce37..b5b36767fe5a 100644
--- a/clients/client-controltower/src/commands/EnableControlCommand.ts
+++ b/clients/client-controltower/src/commands/EnableControlCommand.ts
@@ -86,7 +86,7 @@ export interface EnableControlCommandOutput extends EnableControlOutput, __Metad
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/GetBaselineCommand.ts b/clients/client-controltower/src/commands/GetBaselineCommand.ts
new file mode 100644
index 000000000000..a807af2daa59
--- /dev/null
+++ b/clients/client-controltower/src/commands/GetBaselineCommand.ts
@@ -0,0 +1,98 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ControlTowerClient";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { GetBaselineInput, GetBaselineOutput } from "../models/models_0";
+import { de_GetBaselineCommand, se_GetBaselineCommand } from "../protocols/Aws_restJson1";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link GetBaselineCommand}.
+ */
+export interface GetBaselineCommandInput extends GetBaselineInput {}
+/**
+ * @public
+ *
+ * The output of {@link GetBaselineCommand}.
+ */
+export interface GetBaselineCommandOutput extends GetBaselineOutput, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Retrieve details about an existing <code>Baseline</code> resource by specifying its identifier.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ControlTowerClient, GetBaselineCommand } from "@aws-sdk/client-controltower"; // ES Modules import
+ * // const { ControlTowerClient, GetBaselineCommand } = require("@aws-sdk/client-controltower"); // CommonJS import
+ * const client = new ControlTowerClient(config);
+ * const input = { // GetBaselineInput
+ *   baselineIdentifier: "STRING_VALUE", // required
+ * };
+ * const command = new GetBaselineCommand(input);
+ * const response = await client.send(command);
+ * // { // GetBaselineOutput
+ * //   arn: "STRING_VALUE", // required
+ * //   name: "STRING_VALUE", // required
+ * //   description: "STRING_VALUE",
+ * // };
+ *
+ * ```
+ *
+ * @param GetBaselineCommandInput - {@link GetBaselineCommandInput}
+ * @returns {@link GetBaselineCommandOutput}
+ * @see {@link GetBaselineCommandInput} for command's `input` shape.
+ * @see {@link GetBaselineCommandOutput} for command's `response` shape.
+ * @see {@link ControlTowerClientResolvedConfig | config} for ControlTowerClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>An unexpected error occurred during processing of a request.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The request references a resource that does not exist.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied due to request throttling.</p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ *
+ * @throws {@link ControlTowerServiceException}
+ * <p>Base exception class for all service exceptions from ControlTower service.</p>
+ *
+ */
+export class GetBaselineCommand extends $Command
+  .classBuilder<
+    GetBaselineCommandInput,
+    GetBaselineCommandOutput,
+    ControlTowerClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep({
+    ...commonParams,
+  })
+  .m(function (this: any, Command: any, cs: any, config: ControlTowerClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AWSControlTowerApis", "GetBaseline", {})
+  .n("ControlTowerClient", "GetBaselineCommand")
+  .f(void 0, void 0)
+  .ser(se_GetBaselineCommand)
+  .de(de_GetBaselineCommand)
+  .build() {}
diff --git a/clients/client-controltower/src/commands/GetBaselineOperationCommand.ts b/clients/client-controltower/src/commands/GetBaselineOperationCommand.ts
new file mode 100644
index 000000000000..acf867dfad5e
--- /dev/null
+++ b/clients/client-controltower/src/commands/GetBaselineOperationCommand.ts
@@ -0,0 +1,103 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ControlTowerClient";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { GetBaselineOperationInput, GetBaselineOperationOutput } from "../models/models_0";
+import { de_GetBaselineOperationCommand, se_GetBaselineOperationCommand } from "../protocols/Aws_restJson1";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link GetBaselineOperationCommand}.
+ */
+export interface GetBaselineOperationCommandInput extends GetBaselineOperationInput {}
+/**
+ * @public
+ *
+ * The output of {@link GetBaselineOperationCommand}.
+ */
+export interface GetBaselineOperationCommandOutput extends GetBaselineOperationOutput, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Returns the details of an asynchronous baseline operation, as initiated by any of these APIs: <code>EnableBaseline</code>, <code>DisableBaseline</code>, <code>UpdateEnabledBaseline</code>, <code>ResetEnabledBaseline</code>. A status message is displayed in case of operation failure.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ControlTowerClient, GetBaselineOperationCommand } from "@aws-sdk/client-controltower"; // ES Modules import
+ * // const { ControlTowerClient, GetBaselineOperationCommand } = require("@aws-sdk/client-controltower"); // CommonJS import
+ * const client = new ControlTowerClient(config);
+ * const input = { // GetBaselineOperationInput
+ *   operationIdentifier: "STRING_VALUE", // required
+ * };
+ * const command = new GetBaselineOperationCommand(input);
+ * const response = await client.send(command);
+ * // { // GetBaselineOperationOutput
+ * //   baselineOperation: { // BaselineOperation
+ * //     operationIdentifier: "STRING_VALUE",
+ * //     operationType: "ENABLE_BASELINE" || "DISABLE_BASELINE" || "UPDATE_ENABLED_BASELINE" || "RESET_ENABLED_BASELINE",
+ * //     status: "SUCCEEDED" || "FAILED" || "IN_PROGRESS",
+ * //     startTime: new Date("TIMESTAMP"),
+ * //     endTime: new Date("TIMESTAMP"),
+ * //     statusMessage: "STRING_VALUE",
+ * //   },
+ * // };
+ *
+ * ```
+ *
+ * @param GetBaselineOperationCommandInput - {@link GetBaselineOperationCommandInput}
+ * @returns {@link GetBaselineOperationCommandOutput}
+ * @see {@link GetBaselineOperationCommandInput} for command's `input` shape.
+ * @see {@link GetBaselineOperationCommandOutput} for command's `response` shape.
+ * @see {@link ControlTowerClientResolvedConfig | config} for ControlTowerClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>An unexpected error occurred during processing of a request.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The request references a resource that does not exist.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied due to request throttling.</p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ *
+ * @throws {@link ControlTowerServiceException}
+ * <p>Base exception class for all service exceptions from ControlTower service.</p>
+ *
+ */
+export class GetBaselineOperationCommand extends $Command
+  .classBuilder<
+    GetBaselineOperationCommandInput,
+    GetBaselineOperationCommandOutput,
+    ControlTowerClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep({
+    ...commonParams,
+  })
+  .m(function (this: any, Command: any, cs: any, config: ControlTowerClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AWSControlTowerApis", "GetBaselineOperation", {})
+  .n("ControlTowerClient", "GetBaselineOperationCommand")
+  .f(void 0, void 0)
+  .ser(se_GetBaselineOperationCommand)
+  .de(de_GetBaselineOperationCommand)
+  .build() {}
diff --git a/clients/client-controltower/src/commands/GetControlOperationCommand.ts b/clients/client-controltower/src/commands/GetControlOperationCommand.ts
index 58c71d1e9bfa..16af88ed22a1 100644
--- a/clients/client-controltower/src/commands/GetControlOperationCommand.ts
+++ b/clients/client-controltower/src/commands/GetControlOperationCommand.ts
@@ -75,7 +75,7 @@ export interface GetControlOperationCommandOutput extends GetControlOperationOut
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/GetEnabledBaselineCommand.ts b/clients/client-controltower/src/commands/GetEnabledBaselineCommand.ts
new file mode 100644
index 000000000000..1e36705a678d
--- /dev/null
+++ b/clients/client-controltower/src/commands/GetEnabledBaselineCommand.ts
@@ -0,0 +1,111 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ControlTowerClient";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { GetEnabledBaselineInput, GetEnabledBaselineOutput } from "../models/models_0";
+import { de_GetEnabledBaselineCommand, se_GetEnabledBaselineCommand } from "../protocols/Aws_restJson1";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link GetEnabledBaselineCommand}.
+ */
+export interface GetEnabledBaselineCommandInput extends GetEnabledBaselineInput {}
+/**
+ * @public
+ *
+ * The output of {@link GetEnabledBaselineCommand}.
+ */
+export interface GetEnabledBaselineCommandOutput extends GetEnabledBaselineOutput, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Retrieve details of an <code>EnabledBaseline</code> resource by specifying its identifier.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ControlTowerClient, GetEnabledBaselineCommand } from "@aws-sdk/client-controltower"; // ES Modules import
+ * // const { ControlTowerClient, GetEnabledBaselineCommand } = require("@aws-sdk/client-controltower"); // CommonJS import
+ * const client = new ControlTowerClient(config);
+ * const input = { // GetEnabledBaselineInput
+ *   enabledBaselineIdentifier: "STRING_VALUE", // required
+ * };
+ * const command = new GetEnabledBaselineCommand(input);
+ * const response = await client.send(command);
+ * // { // GetEnabledBaselineOutput
+ * //   enabledBaselineDetails: { // EnabledBaselineDetails
+ * //     arn: "STRING_VALUE", // required
+ * //     baselineIdentifier: "STRING_VALUE", // required
+ * //     baselineVersion: "STRING_VALUE",
+ * //     targetIdentifier: "STRING_VALUE", // required
+ * //     statusSummary: { // EnablementStatusSummary
+ * //       status: "SUCCEEDED" || "FAILED" || "UNDER_CHANGE",
+ * //       lastOperationIdentifier: "STRING_VALUE",
+ * //     },
+ * //     parameters: [ // EnabledBaselineParameterSummaries
+ * //       { // EnabledBaselineParameterSummary
+ * //         key: "STRING_VALUE", // required
+ * //         value: "DOCUMENT_VALUE", // required
+ * //       },
+ * //     ],
+ * //   },
+ * // };
+ *
+ * ```
+ *
+ * @param GetEnabledBaselineCommandInput - {@link GetEnabledBaselineCommandInput}
+ * @returns {@link GetEnabledBaselineCommandOutput}
+ * @see {@link GetEnabledBaselineCommandInput} for command's `input` shape.
+ * @see {@link GetEnabledBaselineCommandOutput} for command's `response` shape.
+ * @see {@link ControlTowerClientResolvedConfig | config} for ControlTowerClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>An unexpected error occurred during processing of a request.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The request references a resource that does not exist.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied due to request throttling.</p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ *
+ * @throws {@link ControlTowerServiceException}
+ * <p>Base exception class for all service exceptions from ControlTower service.</p>
+ *
+ */
+export class GetEnabledBaselineCommand extends $Command
+  .classBuilder<
+    GetEnabledBaselineCommandInput,
+    GetEnabledBaselineCommandOutput,
+    ControlTowerClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep({
+    ...commonParams,
+  })
+  .m(function (this: any, Command: any, cs: any, config: ControlTowerClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AWSControlTowerApis", "GetEnabledBaseline", {})
+  .n("ControlTowerClient", "GetEnabledBaselineCommand")
+  .f(void 0, void 0)
+  .ser(se_GetEnabledBaselineCommand)
+  .de(de_GetEnabledBaselineCommand)
+  .build() {}
diff --git a/clients/client-controltower/src/commands/GetEnabledControlCommand.ts b/clients/client-controltower/src/commands/GetEnabledControlCommand.ts
index 61b765a99856..7dfe6e652026 100644
--- a/clients/client-controltower/src/commands/GetEnabledControlCommand.ts
+++ b/clients/client-controltower/src/commands/GetEnabledControlCommand.ts
@@ -89,7 +89,7 @@ export interface GetEnabledControlCommandOutput extends GetEnabledControlOutput,
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/GetLandingZoneCommand.ts b/clients/client-controltower/src/commands/GetLandingZoneCommand.ts
index b3aac27b9f72..e90defe1a47a 100644
--- a/clients/client-controltower/src/commands/GetLandingZoneCommand.ts
+++ b/clients/client-controltower/src/commands/GetLandingZoneCommand.ts
@@ -74,7 +74,7 @@ export interface GetLandingZoneCommandOutput extends GetLandingZoneOutput, __Met
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/GetLandingZoneOperationCommand.ts b/clients/client-controltower/src/commands/GetLandingZoneOperationCommand.ts
index f91c3947c4a6..e40862543633 100644
--- a/clients/client-controltower/src/commands/GetLandingZoneOperationCommand.ts
+++ b/clients/client-controltower/src/commands/GetLandingZoneOperationCommand.ts
@@ -72,7 +72,7 @@ export interface GetLandingZoneOperationCommandOutput extends GetLandingZoneOper
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/ListBaselinesCommand.ts b/clients/client-controltower/src/commands/ListBaselinesCommand.ts
new file mode 100644
index 000000000000..e03fe19cc758
--- /dev/null
+++ b/clients/client-controltower/src/commands/ListBaselinesCommand.ts
@@ -0,0 +1,101 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ControlTowerClient";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { ListBaselinesInput, ListBaselinesOutput } from "../models/models_0";
+import { de_ListBaselinesCommand, se_ListBaselinesCommand } from "../protocols/Aws_restJson1";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link ListBaselinesCommand}.
+ */
+export interface ListBaselinesCommandInput extends ListBaselinesInput {}
+/**
+ * @public
+ *
+ * The output of {@link ListBaselinesCommand}.
+ */
+export interface ListBaselinesCommandOutput extends ListBaselinesOutput, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Returns a summary list of all available baselines.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ControlTowerClient, ListBaselinesCommand } from "@aws-sdk/client-controltower"; // ES Modules import
+ * // const { ControlTowerClient, ListBaselinesCommand } = require("@aws-sdk/client-controltower"); // CommonJS import
+ * const client = new ControlTowerClient(config);
+ * const input = { // ListBaselinesInput
+ *   nextToken: "STRING_VALUE",
+ *   maxResults: Number("int"),
+ * };
+ * const command = new ListBaselinesCommand(input);
+ * const response = await client.send(command);
+ * // { // ListBaselinesOutput
+ * //   baselines: [ // Baselines // required
+ * //     { // BaselineSummary
+ * //       arn: "STRING_VALUE", // required
+ * //       name: "STRING_VALUE", // required
+ * //       description: "STRING_VALUE",
+ * //     },
+ * //   ],
+ * //   nextToken: "STRING_VALUE",
+ * // };
+ *
+ * ```
+ *
+ * @param ListBaselinesCommandInput - {@link ListBaselinesCommandInput}
+ * @returns {@link ListBaselinesCommandOutput}
+ * @see {@link ListBaselinesCommandInput} for command's `input` shape.
+ * @see {@link ListBaselinesCommandOutput} for command's `response` shape.
+ * @see {@link ControlTowerClientResolvedConfig | config} for ControlTowerClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>An unexpected error occurred during processing of a request.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied due to request throttling.</p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ *
+ * @throws {@link ControlTowerServiceException}
+ * <p>Base exception class for all service exceptions from ControlTower service.</p>
+ *
+ */
+export class ListBaselinesCommand extends $Command
+  .classBuilder<
+    ListBaselinesCommandInput,
+    ListBaselinesCommandOutput,
+    ControlTowerClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep({
+    ...commonParams,
+  })
+  .m(function (this: any, Command: any, cs: any, config: ControlTowerClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AWSControlTowerApis", "ListBaselines", {})
+  .n("ControlTowerClient", "ListBaselinesCommand")
+  .f(void 0, void 0)
+  .ser(se_ListBaselinesCommand)
+  .de(de_ListBaselinesCommand)
+  .build() {}
diff --git a/clients/client-controltower/src/commands/ListEnabledBaselinesCommand.ts b/clients/client-controltower/src/commands/ListEnabledBaselinesCommand.ts
new file mode 100644
index 000000000000..ea0b0b4a0fff
--- /dev/null
+++ b/clients/client-controltower/src/commands/ListEnabledBaselinesCommand.ts
@@ -0,0 +1,114 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ControlTowerClient";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { ListEnabledBaselinesInput, ListEnabledBaselinesOutput } from "../models/models_0";
+import { de_ListEnabledBaselinesCommand, se_ListEnabledBaselinesCommand } from "../protocols/Aws_restJson1";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link ListEnabledBaselinesCommand}.
+ */
+export interface ListEnabledBaselinesCommandInput extends ListEnabledBaselinesInput {}
+/**
+ * @public
+ *
+ * The output of {@link ListEnabledBaselinesCommand}.
+ */
+export interface ListEnabledBaselinesCommandOutput extends ListEnabledBaselinesOutput, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Returns a list of summaries describing <code>EnabledBaseline</code> resources. You can filter the list by the corresponding <code>Baseline</code> or <code>Target</code> of the <code>EnabledBaseline</code> resources.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ControlTowerClient, ListEnabledBaselinesCommand } from "@aws-sdk/client-controltower"; // ES Modules import
+ * // const { ControlTowerClient, ListEnabledBaselinesCommand } = require("@aws-sdk/client-controltower"); // CommonJS import
+ * const client = new ControlTowerClient(config);
+ * const input = { // ListEnabledBaselinesInput
+ *   filter: { // EnabledBaselineFilter
+ *     targetIdentifiers: [ // EnabledBaselineTargetIdentifiers
+ *       "STRING_VALUE",
+ *     ],
+ *     baselineIdentifiers: [ // EnabledBaselineBaselineIdentifiers
+ *       "STRING_VALUE",
+ *     ],
+ *   },
+ *   nextToken: "STRING_VALUE",
+ *   maxResults: Number("int"),
+ * };
+ * const command = new ListEnabledBaselinesCommand(input);
+ * const response = await client.send(command);
+ * // { // ListEnabledBaselinesOutput
+ * //   enabledBaselines: [ // EnabledBaselines // required
+ * //     { // EnabledBaselineSummary
+ * //       arn: "STRING_VALUE", // required
+ * //       baselineIdentifier: "STRING_VALUE", // required
+ * //       baselineVersion: "STRING_VALUE",
+ * //       targetIdentifier: "STRING_VALUE", // required
+ * //       statusSummary: { // EnablementStatusSummary
+ * //         status: "SUCCEEDED" || "FAILED" || "UNDER_CHANGE",
+ * //         lastOperationIdentifier: "STRING_VALUE",
+ * //       },
+ * //     },
+ * //   ],
+ * //   nextToken: "STRING_VALUE",
+ * // };
+ *
+ * ```
+ *
+ * @param ListEnabledBaselinesCommandInput - {@link ListEnabledBaselinesCommandInput}
+ * @returns {@link ListEnabledBaselinesCommandOutput}
+ * @see {@link ListEnabledBaselinesCommandInput} for command's `input` shape.
+ * @see {@link ListEnabledBaselinesCommandOutput} for command's `response` shape.
+ * @see {@link ControlTowerClientResolvedConfig | config} for ControlTowerClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>An unexpected error occurred during processing of a request.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied due to request throttling.</p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ *
+ * @throws {@link ControlTowerServiceException}
+ * <p>Base exception class for all service exceptions from ControlTower service.</p>
+ *
+ */
+export class ListEnabledBaselinesCommand extends $Command
+  .classBuilder<
+    ListEnabledBaselinesCommandInput,
+    ListEnabledBaselinesCommandOutput,
+    ControlTowerClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep({
+    ...commonParams,
+  })
+  .m(function (this: any, Command: any, cs: any, config: ControlTowerClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AWSControlTowerApis", "ListEnabledBaselines", {})
+  .n("ControlTowerClient", "ListEnabledBaselinesCommand")
+  .f(void 0, void 0)
+  .ser(se_ListEnabledBaselinesCommand)
+  .de(de_ListEnabledBaselinesCommand)
+  .build() {}
diff --git a/clients/client-controltower/src/commands/ListEnabledControlsCommand.ts b/clients/client-controltower/src/commands/ListEnabledControlsCommand.ts
index a336d9e1df72..51f1b9ab67b8 100644
--- a/clients/client-controltower/src/commands/ListEnabledControlsCommand.ts
+++ b/clients/client-controltower/src/commands/ListEnabledControlsCommand.ts
@@ -84,7 +84,7 @@ export interface ListEnabledControlsCommandOutput extends ListEnabledControlsOut
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/ListLandingZonesCommand.ts b/clients/client-controltower/src/commands/ListLandingZonesCommand.ts
index 28d4414f04e0..2d9e2af5aa54 100644
--- a/clients/client-controltower/src/commands/ListLandingZonesCommand.ts
+++ b/clients/client-controltower/src/commands/ListLandingZonesCommand.ts
@@ -70,7 +70,7 @@ export interface ListLandingZonesCommandOutput extends ListLandingZonesOutput, _
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/ListTagsForResourceCommand.ts b/clients/client-controltower/src/commands/ListTagsForResourceCommand.ts
index 185b4f3f2d6f..ee3821cb965d 100644
--- a/clients/client-controltower/src/commands/ListTagsForResourceCommand.ts
+++ b/clients/client-controltower/src/commands/ListTagsForResourceCommand.ts
@@ -63,7 +63,7 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceOut
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/ResetEnabledBaselineCommand.ts b/clients/client-controltower/src/commands/ResetEnabledBaselineCommand.ts
new file mode 100644
index 000000000000..98b3ed6fa4e9
--- /dev/null
+++ b/clients/client-controltower/src/commands/ResetEnabledBaselineCommand.ts
@@ -0,0 +1,102 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ControlTowerClient";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { ResetEnabledBaselineInput, ResetEnabledBaselineOutput } from "../models/models_0";
+import { de_ResetEnabledBaselineCommand, se_ResetEnabledBaselineCommand } from "../protocols/Aws_restJson1";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link ResetEnabledBaselineCommand}.
+ */
+export interface ResetEnabledBaselineCommandInput extends ResetEnabledBaselineInput {}
+/**
+ * @public
+ *
+ * The output of {@link ResetEnabledBaselineCommand}.
+ */
+export interface ResetEnabledBaselineCommandOutput extends ResetEnabledBaselineOutput, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Re-enables an <code>EnabledBaseline</code> resource. For example, this API can re-apply the existing <code>Baseline</code> after a new member account is moved to the target OU.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ControlTowerClient, ResetEnabledBaselineCommand } from "@aws-sdk/client-controltower"; // ES Modules import
+ * // const { ControlTowerClient, ResetEnabledBaselineCommand } = require("@aws-sdk/client-controltower"); // CommonJS import
+ * const client = new ControlTowerClient(config);
+ * const input = { // ResetEnabledBaselineInput
+ *   enabledBaselineIdentifier: "STRING_VALUE", // required
+ * };
+ * const command = new ResetEnabledBaselineCommand(input);
+ * const response = await client.send(command);
+ * // { // ResetEnabledBaselineOutput
+ * //   operationIdentifier: "STRING_VALUE", // required
+ * // };
+ *
+ * ```
+ *
+ * @param ResetEnabledBaselineCommandInput - {@link ResetEnabledBaselineCommandInput}
+ * @returns {@link ResetEnabledBaselineCommandOutput}
+ * @see {@link ResetEnabledBaselineCommandInput} for command's `input` shape.
+ * @see {@link ResetEnabledBaselineCommandOutput} for command's `response` shape.
+ * @see {@link ControlTowerClientResolvedConfig | config} for ControlTowerClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action.</p>
+ *
+ * @throws {@link ConflictException} (client fault)
+ *  <p>Updating or deleting the resource can cause an inconsistent state.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>An unexpected error occurred during processing of a request.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The request references a resource that does not exist.</p>
+ *
+ * @throws {@link ServiceQuotaExceededException} (client fault)
+ *  <p>The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied due to request throttling.</p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ *
+ * @throws {@link ControlTowerServiceException}
+ * <p>Base exception class for all service exceptions from ControlTower service.</p>
+ *
+ */
+export class ResetEnabledBaselineCommand extends $Command
+  .classBuilder<
+    ResetEnabledBaselineCommandInput,
+    ResetEnabledBaselineCommandOutput,
+    ControlTowerClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep({
+    ...commonParams,
+  })
+  .m(function (this: any, Command: any, cs: any, config: ControlTowerClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AWSControlTowerApis", "ResetEnabledBaseline", {})
+  .n("ControlTowerClient", "ResetEnabledBaselineCommand")
+  .f(void 0, void 0)
+  .ser(se_ResetEnabledBaselineCommand)
+  .de(de_ResetEnabledBaselineCommand)
+  .build() {}
diff --git a/clients/client-controltower/src/commands/ResetLandingZoneCommand.ts b/clients/client-controltower/src/commands/ResetLandingZoneCommand.ts
index 6c3f65ce7df6..d8af6b70fb8b 100644
--- a/clients/client-controltower/src/commands/ResetLandingZoneCommand.ts
+++ b/clients/client-controltower/src/commands/ResetLandingZoneCommand.ts
@@ -69,7 +69,7 @@ export interface ResetLandingZoneCommandOutput extends ResetLandingZoneOutput, _
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/TagResourceCommand.ts b/clients/client-controltower/src/commands/TagResourceCommand.ts
index 94306f593c54..d1ff69b35e1d 100644
--- a/clients/client-controltower/src/commands/TagResourceCommand.ts
+++ b/clients/client-controltower/src/commands/TagResourceCommand.ts
@@ -62,7 +62,7 @@ export interface TagResourceCommandOutput extends TagResourceOutput, __MetadataB
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/UntagResourceCommand.ts b/clients/client-controltower/src/commands/UntagResourceCommand.ts
index a03bef52674c..262eb9ef9f67 100644
--- a/clients/client-controltower/src/commands/UntagResourceCommand.ts
+++ b/clients/client-controltower/src/commands/UntagResourceCommand.ts
@@ -62,7 +62,7 @@ export interface UntagResourceCommandOutput extends UntagResourceOutput, __Metad
  *  <p>The request references a resource that does not exist.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/UpdateEnabledBaselineCommand.ts b/clients/client-controltower/src/commands/UpdateEnabledBaselineCommand.ts
new file mode 100644
index 000000000000..acdc8c7971cf
--- /dev/null
+++ b/clients/client-controltower/src/commands/UpdateEnabledBaselineCommand.ts
@@ -0,0 +1,109 @@
+// smithy-typescript generated code
+import { getEndpointPlugin } from "@smithy/middleware-endpoint";
+import { getSerdePlugin } from "@smithy/middleware-serde";
+import { Command as $Command } from "@smithy/smithy-client";
+import { MetadataBearer as __MetadataBearer } from "@smithy/types";
+
+import { ControlTowerClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../ControlTowerClient";
+import { commonParams } from "../endpoint/EndpointParameters";
+import { UpdateEnabledBaselineInput, UpdateEnabledBaselineOutput } from "../models/models_0";
+import { de_UpdateEnabledBaselineCommand, se_UpdateEnabledBaselineCommand } from "../protocols/Aws_restJson1";
+
+/**
+ * @public
+ */
+export { __MetadataBearer, $Command };
+/**
+ * @public
+ *
+ * The input for {@link UpdateEnabledBaselineCommand}.
+ */
+export interface UpdateEnabledBaselineCommandInput extends UpdateEnabledBaselineInput {}
+/**
+ * @public
+ *
+ * The output of {@link UpdateEnabledBaselineCommand}.
+ */
+export interface UpdateEnabledBaselineCommandOutput extends UpdateEnabledBaselineOutput, __MetadataBearer {}
+
+/**
+ * @public
+ * <p>Updates an <code>EnabledBaseline</code> resource's applied parameters or version.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { ControlTowerClient, UpdateEnabledBaselineCommand } from "@aws-sdk/client-controltower"; // ES Modules import
+ * // const { ControlTowerClient, UpdateEnabledBaselineCommand } = require("@aws-sdk/client-controltower"); // CommonJS import
+ * const client = new ControlTowerClient(config);
+ * const input = { // UpdateEnabledBaselineInput
+ *   baselineVersion: "STRING_VALUE", // required
+ *   parameters: [ // EnabledBaselineParameters
+ *     { // EnabledBaselineParameter
+ *       key: "STRING_VALUE", // required
+ *       value: "DOCUMENT_VALUE", // required
+ *     },
+ *   ],
+ *   enabledBaselineIdentifier: "STRING_VALUE", // required
+ * };
+ * const command = new UpdateEnabledBaselineCommand(input);
+ * const response = await client.send(command);
+ * // { // UpdateEnabledBaselineOutput
+ * //   operationIdentifier: "STRING_VALUE", // required
+ * // };
+ *
+ * ```
+ *
+ * @param UpdateEnabledBaselineCommandInput - {@link UpdateEnabledBaselineCommandInput}
+ * @returns {@link UpdateEnabledBaselineCommandOutput}
+ * @see {@link UpdateEnabledBaselineCommandInput} for command's `input` shape.
+ * @see {@link UpdateEnabledBaselineCommandOutput} for command's `response` shape.
+ * @see {@link ControlTowerClientResolvedConfig | config} for ControlTowerClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You do not have sufficient access to perform this action.</p>
+ *
+ * @throws {@link ConflictException} (client fault)
+ *  <p>Updating or deleting the resource can cause an inconsistent state.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>An unexpected error occurred during processing of a request.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The request references a resource that does not exist.</p>
+ *
+ * @throws {@link ServiceQuotaExceededException} (client fault)
+ *  <p>The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>The request was denied due to request throttling.</p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ *
+ * @throws {@link ControlTowerServiceException}
+ * <p>Base exception class for all service exceptions from ControlTower service.</p>
+ *
+ */
+export class UpdateEnabledBaselineCommand extends $Command
+  .classBuilder<
+    UpdateEnabledBaselineCommandInput,
+    UpdateEnabledBaselineCommandOutput,
+    ControlTowerClientResolvedConfig,
+    ServiceInputTypes,
+    ServiceOutputTypes
+  >()
+  .ep({
+    ...commonParams,
+  })
+  .m(function (this: any, Command: any, cs: any, config: ControlTowerClientResolvedConfig, o: any) {
+    return [
+      getSerdePlugin(config, this.serialize, this.deserialize),
+      getEndpointPlugin(config, Command.getEndpointParameterInstructions()),
+    ];
+  })
+  .s("AWSControlTowerApis", "UpdateEnabledBaseline", {})
+  .n("ControlTowerClient", "UpdateEnabledBaselineCommand")
+  .f(void 0, void 0)
+  .ser(se_UpdateEnabledBaselineCommand)
+  .de(de_UpdateEnabledBaselineCommand)
+  .build() {}
diff --git a/clients/client-controltower/src/commands/UpdateEnabledControlCommand.ts b/clients/client-controltower/src/commands/UpdateEnabledControlCommand.ts
index 4aca897f2f65..caa6d2a49242 100644
--- a/clients/client-controltower/src/commands/UpdateEnabledControlCommand.ts
+++ b/clients/client-controltower/src/commands/UpdateEnabledControlCommand.ts
@@ -84,7 +84,7 @@ export interface UpdateEnabledControlCommandOutput extends UpdateEnabledControlO
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/UpdateLandingZoneCommand.ts b/clients/client-controltower/src/commands/UpdateLandingZoneCommand.ts
index 0354f8066207..59b7cf4f0956 100644
--- a/clients/client-controltower/src/commands/UpdateLandingZoneCommand.ts
+++ b/clients/client-controltower/src/commands/UpdateLandingZoneCommand.ts
@@ -72,7 +72,7 @@ export interface UpdateLandingZoneCommandOutput extends UpdateLandingZoneOutput,
  *  <p>The request was denied due to request throttling.</p>
  *
  * @throws {@link ValidationException} (client fault)
- *  <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
+ *  <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
  *
  * @throws {@link ControlTowerServiceException}
  * <p>Base exception class for all service exceptions from ControlTower service.</p>
diff --git a/clients/client-controltower/src/commands/index.ts b/clients/client-controltower/src/commands/index.ts
index 3fc3a18e0247..54a86df501ba 100644
--- a/clients/client-controltower/src/commands/index.ts
+++ b/clients/client-controltower/src/commands/index.ts
@@ -1,17 +1,26 @@
 // smithy-typescript generated code
 export * from "./CreateLandingZoneCommand";
 export * from "./DeleteLandingZoneCommand";
+export * from "./DisableBaselineCommand";
 export * from "./DisableControlCommand";
+export * from "./EnableBaselineCommand";
 export * from "./EnableControlCommand";
+export * from "./GetBaselineCommand";
+export * from "./GetBaselineOperationCommand";
 export * from "./GetControlOperationCommand";
+export * from "./GetEnabledBaselineCommand";
 export * from "./GetEnabledControlCommand";
 export * from "./GetLandingZoneCommand";
 export * from "./GetLandingZoneOperationCommand";
+export * from "./ListBaselinesCommand";
+export * from "./ListEnabledBaselinesCommand";
 export * from "./ListEnabledControlsCommand";
 export * from "./ListLandingZonesCommand";
 export * from "./ListTagsForResourceCommand";
+export * from "./ResetEnabledBaselineCommand";
 export * from "./ResetLandingZoneCommand";
 export * from "./TagResourceCommand";
 export * from "./UntagResourceCommand";
+export * from "./UpdateEnabledBaselineCommand";
 export * from "./UpdateEnabledControlCommand";
 export * from "./UpdateLandingZoneCommand";
diff --git a/clients/client-controltower/src/index.ts b/clients/client-controltower/src/index.ts
index 0b4f0e8e46dc..ed9b5de4ab93 100644
--- a/clients/client-controltower/src/index.ts
+++ b/clients/client-controltower/src/index.ts
@@ -1,8 +1,8 @@
 // smithy-typescript generated code
 /* eslint-disable */
 /**
- * <p>These interfaces allow you to apply the  Amazon Web Services library of pre-defined
- *          <i>controls</i> to your organizational units, programmatically. In  Amazon Web Services Control Tower, the terms "control" and "guardrail" are synonyms.</p>
+ * <p>These interfaces allow you to apply the Amazon Web Services library of pre-defined
+ *          <i>controls</i> to your organizational units, programmatically. In Amazon Web Services Control Tower, the terms "control" and "guardrail" are synonyms.</p>
  *          <p>To call these APIs, you'll need to know:</p>
  *          <ul>
  *             <li>
diff --git a/clients/client-controltower/src/models/models_0.ts b/clients/client-controltower/src/models/models_0.ts
index 6b634de4a710..54c5961b0ed6 100644
--- a/clients/client-controltower/src/models/models_0.ts
+++ b/clients/client-controltower/src/models/models_0.ts
@@ -25,6 +25,203 @@ export class AccessDeniedException extends __BaseException {
   }
 }
 
+/**
+ * @public
+ */
+export interface GetBaselineInput {
+  /**
+   * @public
+   * <p>The ARN of the <code>Baseline</code> resource to be retrieved.</p>
+   */
+  baselineIdentifier: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface GetBaselineOutput {
+  /**
+   * @public
+   * <p>The baseline ARN.</p>
+   */
+  arn: string | undefined;
+
+  /**
+   * @public
+   * <p>A user-friendly name for the baseline.</p>
+   */
+  name: string | undefined;
+
+  /**
+   * @public
+   * <p>A description of the baseline.</p>
+   */
+  description?: string;
+}
+
+/**
+ * @public
+ * <p>An unexpected error occurred during processing of a request.</p>
+ */
+export class InternalServerException extends __BaseException {
+  readonly name: "InternalServerException" = "InternalServerException";
+  readonly $fault: "server" = "server";
+  $retryable = {};
+  /**
+   * @internal
+   */
+  constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>) {
+    super({
+      name: "InternalServerException",
+      $fault: "server",
+      ...opts,
+    });
+    Object.setPrototypeOf(this, InternalServerException.prototype);
+  }
+}
+
+/**
+ * @public
+ * <p>The request references a resource that does not exist.</p>
+ */
+export class ResourceNotFoundException extends __BaseException {
+  readonly name: "ResourceNotFoundException" = "ResourceNotFoundException";
+  readonly $fault: "client" = "client";
+  /**
+   * @internal
+   */
+  constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>) {
+    super({
+      name: "ResourceNotFoundException",
+      $fault: "client",
+      ...opts,
+    });
+    Object.setPrototypeOf(this, ResourceNotFoundException.prototype);
+  }
+}
+
+/**
+ * @public
+ * <p>The request was denied due to request throttling.</p>
+ */
+export class ThrottlingException extends __BaseException {
+  readonly name: "ThrottlingException" = "ThrottlingException";
+  readonly $fault: "client" = "client";
+  $retryable = {
+    throttling: true,
+  };
+  /**
+   * @public
+   * <p>The ID of the service that is associated with the error.</p>
+   */
+  serviceCode?: string;
+
+  /**
+   * @public
+   * <p>The ID of the service quota that was exceeded.</p>
+   */
+  quotaCode?: string;
+
+  /**
+   * @public
+   * <p>The number of seconds the caller should wait before retrying.</p>
+   */
+  retryAfterSeconds?: number;
+
+  /**
+   * @internal
+   */
+  constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>) {
+    super({
+      name: "ThrottlingException",
+      $fault: "client",
+      ...opts,
+    });
+    Object.setPrototypeOf(this, ThrottlingException.prototype);
+    this.serviceCode = opts.serviceCode;
+    this.quotaCode = opts.quotaCode;
+    this.retryAfterSeconds = opts.retryAfterSeconds;
+  }
+}
+
+/**
+ * @public
+ * <p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>
+ */
+export class ValidationException extends __BaseException {
+  readonly name: "ValidationException" = "ValidationException";
+  readonly $fault: "client" = "client";
+  /**
+   * @internal
+   */
+  constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>) {
+    super({
+      name: "ValidationException",
+      $fault: "client",
+      ...opts,
+    });
+    Object.setPrototypeOf(this, ValidationException.prototype);
+  }
+}
+
+/**
+ * @public
+ */
+export interface ListBaselinesInput {
+  /**
+   * @public
+   * <p>A pagination token.</p>
+   */
+  nextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of results to be shown.</p>
+   */
+  maxResults?: number;
+}
+
+/**
+ * @public
+ * <p>Returns a summary of information about a <code>Baseline</code> object.</p>
+ */
+export interface BaselineSummary {
+  /**
+   * @public
+   * <p>The full ARN of a Baseline.</p>
+   */
+  arn: string | undefined;
+
+  /**
+   * @public
+   * <p>The human-readable name of a Baseline.</p>
+   */
+  name: string | undefined;
+
+  /**
+   * @public
+   * <p>A summary description of a Baseline.</p>
+   */
+  description?: string;
+}
+
+/**
+ * @public
+ */
+export interface ListBaselinesOutput {
+  /**
+   * @public
+   * <p>A  list of <code>Baseline</code> object details.</p>
+   */
+  baselines: BaselineSummary[] | undefined;
+
+  /**
+   * @public
+   * <p>A pagination token.</p>
+   */
+  nextToken?: string;
+}
+
 /**
  * @public
  * <p>Updating or deleting the resource can cause an inconsistent state.</p>
@@ -48,226 +245,586 @@ export class ConflictException extends __BaseException {
 /**
  * @public
  */
-export interface DisableControlInput {
+export interface DisableControlInput {
+  /**
+   * @public
+   * <p>The ARN of the control. Only <b>Strongly recommended</b> and
+   *          <b>Elective</b> controls are permitted, with the exception of the
+   *          <b>Region deny</b> control. For information on how to find the <code>controlIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
+   */
+  controlIdentifier: string | undefined;
+
+  /**
+   * @public
+   * <p>The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
+   */
+  targetIdentifier: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface DisableControlOutput {
+  /**
+   * @public
+   * <p>The ID of the asynchronous operation, which is used to track status. The operation is
+   *          available for 90 days.</p>
+   */
+  operationIdentifier: string | undefined;
+}
+
+/**
+ * @public
+ * <p>The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.</p>
+ */
+export class ServiceQuotaExceededException extends __BaseException {
+  readonly name: "ServiceQuotaExceededException" = "ServiceQuotaExceededException";
+  readonly $fault: "client" = "client";
+  /**
+   * @internal
+   */
+  constructor(opts: __ExceptionOptionType<ServiceQuotaExceededException, __BaseException>) {
+    super({
+      name: "ServiceQuotaExceededException",
+      $fault: "client",
+      ...opts,
+    });
+    Object.setPrototypeOf(this, ServiceQuotaExceededException.prototype);
+  }
+}
+
+/**
+ * @public
+ * <p>A key/value pair, where <code>Key</code> is of type <code>String</code> and <code>Value</code> is of type <code>Document</code>.</p>
+ */
+export interface EnabledControlParameter {
+  /**
+   * @public
+   * <p>The key of a key/value pair.</p>
+   */
+  key: string | undefined;
+
+  /**
+   * @public
+   * <p>The value of a key/value pair.</p>
+   */
+  value: __DocumentType | undefined;
+}
+
+/**
+ * @public
+ */
+export interface EnableControlInput {
+  /**
+   * @public
+   * <p>The ARN of the control. Only <b>Strongly recommended</b> and
+   *          <b>Elective</b> controls are permitted, with the exception of the
+   *          <b>Region deny</b> control. For information on how to find the <code>controlIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
+   */
+  controlIdentifier: string | undefined;
+
+  /**
+   * @public
+   * <p>The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
+   */
+  targetIdentifier: string | undefined;
+
+  /**
+   * @public
+   * <p>Tags to be applied to the <code>EnabledControl</code> resource.</p>
+   */
+  tags?: Record<string, string>;
+
+  /**
+   * @public
+   * <p>A list of input parameter values, which are specified to configure the control when you enable it.</p>
+   */
+  parameters?: EnabledControlParameter[];
+}
+
+/**
+ * @public
+ */
+export interface EnableControlOutput {
+  /**
+   * @public
+   * <p>The ID of the asynchronous operation, which is used to track status. The operation is
+   *          available for 90 days.</p>
+   */
+  operationIdentifier: string | undefined;
+
+  /**
+   * @public
+   * <p>The ARN of the <code>EnabledControl</code> resource.</p>
+   */
+  arn?: string;
+}
+
+/**
+ * @public
+ */
+export interface DisableBaselineInput {
+  /**
+   * @public
+   * <p>Identifier of the <code>EnabledBaseline</code> resource to be deactivated, in ARN format.</p>
+   */
+  enabledBaselineIdentifier: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface DisableBaselineOutput {
+  /**
+   * @public
+   * <p>The ID (in UUID format) of the asynchronous <code>DisableBaseline</code> operation. This <code>operationIdentifier</code> is used to track status through calls to the <code>GetBaselineOperation</code> API.</p>
+   */
+  operationIdentifier: string | undefined;
+}
+
+/**
+ * @public
+ * <p>A key-value parameter to an <code>EnabledBaseline</code> resource.</p>
+ */
+export interface EnabledBaselineParameter {
+  /**
+   * @public
+   * <p>A string denoting the parameter key.</p>
+   */
+  key: string | undefined;
+
+  /**
+   * @public
+   * <p>A low-level <code>Document</code> object of any type (for example, a Java Object).</p>
+   */
+  value: __DocumentType | undefined;
+}
+
+/**
+ * @public
+ */
+export interface EnableBaselineInput {
+  /**
+   * @public
+   * <p>The specific version to be enabled of the specified baseline.</p>
+   */
+  baselineVersion: string | undefined;
+
+  /**
+   * @public
+   * <p>A list of <code>key-value</code> objects that specify enablement parameters, where <code>key</code> is a string and <code>value</code> is a document of any type.</p>
+   */
+  parameters?: EnabledBaselineParameter[];
+
+  /**
+   * @public
+   * <p>The ARN of the baseline to be enabled.</p>
+   */
+  baselineIdentifier: string | undefined;
+
+  /**
+   * @public
+   * <p>The ARN of the target on which the baseline will be enabled. Only OUs are supported as targets.</p>
+   */
+  targetIdentifier: string | undefined;
+
+  /**
+   * @public
+   * <p>Tags associated with input to <code>EnableBaseline</code>.</p>
+   */
+  tags?: Record<string, string>;
+}
+
+/**
+ * @public
+ */
+export interface EnableBaselineOutput {
+  /**
+   * @public
+   * <p>The ID (in UUID format) of the asynchronous <code>EnableBaseline</code> operation. This <code>operationIdentifier</code> is used to track status through calls to the <code>GetBaselineOperation</code> API.</p>
+   */
+  operationIdentifier: string | undefined;
+
+  /**
+   * @public
+   * <p>The ARN of the <code>EnabledBaseline</code> resource.</p>
+   */
+  arn: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface GetBaselineOperationInput {
+  /**
+   * @public
+   * <p>The operation ID returned from mutating asynchronous APIs (Enable, Disable, Update, Reset).</p>
+   */
+  operationIdentifier: string | undefined;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const BaselineOperationType = {
+  DISABLE_BASELINE: "DISABLE_BASELINE",
+  ENABLE_BASELINE: "ENABLE_BASELINE",
+  RESET_ENABLED_BASELINE: "RESET_ENABLED_BASELINE",
+  UPDATE_ENABLED_BASELINE: "UPDATE_ENABLED_BASELINE",
+} as const;
+
+/**
+ * @public
+ */
+export type BaselineOperationType = (typeof BaselineOperationType)[keyof typeof BaselineOperationType];
+
+/**
+ * @public
+ * @enum
+ */
+export const BaselineOperationStatus = {
+  FAILED: "FAILED",
+  IN_PROGRESS: "IN_PROGRESS",
+  SUCCEEDED: "SUCCEEDED",
+} as const;
+
+/**
+ * @public
+ */
+export type BaselineOperationStatus = (typeof BaselineOperationStatus)[keyof typeof BaselineOperationStatus];
+
+/**
+ * @public
+ * <p>An object of shape <code>BaselineOperation</code>, returning details about the specified <code>Baseline</code> operation ID.</p>
+ */
+export interface BaselineOperation {
+  /**
+   * @public
+   * <p>The identifier of the specified operation.</p>
+   */
+  operationIdentifier?: string;
+
+  /**
+   * @public
+   * <p>An enumerated type (<code>enum</code>) with possible values of <code>ENABLE_BASELINE</code>, <code>DISABLE_BASELINE</code>, <code>UPDATE_ENABLED_BASELINE</code>, or <code>RESET_ENABLED_BASELINE</code>.</p>
+   */
+  operationType?: BaselineOperationType;
+
+  /**
+   * @public
+   * <p>An enumerated type (<code>enum</code>) with possible values of <code>SUCCEEDED</code>, <code>FAILED</code>, or <code>IN_PROGRESS</code>.</p>
+   */
+  status?: BaselineOperationStatus;
+
+  /**
+   * @public
+   * <p>The start time of the operation, in ISO 8601 format.</p>
+   */
+  startTime?: Date;
+
+  /**
+   * @public
+   * <p>The end time of the operation (if applicable), in ISO 8601 format.</p>
+   */
+  endTime?: Date;
+
+  /**
+   * @public
+   * <p>A status message that gives more information about the operation's status, if applicable.</p>
+   */
+  statusMessage?: string;
+}
+
+/**
+ * @public
+ */
+export interface GetBaselineOperationOutput {
+  /**
+   * @public
+   * <p>A <code>baselineOperation</code> object that shows information about the specified operation ID.</p>
+   */
+  baselineOperation: BaselineOperation | undefined;
+}
+
+/**
+ * @public
+ */
+export interface GetEnabledBaselineInput {
+  /**
+   * @public
+   * <p>Identifier of the <code>EnabledBaseline</code> resource to be retrieved, in ARN format.</p>
+   */
+  enabledBaselineIdentifier: string | undefined;
+}
+
+/**
+ * @public
+ * <p>Summary of an applied parameter to an <code>EnabledBaseline</code> resource. </p>
+ */
+export interface EnabledBaselineParameterSummary {
+  /**
+   * @public
+   * <p>A string denoting the parameter key.</p>
+   */
+  key: string | undefined;
+
+  /**
+   * @public
+   * <p>A low-level document object of any type (for example, a Java Object).</p>
+   */
+  value: __DocumentType | undefined;
+}
+
+/**
+ * @public
+ * @enum
+ */
+export const EnablementStatus = {
+  FAILED: "FAILED",
+  SUCCEEDED: "SUCCEEDED",
+  UNDER_CHANGE: "UNDER_CHANGE",
+} as const;
+
+/**
+ * @public
+ */
+export type EnablementStatus = (typeof EnablementStatus)[keyof typeof EnablementStatus];
+
+/**
+ * @public
+ * <p>The deployment summary of the enabled control.</p>
+ */
+export interface EnablementStatusSummary {
   /**
    * @public
-   * <p>The ARN of the control. Only <b>Strongly recommended</b> and
-   *          <b>Elective</b> controls are permitted, with the exception of the
-   *          <b>landing zone Region deny</b> control. For information on how to find the <code>controlIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
+   * <p> The deployment status of the enabled control.</p>
+   *          <p>Valid values:</p>
+   *          <ul>
+   *             <li>
+   *                <p>
+   *                   <code>SUCCEEDED</code>: The <code>enabledControl</code> configuration was deployed successfully.</p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>UNDER_CHANGE</code>: The <code>enabledControl</code> configuration is changing. </p>
+   *             </li>
+   *             <li>
+   *                <p>
+   *                   <code>FAILED</code>: The <code>enabledControl</code> configuration failed to deploy.</p>
+   *             </li>
+   *          </ul>
    */
-  controlIdentifier: string | undefined;
+  status?: EnablementStatus;
 
   /**
    * @public
-   * <p>The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
+   * <p>The last operation identifier for the enabled control.</p>
    */
-  targetIdentifier: string | undefined;
+  lastOperationIdentifier?: string;
 }
 
 /**
  * @public
+ * <p>Details of the <code>EnabledBaseline</code> resource.</p>
  */
-export interface DisableControlOutput {
+export interface EnabledBaselineDetails {
   /**
    * @public
-   * <p>The ID of the asynchronous operation, which is used to track status. The operation is
-   *          available for 90 days.</p>
+   * <p>The ARN of the <code>EnabledBaseline</code> resource.</p>
    */
-  operationIdentifier: string | undefined;
+  arn: string | undefined;
+
+  /**
+   * @public
+   * <p>The specific <code>Baseline</code> enabled as part of the <code>EnabledBaseline</code> resource.</p>
+   */
+  baselineIdentifier: string | undefined;
+
+  /**
+   * @public
+   * <p>The enabled version of the <code>Baseline</code>.</p>
+   */
+  baselineVersion?: string;
+
+  /**
+   * @public
+   * <p>The target on which to enable the <code>Baseline</code>.</p>
+   */
+  targetIdentifier: string | undefined;
+
+  /**
+   * @public
+   * <p>The deployment summary of the enabled control.</p>
+   */
+  statusSummary: EnablementStatusSummary | undefined;
+
+  /**
+   * @public
+   * <p>Shows the parameters that are applied when enabling this <code>Baseline</code>.</p>
+   */
+  parameters?: EnabledBaselineParameterSummary[];
 }
 
 /**
  * @public
- * <p>An unexpected error occurred during processing of a request.</p>
  */
-export class InternalServerException extends __BaseException {
-  readonly name: "InternalServerException" = "InternalServerException";
-  readonly $fault: "server" = "server";
-  $retryable = {};
+export interface GetEnabledBaselineOutput {
   /**
-   * @internal
+   * @public
+   * <p>Details of the <code>EnabledBaseline</code> resource.</p>
    */
-  constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>) {
-    super({
-      name: "InternalServerException",
-      $fault: "server",
-      ...opts,
-    });
-    Object.setPrototypeOf(this, InternalServerException.prototype);
-  }
+  enabledBaselineDetails?: EnabledBaselineDetails;
 }
 
 /**
  * @public
- * <p>The request references a resource that does not exist.</p>
+ * <p>A filter applied on the <code>ListEnabledBaseline</code> operation. Allowed filters are <code>baselineIdentifiers</code> and <code>targetIdentifiers</code>. The filter can be applied for either, or both.</p>
  */
-export class ResourceNotFoundException extends __BaseException {
-  readonly name: "ResourceNotFoundException" = "ResourceNotFoundException";
-  readonly $fault: "client" = "client";
+export interface EnabledBaselineFilter {
   /**
-   * @internal
+   * @public
+   * <p>Identifiers for the targets of the <code>Baseline</code> filter operation.</p>
    */
-  constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>) {
-    super({
-      name: "ResourceNotFoundException",
-      $fault: "client",
-      ...opts,
-    });
-    Object.setPrototypeOf(this, ResourceNotFoundException.prototype);
-  }
+  targetIdentifiers?: string[];
+
+  /**
+   * @public
+   * <p>Identifiers for the <code>Baseline</code> objects returned as part of the filter operation.</p>
+   */
+  baselineIdentifiers?: string[];
 }
 
 /**
  * @public
- * <p>The request would cause a service quota to be exceeded. The limit is 10 concurrent operations.</p>
  */
-export class ServiceQuotaExceededException extends __BaseException {
-  readonly name: "ServiceQuotaExceededException" = "ServiceQuotaExceededException";
-  readonly $fault: "client" = "client";
+export interface ListEnabledBaselinesInput {
   /**
-   * @internal
+   * @public
+   * <p>A filter applied on the <code>ListEnabledBaseline</code> operation. Allowed filters are <code>baselineIdentifiers</code> and <code>targetIdentifiers</code>. The filter can be applied for either, or both.</p>
    */
-  constructor(opts: __ExceptionOptionType<ServiceQuotaExceededException, __BaseException>) {
-    super({
-      name: "ServiceQuotaExceededException",
-      $fault: "client",
-      ...opts,
-    });
-    Object.setPrototypeOf(this, ServiceQuotaExceededException.prototype);
-  }
+  filter?: EnabledBaselineFilter;
+
+  /**
+   * @public
+   * <p>A pagination token.</p>
+   */
+  nextToken?: string;
+
+  /**
+   * @public
+   * <p>The maximum number of results to be shown.</p>
+   */
+  maxResults?: number;
 }
 
 /**
  * @public
- * <p>The request was denied due to request throttling.</p>
+ * <p>Returns a summary of information about an <code>EnabledBaseline</code> object.</p>
  */
-export class ThrottlingException extends __BaseException {
-  readonly name: "ThrottlingException" = "ThrottlingException";
-  readonly $fault: "client" = "client";
-  $retryable = {
-    throttling: true,
-  };
+export interface EnabledBaselineSummary {
   /**
    * @public
-   * <p>The ID of the service that is associated with the error.
-   *       </p>
+   * <p>The ARN of the <code>EnabledBaseline</code> resource</p>
    */
-  serviceCode?: string;
+  arn: string | undefined;
 
   /**
    * @public
-   * <p>The ID of the service quota that was exceeded.</p>
+   * <p>The specific baseline that is enabled as part of the <code>EnabledBaseline</code> resource.</p>
    */
-  quotaCode?: string;
+  baselineIdentifier: string | undefined;
 
   /**
    * @public
-   * <p>The number of seconds to wait before retrying.</p>
+   * <p>The enabled version of the baseline.</p>
    */
-  retryAfterSeconds?: number;
+  baselineVersion?: string;
 
   /**
-   * @internal
+   * @public
+   * <p>The target upon which the baseline is enabled.</p>
    */
-  constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>) {
-    super({
-      name: "ThrottlingException",
-      $fault: "client",
-      ...opts,
-    });
-    Object.setPrototypeOf(this, ThrottlingException.prototype);
-    this.serviceCode = opts.serviceCode;
-    this.quotaCode = opts.quotaCode;
-    this.retryAfterSeconds = opts.retryAfterSeconds;
-  }
-}
+  targetIdentifier: string | undefined;
 
-/**
- * @public
- * <p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>
- */
-export class ValidationException extends __BaseException {
-  readonly name: "ValidationException" = "ValidationException";
-  readonly $fault: "client" = "client";
   /**
-   * @internal
+   * @public
+   * <p>The deployment summary of the enabled control.</p>
    */
-  constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>) {
-    super({
-      name: "ValidationException",
-      $fault: "client",
-      ...opts,
-    });
-    Object.setPrototypeOf(this, ValidationException.prototype);
-  }
+  statusSummary: EnablementStatusSummary | undefined;
 }
 
 /**
  * @public
- * <p> A set of parameters that configure the behavior of the enabled control. A key/value pair, where <code>Key</code> is of type <code>String</code> and <code>Value</code> is of type <code>Document</code>.</p>
  */
-export interface EnabledControlParameter {
+export interface ListEnabledBaselinesOutput {
   /**
    * @public
-   * <p>The key of a key/value pair. It is of type <code>string</code>.</p>
+   * <p>Retuens a list of summaries of <code>EnabledBaseline</code> resources.</p>
    */
-  key: string | undefined;
+  enabledBaselines: EnabledBaselineSummary[] | undefined;
 
   /**
    * @public
-   * <p>The value of a key/value pair. It can be of type <code>array</code>
-   *             <code>string</code>, <code>number</code>, <code>object</code>, or <code>boolean</code>. </p>
+   * <p>A pagination token.</p>
    */
-  value: __DocumentType | undefined;
+  nextToken?: string;
 }
 
 /**
  * @public
  */
-export interface EnableControlInput {
+export interface ResetEnabledBaselineInput {
   /**
    * @public
-   * <p>The ARN of the control. Only <b>Strongly recommended</b> and
-   *          <b>Elective</b> controls are permitted, with the exception of the
-   *          <b>landing zone Region deny</b> control. For information on how to find the <code>controlIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
+   * <p>Specifies the ID of the <code>EnabledBaseline</code> resource to be re-enabled, in ARN format.</p>
    */
-  controlIdentifier: string | undefined;
+  enabledBaselineIdentifier: string | undefined;
+}
 
+/**
+ * @public
+ */
+export interface ResetEnabledBaselineOutput {
   /**
    * @public
-   * <p>The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href="https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html">the overview page</a>.</p>
+   * <p>The ID (in UUID format) of the asynchronous <code>ResetEnabledBaseline</code> operation. This <code>operationIdentifier</code> is used to track status through calls to the <code>GetBaselineOperation</code> API.</p>
    */
-  targetIdentifier: string | undefined;
+  operationIdentifier: string | undefined;
+}
+
+/**
+ * @public
+ */
+export interface UpdateEnabledBaselineInput {
+  /**
+   * @public
+   * <p>Specifies the new <code>Baseline</code> version, to which the <code>EnabledBaseline</code> should be updated.</p>
+   */
+  baselineVersion: string | undefined;
 
   /**
    * @public
-   * <p>Tags to be applied to the <code>EnabledControl</code> resource.</p>
+   * <p>Parameters to apply when making an update.</p>
    */
-  tags?: Record<string, string>;
+  parameters?: EnabledBaselineParameter[];
 
   /**
    * @public
-   * <p>An array of <code>EnabledControlParameter</code> objects</p>
+   * <p>Specifies the <code>EnabledBaseline</code> resource to be updated.</p>
    */
-  parameters?: EnabledControlParameter[];
+  enabledBaselineIdentifier: string | undefined;
 }
 
 /**
  * @public
  */
-export interface EnableControlOutput {
+export interface UpdateEnabledBaselineOutput {
   /**
    * @public
-   * <p>The ID of the asynchronous operation, which is used to track status. The operation is
-   *          available for 90 days.</p>
+   * <p>The ID (in UUID format) of the asynchronous <code>UpdateEnabledBaseline</code> operation. This <code>operationIdentifier</code> is used to track status through calls to the <code>GetBaselineOperation</code> API.</p>
    */
   operationIdentifier: string | undefined;
-
-  /**
-   * @public
-   * <p>The ARN of the <code>EnabledControl</code> resource.</p>
-   */
-  arn?: string;
 }
 
 /**
@@ -445,55 +1002,7 @@ export interface EnabledControlParameterSummary {
 
 /**
  * @public
- * @enum
- */
-export const EnablementStatus = {
-  FAILED: "FAILED",
-  SUCCEEDED: "SUCCEEDED",
-  UNDER_CHANGE: "UNDER_CHANGE",
-} as const;
-
-/**
- * @public
- */
-export type EnablementStatus = (typeof EnablementStatus)[keyof typeof EnablementStatus];
-
-/**
- * @public
- * <p>The deployment summary of the enabled control.</p>
- */
-export interface EnablementStatusSummary {
-  /**
-   * @public
-   * <p> The deployment status of the enabled control.</p>
-   *          <p>Valid values:</p>
-   *          <ul>
-   *             <li>
-   *                <p>
-   *                   <code>SUCCEEDED</code>: The <code>enabledControl</code> configuration was deployed successfully.</p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>UNDER_CHANGE</code>: The <code>enabledControl</code> configuration is changing. </p>
-   *             </li>
-   *             <li>
-   *                <p>
-   *                   <code>FAILED</code>: The <code>enabledControl</code> configuration failed to deploy.</p>
-   *             </li>
-   *          </ul>
-   */
-  status?: EnablementStatus;
-
-  /**
-   * @public
-   * <p>The last operation identifier for the enabled control.</p>
-   */
-  lastOperationIdentifier?: string;
-}
-
-/**
- * @public
- * <p>An  Amazon Web Services Region in which  Amazon Web Services Control Tower expects to find the control deployed. </p>
+ * <p>An Amazon Web Services Region in which Amazon Web Services Control Tower expects to find the control deployed. </p>
  *          <p>The expected Regions are based on the Regions that are governed by the landing zone. In
  *             certain cases, a control is not actually enabled in the Region as expected, such as during
  *             drift, or <a href="https://docs.aws.amazon.com/controltower/latest/userguide/region-how.html#mixed-governance">mixed governance</a>.</p>
@@ -577,8 +1086,8 @@ export interface CreateLandingZoneInput {
 
   /**
    * @public
-   * <p>The manifest JSON file is a text file that describes your Amazon Web Services resources. For examples, review
-   *          <a href="https://docs.aws.amazon.com/controltower/latest/userguide/lz-api-launch">Launch your landing zone</a>. </p>
+   * <p>The manifest.yaml file is a text file that describes your Amazon Web Services resources. For examples, review
+   *          <a href="https://docs.aws.amazon.com/controltower/latest/userguide/the-manifest-file">The manifest file</a>. </p>
    */
   manifest: __DocumentType | undefined;
 
@@ -710,7 +1219,7 @@ export interface LandingZoneDetail {
 
   /**
    * @public
-   * <p>The landing zone manifest JSON text file that specifies the landing zone configurations. </p>
+   * <p>The landing zone <code>manifest.yaml</code> text file that specifies the landing zone configurations. </p>
    */
   manifest: __DocumentType | undefined;
 
@@ -722,7 +1231,7 @@ export interface LandingZoneDetail {
 
   /**
    * @public
-   * <p>The landing zone deployment status.</p>
+   * <p>The landing zone deployment status. One of <code>ACTIVE</code>, <code>PROCESSING</code>, <code>FAILED</code>.</p>
    */
   status?: LandingZoneStatus;
 
@@ -953,8 +1462,8 @@ export interface UpdateLandingZoneInput {
 
   /**
    * @public
-   * <p>The manifest JSON file is a text file that describes your Amazon Web Services resources. For examples, review
-   *          <a href="https://docs.aws.amazon.com/controltower/latest/userguide/lz-api-launch">Launch your landing zone</a>.</p>
+   * <p>The <code>manifest.yaml</code> file is a text file that describes your Amazon Web Services resources. For examples, review
+   *          <a href="https://docs.aws.amazon.com/controltower/latest/userguide/the-manifest-file">The manifest file</a>.</p>
    */
   manifest: __DocumentType | undefined;
 
diff --git a/clients/client-controltower/src/pagination/ListBaselinesPaginator.ts b/clients/client-controltower/src/pagination/ListBaselinesPaginator.ts
new file mode 100644
index 000000000000..8a47fd725982
--- /dev/null
+++ b/clients/client-controltower/src/pagination/ListBaselinesPaginator.ts
@@ -0,0 +1,24 @@
+// smithy-typescript generated code
+import { createPaginator } from "@smithy/core";
+import { Paginator } from "@smithy/types";
+
+import {
+  ListBaselinesCommand,
+  ListBaselinesCommandInput,
+  ListBaselinesCommandOutput,
+} from "../commands/ListBaselinesCommand";
+import { ControlTowerClient } from "../ControlTowerClient";
+import { ControlTowerPaginationConfiguration } from "./Interfaces";
+
+/**
+ * @public
+ */
+export const paginateListBaselines: (
+  config: ControlTowerPaginationConfiguration,
+  input: ListBaselinesCommandInput,
+  ...rest: any[]
+) => Paginator<ListBaselinesCommandOutput> = createPaginator<
+  ControlTowerPaginationConfiguration,
+  ListBaselinesCommandInput,
+  ListBaselinesCommandOutput
+>(ControlTowerClient, ListBaselinesCommand, "nextToken", "nextToken", "maxResults");
diff --git a/clients/client-controltower/src/pagination/ListEnabledBaselinesPaginator.ts b/clients/client-controltower/src/pagination/ListEnabledBaselinesPaginator.ts
new file mode 100644
index 000000000000..6efa2105b22e
--- /dev/null
+++ b/clients/client-controltower/src/pagination/ListEnabledBaselinesPaginator.ts
@@ -0,0 +1,24 @@
+// smithy-typescript generated code
+import { createPaginator } from "@smithy/core";
+import { Paginator } from "@smithy/types";
+
+import {
+  ListEnabledBaselinesCommand,
+  ListEnabledBaselinesCommandInput,
+  ListEnabledBaselinesCommandOutput,
+} from "../commands/ListEnabledBaselinesCommand";
+import { ControlTowerClient } from "../ControlTowerClient";
+import { ControlTowerPaginationConfiguration } from "./Interfaces";
+
+/**
+ * @public
+ */
+export const paginateListEnabledBaselines: (
+  config: ControlTowerPaginationConfiguration,
+  input: ListEnabledBaselinesCommandInput,
+  ...rest: any[]
+) => Paginator<ListEnabledBaselinesCommandOutput> = createPaginator<
+  ControlTowerPaginationConfiguration,
+  ListEnabledBaselinesCommandInput,
+  ListEnabledBaselinesCommandOutput
+>(ControlTowerClient, ListEnabledBaselinesCommand, "nextToken", "nextToken", "maxResults");
diff --git a/clients/client-controltower/src/pagination/index.ts b/clients/client-controltower/src/pagination/index.ts
index 4bb9e2b9088f..1ef3dded70bd 100644
--- a/clients/client-controltower/src/pagination/index.ts
+++ b/clients/client-controltower/src/pagination/index.ts
@@ -1,4 +1,6 @@
 // smithy-typescript generated code
 export * from "./Interfaces";
+export * from "./ListBaselinesPaginator";
+export * from "./ListEnabledBaselinesPaginator";
 export * from "./ListEnabledControlsPaginator";
 export * from "./ListLandingZonesPaginator";
diff --git a/clients/client-controltower/src/protocols/Aws_restJson1.ts b/clients/client-controltower/src/protocols/Aws_restJson1.ts
index 62586b27b11e..e563d29e7933 100644
--- a/clients/client-controltower/src/protocols/Aws_restJson1.ts
+++ b/clients/client-controltower/src/protocols/Aws_restJson1.ts
@@ -25,18 +25,31 @@ import {
 
 import { CreateLandingZoneCommandInput, CreateLandingZoneCommandOutput } from "../commands/CreateLandingZoneCommand";
 import { DeleteLandingZoneCommandInput, DeleteLandingZoneCommandOutput } from "../commands/DeleteLandingZoneCommand";
+import { DisableBaselineCommandInput, DisableBaselineCommandOutput } from "../commands/DisableBaselineCommand";
 import { DisableControlCommandInput, DisableControlCommandOutput } from "../commands/DisableControlCommand";
+import { EnableBaselineCommandInput, EnableBaselineCommandOutput } from "../commands/EnableBaselineCommand";
 import { EnableControlCommandInput, EnableControlCommandOutput } from "../commands/EnableControlCommand";
+import { GetBaselineCommandInput, GetBaselineCommandOutput } from "../commands/GetBaselineCommand";
+import {
+  GetBaselineOperationCommandInput,
+  GetBaselineOperationCommandOutput,
+} from "../commands/GetBaselineOperationCommand";
 import {
   GetControlOperationCommandInput,
   GetControlOperationCommandOutput,
 } from "../commands/GetControlOperationCommand";
+import { GetEnabledBaselineCommandInput, GetEnabledBaselineCommandOutput } from "../commands/GetEnabledBaselineCommand";
 import { GetEnabledControlCommandInput, GetEnabledControlCommandOutput } from "../commands/GetEnabledControlCommand";
 import { GetLandingZoneCommandInput, GetLandingZoneCommandOutput } from "../commands/GetLandingZoneCommand";
 import {
   GetLandingZoneOperationCommandInput,
   GetLandingZoneOperationCommandOutput,
 } from "../commands/GetLandingZoneOperationCommand";
+import { ListBaselinesCommandInput, ListBaselinesCommandOutput } from "../commands/ListBaselinesCommand";
+import {
+  ListEnabledBaselinesCommandInput,
+  ListEnabledBaselinesCommandOutput,
+} from "../commands/ListEnabledBaselinesCommand";
 import {
   ListEnabledControlsCommandInput,
   ListEnabledControlsCommandOutput,
@@ -46,9 +59,17 @@ import {
   ListTagsForResourceCommandInput,
   ListTagsForResourceCommandOutput,
 } from "../commands/ListTagsForResourceCommand";
+import {
+  ResetEnabledBaselineCommandInput,
+  ResetEnabledBaselineCommandOutput,
+} from "../commands/ResetEnabledBaselineCommand";
 import { ResetLandingZoneCommandInput, ResetLandingZoneCommandOutput } from "../commands/ResetLandingZoneCommand";
 import { TagResourceCommandInput, TagResourceCommandOutput } from "../commands/TagResourceCommand";
 import { UntagResourceCommandInput, UntagResourceCommandOutput } from "../commands/UntagResourceCommand";
+import {
+  UpdateEnabledBaselineCommandInput,
+  UpdateEnabledBaselineCommandOutput,
+} from "../commands/UpdateEnabledBaselineCommand";
 import {
   UpdateEnabledControlCommandInput,
   UpdateEnabledControlCommandOutput,
@@ -57,8 +78,13 @@ import { UpdateLandingZoneCommandInput, UpdateLandingZoneCommandOutput } from ".
 import { ControlTowerServiceException as __BaseException } from "../models/ControlTowerServiceException";
 import {
   AccessDeniedException,
+  BaselineOperation,
   ConflictException,
   ControlOperation,
+  EnabledBaselineDetails,
+  EnabledBaselineFilter,
+  EnabledBaselineParameter,
+  EnabledBaselineParameterSummary,
   EnabledControlDetails,
   EnabledControlParameter,
   EnabledControlParameterSummary,
@@ -117,6 +143,28 @@ export const se_DeleteLandingZoneCommand = async (
   return b.build();
 };
 
+/**
+ * serializeAws_restJson1DisableBaselineCommand
+ */
+export const se_DisableBaselineCommand = async (
+  input: DisableBaselineCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const b = rb(input, context);
+  const headers: any = {
+    "content-type": "application/json",
+  };
+  b.bp("/disable-baseline");
+  let body: any;
+  body = JSON.stringify(
+    take(input, {
+      enabledBaselineIdentifier: [],
+    })
+  );
+  b.m("POST").h(headers).b(body);
+  return b.build();
+};
+
 /**
  * serializeAws_restJson1DisableControlCommand
  */
@@ -140,6 +188,32 @@ export const se_DisableControlCommand = async (
   return b.build();
 };
 
+/**
+ * serializeAws_restJson1EnableBaselineCommand
+ */
+export const se_EnableBaselineCommand = async (
+  input: EnableBaselineCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const b = rb(input, context);
+  const headers: any = {
+    "content-type": "application/json",
+  };
+  b.bp("/enable-baseline");
+  let body: any;
+  body = JSON.stringify(
+    take(input, {
+      baselineIdentifier: [],
+      baselineVersion: [],
+      parameters: (_) => se_EnabledBaselineParameters(_, context),
+      tags: (_) => _json(_),
+      targetIdentifier: [],
+    })
+  );
+  b.m("POST").h(headers).b(body);
+  return b.build();
+};
+
 /**
  * serializeAws_restJson1EnableControlCommand
  */
@@ -165,6 +239,50 @@ export const se_EnableControlCommand = async (
   return b.build();
 };
 
+/**
+ * serializeAws_restJson1GetBaselineCommand
+ */
+export const se_GetBaselineCommand = async (
+  input: GetBaselineCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const b = rb(input, context);
+  const headers: any = {
+    "content-type": "application/json",
+  };
+  b.bp("/get-baseline");
+  let body: any;
+  body = JSON.stringify(
+    take(input, {
+      baselineIdentifier: [],
+    })
+  );
+  b.m("POST").h(headers).b(body);
+  return b.build();
+};
+
+/**
+ * serializeAws_restJson1GetBaselineOperationCommand
+ */
+export const se_GetBaselineOperationCommand = async (
+  input: GetBaselineOperationCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const b = rb(input, context);
+  const headers: any = {
+    "content-type": "application/json",
+  };
+  b.bp("/get-baseline-operation");
+  let body: any;
+  body = JSON.stringify(
+    take(input, {
+      operationIdentifier: [],
+    })
+  );
+  b.m("POST").h(headers).b(body);
+  return b.build();
+};
+
 /**
  * serializeAws_restJson1GetControlOperationCommand
  */
@@ -187,6 +305,28 @@ export const se_GetControlOperationCommand = async (
   return b.build();
 };
 
+/**
+ * serializeAws_restJson1GetEnabledBaselineCommand
+ */
+export const se_GetEnabledBaselineCommand = async (
+  input: GetEnabledBaselineCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const b = rb(input, context);
+  const headers: any = {
+    "content-type": "application/json",
+  };
+  b.bp("/get-enabled-baseline");
+  let body: any;
+  body = JSON.stringify(
+    take(input, {
+      enabledBaselineIdentifier: [],
+    })
+  );
+  b.m("POST").h(headers).b(body);
+  return b.build();
+};
+
 /**
  * serializeAws_restJson1GetEnabledControlCommand
  */
@@ -253,6 +393,53 @@ export const se_GetLandingZoneOperationCommand = async (
   return b.build();
 };
 
+/**
+ * serializeAws_restJson1ListBaselinesCommand
+ */
+export const se_ListBaselinesCommand = async (
+  input: ListBaselinesCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const b = rb(input, context);
+  const headers: any = {
+    "content-type": "application/json",
+  };
+  b.bp("/list-baselines");
+  let body: any;
+  body = JSON.stringify(
+    take(input, {
+      maxResults: [],
+      nextToken: [],
+    })
+  );
+  b.m("POST").h(headers).b(body);
+  return b.build();
+};
+
+/**
+ * serializeAws_restJson1ListEnabledBaselinesCommand
+ */
+export const se_ListEnabledBaselinesCommand = async (
+  input: ListEnabledBaselinesCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const b = rb(input, context);
+  const headers: any = {
+    "content-type": "application/json",
+  };
+  b.bp("/list-enabled-baselines");
+  let body: any;
+  body = JSON.stringify(
+    take(input, {
+      filter: (_) => _json(_),
+      maxResults: [],
+      nextToken: [],
+    })
+  );
+  b.m("POST").h(headers).b(body);
+  return b.build();
+};
+
 /**
  * serializeAws_restJson1ListEnabledControlsCommand
  */
@@ -316,6 +503,28 @@ export const se_ListTagsForResourceCommand = async (
   return b.build();
 };
 
+/**
+ * serializeAws_restJson1ResetEnabledBaselineCommand
+ */
+export const se_ResetEnabledBaselineCommand = async (
+  input: ResetEnabledBaselineCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const b = rb(input, context);
+  const headers: any = {
+    "content-type": "application/json",
+  };
+  b.bp("/reset-enabled-baseline");
+  let body: any;
+  body = JSON.stringify(
+    take(input, {
+      enabledBaselineIdentifier: [],
+    })
+  );
+  b.m("POST").h(headers).b(body);
+  return b.build();
+};
+
 /**
  * serializeAws_restJson1ResetLandingZoneCommand
  */
@@ -383,6 +592,30 @@ export const se_UntagResourceCommand = async (
   return b.build();
 };
 
+/**
+ * serializeAws_restJson1UpdateEnabledBaselineCommand
+ */
+export const se_UpdateEnabledBaselineCommand = async (
+  input: UpdateEnabledBaselineCommandInput,
+  context: __SerdeContext
+): Promise<__HttpRequest> => {
+  const b = rb(input, context);
+  const headers: any = {
+    "content-type": "application/json",
+  };
+  b.bp("/update-enabled-baseline");
+  let body: any;
+  body = JSON.stringify(
+    take(input, {
+      baselineVersion: [],
+      enabledBaselineIdentifier: [],
+      parameters: (_) => se_EnabledBaselineParameters(_, context),
+    })
+  );
+  b.m("POST").h(headers).b(body);
+  return b.build();
+};
+
 /**
  * serializeAws_restJson1UpdateEnabledControlCommand
  */
@@ -473,6 +706,27 @@ export const de_DeleteLandingZoneCommand = async (
   return contents;
 };
 
+/**
+ * deserializeAws_restJson1DisableBaselineCommand
+ */
+export const de_DisableBaselineCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<DisableBaselineCommandOutput> => {
+  if (output.statusCode !== 200 && output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents: any = map({
+    $metadata: deserializeMetadata(output),
+  });
+  const data: Record<string, any> = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+  const doc = take(data, {
+    operationIdentifier: __expectString,
+  });
+  Object.assign(contents, doc);
+  return contents;
+};
+
 /**
  * deserializeAws_restJson1DisableControlCommand
  */
@@ -494,6 +748,28 @@ export const de_DisableControlCommand = async (
   return contents;
 };
 
+/**
+ * deserializeAws_restJson1EnableBaselineCommand
+ */
+export const de_EnableBaselineCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<EnableBaselineCommandOutput> => {
+  if (output.statusCode !== 200 && output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents: any = map({
+    $metadata: deserializeMetadata(output),
+  });
+  const data: Record<string, any> = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+  const doc = take(data, {
+    arn: __expectString,
+    operationIdentifier: __expectString,
+  });
+  Object.assign(contents, doc);
+  return contents;
+};
+
 /**
  * deserializeAws_restJson1EnableControlCommand
  */
@@ -516,6 +792,50 @@ export const de_EnableControlCommand = async (
   return contents;
 };
 
+/**
+ * deserializeAws_restJson1GetBaselineCommand
+ */
+export const de_GetBaselineCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<GetBaselineCommandOutput> => {
+  if (output.statusCode !== 200 && output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents: any = map({
+    $metadata: deserializeMetadata(output),
+  });
+  const data: Record<string, any> = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+  const doc = take(data, {
+    arn: __expectString,
+    description: __expectString,
+    name: __expectString,
+  });
+  Object.assign(contents, doc);
+  return contents;
+};
+
+/**
+ * deserializeAws_restJson1GetBaselineOperationCommand
+ */
+export const de_GetBaselineOperationCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<GetBaselineOperationCommandOutput> => {
+  if (output.statusCode !== 200 && output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents: any = map({
+    $metadata: deserializeMetadata(output),
+  });
+  const data: Record<string, any> = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+  const doc = take(data, {
+    baselineOperation: (_) => de_BaselineOperation(_, context),
+  });
+  Object.assign(contents, doc);
+  return contents;
+};
+
 /**
  * deserializeAws_restJson1GetControlOperationCommand
  */
@@ -537,6 +857,27 @@ export const de_GetControlOperationCommand = async (
   return contents;
 };
 
+/**
+ * deserializeAws_restJson1GetEnabledBaselineCommand
+ */
+export const de_GetEnabledBaselineCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<GetEnabledBaselineCommandOutput> => {
+  if (output.statusCode !== 200 && output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents: any = map({
+    $metadata: deserializeMetadata(output),
+  });
+  const data: Record<string, any> = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+  const doc = take(data, {
+    enabledBaselineDetails: (_) => de_EnabledBaselineDetails(_, context),
+  });
+  Object.assign(contents, doc);
+  return contents;
+};
+
 /**
  * deserializeAws_restJson1GetEnabledControlCommand
  */
@@ -600,6 +941,50 @@ export const de_GetLandingZoneOperationCommand = async (
   return contents;
 };
 
+/**
+ * deserializeAws_restJson1ListBaselinesCommand
+ */
+export const de_ListBaselinesCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<ListBaselinesCommandOutput> => {
+  if (output.statusCode !== 200 && output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents: any = map({
+    $metadata: deserializeMetadata(output),
+  });
+  const data: Record<string, any> = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+  const doc = take(data, {
+    baselines: _json,
+    nextToken: __expectString,
+  });
+  Object.assign(contents, doc);
+  return contents;
+};
+
+/**
+ * deserializeAws_restJson1ListEnabledBaselinesCommand
+ */
+export const de_ListEnabledBaselinesCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<ListEnabledBaselinesCommandOutput> => {
+  if (output.statusCode !== 200 && output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents: any = map({
+    $metadata: deserializeMetadata(output),
+  });
+  const data: Record<string, any> = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+  const doc = take(data, {
+    enabledBaselines: _json,
+    nextToken: __expectString,
+  });
+  Object.assign(contents, doc);
+  return contents;
+};
+
 /**
  * deserializeAws_restJson1ListEnabledControlsCommand
  */
@@ -665,6 +1050,27 @@ export const de_ListTagsForResourceCommand = async (
   return contents;
 };
 
+/**
+ * deserializeAws_restJson1ResetEnabledBaselineCommand
+ */
+export const de_ResetEnabledBaselineCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<ResetEnabledBaselineCommandOutput> => {
+  if (output.statusCode !== 200 && output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents: any = map({
+    $metadata: deserializeMetadata(output),
+  });
+  const data: Record<string, any> = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+  const doc = take(data, {
+    operationIdentifier: __expectString,
+  });
+  Object.assign(contents, doc);
+  return contents;
+};
+
 /**
  * deserializeAws_restJson1ResetLandingZoneCommand
  */
@@ -720,6 +1126,27 @@ export const de_UntagResourceCommand = async (
   return contents;
 };
 
+/**
+ * deserializeAws_restJson1UpdateEnabledBaselineCommand
+ */
+export const de_UpdateEnabledBaselineCommand = async (
+  output: __HttpResponse,
+  context: __SerdeContext
+): Promise<UpdateEnabledBaselineCommandOutput> => {
+  if (output.statusCode !== 200 && output.statusCode >= 300) {
+    return de_CommandError(output, context);
+  }
+  const contents: any = map({
+    $metadata: deserializeMetadata(output),
+  });
+  const data: Record<string, any> = __expectNonNull(__expectObject(await parseBody(output.body, context)), "body");
+  const doc = take(data, {
+    operationIdentifier: __expectString,
+  });
+  Object.assign(contents, doc);
+  return contents;
+};
+
 /**
  * deserializeAws_restJson1UpdateEnabledControlCommand
  */
@@ -939,6 +1366,40 @@ const de_ValidationExceptionRes = async (parsedOutput: any, context: __SerdeCont
   return __decorateServiceException(exception, parsedOutput.body);
 };
 
+// se_EnabledBaselineBaselineIdentifiers omitted.
+
+// se_EnabledBaselineFilter omitted.
+
+/**
+ * serializeAws_restJson1EnabledBaselineParameter
+ */
+const se_EnabledBaselineParameter = (input: EnabledBaselineParameter, context: __SerdeContext): any => {
+  return take(input, {
+    key: [],
+    value: (_) => se_EnabledBaselineParameterDocument(_, context),
+  });
+};
+
+/**
+ * serializeAws_restJson1EnabledBaselineParameterDocument
+ */
+const se_EnabledBaselineParameterDocument = (input: __DocumentType, context: __SerdeContext): any => {
+  return input;
+};
+
+/**
+ * serializeAws_restJson1EnabledBaselineParameters
+ */
+const se_EnabledBaselineParameters = (input: EnabledBaselineParameter[], context: __SerdeContext): any => {
+  return input
+    .filter((e: any) => e != null)
+    .map((entry) => {
+      return se_EnabledBaselineParameter(entry, context);
+    });
+};
+
+// se_EnabledBaselineTargetIdentifiers omitted.
+
 /**
  * serializeAws_restJson1EnabledControlParameter
  */
@@ -976,6 +1437,24 @@ const se_Document = (input: __DocumentType, context: __SerdeContext): any => {
   return input;
 };
 
+/**
+ * deserializeAws_restJson1BaselineOperation
+ */
+const de_BaselineOperation = (output: any, context: __SerdeContext): BaselineOperation => {
+  return take(output, {
+    endTime: (_: any) => __expectNonNull(__parseRfc3339DateTimeWithOffset(_)),
+    operationIdentifier: __expectString,
+    operationType: __expectString,
+    startTime: (_: any) => __expectNonNull(__parseRfc3339DateTimeWithOffset(_)),
+    status: __expectString,
+    statusMessage: __expectString,
+  }) as any;
+};
+
+// de_Baselines omitted.
+
+// de_BaselineSummary omitted.
+
 /**
  * deserializeAws_restJson1ControlOperation
  */
@@ -991,6 +1470,56 @@ const de_ControlOperation = (output: any, context: __SerdeContext): ControlOpera
 
 // de_DriftStatusSummary omitted.
 
+/**
+ * deserializeAws_restJson1EnabledBaselineDetails
+ */
+const de_EnabledBaselineDetails = (output: any, context: __SerdeContext): EnabledBaselineDetails => {
+  return take(output, {
+    arn: __expectString,
+    baselineIdentifier: __expectString,
+    baselineVersion: __expectString,
+    parameters: (_: any) => de_EnabledBaselineParameterSummaries(_, context),
+    statusSummary: _json,
+    targetIdentifier: __expectString,
+  }) as any;
+};
+
+/**
+ * deserializeAws_restJson1EnabledBaselineParameterDocument
+ */
+const de_EnabledBaselineParameterDocument = (output: any, context: __SerdeContext): __DocumentType => {
+  return output;
+};
+
+/**
+ * deserializeAws_restJson1EnabledBaselineParameterSummaries
+ */
+const de_EnabledBaselineParameterSummaries = (
+  output: any,
+  context: __SerdeContext
+): EnabledBaselineParameterSummary[] => {
+  const retVal = (output || [])
+    .filter((e: any) => e != null)
+    .map((entry: any) => {
+      return de_EnabledBaselineParameterSummary(entry, context);
+    });
+  return retVal;
+};
+
+/**
+ * deserializeAws_restJson1EnabledBaselineParameterSummary
+ */
+const de_EnabledBaselineParameterSummary = (output: any, context: __SerdeContext): EnabledBaselineParameterSummary => {
+  return take(output, {
+    key: __expectString,
+    value: (_: any) => de_EnabledBaselineParameterDocument(_, context),
+  }) as any;
+};
+
+// de_EnabledBaselines omitted.
+
+// de_EnabledBaselineSummary omitted.
+
 /**
  * deserializeAws_restJson1EnabledControlDetails
  */
diff --git a/codegen/sdk-codegen/aws-models/controltower.json b/codegen/sdk-codegen/aws-models/controltower.json
index 15d9d4edc924..864e7d3c793a 100644
--- a/codegen/sdk-codegen/aws-models/controltower.json
+++ b/codegen/sdk-codegen/aws-models/controltower.json
@@ -34,6 +34,12 @@
         }
       ],
       "resources": [
+        {
+          "target": "com.amazonaws.controltower#BaselineResource"
+        },
+        {
+          "target": "com.amazonaws.controltower#EnabledBaselineResource"
+        },
         {
           "target": "com.amazonaws.controltower#LandingZoneResource"
         }
@@ -66,7 +72,7 @@
           ],
           "additionalExposedHeaders": ["x-amzn-errortype", "x-amzn-requestid", "x-amzn-trace-id"]
         },
-        "smithy.api#documentation": "<p>These interfaces allow you to apply the  Amazon Web Services library of pre-defined\n         <i>controls</i> to your organizational units, programmatically. In  Amazon Web Services Control Tower, the terms \"control\" and \"guardrail\" are synonyms.</p>\n         <p>To call these APIs, you'll need to know:</p>\n         <ul>\n            <li>\n               <p>the <code>controlIdentifier</code> for the control--or guardrail--you are targeting.</p>\n            </li>\n            <li>\n               <p>the ARN associated with the target organizational unit (OU), which we call the <code>targetIdentifier</code>.</p>\n            </li>\n            <li>\n               <p>the ARN associated with a resource that you wish to tag or untag.</p>\n            </li>\n         </ul>\n         <p>\n            <b>To get the <code>controlIdentifier</code> for your Amazon Web Services Control Tower\n         control:</b>\n         </p>\n         <p>The <code>controlIdentifier</code> is an ARN that is specified for each\n         control. You can view the <code>controlIdentifier</code> in the console on the <b>Control details</b> page, as well as in the documentation.</p>\n         <p>The <code>controlIdentifier</code> is unique in each Amazon Web Services Region for each control. You can\n         find the <code>controlIdentifier</code> for each Region and control in the <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-metadata-tables.html\">Tables of control metadata</a> in the <i>Amazon Web Services Control Tower User Guide.</i>\n         </p>\n         <p>A quick-reference list of control identifers for the Amazon Web Services Control Tower legacy <i>Strongly recommended</i> and\n         <i>Elective</i> controls is given in <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-identifiers.html.html\">Resource identifiers for\n            APIs and controls</a> in the <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-identifiers.html\">Controls reference guide section</a>\n         of the <i>Amazon Web Services Control Tower User Guide</i>. Remember that <i>Mandatory</i> controls\n         cannot be added or removed.</p>\n         <note>\n            <p>\n               <b>ARN format:</b>\n               <code>arn:aws:controltower:{REGION}::control/{CONTROL_NAME}</code>\n            </p>\n            <p>\n               <b>Example:</b>\n            </p>\n            <p>\n               <code>arn:aws:controltower:us-west-2::control/AWS-GR_AUTOSCALING_LAUNCH_CONFIG_PUBLIC_IP_DISABLED</code>\n            </p>\n         </note>\n         <p>\n            <b>To get the <code>targetIdentifier</code>:</b>\n         </p>\n         <p>The <code>targetIdentifier</code> is the ARN for an OU.</p>\n         <p>In the Amazon Web Services Organizations console, you can find the ARN for the OU on the <b>Organizational unit details</b> page associated with that OU.</p>\n         <note>\n            <p>\n               <b>OU ARN format:</b>\n            </p>\n            <p>\n               <code>arn:${Partition}:organizations::${MasterAccountId}:ou/o-${OrganizationId}/ou-${OrganizationalUnitId}</code>\n            </p>\n         </note>\n         <p class=\"title\">\n            <b>Details and examples</b>\n         </p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-api-examples-short.html\">Control API input and output examples with CLI</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls.html\">Enable controls with CloudFormation</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-metadata-tables.html\">Control metadata tables</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-identifiers.html\">List of identifiers for legacy controls</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html\">Controls reference guide</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/controls-reference.html\">Controls library groupings</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/creating-resources-with-cloudformation.html\">Creating Amazon Web Services Control Tower resources with Amazon Web Services CloudFormation</a>\n               </p>\n            </li>\n         </ul>\n         <p>To view the open source resource repository on GitHub, see <a href=\"https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-controltower\">aws-cloudformation/aws-cloudformation-resource-providers-controltower</a>\n         </p>\n         <p>\n            <b>Recording API Requests</b>\n         </p>\n         <p>Amazon Web Services Control Tower supports Amazon Web Services CloudTrail, a service that records Amazon Web Services API calls for your\n         Amazon Web Services account and delivers log files to an Amazon S3 bucket. By using information collected by\n         CloudTrail, you can determine which requests the Amazon Web Services Control Tower service received, who made\n         the request and when, and so on. For more about Amazon Web Services Control Tower and its support for\n         CloudTrail, see <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/logging-using-cloudtrail.html\">Logging Amazon Web Services Control Tower\n            Actions with Amazon Web Services CloudTrail</a> in the Amazon Web Services Control Tower User Guide. To learn more about\n         CloudTrail, including how to turn it on and find your log files, see the Amazon Web Services CloudTrail User\n         Guide.</p>",
+        "smithy.api#documentation": "<p>These interfaces allow you to apply the Amazon Web Services library of pre-defined\n         <i>controls</i> to your organizational units, programmatically. In Amazon Web Services Control Tower, the terms \"control\" and \"guardrail\" are synonyms.</p>\n         <p>To call these APIs, you'll need to know:</p>\n         <ul>\n            <li>\n               <p>the <code>controlIdentifier</code> for the control--or guardrail--you are targeting.</p>\n            </li>\n            <li>\n               <p>the ARN associated with the target organizational unit (OU), which we call the <code>targetIdentifier</code>.</p>\n            </li>\n            <li>\n               <p>the ARN associated with a resource that you wish to tag or untag.</p>\n            </li>\n         </ul>\n         <p>\n            <b>To get the <code>controlIdentifier</code> for your Amazon Web Services Control Tower\n         control:</b>\n         </p>\n         <p>The <code>controlIdentifier</code> is an ARN that is specified for each\n         control. You can view the <code>controlIdentifier</code> in the console on the <b>Control details</b> page, as well as in the documentation.</p>\n         <p>The <code>controlIdentifier</code> is unique in each Amazon Web Services Region for each control. You can\n         find the <code>controlIdentifier</code> for each Region and control in the <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-metadata-tables.html\">Tables of control metadata</a> in the <i>Amazon Web Services Control Tower User Guide.</i>\n         </p>\n         <p>A quick-reference list of control identifers for the Amazon Web Services Control Tower legacy <i>Strongly recommended</i> and\n         <i>Elective</i> controls is given in <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-identifiers.html.html\">Resource identifiers for\n            APIs and controls</a> in the <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-identifiers.html\">Controls reference guide section</a>\n         of the <i>Amazon Web Services Control Tower User Guide</i>. Remember that <i>Mandatory</i> controls\n         cannot be added or removed.</p>\n         <note>\n            <p>\n               <b>ARN format:</b>\n               <code>arn:aws:controltower:{REGION}::control/{CONTROL_NAME}</code>\n            </p>\n            <p>\n               <b>Example:</b>\n            </p>\n            <p>\n               <code>arn:aws:controltower:us-west-2::control/AWS-GR_AUTOSCALING_LAUNCH_CONFIG_PUBLIC_IP_DISABLED</code>\n            </p>\n         </note>\n         <p>\n            <b>To get the <code>targetIdentifier</code>:</b>\n         </p>\n         <p>The <code>targetIdentifier</code> is the ARN for an OU.</p>\n         <p>In the Amazon Web Services Organizations console, you can find the ARN for the OU on the <b>Organizational unit details</b> page associated with that OU.</p>\n         <note>\n            <p>\n               <b>OU ARN format:</b>\n            </p>\n            <p>\n               <code>arn:${Partition}:organizations::${MasterAccountId}:ou/o-${OrganizationId}/ou-${OrganizationalUnitId}</code>\n            </p>\n         </note>\n         <p class=\"title\">\n            <b>Details and examples</b>\n         </p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-api-examples-short.html\">Control API input and output examples with CLI</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/enable-controls.html\">Enable controls with CloudFormation</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-metadata-tables.html\">Control metadata tables</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-identifiers.html\">List of identifiers for legacy controls</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/controls.html\">Controls reference guide</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/controls-reference.html\">Controls library groupings</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/creating-resources-with-cloudformation.html\">Creating Amazon Web Services Control Tower resources with Amazon Web Services CloudFormation</a>\n               </p>\n            </li>\n         </ul>\n         <p>To view the open source resource repository on GitHub, see <a href=\"https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-controltower\">aws-cloudformation/aws-cloudformation-resource-providers-controltower</a>\n         </p>\n         <p>\n            <b>Recording API Requests</b>\n         </p>\n         <p>Amazon Web Services Control Tower supports Amazon Web Services CloudTrail, a service that records Amazon Web Services API calls for your\n         Amazon Web Services account and delivers log files to an Amazon S3 bucket. By using information collected by\n         CloudTrail, you can determine which requests the Amazon Web Services Control Tower service received, who made\n         the request and when, and so on. For more about Amazon Web Services Control Tower and its support for\n         CloudTrail, see <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/logging-using-cloudtrail.html\">Logging Amazon Web Services Control Tower\n            Actions with Amazon Web Services CloudTrail</a> in the Amazon Web Services Control Tower User Guide. To learn more about\n         CloudTrail, including how to turn it on and find your log files, see the Amazon Web Services CloudTrail User\n         Guide.</p>",
         "smithy.api#title": "AWS Control Tower",
         "smithy.rules#endpointRuleSet": {
           "version": "1.0",
@@ -945,6 +951,166 @@
         "smithy.api#pattern": "^arn:aws[0-9a-zA-Z_\\-:\\/]+$"
       }
     },
+    "com.amazonaws.controltower#BaselineArn": {
+      "type": "string",
+      "traits": {
+        "smithy.api#pattern": "^arn:[a-z-]+:controltower:[a-z0-9-]*:[0-9]{0,12}:baseline/[A-Z0-9]{16}$"
+      }
+    },
+    "com.amazonaws.controltower#BaselineOperation": {
+      "type": "structure",
+      "members": {
+        "operationIdentifier": {
+          "target": "com.amazonaws.controltower#OperationIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The identifier of the specified operation.</p>"
+          }
+        },
+        "operationType": {
+          "target": "com.amazonaws.controltower#BaselineOperationType",
+          "traits": {
+            "smithy.api#documentation": "<p>An enumerated type (<code>enum</code>) with possible values of <code>ENABLE_BASELINE</code>, <code>DISABLE_BASELINE</code>, <code>UPDATE_ENABLED_BASELINE</code>, or <code>RESET_ENABLED_BASELINE</code>.</p>"
+          }
+        },
+        "status": {
+          "target": "com.amazonaws.controltower#BaselineOperationStatus",
+          "traits": {
+            "smithy.api#documentation": "<p>An enumerated type (<code>enum</code>) with possible values of <code>SUCCEEDED</code>, <code>FAILED</code>, or <code>IN_PROGRESS</code>.</p>"
+          }
+        },
+        "startTime": {
+          "target": "com.amazonaws.controltower#Timestamp",
+          "traits": {
+            "smithy.api#documentation": "<p>The start time of the operation, in ISO 8601 format.</p>"
+          }
+        },
+        "endTime": {
+          "target": "com.amazonaws.controltower#Timestamp",
+          "traits": {
+            "smithy.api#documentation": "<p>The end time of the operation (if applicable), in ISO 8601 format.</p>"
+          }
+        },
+        "statusMessage": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>A status message that gives more information about the operation's status, if applicable.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>An object of shape <code>BaselineOperation</code>, returning details about the specified <code>Baseline</code> operation ID.</p>"
+      }
+    },
+    "com.amazonaws.controltower#BaselineOperationStatus": {
+      "type": "enum",
+      "members": {
+        "SUCCEEDED": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "SUCCEEDED"
+          }
+        },
+        "FAILED": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "FAILED"
+          }
+        },
+        "IN_PROGRESS": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "IN_PROGRESS"
+          }
+        }
+      }
+    },
+    "com.amazonaws.controltower#BaselineOperationType": {
+      "type": "enum",
+      "members": {
+        "ENABLE_BASELINE": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "ENABLE_BASELINE"
+          }
+        },
+        "DISABLE_BASELINE": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "DISABLE_BASELINE"
+          }
+        },
+        "UPDATE_ENABLED_BASELINE": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "UPDATE_ENABLED_BASELINE"
+          }
+        },
+        "RESET_ENABLED_BASELINE": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "RESET_ENABLED_BASELINE"
+          }
+        }
+      }
+    },
+    "com.amazonaws.controltower#BaselineResource": {
+      "type": "resource",
+      "identifiers": {
+        "baselineIdentifier": {
+          "target": "com.amazonaws.controltower#BaselineArn"
+        }
+      },
+      "read": {
+        "target": "com.amazonaws.controltower#GetBaseline"
+      },
+      "list": {
+        "target": "com.amazonaws.controltower#ListBaselines"
+      }
+    },
+    "com.amazonaws.controltower#BaselineSummary": {
+      "type": "structure",
+      "members": {
+        "arn": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The full ARN of a Baseline.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "name": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The human-readable name of a Baseline.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "description": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>A summary description of a Baseline.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Returns a summary of information about a <code>Baseline</code> object.</p>"
+      }
+    },
+    "com.amazonaws.controltower#BaselineVersion": {
+      "type": "string",
+      "traits": {
+        "smithy.api#length": {
+          "min": 1,
+          "max": 10
+        },
+        "smithy.api#pattern": "^\\d+(?:\\.\\d+){0,2}$"
+      }
+    },
+    "com.amazonaws.controltower#Baselines": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.controltower#BaselineSummary"
+      }
+    },
     "com.amazonaws.controltower#ConflictException": {
       "type": "structure",
       "members": {
@@ -1096,7 +1262,7 @@
         "manifest": {
           "target": "com.amazonaws.controltower#Manifest",
           "traits": {
-            "smithy.api#documentation": "<p>The manifest JSON file is a text file that describes your Amazon Web Services resources. For examples, review \n         <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/lz-api-launch\">Launch your landing zone</a>. </p>",
+            "smithy.api#documentation": "<p>The manifest.yaml file is a text file that describes your Amazon Web Services resources. For examples, review \n         <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/the-manifest-file\">The manifest file</a>. </p>",
             "smithy.api#required": {}
           }
         },
@@ -1202,6 +1368,77 @@
         "smithy.api#output": {}
       }
     },
+    "com.amazonaws.controltower#DisableBaseline": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.controltower#DisableBaselineInput"
+      },
+      "output": {
+        "target": "com.amazonaws.controltower#DisableBaselineOutput"
+      },
+      "errors": [
+        {
+          "target": "com.amazonaws.controltower#AccessDeniedException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ConflictException"
+        },
+        {
+          "target": "com.amazonaws.controltower#InternalServerException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ResourceNotFoundException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ServiceQuotaExceededException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ThrottlingException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ValidationException"
+        }
+      ],
+      "traits": {
+        "smithy.api#documentation": "<p>Disable an <code>EnabledBaseline</code> resource on the specified Target. This API starts an asynchronous operation to remove all resources deployed as part of the baseline enablement. The resource will vary depending on the enabled baseline.</p>",
+        "smithy.api#http": {
+          "code": 200,
+          "method": "POST",
+          "uri": "/disable-baseline"
+        },
+        "smithy.api#idempotent": {}
+      }
+    },
+    "com.amazonaws.controltower#DisableBaselineInput": {
+      "type": "structure",
+      "members": {
+        "enabledBaselineIdentifier": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>Identifier of the <code>EnabledBaseline</code> resource to be deactivated, in ARN format.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.controltower#DisableBaselineOutput": {
+      "type": "structure",
+      "members": {
+        "operationIdentifier": {
+          "target": "com.amazonaws.controltower#OperationIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The ID (in UUID format) of the asynchronous <code>DisableBaseline</code> operation. This <code>operationIdentifier</code> is used to track status through calls to the <code>GetBaselineOperation</code> API.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.controltower#DisableControl": {
       "type": "operation",
       "input": {
@@ -1234,7 +1471,7 @@
         }
       ],
       "traits": {
-        "smithy.api#documentation": "<p>This API call turns off a control. It starts an asynchronous operation that deletes Amazon Web Services\n         resources on the specified organizational unit and the accounts it contains. The resources\n         will vary according to the control that you specify. For usage examples, see <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-api-examples-short.html\">\n               <i>the Amazon Web Services Control Tower User Guide</i>\n            </a>.</p>",
+        "smithy.api#documentation": "<p>This API call turns off a control. It starts an asynchronous operation that deletes AWS\n         resources on the specified organizational unit and the accounts it contains. The resources\n         will vary according to the control that you specify. For usage examples, see <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-api-examples-short.html\">\n               <i>the Amazon Web Services Control Tower User Guide</i>\n            </a>.</p>",
         "smithy.api#http": {
           "code": 200,
           "method": "POST",
@@ -1248,7 +1485,7 @@
         "controlIdentifier": {
           "target": "com.amazonaws.controltower#ControlIdentifier",
           "traits": {
-            "smithy.api#documentation": "<p>The ARN of the control. Only <b>Strongly recommended</b> and\n         <b>Elective</b> controls are permitted, with the exception of the\n         <b>landing zone Region deny</b> control. For information on how to find the <code>controlIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>",
+            "smithy.api#documentation": "<p>The ARN of the control. Only <b>Strongly recommended</b> and\n         <b>Elective</b> controls are permitted, with the exception of the\n         <b>Region deny</b> control. For information on how to find the <code>controlIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>",
             "smithy.api#required": {}
           }
         },
@@ -1316,13 +1553,13 @@
         "smithy.api#documentation": "<p>The drift summary of the enabled control.</p>\n         <p>Amazon Web Services Control Tower expects the enabled control\n         configuration to include all supported and governed Regions. If the enabled control differs\n         from the expected configuration, it is defined to be in a state of drift. You can repair this drift by resetting the enabled control.</p>"
       }
     },
-    "com.amazonaws.controltower#EnableControl": {
+    "com.amazonaws.controltower#EnableBaseline": {
       "type": "operation",
       "input": {
-        "target": "com.amazonaws.controltower#EnableControlInput"
+        "target": "com.amazonaws.controltower#EnableBaselineInput"
       },
       "output": {
-        "target": "com.amazonaws.controltower#EnableControlOutput"
+        "target": "com.amazonaws.controltower#EnableBaselineOutput"
       },
       "errors": [
         {
@@ -1348,83 +1585,421 @@
         }
       ],
       "traits": {
-        "smithy.api#documentation": "<p>This API call activates a control. It starts an asynchronous operation that creates Amazon Web Services\n         resources on the specified organizational unit and the accounts it contains. The resources\n         created will vary according to the control that you specify. For usage examples, see <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-api-examples-short.html\">\n               <i>the Amazon Web Services Control Tower User Guide</i>\n            </a>.</p>",
+        "smithy.api#documentation": "<p>Enable (apply) a <code>Baseline</code> to a Target. This API starts an asynchronous operation to deploy resources specified by the <code>Baseline</code> to the specified Target.</p>",
         "smithy.api#http": {
           "code": 200,
           "method": "POST",
-          "uri": "/enable-control"
+          "uri": "/enable-baseline"
         }
       }
     },
-    "com.amazonaws.controltower#EnableControlInput": {
+    "com.amazonaws.controltower#EnableBaselineInput": {
       "type": "structure",
       "members": {
-        "controlIdentifier": {
-          "target": "com.amazonaws.controltower#ControlIdentifier",
+        "baselineVersion": {
+          "target": "com.amazonaws.controltower#BaselineVersion",
           "traits": {
-            "smithy.api#documentation": "<p>The ARN of the control. Only <b>Strongly recommended</b> and\n         <b>Elective</b> controls are permitted, with the exception of the\n         <b>landing zone Region deny</b> control. For information on how to find the <code>controlIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>",
+            "smithy.api#documentation": "<p>The specific version to be enabled of the specified baseline.</p>",
             "smithy.api#required": {}
           }
         },
-        "targetIdentifier": {
-          "target": "com.amazonaws.controltower#TargetIdentifier",
+        "parameters": {
+          "target": "com.amazonaws.controltower#EnabledBaselineParameters",
           "traits": {
-            "smithy.api#documentation": "<p>The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>",
+            "smithy.api#documentation": "<p>A list of <code>key-value</code> objects that specify enablement parameters, where <code>key</code> is a string and <code>value</code> is a document of any type.</p>"
+          }
+        },
+        "baselineIdentifier": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the baseline to be enabled.</p>",
             "smithy.api#required": {}
           }
         },
-        "tags": {
-          "target": "com.amazonaws.controltower#TagMap",
+        "targetIdentifier": {
+          "target": "com.amazonaws.controltower#Arn",
           "traits": {
-            "smithy.api#documentation": "<p>Tags to be applied to the <code>EnabledControl</code> resource.</p>"
+            "smithy.api#documentation": "<p>The ARN of the target on which the baseline will be enabled. Only OUs are supported as targets.</p>",
+            "smithy.api#required": {}
           }
         },
-        "parameters": {
-          "target": "com.amazonaws.controltower#EnabledControlParameters",
+        "tags": {
+          "target": "com.amazonaws.controltower#TagMap",
           "traits": {
-            "smithy.api#documentation": "<p>An array of <code>EnabledControlParameter</code> objects</p>"
+            "smithy.api#documentation": "<p>Tags associated with input to <code>EnableBaseline</code>.</p>"
           }
         }
+      },
+      "traits": {
+        "smithy.api#input": {}
       }
     },
-    "com.amazonaws.controltower#EnableControlOutput": {
+    "com.amazonaws.controltower#EnableBaselineOutput": {
       "type": "structure",
       "members": {
         "operationIdentifier": {
           "target": "com.amazonaws.controltower#OperationIdentifier",
           "traits": {
-            "smithy.api#documentation": "<p>The ID of the asynchronous operation, which is used to track status. The operation is\n         available for 90 days.</p>",
+            "smithy.api#documentation": "<p>The ID (in UUID format) of the asynchronous <code>EnableBaseline</code> operation. This <code>operationIdentifier</code> is used to track status through calls to the <code>GetBaselineOperation</code> API.</p>",
             "smithy.api#required": {}
           }
         },
         "arn": {
           "target": "com.amazonaws.controltower#Arn",
           "traits": {
-            "smithy.api#documentation": "<p>The ARN of the <code>EnabledControl</code> resource.</p>"
+            "smithy.api#documentation": "<p>The ARN of the <code>EnabledBaseline</code> resource.</p>",
+            "smithy.api#required": {}
           }
         }
+      },
+      "traits": {
+        "smithy.api#output": {}
       }
     },
-    "com.amazonaws.controltower#EnabledControlDetails": {
-      "type": "structure",
-      "members": {
-        "arn": {
-          "target": "com.amazonaws.controltower#Arn",
-          "traits": {
-            "smithy.api#documentation": "<p>The ARN of the enabled control.</p>"
-          }
-        },
-        "controlIdentifier": {
-          "target": "com.amazonaws.controltower#ControlIdentifier",
-          "traits": {
-            "smithy.api#documentation": "<p>The control identifier of the enabled control. For information on how to find the <code>controlIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>"
-          }
+    "com.amazonaws.controltower#EnableControl": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.controltower#EnableControlInput"
+      },
+      "output": {
+        "target": "com.amazonaws.controltower#EnableControlOutput"
+      },
+      "errors": [
+        {
+          "target": "com.amazonaws.controltower#AccessDeniedException"
         },
-        "targetIdentifier": {
-          "target": "com.amazonaws.controltower#TargetIdentifier",
-          "traits": {
-            "smithy.api#documentation": "<p>The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>"
-          }
+        {
+          "target": "com.amazonaws.controltower#ConflictException"
+        },
+        {
+          "target": "com.amazonaws.controltower#InternalServerException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ResourceNotFoundException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ServiceQuotaExceededException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ThrottlingException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ValidationException"
+        }
+      ],
+      "traits": {
+        "smithy.api#documentation": "<p>This API call activates a control. It starts an asynchronous operation that creates Amazon Web Services\n         resources on the specified organizational unit and the accounts it contains. The resources\n         created will vary according to the control that you specify. For usage examples, see <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/control-api-examples-short.html\">\n               <i>the Amazon Web Services Control Tower User Guide</i>\n            </a>.</p>",
+        "smithy.api#http": {
+          "code": 200,
+          "method": "POST",
+          "uri": "/enable-control"
+        }
+      }
+    },
+    "com.amazonaws.controltower#EnableControlInput": {
+      "type": "structure",
+      "members": {
+        "controlIdentifier": {
+          "target": "com.amazonaws.controltower#ControlIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the control. Only <b>Strongly recommended</b> and\n         <b>Elective</b> controls are permitted, with the exception of the\n         <b>Region deny</b> control. For information on how to find the <code>controlIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "targetIdentifier": {
+          "target": "com.amazonaws.controltower#TargetIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "tags": {
+          "target": "com.amazonaws.controltower#TagMap",
+          "traits": {
+            "smithy.api#documentation": "<p>Tags to be applied to the <code>EnabledControl</code> resource.</p>"
+          }
+        },
+        "parameters": {
+          "target": "com.amazonaws.controltower#EnabledControlParameters",
+          "traits": {
+            "smithy.api#documentation": "<p>A list of input parameter values, which are specified to configure the control when you enable it.</p>"
+          }
+        }
+      }
+    },
+    "com.amazonaws.controltower#EnableControlOutput": {
+      "type": "structure",
+      "members": {
+        "operationIdentifier": {
+          "target": "com.amazonaws.controltower#OperationIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The ID of the asynchronous operation, which is used to track status. The operation is\n         available for 90 days.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "arn": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the <code>EnabledControl</code> resource.</p>"
+          }
+        }
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineBaselineIdentifiers": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.controltower#Arn"
+      },
+      "traits": {
+        "smithy.api#length": {
+          "min": 1,
+          "max": 5
+        }
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineDetails": {
+      "type": "structure",
+      "members": {
+        "arn": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the <code>EnabledBaseline</code> resource.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "baselineIdentifier": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The specific <code>Baseline</code> enabled as part of the <code>EnabledBaseline</code> resource.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "baselineVersion": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The enabled version of the <code>Baseline</code>.</p>"
+          }
+        },
+        "targetIdentifier": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The target on which to enable the <code>Baseline</code>.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "statusSummary": {
+          "target": "com.amazonaws.controltower#EnablementStatusSummary",
+          "traits": {
+            "smithy.api#required": {}
+          }
+        },
+        "parameters": {
+          "target": "com.amazonaws.controltower#EnabledBaselineParameterSummaries",
+          "traits": {
+            "smithy.api#documentation": "<p>Shows the parameters that are applied when enabling this <code>Baseline</code>.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Details of the <code>EnabledBaseline</code> resource.</p>"
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineFilter": {
+      "type": "structure",
+      "members": {
+        "targetIdentifiers": {
+          "target": "com.amazonaws.controltower#EnabledBaselineTargetIdentifiers",
+          "traits": {
+            "smithy.api#documentation": "<p>Identifiers for the targets of the <code>Baseline</code> filter operation.</p>"
+          }
+        },
+        "baselineIdentifiers": {
+          "target": "com.amazonaws.controltower#EnabledBaselineBaselineIdentifiers",
+          "traits": {
+            "smithy.api#documentation": "<p>Identifiers for the <code>Baseline</code> objects returned as part of the filter operation.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>A filter applied on the <code>ListEnabledBaseline</code> operation. Allowed filters are <code>baselineIdentifiers</code> and <code>targetIdentifiers</code>. The filter can be applied for either, or both.</p>"
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineParameter": {
+      "type": "structure",
+      "members": {
+        "key": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>A string denoting the parameter key.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "value": {
+          "target": "com.amazonaws.controltower#EnabledBaselineParameterDocument",
+          "traits": {
+            "smithy.api#documentation": "<p>A low-level <code>Document</code> object of any type (for example, a Java Object).</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>A key-value parameter to an <code>EnabledBaseline</code> resource.</p>"
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineParameterDocument": {
+      "type": "document"
+    },
+    "com.amazonaws.controltower#EnabledBaselineParameterSummaries": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.controltower#EnabledBaselineParameterSummary"
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineParameterSummary": {
+      "type": "structure",
+      "members": {
+        "key": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>A string denoting the parameter key.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "value": {
+          "target": "com.amazonaws.controltower#EnabledBaselineParameterDocument",
+          "traits": {
+            "smithy.api#documentation": "<p>A low-level document object of any type (for example, a Java Object).</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Summary of an applied parameter to an <code>EnabledBaseline</code> resource. </p>"
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineParameters": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.controltower#EnabledBaselineParameter"
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineResource": {
+      "type": "resource",
+      "identifiers": {
+        "enabledBaselineIdentifier": {
+          "target": "com.amazonaws.controltower#Arn"
+        }
+      },
+      "create": {
+        "target": "com.amazonaws.controltower#EnableBaseline"
+      },
+      "read": {
+        "target": "com.amazonaws.controltower#GetEnabledBaseline"
+      },
+      "update": {
+        "target": "com.amazonaws.controltower#UpdateEnabledBaseline"
+      },
+      "delete": {
+        "target": "com.amazonaws.controltower#DisableBaseline"
+      },
+      "list": {
+        "target": "com.amazonaws.controltower#ListEnabledBaselines"
+      },
+      "operations": [
+        {
+          "target": "com.amazonaws.controltower#ResetEnabledBaseline"
+        }
+      ],
+      "collectionOperations": [
+        {
+          "target": "com.amazonaws.controltower#GetBaselineOperation"
+        }
+      ],
+      "traits": {
+        "aws.api#arn": {
+          "template": "enabledbaseline/{enabledBaselineIdentifier}"
+        }
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineSummary": {
+      "type": "structure",
+      "members": {
+        "arn": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the <code>EnabledBaseline</code> resource</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "baselineIdentifier": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The specific baseline that is enabled as part of the <code>EnabledBaseline</code> resource.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "baselineVersion": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The enabled version of the baseline.</p>"
+          }
+        },
+        "targetIdentifier": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>The target upon which the baseline is enabled.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "statusSummary": {
+          "target": "com.amazonaws.controltower#EnablementStatusSummary",
+          "traits": {
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Returns a summary of information about an <code>EnabledBaseline</code> object.</p>"
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselineTargetIdentifiers": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.controltower#Arn"
+      },
+      "traits": {
+        "smithy.api#length": {
+          "min": 1,
+          "max": 5
+        }
+      }
+    },
+    "com.amazonaws.controltower#EnabledBaselines": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.controltower#EnabledBaselineSummary"
+      }
+    },
+    "com.amazonaws.controltower#EnabledControlDetails": {
+      "type": "structure",
+      "members": {
+        "arn": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the enabled control.</p>"
+          }
+        },
+        "controlIdentifier": {
+          "target": "com.amazonaws.controltower#ControlIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The control identifier of the enabled control. For information on how to find the <code>controlIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>"
+          }
+        },
+        "targetIdentifier": {
+          "target": "com.amazonaws.controltower#TargetIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the organizational unit. For information on how to find the <code>targetIdentifier</code>, see <a href=\"https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html\">the overview page</a>.</p>"
+          }
         },
         "targetRegions": {
           "target": "com.amazonaws.controltower#TargetRegions",
@@ -1461,20 +2036,20 @@
         "key": {
           "target": "smithy.api#String",
           "traits": {
-            "smithy.api#documentation": "<p>The key of a key/value pair. It is of type <code>string</code>.</p>",
+            "smithy.api#documentation": "<p>The key of a key/value pair.</p>",
             "smithy.api#required": {}
           }
         },
         "value": {
           "target": "smithy.api#Document",
           "traits": {
-            "smithy.api#documentation": "<p>The value of a key/value pair. It can be of type <code>array</code>\n            <code>string</code>, <code>number</code>, <code>object</code>, or <code>boolean</code>. </p>",
+            "smithy.api#documentation": "<p>The value of a key/value pair.</p>",
             "smithy.api#required": {}
           }
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p> A set of parameters that configure the behavior of the enabled control. A key/value pair, where <code>Key</code> is of type <code>String</code> and <code>Value</code> is of type <code>Document</code>.</p>"
+        "smithy.api#documentation": "<p>A key/value pair, where <code>Key</code> is of type <code>String</code> and <code>Value</code> is of type <code>Document</code>.</p>"
       }
     },
     "com.amazonaws.controltower#EnabledControlParameterSummaries": {
@@ -1541,61 +2116,203 @@
         "driftStatusSummary": {
           "target": "com.amazonaws.controltower#DriftStatusSummary",
           "traits": {
-            "smithy.api#documentation": "<p>The drift status of the enabled control.</p>"
+            "smithy.api#documentation": "<p>The drift status of the enabled control.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Returns a summary of information about an enabled control.</p>"
+      }
+    },
+    "com.amazonaws.controltower#EnabledControls": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.controltower#EnabledControlSummary"
+      }
+    },
+    "com.amazonaws.controltower#EnablementStatus": {
+      "type": "enum",
+      "members": {
+        "SUCCEEDED": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "SUCCEEDED"
+          }
+        },
+        "FAILED": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "FAILED"
+          }
+        },
+        "UNDER_CHANGE": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "UNDER_CHANGE"
+          }
+        }
+      }
+    },
+    "com.amazonaws.controltower#EnablementStatusSummary": {
+      "type": "structure",
+      "members": {
+        "status": {
+          "target": "com.amazonaws.controltower#EnablementStatus",
+          "traits": {
+            "smithy.api#documentation": "<p> The deployment status of the enabled control.</p>\n         <p>Valid values:</p>\n         <ul>\n            <li>\n               <p>\n                  <code>SUCCEEDED</code>: The <code>enabledControl</code> configuration was deployed successfully.</p>\n            </li>\n            <li>\n               <p>\n                  <code>UNDER_CHANGE</code>: The <code>enabledControl</code> configuration is changing. </p>\n            </li>\n            <li>\n               <p>\n                  <code>FAILED</code>: The <code>enabledControl</code> configuration failed to deploy.</p>\n            </li>\n         </ul>"
+          }
+        },
+        "lastOperationIdentifier": {
+          "target": "com.amazonaws.controltower#OperationIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The last operation identifier for the enabled control.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>The deployment summary of the enabled control.</p>"
+      }
+    },
+    "com.amazonaws.controltower#GetBaseline": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.controltower#GetBaselineInput"
+      },
+      "output": {
+        "target": "com.amazonaws.controltower#GetBaselineOutput"
+      },
+      "errors": [
+        {
+          "target": "com.amazonaws.controltower#AccessDeniedException"
+        },
+        {
+          "target": "com.amazonaws.controltower#InternalServerException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ResourceNotFoundException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ThrottlingException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ValidationException"
+        }
+      ],
+      "traits": {
+        "smithy.api#documentation": "<p>Retrieve details about an existing <code>Baseline</code> resource by specifying its identifier.</p>",
+        "smithy.api#http": {
+          "code": 200,
+          "method": "POST",
+          "uri": "/get-baseline"
+        },
+        "smithy.api#readonly": {}
+      }
+    },
+    "com.amazonaws.controltower#GetBaselineInput": {
+      "type": "structure",
+      "members": {
+        "baselineIdentifier": {
+          "target": "com.amazonaws.controltower#BaselineArn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the <code>Baseline</code> resource to be retrieved.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.controltower#GetBaselineOperation": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.controltower#GetBaselineOperationInput"
+      },
+      "output": {
+        "target": "com.amazonaws.controltower#GetBaselineOperationOutput"
+      },
+      "errors": [
+        {
+          "target": "com.amazonaws.controltower#AccessDeniedException"
+        },
+        {
+          "target": "com.amazonaws.controltower#InternalServerException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ResourceNotFoundException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ThrottlingException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ValidationException"
+        }
+      ],
+      "traits": {
+        "smithy.api#documentation": "<p>Returns the details of an asynchronous baseline operation, as initiated by any of these APIs: <code>EnableBaseline</code>, <code>DisableBaseline</code>, <code>UpdateEnabledBaseline</code>, <code>ResetEnabledBaseline</code>. A status message is displayed in case of operation failure.</p>",
+        "smithy.api#http": {
+          "code": 200,
+          "method": "POST",
+          "uri": "/get-baseline-operation"
+        }
+      }
+    },
+    "com.amazonaws.controltower#GetBaselineOperationInput": {
+      "type": "structure",
+      "members": {
+        "operationIdentifier": {
+          "target": "com.amazonaws.controltower#OperationIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The operation ID returned from mutating asynchronous APIs (Enable, Disable, Update, Reset).</p>",
+            "smithy.api#required": {}
           }
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>Returns a summary of information about an enabled control.</p>"
-      }
-    },
-    "com.amazonaws.controltower#EnabledControls": {
-      "type": "list",
-      "member": {
-        "target": "com.amazonaws.controltower#EnabledControlSummary"
+        "smithy.api#input": {}
       }
     },
-    "com.amazonaws.controltower#EnablementStatus": {
-      "type": "enum",
+    "com.amazonaws.controltower#GetBaselineOperationOutput": {
+      "type": "structure",
       "members": {
-        "SUCCEEDED": {
-          "target": "smithy.api#Unit",
-          "traits": {
-            "smithy.api#enumValue": "SUCCEEDED"
-          }
-        },
-        "FAILED": {
-          "target": "smithy.api#Unit",
-          "traits": {
-            "smithy.api#enumValue": "FAILED"
-          }
-        },
-        "UNDER_CHANGE": {
-          "target": "smithy.api#Unit",
+        "baselineOperation": {
+          "target": "com.amazonaws.controltower#BaselineOperation",
           "traits": {
-            "smithy.api#enumValue": "UNDER_CHANGE"
+            "smithy.api#documentation": "<p>A <code>baselineOperation</code> object that shows information about the specified operation ID.</p>",
+            "smithy.api#required": {}
           }
         }
+      },
+      "traits": {
+        "smithy.api#output": {}
       }
     },
-    "com.amazonaws.controltower#EnablementStatusSummary": {
+    "com.amazonaws.controltower#GetBaselineOutput": {
       "type": "structure",
       "members": {
-        "status": {
-          "target": "com.amazonaws.controltower#EnablementStatus",
+        "arn": {
+          "target": "com.amazonaws.controltower#BaselineArn",
           "traits": {
-            "smithy.api#documentation": "<p> The deployment status of the enabled control.</p>\n         <p>Valid values:</p>\n         <ul>\n            <li>\n               <p>\n                  <code>SUCCEEDED</code>: The <code>enabledControl</code> configuration was deployed successfully.</p>\n            </li>\n            <li>\n               <p>\n                  <code>UNDER_CHANGE</code>: The <code>enabledControl</code> configuration is changing. </p>\n            </li>\n            <li>\n               <p>\n                  <code>FAILED</code>: The <code>enabledControl</code> configuration failed to deploy.</p>\n            </li>\n         </ul>"
+            "smithy.api#documentation": "<p>The baseline ARN.</p>",
+            "smithy.api#required": {}
           }
         },
-        "lastOperationIdentifier": {
-          "target": "com.amazonaws.controltower#OperationIdentifier",
+        "name": {
+          "target": "smithy.api#String",
           "traits": {
-            "smithy.api#documentation": "<p>The last operation identifier for the enabled control.</p>"
+            "smithy.api#documentation": "<p>A user-friendly name for the baseline.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "description": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>A description of the baseline.</p>"
           }
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>The deployment summary of the enabled control.</p>"
+        "smithy.api#output": {}
       }
     },
     "com.amazonaws.controltower#GetControlOperation": {
@@ -1657,6 +2374,70 @@
         }
       }
     },
+    "com.amazonaws.controltower#GetEnabledBaseline": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.controltower#GetEnabledBaselineInput"
+      },
+      "output": {
+        "target": "com.amazonaws.controltower#GetEnabledBaselineOutput"
+      },
+      "errors": [
+        {
+          "target": "com.amazonaws.controltower#AccessDeniedException"
+        },
+        {
+          "target": "com.amazonaws.controltower#InternalServerException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ResourceNotFoundException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ThrottlingException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ValidationException"
+        }
+      ],
+      "traits": {
+        "smithy.api#documentation": "<p>Retrieve details of an <code>EnabledBaseline</code> resource by specifying its identifier.</p>",
+        "smithy.api#http": {
+          "code": 200,
+          "method": "POST",
+          "uri": "/get-enabled-baseline"
+        },
+        "smithy.api#readonly": {}
+      }
+    },
+    "com.amazonaws.controltower#GetEnabledBaselineInput": {
+      "type": "structure",
+      "members": {
+        "enabledBaselineIdentifier": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>Identifier of the <code>EnabledBaseline</code> resource to be retrieved, in ARN format.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.controltower#GetEnabledBaselineOutput": {
+      "type": "structure",
+      "members": {
+        "enabledBaselineDetails": {
+          "target": "com.amazonaws.controltower#EnabledBaselineDetails",
+          "traits": {
+            "smithy.api#documentation": "<p>Details of the <code>EnabledBaseline</code> resource.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.controltower#GetEnabledControl": {
       "type": "operation",
       "input": {
@@ -1882,7 +2663,7 @@
         "manifest": {
           "target": "com.amazonaws.controltower#Manifest",
           "traits": {
-            "smithy.api#documentation": "<p>The landing zone manifest JSON text file that specifies the landing zone configurations. </p>",
+            "smithy.api#documentation": "<p>The landing zone <code>manifest.yaml</code> text file that specifies the landing zone configurations. </p>",
             "smithy.api#required": {}
           }
         },
@@ -1895,7 +2676,7 @@
         "status": {
           "target": "com.amazonaws.controltower#LandingZoneStatus",
           "traits": {
-            "smithy.api#documentation": "<p>The landing zone deployment status.</p>"
+            "smithy.api#documentation": "<p>The landing zone deployment status. One of <code>ACTIVE</code>, <code>PROCESSING</code>, <code>FAILED</code>.</p>"
           }
         },
         "latestAvailableVersion": {
@@ -2025,106 +2806,294 @@
         "UPDATE": {
           "target": "smithy.api#Unit",
           "traits": {
-            "smithy.api#enumValue": "UPDATE"
+            "smithy.api#enumValue": "UPDATE"
+          }
+        },
+        "RESET": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "RESET"
+          }
+        }
+      }
+    },
+    "com.amazonaws.controltower#LandingZoneResource": {
+      "type": "resource",
+      "identifiers": {
+        "landingZoneIdentifier": {
+          "target": "smithy.api#String"
+        }
+      },
+      "create": {
+        "target": "com.amazonaws.controltower#CreateLandingZone"
+      },
+      "read": {
+        "target": "com.amazonaws.controltower#GetLandingZone"
+      },
+      "update": {
+        "target": "com.amazonaws.controltower#UpdateLandingZone"
+      },
+      "delete": {
+        "target": "com.amazonaws.controltower#DeleteLandingZone"
+      },
+      "list": {
+        "target": "com.amazonaws.controltower#ListLandingZones"
+      },
+      "operations": [
+        {
+          "target": "com.amazonaws.controltower#ResetLandingZone"
+        }
+      ],
+      "collectionOperations": [
+        {
+          "target": "com.amazonaws.controltower#GetLandingZoneOperation"
+        }
+      ],
+      "traits": {
+        "aws.cloudformation#cfnResource": {
+          "name": "LandingZone"
+        }
+      }
+    },
+    "com.amazonaws.controltower#LandingZoneStatus": {
+      "type": "enum",
+      "members": {
+        "ACTIVE": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "ACTIVE"
+          }
+        },
+        "PROCESSING": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "PROCESSING"
+          }
+        },
+        "FAILED": {
+          "target": "smithy.api#Unit",
+          "traits": {
+            "smithy.api#enumValue": "FAILED"
+          }
+        }
+      }
+    },
+    "com.amazonaws.controltower#LandingZoneSummaries": {
+      "type": "list",
+      "member": {
+        "target": "com.amazonaws.controltower#LandingZoneSummary"
+      }
+    },
+    "com.amazonaws.controltower#LandingZoneSummary": {
+      "type": "structure",
+      "members": {
+        "arn": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>The ARN of the landing zone.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>Returns a summary of information about a landing zone.</p>"
+      }
+    },
+    "com.amazonaws.controltower#LandingZoneVersion": {
+      "type": "string",
+      "traits": {
+        "smithy.api#length": {
+          "min": 3,
+          "max": 10
+        },
+        "smithy.api#pattern": "^\\d+.\\d+$"
+      }
+    },
+    "com.amazonaws.controltower#ListBaselines": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.controltower#ListBaselinesInput"
+      },
+      "output": {
+        "target": "com.amazonaws.controltower#ListBaselinesOutput"
+      },
+      "errors": [
+        {
+          "target": "com.amazonaws.controltower#AccessDeniedException"
+        },
+        {
+          "target": "com.amazonaws.controltower#InternalServerException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ThrottlingException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ValidationException"
+        }
+      ],
+      "traits": {
+        "smithy.api#documentation": "<p>Returns a summary list of all available baselines.</p>",
+        "smithy.api#http": {
+          "code": 200,
+          "method": "POST",
+          "uri": "/list-baselines"
+        },
+        "smithy.api#paginated": {
+          "inputToken": "nextToken",
+          "outputToken": "nextToken",
+          "pageSize": "maxResults",
+          "items": "baselines"
+        },
+        "smithy.api#readonly": {}
+      }
+    },
+    "com.amazonaws.controltower#ListBaselinesInput": {
+      "type": "structure",
+      "members": {
+        "nextToken": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>A pagination token.</p>"
           }
         },
-        "RESET": {
-          "target": "smithy.api#Unit",
+        "maxResults": {
+          "target": "com.amazonaws.controltower#ListBaselinesMaxResults",
           "traits": {
-            "smithy.api#enumValue": "RESET"
+            "smithy.api#documentation": "<p>The maximum number of results to be shown.</p>"
           }
         }
+      },
+      "traits": {
+        "smithy.api#input": {}
       }
     },
-    "com.amazonaws.controltower#LandingZoneResource": {
-      "type": "resource",
-      "identifiers": {
-        "landingZoneIdentifier": {
-          "target": "smithy.api#String"
+    "com.amazonaws.controltower#ListBaselinesMaxResults": {
+      "type": "integer",
+      "traits": {
+        "smithy.api#range": {
+          "min": 4,
+          "max": 100
+        }
+      }
+    },
+    "com.amazonaws.controltower#ListBaselinesOutput": {
+      "type": "structure",
+      "members": {
+        "baselines": {
+          "target": "com.amazonaws.controltower#Baselines",
+          "traits": {
+            "smithy.api#documentation": "<p>A  list of <code>Baseline</code> object details.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "nextToken": {
+          "target": "smithy.api#String",
+          "traits": {
+            "smithy.api#documentation": "<p>A pagination token.</p>"
+          }
         }
       },
-      "create": {
-        "target": "com.amazonaws.controltower#CreateLandingZone"
-      },
-      "read": {
-        "target": "com.amazonaws.controltower#GetLandingZone"
-      },
-      "update": {
-        "target": "com.amazonaws.controltower#UpdateLandingZone"
-      },
-      "delete": {
-        "target": "com.amazonaws.controltower#DeleteLandingZone"
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
+    "com.amazonaws.controltower#ListEnabledBaselines": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.controltower#ListEnabledBaselinesInput"
       },
-      "list": {
-        "target": "com.amazonaws.controltower#ListLandingZones"
+      "output": {
+        "target": "com.amazonaws.controltower#ListEnabledBaselinesOutput"
       },
-      "operations": [
+      "errors": [
         {
-          "target": "com.amazonaws.controltower#ResetLandingZone"
-        }
-      ],
-      "collectionOperations": [
+          "target": "com.amazonaws.controltower#AccessDeniedException"
+        },
         {
-          "target": "com.amazonaws.controltower#GetLandingZoneOperation"
+          "target": "com.amazonaws.controltower#InternalServerException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ThrottlingException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ValidationException"
         }
       ],
       "traits": {
-        "aws.cloudformation#cfnResource": {
-          "name": "LandingZone"
-        }
+        "smithy.api#documentation": "<p>Returns a list of summaries describing <code>EnabledBaseline</code> resources. You can filter the list by the corresponding <code>Baseline</code> or <code>Target</code> of the <code>EnabledBaseline</code> resources.</p>",
+        "smithy.api#http": {
+          "code": 200,
+          "method": "POST",
+          "uri": "/list-enabled-baselines"
+        },
+        "smithy.api#paginated": {
+          "inputToken": "nextToken",
+          "outputToken": "nextToken",
+          "pageSize": "maxResults",
+          "items": "enabledBaselines"
+        },
+        "smithy.api#readonly": {}
       }
     },
-    "com.amazonaws.controltower#LandingZoneStatus": {
-      "type": "enum",
+    "com.amazonaws.controltower#ListEnabledBaselinesInput": {
+      "type": "structure",
       "members": {
-        "ACTIVE": {
-          "target": "smithy.api#Unit",
+        "filter": {
+          "target": "com.amazonaws.controltower#EnabledBaselineFilter",
           "traits": {
-            "smithy.api#enumValue": "ACTIVE"
+            "smithy.api#documentation": "<p>A filter applied on the <code>ListEnabledBaseline</code> operation. Allowed filters are <code>baselineIdentifiers</code> and <code>targetIdentifiers</code>. The filter can be applied for either, or both.</p>"
           }
         },
-        "PROCESSING": {
-          "target": "smithy.api#Unit",
+        "nextToken": {
+          "target": "com.amazonaws.controltower#ListEnabledBaselinesNextToken",
           "traits": {
-            "smithy.api#enumValue": "PROCESSING"
+            "smithy.api#documentation": "<p>A pagination token.</p>"
           }
         },
-        "FAILED": {
-          "target": "smithy.api#Unit",
+        "maxResults": {
+          "target": "com.amazonaws.controltower#ListEnabledBaselinesMaxResults",
           "traits": {
-            "smithy.api#enumValue": "FAILED"
+            "smithy.api#documentation": "<p>The maximum number of results to be shown.</p>"
           }
         }
+      },
+      "traits": {
+        "smithy.api#input": {}
       }
     },
-    "com.amazonaws.controltower#LandingZoneSummaries": {
-      "type": "list",
-      "member": {
-        "target": "com.amazonaws.controltower#LandingZoneSummary"
+    "com.amazonaws.controltower#ListEnabledBaselinesMaxResults": {
+      "type": "integer",
+      "traits": {
+        "smithy.api#range": {
+          "min": 5,
+          "max": 100
+        }
       }
     },
-    "com.amazonaws.controltower#LandingZoneSummary": {
+    "com.amazonaws.controltower#ListEnabledBaselinesNextToken": {
+      "type": "string",
+      "traits": {
+        "smithy.api#pattern": "\\S+"
+      }
+    },
+    "com.amazonaws.controltower#ListEnabledBaselinesOutput": {
       "type": "structure",
       "members": {
-        "arn": {
-          "target": "com.amazonaws.controltower#Arn",
+        "enabledBaselines": {
+          "target": "com.amazonaws.controltower#EnabledBaselines",
           "traits": {
-            "smithy.api#documentation": "<p>The ARN of the landing zone.</p>"
+            "smithy.api#documentation": "<p>Retuens a list of summaries of <code>EnabledBaseline</code> resources.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "nextToken": {
+          "target": "com.amazonaws.controltower#ListEnabledBaselinesNextToken",
+          "traits": {
+            "smithy.api#documentation": "<p>A pagination token.</p>"
           }
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>Returns a summary of information about a landing zone.</p>"
-      }
-    },
-    "com.amazonaws.controltower#LandingZoneVersion": {
-      "type": "string",
-      "traits": {
-        "smithy.api#length": {
-          "min": 3,
-          "max": 10
-        },
-        "smithy.api#pattern": "^\\d+.\\d+$"
+        "smithy.api#output": {}
       }
     },
     "com.amazonaws.controltower#ListEnabledControls": {
@@ -2395,7 +3364,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>An  Amazon Web Services Region in which  Amazon Web Services Control Tower expects to find the control deployed. </p>\n         <p>The expected Regions are based on the Regions that are governed by the landing zone. In\n            certain cases, a control is not actually enabled in the Region as expected, such as during\n            drift, or <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/region-how.html#mixed-governance\">mixed governance</a>.</p>"
+        "smithy.api#documentation": "<p>An Amazon Web Services Region in which Amazon Web Services Control Tower expects to find the control deployed. </p>\n         <p>The expected Regions are based on the Regions that are governed by the landing zone. In\n            certain cases, a control is not actually enabled in the Region as expected, such as during\n            drift, or <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/region-how.html#mixed-governance\">mixed governance</a>.</p>"
       }
     },
     "com.amazonaws.controltower#RegionName": {
@@ -2407,6 +3376,76 @@
         }
       }
     },
+    "com.amazonaws.controltower#ResetEnabledBaseline": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.controltower#ResetEnabledBaselineInput"
+      },
+      "output": {
+        "target": "com.amazonaws.controltower#ResetEnabledBaselineOutput"
+      },
+      "errors": [
+        {
+          "target": "com.amazonaws.controltower#AccessDeniedException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ConflictException"
+        },
+        {
+          "target": "com.amazonaws.controltower#InternalServerException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ResourceNotFoundException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ServiceQuotaExceededException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ThrottlingException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ValidationException"
+        }
+      ],
+      "traits": {
+        "smithy.api#documentation": "<p>Re-enables an <code>EnabledBaseline</code> resource. For example, this API can re-apply the existing <code>Baseline</code> after a new member account is moved to the target OU.</p>",
+        "smithy.api#http": {
+          "code": 200,
+          "method": "POST",
+          "uri": "/reset-enabled-baseline"
+        }
+      }
+    },
+    "com.amazonaws.controltower#ResetEnabledBaselineInput": {
+      "type": "structure",
+      "members": {
+        "enabledBaselineIdentifier": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>Specifies the ID of the <code>EnabledBaseline</code> resource to be re-enabled, in ARN format.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.controltower#ResetEnabledBaselineOutput": {
+      "type": "structure",
+      "members": {
+        "operationIdentifier": {
+          "target": "com.amazonaws.controltower#OperationIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The ID (in UUID format) of the asynchronous <code>ResetEnabledBaseline</code> operation. This <code>operationIdentifier</code> is used to track status through calls to the <code>GetBaselineOperation</code> API.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.controltower#ResetLandingZone": {
       "type": "operation",
       "input": {
@@ -2637,7 +3676,7 @@
         "serviceCode": {
           "target": "smithy.api#String",
           "traits": {
-            "smithy.api#documentation": "<p>The ID of the service that is associated with the error.\n      </p>"
+            "smithy.api#documentation": "<p>The ID of the service that is associated with the error.</p>"
           }
         },
         "quotaCode": {
@@ -2649,7 +3688,7 @@
         "retryAfterSeconds": {
           "target": "smithy.api#Integer",
           "traits": {
-            "smithy.api#documentation": "<p>The number of seconds to wait before retrying.</p>",
+            "smithy.api#documentation": "<p>The number of seconds the caller should wait before retrying.</p>",
             "smithy.api#httpHeader": "Retry-After"
           }
         }
@@ -2728,6 +3767,89 @@
         "smithy.api#output": {}
       }
     },
+    "com.amazonaws.controltower#UpdateEnabledBaseline": {
+      "type": "operation",
+      "input": {
+        "target": "com.amazonaws.controltower#UpdateEnabledBaselineInput"
+      },
+      "output": {
+        "target": "com.amazonaws.controltower#UpdateEnabledBaselineOutput"
+      },
+      "errors": [
+        {
+          "target": "com.amazonaws.controltower#AccessDeniedException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ConflictException"
+        },
+        {
+          "target": "com.amazonaws.controltower#InternalServerException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ResourceNotFoundException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ServiceQuotaExceededException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ThrottlingException"
+        },
+        {
+          "target": "com.amazonaws.controltower#ValidationException"
+        }
+      ],
+      "traits": {
+        "smithy.api#documentation": "<p>Updates an <code>EnabledBaseline</code> resource's applied parameters or version.</p>",
+        "smithy.api#http": {
+          "code": 200,
+          "method": "POST",
+          "uri": "/update-enabled-baseline"
+        }
+      }
+    },
+    "com.amazonaws.controltower#UpdateEnabledBaselineInput": {
+      "type": "structure",
+      "members": {
+        "baselineVersion": {
+          "target": "com.amazonaws.controltower#BaselineVersion",
+          "traits": {
+            "smithy.api#documentation": "<p>Specifies the new <code>Baseline</code> version, to which the <code>EnabledBaseline</code> should be updated.</p>",
+            "smithy.api#required": {}
+          }
+        },
+        "parameters": {
+          "target": "com.amazonaws.controltower#EnabledBaselineParameters",
+          "traits": {
+            "smithy.api#documentation": "<p>Parameters to apply when making an update.</p>"
+          }
+        },
+        "enabledBaselineIdentifier": {
+          "target": "com.amazonaws.controltower#Arn",
+          "traits": {
+            "smithy.api#documentation": "<p>Specifies the <code>EnabledBaseline</code> resource to be updated.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#input": {}
+      }
+    },
+    "com.amazonaws.controltower#UpdateEnabledBaselineOutput": {
+      "type": "structure",
+      "members": {
+        "operationIdentifier": {
+          "target": "com.amazonaws.controltower#OperationIdentifier",
+          "traits": {
+            "smithy.api#documentation": "<p>The ID (in UUID format) of the asynchronous <code>UpdateEnabledBaseline</code> operation. This <code>operationIdentifier</code> is used to track status through calls to the <code>GetBaselineOperation</code> API.</p>",
+            "smithy.api#required": {}
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#output": {}
+      }
+    },
     "com.amazonaws.controltower#UpdateEnabledControl": {
       "type": "operation",
       "input": {
@@ -2855,7 +3977,7 @@
         "manifest": {
           "target": "com.amazonaws.controltower#Manifest",
           "traits": {
-            "smithy.api#documentation": "<p>The manifest JSON file is a text file that describes your Amazon Web Services resources. For examples, review \n         <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/lz-api-launch\">Launch your landing zone</a>.</p>",
+            "smithy.api#documentation": "<p>The <code>manifest.yaml</code> file is a text file that describes your Amazon Web Services resources. For examples, review \n         <a href=\"https://docs.aws.amazon.com/controltower/latest/userguide/the-manifest-file\">The manifest file</a>.</p>",
             "smithy.api#required": {}
           }
         },
@@ -2897,7 +4019,7 @@
         }
       },
       "traits": {
-        "smithy.api#documentation": "<p>The input does not satisfy the constraints specified by an  Amazon Web Services service.</p>",
+        "smithy.api#documentation": "<p>The input does not satisfy the constraints specified by an Amazon Web Services service.</p>",
         "smithy.api#error": "client",
         "smithy.api#httpError": 400
       }