aws-sdk-fms 1.66.0 → 1.68.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
data/sig/types.rbs ADDED
@@ -0,0 +1,1227 @@
1
+ # WARNING ABOUT GENERATED CODE
2
+ #
3
+ # This file is generated. See the contributing guide for more information:
4
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
5
+ #
6
+ # WARNING ABOUT GENERATED CODE
7
+
8
+ module Aws::FMS
9
+ module Types
10
+
11
+ class AccountScope
12
+ attr_accessor accounts: ::Array[::String]
13
+ attr_accessor all_accounts_enabled: bool
14
+ attr_accessor exclude_specified_accounts: bool
15
+ SENSITIVE: []
16
+ end
17
+
18
+ class ActionTarget
19
+ attr_accessor resource_id: ::String
20
+ attr_accessor description: ::String
21
+ SENSITIVE: []
22
+ end
23
+
24
+ class AdminAccountSummary
25
+ attr_accessor admin_account: ::String
26
+ attr_accessor default_admin: bool
27
+ attr_accessor status: ("ONBOARDING" | "ONBOARDING_COMPLETE" | "OFFBOARDING" | "OFFBOARDING_COMPLETE")
28
+ SENSITIVE: []
29
+ end
30
+
31
+ class AdminScope
32
+ attr_accessor account_scope: Types::AccountScope
33
+ attr_accessor organizational_unit_scope: Types::OrganizationalUnitScope
34
+ attr_accessor region_scope: Types::RegionScope
35
+ attr_accessor policy_type_scope: Types::PolicyTypeScope
36
+ SENSITIVE: []
37
+ end
38
+
39
+ class App
40
+ attr_accessor app_name: ::String
41
+ attr_accessor protocol: ::String
42
+ attr_accessor port: ::Integer
43
+ SENSITIVE: []
44
+ end
45
+
46
+ class AppsListData
47
+ attr_accessor list_id: ::String
48
+ attr_accessor list_name: ::String
49
+ attr_accessor list_update_token: ::String
50
+ attr_accessor create_time: ::Time
51
+ attr_accessor last_update_time: ::Time
52
+ attr_accessor apps_list: ::Array[Types::App]
53
+ attr_accessor previous_apps_list: ::Hash[::String, ::Array[Types::App]]
54
+ SENSITIVE: []
55
+ end
56
+
57
+ class AppsListDataSummary
58
+ attr_accessor list_arn: ::String
59
+ attr_accessor list_id: ::String
60
+ attr_accessor list_name: ::String
61
+ attr_accessor apps_list: ::Array[Types::App]
62
+ SENSITIVE: []
63
+ end
64
+
65
+ class AssociateAdminAccountRequest
66
+ attr_accessor admin_account: ::String
67
+ SENSITIVE: []
68
+ end
69
+
70
+ class AssociateThirdPartyFirewallRequest
71
+ attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
72
+ SENSITIVE: []
73
+ end
74
+
75
+ class AssociateThirdPartyFirewallResponse
76
+ attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
77
+ SENSITIVE: []
78
+ end
79
+
80
+ class AwsEc2InstanceViolation
81
+ attr_accessor violation_target: ::String
82
+ attr_accessor aws_ec2_network_interface_violations: ::Array[Types::AwsEc2NetworkInterfaceViolation]
83
+ SENSITIVE: []
84
+ end
85
+
86
+ class AwsEc2NetworkInterfaceViolation
87
+ attr_accessor violation_target: ::String
88
+ attr_accessor violating_security_groups: ::Array[::String]
89
+ SENSITIVE: []
90
+ end
91
+
92
+ class AwsVPCSecurityGroupViolation
93
+ attr_accessor violation_target: ::String
94
+ attr_accessor violation_target_description: ::String
95
+ attr_accessor partial_matches: ::Array[Types::PartialMatch]
96
+ attr_accessor possible_security_group_remediation_actions: ::Array[Types::SecurityGroupRemediationAction]
97
+ SENSITIVE: []
98
+ end
99
+
100
+ class BatchAssociateResourceRequest
101
+ attr_accessor resource_set_identifier: ::String
102
+ attr_accessor items: ::Array[::String]
103
+ SENSITIVE: []
104
+ end
105
+
106
+ class BatchAssociateResourceResponse
107
+ attr_accessor resource_set_identifier: ::String
108
+ attr_accessor failed_items: ::Array[Types::FailedItem]
109
+ SENSITIVE: []
110
+ end
111
+
112
+ class BatchDisassociateResourceRequest
113
+ attr_accessor resource_set_identifier: ::String
114
+ attr_accessor items: ::Array[::String]
115
+ SENSITIVE: []
116
+ end
117
+
118
+ class BatchDisassociateResourceResponse
119
+ attr_accessor resource_set_identifier: ::String
120
+ attr_accessor failed_items: ::Array[Types::FailedItem]
121
+ SENSITIVE: []
122
+ end
123
+
124
+ class ComplianceViolator
125
+ attr_accessor resource_id: ::String
126
+ attr_accessor violation_reason: ("WEB_ACL_MISSING_RULE_GROUP" | "RESOURCE_MISSING_WEB_ACL" | "RESOURCE_INCORRECT_WEB_ACL" | "RESOURCE_MISSING_SHIELD_PROTECTION" | "RESOURCE_MISSING_WEB_ACL_OR_SHIELD_PROTECTION" | "RESOURCE_MISSING_SECURITY_GROUP" | "RESOURCE_VIOLATES_AUDIT_SECURITY_GROUP" | "SECURITY_GROUP_UNUSED" | "SECURITY_GROUP_REDUNDANT" | "FMS_CREATED_SECURITY_GROUP_EDITED" | "MISSING_FIREWALL" | "MISSING_FIREWALL_SUBNET_IN_AZ" | "MISSING_EXPECTED_ROUTE_TABLE" | "NETWORK_FIREWALL_POLICY_MODIFIED" | "FIREWALL_SUBNET_IS_OUT_OF_SCOPE" | "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE" | "FIREWALL_SUBNET_MISSING_EXPECTED_ROUTE" | "UNEXPECTED_FIREWALL_ROUTES" | "UNEXPECTED_TARGET_GATEWAY_ROUTES" | "TRAFFIC_INSPECTION_CROSSES_AZ_BOUNDARY" | "INVALID_ROUTE_CONFIGURATION" | "MISSING_TARGET_GATEWAY" | "INTERNET_TRAFFIC_NOT_INSPECTED" | "BLACK_HOLE_ROUTE_DETECTED" | "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET" | "RESOURCE_MISSING_DNS_FIREWALL" | "ROUTE_HAS_OUT_OF_SCOPE_ENDPOINT" | "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT" | "INVALID_NETWORK_ACL_ENTRY")
127
+ attr_accessor resource_type: ::String
128
+ attr_accessor metadata: ::Hash[::String, ::String]
129
+ SENSITIVE: []
130
+ end
131
+
132
+ class CreateNetworkAclAction
133
+ attr_accessor description: ::String
134
+ attr_accessor vpc: Types::ActionTarget
135
+ attr_accessor fms_can_remediate: bool
136
+ SENSITIVE: []
137
+ end
138
+
139
+ class CreateNetworkAclEntriesAction
140
+ attr_accessor description: ::String
141
+ attr_accessor network_acl_id: Types::ActionTarget
142
+ attr_accessor network_acl_entries_to_be_created: ::Array[Types::EntryDescription]
143
+ attr_accessor fms_can_remediate: bool
144
+ SENSITIVE: []
145
+ end
146
+
147
+ class DeleteAppsListRequest
148
+ attr_accessor list_id: ::String
149
+ SENSITIVE: []
150
+ end
151
+
152
+ class DeleteNetworkAclEntriesAction
153
+ attr_accessor description: ::String
154
+ attr_accessor network_acl_id: Types::ActionTarget
155
+ attr_accessor network_acl_entries_to_be_deleted: ::Array[Types::EntryDescription]
156
+ attr_accessor fms_can_remediate: bool
157
+ SENSITIVE: []
158
+ end
159
+
160
+ class DeleteNotificationChannelRequest < Aws::EmptyStructure
161
+ end
162
+
163
+ class DeletePolicyRequest
164
+ attr_accessor policy_id: ::String
165
+ attr_accessor delete_all_policy_resources: bool
166
+ SENSITIVE: []
167
+ end
168
+
169
+ class DeleteProtocolsListRequest
170
+ attr_accessor list_id: ::String
171
+ SENSITIVE: []
172
+ end
173
+
174
+ class DeleteResourceSetRequest
175
+ attr_accessor identifier: ::String
176
+ SENSITIVE: []
177
+ end
178
+
179
+ class DisassociateAdminAccountRequest < Aws::EmptyStructure
180
+ end
181
+
182
+ class DisassociateThirdPartyFirewallRequest
183
+ attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
184
+ SENSITIVE: []
185
+ end
186
+
187
+ class DisassociateThirdPartyFirewallResponse
188
+ attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
189
+ SENSITIVE: []
190
+ end
191
+
192
+ class DiscoveredResource
193
+ attr_accessor uri: ::String
194
+ attr_accessor account_id: ::String
195
+ attr_accessor type: ::String
196
+ attr_accessor name: ::String
197
+ SENSITIVE: []
198
+ end
199
+
200
+ class DnsDuplicateRuleGroupViolation
201
+ attr_accessor violation_target: ::String
202
+ attr_accessor violation_target_description: ::String
203
+ SENSITIVE: []
204
+ end
205
+
206
+ class DnsRuleGroupLimitExceededViolation
207
+ attr_accessor violation_target: ::String
208
+ attr_accessor violation_target_description: ::String
209
+ attr_accessor number_of_rule_groups_already_associated: ::Integer
210
+ SENSITIVE: []
211
+ end
212
+
213
+ class DnsRuleGroupPriorityConflictViolation
214
+ attr_accessor violation_target: ::String
215
+ attr_accessor violation_target_description: ::String
216
+ attr_accessor conflicting_priority: ::Integer
217
+ attr_accessor conflicting_policy_id: ::String
218
+ attr_accessor unavailable_priorities: ::Array[::Integer]
219
+ SENSITIVE: []
220
+ end
221
+
222
+ class EC2AssociateRouteTableAction
223
+ attr_accessor description: ::String
224
+ attr_accessor route_table_id: Types::ActionTarget
225
+ attr_accessor subnet_id: Types::ActionTarget
226
+ attr_accessor gateway_id: Types::ActionTarget
227
+ SENSITIVE: []
228
+ end
229
+
230
+ class EC2CopyRouteTableAction
231
+ attr_accessor description: ::String
232
+ attr_accessor vpc_id: Types::ActionTarget
233
+ attr_accessor route_table_id: Types::ActionTarget
234
+ SENSITIVE: []
235
+ end
236
+
237
+ class EC2CreateRouteAction
238
+ attr_accessor description: ::String
239
+ attr_accessor destination_cidr_block: ::String
240
+ attr_accessor destination_prefix_list_id: ::String
241
+ attr_accessor destination_ipv_6_cidr_block: ::String
242
+ attr_accessor vpc_endpoint_id: Types::ActionTarget
243
+ attr_accessor gateway_id: Types::ActionTarget
244
+ attr_accessor route_table_id: Types::ActionTarget
245
+ SENSITIVE: []
246
+ end
247
+
248
+ class EC2CreateRouteTableAction
249
+ attr_accessor description: ::String
250
+ attr_accessor vpc_id: Types::ActionTarget
251
+ SENSITIVE: []
252
+ end
253
+
254
+ class EC2DeleteRouteAction
255
+ attr_accessor description: ::String
256
+ attr_accessor destination_cidr_block: ::String
257
+ attr_accessor destination_prefix_list_id: ::String
258
+ attr_accessor destination_ipv_6_cidr_block: ::String
259
+ attr_accessor route_table_id: Types::ActionTarget
260
+ SENSITIVE: []
261
+ end
262
+
263
+ class EC2ReplaceRouteAction
264
+ attr_accessor description: ::String
265
+ attr_accessor destination_cidr_block: ::String
266
+ attr_accessor destination_prefix_list_id: ::String
267
+ attr_accessor destination_ipv_6_cidr_block: ::String
268
+ attr_accessor gateway_id: Types::ActionTarget
269
+ attr_accessor route_table_id: Types::ActionTarget
270
+ SENSITIVE: []
271
+ end
272
+
273
+ class EC2ReplaceRouteTableAssociationAction
274
+ attr_accessor description: ::String
275
+ attr_accessor association_id: Types::ActionTarget
276
+ attr_accessor route_table_id: Types::ActionTarget
277
+ SENSITIVE: []
278
+ end
279
+
280
+ class EntryDescription
281
+ attr_accessor entry_detail: Types::NetworkAclEntry
282
+ attr_accessor entry_rule_number: ::Integer
283
+ attr_accessor entry_type: ("FMS_MANAGED_FIRST_ENTRY" | "FMS_MANAGED_LAST_ENTRY" | "CUSTOM_ENTRY")
284
+ SENSITIVE: []
285
+ end
286
+
287
+ class EntryViolation
288
+ attr_accessor expected_entry: Types::EntryDescription
289
+ attr_accessor expected_evaluation_order: ::String
290
+ attr_accessor actual_evaluation_order: ::String
291
+ attr_accessor entry_at_expected_evaluation_order: Types::EntryDescription
292
+ attr_accessor entries_with_conflicts: ::Array[Types::EntryDescription]
293
+ attr_accessor entry_violation_reasons: ::Array[("MISSING_EXPECTED_ENTRY" | "INCORRECT_ENTRY_ORDER" | "ENTRY_CONFLICT")]
294
+ SENSITIVE: []
295
+ end
296
+
297
+ class EvaluationResult
298
+ attr_accessor compliance_status: ("COMPLIANT" | "NON_COMPLIANT")
299
+ attr_accessor violator_count: ::Integer
300
+ attr_accessor evaluation_limit_exceeded: bool
301
+ SENSITIVE: []
302
+ end
303
+
304
+ class ExpectedRoute
305
+ attr_accessor ip_v4_cidr: ::String
306
+ attr_accessor prefix_list_id: ::String
307
+ attr_accessor ip_v6_cidr: ::String
308
+ attr_accessor contributing_subnets: ::Array[::String]
309
+ attr_accessor allowed_targets: ::Array[::String]
310
+ attr_accessor route_table_id: ::String
311
+ SENSITIVE: []
312
+ end
313
+
314
+ class FMSPolicyUpdateFirewallCreationConfigAction
315
+ attr_accessor description: ::String
316
+ attr_accessor firewall_creation_config: ::String
317
+ SENSITIVE: []
318
+ end
319
+
320
+ class FailedItem
321
+ attr_accessor uri: ::String
322
+ attr_accessor reason: ("NOT_VALID_ARN" | "NOT_VALID_PARTITION" | "NOT_VALID_REGION" | "NOT_VALID_SERVICE" | "NOT_VALID_RESOURCE_TYPE" | "NOT_VALID_ACCOUNT_ID")
323
+ SENSITIVE: []
324
+ end
325
+
326
+ class FirewallSubnetIsOutOfScopeViolation
327
+ attr_accessor firewall_subnet_id: ::String
328
+ attr_accessor vpc_id: ::String
329
+ attr_accessor subnet_availability_zone: ::String
330
+ attr_accessor subnet_availability_zone_id: ::String
331
+ attr_accessor vpc_endpoint_id: ::String
332
+ SENSITIVE: []
333
+ end
334
+
335
+ class FirewallSubnetMissingVPCEndpointViolation
336
+ attr_accessor firewall_subnet_id: ::String
337
+ attr_accessor vpc_id: ::String
338
+ attr_accessor subnet_availability_zone: ::String
339
+ attr_accessor subnet_availability_zone_id: ::String
340
+ SENSITIVE: []
341
+ end
342
+
343
+ class GetAdminAccountRequest < Aws::EmptyStructure
344
+ end
345
+
346
+ class GetAdminAccountResponse
347
+ attr_accessor admin_account: ::String
348
+ attr_accessor role_status: ("READY" | "CREATING" | "PENDING_DELETION" | "DELETING" | "DELETED")
349
+ SENSITIVE: []
350
+ end
351
+
352
+ class GetAdminScopeRequest
353
+ attr_accessor admin_account: ::String
354
+ SENSITIVE: []
355
+ end
356
+
357
+ class GetAdminScopeResponse
358
+ attr_accessor admin_scope: Types::AdminScope
359
+ attr_accessor status: ("ONBOARDING" | "ONBOARDING_COMPLETE" | "OFFBOARDING" | "OFFBOARDING_COMPLETE")
360
+ SENSITIVE: []
361
+ end
362
+
363
+ class GetAppsListRequest
364
+ attr_accessor list_id: ::String
365
+ attr_accessor default_list: bool
366
+ SENSITIVE: []
367
+ end
368
+
369
+ class GetAppsListResponse
370
+ attr_accessor apps_list: Types::AppsListData
371
+ attr_accessor apps_list_arn: ::String
372
+ SENSITIVE: []
373
+ end
374
+
375
+ class GetComplianceDetailRequest
376
+ attr_accessor policy_id: ::String
377
+ attr_accessor member_account: ::String
378
+ SENSITIVE: []
379
+ end
380
+
381
+ class GetComplianceDetailResponse
382
+ attr_accessor policy_compliance_detail: Types::PolicyComplianceDetail
383
+ SENSITIVE: []
384
+ end
385
+
386
+ class GetNotificationChannelRequest < Aws::EmptyStructure
387
+ end
388
+
389
+ class GetNotificationChannelResponse
390
+ attr_accessor sns_topic_arn: ::String
391
+ attr_accessor sns_role_name: ::String
392
+ SENSITIVE: []
393
+ end
394
+
395
+ class GetPolicyRequest
396
+ attr_accessor policy_id: ::String
397
+ SENSITIVE: []
398
+ end
399
+
400
+ class GetPolicyResponse
401
+ attr_accessor policy: Types::Policy
402
+ attr_accessor policy_arn: ::String
403
+ SENSITIVE: []
404
+ end
405
+
406
+ class GetProtectionStatusRequest
407
+ attr_accessor policy_id: ::String
408
+ attr_accessor member_account_id: ::String
409
+ attr_accessor start_time: ::Time
410
+ attr_accessor end_time: ::Time
411
+ attr_accessor next_token: ::String
412
+ attr_accessor max_results: ::Integer
413
+ SENSITIVE: []
414
+ end
415
+
416
+ class GetProtectionStatusResponse
417
+ attr_accessor admin_account_id: ::String
418
+ attr_accessor service_type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
419
+ attr_accessor data: ::String
420
+ attr_accessor next_token: ::String
421
+ SENSITIVE: []
422
+ end
423
+
424
+ class GetProtocolsListRequest
425
+ attr_accessor list_id: ::String
426
+ attr_accessor default_list: bool
427
+ SENSITIVE: []
428
+ end
429
+
430
+ class GetProtocolsListResponse
431
+ attr_accessor protocols_list: Types::ProtocolsListData
432
+ attr_accessor protocols_list_arn: ::String
433
+ SENSITIVE: []
434
+ end
435
+
436
+ class GetResourceSetRequest
437
+ attr_accessor identifier: ::String
438
+ SENSITIVE: []
439
+ end
440
+
441
+ class GetResourceSetResponse
442
+ attr_accessor resource_set: Types::ResourceSet
443
+ attr_accessor resource_set_arn: ::String
444
+ SENSITIVE: []
445
+ end
446
+
447
+ class GetThirdPartyFirewallAssociationStatusRequest
448
+ attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
449
+ SENSITIVE: []
450
+ end
451
+
452
+ class GetThirdPartyFirewallAssociationStatusResponse
453
+ attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
454
+ attr_accessor marketplace_onboarding_status: ("NO_SUBSCRIPTION" | "NOT_COMPLETE" | "COMPLETE")
455
+ SENSITIVE: []
456
+ end
457
+
458
+ class GetViolationDetailsRequest
459
+ attr_accessor policy_id: ::String
460
+ attr_accessor member_account: ::String
461
+ attr_accessor resource_id: ::String
462
+ attr_accessor resource_type: ::String
463
+ SENSITIVE: []
464
+ end
465
+
466
+ class GetViolationDetailsResponse
467
+ attr_accessor violation_detail: Types::ViolationDetail
468
+ SENSITIVE: []
469
+ end
470
+
471
+ class InternalErrorException
472
+ attr_accessor message: ::String
473
+ SENSITIVE: []
474
+ end
475
+
476
+ class InvalidInputException
477
+ attr_accessor message: ::String
478
+ SENSITIVE: []
479
+ end
480
+
481
+ class InvalidNetworkAclEntriesViolation
482
+ attr_accessor vpc: ::String
483
+ attr_accessor subnet: ::String
484
+ attr_accessor subnet_availability_zone: ::String
485
+ attr_accessor current_associated_network_acl: ::String
486
+ attr_accessor entry_violations: ::Array[Types::EntryViolation]
487
+ SENSITIVE: []
488
+ end
489
+
490
+ class InvalidOperationException
491
+ attr_accessor message: ::String
492
+ SENSITIVE: []
493
+ end
494
+
495
+ class InvalidTypeException
496
+ attr_accessor message: ::String
497
+ SENSITIVE: []
498
+ end
499
+
500
+ class LimitExceededException
501
+ attr_accessor message: ::String
502
+ SENSITIVE: []
503
+ end
504
+
505
+ class ListAdminAccountsForOrganizationRequest
506
+ attr_accessor next_token: ::String
507
+ attr_accessor max_results: ::Integer
508
+ SENSITIVE: []
509
+ end
510
+
511
+ class ListAdminAccountsForOrganizationResponse
512
+ attr_accessor admin_accounts: ::Array[Types::AdminAccountSummary]
513
+ attr_accessor next_token: ::String
514
+ SENSITIVE: []
515
+ end
516
+
517
+ class ListAdminsManagingAccountRequest
518
+ attr_accessor next_token: ::String
519
+ attr_accessor max_results: ::Integer
520
+ SENSITIVE: []
521
+ end
522
+
523
+ class ListAdminsManagingAccountResponse
524
+ attr_accessor admin_accounts: ::Array[::String]
525
+ attr_accessor next_token: ::String
526
+ SENSITIVE: []
527
+ end
528
+
529
+ class ListAppsListsRequest
530
+ attr_accessor default_lists: bool
531
+ attr_accessor next_token: ::String
532
+ attr_accessor max_results: ::Integer
533
+ SENSITIVE: []
534
+ end
535
+
536
+ class ListAppsListsResponse
537
+ attr_accessor apps_lists: ::Array[Types::AppsListDataSummary]
538
+ attr_accessor next_token: ::String
539
+ SENSITIVE: []
540
+ end
541
+
542
+ class ListComplianceStatusRequest
543
+ attr_accessor policy_id: ::String
544
+ attr_accessor next_token: ::String
545
+ attr_accessor max_results: ::Integer
546
+ SENSITIVE: []
547
+ end
548
+
549
+ class ListComplianceStatusResponse
550
+ attr_accessor policy_compliance_status_list: ::Array[Types::PolicyComplianceStatus]
551
+ attr_accessor next_token: ::String
552
+ SENSITIVE: []
553
+ end
554
+
555
+ class ListDiscoveredResourcesRequest
556
+ attr_accessor member_account_ids: ::Array[::String]
557
+ attr_accessor resource_type: ::String
558
+ attr_accessor max_results: ::Integer
559
+ attr_accessor next_token: ::String
560
+ SENSITIVE: []
561
+ end
562
+
563
+ class ListDiscoveredResourcesResponse
564
+ attr_accessor items: ::Array[Types::DiscoveredResource]
565
+ attr_accessor next_token: ::String
566
+ SENSITIVE: []
567
+ end
568
+
569
+ class ListMemberAccountsRequest
570
+ attr_accessor next_token: ::String
571
+ attr_accessor max_results: ::Integer
572
+ SENSITIVE: []
573
+ end
574
+
575
+ class ListMemberAccountsResponse
576
+ attr_accessor member_accounts: ::Array[::String]
577
+ attr_accessor next_token: ::String
578
+ SENSITIVE: []
579
+ end
580
+
581
+ class ListPoliciesRequest
582
+ attr_accessor next_token: ::String
583
+ attr_accessor max_results: ::Integer
584
+ SENSITIVE: []
585
+ end
586
+
587
+ class ListPoliciesResponse
588
+ attr_accessor policy_list: ::Array[Types::PolicySummary]
589
+ attr_accessor next_token: ::String
590
+ SENSITIVE: []
591
+ end
592
+
593
+ class ListProtocolsListsRequest
594
+ attr_accessor default_lists: bool
595
+ attr_accessor next_token: ::String
596
+ attr_accessor max_results: ::Integer
597
+ SENSITIVE: []
598
+ end
599
+
600
+ class ListProtocolsListsResponse
601
+ attr_accessor protocols_lists: ::Array[Types::ProtocolsListDataSummary]
602
+ attr_accessor next_token: ::String
603
+ SENSITIVE: []
604
+ end
605
+
606
+ class ListResourceSetResourcesRequest
607
+ attr_accessor identifier: ::String
608
+ attr_accessor max_results: ::Integer
609
+ attr_accessor next_token: ::String
610
+ SENSITIVE: []
611
+ end
612
+
613
+ class ListResourceSetResourcesResponse
614
+ attr_accessor items: ::Array[Types::Resource]
615
+ attr_accessor next_token: ::String
616
+ SENSITIVE: []
617
+ end
618
+
619
+ class ListResourceSetsRequest
620
+ attr_accessor next_token: ::String
621
+ attr_accessor max_results: ::Integer
622
+ SENSITIVE: []
623
+ end
624
+
625
+ class ListResourceSetsResponse
626
+ attr_accessor resource_sets: ::Array[Types::ResourceSetSummary]
627
+ attr_accessor next_token: ::String
628
+ SENSITIVE: []
629
+ end
630
+
631
+ class ListTagsForResourceRequest
632
+ attr_accessor resource_arn: ::String
633
+ SENSITIVE: []
634
+ end
635
+
636
+ class ListTagsForResourceResponse
637
+ attr_accessor tag_list: ::Array[Types::Tag]
638
+ SENSITIVE: []
639
+ end
640
+
641
+ class ListThirdPartyFirewallFirewallPoliciesRequest
642
+ attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
643
+ attr_accessor next_token: ::String
644
+ attr_accessor max_results: ::Integer
645
+ SENSITIVE: []
646
+ end
647
+
648
+ class ListThirdPartyFirewallFirewallPoliciesResponse
649
+ attr_accessor third_party_firewall_firewall_policies: ::Array[Types::ThirdPartyFirewallFirewallPolicy]
650
+ attr_accessor next_token: ::String
651
+ SENSITIVE: []
652
+ end
653
+
654
+ class NetworkAclCommonPolicy
655
+ attr_accessor network_acl_entry_set: Types::NetworkAclEntrySet
656
+ SENSITIVE: []
657
+ end
658
+
659
+ class NetworkAclEntry
660
+ attr_accessor icmp_type_code: Types::NetworkAclIcmpTypeCode
661
+ attr_accessor protocol: ::String
662
+ attr_accessor port_range: Types::NetworkAclPortRange
663
+ attr_accessor cidr_block: ::String
664
+ attr_accessor ipv_6_cidr_block: ::String
665
+ attr_accessor rule_action: ("allow" | "deny")
666
+ attr_accessor egress: bool
667
+ SENSITIVE: []
668
+ end
669
+
670
+ class NetworkAclEntrySet
671
+ attr_accessor first_entries: ::Array[Types::NetworkAclEntry]
672
+ attr_accessor force_remediate_for_first_entries: bool
673
+ attr_accessor last_entries: ::Array[Types::NetworkAclEntry]
674
+ attr_accessor force_remediate_for_last_entries: bool
675
+ SENSITIVE: []
676
+ end
677
+
678
+ class NetworkAclIcmpTypeCode
679
+ attr_accessor code: ::Integer
680
+ attr_accessor type: ::Integer
681
+ SENSITIVE: []
682
+ end
683
+
684
+ class NetworkAclPortRange
685
+ attr_accessor from: ::Integer
686
+ attr_accessor to: ::Integer
687
+ SENSITIVE: []
688
+ end
689
+
690
+ class NetworkFirewallBlackHoleRouteDetectedViolation
691
+ attr_accessor violation_target: ::String
692
+ attr_accessor route_table_id: ::String
693
+ attr_accessor vpc_id: ::String
694
+ attr_accessor violating_routes: ::Array[Types::Route]
695
+ SENSITIVE: []
696
+ end
697
+
698
+ class NetworkFirewallInternetTrafficNotInspectedViolation
699
+ attr_accessor subnet_id: ::String
700
+ attr_accessor subnet_availability_zone: ::String
701
+ attr_accessor route_table_id: ::String
702
+ attr_accessor violating_routes: ::Array[Types::Route]
703
+ attr_accessor is_route_table_used_in_different_az: bool
704
+ attr_accessor current_firewall_subnet_route_table: ::String
705
+ attr_accessor expected_firewall_endpoint: ::String
706
+ attr_accessor firewall_subnet_id: ::String
707
+ attr_accessor expected_firewall_subnet_routes: ::Array[Types::ExpectedRoute]
708
+ attr_accessor actual_firewall_subnet_routes: ::Array[Types::Route]
709
+ attr_accessor internet_gateway_id: ::String
710
+ attr_accessor current_internet_gateway_route_table: ::String
711
+ attr_accessor expected_internet_gateway_routes: ::Array[Types::ExpectedRoute]
712
+ attr_accessor actual_internet_gateway_routes: ::Array[Types::Route]
713
+ attr_accessor vpc_id: ::String
714
+ SENSITIVE: []
715
+ end
716
+
717
+ class NetworkFirewallInvalidRouteConfigurationViolation
718
+ attr_accessor affected_subnets: ::Array[::String]
719
+ attr_accessor route_table_id: ::String
720
+ attr_accessor is_route_table_used_in_different_az: bool
721
+ attr_accessor violating_route: Types::Route
722
+ attr_accessor current_firewall_subnet_route_table: ::String
723
+ attr_accessor expected_firewall_endpoint: ::String
724
+ attr_accessor actual_firewall_endpoint: ::String
725
+ attr_accessor expected_firewall_subnet_id: ::String
726
+ attr_accessor actual_firewall_subnet_id: ::String
727
+ attr_accessor expected_firewall_subnet_routes: ::Array[Types::ExpectedRoute]
728
+ attr_accessor actual_firewall_subnet_routes: ::Array[Types::Route]
729
+ attr_accessor internet_gateway_id: ::String
730
+ attr_accessor current_internet_gateway_route_table: ::String
731
+ attr_accessor expected_internet_gateway_routes: ::Array[Types::ExpectedRoute]
732
+ attr_accessor actual_internet_gateway_routes: ::Array[Types::Route]
733
+ attr_accessor vpc_id: ::String
734
+ SENSITIVE: []
735
+ end
736
+
737
+ class NetworkFirewallMissingExpectedRTViolation
738
+ attr_accessor violation_target: ::String
739
+ attr_accessor vpc: ::String
740
+ attr_accessor availability_zone: ::String
741
+ attr_accessor current_route_table: ::String
742
+ attr_accessor expected_route_table: ::String
743
+ SENSITIVE: []
744
+ end
745
+
746
+ class NetworkFirewallMissingExpectedRoutesViolation
747
+ attr_accessor violation_target: ::String
748
+ attr_accessor expected_routes: ::Array[Types::ExpectedRoute]
749
+ attr_accessor vpc_id: ::String
750
+ SENSITIVE: []
751
+ end
752
+
753
+ class NetworkFirewallMissingFirewallViolation
754
+ attr_accessor violation_target: ::String
755
+ attr_accessor vpc: ::String
756
+ attr_accessor availability_zone: ::String
757
+ attr_accessor target_violation_reason: ::String
758
+ SENSITIVE: []
759
+ end
760
+
761
+ class NetworkFirewallMissingSubnetViolation
762
+ attr_accessor violation_target: ::String
763
+ attr_accessor vpc: ::String
764
+ attr_accessor availability_zone: ::String
765
+ attr_accessor target_violation_reason: ::String
766
+ SENSITIVE: []
767
+ end
768
+
769
+ class NetworkFirewallPolicy
770
+ attr_accessor firewall_deployment_model: ("CENTRALIZED" | "DISTRIBUTED")
771
+ SENSITIVE: []
772
+ end
773
+
774
+ class NetworkFirewallPolicyDescription
775
+ attr_accessor stateless_rule_groups: ::Array[Types::StatelessRuleGroup]
776
+ attr_accessor stateless_default_actions: ::Array[::String]
777
+ attr_accessor stateless_fragment_default_actions: ::Array[::String]
778
+ attr_accessor stateless_custom_actions: ::Array[::String]
779
+ attr_accessor stateful_rule_groups: ::Array[Types::StatefulRuleGroup]
780
+ attr_accessor stateful_default_actions: ::Array[::String]
781
+ attr_accessor stateful_engine_options: Types::StatefulEngineOptions
782
+ SENSITIVE: []
783
+ end
784
+
785
+ class NetworkFirewallPolicyModifiedViolation
786
+ attr_accessor violation_target: ::String
787
+ attr_accessor current_policy_description: Types::NetworkFirewallPolicyDescription
788
+ attr_accessor expected_policy_description: Types::NetworkFirewallPolicyDescription
789
+ SENSITIVE: []
790
+ end
791
+
792
+ class NetworkFirewallStatefulRuleGroupOverride
793
+ attr_accessor action: ("DROP_TO_ALERT")
794
+ SENSITIVE: []
795
+ end
796
+
797
+ class NetworkFirewallUnexpectedFirewallRoutesViolation
798
+ attr_accessor firewall_subnet_id: ::String
799
+ attr_accessor violating_routes: ::Array[Types::Route]
800
+ attr_accessor route_table_id: ::String
801
+ attr_accessor firewall_endpoint: ::String
802
+ attr_accessor vpc_id: ::String
803
+ SENSITIVE: []
804
+ end
805
+
806
+ class NetworkFirewallUnexpectedGatewayRoutesViolation
807
+ attr_accessor gateway_id: ::String
808
+ attr_accessor violating_routes: ::Array[Types::Route]
809
+ attr_accessor route_table_id: ::String
810
+ attr_accessor vpc_id: ::String
811
+ SENSITIVE: []
812
+ end
813
+
814
+ class OrganizationalUnitScope
815
+ attr_accessor organizational_units: ::Array[::String]
816
+ attr_accessor all_organizational_units_enabled: bool
817
+ attr_accessor exclude_specified_organizational_units: bool
818
+ SENSITIVE: []
819
+ end
820
+
821
+ class PartialMatch
822
+ attr_accessor reference: ::String
823
+ attr_accessor target_violation_reasons: ::Array[::String]
824
+ SENSITIVE: []
825
+ end
826
+
827
+ class Policy
828
+ attr_accessor policy_id: ::String
829
+ attr_accessor policy_name: ::String
830
+ attr_accessor policy_update_token: ::String
831
+ attr_accessor security_service_policy_data: Types::SecurityServicePolicyData
832
+ attr_accessor resource_type: ::String
833
+ attr_accessor resource_type_list: ::Array[::String]
834
+ attr_accessor resource_tags: ::Array[Types::ResourceTag]
835
+ attr_accessor exclude_resource_tags: bool
836
+ attr_accessor remediation_enabled: bool
837
+ attr_accessor delete_unused_fm_managed_resources: bool
838
+ attr_accessor include_map: ::Hash[("ACCOUNT" | "ORG_UNIT"), ::Array[::String]]
839
+ attr_accessor exclude_map: ::Hash[("ACCOUNT" | "ORG_UNIT"), ::Array[::String]]
840
+ attr_accessor resource_set_ids: ::Array[::String]
841
+ attr_accessor policy_description: ::String
842
+ attr_accessor policy_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
843
+ SENSITIVE: []
844
+ end
845
+
846
+ class PolicyComplianceDetail
847
+ attr_accessor policy_owner: ::String
848
+ attr_accessor policy_id: ::String
849
+ attr_accessor member_account: ::String
850
+ attr_accessor violators: ::Array[Types::ComplianceViolator]
851
+ attr_accessor evaluation_limit_exceeded: bool
852
+ attr_accessor expired_at: ::Time
853
+ attr_accessor issue_info_map: ::Hash[("AWSCONFIG" | "AWSWAF" | "AWSSHIELD_ADVANCED" | "AWSVPC"), ::String]
854
+ SENSITIVE: []
855
+ end
856
+
857
+ class PolicyComplianceStatus
858
+ attr_accessor policy_owner: ::String
859
+ attr_accessor policy_id: ::String
860
+ attr_accessor policy_name: ::String
861
+ attr_accessor member_account: ::String
862
+ attr_accessor evaluation_results: ::Array[Types::EvaluationResult]
863
+ attr_accessor last_updated: ::Time
864
+ attr_accessor issue_info_map: ::Hash[("AWSCONFIG" | "AWSWAF" | "AWSSHIELD_ADVANCED" | "AWSVPC"), ::String]
865
+ SENSITIVE: []
866
+ end
867
+
868
+ class PolicyOption
869
+ attr_accessor network_firewall_policy: Types::NetworkFirewallPolicy
870
+ attr_accessor third_party_firewall_policy: Types::ThirdPartyFirewallPolicy
871
+ attr_accessor network_acl_common_policy: Types::NetworkAclCommonPolicy
872
+ SENSITIVE: []
873
+ end
874
+
875
+ class PolicySummary
876
+ attr_accessor policy_arn: ::String
877
+ attr_accessor policy_id: ::String
878
+ attr_accessor policy_name: ::String
879
+ attr_accessor resource_type: ::String
880
+ attr_accessor security_service_type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
881
+ attr_accessor remediation_enabled: bool
882
+ attr_accessor delete_unused_fm_managed_resources: bool
883
+ attr_accessor policy_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
884
+ SENSITIVE: []
885
+ end
886
+
887
+ class PolicyTypeScope
888
+ attr_accessor policy_types: ::Array[("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")]
889
+ attr_accessor all_policy_types_enabled: bool
890
+ SENSITIVE: []
891
+ end
892
+
893
+ class PossibleRemediationAction
894
+ attr_accessor description: ::String
895
+ attr_accessor ordered_remediation_actions: ::Array[Types::RemediationActionWithOrder]
896
+ attr_accessor is_default_action: bool
897
+ SENSITIVE: []
898
+ end
899
+
900
+ class PossibleRemediationActions
901
+ attr_accessor description: ::String
902
+ attr_accessor actions: ::Array[Types::PossibleRemediationAction]
903
+ SENSITIVE: []
904
+ end
905
+
906
+ class ProtocolsListData
907
+ attr_accessor list_id: ::String
908
+ attr_accessor list_name: ::String
909
+ attr_accessor list_update_token: ::String
910
+ attr_accessor create_time: ::Time
911
+ attr_accessor last_update_time: ::Time
912
+ attr_accessor protocols_list: ::Array[::String]
913
+ attr_accessor previous_protocols_list: ::Hash[::String, ::Array[::String]]
914
+ SENSITIVE: []
915
+ end
916
+
917
+ class ProtocolsListDataSummary
918
+ attr_accessor list_arn: ::String
919
+ attr_accessor list_id: ::String
920
+ attr_accessor list_name: ::String
921
+ attr_accessor protocols_list: ::Array[::String]
922
+ SENSITIVE: []
923
+ end
924
+
925
+ class PutAdminAccountRequest
926
+ attr_accessor admin_account: ::String
927
+ attr_accessor admin_scope: Types::AdminScope
928
+ SENSITIVE: []
929
+ end
930
+
931
+ class PutAppsListRequest
932
+ attr_accessor apps_list: Types::AppsListData
933
+ attr_accessor tag_list: ::Array[Types::Tag]
934
+ SENSITIVE: []
935
+ end
936
+
937
+ class PutAppsListResponse
938
+ attr_accessor apps_list: Types::AppsListData
939
+ attr_accessor apps_list_arn: ::String
940
+ SENSITIVE: []
941
+ end
942
+
943
+ class PutNotificationChannelRequest
944
+ attr_accessor sns_topic_arn: ::String
945
+ attr_accessor sns_role_name: ::String
946
+ SENSITIVE: []
947
+ end
948
+
949
+ class PutPolicyRequest
950
+ attr_accessor policy: Types::Policy
951
+ attr_accessor tag_list: ::Array[Types::Tag]
952
+ SENSITIVE: []
953
+ end
954
+
955
+ class PutPolicyResponse
956
+ attr_accessor policy: Types::Policy
957
+ attr_accessor policy_arn: ::String
958
+ SENSITIVE: []
959
+ end
960
+
961
+ class PutProtocolsListRequest
962
+ attr_accessor protocols_list: Types::ProtocolsListData
963
+ attr_accessor tag_list: ::Array[Types::Tag]
964
+ SENSITIVE: []
965
+ end
966
+
967
+ class PutProtocolsListResponse
968
+ attr_accessor protocols_list: Types::ProtocolsListData
969
+ attr_accessor protocols_list_arn: ::String
970
+ SENSITIVE: []
971
+ end
972
+
973
+ class PutResourceSetRequest
974
+ attr_accessor resource_set: Types::ResourceSet
975
+ attr_accessor tag_list: ::Array[Types::Tag]
976
+ SENSITIVE: []
977
+ end
978
+
979
+ class PutResourceSetResponse
980
+ attr_accessor resource_set: Types::ResourceSet
981
+ attr_accessor resource_set_arn: ::String
982
+ SENSITIVE: []
983
+ end
984
+
985
+ class RegionScope
986
+ attr_accessor regions: ::Array[::String]
987
+ attr_accessor all_regions_enabled: bool
988
+ SENSITIVE: []
989
+ end
990
+
991
+ class RemediationAction
992
+ attr_accessor description: ::String
993
+ attr_accessor ec2_create_route_action: Types::EC2CreateRouteAction
994
+ attr_accessor ec2_replace_route_action: Types::EC2ReplaceRouteAction
995
+ attr_accessor ec2_delete_route_action: Types::EC2DeleteRouteAction
996
+ attr_accessor ec2_copy_route_table_action: Types::EC2CopyRouteTableAction
997
+ attr_accessor ec2_replace_route_table_association_action: Types::EC2ReplaceRouteTableAssociationAction
998
+ attr_accessor ec2_associate_route_table_action: Types::EC2AssociateRouteTableAction
999
+ attr_accessor ec2_create_route_table_action: Types::EC2CreateRouteTableAction
1000
+ attr_accessor fms_policy_update_firewall_creation_config_action: Types::FMSPolicyUpdateFirewallCreationConfigAction
1001
+ attr_accessor create_network_acl_action: Types::CreateNetworkAclAction
1002
+ attr_accessor replace_network_acl_association_action: Types::ReplaceNetworkAclAssociationAction
1003
+ attr_accessor create_network_acl_entries_action: Types::CreateNetworkAclEntriesAction
1004
+ attr_accessor delete_network_acl_entries_action: Types::DeleteNetworkAclEntriesAction
1005
+ SENSITIVE: []
1006
+ end
1007
+
1008
+ class RemediationActionWithOrder
1009
+ attr_accessor remediation_action: Types::RemediationAction
1010
+ attr_accessor order: ::Integer
1011
+ SENSITIVE: []
1012
+ end
1013
+
1014
+ class ReplaceNetworkAclAssociationAction
1015
+ attr_accessor description: ::String
1016
+ attr_accessor association_id: Types::ActionTarget
1017
+ attr_accessor network_acl_id: Types::ActionTarget
1018
+ attr_accessor fms_can_remediate: bool
1019
+ SENSITIVE: []
1020
+ end
1021
+
1022
+ class Resource
1023
+ attr_accessor uri: ::String
1024
+ attr_accessor account_id: ::String
1025
+ SENSITIVE: []
1026
+ end
1027
+
1028
+ class ResourceNotFoundException
1029
+ attr_accessor message: ::String
1030
+ SENSITIVE: []
1031
+ end
1032
+
1033
+ class ResourceSet
1034
+ attr_accessor id: ::String
1035
+ attr_accessor name: ::String
1036
+ attr_accessor description: ::String
1037
+ attr_accessor update_token: ::String
1038
+ attr_accessor resource_type_list: ::Array[::String]
1039
+ attr_accessor last_update_time: ::Time
1040
+ attr_accessor resource_set_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
1041
+ SENSITIVE: []
1042
+ end
1043
+
1044
+ class ResourceSetSummary
1045
+ attr_accessor id: ::String
1046
+ attr_accessor name: ::String
1047
+ attr_accessor description: ::String
1048
+ attr_accessor last_update_time: ::Time
1049
+ attr_accessor resource_set_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
1050
+ SENSITIVE: []
1051
+ end
1052
+
1053
+ class ResourceTag
1054
+ attr_accessor key: ::String
1055
+ attr_accessor value: ::String
1056
+ SENSITIVE: []
1057
+ end
1058
+
1059
+ class ResourceViolation
1060
+ attr_accessor aws_vpc_security_group_violation: Types::AwsVPCSecurityGroupViolation
1061
+ attr_accessor aws_ec2_network_interface_violation: Types::AwsEc2NetworkInterfaceViolation
1062
+ attr_accessor aws_ec2_instance_violation: Types::AwsEc2InstanceViolation
1063
+ attr_accessor network_firewall_missing_firewall_violation: Types::NetworkFirewallMissingFirewallViolation
1064
+ attr_accessor network_firewall_missing_subnet_violation: Types::NetworkFirewallMissingSubnetViolation
1065
+ attr_accessor network_firewall_missing_expected_rt_violation: Types::NetworkFirewallMissingExpectedRTViolation
1066
+ attr_accessor network_firewall_policy_modified_violation: Types::NetworkFirewallPolicyModifiedViolation
1067
+ attr_accessor network_firewall_internet_traffic_not_inspected_violation: Types::NetworkFirewallInternetTrafficNotInspectedViolation
1068
+ attr_accessor network_firewall_invalid_route_configuration_violation: Types::NetworkFirewallInvalidRouteConfigurationViolation
1069
+ attr_accessor network_firewall_black_hole_route_detected_violation: Types::NetworkFirewallBlackHoleRouteDetectedViolation
1070
+ attr_accessor network_firewall_unexpected_firewall_routes_violation: Types::NetworkFirewallUnexpectedFirewallRoutesViolation
1071
+ attr_accessor network_firewall_unexpected_gateway_routes_violation: Types::NetworkFirewallUnexpectedGatewayRoutesViolation
1072
+ attr_accessor network_firewall_missing_expected_routes_violation: Types::NetworkFirewallMissingExpectedRoutesViolation
1073
+ attr_accessor dns_rule_group_priority_conflict_violation: Types::DnsRuleGroupPriorityConflictViolation
1074
+ attr_accessor dns_duplicate_rule_group_violation: Types::DnsDuplicateRuleGroupViolation
1075
+ attr_accessor dns_rule_group_limit_exceeded_violation: Types::DnsRuleGroupLimitExceededViolation
1076
+ attr_accessor firewall_subnet_is_out_of_scope_violation: Types::FirewallSubnetIsOutOfScopeViolation
1077
+ attr_accessor route_has_out_of_scope_endpoint_violation: Types::RouteHasOutOfScopeEndpointViolation
1078
+ attr_accessor third_party_firewall_missing_firewall_violation: Types::ThirdPartyFirewallMissingFirewallViolation
1079
+ attr_accessor third_party_firewall_missing_subnet_violation: Types::ThirdPartyFirewallMissingSubnetViolation
1080
+ attr_accessor third_party_firewall_missing_expected_route_table_violation: Types::ThirdPartyFirewallMissingExpectedRouteTableViolation
1081
+ attr_accessor firewall_subnet_missing_vpc_endpoint_violation: Types::FirewallSubnetMissingVPCEndpointViolation
1082
+ attr_accessor invalid_network_acl_entries_violation: Types::InvalidNetworkAclEntriesViolation
1083
+ attr_accessor possible_remediation_actions: Types::PossibleRemediationActions
1084
+ SENSITIVE: []
1085
+ end
1086
+
1087
+ class Route
1088
+ attr_accessor destination_type: ("IPV4" | "IPV6" | "PREFIX_LIST")
1089
+ attr_accessor target_type: ("GATEWAY" | "CARRIER_GATEWAY" | "INSTANCE" | "LOCAL_GATEWAY" | "NAT_GATEWAY" | "NETWORK_INTERFACE" | "VPC_ENDPOINT" | "VPC_PEERING_CONNECTION" | "EGRESS_ONLY_INTERNET_GATEWAY" | "TRANSIT_GATEWAY")
1090
+ attr_accessor destination: ::String
1091
+ attr_accessor target: ::String
1092
+ SENSITIVE: []
1093
+ end
1094
+
1095
+ class RouteHasOutOfScopeEndpointViolation
1096
+ attr_accessor subnet_id: ::String
1097
+ attr_accessor vpc_id: ::String
1098
+ attr_accessor route_table_id: ::String
1099
+ attr_accessor violating_routes: ::Array[Types::Route]
1100
+ attr_accessor subnet_availability_zone: ::String
1101
+ attr_accessor subnet_availability_zone_id: ::String
1102
+ attr_accessor current_firewall_subnet_route_table: ::String
1103
+ attr_accessor firewall_subnet_id: ::String
1104
+ attr_accessor firewall_subnet_routes: ::Array[Types::Route]
1105
+ attr_accessor internet_gateway_id: ::String
1106
+ attr_accessor current_internet_gateway_route_table: ::String
1107
+ attr_accessor internet_gateway_routes: ::Array[Types::Route]
1108
+ SENSITIVE: []
1109
+ end
1110
+
1111
+ class SecurityGroupRemediationAction
1112
+ attr_accessor remediation_action_type: ("REMOVE" | "MODIFY")
1113
+ attr_accessor description: ::String
1114
+ attr_accessor remediation_result: Types::SecurityGroupRuleDescription
1115
+ attr_accessor is_default_action: bool
1116
+ SENSITIVE: []
1117
+ end
1118
+
1119
+ class SecurityGroupRuleDescription
1120
+ attr_accessor ipv4_range: ::String
1121
+ attr_accessor ipv6_range: ::String
1122
+ attr_accessor prefix_list_id: ::String
1123
+ attr_accessor protocol: ::String
1124
+ attr_accessor from_port: ::Integer
1125
+ attr_accessor to_port: ::Integer
1126
+ SENSITIVE: []
1127
+ end
1128
+
1129
+ class SecurityServicePolicyData
1130
+ attr_accessor type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
1131
+ attr_accessor managed_service_data: ::String
1132
+ attr_accessor policy_option: Types::PolicyOption
1133
+ SENSITIVE: []
1134
+ end
1135
+
1136
+ class StatefulEngineOptions
1137
+ attr_accessor rule_order: ("STRICT_ORDER" | "DEFAULT_ACTION_ORDER")
1138
+ SENSITIVE: []
1139
+ end
1140
+
1141
+ class StatefulRuleGroup
1142
+ attr_accessor rule_group_name: ::String
1143
+ attr_accessor resource_id: ::String
1144
+ attr_accessor priority: ::Integer
1145
+ attr_accessor override: Types::NetworkFirewallStatefulRuleGroupOverride
1146
+ SENSITIVE: []
1147
+ end
1148
+
1149
+ class StatelessRuleGroup
1150
+ attr_accessor rule_group_name: ::String
1151
+ attr_accessor resource_id: ::String
1152
+ attr_accessor priority: ::Integer
1153
+ SENSITIVE: []
1154
+ end
1155
+
1156
+ class Tag
1157
+ attr_accessor key: ::String
1158
+ attr_accessor value: ::String
1159
+ SENSITIVE: []
1160
+ end
1161
+
1162
+ class TagResourceRequest
1163
+ attr_accessor resource_arn: ::String
1164
+ attr_accessor tag_list: ::Array[Types::Tag]
1165
+ SENSITIVE: []
1166
+ end
1167
+
1168
+ class TagResourceResponse < Aws::EmptyStructure
1169
+ end
1170
+
1171
+ class ThirdPartyFirewallFirewallPolicy
1172
+ attr_accessor firewall_policy_id: ::String
1173
+ attr_accessor firewall_policy_name: ::String
1174
+ SENSITIVE: []
1175
+ end
1176
+
1177
+ class ThirdPartyFirewallMissingExpectedRouteTableViolation
1178
+ attr_accessor violation_target: ::String
1179
+ attr_accessor vpc: ::String
1180
+ attr_accessor availability_zone: ::String
1181
+ attr_accessor current_route_table: ::String
1182
+ attr_accessor expected_route_table: ::String
1183
+ SENSITIVE: []
1184
+ end
1185
+
1186
+ class ThirdPartyFirewallMissingFirewallViolation
1187
+ attr_accessor violation_target: ::String
1188
+ attr_accessor vpc: ::String
1189
+ attr_accessor availability_zone: ::String
1190
+ attr_accessor target_violation_reason: ::String
1191
+ SENSITIVE: []
1192
+ end
1193
+
1194
+ class ThirdPartyFirewallMissingSubnetViolation
1195
+ attr_accessor violation_target: ::String
1196
+ attr_accessor vpc: ::String
1197
+ attr_accessor availability_zone: ::String
1198
+ attr_accessor target_violation_reason: ::String
1199
+ SENSITIVE: []
1200
+ end
1201
+
1202
+ class ThirdPartyFirewallPolicy
1203
+ attr_accessor firewall_deployment_model: ("CENTRALIZED" | "DISTRIBUTED")
1204
+ SENSITIVE: []
1205
+ end
1206
+
1207
+ class UntagResourceRequest
1208
+ attr_accessor resource_arn: ::String
1209
+ attr_accessor tag_keys: ::Array[::String]
1210
+ SENSITIVE: []
1211
+ end
1212
+
1213
+ class UntagResourceResponse < Aws::EmptyStructure
1214
+ end
1215
+
1216
+ class ViolationDetail
1217
+ attr_accessor policy_id: ::String
1218
+ attr_accessor member_account: ::String
1219
+ attr_accessor resource_id: ::String
1220
+ attr_accessor resource_type: ::String
1221
+ attr_accessor resource_violations: ::Array[Types::ResourceViolation]
1222
+ attr_accessor resource_tags: ::Array[Types::Tag]
1223
+ attr_accessor resource_description: ::String
1224
+ SENSITIVE: []
1225
+ end
1226
+ end
1227
+ end