aws-sdk-fms 1.66.0 → 1.68.0

Sign up to get free protection for your applications and to get access to all the features.
data/sig/types.rbs ADDED
@@ -0,0 +1,1227 @@
1
+ # WARNING ABOUT GENERATED CODE
2
+ #
3
+ # This file is generated. See the contributing guide for more information:
4
+ # https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
5
+ #
6
+ # WARNING ABOUT GENERATED CODE
7
+
8
+ module Aws::FMS
9
+ module Types
10
+
11
+ class AccountScope
12
+ attr_accessor accounts: ::Array[::String]
13
+ attr_accessor all_accounts_enabled: bool
14
+ attr_accessor exclude_specified_accounts: bool
15
+ SENSITIVE: []
16
+ end
17
+
18
+ class ActionTarget
19
+ attr_accessor resource_id: ::String
20
+ attr_accessor description: ::String
21
+ SENSITIVE: []
22
+ end
23
+
24
+ class AdminAccountSummary
25
+ attr_accessor admin_account: ::String
26
+ attr_accessor default_admin: bool
27
+ attr_accessor status: ("ONBOARDING" | "ONBOARDING_COMPLETE" | "OFFBOARDING" | "OFFBOARDING_COMPLETE")
28
+ SENSITIVE: []
29
+ end
30
+
31
+ class AdminScope
32
+ attr_accessor account_scope: Types::AccountScope
33
+ attr_accessor organizational_unit_scope: Types::OrganizationalUnitScope
34
+ attr_accessor region_scope: Types::RegionScope
35
+ attr_accessor policy_type_scope: Types::PolicyTypeScope
36
+ SENSITIVE: []
37
+ end
38
+
39
+ class App
40
+ attr_accessor app_name: ::String
41
+ attr_accessor protocol: ::String
42
+ attr_accessor port: ::Integer
43
+ SENSITIVE: []
44
+ end
45
+
46
+ class AppsListData
47
+ attr_accessor list_id: ::String
48
+ attr_accessor list_name: ::String
49
+ attr_accessor list_update_token: ::String
50
+ attr_accessor create_time: ::Time
51
+ attr_accessor last_update_time: ::Time
52
+ attr_accessor apps_list: ::Array[Types::App]
53
+ attr_accessor previous_apps_list: ::Hash[::String, ::Array[Types::App]]
54
+ SENSITIVE: []
55
+ end
56
+
57
+ class AppsListDataSummary
58
+ attr_accessor list_arn: ::String
59
+ attr_accessor list_id: ::String
60
+ attr_accessor list_name: ::String
61
+ attr_accessor apps_list: ::Array[Types::App]
62
+ SENSITIVE: []
63
+ end
64
+
65
+ class AssociateAdminAccountRequest
66
+ attr_accessor admin_account: ::String
67
+ SENSITIVE: []
68
+ end
69
+
70
+ class AssociateThirdPartyFirewallRequest
71
+ attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
72
+ SENSITIVE: []
73
+ end
74
+
75
+ class AssociateThirdPartyFirewallResponse
76
+ attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
77
+ SENSITIVE: []
78
+ end
79
+
80
+ class AwsEc2InstanceViolation
81
+ attr_accessor violation_target: ::String
82
+ attr_accessor aws_ec2_network_interface_violations: ::Array[Types::AwsEc2NetworkInterfaceViolation]
83
+ SENSITIVE: []
84
+ end
85
+
86
+ class AwsEc2NetworkInterfaceViolation
87
+ attr_accessor violation_target: ::String
88
+ attr_accessor violating_security_groups: ::Array[::String]
89
+ SENSITIVE: []
90
+ end
91
+
92
+ class AwsVPCSecurityGroupViolation
93
+ attr_accessor violation_target: ::String
94
+ attr_accessor violation_target_description: ::String
95
+ attr_accessor partial_matches: ::Array[Types::PartialMatch]
96
+ attr_accessor possible_security_group_remediation_actions: ::Array[Types::SecurityGroupRemediationAction]
97
+ SENSITIVE: []
98
+ end
99
+
100
+ class BatchAssociateResourceRequest
101
+ attr_accessor resource_set_identifier: ::String
102
+ attr_accessor items: ::Array[::String]
103
+ SENSITIVE: []
104
+ end
105
+
106
+ class BatchAssociateResourceResponse
107
+ attr_accessor resource_set_identifier: ::String
108
+ attr_accessor failed_items: ::Array[Types::FailedItem]
109
+ SENSITIVE: []
110
+ end
111
+
112
+ class BatchDisassociateResourceRequest
113
+ attr_accessor resource_set_identifier: ::String
114
+ attr_accessor items: ::Array[::String]
115
+ SENSITIVE: []
116
+ end
117
+
118
+ class BatchDisassociateResourceResponse
119
+ attr_accessor resource_set_identifier: ::String
120
+ attr_accessor failed_items: ::Array[Types::FailedItem]
121
+ SENSITIVE: []
122
+ end
123
+
124
+ class ComplianceViolator
125
+ attr_accessor resource_id: ::String
126
+ attr_accessor violation_reason: ("WEB_ACL_MISSING_RULE_GROUP" | "RESOURCE_MISSING_WEB_ACL" | "RESOURCE_INCORRECT_WEB_ACL" | "RESOURCE_MISSING_SHIELD_PROTECTION" | "RESOURCE_MISSING_WEB_ACL_OR_SHIELD_PROTECTION" | "RESOURCE_MISSING_SECURITY_GROUP" | "RESOURCE_VIOLATES_AUDIT_SECURITY_GROUP" | "SECURITY_GROUP_UNUSED" | "SECURITY_GROUP_REDUNDANT" | "FMS_CREATED_SECURITY_GROUP_EDITED" | "MISSING_FIREWALL" | "MISSING_FIREWALL_SUBNET_IN_AZ" | "MISSING_EXPECTED_ROUTE_TABLE" | "NETWORK_FIREWALL_POLICY_MODIFIED" | "FIREWALL_SUBNET_IS_OUT_OF_SCOPE" | "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE" | "FIREWALL_SUBNET_MISSING_EXPECTED_ROUTE" | "UNEXPECTED_FIREWALL_ROUTES" | "UNEXPECTED_TARGET_GATEWAY_ROUTES" | "TRAFFIC_INSPECTION_CROSSES_AZ_BOUNDARY" | "INVALID_ROUTE_CONFIGURATION" | "MISSING_TARGET_GATEWAY" | "INTERNET_TRAFFIC_NOT_INSPECTED" | "BLACK_HOLE_ROUTE_DETECTED" | "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET" | "RESOURCE_MISSING_DNS_FIREWALL" | "ROUTE_HAS_OUT_OF_SCOPE_ENDPOINT" | "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT" | "INVALID_NETWORK_ACL_ENTRY")
127
+ attr_accessor resource_type: ::String
128
+ attr_accessor metadata: ::Hash[::String, ::String]
129
+ SENSITIVE: []
130
+ end
131
+
132
+ class CreateNetworkAclAction
133
+ attr_accessor description: ::String
134
+ attr_accessor vpc: Types::ActionTarget
135
+ attr_accessor fms_can_remediate: bool
136
+ SENSITIVE: []
137
+ end
138
+
139
+ class CreateNetworkAclEntriesAction
140
+ attr_accessor description: ::String
141
+ attr_accessor network_acl_id: Types::ActionTarget
142
+ attr_accessor network_acl_entries_to_be_created: ::Array[Types::EntryDescription]
143
+ attr_accessor fms_can_remediate: bool
144
+ SENSITIVE: []
145
+ end
146
+
147
+ class DeleteAppsListRequest
148
+ attr_accessor list_id: ::String
149
+ SENSITIVE: []
150
+ end
151
+
152
+ class DeleteNetworkAclEntriesAction
153
+ attr_accessor description: ::String
154
+ attr_accessor network_acl_id: Types::ActionTarget
155
+ attr_accessor network_acl_entries_to_be_deleted: ::Array[Types::EntryDescription]
156
+ attr_accessor fms_can_remediate: bool
157
+ SENSITIVE: []
158
+ end
159
+
160
+ class DeleteNotificationChannelRequest < Aws::EmptyStructure
161
+ end
162
+
163
+ class DeletePolicyRequest
164
+ attr_accessor policy_id: ::String
165
+ attr_accessor delete_all_policy_resources: bool
166
+ SENSITIVE: []
167
+ end
168
+
169
+ class DeleteProtocolsListRequest
170
+ attr_accessor list_id: ::String
171
+ SENSITIVE: []
172
+ end
173
+
174
+ class DeleteResourceSetRequest
175
+ attr_accessor identifier: ::String
176
+ SENSITIVE: []
177
+ end
178
+
179
+ class DisassociateAdminAccountRequest < Aws::EmptyStructure
180
+ end
181
+
182
+ class DisassociateThirdPartyFirewallRequest
183
+ attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
184
+ SENSITIVE: []
185
+ end
186
+
187
+ class DisassociateThirdPartyFirewallResponse
188
+ attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
189
+ SENSITIVE: []
190
+ end
191
+
192
+ class DiscoveredResource
193
+ attr_accessor uri: ::String
194
+ attr_accessor account_id: ::String
195
+ attr_accessor type: ::String
196
+ attr_accessor name: ::String
197
+ SENSITIVE: []
198
+ end
199
+
200
+ class DnsDuplicateRuleGroupViolation
201
+ attr_accessor violation_target: ::String
202
+ attr_accessor violation_target_description: ::String
203
+ SENSITIVE: []
204
+ end
205
+
206
+ class DnsRuleGroupLimitExceededViolation
207
+ attr_accessor violation_target: ::String
208
+ attr_accessor violation_target_description: ::String
209
+ attr_accessor number_of_rule_groups_already_associated: ::Integer
210
+ SENSITIVE: []
211
+ end
212
+
213
+ class DnsRuleGroupPriorityConflictViolation
214
+ attr_accessor violation_target: ::String
215
+ attr_accessor violation_target_description: ::String
216
+ attr_accessor conflicting_priority: ::Integer
217
+ attr_accessor conflicting_policy_id: ::String
218
+ attr_accessor unavailable_priorities: ::Array[::Integer]
219
+ SENSITIVE: []
220
+ end
221
+
222
+ class EC2AssociateRouteTableAction
223
+ attr_accessor description: ::String
224
+ attr_accessor route_table_id: Types::ActionTarget
225
+ attr_accessor subnet_id: Types::ActionTarget
226
+ attr_accessor gateway_id: Types::ActionTarget
227
+ SENSITIVE: []
228
+ end
229
+
230
+ class EC2CopyRouteTableAction
231
+ attr_accessor description: ::String
232
+ attr_accessor vpc_id: Types::ActionTarget
233
+ attr_accessor route_table_id: Types::ActionTarget
234
+ SENSITIVE: []
235
+ end
236
+
237
+ class EC2CreateRouteAction
238
+ attr_accessor description: ::String
239
+ attr_accessor destination_cidr_block: ::String
240
+ attr_accessor destination_prefix_list_id: ::String
241
+ attr_accessor destination_ipv_6_cidr_block: ::String
242
+ attr_accessor vpc_endpoint_id: Types::ActionTarget
243
+ attr_accessor gateway_id: Types::ActionTarget
244
+ attr_accessor route_table_id: Types::ActionTarget
245
+ SENSITIVE: []
246
+ end
247
+
248
+ class EC2CreateRouteTableAction
249
+ attr_accessor description: ::String
250
+ attr_accessor vpc_id: Types::ActionTarget
251
+ SENSITIVE: []
252
+ end
253
+
254
+ class EC2DeleteRouteAction
255
+ attr_accessor description: ::String
256
+ attr_accessor destination_cidr_block: ::String
257
+ attr_accessor destination_prefix_list_id: ::String
258
+ attr_accessor destination_ipv_6_cidr_block: ::String
259
+ attr_accessor route_table_id: Types::ActionTarget
260
+ SENSITIVE: []
261
+ end
262
+
263
+ class EC2ReplaceRouteAction
264
+ attr_accessor description: ::String
265
+ attr_accessor destination_cidr_block: ::String
266
+ attr_accessor destination_prefix_list_id: ::String
267
+ attr_accessor destination_ipv_6_cidr_block: ::String
268
+ attr_accessor gateway_id: Types::ActionTarget
269
+ attr_accessor route_table_id: Types::ActionTarget
270
+ SENSITIVE: []
271
+ end
272
+
273
+ class EC2ReplaceRouteTableAssociationAction
274
+ attr_accessor description: ::String
275
+ attr_accessor association_id: Types::ActionTarget
276
+ attr_accessor route_table_id: Types::ActionTarget
277
+ SENSITIVE: []
278
+ end
279
+
280
+ class EntryDescription
281
+ attr_accessor entry_detail: Types::NetworkAclEntry
282
+ attr_accessor entry_rule_number: ::Integer
283
+ attr_accessor entry_type: ("FMS_MANAGED_FIRST_ENTRY" | "FMS_MANAGED_LAST_ENTRY" | "CUSTOM_ENTRY")
284
+ SENSITIVE: []
285
+ end
286
+
287
+ class EntryViolation
288
+ attr_accessor expected_entry: Types::EntryDescription
289
+ attr_accessor expected_evaluation_order: ::String
290
+ attr_accessor actual_evaluation_order: ::String
291
+ attr_accessor entry_at_expected_evaluation_order: Types::EntryDescription
292
+ attr_accessor entries_with_conflicts: ::Array[Types::EntryDescription]
293
+ attr_accessor entry_violation_reasons: ::Array[("MISSING_EXPECTED_ENTRY" | "INCORRECT_ENTRY_ORDER" | "ENTRY_CONFLICT")]
294
+ SENSITIVE: []
295
+ end
296
+
297
+ class EvaluationResult
298
+ attr_accessor compliance_status: ("COMPLIANT" | "NON_COMPLIANT")
299
+ attr_accessor violator_count: ::Integer
300
+ attr_accessor evaluation_limit_exceeded: bool
301
+ SENSITIVE: []
302
+ end
303
+
304
+ class ExpectedRoute
305
+ attr_accessor ip_v4_cidr: ::String
306
+ attr_accessor prefix_list_id: ::String
307
+ attr_accessor ip_v6_cidr: ::String
308
+ attr_accessor contributing_subnets: ::Array[::String]
309
+ attr_accessor allowed_targets: ::Array[::String]
310
+ attr_accessor route_table_id: ::String
311
+ SENSITIVE: []
312
+ end
313
+
314
+ class FMSPolicyUpdateFirewallCreationConfigAction
315
+ attr_accessor description: ::String
316
+ attr_accessor firewall_creation_config: ::String
317
+ SENSITIVE: []
318
+ end
319
+
320
+ class FailedItem
321
+ attr_accessor uri: ::String
322
+ attr_accessor reason: ("NOT_VALID_ARN" | "NOT_VALID_PARTITION" | "NOT_VALID_REGION" | "NOT_VALID_SERVICE" | "NOT_VALID_RESOURCE_TYPE" | "NOT_VALID_ACCOUNT_ID")
323
+ SENSITIVE: []
324
+ end
325
+
326
+ class FirewallSubnetIsOutOfScopeViolation
327
+ attr_accessor firewall_subnet_id: ::String
328
+ attr_accessor vpc_id: ::String
329
+ attr_accessor subnet_availability_zone: ::String
330
+ attr_accessor subnet_availability_zone_id: ::String
331
+ attr_accessor vpc_endpoint_id: ::String
332
+ SENSITIVE: []
333
+ end
334
+
335
+ class FirewallSubnetMissingVPCEndpointViolation
336
+ attr_accessor firewall_subnet_id: ::String
337
+ attr_accessor vpc_id: ::String
338
+ attr_accessor subnet_availability_zone: ::String
339
+ attr_accessor subnet_availability_zone_id: ::String
340
+ SENSITIVE: []
341
+ end
342
+
343
+ class GetAdminAccountRequest < Aws::EmptyStructure
344
+ end
345
+
346
+ class GetAdminAccountResponse
347
+ attr_accessor admin_account: ::String
348
+ attr_accessor role_status: ("READY" | "CREATING" | "PENDING_DELETION" | "DELETING" | "DELETED")
349
+ SENSITIVE: []
350
+ end
351
+
352
+ class GetAdminScopeRequest
353
+ attr_accessor admin_account: ::String
354
+ SENSITIVE: []
355
+ end
356
+
357
+ class GetAdminScopeResponse
358
+ attr_accessor admin_scope: Types::AdminScope
359
+ attr_accessor status: ("ONBOARDING" | "ONBOARDING_COMPLETE" | "OFFBOARDING" | "OFFBOARDING_COMPLETE")
360
+ SENSITIVE: []
361
+ end
362
+
363
+ class GetAppsListRequest
364
+ attr_accessor list_id: ::String
365
+ attr_accessor default_list: bool
366
+ SENSITIVE: []
367
+ end
368
+
369
+ class GetAppsListResponse
370
+ attr_accessor apps_list: Types::AppsListData
371
+ attr_accessor apps_list_arn: ::String
372
+ SENSITIVE: []
373
+ end
374
+
375
+ class GetComplianceDetailRequest
376
+ attr_accessor policy_id: ::String
377
+ attr_accessor member_account: ::String
378
+ SENSITIVE: []
379
+ end
380
+
381
+ class GetComplianceDetailResponse
382
+ attr_accessor policy_compliance_detail: Types::PolicyComplianceDetail
383
+ SENSITIVE: []
384
+ end
385
+
386
+ class GetNotificationChannelRequest < Aws::EmptyStructure
387
+ end
388
+
389
+ class GetNotificationChannelResponse
390
+ attr_accessor sns_topic_arn: ::String
391
+ attr_accessor sns_role_name: ::String
392
+ SENSITIVE: []
393
+ end
394
+
395
+ class GetPolicyRequest
396
+ attr_accessor policy_id: ::String
397
+ SENSITIVE: []
398
+ end
399
+
400
+ class GetPolicyResponse
401
+ attr_accessor policy: Types::Policy
402
+ attr_accessor policy_arn: ::String
403
+ SENSITIVE: []
404
+ end
405
+
406
+ class GetProtectionStatusRequest
407
+ attr_accessor policy_id: ::String
408
+ attr_accessor member_account_id: ::String
409
+ attr_accessor start_time: ::Time
410
+ attr_accessor end_time: ::Time
411
+ attr_accessor next_token: ::String
412
+ attr_accessor max_results: ::Integer
413
+ SENSITIVE: []
414
+ end
415
+
416
+ class GetProtectionStatusResponse
417
+ attr_accessor admin_account_id: ::String
418
+ attr_accessor service_type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
419
+ attr_accessor data: ::String
420
+ attr_accessor next_token: ::String
421
+ SENSITIVE: []
422
+ end
423
+
424
+ class GetProtocolsListRequest
425
+ attr_accessor list_id: ::String
426
+ attr_accessor default_list: bool
427
+ SENSITIVE: []
428
+ end
429
+
430
+ class GetProtocolsListResponse
431
+ attr_accessor protocols_list: Types::ProtocolsListData
432
+ attr_accessor protocols_list_arn: ::String
433
+ SENSITIVE: []
434
+ end
435
+
436
+ class GetResourceSetRequest
437
+ attr_accessor identifier: ::String
438
+ SENSITIVE: []
439
+ end
440
+
441
+ class GetResourceSetResponse
442
+ attr_accessor resource_set: Types::ResourceSet
443
+ attr_accessor resource_set_arn: ::String
444
+ SENSITIVE: []
445
+ end
446
+
447
+ class GetThirdPartyFirewallAssociationStatusRequest
448
+ attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
449
+ SENSITIVE: []
450
+ end
451
+
452
+ class GetThirdPartyFirewallAssociationStatusResponse
453
+ attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
454
+ attr_accessor marketplace_onboarding_status: ("NO_SUBSCRIPTION" | "NOT_COMPLETE" | "COMPLETE")
455
+ SENSITIVE: []
456
+ end
457
+
458
+ class GetViolationDetailsRequest
459
+ attr_accessor policy_id: ::String
460
+ attr_accessor member_account: ::String
461
+ attr_accessor resource_id: ::String
462
+ attr_accessor resource_type: ::String
463
+ SENSITIVE: []
464
+ end
465
+
466
+ class GetViolationDetailsResponse
467
+ attr_accessor violation_detail: Types::ViolationDetail
468
+ SENSITIVE: []
469
+ end
470
+
471
+ class InternalErrorException
472
+ attr_accessor message: ::String
473
+ SENSITIVE: []
474
+ end
475
+
476
+ class InvalidInputException
477
+ attr_accessor message: ::String
478
+ SENSITIVE: []
479
+ end
480
+
481
+ class InvalidNetworkAclEntriesViolation
482
+ attr_accessor vpc: ::String
483
+ attr_accessor subnet: ::String
484
+ attr_accessor subnet_availability_zone: ::String
485
+ attr_accessor current_associated_network_acl: ::String
486
+ attr_accessor entry_violations: ::Array[Types::EntryViolation]
487
+ SENSITIVE: []
488
+ end
489
+
490
+ class InvalidOperationException
491
+ attr_accessor message: ::String
492
+ SENSITIVE: []
493
+ end
494
+
495
+ class InvalidTypeException
496
+ attr_accessor message: ::String
497
+ SENSITIVE: []
498
+ end
499
+
500
+ class LimitExceededException
501
+ attr_accessor message: ::String
502
+ SENSITIVE: []
503
+ end
504
+
505
+ class ListAdminAccountsForOrganizationRequest
506
+ attr_accessor next_token: ::String
507
+ attr_accessor max_results: ::Integer
508
+ SENSITIVE: []
509
+ end
510
+
511
+ class ListAdminAccountsForOrganizationResponse
512
+ attr_accessor admin_accounts: ::Array[Types::AdminAccountSummary]
513
+ attr_accessor next_token: ::String
514
+ SENSITIVE: []
515
+ end
516
+
517
+ class ListAdminsManagingAccountRequest
518
+ attr_accessor next_token: ::String
519
+ attr_accessor max_results: ::Integer
520
+ SENSITIVE: []
521
+ end
522
+
523
+ class ListAdminsManagingAccountResponse
524
+ attr_accessor admin_accounts: ::Array[::String]
525
+ attr_accessor next_token: ::String
526
+ SENSITIVE: []
527
+ end
528
+
529
+ class ListAppsListsRequest
530
+ attr_accessor default_lists: bool
531
+ attr_accessor next_token: ::String
532
+ attr_accessor max_results: ::Integer
533
+ SENSITIVE: []
534
+ end
535
+
536
+ class ListAppsListsResponse
537
+ attr_accessor apps_lists: ::Array[Types::AppsListDataSummary]
538
+ attr_accessor next_token: ::String
539
+ SENSITIVE: []
540
+ end
541
+
542
+ class ListComplianceStatusRequest
543
+ attr_accessor policy_id: ::String
544
+ attr_accessor next_token: ::String
545
+ attr_accessor max_results: ::Integer
546
+ SENSITIVE: []
547
+ end
548
+
549
+ class ListComplianceStatusResponse
550
+ attr_accessor policy_compliance_status_list: ::Array[Types::PolicyComplianceStatus]
551
+ attr_accessor next_token: ::String
552
+ SENSITIVE: []
553
+ end
554
+
555
+ class ListDiscoveredResourcesRequest
556
+ attr_accessor member_account_ids: ::Array[::String]
557
+ attr_accessor resource_type: ::String
558
+ attr_accessor max_results: ::Integer
559
+ attr_accessor next_token: ::String
560
+ SENSITIVE: []
561
+ end
562
+
563
+ class ListDiscoveredResourcesResponse
564
+ attr_accessor items: ::Array[Types::DiscoveredResource]
565
+ attr_accessor next_token: ::String
566
+ SENSITIVE: []
567
+ end
568
+
569
+ class ListMemberAccountsRequest
570
+ attr_accessor next_token: ::String
571
+ attr_accessor max_results: ::Integer
572
+ SENSITIVE: []
573
+ end
574
+
575
+ class ListMemberAccountsResponse
576
+ attr_accessor member_accounts: ::Array[::String]
577
+ attr_accessor next_token: ::String
578
+ SENSITIVE: []
579
+ end
580
+
581
+ class ListPoliciesRequest
582
+ attr_accessor next_token: ::String
583
+ attr_accessor max_results: ::Integer
584
+ SENSITIVE: []
585
+ end
586
+
587
+ class ListPoliciesResponse
588
+ attr_accessor policy_list: ::Array[Types::PolicySummary]
589
+ attr_accessor next_token: ::String
590
+ SENSITIVE: []
591
+ end
592
+
593
+ class ListProtocolsListsRequest
594
+ attr_accessor default_lists: bool
595
+ attr_accessor next_token: ::String
596
+ attr_accessor max_results: ::Integer
597
+ SENSITIVE: []
598
+ end
599
+
600
+ class ListProtocolsListsResponse
601
+ attr_accessor protocols_lists: ::Array[Types::ProtocolsListDataSummary]
602
+ attr_accessor next_token: ::String
603
+ SENSITIVE: []
604
+ end
605
+
606
+ class ListResourceSetResourcesRequest
607
+ attr_accessor identifier: ::String
608
+ attr_accessor max_results: ::Integer
609
+ attr_accessor next_token: ::String
610
+ SENSITIVE: []
611
+ end
612
+
613
+ class ListResourceSetResourcesResponse
614
+ attr_accessor items: ::Array[Types::Resource]
615
+ attr_accessor next_token: ::String
616
+ SENSITIVE: []
617
+ end
618
+
619
+ class ListResourceSetsRequest
620
+ attr_accessor next_token: ::String
621
+ attr_accessor max_results: ::Integer
622
+ SENSITIVE: []
623
+ end
624
+
625
+ class ListResourceSetsResponse
626
+ attr_accessor resource_sets: ::Array[Types::ResourceSetSummary]
627
+ attr_accessor next_token: ::String
628
+ SENSITIVE: []
629
+ end
630
+
631
+ class ListTagsForResourceRequest
632
+ attr_accessor resource_arn: ::String
633
+ SENSITIVE: []
634
+ end
635
+
636
+ class ListTagsForResourceResponse
637
+ attr_accessor tag_list: ::Array[Types::Tag]
638
+ SENSITIVE: []
639
+ end
640
+
641
+ class ListThirdPartyFirewallFirewallPoliciesRequest
642
+ attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
643
+ attr_accessor next_token: ::String
644
+ attr_accessor max_results: ::Integer
645
+ SENSITIVE: []
646
+ end
647
+
648
+ class ListThirdPartyFirewallFirewallPoliciesResponse
649
+ attr_accessor third_party_firewall_firewall_policies: ::Array[Types::ThirdPartyFirewallFirewallPolicy]
650
+ attr_accessor next_token: ::String
651
+ SENSITIVE: []
652
+ end
653
+
654
+ class NetworkAclCommonPolicy
655
+ attr_accessor network_acl_entry_set: Types::NetworkAclEntrySet
656
+ SENSITIVE: []
657
+ end
658
+
659
+ class NetworkAclEntry
660
+ attr_accessor icmp_type_code: Types::NetworkAclIcmpTypeCode
661
+ attr_accessor protocol: ::String
662
+ attr_accessor port_range: Types::NetworkAclPortRange
663
+ attr_accessor cidr_block: ::String
664
+ attr_accessor ipv_6_cidr_block: ::String
665
+ attr_accessor rule_action: ("allow" | "deny")
666
+ attr_accessor egress: bool
667
+ SENSITIVE: []
668
+ end
669
+
670
+ class NetworkAclEntrySet
671
+ attr_accessor first_entries: ::Array[Types::NetworkAclEntry]
672
+ attr_accessor force_remediate_for_first_entries: bool
673
+ attr_accessor last_entries: ::Array[Types::NetworkAclEntry]
674
+ attr_accessor force_remediate_for_last_entries: bool
675
+ SENSITIVE: []
676
+ end
677
+
678
+ class NetworkAclIcmpTypeCode
679
+ attr_accessor code: ::Integer
680
+ attr_accessor type: ::Integer
681
+ SENSITIVE: []
682
+ end
683
+
684
+ class NetworkAclPortRange
685
+ attr_accessor from: ::Integer
686
+ attr_accessor to: ::Integer
687
+ SENSITIVE: []
688
+ end
689
+
690
+ class NetworkFirewallBlackHoleRouteDetectedViolation
691
+ attr_accessor violation_target: ::String
692
+ attr_accessor route_table_id: ::String
693
+ attr_accessor vpc_id: ::String
694
+ attr_accessor violating_routes: ::Array[Types::Route]
695
+ SENSITIVE: []
696
+ end
697
+
698
+ class NetworkFirewallInternetTrafficNotInspectedViolation
699
+ attr_accessor subnet_id: ::String
700
+ attr_accessor subnet_availability_zone: ::String
701
+ attr_accessor route_table_id: ::String
702
+ attr_accessor violating_routes: ::Array[Types::Route]
703
+ attr_accessor is_route_table_used_in_different_az: bool
704
+ attr_accessor current_firewall_subnet_route_table: ::String
705
+ attr_accessor expected_firewall_endpoint: ::String
706
+ attr_accessor firewall_subnet_id: ::String
707
+ attr_accessor expected_firewall_subnet_routes: ::Array[Types::ExpectedRoute]
708
+ attr_accessor actual_firewall_subnet_routes: ::Array[Types::Route]
709
+ attr_accessor internet_gateway_id: ::String
710
+ attr_accessor current_internet_gateway_route_table: ::String
711
+ attr_accessor expected_internet_gateway_routes: ::Array[Types::ExpectedRoute]
712
+ attr_accessor actual_internet_gateway_routes: ::Array[Types::Route]
713
+ attr_accessor vpc_id: ::String
714
+ SENSITIVE: []
715
+ end
716
+
717
+ class NetworkFirewallInvalidRouteConfigurationViolation
718
+ attr_accessor affected_subnets: ::Array[::String]
719
+ attr_accessor route_table_id: ::String
720
+ attr_accessor is_route_table_used_in_different_az: bool
721
+ attr_accessor violating_route: Types::Route
722
+ attr_accessor current_firewall_subnet_route_table: ::String
723
+ attr_accessor expected_firewall_endpoint: ::String
724
+ attr_accessor actual_firewall_endpoint: ::String
725
+ attr_accessor expected_firewall_subnet_id: ::String
726
+ attr_accessor actual_firewall_subnet_id: ::String
727
+ attr_accessor expected_firewall_subnet_routes: ::Array[Types::ExpectedRoute]
728
+ attr_accessor actual_firewall_subnet_routes: ::Array[Types::Route]
729
+ attr_accessor internet_gateway_id: ::String
730
+ attr_accessor current_internet_gateway_route_table: ::String
731
+ attr_accessor expected_internet_gateway_routes: ::Array[Types::ExpectedRoute]
732
+ attr_accessor actual_internet_gateway_routes: ::Array[Types::Route]
733
+ attr_accessor vpc_id: ::String
734
+ SENSITIVE: []
735
+ end
736
+
737
+ class NetworkFirewallMissingExpectedRTViolation
738
+ attr_accessor violation_target: ::String
739
+ attr_accessor vpc: ::String
740
+ attr_accessor availability_zone: ::String
741
+ attr_accessor current_route_table: ::String
742
+ attr_accessor expected_route_table: ::String
743
+ SENSITIVE: []
744
+ end
745
+
746
+ class NetworkFirewallMissingExpectedRoutesViolation
747
+ attr_accessor violation_target: ::String
748
+ attr_accessor expected_routes: ::Array[Types::ExpectedRoute]
749
+ attr_accessor vpc_id: ::String
750
+ SENSITIVE: []
751
+ end
752
+
753
+ class NetworkFirewallMissingFirewallViolation
754
+ attr_accessor violation_target: ::String
755
+ attr_accessor vpc: ::String
756
+ attr_accessor availability_zone: ::String
757
+ attr_accessor target_violation_reason: ::String
758
+ SENSITIVE: []
759
+ end
760
+
761
+ class NetworkFirewallMissingSubnetViolation
762
+ attr_accessor violation_target: ::String
763
+ attr_accessor vpc: ::String
764
+ attr_accessor availability_zone: ::String
765
+ attr_accessor target_violation_reason: ::String
766
+ SENSITIVE: []
767
+ end
768
+
769
+ class NetworkFirewallPolicy
770
+ attr_accessor firewall_deployment_model: ("CENTRALIZED" | "DISTRIBUTED")
771
+ SENSITIVE: []
772
+ end
773
+
774
+ class NetworkFirewallPolicyDescription
775
+ attr_accessor stateless_rule_groups: ::Array[Types::StatelessRuleGroup]
776
+ attr_accessor stateless_default_actions: ::Array[::String]
777
+ attr_accessor stateless_fragment_default_actions: ::Array[::String]
778
+ attr_accessor stateless_custom_actions: ::Array[::String]
779
+ attr_accessor stateful_rule_groups: ::Array[Types::StatefulRuleGroup]
780
+ attr_accessor stateful_default_actions: ::Array[::String]
781
+ attr_accessor stateful_engine_options: Types::StatefulEngineOptions
782
+ SENSITIVE: []
783
+ end
784
+
785
+ class NetworkFirewallPolicyModifiedViolation
786
+ attr_accessor violation_target: ::String
787
+ attr_accessor current_policy_description: Types::NetworkFirewallPolicyDescription
788
+ attr_accessor expected_policy_description: Types::NetworkFirewallPolicyDescription
789
+ SENSITIVE: []
790
+ end
791
+
792
+ class NetworkFirewallStatefulRuleGroupOverride
793
+ attr_accessor action: ("DROP_TO_ALERT")
794
+ SENSITIVE: []
795
+ end
796
+
797
+ class NetworkFirewallUnexpectedFirewallRoutesViolation
798
+ attr_accessor firewall_subnet_id: ::String
799
+ attr_accessor violating_routes: ::Array[Types::Route]
800
+ attr_accessor route_table_id: ::String
801
+ attr_accessor firewall_endpoint: ::String
802
+ attr_accessor vpc_id: ::String
803
+ SENSITIVE: []
804
+ end
805
+
806
+ class NetworkFirewallUnexpectedGatewayRoutesViolation
807
+ attr_accessor gateway_id: ::String
808
+ attr_accessor violating_routes: ::Array[Types::Route]
809
+ attr_accessor route_table_id: ::String
810
+ attr_accessor vpc_id: ::String
811
+ SENSITIVE: []
812
+ end
813
+
814
+ class OrganizationalUnitScope
815
+ attr_accessor organizational_units: ::Array[::String]
816
+ attr_accessor all_organizational_units_enabled: bool
817
+ attr_accessor exclude_specified_organizational_units: bool
818
+ SENSITIVE: []
819
+ end
820
+
821
+ class PartialMatch
822
+ attr_accessor reference: ::String
823
+ attr_accessor target_violation_reasons: ::Array[::String]
824
+ SENSITIVE: []
825
+ end
826
+
827
+ class Policy
828
+ attr_accessor policy_id: ::String
829
+ attr_accessor policy_name: ::String
830
+ attr_accessor policy_update_token: ::String
831
+ attr_accessor security_service_policy_data: Types::SecurityServicePolicyData
832
+ attr_accessor resource_type: ::String
833
+ attr_accessor resource_type_list: ::Array[::String]
834
+ attr_accessor resource_tags: ::Array[Types::ResourceTag]
835
+ attr_accessor exclude_resource_tags: bool
836
+ attr_accessor remediation_enabled: bool
837
+ attr_accessor delete_unused_fm_managed_resources: bool
838
+ attr_accessor include_map: ::Hash[("ACCOUNT" | "ORG_UNIT"), ::Array[::String]]
839
+ attr_accessor exclude_map: ::Hash[("ACCOUNT" | "ORG_UNIT"), ::Array[::String]]
840
+ attr_accessor resource_set_ids: ::Array[::String]
841
+ attr_accessor policy_description: ::String
842
+ attr_accessor policy_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
843
+ SENSITIVE: []
844
+ end
845
+
846
+ class PolicyComplianceDetail
847
+ attr_accessor policy_owner: ::String
848
+ attr_accessor policy_id: ::String
849
+ attr_accessor member_account: ::String
850
+ attr_accessor violators: ::Array[Types::ComplianceViolator]
851
+ attr_accessor evaluation_limit_exceeded: bool
852
+ attr_accessor expired_at: ::Time
853
+ attr_accessor issue_info_map: ::Hash[("AWSCONFIG" | "AWSWAF" | "AWSSHIELD_ADVANCED" | "AWSVPC"), ::String]
854
+ SENSITIVE: []
855
+ end
856
+
857
+ class PolicyComplianceStatus
858
+ attr_accessor policy_owner: ::String
859
+ attr_accessor policy_id: ::String
860
+ attr_accessor policy_name: ::String
861
+ attr_accessor member_account: ::String
862
+ attr_accessor evaluation_results: ::Array[Types::EvaluationResult]
863
+ attr_accessor last_updated: ::Time
864
+ attr_accessor issue_info_map: ::Hash[("AWSCONFIG" | "AWSWAF" | "AWSSHIELD_ADVANCED" | "AWSVPC"), ::String]
865
+ SENSITIVE: []
866
+ end
867
+
868
+ class PolicyOption
869
+ attr_accessor network_firewall_policy: Types::NetworkFirewallPolicy
870
+ attr_accessor third_party_firewall_policy: Types::ThirdPartyFirewallPolicy
871
+ attr_accessor network_acl_common_policy: Types::NetworkAclCommonPolicy
872
+ SENSITIVE: []
873
+ end
874
+
875
+ class PolicySummary
876
+ attr_accessor policy_arn: ::String
877
+ attr_accessor policy_id: ::String
878
+ attr_accessor policy_name: ::String
879
+ attr_accessor resource_type: ::String
880
+ attr_accessor security_service_type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
881
+ attr_accessor remediation_enabled: bool
882
+ attr_accessor delete_unused_fm_managed_resources: bool
883
+ attr_accessor policy_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
884
+ SENSITIVE: []
885
+ end
886
+
887
+ class PolicyTypeScope
888
+ attr_accessor policy_types: ::Array[("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")]
889
+ attr_accessor all_policy_types_enabled: bool
890
+ SENSITIVE: []
891
+ end
892
+
893
+ class PossibleRemediationAction
894
+ attr_accessor description: ::String
895
+ attr_accessor ordered_remediation_actions: ::Array[Types::RemediationActionWithOrder]
896
+ attr_accessor is_default_action: bool
897
+ SENSITIVE: []
898
+ end
899
+
900
+ class PossibleRemediationActions
901
+ attr_accessor description: ::String
902
+ attr_accessor actions: ::Array[Types::PossibleRemediationAction]
903
+ SENSITIVE: []
904
+ end
905
+
906
+ class ProtocolsListData
907
+ attr_accessor list_id: ::String
908
+ attr_accessor list_name: ::String
909
+ attr_accessor list_update_token: ::String
910
+ attr_accessor create_time: ::Time
911
+ attr_accessor last_update_time: ::Time
912
+ attr_accessor protocols_list: ::Array[::String]
913
+ attr_accessor previous_protocols_list: ::Hash[::String, ::Array[::String]]
914
+ SENSITIVE: []
915
+ end
916
+
917
+ class ProtocolsListDataSummary
918
+ attr_accessor list_arn: ::String
919
+ attr_accessor list_id: ::String
920
+ attr_accessor list_name: ::String
921
+ attr_accessor protocols_list: ::Array[::String]
922
+ SENSITIVE: []
923
+ end
924
+
925
+ class PutAdminAccountRequest
926
+ attr_accessor admin_account: ::String
927
+ attr_accessor admin_scope: Types::AdminScope
928
+ SENSITIVE: []
929
+ end
930
+
931
+ class PutAppsListRequest
932
+ attr_accessor apps_list: Types::AppsListData
933
+ attr_accessor tag_list: ::Array[Types::Tag]
934
+ SENSITIVE: []
935
+ end
936
+
937
+ class PutAppsListResponse
938
+ attr_accessor apps_list: Types::AppsListData
939
+ attr_accessor apps_list_arn: ::String
940
+ SENSITIVE: []
941
+ end
942
+
943
+ class PutNotificationChannelRequest
944
+ attr_accessor sns_topic_arn: ::String
945
+ attr_accessor sns_role_name: ::String
946
+ SENSITIVE: []
947
+ end
948
+
949
+ class PutPolicyRequest
950
+ attr_accessor policy: Types::Policy
951
+ attr_accessor tag_list: ::Array[Types::Tag]
952
+ SENSITIVE: []
953
+ end
954
+
955
+ class PutPolicyResponse
956
+ attr_accessor policy: Types::Policy
957
+ attr_accessor policy_arn: ::String
958
+ SENSITIVE: []
959
+ end
960
+
961
+ class PutProtocolsListRequest
962
+ attr_accessor protocols_list: Types::ProtocolsListData
963
+ attr_accessor tag_list: ::Array[Types::Tag]
964
+ SENSITIVE: []
965
+ end
966
+
967
+ class PutProtocolsListResponse
968
+ attr_accessor protocols_list: Types::ProtocolsListData
969
+ attr_accessor protocols_list_arn: ::String
970
+ SENSITIVE: []
971
+ end
972
+
973
+ class PutResourceSetRequest
974
+ attr_accessor resource_set: Types::ResourceSet
975
+ attr_accessor tag_list: ::Array[Types::Tag]
976
+ SENSITIVE: []
977
+ end
978
+
979
+ class PutResourceSetResponse
980
+ attr_accessor resource_set: Types::ResourceSet
981
+ attr_accessor resource_set_arn: ::String
982
+ SENSITIVE: []
983
+ end
984
+
985
+ class RegionScope
986
+ attr_accessor regions: ::Array[::String]
987
+ attr_accessor all_regions_enabled: bool
988
+ SENSITIVE: []
989
+ end
990
+
991
+ class RemediationAction
992
+ attr_accessor description: ::String
993
+ attr_accessor ec2_create_route_action: Types::EC2CreateRouteAction
994
+ attr_accessor ec2_replace_route_action: Types::EC2ReplaceRouteAction
995
+ attr_accessor ec2_delete_route_action: Types::EC2DeleteRouteAction
996
+ attr_accessor ec2_copy_route_table_action: Types::EC2CopyRouteTableAction
997
+ attr_accessor ec2_replace_route_table_association_action: Types::EC2ReplaceRouteTableAssociationAction
998
+ attr_accessor ec2_associate_route_table_action: Types::EC2AssociateRouteTableAction
999
+ attr_accessor ec2_create_route_table_action: Types::EC2CreateRouteTableAction
1000
+ attr_accessor fms_policy_update_firewall_creation_config_action: Types::FMSPolicyUpdateFirewallCreationConfigAction
1001
+ attr_accessor create_network_acl_action: Types::CreateNetworkAclAction
1002
+ attr_accessor replace_network_acl_association_action: Types::ReplaceNetworkAclAssociationAction
1003
+ attr_accessor create_network_acl_entries_action: Types::CreateNetworkAclEntriesAction
1004
+ attr_accessor delete_network_acl_entries_action: Types::DeleteNetworkAclEntriesAction
1005
+ SENSITIVE: []
1006
+ end
1007
+
1008
+ class RemediationActionWithOrder
1009
+ attr_accessor remediation_action: Types::RemediationAction
1010
+ attr_accessor order: ::Integer
1011
+ SENSITIVE: []
1012
+ end
1013
+
1014
+ class ReplaceNetworkAclAssociationAction
1015
+ attr_accessor description: ::String
1016
+ attr_accessor association_id: Types::ActionTarget
1017
+ attr_accessor network_acl_id: Types::ActionTarget
1018
+ attr_accessor fms_can_remediate: bool
1019
+ SENSITIVE: []
1020
+ end
1021
+
1022
+ class Resource
1023
+ attr_accessor uri: ::String
1024
+ attr_accessor account_id: ::String
1025
+ SENSITIVE: []
1026
+ end
1027
+
1028
+ class ResourceNotFoundException
1029
+ attr_accessor message: ::String
1030
+ SENSITIVE: []
1031
+ end
1032
+
1033
+ class ResourceSet
1034
+ attr_accessor id: ::String
1035
+ attr_accessor name: ::String
1036
+ attr_accessor description: ::String
1037
+ attr_accessor update_token: ::String
1038
+ attr_accessor resource_type_list: ::Array[::String]
1039
+ attr_accessor last_update_time: ::Time
1040
+ attr_accessor resource_set_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
1041
+ SENSITIVE: []
1042
+ end
1043
+
1044
+ class ResourceSetSummary
1045
+ attr_accessor id: ::String
1046
+ attr_accessor name: ::String
1047
+ attr_accessor description: ::String
1048
+ attr_accessor last_update_time: ::Time
1049
+ attr_accessor resource_set_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
1050
+ SENSITIVE: []
1051
+ end
1052
+
1053
+ class ResourceTag
1054
+ attr_accessor key: ::String
1055
+ attr_accessor value: ::String
1056
+ SENSITIVE: []
1057
+ end
1058
+
1059
+ class ResourceViolation
1060
+ attr_accessor aws_vpc_security_group_violation: Types::AwsVPCSecurityGroupViolation
1061
+ attr_accessor aws_ec2_network_interface_violation: Types::AwsEc2NetworkInterfaceViolation
1062
+ attr_accessor aws_ec2_instance_violation: Types::AwsEc2InstanceViolation
1063
+ attr_accessor network_firewall_missing_firewall_violation: Types::NetworkFirewallMissingFirewallViolation
1064
+ attr_accessor network_firewall_missing_subnet_violation: Types::NetworkFirewallMissingSubnetViolation
1065
+ attr_accessor network_firewall_missing_expected_rt_violation: Types::NetworkFirewallMissingExpectedRTViolation
1066
+ attr_accessor network_firewall_policy_modified_violation: Types::NetworkFirewallPolicyModifiedViolation
1067
+ attr_accessor network_firewall_internet_traffic_not_inspected_violation: Types::NetworkFirewallInternetTrafficNotInspectedViolation
1068
+ attr_accessor network_firewall_invalid_route_configuration_violation: Types::NetworkFirewallInvalidRouteConfigurationViolation
1069
+ attr_accessor network_firewall_black_hole_route_detected_violation: Types::NetworkFirewallBlackHoleRouteDetectedViolation
1070
+ attr_accessor network_firewall_unexpected_firewall_routes_violation: Types::NetworkFirewallUnexpectedFirewallRoutesViolation
1071
+ attr_accessor network_firewall_unexpected_gateway_routes_violation: Types::NetworkFirewallUnexpectedGatewayRoutesViolation
1072
+ attr_accessor network_firewall_missing_expected_routes_violation: Types::NetworkFirewallMissingExpectedRoutesViolation
1073
+ attr_accessor dns_rule_group_priority_conflict_violation: Types::DnsRuleGroupPriorityConflictViolation
1074
+ attr_accessor dns_duplicate_rule_group_violation: Types::DnsDuplicateRuleGroupViolation
1075
+ attr_accessor dns_rule_group_limit_exceeded_violation: Types::DnsRuleGroupLimitExceededViolation
1076
+ attr_accessor firewall_subnet_is_out_of_scope_violation: Types::FirewallSubnetIsOutOfScopeViolation
1077
+ attr_accessor route_has_out_of_scope_endpoint_violation: Types::RouteHasOutOfScopeEndpointViolation
1078
+ attr_accessor third_party_firewall_missing_firewall_violation: Types::ThirdPartyFirewallMissingFirewallViolation
1079
+ attr_accessor third_party_firewall_missing_subnet_violation: Types::ThirdPartyFirewallMissingSubnetViolation
1080
+ attr_accessor third_party_firewall_missing_expected_route_table_violation: Types::ThirdPartyFirewallMissingExpectedRouteTableViolation
1081
+ attr_accessor firewall_subnet_missing_vpc_endpoint_violation: Types::FirewallSubnetMissingVPCEndpointViolation
1082
+ attr_accessor invalid_network_acl_entries_violation: Types::InvalidNetworkAclEntriesViolation
1083
+ attr_accessor possible_remediation_actions: Types::PossibleRemediationActions
1084
+ SENSITIVE: []
1085
+ end
1086
+
1087
+ class Route
1088
+ attr_accessor destination_type: ("IPV4" | "IPV6" | "PREFIX_LIST")
1089
+ attr_accessor target_type: ("GATEWAY" | "CARRIER_GATEWAY" | "INSTANCE" | "LOCAL_GATEWAY" | "NAT_GATEWAY" | "NETWORK_INTERFACE" | "VPC_ENDPOINT" | "VPC_PEERING_CONNECTION" | "EGRESS_ONLY_INTERNET_GATEWAY" | "TRANSIT_GATEWAY")
1090
+ attr_accessor destination: ::String
1091
+ attr_accessor target: ::String
1092
+ SENSITIVE: []
1093
+ end
1094
+
1095
+ class RouteHasOutOfScopeEndpointViolation
1096
+ attr_accessor subnet_id: ::String
1097
+ attr_accessor vpc_id: ::String
1098
+ attr_accessor route_table_id: ::String
1099
+ attr_accessor violating_routes: ::Array[Types::Route]
1100
+ attr_accessor subnet_availability_zone: ::String
1101
+ attr_accessor subnet_availability_zone_id: ::String
1102
+ attr_accessor current_firewall_subnet_route_table: ::String
1103
+ attr_accessor firewall_subnet_id: ::String
1104
+ attr_accessor firewall_subnet_routes: ::Array[Types::Route]
1105
+ attr_accessor internet_gateway_id: ::String
1106
+ attr_accessor current_internet_gateway_route_table: ::String
1107
+ attr_accessor internet_gateway_routes: ::Array[Types::Route]
1108
+ SENSITIVE: []
1109
+ end
1110
+
1111
+ class SecurityGroupRemediationAction
1112
+ attr_accessor remediation_action_type: ("REMOVE" | "MODIFY")
1113
+ attr_accessor description: ::String
1114
+ attr_accessor remediation_result: Types::SecurityGroupRuleDescription
1115
+ attr_accessor is_default_action: bool
1116
+ SENSITIVE: []
1117
+ end
1118
+
1119
+ class SecurityGroupRuleDescription
1120
+ attr_accessor ipv4_range: ::String
1121
+ attr_accessor ipv6_range: ::String
1122
+ attr_accessor prefix_list_id: ::String
1123
+ attr_accessor protocol: ::String
1124
+ attr_accessor from_port: ::Integer
1125
+ attr_accessor to_port: ::Integer
1126
+ SENSITIVE: []
1127
+ end
1128
+
1129
+ class SecurityServicePolicyData
1130
+ attr_accessor type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
1131
+ attr_accessor managed_service_data: ::String
1132
+ attr_accessor policy_option: Types::PolicyOption
1133
+ SENSITIVE: []
1134
+ end
1135
+
1136
+ class StatefulEngineOptions
1137
+ attr_accessor rule_order: ("STRICT_ORDER" | "DEFAULT_ACTION_ORDER")
1138
+ SENSITIVE: []
1139
+ end
1140
+
1141
+ class StatefulRuleGroup
1142
+ attr_accessor rule_group_name: ::String
1143
+ attr_accessor resource_id: ::String
1144
+ attr_accessor priority: ::Integer
1145
+ attr_accessor override: Types::NetworkFirewallStatefulRuleGroupOverride
1146
+ SENSITIVE: []
1147
+ end
1148
+
1149
+ class StatelessRuleGroup
1150
+ attr_accessor rule_group_name: ::String
1151
+ attr_accessor resource_id: ::String
1152
+ attr_accessor priority: ::Integer
1153
+ SENSITIVE: []
1154
+ end
1155
+
1156
+ class Tag
1157
+ attr_accessor key: ::String
1158
+ attr_accessor value: ::String
1159
+ SENSITIVE: []
1160
+ end
1161
+
1162
+ class TagResourceRequest
1163
+ attr_accessor resource_arn: ::String
1164
+ attr_accessor tag_list: ::Array[Types::Tag]
1165
+ SENSITIVE: []
1166
+ end
1167
+
1168
+ class TagResourceResponse < Aws::EmptyStructure
1169
+ end
1170
+
1171
+ class ThirdPartyFirewallFirewallPolicy
1172
+ attr_accessor firewall_policy_id: ::String
1173
+ attr_accessor firewall_policy_name: ::String
1174
+ SENSITIVE: []
1175
+ end
1176
+
1177
+ class ThirdPartyFirewallMissingExpectedRouteTableViolation
1178
+ attr_accessor violation_target: ::String
1179
+ attr_accessor vpc: ::String
1180
+ attr_accessor availability_zone: ::String
1181
+ attr_accessor current_route_table: ::String
1182
+ attr_accessor expected_route_table: ::String
1183
+ SENSITIVE: []
1184
+ end
1185
+
1186
+ class ThirdPartyFirewallMissingFirewallViolation
1187
+ attr_accessor violation_target: ::String
1188
+ attr_accessor vpc: ::String
1189
+ attr_accessor availability_zone: ::String
1190
+ attr_accessor target_violation_reason: ::String
1191
+ SENSITIVE: []
1192
+ end
1193
+
1194
+ class ThirdPartyFirewallMissingSubnetViolation
1195
+ attr_accessor violation_target: ::String
1196
+ attr_accessor vpc: ::String
1197
+ attr_accessor availability_zone: ::String
1198
+ attr_accessor target_violation_reason: ::String
1199
+ SENSITIVE: []
1200
+ end
1201
+
1202
+ class ThirdPartyFirewallPolicy
1203
+ attr_accessor firewall_deployment_model: ("CENTRALIZED" | "DISTRIBUTED")
1204
+ SENSITIVE: []
1205
+ end
1206
+
1207
+ class UntagResourceRequest
1208
+ attr_accessor resource_arn: ::String
1209
+ attr_accessor tag_keys: ::Array[::String]
1210
+ SENSITIVE: []
1211
+ end
1212
+
1213
+ class UntagResourceResponse < Aws::EmptyStructure
1214
+ end
1215
+
1216
+ class ViolationDetail
1217
+ attr_accessor policy_id: ::String
1218
+ attr_accessor member_account: ::String
1219
+ attr_accessor resource_id: ::String
1220
+ attr_accessor resource_type: ::String
1221
+ attr_accessor resource_violations: ::Array[Types::ResourceViolation]
1222
+ attr_accessor resource_tags: ::Array[Types::Tag]
1223
+ attr_accessor resource_description: ::String
1224
+ SENSITIVE: []
1225
+ end
1226
+ end
1227
+ end