aws-sdk-fms 1.66.0 → 1.68.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-fms/client.rb +307 -119
- data/lib/aws-sdk-fms/client_api.rb +112 -1
- data/lib/aws-sdk-fms/plugins/endpoints.rb +1 -0
- data/lib/aws-sdk-fms/types.rb +506 -32
- data/lib/aws-sdk-fms.rb +1 -1
- data/sig/client.rbs +675 -0
- data/sig/errors.rbs +34 -0
- data/sig/resource.rbs +80 -0
- data/sig/types.rbs +1227 -0
- data/sig/waiters.rbs +13 -0
- metadata +13 -8
data/sig/types.rbs
ADDED
@@ -0,0 +1,1227 @@
|
|
1
|
+
# WARNING ABOUT GENERATED CODE
|
2
|
+
#
|
3
|
+
# This file is generated. See the contributing guide for more information:
|
4
|
+
# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
|
5
|
+
#
|
6
|
+
# WARNING ABOUT GENERATED CODE
|
7
|
+
|
8
|
+
module Aws::FMS
|
9
|
+
module Types
|
10
|
+
|
11
|
+
class AccountScope
|
12
|
+
attr_accessor accounts: ::Array[::String]
|
13
|
+
attr_accessor all_accounts_enabled: bool
|
14
|
+
attr_accessor exclude_specified_accounts: bool
|
15
|
+
SENSITIVE: []
|
16
|
+
end
|
17
|
+
|
18
|
+
class ActionTarget
|
19
|
+
attr_accessor resource_id: ::String
|
20
|
+
attr_accessor description: ::String
|
21
|
+
SENSITIVE: []
|
22
|
+
end
|
23
|
+
|
24
|
+
class AdminAccountSummary
|
25
|
+
attr_accessor admin_account: ::String
|
26
|
+
attr_accessor default_admin: bool
|
27
|
+
attr_accessor status: ("ONBOARDING" | "ONBOARDING_COMPLETE" | "OFFBOARDING" | "OFFBOARDING_COMPLETE")
|
28
|
+
SENSITIVE: []
|
29
|
+
end
|
30
|
+
|
31
|
+
class AdminScope
|
32
|
+
attr_accessor account_scope: Types::AccountScope
|
33
|
+
attr_accessor organizational_unit_scope: Types::OrganizationalUnitScope
|
34
|
+
attr_accessor region_scope: Types::RegionScope
|
35
|
+
attr_accessor policy_type_scope: Types::PolicyTypeScope
|
36
|
+
SENSITIVE: []
|
37
|
+
end
|
38
|
+
|
39
|
+
class App
|
40
|
+
attr_accessor app_name: ::String
|
41
|
+
attr_accessor protocol: ::String
|
42
|
+
attr_accessor port: ::Integer
|
43
|
+
SENSITIVE: []
|
44
|
+
end
|
45
|
+
|
46
|
+
class AppsListData
|
47
|
+
attr_accessor list_id: ::String
|
48
|
+
attr_accessor list_name: ::String
|
49
|
+
attr_accessor list_update_token: ::String
|
50
|
+
attr_accessor create_time: ::Time
|
51
|
+
attr_accessor last_update_time: ::Time
|
52
|
+
attr_accessor apps_list: ::Array[Types::App]
|
53
|
+
attr_accessor previous_apps_list: ::Hash[::String, ::Array[Types::App]]
|
54
|
+
SENSITIVE: []
|
55
|
+
end
|
56
|
+
|
57
|
+
class AppsListDataSummary
|
58
|
+
attr_accessor list_arn: ::String
|
59
|
+
attr_accessor list_id: ::String
|
60
|
+
attr_accessor list_name: ::String
|
61
|
+
attr_accessor apps_list: ::Array[Types::App]
|
62
|
+
SENSITIVE: []
|
63
|
+
end
|
64
|
+
|
65
|
+
class AssociateAdminAccountRequest
|
66
|
+
attr_accessor admin_account: ::String
|
67
|
+
SENSITIVE: []
|
68
|
+
end
|
69
|
+
|
70
|
+
class AssociateThirdPartyFirewallRequest
|
71
|
+
attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
|
72
|
+
SENSITIVE: []
|
73
|
+
end
|
74
|
+
|
75
|
+
class AssociateThirdPartyFirewallResponse
|
76
|
+
attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
|
77
|
+
SENSITIVE: []
|
78
|
+
end
|
79
|
+
|
80
|
+
class AwsEc2InstanceViolation
|
81
|
+
attr_accessor violation_target: ::String
|
82
|
+
attr_accessor aws_ec2_network_interface_violations: ::Array[Types::AwsEc2NetworkInterfaceViolation]
|
83
|
+
SENSITIVE: []
|
84
|
+
end
|
85
|
+
|
86
|
+
class AwsEc2NetworkInterfaceViolation
|
87
|
+
attr_accessor violation_target: ::String
|
88
|
+
attr_accessor violating_security_groups: ::Array[::String]
|
89
|
+
SENSITIVE: []
|
90
|
+
end
|
91
|
+
|
92
|
+
class AwsVPCSecurityGroupViolation
|
93
|
+
attr_accessor violation_target: ::String
|
94
|
+
attr_accessor violation_target_description: ::String
|
95
|
+
attr_accessor partial_matches: ::Array[Types::PartialMatch]
|
96
|
+
attr_accessor possible_security_group_remediation_actions: ::Array[Types::SecurityGroupRemediationAction]
|
97
|
+
SENSITIVE: []
|
98
|
+
end
|
99
|
+
|
100
|
+
class BatchAssociateResourceRequest
|
101
|
+
attr_accessor resource_set_identifier: ::String
|
102
|
+
attr_accessor items: ::Array[::String]
|
103
|
+
SENSITIVE: []
|
104
|
+
end
|
105
|
+
|
106
|
+
class BatchAssociateResourceResponse
|
107
|
+
attr_accessor resource_set_identifier: ::String
|
108
|
+
attr_accessor failed_items: ::Array[Types::FailedItem]
|
109
|
+
SENSITIVE: []
|
110
|
+
end
|
111
|
+
|
112
|
+
class BatchDisassociateResourceRequest
|
113
|
+
attr_accessor resource_set_identifier: ::String
|
114
|
+
attr_accessor items: ::Array[::String]
|
115
|
+
SENSITIVE: []
|
116
|
+
end
|
117
|
+
|
118
|
+
class BatchDisassociateResourceResponse
|
119
|
+
attr_accessor resource_set_identifier: ::String
|
120
|
+
attr_accessor failed_items: ::Array[Types::FailedItem]
|
121
|
+
SENSITIVE: []
|
122
|
+
end
|
123
|
+
|
124
|
+
class ComplianceViolator
|
125
|
+
attr_accessor resource_id: ::String
|
126
|
+
attr_accessor violation_reason: ("WEB_ACL_MISSING_RULE_GROUP" | "RESOURCE_MISSING_WEB_ACL" | "RESOURCE_INCORRECT_WEB_ACL" | "RESOURCE_MISSING_SHIELD_PROTECTION" | "RESOURCE_MISSING_WEB_ACL_OR_SHIELD_PROTECTION" | "RESOURCE_MISSING_SECURITY_GROUP" | "RESOURCE_VIOLATES_AUDIT_SECURITY_GROUP" | "SECURITY_GROUP_UNUSED" | "SECURITY_GROUP_REDUNDANT" | "FMS_CREATED_SECURITY_GROUP_EDITED" | "MISSING_FIREWALL" | "MISSING_FIREWALL_SUBNET_IN_AZ" | "MISSING_EXPECTED_ROUTE_TABLE" | "NETWORK_FIREWALL_POLICY_MODIFIED" | "FIREWALL_SUBNET_IS_OUT_OF_SCOPE" | "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE" | "FIREWALL_SUBNET_MISSING_EXPECTED_ROUTE" | "UNEXPECTED_FIREWALL_ROUTES" | "UNEXPECTED_TARGET_GATEWAY_ROUTES" | "TRAFFIC_INSPECTION_CROSSES_AZ_BOUNDARY" | "INVALID_ROUTE_CONFIGURATION" | "MISSING_TARGET_GATEWAY" | "INTERNET_TRAFFIC_NOT_INSPECTED" | "BLACK_HOLE_ROUTE_DETECTED" | "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET" | "RESOURCE_MISSING_DNS_FIREWALL" | "ROUTE_HAS_OUT_OF_SCOPE_ENDPOINT" | "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT" | "INVALID_NETWORK_ACL_ENTRY")
|
127
|
+
attr_accessor resource_type: ::String
|
128
|
+
attr_accessor metadata: ::Hash[::String, ::String]
|
129
|
+
SENSITIVE: []
|
130
|
+
end
|
131
|
+
|
132
|
+
class CreateNetworkAclAction
|
133
|
+
attr_accessor description: ::String
|
134
|
+
attr_accessor vpc: Types::ActionTarget
|
135
|
+
attr_accessor fms_can_remediate: bool
|
136
|
+
SENSITIVE: []
|
137
|
+
end
|
138
|
+
|
139
|
+
class CreateNetworkAclEntriesAction
|
140
|
+
attr_accessor description: ::String
|
141
|
+
attr_accessor network_acl_id: Types::ActionTarget
|
142
|
+
attr_accessor network_acl_entries_to_be_created: ::Array[Types::EntryDescription]
|
143
|
+
attr_accessor fms_can_remediate: bool
|
144
|
+
SENSITIVE: []
|
145
|
+
end
|
146
|
+
|
147
|
+
class DeleteAppsListRequest
|
148
|
+
attr_accessor list_id: ::String
|
149
|
+
SENSITIVE: []
|
150
|
+
end
|
151
|
+
|
152
|
+
class DeleteNetworkAclEntriesAction
|
153
|
+
attr_accessor description: ::String
|
154
|
+
attr_accessor network_acl_id: Types::ActionTarget
|
155
|
+
attr_accessor network_acl_entries_to_be_deleted: ::Array[Types::EntryDescription]
|
156
|
+
attr_accessor fms_can_remediate: bool
|
157
|
+
SENSITIVE: []
|
158
|
+
end
|
159
|
+
|
160
|
+
class DeleteNotificationChannelRequest < Aws::EmptyStructure
|
161
|
+
end
|
162
|
+
|
163
|
+
class DeletePolicyRequest
|
164
|
+
attr_accessor policy_id: ::String
|
165
|
+
attr_accessor delete_all_policy_resources: bool
|
166
|
+
SENSITIVE: []
|
167
|
+
end
|
168
|
+
|
169
|
+
class DeleteProtocolsListRequest
|
170
|
+
attr_accessor list_id: ::String
|
171
|
+
SENSITIVE: []
|
172
|
+
end
|
173
|
+
|
174
|
+
class DeleteResourceSetRequest
|
175
|
+
attr_accessor identifier: ::String
|
176
|
+
SENSITIVE: []
|
177
|
+
end
|
178
|
+
|
179
|
+
class DisassociateAdminAccountRequest < Aws::EmptyStructure
|
180
|
+
end
|
181
|
+
|
182
|
+
class DisassociateThirdPartyFirewallRequest
|
183
|
+
attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
|
184
|
+
SENSITIVE: []
|
185
|
+
end
|
186
|
+
|
187
|
+
class DisassociateThirdPartyFirewallResponse
|
188
|
+
attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
|
189
|
+
SENSITIVE: []
|
190
|
+
end
|
191
|
+
|
192
|
+
class DiscoveredResource
|
193
|
+
attr_accessor uri: ::String
|
194
|
+
attr_accessor account_id: ::String
|
195
|
+
attr_accessor type: ::String
|
196
|
+
attr_accessor name: ::String
|
197
|
+
SENSITIVE: []
|
198
|
+
end
|
199
|
+
|
200
|
+
class DnsDuplicateRuleGroupViolation
|
201
|
+
attr_accessor violation_target: ::String
|
202
|
+
attr_accessor violation_target_description: ::String
|
203
|
+
SENSITIVE: []
|
204
|
+
end
|
205
|
+
|
206
|
+
class DnsRuleGroupLimitExceededViolation
|
207
|
+
attr_accessor violation_target: ::String
|
208
|
+
attr_accessor violation_target_description: ::String
|
209
|
+
attr_accessor number_of_rule_groups_already_associated: ::Integer
|
210
|
+
SENSITIVE: []
|
211
|
+
end
|
212
|
+
|
213
|
+
class DnsRuleGroupPriorityConflictViolation
|
214
|
+
attr_accessor violation_target: ::String
|
215
|
+
attr_accessor violation_target_description: ::String
|
216
|
+
attr_accessor conflicting_priority: ::Integer
|
217
|
+
attr_accessor conflicting_policy_id: ::String
|
218
|
+
attr_accessor unavailable_priorities: ::Array[::Integer]
|
219
|
+
SENSITIVE: []
|
220
|
+
end
|
221
|
+
|
222
|
+
class EC2AssociateRouteTableAction
|
223
|
+
attr_accessor description: ::String
|
224
|
+
attr_accessor route_table_id: Types::ActionTarget
|
225
|
+
attr_accessor subnet_id: Types::ActionTarget
|
226
|
+
attr_accessor gateway_id: Types::ActionTarget
|
227
|
+
SENSITIVE: []
|
228
|
+
end
|
229
|
+
|
230
|
+
class EC2CopyRouteTableAction
|
231
|
+
attr_accessor description: ::String
|
232
|
+
attr_accessor vpc_id: Types::ActionTarget
|
233
|
+
attr_accessor route_table_id: Types::ActionTarget
|
234
|
+
SENSITIVE: []
|
235
|
+
end
|
236
|
+
|
237
|
+
class EC2CreateRouteAction
|
238
|
+
attr_accessor description: ::String
|
239
|
+
attr_accessor destination_cidr_block: ::String
|
240
|
+
attr_accessor destination_prefix_list_id: ::String
|
241
|
+
attr_accessor destination_ipv_6_cidr_block: ::String
|
242
|
+
attr_accessor vpc_endpoint_id: Types::ActionTarget
|
243
|
+
attr_accessor gateway_id: Types::ActionTarget
|
244
|
+
attr_accessor route_table_id: Types::ActionTarget
|
245
|
+
SENSITIVE: []
|
246
|
+
end
|
247
|
+
|
248
|
+
class EC2CreateRouteTableAction
|
249
|
+
attr_accessor description: ::String
|
250
|
+
attr_accessor vpc_id: Types::ActionTarget
|
251
|
+
SENSITIVE: []
|
252
|
+
end
|
253
|
+
|
254
|
+
class EC2DeleteRouteAction
|
255
|
+
attr_accessor description: ::String
|
256
|
+
attr_accessor destination_cidr_block: ::String
|
257
|
+
attr_accessor destination_prefix_list_id: ::String
|
258
|
+
attr_accessor destination_ipv_6_cidr_block: ::String
|
259
|
+
attr_accessor route_table_id: Types::ActionTarget
|
260
|
+
SENSITIVE: []
|
261
|
+
end
|
262
|
+
|
263
|
+
class EC2ReplaceRouteAction
|
264
|
+
attr_accessor description: ::String
|
265
|
+
attr_accessor destination_cidr_block: ::String
|
266
|
+
attr_accessor destination_prefix_list_id: ::String
|
267
|
+
attr_accessor destination_ipv_6_cidr_block: ::String
|
268
|
+
attr_accessor gateway_id: Types::ActionTarget
|
269
|
+
attr_accessor route_table_id: Types::ActionTarget
|
270
|
+
SENSITIVE: []
|
271
|
+
end
|
272
|
+
|
273
|
+
class EC2ReplaceRouteTableAssociationAction
|
274
|
+
attr_accessor description: ::String
|
275
|
+
attr_accessor association_id: Types::ActionTarget
|
276
|
+
attr_accessor route_table_id: Types::ActionTarget
|
277
|
+
SENSITIVE: []
|
278
|
+
end
|
279
|
+
|
280
|
+
class EntryDescription
|
281
|
+
attr_accessor entry_detail: Types::NetworkAclEntry
|
282
|
+
attr_accessor entry_rule_number: ::Integer
|
283
|
+
attr_accessor entry_type: ("FMS_MANAGED_FIRST_ENTRY" | "FMS_MANAGED_LAST_ENTRY" | "CUSTOM_ENTRY")
|
284
|
+
SENSITIVE: []
|
285
|
+
end
|
286
|
+
|
287
|
+
class EntryViolation
|
288
|
+
attr_accessor expected_entry: Types::EntryDescription
|
289
|
+
attr_accessor expected_evaluation_order: ::String
|
290
|
+
attr_accessor actual_evaluation_order: ::String
|
291
|
+
attr_accessor entry_at_expected_evaluation_order: Types::EntryDescription
|
292
|
+
attr_accessor entries_with_conflicts: ::Array[Types::EntryDescription]
|
293
|
+
attr_accessor entry_violation_reasons: ::Array[("MISSING_EXPECTED_ENTRY" | "INCORRECT_ENTRY_ORDER" | "ENTRY_CONFLICT")]
|
294
|
+
SENSITIVE: []
|
295
|
+
end
|
296
|
+
|
297
|
+
class EvaluationResult
|
298
|
+
attr_accessor compliance_status: ("COMPLIANT" | "NON_COMPLIANT")
|
299
|
+
attr_accessor violator_count: ::Integer
|
300
|
+
attr_accessor evaluation_limit_exceeded: bool
|
301
|
+
SENSITIVE: []
|
302
|
+
end
|
303
|
+
|
304
|
+
class ExpectedRoute
|
305
|
+
attr_accessor ip_v4_cidr: ::String
|
306
|
+
attr_accessor prefix_list_id: ::String
|
307
|
+
attr_accessor ip_v6_cidr: ::String
|
308
|
+
attr_accessor contributing_subnets: ::Array[::String]
|
309
|
+
attr_accessor allowed_targets: ::Array[::String]
|
310
|
+
attr_accessor route_table_id: ::String
|
311
|
+
SENSITIVE: []
|
312
|
+
end
|
313
|
+
|
314
|
+
class FMSPolicyUpdateFirewallCreationConfigAction
|
315
|
+
attr_accessor description: ::String
|
316
|
+
attr_accessor firewall_creation_config: ::String
|
317
|
+
SENSITIVE: []
|
318
|
+
end
|
319
|
+
|
320
|
+
class FailedItem
|
321
|
+
attr_accessor uri: ::String
|
322
|
+
attr_accessor reason: ("NOT_VALID_ARN" | "NOT_VALID_PARTITION" | "NOT_VALID_REGION" | "NOT_VALID_SERVICE" | "NOT_VALID_RESOURCE_TYPE" | "NOT_VALID_ACCOUNT_ID")
|
323
|
+
SENSITIVE: []
|
324
|
+
end
|
325
|
+
|
326
|
+
class FirewallSubnetIsOutOfScopeViolation
|
327
|
+
attr_accessor firewall_subnet_id: ::String
|
328
|
+
attr_accessor vpc_id: ::String
|
329
|
+
attr_accessor subnet_availability_zone: ::String
|
330
|
+
attr_accessor subnet_availability_zone_id: ::String
|
331
|
+
attr_accessor vpc_endpoint_id: ::String
|
332
|
+
SENSITIVE: []
|
333
|
+
end
|
334
|
+
|
335
|
+
class FirewallSubnetMissingVPCEndpointViolation
|
336
|
+
attr_accessor firewall_subnet_id: ::String
|
337
|
+
attr_accessor vpc_id: ::String
|
338
|
+
attr_accessor subnet_availability_zone: ::String
|
339
|
+
attr_accessor subnet_availability_zone_id: ::String
|
340
|
+
SENSITIVE: []
|
341
|
+
end
|
342
|
+
|
343
|
+
class GetAdminAccountRequest < Aws::EmptyStructure
|
344
|
+
end
|
345
|
+
|
346
|
+
class GetAdminAccountResponse
|
347
|
+
attr_accessor admin_account: ::String
|
348
|
+
attr_accessor role_status: ("READY" | "CREATING" | "PENDING_DELETION" | "DELETING" | "DELETED")
|
349
|
+
SENSITIVE: []
|
350
|
+
end
|
351
|
+
|
352
|
+
class GetAdminScopeRequest
|
353
|
+
attr_accessor admin_account: ::String
|
354
|
+
SENSITIVE: []
|
355
|
+
end
|
356
|
+
|
357
|
+
class GetAdminScopeResponse
|
358
|
+
attr_accessor admin_scope: Types::AdminScope
|
359
|
+
attr_accessor status: ("ONBOARDING" | "ONBOARDING_COMPLETE" | "OFFBOARDING" | "OFFBOARDING_COMPLETE")
|
360
|
+
SENSITIVE: []
|
361
|
+
end
|
362
|
+
|
363
|
+
class GetAppsListRequest
|
364
|
+
attr_accessor list_id: ::String
|
365
|
+
attr_accessor default_list: bool
|
366
|
+
SENSITIVE: []
|
367
|
+
end
|
368
|
+
|
369
|
+
class GetAppsListResponse
|
370
|
+
attr_accessor apps_list: Types::AppsListData
|
371
|
+
attr_accessor apps_list_arn: ::String
|
372
|
+
SENSITIVE: []
|
373
|
+
end
|
374
|
+
|
375
|
+
class GetComplianceDetailRequest
|
376
|
+
attr_accessor policy_id: ::String
|
377
|
+
attr_accessor member_account: ::String
|
378
|
+
SENSITIVE: []
|
379
|
+
end
|
380
|
+
|
381
|
+
class GetComplianceDetailResponse
|
382
|
+
attr_accessor policy_compliance_detail: Types::PolicyComplianceDetail
|
383
|
+
SENSITIVE: []
|
384
|
+
end
|
385
|
+
|
386
|
+
class GetNotificationChannelRequest < Aws::EmptyStructure
|
387
|
+
end
|
388
|
+
|
389
|
+
class GetNotificationChannelResponse
|
390
|
+
attr_accessor sns_topic_arn: ::String
|
391
|
+
attr_accessor sns_role_name: ::String
|
392
|
+
SENSITIVE: []
|
393
|
+
end
|
394
|
+
|
395
|
+
class GetPolicyRequest
|
396
|
+
attr_accessor policy_id: ::String
|
397
|
+
SENSITIVE: []
|
398
|
+
end
|
399
|
+
|
400
|
+
class GetPolicyResponse
|
401
|
+
attr_accessor policy: Types::Policy
|
402
|
+
attr_accessor policy_arn: ::String
|
403
|
+
SENSITIVE: []
|
404
|
+
end
|
405
|
+
|
406
|
+
class GetProtectionStatusRequest
|
407
|
+
attr_accessor policy_id: ::String
|
408
|
+
attr_accessor member_account_id: ::String
|
409
|
+
attr_accessor start_time: ::Time
|
410
|
+
attr_accessor end_time: ::Time
|
411
|
+
attr_accessor next_token: ::String
|
412
|
+
attr_accessor max_results: ::Integer
|
413
|
+
SENSITIVE: []
|
414
|
+
end
|
415
|
+
|
416
|
+
class GetProtectionStatusResponse
|
417
|
+
attr_accessor admin_account_id: ::String
|
418
|
+
attr_accessor service_type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
|
419
|
+
attr_accessor data: ::String
|
420
|
+
attr_accessor next_token: ::String
|
421
|
+
SENSITIVE: []
|
422
|
+
end
|
423
|
+
|
424
|
+
class GetProtocolsListRequest
|
425
|
+
attr_accessor list_id: ::String
|
426
|
+
attr_accessor default_list: bool
|
427
|
+
SENSITIVE: []
|
428
|
+
end
|
429
|
+
|
430
|
+
class GetProtocolsListResponse
|
431
|
+
attr_accessor protocols_list: Types::ProtocolsListData
|
432
|
+
attr_accessor protocols_list_arn: ::String
|
433
|
+
SENSITIVE: []
|
434
|
+
end
|
435
|
+
|
436
|
+
class GetResourceSetRequest
|
437
|
+
attr_accessor identifier: ::String
|
438
|
+
SENSITIVE: []
|
439
|
+
end
|
440
|
+
|
441
|
+
class GetResourceSetResponse
|
442
|
+
attr_accessor resource_set: Types::ResourceSet
|
443
|
+
attr_accessor resource_set_arn: ::String
|
444
|
+
SENSITIVE: []
|
445
|
+
end
|
446
|
+
|
447
|
+
class GetThirdPartyFirewallAssociationStatusRequest
|
448
|
+
attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
|
449
|
+
SENSITIVE: []
|
450
|
+
end
|
451
|
+
|
452
|
+
class GetThirdPartyFirewallAssociationStatusResponse
|
453
|
+
attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
|
454
|
+
attr_accessor marketplace_onboarding_status: ("NO_SUBSCRIPTION" | "NOT_COMPLETE" | "COMPLETE")
|
455
|
+
SENSITIVE: []
|
456
|
+
end
|
457
|
+
|
458
|
+
class GetViolationDetailsRequest
|
459
|
+
attr_accessor policy_id: ::String
|
460
|
+
attr_accessor member_account: ::String
|
461
|
+
attr_accessor resource_id: ::String
|
462
|
+
attr_accessor resource_type: ::String
|
463
|
+
SENSITIVE: []
|
464
|
+
end
|
465
|
+
|
466
|
+
class GetViolationDetailsResponse
|
467
|
+
attr_accessor violation_detail: Types::ViolationDetail
|
468
|
+
SENSITIVE: []
|
469
|
+
end
|
470
|
+
|
471
|
+
class InternalErrorException
|
472
|
+
attr_accessor message: ::String
|
473
|
+
SENSITIVE: []
|
474
|
+
end
|
475
|
+
|
476
|
+
class InvalidInputException
|
477
|
+
attr_accessor message: ::String
|
478
|
+
SENSITIVE: []
|
479
|
+
end
|
480
|
+
|
481
|
+
class InvalidNetworkAclEntriesViolation
|
482
|
+
attr_accessor vpc: ::String
|
483
|
+
attr_accessor subnet: ::String
|
484
|
+
attr_accessor subnet_availability_zone: ::String
|
485
|
+
attr_accessor current_associated_network_acl: ::String
|
486
|
+
attr_accessor entry_violations: ::Array[Types::EntryViolation]
|
487
|
+
SENSITIVE: []
|
488
|
+
end
|
489
|
+
|
490
|
+
class InvalidOperationException
|
491
|
+
attr_accessor message: ::String
|
492
|
+
SENSITIVE: []
|
493
|
+
end
|
494
|
+
|
495
|
+
class InvalidTypeException
|
496
|
+
attr_accessor message: ::String
|
497
|
+
SENSITIVE: []
|
498
|
+
end
|
499
|
+
|
500
|
+
class LimitExceededException
|
501
|
+
attr_accessor message: ::String
|
502
|
+
SENSITIVE: []
|
503
|
+
end
|
504
|
+
|
505
|
+
class ListAdminAccountsForOrganizationRequest
|
506
|
+
attr_accessor next_token: ::String
|
507
|
+
attr_accessor max_results: ::Integer
|
508
|
+
SENSITIVE: []
|
509
|
+
end
|
510
|
+
|
511
|
+
class ListAdminAccountsForOrganizationResponse
|
512
|
+
attr_accessor admin_accounts: ::Array[Types::AdminAccountSummary]
|
513
|
+
attr_accessor next_token: ::String
|
514
|
+
SENSITIVE: []
|
515
|
+
end
|
516
|
+
|
517
|
+
class ListAdminsManagingAccountRequest
|
518
|
+
attr_accessor next_token: ::String
|
519
|
+
attr_accessor max_results: ::Integer
|
520
|
+
SENSITIVE: []
|
521
|
+
end
|
522
|
+
|
523
|
+
class ListAdminsManagingAccountResponse
|
524
|
+
attr_accessor admin_accounts: ::Array[::String]
|
525
|
+
attr_accessor next_token: ::String
|
526
|
+
SENSITIVE: []
|
527
|
+
end
|
528
|
+
|
529
|
+
class ListAppsListsRequest
|
530
|
+
attr_accessor default_lists: bool
|
531
|
+
attr_accessor next_token: ::String
|
532
|
+
attr_accessor max_results: ::Integer
|
533
|
+
SENSITIVE: []
|
534
|
+
end
|
535
|
+
|
536
|
+
class ListAppsListsResponse
|
537
|
+
attr_accessor apps_lists: ::Array[Types::AppsListDataSummary]
|
538
|
+
attr_accessor next_token: ::String
|
539
|
+
SENSITIVE: []
|
540
|
+
end
|
541
|
+
|
542
|
+
class ListComplianceStatusRequest
|
543
|
+
attr_accessor policy_id: ::String
|
544
|
+
attr_accessor next_token: ::String
|
545
|
+
attr_accessor max_results: ::Integer
|
546
|
+
SENSITIVE: []
|
547
|
+
end
|
548
|
+
|
549
|
+
class ListComplianceStatusResponse
|
550
|
+
attr_accessor policy_compliance_status_list: ::Array[Types::PolicyComplianceStatus]
|
551
|
+
attr_accessor next_token: ::String
|
552
|
+
SENSITIVE: []
|
553
|
+
end
|
554
|
+
|
555
|
+
class ListDiscoveredResourcesRequest
|
556
|
+
attr_accessor member_account_ids: ::Array[::String]
|
557
|
+
attr_accessor resource_type: ::String
|
558
|
+
attr_accessor max_results: ::Integer
|
559
|
+
attr_accessor next_token: ::String
|
560
|
+
SENSITIVE: []
|
561
|
+
end
|
562
|
+
|
563
|
+
class ListDiscoveredResourcesResponse
|
564
|
+
attr_accessor items: ::Array[Types::DiscoveredResource]
|
565
|
+
attr_accessor next_token: ::String
|
566
|
+
SENSITIVE: []
|
567
|
+
end
|
568
|
+
|
569
|
+
class ListMemberAccountsRequest
|
570
|
+
attr_accessor next_token: ::String
|
571
|
+
attr_accessor max_results: ::Integer
|
572
|
+
SENSITIVE: []
|
573
|
+
end
|
574
|
+
|
575
|
+
class ListMemberAccountsResponse
|
576
|
+
attr_accessor member_accounts: ::Array[::String]
|
577
|
+
attr_accessor next_token: ::String
|
578
|
+
SENSITIVE: []
|
579
|
+
end
|
580
|
+
|
581
|
+
class ListPoliciesRequest
|
582
|
+
attr_accessor next_token: ::String
|
583
|
+
attr_accessor max_results: ::Integer
|
584
|
+
SENSITIVE: []
|
585
|
+
end
|
586
|
+
|
587
|
+
class ListPoliciesResponse
|
588
|
+
attr_accessor policy_list: ::Array[Types::PolicySummary]
|
589
|
+
attr_accessor next_token: ::String
|
590
|
+
SENSITIVE: []
|
591
|
+
end
|
592
|
+
|
593
|
+
class ListProtocolsListsRequest
|
594
|
+
attr_accessor default_lists: bool
|
595
|
+
attr_accessor next_token: ::String
|
596
|
+
attr_accessor max_results: ::Integer
|
597
|
+
SENSITIVE: []
|
598
|
+
end
|
599
|
+
|
600
|
+
class ListProtocolsListsResponse
|
601
|
+
attr_accessor protocols_lists: ::Array[Types::ProtocolsListDataSummary]
|
602
|
+
attr_accessor next_token: ::String
|
603
|
+
SENSITIVE: []
|
604
|
+
end
|
605
|
+
|
606
|
+
class ListResourceSetResourcesRequest
|
607
|
+
attr_accessor identifier: ::String
|
608
|
+
attr_accessor max_results: ::Integer
|
609
|
+
attr_accessor next_token: ::String
|
610
|
+
SENSITIVE: []
|
611
|
+
end
|
612
|
+
|
613
|
+
class ListResourceSetResourcesResponse
|
614
|
+
attr_accessor items: ::Array[Types::Resource]
|
615
|
+
attr_accessor next_token: ::String
|
616
|
+
SENSITIVE: []
|
617
|
+
end
|
618
|
+
|
619
|
+
class ListResourceSetsRequest
|
620
|
+
attr_accessor next_token: ::String
|
621
|
+
attr_accessor max_results: ::Integer
|
622
|
+
SENSITIVE: []
|
623
|
+
end
|
624
|
+
|
625
|
+
class ListResourceSetsResponse
|
626
|
+
attr_accessor resource_sets: ::Array[Types::ResourceSetSummary]
|
627
|
+
attr_accessor next_token: ::String
|
628
|
+
SENSITIVE: []
|
629
|
+
end
|
630
|
+
|
631
|
+
class ListTagsForResourceRequest
|
632
|
+
attr_accessor resource_arn: ::String
|
633
|
+
SENSITIVE: []
|
634
|
+
end
|
635
|
+
|
636
|
+
class ListTagsForResourceResponse
|
637
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
638
|
+
SENSITIVE: []
|
639
|
+
end
|
640
|
+
|
641
|
+
class ListThirdPartyFirewallFirewallPoliciesRequest
|
642
|
+
attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
|
643
|
+
attr_accessor next_token: ::String
|
644
|
+
attr_accessor max_results: ::Integer
|
645
|
+
SENSITIVE: []
|
646
|
+
end
|
647
|
+
|
648
|
+
class ListThirdPartyFirewallFirewallPoliciesResponse
|
649
|
+
attr_accessor third_party_firewall_firewall_policies: ::Array[Types::ThirdPartyFirewallFirewallPolicy]
|
650
|
+
attr_accessor next_token: ::String
|
651
|
+
SENSITIVE: []
|
652
|
+
end
|
653
|
+
|
654
|
+
class NetworkAclCommonPolicy
|
655
|
+
attr_accessor network_acl_entry_set: Types::NetworkAclEntrySet
|
656
|
+
SENSITIVE: []
|
657
|
+
end
|
658
|
+
|
659
|
+
class NetworkAclEntry
|
660
|
+
attr_accessor icmp_type_code: Types::NetworkAclIcmpTypeCode
|
661
|
+
attr_accessor protocol: ::String
|
662
|
+
attr_accessor port_range: Types::NetworkAclPortRange
|
663
|
+
attr_accessor cidr_block: ::String
|
664
|
+
attr_accessor ipv_6_cidr_block: ::String
|
665
|
+
attr_accessor rule_action: ("allow" | "deny")
|
666
|
+
attr_accessor egress: bool
|
667
|
+
SENSITIVE: []
|
668
|
+
end
|
669
|
+
|
670
|
+
class NetworkAclEntrySet
|
671
|
+
attr_accessor first_entries: ::Array[Types::NetworkAclEntry]
|
672
|
+
attr_accessor force_remediate_for_first_entries: bool
|
673
|
+
attr_accessor last_entries: ::Array[Types::NetworkAclEntry]
|
674
|
+
attr_accessor force_remediate_for_last_entries: bool
|
675
|
+
SENSITIVE: []
|
676
|
+
end
|
677
|
+
|
678
|
+
class NetworkAclIcmpTypeCode
|
679
|
+
attr_accessor code: ::Integer
|
680
|
+
attr_accessor type: ::Integer
|
681
|
+
SENSITIVE: []
|
682
|
+
end
|
683
|
+
|
684
|
+
class NetworkAclPortRange
|
685
|
+
attr_accessor from: ::Integer
|
686
|
+
attr_accessor to: ::Integer
|
687
|
+
SENSITIVE: []
|
688
|
+
end
|
689
|
+
|
690
|
+
class NetworkFirewallBlackHoleRouteDetectedViolation
|
691
|
+
attr_accessor violation_target: ::String
|
692
|
+
attr_accessor route_table_id: ::String
|
693
|
+
attr_accessor vpc_id: ::String
|
694
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
695
|
+
SENSITIVE: []
|
696
|
+
end
|
697
|
+
|
698
|
+
class NetworkFirewallInternetTrafficNotInspectedViolation
|
699
|
+
attr_accessor subnet_id: ::String
|
700
|
+
attr_accessor subnet_availability_zone: ::String
|
701
|
+
attr_accessor route_table_id: ::String
|
702
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
703
|
+
attr_accessor is_route_table_used_in_different_az: bool
|
704
|
+
attr_accessor current_firewall_subnet_route_table: ::String
|
705
|
+
attr_accessor expected_firewall_endpoint: ::String
|
706
|
+
attr_accessor firewall_subnet_id: ::String
|
707
|
+
attr_accessor expected_firewall_subnet_routes: ::Array[Types::ExpectedRoute]
|
708
|
+
attr_accessor actual_firewall_subnet_routes: ::Array[Types::Route]
|
709
|
+
attr_accessor internet_gateway_id: ::String
|
710
|
+
attr_accessor current_internet_gateway_route_table: ::String
|
711
|
+
attr_accessor expected_internet_gateway_routes: ::Array[Types::ExpectedRoute]
|
712
|
+
attr_accessor actual_internet_gateway_routes: ::Array[Types::Route]
|
713
|
+
attr_accessor vpc_id: ::String
|
714
|
+
SENSITIVE: []
|
715
|
+
end
|
716
|
+
|
717
|
+
class NetworkFirewallInvalidRouteConfigurationViolation
|
718
|
+
attr_accessor affected_subnets: ::Array[::String]
|
719
|
+
attr_accessor route_table_id: ::String
|
720
|
+
attr_accessor is_route_table_used_in_different_az: bool
|
721
|
+
attr_accessor violating_route: Types::Route
|
722
|
+
attr_accessor current_firewall_subnet_route_table: ::String
|
723
|
+
attr_accessor expected_firewall_endpoint: ::String
|
724
|
+
attr_accessor actual_firewall_endpoint: ::String
|
725
|
+
attr_accessor expected_firewall_subnet_id: ::String
|
726
|
+
attr_accessor actual_firewall_subnet_id: ::String
|
727
|
+
attr_accessor expected_firewall_subnet_routes: ::Array[Types::ExpectedRoute]
|
728
|
+
attr_accessor actual_firewall_subnet_routes: ::Array[Types::Route]
|
729
|
+
attr_accessor internet_gateway_id: ::String
|
730
|
+
attr_accessor current_internet_gateway_route_table: ::String
|
731
|
+
attr_accessor expected_internet_gateway_routes: ::Array[Types::ExpectedRoute]
|
732
|
+
attr_accessor actual_internet_gateway_routes: ::Array[Types::Route]
|
733
|
+
attr_accessor vpc_id: ::String
|
734
|
+
SENSITIVE: []
|
735
|
+
end
|
736
|
+
|
737
|
+
class NetworkFirewallMissingExpectedRTViolation
|
738
|
+
attr_accessor violation_target: ::String
|
739
|
+
attr_accessor vpc: ::String
|
740
|
+
attr_accessor availability_zone: ::String
|
741
|
+
attr_accessor current_route_table: ::String
|
742
|
+
attr_accessor expected_route_table: ::String
|
743
|
+
SENSITIVE: []
|
744
|
+
end
|
745
|
+
|
746
|
+
class NetworkFirewallMissingExpectedRoutesViolation
|
747
|
+
attr_accessor violation_target: ::String
|
748
|
+
attr_accessor expected_routes: ::Array[Types::ExpectedRoute]
|
749
|
+
attr_accessor vpc_id: ::String
|
750
|
+
SENSITIVE: []
|
751
|
+
end
|
752
|
+
|
753
|
+
class NetworkFirewallMissingFirewallViolation
|
754
|
+
attr_accessor violation_target: ::String
|
755
|
+
attr_accessor vpc: ::String
|
756
|
+
attr_accessor availability_zone: ::String
|
757
|
+
attr_accessor target_violation_reason: ::String
|
758
|
+
SENSITIVE: []
|
759
|
+
end
|
760
|
+
|
761
|
+
class NetworkFirewallMissingSubnetViolation
|
762
|
+
attr_accessor violation_target: ::String
|
763
|
+
attr_accessor vpc: ::String
|
764
|
+
attr_accessor availability_zone: ::String
|
765
|
+
attr_accessor target_violation_reason: ::String
|
766
|
+
SENSITIVE: []
|
767
|
+
end
|
768
|
+
|
769
|
+
class NetworkFirewallPolicy
|
770
|
+
attr_accessor firewall_deployment_model: ("CENTRALIZED" | "DISTRIBUTED")
|
771
|
+
SENSITIVE: []
|
772
|
+
end
|
773
|
+
|
774
|
+
class NetworkFirewallPolicyDescription
|
775
|
+
attr_accessor stateless_rule_groups: ::Array[Types::StatelessRuleGroup]
|
776
|
+
attr_accessor stateless_default_actions: ::Array[::String]
|
777
|
+
attr_accessor stateless_fragment_default_actions: ::Array[::String]
|
778
|
+
attr_accessor stateless_custom_actions: ::Array[::String]
|
779
|
+
attr_accessor stateful_rule_groups: ::Array[Types::StatefulRuleGroup]
|
780
|
+
attr_accessor stateful_default_actions: ::Array[::String]
|
781
|
+
attr_accessor stateful_engine_options: Types::StatefulEngineOptions
|
782
|
+
SENSITIVE: []
|
783
|
+
end
|
784
|
+
|
785
|
+
class NetworkFirewallPolicyModifiedViolation
|
786
|
+
attr_accessor violation_target: ::String
|
787
|
+
attr_accessor current_policy_description: Types::NetworkFirewallPolicyDescription
|
788
|
+
attr_accessor expected_policy_description: Types::NetworkFirewallPolicyDescription
|
789
|
+
SENSITIVE: []
|
790
|
+
end
|
791
|
+
|
792
|
+
class NetworkFirewallStatefulRuleGroupOverride
|
793
|
+
attr_accessor action: ("DROP_TO_ALERT")
|
794
|
+
SENSITIVE: []
|
795
|
+
end
|
796
|
+
|
797
|
+
class NetworkFirewallUnexpectedFirewallRoutesViolation
|
798
|
+
attr_accessor firewall_subnet_id: ::String
|
799
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
800
|
+
attr_accessor route_table_id: ::String
|
801
|
+
attr_accessor firewall_endpoint: ::String
|
802
|
+
attr_accessor vpc_id: ::String
|
803
|
+
SENSITIVE: []
|
804
|
+
end
|
805
|
+
|
806
|
+
class NetworkFirewallUnexpectedGatewayRoutesViolation
|
807
|
+
attr_accessor gateway_id: ::String
|
808
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
809
|
+
attr_accessor route_table_id: ::String
|
810
|
+
attr_accessor vpc_id: ::String
|
811
|
+
SENSITIVE: []
|
812
|
+
end
|
813
|
+
|
814
|
+
class OrganizationalUnitScope
|
815
|
+
attr_accessor organizational_units: ::Array[::String]
|
816
|
+
attr_accessor all_organizational_units_enabled: bool
|
817
|
+
attr_accessor exclude_specified_organizational_units: bool
|
818
|
+
SENSITIVE: []
|
819
|
+
end
|
820
|
+
|
821
|
+
class PartialMatch
|
822
|
+
attr_accessor reference: ::String
|
823
|
+
attr_accessor target_violation_reasons: ::Array[::String]
|
824
|
+
SENSITIVE: []
|
825
|
+
end
|
826
|
+
|
827
|
+
class Policy
|
828
|
+
attr_accessor policy_id: ::String
|
829
|
+
attr_accessor policy_name: ::String
|
830
|
+
attr_accessor policy_update_token: ::String
|
831
|
+
attr_accessor security_service_policy_data: Types::SecurityServicePolicyData
|
832
|
+
attr_accessor resource_type: ::String
|
833
|
+
attr_accessor resource_type_list: ::Array[::String]
|
834
|
+
attr_accessor resource_tags: ::Array[Types::ResourceTag]
|
835
|
+
attr_accessor exclude_resource_tags: bool
|
836
|
+
attr_accessor remediation_enabled: bool
|
837
|
+
attr_accessor delete_unused_fm_managed_resources: bool
|
838
|
+
attr_accessor include_map: ::Hash[("ACCOUNT" | "ORG_UNIT"), ::Array[::String]]
|
839
|
+
attr_accessor exclude_map: ::Hash[("ACCOUNT" | "ORG_UNIT"), ::Array[::String]]
|
840
|
+
attr_accessor resource_set_ids: ::Array[::String]
|
841
|
+
attr_accessor policy_description: ::String
|
842
|
+
attr_accessor policy_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
|
843
|
+
SENSITIVE: []
|
844
|
+
end
|
845
|
+
|
846
|
+
class PolicyComplianceDetail
|
847
|
+
attr_accessor policy_owner: ::String
|
848
|
+
attr_accessor policy_id: ::String
|
849
|
+
attr_accessor member_account: ::String
|
850
|
+
attr_accessor violators: ::Array[Types::ComplianceViolator]
|
851
|
+
attr_accessor evaluation_limit_exceeded: bool
|
852
|
+
attr_accessor expired_at: ::Time
|
853
|
+
attr_accessor issue_info_map: ::Hash[("AWSCONFIG" | "AWSWAF" | "AWSSHIELD_ADVANCED" | "AWSVPC"), ::String]
|
854
|
+
SENSITIVE: []
|
855
|
+
end
|
856
|
+
|
857
|
+
class PolicyComplianceStatus
|
858
|
+
attr_accessor policy_owner: ::String
|
859
|
+
attr_accessor policy_id: ::String
|
860
|
+
attr_accessor policy_name: ::String
|
861
|
+
attr_accessor member_account: ::String
|
862
|
+
attr_accessor evaluation_results: ::Array[Types::EvaluationResult]
|
863
|
+
attr_accessor last_updated: ::Time
|
864
|
+
attr_accessor issue_info_map: ::Hash[("AWSCONFIG" | "AWSWAF" | "AWSSHIELD_ADVANCED" | "AWSVPC"), ::String]
|
865
|
+
SENSITIVE: []
|
866
|
+
end
|
867
|
+
|
868
|
+
class PolicyOption
|
869
|
+
attr_accessor network_firewall_policy: Types::NetworkFirewallPolicy
|
870
|
+
attr_accessor third_party_firewall_policy: Types::ThirdPartyFirewallPolicy
|
871
|
+
attr_accessor network_acl_common_policy: Types::NetworkAclCommonPolicy
|
872
|
+
SENSITIVE: []
|
873
|
+
end
|
874
|
+
|
875
|
+
class PolicySummary
|
876
|
+
attr_accessor policy_arn: ::String
|
877
|
+
attr_accessor policy_id: ::String
|
878
|
+
attr_accessor policy_name: ::String
|
879
|
+
attr_accessor resource_type: ::String
|
880
|
+
attr_accessor security_service_type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
|
881
|
+
attr_accessor remediation_enabled: bool
|
882
|
+
attr_accessor delete_unused_fm_managed_resources: bool
|
883
|
+
attr_accessor policy_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
|
884
|
+
SENSITIVE: []
|
885
|
+
end
|
886
|
+
|
887
|
+
class PolicyTypeScope
|
888
|
+
attr_accessor policy_types: ::Array[("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")]
|
889
|
+
attr_accessor all_policy_types_enabled: bool
|
890
|
+
SENSITIVE: []
|
891
|
+
end
|
892
|
+
|
893
|
+
class PossibleRemediationAction
|
894
|
+
attr_accessor description: ::String
|
895
|
+
attr_accessor ordered_remediation_actions: ::Array[Types::RemediationActionWithOrder]
|
896
|
+
attr_accessor is_default_action: bool
|
897
|
+
SENSITIVE: []
|
898
|
+
end
|
899
|
+
|
900
|
+
class PossibleRemediationActions
|
901
|
+
attr_accessor description: ::String
|
902
|
+
attr_accessor actions: ::Array[Types::PossibleRemediationAction]
|
903
|
+
SENSITIVE: []
|
904
|
+
end
|
905
|
+
|
906
|
+
class ProtocolsListData
|
907
|
+
attr_accessor list_id: ::String
|
908
|
+
attr_accessor list_name: ::String
|
909
|
+
attr_accessor list_update_token: ::String
|
910
|
+
attr_accessor create_time: ::Time
|
911
|
+
attr_accessor last_update_time: ::Time
|
912
|
+
attr_accessor protocols_list: ::Array[::String]
|
913
|
+
attr_accessor previous_protocols_list: ::Hash[::String, ::Array[::String]]
|
914
|
+
SENSITIVE: []
|
915
|
+
end
|
916
|
+
|
917
|
+
class ProtocolsListDataSummary
|
918
|
+
attr_accessor list_arn: ::String
|
919
|
+
attr_accessor list_id: ::String
|
920
|
+
attr_accessor list_name: ::String
|
921
|
+
attr_accessor protocols_list: ::Array[::String]
|
922
|
+
SENSITIVE: []
|
923
|
+
end
|
924
|
+
|
925
|
+
class PutAdminAccountRequest
|
926
|
+
attr_accessor admin_account: ::String
|
927
|
+
attr_accessor admin_scope: Types::AdminScope
|
928
|
+
SENSITIVE: []
|
929
|
+
end
|
930
|
+
|
931
|
+
class PutAppsListRequest
|
932
|
+
attr_accessor apps_list: Types::AppsListData
|
933
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
934
|
+
SENSITIVE: []
|
935
|
+
end
|
936
|
+
|
937
|
+
class PutAppsListResponse
|
938
|
+
attr_accessor apps_list: Types::AppsListData
|
939
|
+
attr_accessor apps_list_arn: ::String
|
940
|
+
SENSITIVE: []
|
941
|
+
end
|
942
|
+
|
943
|
+
class PutNotificationChannelRequest
|
944
|
+
attr_accessor sns_topic_arn: ::String
|
945
|
+
attr_accessor sns_role_name: ::String
|
946
|
+
SENSITIVE: []
|
947
|
+
end
|
948
|
+
|
949
|
+
class PutPolicyRequest
|
950
|
+
attr_accessor policy: Types::Policy
|
951
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
952
|
+
SENSITIVE: []
|
953
|
+
end
|
954
|
+
|
955
|
+
class PutPolicyResponse
|
956
|
+
attr_accessor policy: Types::Policy
|
957
|
+
attr_accessor policy_arn: ::String
|
958
|
+
SENSITIVE: []
|
959
|
+
end
|
960
|
+
|
961
|
+
class PutProtocolsListRequest
|
962
|
+
attr_accessor protocols_list: Types::ProtocolsListData
|
963
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
964
|
+
SENSITIVE: []
|
965
|
+
end
|
966
|
+
|
967
|
+
class PutProtocolsListResponse
|
968
|
+
attr_accessor protocols_list: Types::ProtocolsListData
|
969
|
+
attr_accessor protocols_list_arn: ::String
|
970
|
+
SENSITIVE: []
|
971
|
+
end
|
972
|
+
|
973
|
+
class PutResourceSetRequest
|
974
|
+
attr_accessor resource_set: Types::ResourceSet
|
975
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
976
|
+
SENSITIVE: []
|
977
|
+
end
|
978
|
+
|
979
|
+
class PutResourceSetResponse
|
980
|
+
attr_accessor resource_set: Types::ResourceSet
|
981
|
+
attr_accessor resource_set_arn: ::String
|
982
|
+
SENSITIVE: []
|
983
|
+
end
|
984
|
+
|
985
|
+
class RegionScope
|
986
|
+
attr_accessor regions: ::Array[::String]
|
987
|
+
attr_accessor all_regions_enabled: bool
|
988
|
+
SENSITIVE: []
|
989
|
+
end
|
990
|
+
|
991
|
+
class RemediationAction
|
992
|
+
attr_accessor description: ::String
|
993
|
+
attr_accessor ec2_create_route_action: Types::EC2CreateRouteAction
|
994
|
+
attr_accessor ec2_replace_route_action: Types::EC2ReplaceRouteAction
|
995
|
+
attr_accessor ec2_delete_route_action: Types::EC2DeleteRouteAction
|
996
|
+
attr_accessor ec2_copy_route_table_action: Types::EC2CopyRouteTableAction
|
997
|
+
attr_accessor ec2_replace_route_table_association_action: Types::EC2ReplaceRouteTableAssociationAction
|
998
|
+
attr_accessor ec2_associate_route_table_action: Types::EC2AssociateRouteTableAction
|
999
|
+
attr_accessor ec2_create_route_table_action: Types::EC2CreateRouteTableAction
|
1000
|
+
attr_accessor fms_policy_update_firewall_creation_config_action: Types::FMSPolicyUpdateFirewallCreationConfigAction
|
1001
|
+
attr_accessor create_network_acl_action: Types::CreateNetworkAclAction
|
1002
|
+
attr_accessor replace_network_acl_association_action: Types::ReplaceNetworkAclAssociationAction
|
1003
|
+
attr_accessor create_network_acl_entries_action: Types::CreateNetworkAclEntriesAction
|
1004
|
+
attr_accessor delete_network_acl_entries_action: Types::DeleteNetworkAclEntriesAction
|
1005
|
+
SENSITIVE: []
|
1006
|
+
end
|
1007
|
+
|
1008
|
+
class RemediationActionWithOrder
|
1009
|
+
attr_accessor remediation_action: Types::RemediationAction
|
1010
|
+
attr_accessor order: ::Integer
|
1011
|
+
SENSITIVE: []
|
1012
|
+
end
|
1013
|
+
|
1014
|
+
class ReplaceNetworkAclAssociationAction
|
1015
|
+
attr_accessor description: ::String
|
1016
|
+
attr_accessor association_id: Types::ActionTarget
|
1017
|
+
attr_accessor network_acl_id: Types::ActionTarget
|
1018
|
+
attr_accessor fms_can_remediate: bool
|
1019
|
+
SENSITIVE: []
|
1020
|
+
end
|
1021
|
+
|
1022
|
+
class Resource
|
1023
|
+
attr_accessor uri: ::String
|
1024
|
+
attr_accessor account_id: ::String
|
1025
|
+
SENSITIVE: []
|
1026
|
+
end
|
1027
|
+
|
1028
|
+
class ResourceNotFoundException
|
1029
|
+
attr_accessor message: ::String
|
1030
|
+
SENSITIVE: []
|
1031
|
+
end
|
1032
|
+
|
1033
|
+
class ResourceSet
|
1034
|
+
attr_accessor id: ::String
|
1035
|
+
attr_accessor name: ::String
|
1036
|
+
attr_accessor description: ::String
|
1037
|
+
attr_accessor update_token: ::String
|
1038
|
+
attr_accessor resource_type_list: ::Array[::String]
|
1039
|
+
attr_accessor last_update_time: ::Time
|
1040
|
+
attr_accessor resource_set_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
|
1041
|
+
SENSITIVE: []
|
1042
|
+
end
|
1043
|
+
|
1044
|
+
class ResourceSetSummary
|
1045
|
+
attr_accessor id: ::String
|
1046
|
+
attr_accessor name: ::String
|
1047
|
+
attr_accessor description: ::String
|
1048
|
+
attr_accessor last_update_time: ::Time
|
1049
|
+
attr_accessor resource_set_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
|
1050
|
+
SENSITIVE: []
|
1051
|
+
end
|
1052
|
+
|
1053
|
+
class ResourceTag
|
1054
|
+
attr_accessor key: ::String
|
1055
|
+
attr_accessor value: ::String
|
1056
|
+
SENSITIVE: []
|
1057
|
+
end
|
1058
|
+
|
1059
|
+
class ResourceViolation
|
1060
|
+
attr_accessor aws_vpc_security_group_violation: Types::AwsVPCSecurityGroupViolation
|
1061
|
+
attr_accessor aws_ec2_network_interface_violation: Types::AwsEc2NetworkInterfaceViolation
|
1062
|
+
attr_accessor aws_ec2_instance_violation: Types::AwsEc2InstanceViolation
|
1063
|
+
attr_accessor network_firewall_missing_firewall_violation: Types::NetworkFirewallMissingFirewallViolation
|
1064
|
+
attr_accessor network_firewall_missing_subnet_violation: Types::NetworkFirewallMissingSubnetViolation
|
1065
|
+
attr_accessor network_firewall_missing_expected_rt_violation: Types::NetworkFirewallMissingExpectedRTViolation
|
1066
|
+
attr_accessor network_firewall_policy_modified_violation: Types::NetworkFirewallPolicyModifiedViolation
|
1067
|
+
attr_accessor network_firewall_internet_traffic_not_inspected_violation: Types::NetworkFirewallInternetTrafficNotInspectedViolation
|
1068
|
+
attr_accessor network_firewall_invalid_route_configuration_violation: Types::NetworkFirewallInvalidRouteConfigurationViolation
|
1069
|
+
attr_accessor network_firewall_black_hole_route_detected_violation: Types::NetworkFirewallBlackHoleRouteDetectedViolation
|
1070
|
+
attr_accessor network_firewall_unexpected_firewall_routes_violation: Types::NetworkFirewallUnexpectedFirewallRoutesViolation
|
1071
|
+
attr_accessor network_firewall_unexpected_gateway_routes_violation: Types::NetworkFirewallUnexpectedGatewayRoutesViolation
|
1072
|
+
attr_accessor network_firewall_missing_expected_routes_violation: Types::NetworkFirewallMissingExpectedRoutesViolation
|
1073
|
+
attr_accessor dns_rule_group_priority_conflict_violation: Types::DnsRuleGroupPriorityConflictViolation
|
1074
|
+
attr_accessor dns_duplicate_rule_group_violation: Types::DnsDuplicateRuleGroupViolation
|
1075
|
+
attr_accessor dns_rule_group_limit_exceeded_violation: Types::DnsRuleGroupLimitExceededViolation
|
1076
|
+
attr_accessor firewall_subnet_is_out_of_scope_violation: Types::FirewallSubnetIsOutOfScopeViolation
|
1077
|
+
attr_accessor route_has_out_of_scope_endpoint_violation: Types::RouteHasOutOfScopeEndpointViolation
|
1078
|
+
attr_accessor third_party_firewall_missing_firewall_violation: Types::ThirdPartyFirewallMissingFirewallViolation
|
1079
|
+
attr_accessor third_party_firewall_missing_subnet_violation: Types::ThirdPartyFirewallMissingSubnetViolation
|
1080
|
+
attr_accessor third_party_firewall_missing_expected_route_table_violation: Types::ThirdPartyFirewallMissingExpectedRouteTableViolation
|
1081
|
+
attr_accessor firewall_subnet_missing_vpc_endpoint_violation: Types::FirewallSubnetMissingVPCEndpointViolation
|
1082
|
+
attr_accessor invalid_network_acl_entries_violation: Types::InvalidNetworkAclEntriesViolation
|
1083
|
+
attr_accessor possible_remediation_actions: Types::PossibleRemediationActions
|
1084
|
+
SENSITIVE: []
|
1085
|
+
end
|
1086
|
+
|
1087
|
+
class Route
|
1088
|
+
attr_accessor destination_type: ("IPV4" | "IPV6" | "PREFIX_LIST")
|
1089
|
+
attr_accessor target_type: ("GATEWAY" | "CARRIER_GATEWAY" | "INSTANCE" | "LOCAL_GATEWAY" | "NAT_GATEWAY" | "NETWORK_INTERFACE" | "VPC_ENDPOINT" | "VPC_PEERING_CONNECTION" | "EGRESS_ONLY_INTERNET_GATEWAY" | "TRANSIT_GATEWAY")
|
1090
|
+
attr_accessor destination: ::String
|
1091
|
+
attr_accessor target: ::String
|
1092
|
+
SENSITIVE: []
|
1093
|
+
end
|
1094
|
+
|
1095
|
+
class RouteHasOutOfScopeEndpointViolation
|
1096
|
+
attr_accessor subnet_id: ::String
|
1097
|
+
attr_accessor vpc_id: ::String
|
1098
|
+
attr_accessor route_table_id: ::String
|
1099
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
1100
|
+
attr_accessor subnet_availability_zone: ::String
|
1101
|
+
attr_accessor subnet_availability_zone_id: ::String
|
1102
|
+
attr_accessor current_firewall_subnet_route_table: ::String
|
1103
|
+
attr_accessor firewall_subnet_id: ::String
|
1104
|
+
attr_accessor firewall_subnet_routes: ::Array[Types::Route]
|
1105
|
+
attr_accessor internet_gateway_id: ::String
|
1106
|
+
attr_accessor current_internet_gateway_route_table: ::String
|
1107
|
+
attr_accessor internet_gateway_routes: ::Array[Types::Route]
|
1108
|
+
SENSITIVE: []
|
1109
|
+
end
|
1110
|
+
|
1111
|
+
class SecurityGroupRemediationAction
|
1112
|
+
attr_accessor remediation_action_type: ("REMOVE" | "MODIFY")
|
1113
|
+
attr_accessor description: ::String
|
1114
|
+
attr_accessor remediation_result: Types::SecurityGroupRuleDescription
|
1115
|
+
attr_accessor is_default_action: bool
|
1116
|
+
SENSITIVE: []
|
1117
|
+
end
|
1118
|
+
|
1119
|
+
class SecurityGroupRuleDescription
|
1120
|
+
attr_accessor ipv4_range: ::String
|
1121
|
+
attr_accessor ipv6_range: ::String
|
1122
|
+
attr_accessor prefix_list_id: ::String
|
1123
|
+
attr_accessor protocol: ::String
|
1124
|
+
attr_accessor from_port: ::Integer
|
1125
|
+
attr_accessor to_port: ::Integer
|
1126
|
+
SENSITIVE: []
|
1127
|
+
end
|
1128
|
+
|
1129
|
+
class SecurityServicePolicyData
|
1130
|
+
attr_accessor type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
|
1131
|
+
attr_accessor managed_service_data: ::String
|
1132
|
+
attr_accessor policy_option: Types::PolicyOption
|
1133
|
+
SENSITIVE: []
|
1134
|
+
end
|
1135
|
+
|
1136
|
+
class StatefulEngineOptions
|
1137
|
+
attr_accessor rule_order: ("STRICT_ORDER" | "DEFAULT_ACTION_ORDER")
|
1138
|
+
SENSITIVE: []
|
1139
|
+
end
|
1140
|
+
|
1141
|
+
class StatefulRuleGroup
|
1142
|
+
attr_accessor rule_group_name: ::String
|
1143
|
+
attr_accessor resource_id: ::String
|
1144
|
+
attr_accessor priority: ::Integer
|
1145
|
+
attr_accessor override: Types::NetworkFirewallStatefulRuleGroupOverride
|
1146
|
+
SENSITIVE: []
|
1147
|
+
end
|
1148
|
+
|
1149
|
+
class StatelessRuleGroup
|
1150
|
+
attr_accessor rule_group_name: ::String
|
1151
|
+
attr_accessor resource_id: ::String
|
1152
|
+
attr_accessor priority: ::Integer
|
1153
|
+
SENSITIVE: []
|
1154
|
+
end
|
1155
|
+
|
1156
|
+
class Tag
|
1157
|
+
attr_accessor key: ::String
|
1158
|
+
attr_accessor value: ::String
|
1159
|
+
SENSITIVE: []
|
1160
|
+
end
|
1161
|
+
|
1162
|
+
class TagResourceRequest
|
1163
|
+
attr_accessor resource_arn: ::String
|
1164
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
1165
|
+
SENSITIVE: []
|
1166
|
+
end
|
1167
|
+
|
1168
|
+
class TagResourceResponse < Aws::EmptyStructure
|
1169
|
+
end
|
1170
|
+
|
1171
|
+
class ThirdPartyFirewallFirewallPolicy
|
1172
|
+
attr_accessor firewall_policy_id: ::String
|
1173
|
+
attr_accessor firewall_policy_name: ::String
|
1174
|
+
SENSITIVE: []
|
1175
|
+
end
|
1176
|
+
|
1177
|
+
class ThirdPartyFirewallMissingExpectedRouteTableViolation
|
1178
|
+
attr_accessor violation_target: ::String
|
1179
|
+
attr_accessor vpc: ::String
|
1180
|
+
attr_accessor availability_zone: ::String
|
1181
|
+
attr_accessor current_route_table: ::String
|
1182
|
+
attr_accessor expected_route_table: ::String
|
1183
|
+
SENSITIVE: []
|
1184
|
+
end
|
1185
|
+
|
1186
|
+
class ThirdPartyFirewallMissingFirewallViolation
|
1187
|
+
attr_accessor violation_target: ::String
|
1188
|
+
attr_accessor vpc: ::String
|
1189
|
+
attr_accessor availability_zone: ::String
|
1190
|
+
attr_accessor target_violation_reason: ::String
|
1191
|
+
SENSITIVE: []
|
1192
|
+
end
|
1193
|
+
|
1194
|
+
class ThirdPartyFirewallMissingSubnetViolation
|
1195
|
+
attr_accessor violation_target: ::String
|
1196
|
+
attr_accessor vpc: ::String
|
1197
|
+
attr_accessor availability_zone: ::String
|
1198
|
+
attr_accessor target_violation_reason: ::String
|
1199
|
+
SENSITIVE: []
|
1200
|
+
end
|
1201
|
+
|
1202
|
+
class ThirdPartyFirewallPolicy
|
1203
|
+
attr_accessor firewall_deployment_model: ("CENTRALIZED" | "DISTRIBUTED")
|
1204
|
+
SENSITIVE: []
|
1205
|
+
end
|
1206
|
+
|
1207
|
+
class UntagResourceRequest
|
1208
|
+
attr_accessor resource_arn: ::String
|
1209
|
+
attr_accessor tag_keys: ::Array[::String]
|
1210
|
+
SENSITIVE: []
|
1211
|
+
end
|
1212
|
+
|
1213
|
+
class UntagResourceResponse < Aws::EmptyStructure
|
1214
|
+
end
|
1215
|
+
|
1216
|
+
class ViolationDetail
|
1217
|
+
attr_accessor policy_id: ::String
|
1218
|
+
attr_accessor member_account: ::String
|
1219
|
+
attr_accessor resource_id: ::String
|
1220
|
+
attr_accessor resource_type: ::String
|
1221
|
+
attr_accessor resource_violations: ::Array[Types::ResourceViolation]
|
1222
|
+
attr_accessor resource_tags: ::Array[Types::Tag]
|
1223
|
+
attr_accessor resource_description: ::String
|
1224
|
+
SENSITIVE: []
|
1225
|
+
end
|
1226
|
+
end
|
1227
|
+
end
|