aws-sdk-fms 1.66.0 → 1.68.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-fms/client.rb +307 -119
- data/lib/aws-sdk-fms/client_api.rb +112 -1
- data/lib/aws-sdk-fms/plugins/endpoints.rb +1 -0
- data/lib/aws-sdk-fms/types.rb +506 -32
- data/lib/aws-sdk-fms.rb +1 -1
- data/sig/client.rbs +675 -0
- data/sig/errors.rbs +34 -0
- data/sig/resource.rbs +80 -0
- data/sig/types.rbs +1227 -0
- data/sig/waiters.rbs +13 -0
- metadata +13 -8
data/sig/types.rbs
ADDED
@@ -0,0 +1,1227 @@
|
|
1
|
+
# WARNING ABOUT GENERATED CODE
|
2
|
+
#
|
3
|
+
# This file is generated. See the contributing guide for more information:
|
4
|
+
# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
|
5
|
+
#
|
6
|
+
# WARNING ABOUT GENERATED CODE
|
7
|
+
|
8
|
+
module Aws::FMS
|
9
|
+
module Types
|
10
|
+
|
11
|
+
class AccountScope
|
12
|
+
attr_accessor accounts: ::Array[::String]
|
13
|
+
attr_accessor all_accounts_enabled: bool
|
14
|
+
attr_accessor exclude_specified_accounts: bool
|
15
|
+
SENSITIVE: []
|
16
|
+
end
|
17
|
+
|
18
|
+
class ActionTarget
|
19
|
+
attr_accessor resource_id: ::String
|
20
|
+
attr_accessor description: ::String
|
21
|
+
SENSITIVE: []
|
22
|
+
end
|
23
|
+
|
24
|
+
class AdminAccountSummary
|
25
|
+
attr_accessor admin_account: ::String
|
26
|
+
attr_accessor default_admin: bool
|
27
|
+
attr_accessor status: ("ONBOARDING" | "ONBOARDING_COMPLETE" | "OFFBOARDING" | "OFFBOARDING_COMPLETE")
|
28
|
+
SENSITIVE: []
|
29
|
+
end
|
30
|
+
|
31
|
+
class AdminScope
|
32
|
+
attr_accessor account_scope: Types::AccountScope
|
33
|
+
attr_accessor organizational_unit_scope: Types::OrganizationalUnitScope
|
34
|
+
attr_accessor region_scope: Types::RegionScope
|
35
|
+
attr_accessor policy_type_scope: Types::PolicyTypeScope
|
36
|
+
SENSITIVE: []
|
37
|
+
end
|
38
|
+
|
39
|
+
class App
|
40
|
+
attr_accessor app_name: ::String
|
41
|
+
attr_accessor protocol: ::String
|
42
|
+
attr_accessor port: ::Integer
|
43
|
+
SENSITIVE: []
|
44
|
+
end
|
45
|
+
|
46
|
+
class AppsListData
|
47
|
+
attr_accessor list_id: ::String
|
48
|
+
attr_accessor list_name: ::String
|
49
|
+
attr_accessor list_update_token: ::String
|
50
|
+
attr_accessor create_time: ::Time
|
51
|
+
attr_accessor last_update_time: ::Time
|
52
|
+
attr_accessor apps_list: ::Array[Types::App]
|
53
|
+
attr_accessor previous_apps_list: ::Hash[::String, ::Array[Types::App]]
|
54
|
+
SENSITIVE: []
|
55
|
+
end
|
56
|
+
|
57
|
+
class AppsListDataSummary
|
58
|
+
attr_accessor list_arn: ::String
|
59
|
+
attr_accessor list_id: ::String
|
60
|
+
attr_accessor list_name: ::String
|
61
|
+
attr_accessor apps_list: ::Array[Types::App]
|
62
|
+
SENSITIVE: []
|
63
|
+
end
|
64
|
+
|
65
|
+
class AssociateAdminAccountRequest
|
66
|
+
attr_accessor admin_account: ::String
|
67
|
+
SENSITIVE: []
|
68
|
+
end
|
69
|
+
|
70
|
+
class AssociateThirdPartyFirewallRequest
|
71
|
+
attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
|
72
|
+
SENSITIVE: []
|
73
|
+
end
|
74
|
+
|
75
|
+
class AssociateThirdPartyFirewallResponse
|
76
|
+
attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
|
77
|
+
SENSITIVE: []
|
78
|
+
end
|
79
|
+
|
80
|
+
class AwsEc2InstanceViolation
|
81
|
+
attr_accessor violation_target: ::String
|
82
|
+
attr_accessor aws_ec2_network_interface_violations: ::Array[Types::AwsEc2NetworkInterfaceViolation]
|
83
|
+
SENSITIVE: []
|
84
|
+
end
|
85
|
+
|
86
|
+
class AwsEc2NetworkInterfaceViolation
|
87
|
+
attr_accessor violation_target: ::String
|
88
|
+
attr_accessor violating_security_groups: ::Array[::String]
|
89
|
+
SENSITIVE: []
|
90
|
+
end
|
91
|
+
|
92
|
+
class AwsVPCSecurityGroupViolation
|
93
|
+
attr_accessor violation_target: ::String
|
94
|
+
attr_accessor violation_target_description: ::String
|
95
|
+
attr_accessor partial_matches: ::Array[Types::PartialMatch]
|
96
|
+
attr_accessor possible_security_group_remediation_actions: ::Array[Types::SecurityGroupRemediationAction]
|
97
|
+
SENSITIVE: []
|
98
|
+
end
|
99
|
+
|
100
|
+
class BatchAssociateResourceRequest
|
101
|
+
attr_accessor resource_set_identifier: ::String
|
102
|
+
attr_accessor items: ::Array[::String]
|
103
|
+
SENSITIVE: []
|
104
|
+
end
|
105
|
+
|
106
|
+
class BatchAssociateResourceResponse
|
107
|
+
attr_accessor resource_set_identifier: ::String
|
108
|
+
attr_accessor failed_items: ::Array[Types::FailedItem]
|
109
|
+
SENSITIVE: []
|
110
|
+
end
|
111
|
+
|
112
|
+
class BatchDisassociateResourceRequest
|
113
|
+
attr_accessor resource_set_identifier: ::String
|
114
|
+
attr_accessor items: ::Array[::String]
|
115
|
+
SENSITIVE: []
|
116
|
+
end
|
117
|
+
|
118
|
+
class BatchDisassociateResourceResponse
|
119
|
+
attr_accessor resource_set_identifier: ::String
|
120
|
+
attr_accessor failed_items: ::Array[Types::FailedItem]
|
121
|
+
SENSITIVE: []
|
122
|
+
end
|
123
|
+
|
124
|
+
class ComplianceViolator
|
125
|
+
attr_accessor resource_id: ::String
|
126
|
+
attr_accessor violation_reason: ("WEB_ACL_MISSING_RULE_GROUP" | "RESOURCE_MISSING_WEB_ACL" | "RESOURCE_INCORRECT_WEB_ACL" | "RESOURCE_MISSING_SHIELD_PROTECTION" | "RESOURCE_MISSING_WEB_ACL_OR_SHIELD_PROTECTION" | "RESOURCE_MISSING_SECURITY_GROUP" | "RESOURCE_VIOLATES_AUDIT_SECURITY_GROUP" | "SECURITY_GROUP_UNUSED" | "SECURITY_GROUP_REDUNDANT" | "FMS_CREATED_SECURITY_GROUP_EDITED" | "MISSING_FIREWALL" | "MISSING_FIREWALL_SUBNET_IN_AZ" | "MISSING_EXPECTED_ROUTE_TABLE" | "NETWORK_FIREWALL_POLICY_MODIFIED" | "FIREWALL_SUBNET_IS_OUT_OF_SCOPE" | "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE" | "FIREWALL_SUBNET_MISSING_EXPECTED_ROUTE" | "UNEXPECTED_FIREWALL_ROUTES" | "UNEXPECTED_TARGET_GATEWAY_ROUTES" | "TRAFFIC_INSPECTION_CROSSES_AZ_BOUNDARY" | "INVALID_ROUTE_CONFIGURATION" | "MISSING_TARGET_GATEWAY" | "INTERNET_TRAFFIC_NOT_INSPECTED" | "BLACK_HOLE_ROUTE_DETECTED" | "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET" | "RESOURCE_MISSING_DNS_FIREWALL" | "ROUTE_HAS_OUT_OF_SCOPE_ENDPOINT" | "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT" | "INVALID_NETWORK_ACL_ENTRY")
|
127
|
+
attr_accessor resource_type: ::String
|
128
|
+
attr_accessor metadata: ::Hash[::String, ::String]
|
129
|
+
SENSITIVE: []
|
130
|
+
end
|
131
|
+
|
132
|
+
class CreateNetworkAclAction
|
133
|
+
attr_accessor description: ::String
|
134
|
+
attr_accessor vpc: Types::ActionTarget
|
135
|
+
attr_accessor fms_can_remediate: bool
|
136
|
+
SENSITIVE: []
|
137
|
+
end
|
138
|
+
|
139
|
+
class CreateNetworkAclEntriesAction
|
140
|
+
attr_accessor description: ::String
|
141
|
+
attr_accessor network_acl_id: Types::ActionTarget
|
142
|
+
attr_accessor network_acl_entries_to_be_created: ::Array[Types::EntryDescription]
|
143
|
+
attr_accessor fms_can_remediate: bool
|
144
|
+
SENSITIVE: []
|
145
|
+
end
|
146
|
+
|
147
|
+
class DeleteAppsListRequest
|
148
|
+
attr_accessor list_id: ::String
|
149
|
+
SENSITIVE: []
|
150
|
+
end
|
151
|
+
|
152
|
+
class DeleteNetworkAclEntriesAction
|
153
|
+
attr_accessor description: ::String
|
154
|
+
attr_accessor network_acl_id: Types::ActionTarget
|
155
|
+
attr_accessor network_acl_entries_to_be_deleted: ::Array[Types::EntryDescription]
|
156
|
+
attr_accessor fms_can_remediate: bool
|
157
|
+
SENSITIVE: []
|
158
|
+
end
|
159
|
+
|
160
|
+
class DeleteNotificationChannelRequest < Aws::EmptyStructure
|
161
|
+
end
|
162
|
+
|
163
|
+
class DeletePolicyRequest
|
164
|
+
attr_accessor policy_id: ::String
|
165
|
+
attr_accessor delete_all_policy_resources: bool
|
166
|
+
SENSITIVE: []
|
167
|
+
end
|
168
|
+
|
169
|
+
class DeleteProtocolsListRequest
|
170
|
+
attr_accessor list_id: ::String
|
171
|
+
SENSITIVE: []
|
172
|
+
end
|
173
|
+
|
174
|
+
class DeleteResourceSetRequest
|
175
|
+
attr_accessor identifier: ::String
|
176
|
+
SENSITIVE: []
|
177
|
+
end
|
178
|
+
|
179
|
+
class DisassociateAdminAccountRequest < Aws::EmptyStructure
|
180
|
+
end
|
181
|
+
|
182
|
+
class DisassociateThirdPartyFirewallRequest
|
183
|
+
attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
|
184
|
+
SENSITIVE: []
|
185
|
+
end
|
186
|
+
|
187
|
+
class DisassociateThirdPartyFirewallResponse
|
188
|
+
attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
|
189
|
+
SENSITIVE: []
|
190
|
+
end
|
191
|
+
|
192
|
+
class DiscoveredResource
|
193
|
+
attr_accessor uri: ::String
|
194
|
+
attr_accessor account_id: ::String
|
195
|
+
attr_accessor type: ::String
|
196
|
+
attr_accessor name: ::String
|
197
|
+
SENSITIVE: []
|
198
|
+
end
|
199
|
+
|
200
|
+
class DnsDuplicateRuleGroupViolation
|
201
|
+
attr_accessor violation_target: ::String
|
202
|
+
attr_accessor violation_target_description: ::String
|
203
|
+
SENSITIVE: []
|
204
|
+
end
|
205
|
+
|
206
|
+
class DnsRuleGroupLimitExceededViolation
|
207
|
+
attr_accessor violation_target: ::String
|
208
|
+
attr_accessor violation_target_description: ::String
|
209
|
+
attr_accessor number_of_rule_groups_already_associated: ::Integer
|
210
|
+
SENSITIVE: []
|
211
|
+
end
|
212
|
+
|
213
|
+
class DnsRuleGroupPriorityConflictViolation
|
214
|
+
attr_accessor violation_target: ::String
|
215
|
+
attr_accessor violation_target_description: ::String
|
216
|
+
attr_accessor conflicting_priority: ::Integer
|
217
|
+
attr_accessor conflicting_policy_id: ::String
|
218
|
+
attr_accessor unavailable_priorities: ::Array[::Integer]
|
219
|
+
SENSITIVE: []
|
220
|
+
end
|
221
|
+
|
222
|
+
class EC2AssociateRouteTableAction
|
223
|
+
attr_accessor description: ::String
|
224
|
+
attr_accessor route_table_id: Types::ActionTarget
|
225
|
+
attr_accessor subnet_id: Types::ActionTarget
|
226
|
+
attr_accessor gateway_id: Types::ActionTarget
|
227
|
+
SENSITIVE: []
|
228
|
+
end
|
229
|
+
|
230
|
+
class EC2CopyRouteTableAction
|
231
|
+
attr_accessor description: ::String
|
232
|
+
attr_accessor vpc_id: Types::ActionTarget
|
233
|
+
attr_accessor route_table_id: Types::ActionTarget
|
234
|
+
SENSITIVE: []
|
235
|
+
end
|
236
|
+
|
237
|
+
class EC2CreateRouteAction
|
238
|
+
attr_accessor description: ::String
|
239
|
+
attr_accessor destination_cidr_block: ::String
|
240
|
+
attr_accessor destination_prefix_list_id: ::String
|
241
|
+
attr_accessor destination_ipv_6_cidr_block: ::String
|
242
|
+
attr_accessor vpc_endpoint_id: Types::ActionTarget
|
243
|
+
attr_accessor gateway_id: Types::ActionTarget
|
244
|
+
attr_accessor route_table_id: Types::ActionTarget
|
245
|
+
SENSITIVE: []
|
246
|
+
end
|
247
|
+
|
248
|
+
class EC2CreateRouteTableAction
|
249
|
+
attr_accessor description: ::String
|
250
|
+
attr_accessor vpc_id: Types::ActionTarget
|
251
|
+
SENSITIVE: []
|
252
|
+
end
|
253
|
+
|
254
|
+
class EC2DeleteRouteAction
|
255
|
+
attr_accessor description: ::String
|
256
|
+
attr_accessor destination_cidr_block: ::String
|
257
|
+
attr_accessor destination_prefix_list_id: ::String
|
258
|
+
attr_accessor destination_ipv_6_cidr_block: ::String
|
259
|
+
attr_accessor route_table_id: Types::ActionTarget
|
260
|
+
SENSITIVE: []
|
261
|
+
end
|
262
|
+
|
263
|
+
class EC2ReplaceRouteAction
|
264
|
+
attr_accessor description: ::String
|
265
|
+
attr_accessor destination_cidr_block: ::String
|
266
|
+
attr_accessor destination_prefix_list_id: ::String
|
267
|
+
attr_accessor destination_ipv_6_cidr_block: ::String
|
268
|
+
attr_accessor gateway_id: Types::ActionTarget
|
269
|
+
attr_accessor route_table_id: Types::ActionTarget
|
270
|
+
SENSITIVE: []
|
271
|
+
end
|
272
|
+
|
273
|
+
class EC2ReplaceRouteTableAssociationAction
|
274
|
+
attr_accessor description: ::String
|
275
|
+
attr_accessor association_id: Types::ActionTarget
|
276
|
+
attr_accessor route_table_id: Types::ActionTarget
|
277
|
+
SENSITIVE: []
|
278
|
+
end
|
279
|
+
|
280
|
+
class EntryDescription
|
281
|
+
attr_accessor entry_detail: Types::NetworkAclEntry
|
282
|
+
attr_accessor entry_rule_number: ::Integer
|
283
|
+
attr_accessor entry_type: ("FMS_MANAGED_FIRST_ENTRY" | "FMS_MANAGED_LAST_ENTRY" | "CUSTOM_ENTRY")
|
284
|
+
SENSITIVE: []
|
285
|
+
end
|
286
|
+
|
287
|
+
class EntryViolation
|
288
|
+
attr_accessor expected_entry: Types::EntryDescription
|
289
|
+
attr_accessor expected_evaluation_order: ::String
|
290
|
+
attr_accessor actual_evaluation_order: ::String
|
291
|
+
attr_accessor entry_at_expected_evaluation_order: Types::EntryDescription
|
292
|
+
attr_accessor entries_with_conflicts: ::Array[Types::EntryDescription]
|
293
|
+
attr_accessor entry_violation_reasons: ::Array[("MISSING_EXPECTED_ENTRY" | "INCORRECT_ENTRY_ORDER" | "ENTRY_CONFLICT")]
|
294
|
+
SENSITIVE: []
|
295
|
+
end
|
296
|
+
|
297
|
+
class EvaluationResult
|
298
|
+
attr_accessor compliance_status: ("COMPLIANT" | "NON_COMPLIANT")
|
299
|
+
attr_accessor violator_count: ::Integer
|
300
|
+
attr_accessor evaluation_limit_exceeded: bool
|
301
|
+
SENSITIVE: []
|
302
|
+
end
|
303
|
+
|
304
|
+
class ExpectedRoute
|
305
|
+
attr_accessor ip_v4_cidr: ::String
|
306
|
+
attr_accessor prefix_list_id: ::String
|
307
|
+
attr_accessor ip_v6_cidr: ::String
|
308
|
+
attr_accessor contributing_subnets: ::Array[::String]
|
309
|
+
attr_accessor allowed_targets: ::Array[::String]
|
310
|
+
attr_accessor route_table_id: ::String
|
311
|
+
SENSITIVE: []
|
312
|
+
end
|
313
|
+
|
314
|
+
class FMSPolicyUpdateFirewallCreationConfigAction
|
315
|
+
attr_accessor description: ::String
|
316
|
+
attr_accessor firewall_creation_config: ::String
|
317
|
+
SENSITIVE: []
|
318
|
+
end
|
319
|
+
|
320
|
+
class FailedItem
|
321
|
+
attr_accessor uri: ::String
|
322
|
+
attr_accessor reason: ("NOT_VALID_ARN" | "NOT_VALID_PARTITION" | "NOT_VALID_REGION" | "NOT_VALID_SERVICE" | "NOT_VALID_RESOURCE_TYPE" | "NOT_VALID_ACCOUNT_ID")
|
323
|
+
SENSITIVE: []
|
324
|
+
end
|
325
|
+
|
326
|
+
class FirewallSubnetIsOutOfScopeViolation
|
327
|
+
attr_accessor firewall_subnet_id: ::String
|
328
|
+
attr_accessor vpc_id: ::String
|
329
|
+
attr_accessor subnet_availability_zone: ::String
|
330
|
+
attr_accessor subnet_availability_zone_id: ::String
|
331
|
+
attr_accessor vpc_endpoint_id: ::String
|
332
|
+
SENSITIVE: []
|
333
|
+
end
|
334
|
+
|
335
|
+
class FirewallSubnetMissingVPCEndpointViolation
|
336
|
+
attr_accessor firewall_subnet_id: ::String
|
337
|
+
attr_accessor vpc_id: ::String
|
338
|
+
attr_accessor subnet_availability_zone: ::String
|
339
|
+
attr_accessor subnet_availability_zone_id: ::String
|
340
|
+
SENSITIVE: []
|
341
|
+
end
|
342
|
+
|
343
|
+
class GetAdminAccountRequest < Aws::EmptyStructure
|
344
|
+
end
|
345
|
+
|
346
|
+
class GetAdminAccountResponse
|
347
|
+
attr_accessor admin_account: ::String
|
348
|
+
attr_accessor role_status: ("READY" | "CREATING" | "PENDING_DELETION" | "DELETING" | "DELETED")
|
349
|
+
SENSITIVE: []
|
350
|
+
end
|
351
|
+
|
352
|
+
class GetAdminScopeRequest
|
353
|
+
attr_accessor admin_account: ::String
|
354
|
+
SENSITIVE: []
|
355
|
+
end
|
356
|
+
|
357
|
+
class GetAdminScopeResponse
|
358
|
+
attr_accessor admin_scope: Types::AdminScope
|
359
|
+
attr_accessor status: ("ONBOARDING" | "ONBOARDING_COMPLETE" | "OFFBOARDING" | "OFFBOARDING_COMPLETE")
|
360
|
+
SENSITIVE: []
|
361
|
+
end
|
362
|
+
|
363
|
+
class GetAppsListRequest
|
364
|
+
attr_accessor list_id: ::String
|
365
|
+
attr_accessor default_list: bool
|
366
|
+
SENSITIVE: []
|
367
|
+
end
|
368
|
+
|
369
|
+
class GetAppsListResponse
|
370
|
+
attr_accessor apps_list: Types::AppsListData
|
371
|
+
attr_accessor apps_list_arn: ::String
|
372
|
+
SENSITIVE: []
|
373
|
+
end
|
374
|
+
|
375
|
+
class GetComplianceDetailRequest
|
376
|
+
attr_accessor policy_id: ::String
|
377
|
+
attr_accessor member_account: ::String
|
378
|
+
SENSITIVE: []
|
379
|
+
end
|
380
|
+
|
381
|
+
class GetComplianceDetailResponse
|
382
|
+
attr_accessor policy_compliance_detail: Types::PolicyComplianceDetail
|
383
|
+
SENSITIVE: []
|
384
|
+
end
|
385
|
+
|
386
|
+
class GetNotificationChannelRequest < Aws::EmptyStructure
|
387
|
+
end
|
388
|
+
|
389
|
+
class GetNotificationChannelResponse
|
390
|
+
attr_accessor sns_topic_arn: ::String
|
391
|
+
attr_accessor sns_role_name: ::String
|
392
|
+
SENSITIVE: []
|
393
|
+
end
|
394
|
+
|
395
|
+
class GetPolicyRequest
|
396
|
+
attr_accessor policy_id: ::String
|
397
|
+
SENSITIVE: []
|
398
|
+
end
|
399
|
+
|
400
|
+
class GetPolicyResponse
|
401
|
+
attr_accessor policy: Types::Policy
|
402
|
+
attr_accessor policy_arn: ::String
|
403
|
+
SENSITIVE: []
|
404
|
+
end
|
405
|
+
|
406
|
+
class GetProtectionStatusRequest
|
407
|
+
attr_accessor policy_id: ::String
|
408
|
+
attr_accessor member_account_id: ::String
|
409
|
+
attr_accessor start_time: ::Time
|
410
|
+
attr_accessor end_time: ::Time
|
411
|
+
attr_accessor next_token: ::String
|
412
|
+
attr_accessor max_results: ::Integer
|
413
|
+
SENSITIVE: []
|
414
|
+
end
|
415
|
+
|
416
|
+
class GetProtectionStatusResponse
|
417
|
+
attr_accessor admin_account_id: ::String
|
418
|
+
attr_accessor service_type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
|
419
|
+
attr_accessor data: ::String
|
420
|
+
attr_accessor next_token: ::String
|
421
|
+
SENSITIVE: []
|
422
|
+
end
|
423
|
+
|
424
|
+
class GetProtocolsListRequest
|
425
|
+
attr_accessor list_id: ::String
|
426
|
+
attr_accessor default_list: bool
|
427
|
+
SENSITIVE: []
|
428
|
+
end
|
429
|
+
|
430
|
+
class GetProtocolsListResponse
|
431
|
+
attr_accessor protocols_list: Types::ProtocolsListData
|
432
|
+
attr_accessor protocols_list_arn: ::String
|
433
|
+
SENSITIVE: []
|
434
|
+
end
|
435
|
+
|
436
|
+
class GetResourceSetRequest
|
437
|
+
attr_accessor identifier: ::String
|
438
|
+
SENSITIVE: []
|
439
|
+
end
|
440
|
+
|
441
|
+
class GetResourceSetResponse
|
442
|
+
attr_accessor resource_set: Types::ResourceSet
|
443
|
+
attr_accessor resource_set_arn: ::String
|
444
|
+
SENSITIVE: []
|
445
|
+
end
|
446
|
+
|
447
|
+
class GetThirdPartyFirewallAssociationStatusRequest
|
448
|
+
attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
|
449
|
+
SENSITIVE: []
|
450
|
+
end
|
451
|
+
|
452
|
+
class GetThirdPartyFirewallAssociationStatusResponse
|
453
|
+
attr_accessor third_party_firewall_status: ("ONBOARDING" | "ONBOARD_COMPLETE" | "OFFBOARDING" | "OFFBOARD_COMPLETE" | "NOT_EXIST")
|
454
|
+
attr_accessor marketplace_onboarding_status: ("NO_SUBSCRIPTION" | "NOT_COMPLETE" | "COMPLETE")
|
455
|
+
SENSITIVE: []
|
456
|
+
end
|
457
|
+
|
458
|
+
class GetViolationDetailsRequest
|
459
|
+
attr_accessor policy_id: ::String
|
460
|
+
attr_accessor member_account: ::String
|
461
|
+
attr_accessor resource_id: ::String
|
462
|
+
attr_accessor resource_type: ::String
|
463
|
+
SENSITIVE: []
|
464
|
+
end
|
465
|
+
|
466
|
+
class GetViolationDetailsResponse
|
467
|
+
attr_accessor violation_detail: Types::ViolationDetail
|
468
|
+
SENSITIVE: []
|
469
|
+
end
|
470
|
+
|
471
|
+
class InternalErrorException
|
472
|
+
attr_accessor message: ::String
|
473
|
+
SENSITIVE: []
|
474
|
+
end
|
475
|
+
|
476
|
+
class InvalidInputException
|
477
|
+
attr_accessor message: ::String
|
478
|
+
SENSITIVE: []
|
479
|
+
end
|
480
|
+
|
481
|
+
class InvalidNetworkAclEntriesViolation
|
482
|
+
attr_accessor vpc: ::String
|
483
|
+
attr_accessor subnet: ::String
|
484
|
+
attr_accessor subnet_availability_zone: ::String
|
485
|
+
attr_accessor current_associated_network_acl: ::String
|
486
|
+
attr_accessor entry_violations: ::Array[Types::EntryViolation]
|
487
|
+
SENSITIVE: []
|
488
|
+
end
|
489
|
+
|
490
|
+
class InvalidOperationException
|
491
|
+
attr_accessor message: ::String
|
492
|
+
SENSITIVE: []
|
493
|
+
end
|
494
|
+
|
495
|
+
class InvalidTypeException
|
496
|
+
attr_accessor message: ::String
|
497
|
+
SENSITIVE: []
|
498
|
+
end
|
499
|
+
|
500
|
+
class LimitExceededException
|
501
|
+
attr_accessor message: ::String
|
502
|
+
SENSITIVE: []
|
503
|
+
end
|
504
|
+
|
505
|
+
class ListAdminAccountsForOrganizationRequest
|
506
|
+
attr_accessor next_token: ::String
|
507
|
+
attr_accessor max_results: ::Integer
|
508
|
+
SENSITIVE: []
|
509
|
+
end
|
510
|
+
|
511
|
+
class ListAdminAccountsForOrganizationResponse
|
512
|
+
attr_accessor admin_accounts: ::Array[Types::AdminAccountSummary]
|
513
|
+
attr_accessor next_token: ::String
|
514
|
+
SENSITIVE: []
|
515
|
+
end
|
516
|
+
|
517
|
+
class ListAdminsManagingAccountRequest
|
518
|
+
attr_accessor next_token: ::String
|
519
|
+
attr_accessor max_results: ::Integer
|
520
|
+
SENSITIVE: []
|
521
|
+
end
|
522
|
+
|
523
|
+
class ListAdminsManagingAccountResponse
|
524
|
+
attr_accessor admin_accounts: ::Array[::String]
|
525
|
+
attr_accessor next_token: ::String
|
526
|
+
SENSITIVE: []
|
527
|
+
end
|
528
|
+
|
529
|
+
class ListAppsListsRequest
|
530
|
+
attr_accessor default_lists: bool
|
531
|
+
attr_accessor next_token: ::String
|
532
|
+
attr_accessor max_results: ::Integer
|
533
|
+
SENSITIVE: []
|
534
|
+
end
|
535
|
+
|
536
|
+
class ListAppsListsResponse
|
537
|
+
attr_accessor apps_lists: ::Array[Types::AppsListDataSummary]
|
538
|
+
attr_accessor next_token: ::String
|
539
|
+
SENSITIVE: []
|
540
|
+
end
|
541
|
+
|
542
|
+
class ListComplianceStatusRequest
|
543
|
+
attr_accessor policy_id: ::String
|
544
|
+
attr_accessor next_token: ::String
|
545
|
+
attr_accessor max_results: ::Integer
|
546
|
+
SENSITIVE: []
|
547
|
+
end
|
548
|
+
|
549
|
+
class ListComplianceStatusResponse
|
550
|
+
attr_accessor policy_compliance_status_list: ::Array[Types::PolicyComplianceStatus]
|
551
|
+
attr_accessor next_token: ::String
|
552
|
+
SENSITIVE: []
|
553
|
+
end
|
554
|
+
|
555
|
+
class ListDiscoveredResourcesRequest
|
556
|
+
attr_accessor member_account_ids: ::Array[::String]
|
557
|
+
attr_accessor resource_type: ::String
|
558
|
+
attr_accessor max_results: ::Integer
|
559
|
+
attr_accessor next_token: ::String
|
560
|
+
SENSITIVE: []
|
561
|
+
end
|
562
|
+
|
563
|
+
class ListDiscoveredResourcesResponse
|
564
|
+
attr_accessor items: ::Array[Types::DiscoveredResource]
|
565
|
+
attr_accessor next_token: ::String
|
566
|
+
SENSITIVE: []
|
567
|
+
end
|
568
|
+
|
569
|
+
class ListMemberAccountsRequest
|
570
|
+
attr_accessor next_token: ::String
|
571
|
+
attr_accessor max_results: ::Integer
|
572
|
+
SENSITIVE: []
|
573
|
+
end
|
574
|
+
|
575
|
+
class ListMemberAccountsResponse
|
576
|
+
attr_accessor member_accounts: ::Array[::String]
|
577
|
+
attr_accessor next_token: ::String
|
578
|
+
SENSITIVE: []
|
579
|
+
end
|
580
|
+
|
581
|
+
class ListPoliciesRequest
|
582
|
+
attr_accessor next_token: ::String
|
583
|
+
attr_accessor max_results: ::Integer
|
584
|
+
SENSITIVE: []
|
585
|
+
end
|
586
|
+
|
587
|
+
class ListPoliciesResponse
|
588
|
+
attr_accessor policy_list: ::Array[Types::PolicySummary]
|
589
|
+
attr_accessor next_token: ::String
|
590
|
+
SENSITIVE: []
|
591
|
+
end
|
592
|
+
|
593
|
+
class ListProtocolsListsRequest
|
594
|
+
attr_accessor default_lists: bool
|
595
|
+
attr_accessor next_token: ::String
|
596
|
+
attr_accessor max_results: ::Integer
|
597
|
+
SENSITIVE: []
|
598
|
+
end
|
599
|
+
|
600
|
+
class ListProtocolsListsResponse
|
601
|
+
attr_accessor protocols_lists: ::Array[Types::ProtocolsListDataSummary]
|
602
|
+
attr_accessor next_token: ::String
|
603
|
+
SENSITIVE: []
|
604
|
+
end
|
605
|
+
|
606
|
+
class ListResourceSetResourcesRequest
|
607
|
+
attr_accessor identifier: ::String
|
608
|
+
attr_accessor max_results: ::Integer
|
609
|
+
attr_accessor next_token: ::String
|
610
|
+
SENSITIVE: []
|
611
|
+
end
|
612
|
+
|
613
|
+
class ListResourceSetResourcesResponse
|
614
|
+
attr_accessor items: ::Array[Types::Resource]
|
615
|
+
attr_accessor next_token: ::String
|
616
|
+
SENSITIVE: []
|
617
|
+
end
|
618
|
+
|
619
|
+
class ListResourceSetsRequest
|
620
|
+
attr_accessor next_token: ::String
|
621
|
+
attr_accessor max_results: ::Integer
|
622
|
+
SENSITIVE: []
|
623
|
+
end
|
624
|
+
|
625
|
+
class ListResourceSetsResponse
|
626
|
+
attr_accessor resource_sets: ::Array[Types::ResourceSetSummary]
|
627
|
+
attr_accessor next_token: ::String
|
628
|
+
SENSITIVE: []
|
629
|
+
end
|
630
|
+
|
631
|
+
class ListTagsForResourceRequest
|
632
|
+
attr_accessor resource_arn: ::String
|
633
|
+
SENSITIVE: []
|
634
|
+
end
|
635
|
+
|
636
|
+
class ListTagsForResourceResponse
|
637
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
638
|
+
SENSITIVE: []
|
639
|
+
end
|
640
|
+
|
641
|
+
class ListThirdPartyFirewallFirewallPoliciesRequest
|
642
|
+
attr_accessor third_party_firewall: ("PALO_ALTO_NETWORKS_CLOUD_NGFW" | "FORTIGATE_CLOUD_NATIVE_FIREWALL")
|
643
|
+
attr_accessor next_token: ::String
|
644
|
+
attr_accessor max_results: ::Integer
|
645
|
+
SENSITIVE: []
|
646
|
+
end
|
647
|
+
|
648
|
+
class ListThirdPartyFirewallFirewallPoliciesResponse
|
649
|
+
attr_accessor third_party_firewall_firewall_policies: ::Array[Types::ThirdPartyFirewallFirewallPolicy]
|
650
|
+
attr_accessor next_token: ::String
|
651
|
+
SENSITIVE: []
|
652
|
+
end
|
653
|
+
|
654
|
+
class NetworkAclCommonPolicy
|
655
|
+
attr_accessor network_acl_entry_set: Types::NetworkAclEntrySet
|
656
|
+
SENSITIVE: []
|
657
|
+
end
|
658
|
+
|
659
|
+
class NetworkAclEntry
|
660
|
+
attr_accessor icmp_type_code: Types::NetworkAclIcmpTypeCode
|
661
|
+
attr_accessor protocol: ::String
|
662
|
+
attr_accessor port_range: Types::NetworkAclPortRange
|
663
|
+
attr_accessor cidr_block: ::String
|
664
|
+
attr_accessor ipv_6_cidr_block: ::String
|
665
|
+
attr_accessor rule_action: ("allow" | "deny")
|
666
|
+
attr_accessor egress: bool
|
667
|
+
SENSITIVE: []
|
668
|
+
end
|
669
|
+
|
670
|
+
class NetworkAclEntrySet
|
671
|
+
attr_accessor first_entries: ::Array[Types::NetworkAclEntry]
|
672
|
+
attr_accessor force_remediate_for_first_entries: bool
|
673
|
+
attr_accessor last_entries: ::Array[Types::NetworkAclEntry]
|
674
|
+
attr_accessor force_remediate_for_last_entries: bool
|
675
|
+
SENSITIVE: []
|
676
|
+
end
|
677
|
+
|
678
|
+
class NetworkAclIcmpTypeCode
|
679
|
+
attr_accessor code: ::Integer
|
680
|
+
attr_accessor type: ::Integer
|
681
|
+
SENSITIVE: []
|
682
|
+
end
|
683
|
+
|
684
|
+
class NetworkAclPortRange
|
685
|
+
attr_accessor from: ::Integer
|
686
|
+
attr_accessor to: ::Integer
|
687
|
+
SENSITIVE: []
|
688
|
+
end
|
689
|
+
|
690
|
+
class NetworkFirewallBlackHoleRouteDetectedViolation
|
691
|
+
attr_accessor violation_target: ::String
|
692
|
+
attr_accessor route_table_id: ::String
|
693
|
+
attr_accessor vpc_id: ::String
|
694
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
695
|
+
SENSITIVE: []
|
696
|
+
end
|
697
|
+
|
698
|
+
class NetworkFirewallInternetTrafficNotInspectedViolation
|
699
|
+
attr_accessor subnet_id: ::String
|
700
|
+
attr_accessor subnet_availability_zone: ::String
|
701
|
+
attr_accessor route_table_id: ::String
|
702
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
703
|
+
attr_accessor is_route_table_used_in_different_az: bool
|
704
|
+
attr_accessor current_firewall_subnet_route_table: ::String
|
705
|
+
attr_accessor expected_firewall_endpoint: ::String
|
706
|
+
attr_accessor firewall_subnet_id: ::String
|
707
|
+
attr_accessor expected_firewall_subnet_routes: ::Array[Types::ExpectedRoute]
|
708
|
+
attr_accessor actual_firewall_subnet_routes: ::Array[Types::Route]
|
709
|
+
attr_accessor internet_gateway_id: ::String
|
710
|
+
attr_accessor current_internet_gateway_route_table: ::String
|
711
|
+
attr_accessor expected_internet_gateway_routes: ::Array[Types::ExpectedRoute]
|
712
|
+
attr_accessor actual_internet_gateway_routes: ::Array[Types::Route]
|
713
|
+
attr_accessor vpc_id: ::String
|
714
|
+
SENSITIVE: []
|
715
|
+
end
|
716
|
+
|
717
|
+
class NetworkFirewallInvalidRouteConfigurationViolation
|
718
|
+
attr_accessor affected_subnets: ::Array[::String]
|
719
|
+
attr_accessor route_table_id: ::String
|
720
|
+
attr_accessor is_route_table_used_in_different_az: bool
|
721
|
+
attr_accessor violating_route: Types::Route
|
722
|
+
attr_accessor current_firewall_subnet_route_table: ::String
|
723
|
+
attr_accessor expected_firewall_endpoint: ::String
|
724
|
+
attr_accessor actual_firewall_endpoint: ::String
|
725
|
+
attr_accessor expected_firewall_subnet_id: ::String
|
726
|
+
attr_accessor actual_firewall_subnet_id: ::String
|
727
|
+
attr_accessor expected_firewall_subnet_routes: ::Array[Types::ExpectedRoute]
|
728
|
+
attr_accessor actual_firewall_subnet_routes: ::Array[Types::Route]
|
729
|
+
attr_accessor internet_gateway_id: ::String
|
730
|
+
attr_accessor current_internet_gateway_route_table: ::String
|
731
|
+
attr_accessor expected_internet_gateway_routes: ::Array[Types::ExpectedRoute]
|
732
|
+
attr_accessor actual_internet_gateway_routes: ::Array[Types::Route]
|
733
|
+
attr_accessor vpc_id: ::String
|
734
|
+
SENSITIVE: []
|
735
|
+
end
|
736
|
+
|
737
|
+
class NetworkFirewallMissingExpectedRTViolation
|
738
|
+
attr_accessor violation_target: ::String
|
739
|
+
attr_accessor vpc: ::String
|
740
|
+
attr_accessor availability_zone: ::String
|
741
|
+
attr_accessor current_route_table: ::String
|
742
|
+
attr_accessor expected_route_table: ::String
|
743
|
+
SENSITIVE: []
|
744
|
+
end
|
745
|
+
|
746
|
+
class NetworkFirewallMissingExpectedRoutesViolation
|
747
|
+
attr_accessor violation_target: ::String
|
748
|
+
attr_accessor expected_routes: ::Array[Types::ExpectedRoute]
|
749
|
+
attr_accessor vpc_id: ::String
|
750
|
+
SENSITIVE: []
|
751
|
+
end
|
752
|
+
|
753
|
+
class NetworkFirewallMissingFirewallViolation
|
754
|
+
attr_accessor violation_target: ::String
|
755
|
+
attr_accessor vpc: ::String
|
756
|
+
attr_accessor availability_zone: ::String
|
757
|
+
attr_accessor target_violation_reason: ::String
|
758
|
+
SENSITIVE: []
|
759
|
+
end
|
760
|
+
|
761
|
+
class NetworkFirewallMissingSubnetViolation
|
762
|
+
attr_accessor violation_target: ::String
|
763
|
+
attr_accessor vpc: ::String
|
764
|
+
attr_accessor availability_zone: ::String
|
765
|
+
attr_accessor target_violation_reason: ::String
|
766
|
+
SENSITIVE: []
|
767
|
+
end
|
768
|
+
|
769
|
+
class NetworkFirewallPolicy
|
770
|
+
attr_accessor firewall_deployment_model: ("CENTRALIZED" | "DISTRIBUTED")
|
771
|
+
SENSITIVE: []
|
772
|
+
end
|
773
|
+
|
774
|
+
class NetworkFirewallPolicyDescription
|
775
|
+
attr_accessor stateless_rule_groups: ::Array[Types::StatelessRuleGroup]
|
776
|
+
attr_accessor stateless_default_actions: ::Array[::String]
|
777
|
+
attr_accessor stateless_fragment_default_actions: ::Array[::String]
|
778
|
+
attr_accessor stateless_custom_actions: ::Array[::String]
|
779
|
+
attr_accessor stateful_rule_groups: ::Array[Types::StatefulRuleGroup]
|
780
|
+
attr_accessor stateful_default_actions: ::Array[::String]
|
781
|
+
attr_accessor stateful_engine_options: Types::StatefulEngineOptions
|
782
|
+
SENSITIVE: []
|
783
|
+
end
|
784
|
+
|
785
|
+
class NetworkFirewallPolicyModifiedViolation
|
786
|
+
attr_accessor violation_target: ::String
|
787
|
+
attr_accessor current_policy_description: Types::NetworkFirewallPolicyDescription
|
788
|
+
attr_accessor expected_policy_description: Types::NetworkFirewallPolicyDescription
|
789
|
+
SENSITIVE: []
|
790
|
+
end
|
791
|
+
|
792
|
+
class NetworkFirewallStatefulRuleGroupOverride
|
793
|
+
attr_accessor action: ("DROP_TO_ALERT")
|
794
|
+
SENSITIVE: []
|
795
|
+
end
|
796
|
+
|
797
|
+
class NetworkFirewallUnexpectedFirewallRoutesViolation
|
798
|
+
attr_accessor firewall_subnet_id: ::String
|
799
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
800
|
+
attr_accessor route_table_id: ::String
|
801
|
+
attr_accessor firewall_endpoint: ::String
|
802
|
+
attr_accessor vpc_id: ::String
|
803
|
+
SENSITIVE: []
|
804
|
+
end
|
805
|
+
|
806
|
+
class NetworkFirewallUnexpectedGatewayRoutesViolation
|
807
|
+
attr_accessor gateway_id: ::String
|
808
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
809
|
+
attr_accessor route_table_id: ::String
|
810
|
+
attr_accessor vpc_id: ::String
|
811
|
+
SENSITIVE: []
|
812
|
+
end
|
813
|
+
|
814
|
+
class OrganizationalUnitScope
|
815
|
+
attr_accessor organizational_units: ::Array[::String]
|
816
|
+
attr_accessor all_organizational_units_enabled: bool
|
817
|
+
attr_accessor exclude_specified_organizational_units: bool
|
818
|
+
SENSITIVE: []
|
819
|
+
end
|
820
|
+
|
821
|
+
class PartialMatch
|
822
|
+
attr_accessor reference: ::String
|
823
|
+
attr_accessor target_violation_reasons: ::Array[::String]
|
824
|
+
SENSITIVE: []
|
825
|
+
end
|
826
|
+
|
827
|
+
class Policy
|
828
|
+
attr_accessor policy_id: ::String
|
829
|
+
attr_accessor policy_name: ::String
|
830
|
+
attr_accessor policy_update_token: ::String
|
831
|
+
attr_accessor security_service_policy_data: Types::SecurityServicePolicyData
|
832
|
+
attr_accessor resource_type: ::String
|
833
|
+
attr_accessor resource_type_list: ::Array[::String]
|
834
|
+
attr_accessor resource_tags: ::Array[Types::ResourceTag]
|
835
|
+
attr_accessor exclude_resource_tags: bool
|
836
|
+
attr_accessor remediation_enabled: bool
|
837
|
+
attr_accessor delete_unused_fm_managed_resources: bool
|
838
|
+
attr_accessor include_map: ::Hash[("ACCOUNT" | "ORG_UNIT"), ::Array[::String]]
|
839
|
+
attr_accessor exclude_map: ::Hash[("ACCOUNT" | "ORG_UNIT"), ::Array[::String]]
|
840
|
+
attr_accessor resource_set_ids: ::Array[::String]
|
841
|
+
attr_accessor policy_description: ::String
|
842
|
+
attr_accessor policy_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
|
843
|
+
SENSITIVE: []
|
844
|
+
end
|
845
|
+
|
846
|
+
class PolicyComplianceDetail
|
847
|
+
attr_accessor policy_owner: ::String
|
848
|
+
attr_accessor policy_id: ::String
|
849
|
+
attr_accessor member_account: ::String
|
850
|
+
attr_accessor violators: ::Array[Types::ComplianceViolator]
|
851
|
+
attr_accessor evaluation_limit_exceeded: bool
|
852
|
+
attr_accessor expired_at: ::Time
|
853
|
+
attr_accessor issue_info_map: ::Hash[("AWSCONFIG" | "AWSWAF" | "AWSSHIELD_ADVANCED" | "AWSVPC"), ::String]
|
854
|
+
SENSITIVE: []
|
855
|
+
end
|
856
|
+
|
857
|
+
class PolicyComplianceStatus
|
858
|
+
attr_accessor policy_owner: ::String
|
859
|
+
attr_accessor policy_id: ::String
|
860
|
+
attr_accessor policy_name: ::String
|
861
|
+
attr_accessor member_account: ::String
|
862
|
+
attr_accessor evaluation_results: ::Array[Types::EvaluationResult]
|
863
|
+
attr_accessor last_updated: ::Time
|
864
|
+
attr_accessor issue_info_map: ::Hash[("AWSCONFIG" | "AWSWAF" | "AWSSHIELD_ADVANCED" | "AWSVPC"), ::String]
|
865
|
+
SENSITIVE: []
|
866
|
+
end
|
867
|
+
|
868
|
+
class PolicyOption
|
869
|
+
attr_accessor network_firewall_policy: Types::NetworkFirewallPolicy
|
870
|
+
attr_accessor third_party_firewall_policy: Types::ThirdPartyFirewallPolicy
|
871
|
+
attr_accessor network_acl_common_policy: Types::NetworkAclCommonPolicy
|
872
|
+
SENSITIVE: []
|
873
|
+
end
|
874
|
+
|
875
|
+
class PolicySummary
|
876
|
+
attr_accessor policy_arn: ::String
|
877
|
+
attr_accessor policy_id: ::String
|
878
|
+
attr_accessor policy_name: ::String
|
879
|
+
attr_accessor resource_type: ::String
|
880
|
+
attr_accessor security_service_type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
|
881
|
+
attr_accessor remediation_enabled: bool
|
882
|
+
attr_accessor delete_unused_fm_managed_resources: bool
|
883
|
+
attr_accessor policy_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
|
884
|
+
SENSITIVE: []
|
885
|
+
end
|
886
|
+
|
887
|
+
class PolicyTypeScope
|
888
|
+
attr_accessor policy_types: ::Array[("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")]
|
889
|
+
attr_accessor all_policy_types_enabled: bool
|
890
|
+
SENSITIVE: []
|
891
|
+
end
|
892
|
+
|
893
|
+
class PossibleRemediationAction
|
894
|
+
attr_accessor description: ::String
|
895
|
+
attr_accessor ordered_remediation_actions: ::Array[Types::RemediationActionWithOrder]
|
896
|
+
attr_accessor is_default_action: bool
|
897
|
+
SENSITIVE: []
|
898
|
+
end
|
899
|
+
|
900
|
+
class PossibleRemediationActions
|
901
|
+
attr_accessor description: ::String
|
902
|
+
attr_accessor actions: ::Array[Types::PossibleRemediationAction]
|
903
|
+
SENSITIVE: []
|
904
|
+
end
|
905
|
+
|
906
|
+
class ProtocolsListData
|
907
|
+
attr_accessor list_id: ::String
|
908
|
+
attr_accessor list_name: ::String
|
909
|
+
attr_accessor list_update_token: ::String
|
910
|
+
attr_accessor create_time: ::Time
|
911
|
+
attr_accessor last_update_time: ::Time
|
912
|
+
attr_accessor protocols_list: ::Array[::String]
|
913
|
+
attr_accessor previous_protocols_list: ::Hash[::String, ::Array[::String]]
|
914
|
+
SENSITIVE: []
|
915
|
+
end
|
916
|
+
|
917
|
+
class ProtocolsListDataSummary
|
918
|
+
attr_accessor list_arn: ::String
|
919
|
+
attr_accessor list_id: ::String
|
920
|
+
attr_accessor list_name: ::String
|
921
|
+
attr_accessor protocols_list: ::Array[::String]
|
922
|
+
SENSITIVE: []
|
923
|
+
end
|
924
|
+
|
925
|
+
class PutAdminAccountRequest
|
926
|
+
attr_accessor admin_account: ::String
|
927
|
+
attr_accessor admin_scope: Types::AdminScope
|
928
|
+
SENSITIVE: []
|
929
|
+
end
|
930
|
+
|
931
|
+
class PutAppsListRequest
|
932
|
+
attr_accessor apps_list: Types::AppsListData
|
933
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
934
|
+
SENSITIVE: []
|
935
|
+
end
|
936
|
+
|
937
|
+
class PutAppsListResponse
|
938
|
+
attr_accessor apps_list: Types::AppsListData
|
939
|
+
attr_accessor apps_list_arn: ::String
|
940
|
+
SENSITIVE: []
|
941
|
+
end
|
942
|
+
|
943
|
+
class PutNotificationChannelRequest
|
944
|
+
attr_accessor sns_topic_arn: ::String
|
945
|
+
attr_accessor sns_role_name: ::String
|
946
|
+
SENSITIVE: []
|
947
|
+
end
|
948
|
+
|
949
|
+
class PutPolicyRequest
|
950
|
+
attr_accessor policy: Types::Policy
|
951
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
952
|
+
SENSITIVE: []
|
953
|
+
end
|
954
|
+
|
955
|
+
class PutPolicyResponse
|
956
|
+
attr_accessor policy: Types::Policy
|
957
|
+
attr_accessor policy_arn: ::String
|
958
|
+
SENSITIVE: []
|
959
|
+
end
|
960
|
+
|
961
|
+
class PutProtocolsListRequest
|
962
|
+
attr_accessor protocols_list: Types::ProtocolsListData
|
963
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
964
|
+
SENSITIVE: []
|
965
|
+
end
|
966
|
+
|
967
|
+
class PutProtocolsListResponse
|
968
|
+
attr_accessor protocols_list: Types::ProtocolsListData
|
969
|
+
attr_accessor protocols_list_arn: ::String
|
970
|
+
SENSITIVE: []
|
971
|
+
end
|
972
|
+
|
973
|
+
class PutResourceSetRequest
|
974
|
+
attr_accessor resource_set: Types::ResourceSet
|
975
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
976
|
+
SENSITIVE: []
|
977
|
+
end
|
978
|
+
|
979
|
+
class PutResourceSetResponse
|
980
|
+
attr_accessor resource_set: Types::ResourceSet
|
981
|
+
attr_accessor resource_set_arn: ::String
|
982
|
+
SENSITIVE: []
|
983
|
+
end
|
984
|
+
|
985
|
+
class RegionScope
|
986
|
+
attr_accessor regions: ::Array[::String]
|
987
|
+
attr_accessor all_regions_enabled: bool
|
988
|
+
SENSITIVE: []
|
989
|
+
end
|
990
|
+
|
991
|
+
class RemediationAction
|
992
|
+
attr_accessor description: ::String
|
993
|
+
attr_accessor ec2_create_route_action: Types::EC2CreateRouteAction
|
994
|
+
attr_accessor ec2_replace_route_action: Types::EC2ReplaceRouteAction
|
995
|
+
attr_accessor ec2_delete_route_action: Types::EC2DeleteRouteAction
|
996
|
+
attr_accessor ec2_copy_route_table_action: Types::EC2CopyRouteTableAction
|
997
|
+
attr_accessor ec2_replace_route_table_association_action: Types::EC2ReplaceRouteTableAssociationAction
|
998
|
+
attr_accessor ec2_associate_route_table_action: Types::EC2AssociateRouteTableAction
|
999
|
+
attr_accessor ec2_create_route_table_action: Types::EC2CreateRouteTableAction
|
1000
|
+
attr_accessor fms_policy_update_firewall_creation_config_action: Types::FMSPolicyUpdateFirewallCreationConfigAction
|
1001
|
+
attr_accessor create_network_acl_action: Types::CreateNetworkAclAction
|
1002
|
+
attr_accessor replace_network_acl_association_action: Types::ReplaceNetworkAclAssociationAction
|
1003
|
+
attr_accessor create_network_acl_entries_action: Types::CreateNetworkAclEntriesAction
|
1004
|
+
attr_accessor delete_network_acl_entries_action: Types::DeleteNetworkAclEntriesAction
|
1005
|
+
SENSITIVE: []
|
1006
|
+
end
|
1007
|
+
|
1008
|
+
class RemediationActionWithOrder
|
1009
|
+
attr_accessor remediation_action: Types::RemediationAction
|
1010
|
+
attr_accessor order: ::Integer
|
1011
|
+
SENSITIVE: []
|
1012
|
+
end
|
1013
|
+
|
1014
|
+
class ReplaceNetworkAclAssociationAction
|
1015
|
+
attr_accessor description: ::String
|
1016
|
+
attr_accessor association_id: Types::ActionTarget
|
1017
|
+
attr_accessor network_acl_id: Types::ActionTarget
|
1018
|
+
attr_accessor fms_can_remediate: bool
|
1019
|
+
SENSITIVE: []
|
1020
|
+
end
|
1021
|
+
|
1022
|
+
class Resource
|
1023
|
+
attr_accessor uri: ::String
|
1024
|
+
attr_accessor account_id: ::String
|
1025
|
+
SENSITIVE: []
|
1026
|
+
end
|
1027
|
+
|
1028
|
+
class ResourceNotFoundException
|
1029
|
+
attr_accessor message: ::String
|
1030
|
+
SENSITIVE: []
|
1031
|
+
end
|
1032
|
+
|
1033
|
+
class ResourceSet
|
1034
|
+
attr_accessor id: ::String
|
1035
|
+
attr_accessor name: ::String
|
1036
|
+
attr_accessor description: ::String
|
1037
|
+
attr_accessor update_token: ::String
|
1038
|
+
attr_accessor resource_type_list: ::Array[::String]
|
1039
|
+
attr_accessor last_update_time: ::Time
|
1040
|
+
attr_accessor resource_set_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
|
1041
|
+
SENSITIVE: []
|
1042
|
+
end
|
1043
|
+
|
1044
|
+
class ResourceSetSummary
|
1045
|
+
attr_accessor id: ::String
|
1046
|
+
attr_accessor name: ::String
|
1047
|
+
attr_accessor description: ::String
|
1048
|
+
attr_accessor last_update_time: ::Time
|
1049
|
+
attr_accessor resource_set_status: ("ACTIVE" | "OUT_OF_ADMIN_SCOPE")
|
1050
|
+
SENSITIVE: []
|
1051
|
+
end
|
1052
|
+
|
1053
|
+
class ResourceTag
|
1054
|
+
attr_accessor key: ::String
|
1055
|
+
attr_accessor value: ::String
|
1056
|
+
SENSITIVE: []
|
1057
|
+
end
|
1058
|
+
|
1059
|
+
class ResourceViolation
|
1060
|
+
attr_accessor aws_vpc_security_group_violation: Types::AwsVPCSecurityGroupViolation
|
1061
|
+
attr_accessor aws_ec2_network_interface_violation: Types::AwsEc2NetworkInterfaceViolation
|
1062
|
+
attr_accessor aws_ec2_instance_violation: Types::AwsEc2InstanceViolation
|
1063
|
+
attr_accessor network_firewall_missing_firewall_violation: Types::NetworkFirewallMissingFirewallViolation
|
1064
|
+
attr_accessor network_firewall_missing_subnet_violation: Types::NetworkFirewallMissingSubnetViolation
|
1065
|
+
attr_accessor network_firewall_missing_expected_rt_violation: Types::NetworkFirewallMissingExpectedRTViolation
|
1066
|
+
attr_accessor network_firewall_policy_modified_violation: Types::NetworkFirewallPolicyModifiedViolation
|
1067
|
+
attr_accessor network_firewall_internet_traffic_not_inspected_violation: Types::NetworkFirewallInternetTrafficNotInspectedViolation
|
1068
|
+
attr_accessor network_firewall_invalid_route_configuration_violation: Types::NetworkFirewallInvalidRouteConfigurationViolation
|
1069
|
+
attr_accessor network_firewall_black_hole_route_detected_violation: Types::NetworkFirewallBlackHoleRouteDetectedViolation
|
1070
|
+
attr_accessor network_firewall_unexpected_firewall_routes_violation: Types::NetworkFirewallUnexpectedFirewallRoutesViolation
|
1071
|
+
attr_accessor network_firewall_unexpected_gateway_routes_violation: Types::NetworkFirewallUnexpectedGatewayRoutesViolation
|
1072
|
+
attr_accessor network_firewall_missing_expected_routes_violation: Types::NetworkFirewallMissingExpectedRoutesViolation
|
1073
|
+
attr_accessor dns_rule_group_priority_conflict_violation: Types::DnsRuleGroupPriorityConflictViolation
|
1074
|
+
attr_accessor dns_duplicate_rule_group_violation: Types::DnsDuplicateRuleGroupViolation
|
1075
|
+
attr_accessor dns_rule_group_limit_exceeded_violation: Types::DnsRuleGroupLimitExceededViolation
|
1076
|
+
attr_accessor firewall_subnet_is_out_of_scope_violation: Types::FirewallSubnetIsOutOfScopeViolation
|
1077
|
+
attr_accessor route_has_out_of_scope_endpoint_violation: Types::RouteHasOutOfScopeEndpointViolation
|
1078
|
+
attr_accessor third_party_firewall_missing_firewall_violation: Types::ThirdPartyFirewallMissingFirewallViolation
|
1079
|
+
attr_accessor third_party_firewall_missing_subnet_violation: Types::ThirdPartyFirewallMissingSubnetViolation
|
1080
|
+
attr_accessor third_party_firewall_missing_expected_route_table_violation: Types::ThirdPartyFirewallMissingExpectedRouteTableViolation
|
1081
|
+
attr_accessor firewall_subnet_missing_vpc_endpoint_violation: Types::FirewallSubnetMissingVPCEndpointViolation
|
1082
|
+
attr_accessor invalid_network_acl_entries_violation: Types::InvalidNetworkAclEntriesViolation
|
1083
|
+
attr_accessor possible_remediation_actions: Types::PossibleRemediationActions
|
1084
|
+
SENSITIVE: []
|
1085
|
+
end
|
1086
|
+
|
1087
|
+
class Route
|
1088
|
+
attr_accessor destination_type: ("IPV4" | "IPV6" | "PREFIX_LIST")
|
1089
|
+
attr_accessor target_type: ("GATEWAY" | "CARRIER_GATEWAY" | "INSTANCE" | "LOCAL_GATEWAY" | "NAT_GATEWAY" | "NETWORK_INTERFACE" | "VPC_ENDPOINT" | "VPC_PEERING_CONNECTION" | "EGRESS_ONLY_INTERNET_GATEWAY" | "TRANSIT_GATEWAY")
|
1090
|
+
attr_accessor destination: ::String
|
1091
|
+
attr_accessor target: ::String
|
1092
|
+
SENSITIVE: []
|
1093
|
+
end
|
1094
|
+
|
1095
|
+
class RouteHasOutOfScopeEndpointViolation
|
1096
|
+
attr_accessor subnet_id: ::String
|
1097
|
+
attr_accessor vpc_id: ::String
|
1098
|
+
attr_accessor route_table_id: ::String
|
1099
|
+
attr_accessor violating_routes: ::Array[Types::Route]
|
1100
|
+
attr_accessor subnet_availability_zone: ::String
|
1101
|
+
attr_accessor subnet_availability_zone_id: ::String
|
1102
|
+
attr_accessor current_firewall_subnet_route_table: ::String
|
1103
|
+
attr_accessor firewall_subnet_id: ::String
|
1104
|
+
attr_accessor firewall_subnet_routes: ::Array[Types::Route]
|
1105
|
+
attr_accessor internet_gateway_id: ::String
|
1106
|
+
attr_accessor current_internet_gateway_route_table: ::String
|
1107
|
+
attr_accessor internet_gateway_routes: ::Array[Types::Route]
|
1108
|
+
SENSITIVE: []
|
1109
|
+
end
|
1110
|
+
|
1111
|
+
class SecurityGroupRemediationAction
|
1112
|
+
attr_accessor remediation_action_type: ("REMOVE" | "MODIFY")
|
1113
|
+
attr_accessor description: ::String
|
1114
|
+
attr_accessor remediation_result: Types::SecurityGroupRuleDescription
|
1115
|
+
attr_accessor is_default_action: bool
|
1116
|
+
SENSITIVE: []
|
1117
|
+
end
|
1118
|
+
|
1119
|
+
class SecurityGroupRuleDescription
|
1120
|
+
attr_accessor ipv4_range: ::String
|
1121
|
+
attr_accessor ipv6_range: ::String
|
1122
|
+
attr_accessor prefix_list_id: ::String
|
1123
|
+
attr_accessor protocol: ::String
|
1124
|
+
attr_accessor from_port: ::Integer
|
1125
|
+
attr_accessor to_port: ::Integer
|
1126
|
+
SENSITIVE: []
|
1127
|
+
end
|
1128
|
+
|
1129
|
+
class SecurityServicePolicyData
|
1130
|
+
attr_accessor type: ("WAF" | "WAFV2" | "SHIELD_ADVANCED" | "SECURITY_GROUPS_COMMON" | "SECURITY_GROUPS_CONTENT_AUDIT" | "SECURITY_GROUPS_USAGE_AUDIT" | "NETWORK_FIREWALL" | "DNS_FIREWALL" | "THIRD_PARTY_FIREWALL" | "IMPORT_NETWORK_FIREWALL" | "NETWORK_ACL_COMMON")
|
1131
|
+
attr_accessor managed_service_data: ::String
|
1132
|
+
attr_accessor policy_option: Types::PolicyOption
|
1133
|
+
SENSITIVE: []
|
1134
|
+
end
|
1135
|
+
|
1136
|
+
class StatefulEngineOptions
|
1137
|
+
attr_accessor rule_order: ("STRICT_ORDER" | "DEFAULT_ACTION_ORDER")
|
1138
|
+
SENSITIVE: []
|
1139
|
+
end
|
1140
|
+
|
1141
|
+
class StatefulRuleGroup
|
1142
|
+
attr_accessor rule_group_name: ::String
|
1143
|
+
attr_accessor resource_id: ::String
|
1144
|
+
attr_accessor priority: ::Integer
|
1145
|
+
attr_accessor override: Types::NetworkFirewallStatefulRuleGroupOverride
|
1146
|
+
SENSITIVE: []
|
1147
|
+
end
|
1148
|
+
|
1149
|
+
class StatelessRuleGroup
|
1150
|
+
attr_accessor rule_group_name: ::String
|
1151
|
+
attr_accessor resource_id: ::String
|
1152
|
+
attr_accessor priority: ::Integer
|
1153
|
+
SENSITIVE: []
|
1154
|
+
end
|
1155
|
+
|
1156
|
+
class Tag
|
1157
|
+
attr_accessor key: ::String
|
1158
|
+
attr_accessor value: ::String
|
1159
|
+
SENSITIVE: []
|
1160
|
+
end
|
1161
|
+
|
1162
|
+
class TagResourceRequest
|
1163
|
+
attr_accessor resource_arn: ::String
|
1164
|
+
attr_accessor tag_list: ::Array[Types::Tag]
|
1165
|
+
SENSITIVE: []
|
1166
|
+
end
|
1167
|
+
|
1168
|
+
class TagResourceResponse < Aws::EmptyStructure
|
1169
|
+
end
|
1170
|
+
|
1171
|
+
class ThirdPartyFirewallFirewallPolicy
|
1172
|
+
attr_accessor firewall_policy_id: ::String
|
1173
|
+
attr_accessor firewall_policy_name: ::String
|
1174
|
+
SENSITIVE: []
|
1175
|
+
end
|
1176
|
+
|
1177
|
+
class ThirdPartyFirewallMissingExpectedRouteTableViolation
|
1178
|
+
attr_accessor violation_target: ::String
|
1179
|
+
attr_accessor vpc: ::String
|
1180
|
+
attr_accessor availability_zone: ::String
|
1181
|
+
attr_accessor current_route_table: ::String
|
1182
|
+
attr_accessor expected_route_table: ::String
|
1183
|
+
SENSITIVE: []
|
1184
|
+
end
|
1185
|
+
|
1186
|
+
class ThirdPartyFirewallMissingFirewallViolation
|
1187
|
+
attr_accessor violation_target: ::String
|
1188
|
+
attr_accessor vpc: ::String
|
1189
|
+
attr_accessor availability_zone: ::String
|
1190
|
+
attr_accessor target_violation_reason: ::String
|
1191
|
+
SENSITIVE: []
|
1192
|
+
end
|
1193
|
+
|
1194
|
+
class ThirdPartyFirewallMissingSubnetViolation
|
1195
|
+
attr_accessor violation_target: ::String
|
1196
|
+
attr_accessor vpc: ::String
|
1197
|
+
attr_accessor availability_zone: ::String
|
1198
|
+
attr_accessor target_violation_reason: ::String
|
1199
|
+
SENSITIVE: []
|
1200
|
+
end
|
1201
|
+
|
1202
|
+
class ThirdPartyFirewallPolicy
|
1203
|
+
attr_accessor firewall_deployment_model: ("CENTRALIZED" | "DISTRIBUTED")
|
1204
|
+
SENSITIVE: []
|
1205
|
+
end
|
1206
|
+
|
1207
|
+
class UntagResourceRequest
|
1208
|
+
attr_accessor resource_arn: ::String
|
1209
|
+
attr_accessor tag_keys: ::Array[::String]
|
1210
|
+
SENSITIVE: []
|
1211
|
+
end
|
1212
|
+
|
1213
|
+
class UntagResourceResponse < Aws::EmptyStructure
|
1214
|
+
end
|
1215
|
+
|
1216
|
+
class ViolationDetail
|
1217
|
+
attr_accessor policy_id: ::String
|
1218
|
+
attr_accessor member_account: ::String
|
1219
|
+
attr_accessor resource_id: ::String
|
1220
|
+
attr_accessor resource_type: ::String
|
1221
|
+
attr_accessor resource_violations: ::Array[Types::ResourceViolation]
|
1222
|
+
attr_accessor resource_tags: ::Array[Types::Tag]
|
1223
|
+
attr_accessor resource_description: ::String
|
1224
|
+
SENSITIVE: []
|
1225
|
+
end
|
1226
|
+
end
|
1227
|
+
end
|