aws-sdk-guardduty 1.107.0 → 1.108.0

data/lib/aws-sdk-guardduty.rb

@@ -54,7 +54,7 @@ module Aws::GuardDuty
   autoload :EndpointProvider, 'aws-sdk-guardduty/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-guardduty/endpoints'
 
-  GEM_VERSION = '1.107.0'
+  GEM_VERSION = '1.108.0'
 
 end
 

data/sig/types.rbs

@@ -40,6 +40,13 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class AccessKey
+      attr_accessor principal_id: ::String
+      attr_accessor user_name: ::String
+      attr_accessor user_type: ::String
+      SENSITIVE: []
+    end
+
     class AccessKeyDetails
       attr_accessor access_key_id: ::String
       attr_accessor principal_id: ::String
@@ -48,6 +55,12 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class Account
+      attr_accessor uid: ::String
+      attr_accessor name: ::String
+      SENSITIVE: []
+    end
+
     class AccountDetail
       attr_accessor account_id: ::String
       attr_accessor email: ::String
@@ -87,6 +100,13 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class Actor
+      attr_accessor id: ::String
+      attr_accessor user: Types::User
+      attr_accessor session: Types::Session
+      SENSITIVE: []
+    end
+
     class AddonDetails
       attr_accessor addon_version: ::String
       attr_accessor addon_status: ::String
@@ -139,6 +159,12 @@ module Aws::GuardDuty
     class ArchiveFindingsResponse < Aws::EmptyStructure
     end
 
+    class AutonomousSystem
+      attr_accessor name: ::String
+      attr_accessor number: ::Integer
+      SENSITIVE: []
+    end
+
     class AwsApiCallAction
       attr_accessor api: ::String
       attr_accessor caller_type: ::String
@@ -623,6 +649,7 @@ module Aws::GuardDuty
 
     class Detection
       attr_accessor anomaly: Types::Anomaly
+      attr_accessor sequence: Types::Sequence
       SENSITIVE: []
     end
 
@@ -725,6 +752,29 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class Ec2Instance
+      attr_accessor availability_zone: ::String
+      attr_accessor image_description: ::String
+      attr_accessor instance_state: ::String
+      attr_accessor iam_instance_profile: Types::IamInstanceProfile
+      attr_accessor instance_type: ::String
+      attr_accessor outpost_arn: ::String
+      attr_accessor platform: ::String
+      attr_accessor product_codes: ::Array[Types::ProductCode]
+      attr_accessor ec2_network_interface_uids: ::Array[::String]
+      SENSITIVE: []
+    end
+
+    class Ec2NetworkInterface
+      attr_accessor ipv_6_addresses: ::Array[::String]
+      attr_accessor private_ip_addresses: ::Array[Types::PrivateIpAddressDetails]
+      attr_accessor public_ip: ::String
+      attr_accessor security_groups: ::Array[Types::SecurityGroup]
+      attr_accessor sub_net_id: ::String
+      attr_accessor vpc_id: ::String
+      SENSITIVE: []
+    end
+
     class EcsClusterDetails
       attr_accessor name: ::String
       attr_accessor arn: ::String
@@ -815,6 +865,7 @@ module Aws::GuardDuty
       attr_accessor title: ::String
       attr_accessor type: ::String
       attr_accessor updated_at: ::String
+      attr_accessor associated_attack_sequence_arn: ::String
       SENSITIVE: []
     end
 
@@ -1097,6 +1148,13 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class Indicator
+      attr_accessor key: ("SUSPICIOUS_USER_AGENT" | "SUSPICIOUS_NETWORK" | "MALICIOUS_IP" | "TOR_IP" | "ATTACK_TACTIC" | "HIGH_RISK_API" | "ATTACK_TECHNIQUE" | "UNUSUAL_API_FOR_ACCOUNT" | "UNUSUAL_ASN_FOR_ACCOUNT" | "UNUSUAL_ASN_FOR_USER")
+      attr_accessor values: ::Array[::String]
+      attr_accessor title: ::String
+      SENSITIVE: []
+    end
+
     class InstanceDetails
       attr_accessor availability_zone: ::String
       attr_accessor iam_instance_profile: Types::IamInstanceProfile
@@ -1536,6 +1594,11 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class NetworkConnection
+      attr_accessor direction: ("INBOUND" | "OUTBOUND")
+      SENSITIVE: []
+    end
+
     class NetworkConnectionAction
       attr_accessor blocked: bool
       attr_accessor connection_direction: ::String
@@ -1548,6 +1611,25 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class NetworkEndpoint
+      attr_accessor id: ::String
+      attr_accessor ip: ::String
+      attr_accessor domain: ::String
+      attr_accessor port: ::Integer
+      attr_accessor location: Types::NetworkGeoLocation
+      attr_accessor autonomous_system: Types::AutonomousSystem
+      attr_accessor connection: Types::NetworkConnection
+      SENSITIVE: []
+    end
+
+    class NetworkGeoLocation
+      attr_accessor city: ::String
+      attr_accessor country: ::String
+      attr_accessor latitude: ::Float
+      attr_accessor longitude: ::Float
+      SENSITIVE: []
+    end
+
     class NetworkInterface
       attr_accessor ipv_6_addresses: ::Array[::String]
       attr_accessor network_interface_id: ::String
@@ -1762,6 +1844,14 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class PublicAccessConfiguration
+      attr_accessor public_acl_access: ("BLOCKED" | "ALLOWED")
+      attr_accessor public_policy_access: ("BLOCKED" | "ALLOWED")
+      attr_accessor public_acl_ignore_behavior: ("IGNORED" | "NOT_IGNORED")
+      attr_accessor public_bucket_restrict_behavior: ("RESTRICTED" | "NOT_RESTRICTED")
+      SENSITIVE: []
+    end
+
     class RdsDbInstanceDetails
       attr_accessor db_instance_identifier: ::String
       attr_accessor engine: ::String
@@ -1837,6 +1927,15 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class ResourceData
+      attr_accessor s3_bucket: Types::S3Bucket
+      attr_accessor ec2_instance: Types::Ec2Instance
+      attr_accessor access_key: Types::AccessKey
+      attr_accessor ec2_network_interface: Types::Ec2NetworkInterface
+      attr_accessor s3_object: Types::S3Object
+      SENSITIVE: []
+    end
+
     class ResourceDetails
       attr_accessor instance_arn: ::String
       SENSITIVE: []
@@ -1857,6 +1956,19 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class ResourceV2
+      attr_accessor uid: ::String
+      attr_accessor name: ::String
+      attr_accessor account_id: ::String
+      attr_accessor resource_type: ("EC2_INSTANCE" | "EC2_NETWORK_INTERFACE" | "S3_BUCKET" | "S3_OBJECT" | "ACCESS_KEY")
+      attr_accessor region: ::String
+      attr_accessor service: ::String
+      attr_accessor cloud_partition: ::String
+      attr_accessor tags: ::Array[Types::Tag]
+      attr_accessor data: Types::ResourceData
+      SENSITIVE: []
+    end
+
     class RuntimeContext
       attr_accessor modifying_process: Types::ProcessDetails
       attr_accessor modified_at: ::Time
@@ -1892,6 +2004,20 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class S3Bucket
+      attr_accessor owner_id: ::String
+      attr_accessor created_at: ::Time
+      attr_accessor encryption_type: ::String
+      attr_accessor encryption_key_arn: ::String
+      attr_accessor effective_permission: ::String
+      attr_accessor public_read_access: ("BLOCKED" | "ALLOWED")
+      attr_accessor public_write_access: ("BLOCKED" | "ALLOWED")
+      attr_accessor account_public_access: Types::PublicAccessConfiguration
+      attr_accessor bucket_public_access: Types::PublicAccessConfiguration
+      attr_accessor s3_object_uids: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class S3BucketDetail
       attr_accessor arn: ::String
       attr_accessor name: ::String
@@ -1915,6 +2041,13 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class S3Object
+      attr_accessor etag: ::String
+      attr_accessor key: ::String
+      attr_accessor version_id: ::String
+      SENSITIVE: []
+    end
+
     class S3ObjectDetail
       attr_accessor object_arn: ::String
       attr_accessor key: ::String
@@ -2018,6 +2151,17 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class Sequence
+      attr_accessor uid: ::String
+      attr_accessor description: ::String
+      attr_accessor actors: ::Array[Types::Actor]
+      attr_accessor resources: ::Array[Types::ResourceV2]
+      attr_accessor endpoints: ::Array[Types::NetworkEndpoint]
+      attr_accessor signals: ::Array[Types::Signal]
+      attr_accessor sequence_indicators: ::Array[Types::Indicator]
+      SENSITIVE: []
+    end
+
     class Service
       attr_accessor action: Types::Action
       attr_accessor evidence: Types::Evidence
@@ -2044,6 +2188,14 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class Session
+      attr_accessor uid: ::String
+      attr_accessor mfa_status: ("ENABLED" | "DISABLED")
+      attr_accessor created_time: ::Time
+      attr_accessor issuer: ::String
+      SENSITIVE: []
+    end
+
     class SeverityStatistics
       attr_accessor last_generated_at: ::Time
       attr_accessor severity: ::Float
@@ -2051,6 +2203,24 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class Signal
+      attr_accessor uid: ::String
+      attr_accessor type: ("FINDING" | "CLOUD_TRAIL" | "S3_DATA_EVENTS")
+      attr_accessor description: ::String
+      attr_accessor name: ::String
+      attr_accessor created_at: ::Time
+      attr_accessor updated_at: ::Time
+      attr_accessor first_seen_at: ::Time
+      attr_accessor last_seen_at: ::Time
+      attr_accessor severity: ::Float
+      attr_accessor count: ::Integer
+      attr_accessor resource_uids: ::Array[::String]
+      attr_accessor actor_ids: ::Array[::String]
+      attr_accessor endpoint_ids: ::Array[::String]
+      attr_accessor signal_indicators: ::Array[Types::Indicator]
+      SENSITIVE: []
+    end
+
     class SortCriteria
       attr_accessor attribute_name: ::String
       attr_accessor order_by: ("ASC" | "DESC")
@@ -2351,6 +2521,15 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class User
+      attr_accessor name: ::String
+      attr_accessor uid: ::String
+      attr_accessor type: ::String
+      attr_accessor credential_uid: ::String
+      attr_accessor account: Types::Account
+      SENSITIVE: []
+    end
+
     class Volume
       attr_accessor name: ::String
       attr_accessor host_path: Types::HostPath

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-guardduty
 version: !ruby/object:Gem::Version
-  version: 1.107.0
+  version: 1.108.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-18 00:00:00.000000000 Z
+date: 2024-12-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core