aws-sdk-guardduty 1.156.0 → 1.158.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f9f3ae0d8f62b98639baa5a0ed0508aebe992e9ed82e9949229bf6dc2c3b4e7d
-  data.tar.gz: 0f154c1b0b36ee8d5b55fb1550a34dd92543acc327b9623cc2e4fd6dfddd4243
+  metadata.gz: c2874415f97ca671121b11e842e70262a29d5a3097ecfab0026db36bf91bcfff
+  data.tar.gz: 54aaf687759db93ee24391bf58b57a930129d5f61517ce4e5bb5cd2da0f2b8c7
 SHA512:
-  metadata.gz: ff13f206facf3e3a4ba048d37d1d1e972cf0379b3fed241ccc12fd5777c4e97d44683b8c6870d0d1e16ec16b8c0dd1bc8311f91d5e75089fa075231ee7a69f71
-  data.tar.gz: 35c0349483cfe7e20ad2076e5204658ea4ff1ba751132d3194cb172c85226f03ca9ad8f697b5cf054f12c2fd4a3fa9dfe98e71358447f45f57c60ad41169d898
+  metadata.gz: 7db3fa4d4d89964f7f7eb6e146be73f330e02b32a4e229c488de2b445862bd76302d0509588724c7a137eebb77e2fa6ff05e1eef6256f29a9249010b57923e01
+  data.tar.gz: 1038c6949fce6c1fe7cbecc45c00df3230b946d0ce3da64b484977822aa3fd447b2bdf4e68514a9b030a3836ceb9ee7f966be703fb879fc96ea54a0df361fe9b

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.158.0 (2026-07-22)
+------------------
+
+* Feature - Amazon GuardDuty now returns filter lifecycle metadata in GetFilter responses. The response includes createdAt and updatedAt timestamps and a version number that increments on each update, giving you visibility into when a filter was created and last modified.
+
+1.157.0 (2026-07-13)
+------------------
+
+* Feature - GuardDuty AI Protection is now publicly available. Findings include Bedrock guardrail details, model details, observation numbers, and continuous scan details. GuardrailArn and GuardrailVersion are deprecated in favor of the guardrails list.
+
 1.156.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.156.0
+1.158.0

data/lib/aws-sdk-guardduty/client.rb

@@ -678,7 +678,7 @@ module Aws::GuardDuty
     #     },
     #     features: [
     #       {
-    #         name: "S3_DATA_EVENTS", # accepts S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, RUNTIME_MONITORING, AI_ANALYST
+    #         name: "S3_DATA_EVENTS", # accepts S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, RUNTIME_MONITORING, AI_PROTECTION, AI_ANALYST
     #         status: "ENABLED", # accepts ENABLED, DISABLED
     #         additional_configuration: [
     #           {
@@ -3354,7 +3354,7 @@ module Aws::GuardDuty
     #   resp.data_sources.kubernetes.audit_logs.auto_enable #=> Boolean
     #   resp.data_sources.malware_protection.scan_ec2_instance_with_findings.ebs_volumes.auto_enable #=> Boolean
     #   resp.features #=> Array
-    #   resp.features[0].name #=> String, one of "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING"
+    #   resp.features[0].name #=> String, one of "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING", "AI_PROTECTION"
     #   resp.features[0].auto_enable #=> String, one of "NEW", "NONE", "ALL"
     #   resp.features[0].additional_configuration #=> Array
     #   resp.features[0].additional_configuration[0].name #=> String, one of "EKS_ADDON_MANAGEMENT", "ECS_FARGATE_AGENT_MANAGEMENT", "EC2_AGENT_MANAGEMENT"
@@ -3785,7 +3785,7 @@ module Aws::GuardDuty
     #   resp.tags #=> Hash
     #   resp.tags["TagKey"] #=> String
     #   resp.features #=> Array
-    #   resp.features[0].name #=> String, one of "FLOW_LOGS", "CLOUD_TRAIL", "DNS_LOGS", "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING", "AI_ANALYST"
+    #   resp.features[0].name #=> String, one of "FLOW_LOGS", "CLOUD_TRAIL", "DNS_LOGS", "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING", "AI_PROTECTION", "AI_ANALYST"
     #   resp.features[0].status #=> String, one of "ENABLED", "DISABLED"
     #   resp.features[0].updated_at #=> Time
     #   resp.features[0].additional_configuration #=> Array
@@ -3825,6 +3825,9 @@ module Aws::GuardDuty
     #   * {Types::GetFilterResponse#rank #rank} => Integer
     #   * {Types::GetFilterResponse#finding_criteria #finding_criteria} => Types::FindingCriteria
     #   * {Types::GetFilterResponse#tags #tags} => Hash<String,String>
+    #   * {Types::GetFilterResponse#created_at #created_at} => Time
+    #   * {Types::GetFilterResponse#updated_at #updated_at} => Time
+    #   * {Types::GetFilterResponse#version #version} => Integer
     #
     # @example Request syntax with placeholder values
     #
@@ -3862,6 +3865,9 @@ module Aws::GuardDuty
     #   resp.finding_criteria.criterion["String"].not_matches[0] #=> String
     #   resp.tags #=> Hash
     #   resp.tags["TagKey"] #=> String
+    #   resp.created_at #=> Time
+    #   resp.updated_at #=> Time
+    #   resp.version #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetFilter AWS API Documentation
     #
@@ -4127,6 +4133,21 @@ module Aws::GuardDuty
     #   resp.findings[0].resource.ec2_image_details.image_arn #=> String
     #   resp.findings[0].resource.recovery_point_details.recovery_point_arn #=> String
     #   resp.findings[0].resource.recovery_point_details.backup_vault_name #=> String
+    #   resp.findings[0].resource.recovery_point_details.continuous_scan_details.start_time #=> Time
+    #   resp.findings[0].resource.recovery_point_details.continuous_scan_details.end_time #=> Time
+    #   resp.findings[0].resource.bedrock_guardrail_details.guardrail_arn #=> String
+    #   resp.findings[0].resource.bedrock_guardrail_details.guardrail_version #=> String
+    #   resp.findings[0].resource.bedrock_guardrail_details.guardrails #=> Array
+    #   resp.findings[0].resource.bedrock_guardrail_details.guardrails[0].arn #=> String
+    #   resp.findings[0].resource.bedrock_guardrail_details.guardrails[0].version #=> String
+    #   resp.findings[0].resource.bedrock_guardrail_details.guardrail_action #=> String, one of "GUARDRAIL_INTERVENED", "NONE"
+    #   resp.findings[0].resource.bedrock_guardrail_details.guardrail_source #=> String, one of "INPUT", "OUTPUT"
+    #   resp.findings[0].resource.bedrock_guardrail_details.content_policy_filters #=> Array
+    #   resp.findings[0].resource.bedrock_guardrail_details.content_policy_filters[0].type #=> String, one of "PROMPT_ATTACK", "JAILBREAK", "HATE", "INSULTS", "SEXUAL", "VIOLENCE", "MISCONDUCT"
+    #   resp.findings[0].resource.bedrock_guardrail_details.content_policy_filters[0].confidence #=> String, one of "HIGH", "MEDIUM", "LOW", "NONE"
+    #   resp.findings[0].resource.bedrock_guardrail_details.content_policy_filters[0].action #=> String, one of "BLOCKED", "NONE"
+    #   resp.findings[0].resource.model_details #=> Array
+    #   resp.findings[0].resource.model_details[0].model_id #=> String
     #   resp.findings[0].schema_version #=> String
     #   resp.findings[0].service.action.action_type #=> String
     #   resp.findings[0].service.action.aws_api_call_action.api #=> String
@@ -4383,16 +4404,20 @@ module Aws::GuardDuty
     #   resp.findings[0].service.detection.anomaly.profiles #=> Hash
     #   resp.findings[0].service.detection.anomaly.profiles["String"] #=> Hash
     #   resp.findings[0].service.detection.anomaly.profiles["String"]["String"] #=> Array
-    #   resp.findings[0].service.detection.anomaly.profiles["String"]["String"][0].profile_type #=> String, one of "FREQUENCY"
-    #   resp.findings[0].service.detection.anomaly.profiles["String"]["String"][0].profile_subtype #=> String, one of "FREQUENT", "INFREQUENT", "UNSEEN", "RARE"
+    #   resp.findings[0].service.detection.anomaly.profiles["String"]["String"][0].profile_type #=> String, one of "FREQUENCY", "VOLUME"
+    #   resp.findings[0].service.detection.anomaly.profiles["String"]["String"][0].profile_subtype #=> String, one of "FREQUENT", "INFREQUENT", "UNSEEN", "RARE", "COUNT", "AVERAGE"
     #   resp.findings[0].service.detection.anomaly.profiles["String"]["String"][0].observations.text #=> Array
     #   resp.findings[0].service.detection.anomaly.profiles["String"]["String"][0].observations.text[0] #=> String
+    #   resp.findings[0].service.detection.anomaly.profiles["String"]["String"][0].observations.number #=> Array
+    #   resp.findings[0].service.detection.anomaly.profiles["String"]["String"][0].observations.number[0] #=> Integer
     #   resp.findings[0].service.detection.anomaly.unusual.behavior #=> Hash
     #   resp.findings[0].service.detection.anomaly.unusual.behavior["String"] #=> Hash
-    #   resp.findings[0].service.detection.anomaly.unusual.behavior["String"]["String"].profile_type #=> String, one of "FREQUENCY"
-    #   resp.findings[0].service.detection.anomaly.unusual.behavior["String"]["String"].profile_subtype #=> String, one of "FREQUENT", "INFREQUENT", "UNSEEN", "RARE"
+    #   resp.findings[0].service.detection.anomaly.unusual.behavior["String"]["String"].profile_type #=> String, one of "FREQUENCY", "VOLUME"
+    #   resp.findings[0].service.detection.anomaly.unusual.behavior["String"]["String"].profile_subtype #=> String, one of "FREQUENT", "INFREQUENT", "UNSEEN", "RARE", "COUNT", "AVERAGE"
     #   resp.findings[0].service.detection.anomaly.unusual.behavior["String"]["String"].observations.text #=> Array
     #   resp.findings[0].service.detection.anomaly.unusual.behavior["String"]["String"].observations.text[0] #=> String
+    #   resp.findings[0].service.detection.anomaly.unusual.behavior["String"]["String"].observations.number #=> Array
+    #   resp.findings[0].service.detection.anomaly.unusual.behavior["String"]["String"].observations.number[0] #=> Integer
     #   resp.findings[0].service.detection.sequence.uid #=> String
     #   resp.findings[0].service.detection.sequence.description #=> String
     #   resp.findings[0].service.detection.sequence.actors #=> Array
@@ -5134,7 +5159,7 @@ module Aws::GuardDuty
     #   resp.member_data_source_configurations[0].data_sources.malware_protection.scan_ec2_instance_with_findings.ebs_volumes.reason #=> String
     #   resp.member_data_source_configurations[0].data_sources.malware_protection.service_role #=> String
     #   resp.member_data_source_configurations[0].features #=> Array
-    #   resp.member_data_source_configurations[0].features[0].name #=> String, one of "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING"
+    #   resp.member_data_source_configurations[0].features[0].name #=> String, one of "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING", "AI_PROTECTION"
     #   resp.member_data_source_configurations[0].features[0].status #=> String, one of "ENABLED", "DISABLED"
     #   resp.member_data_source_configurations[0].features[0].updated_at #=> Time
     #   resp.member_data_source_configurations[0].features[0].additional_configuration #=> Array
@@ -5227,7 +5252,7 @@ module Aws::GuardDuty
     #   resp.organization_details.organization_statistics.active_accounts_count #=> Integer
     #   resp.organization_details.organization_statistics.enabled_accounts_count #=> Integer
     #   resp.organization_details.organization_statistics.count_by_feature #=> Array
-    #   resp.organization_details.organization_statistics.count_by_feature[0].name #=> String, one of "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING"
+    #   resp.organization_details.organization_statistics.count_by_feature[0].name #=> String, one of "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "RUNTIME_MONITORING", "AI_PROTECTION"
     #   resp.organization_details.organization_statistics.count_by_feature[0].enabled_accounts_count #=> Integer
     #   resp.organization_details.organization_statistics.count_by_feature[0].additional_configuration #=> Array
     #   resp.organization_details.organization_statistics.count_by_feature[0].additional_configuration[0].name #=> String, one of "EKS_ADDON_MANAGEMENT", "ECS_FARGATE_AGENT_MANAGEMENT", "EC2_AGENT_MANAGEMENT"
@@ -5281,7 +5306,7 @@ module Aws::GuardDuty
     #   resp.accounts[0].data_sources.kubernetes.audit_logs.free_trial_days_remaining #=> Integer
     #   resp.accounts[0].data_sources.malware_protection.scan_ec2_instance_with_findings.free_trial_days_remaining #=> Integer
     #   resp.accounts[0].features #=> Array
-    #   resp.accounts[0].features[0].name #=> String, one of "FLOW_LOGS", "CLOUD_TRAIL", "DNS_LOGS", "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "EC2_RUNTIME_MONITORING", "FARGATE_RUNTIME_MONITORING"
+    #   resp.accounts[0].features[0].name #=> String, one of "FLOW_LOGS", "CLOUD_TRAIL", "DNS_LOGS", "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "EC2_RUNTIME_MONITORING", "FARGATE_RUNTIME_MONITORING", "AI_PROTECTION"
     #   resp.accounts[0].features[0].free_trial_days_remaining #=> Integer
     #   resp.unprocessed_accounts #=> Array
     #   resp.unprocessed_accounts[0].account_id #=> String
@@ -5515,7 +5540,7 @@ module Aws::GuardDuty
     #       account_ids: ["AccountId"],
     #       data_sources: ["FLOW_LOGS"], # accepts FLOW_LOGS, CLOUD_TRAIL, DNS_LOGS, S3_LOGS, KUBERNETES_AUDIT_LOGS, EC2_MALWARE_SCAN
     #       resources: ["String"],
-    #       features: ["FLOW_LOGS"], # accepts FLOW_LOGS, CLOUD_TRAIL, DNS_LOGS, S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, EC2_RUNTIME_MONITORING, FARGATE_RUNTIME_MONITORING, RDS_DBI_PROTECTION_PROVISIONED, RDS_DBI_PROTECTION_SERVERLESS
+    #       features: ["FLOW_LOGS"], # accepts FLOW_LOGS, CLOUD_TRAIL, DNS_LOGS, S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, EC2_RUNTIME_MONITORING, FARGATE_RUNTIME_MONITORING, RDS_DBI_PROTECTION_PROVISIONED, RDS_DBI_PROTECTION_SERVERLESS, AI_PROTECTION
     #     },
     #     unit: "String",
     #     max_results: 1,
@@ -5529,7 +5554,7 @@ module Aws::GuardDuty
     #   resp.usage_statistics.sum_by_account[0].total.amount #=> String
     #   resp.usage_statistics.sum_by_account[0].total.unit #=> String
     #   resp.usage_statistics.top_accounts_by_feature #=> Array
-    #   resp.usage_statistics.top_accounts_by_feature[0].feature #=> String, one of "FLOW_LOGS", "CLOUD_TRAIL", "DNS_LOGS", "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "EC2_RUNTIME_MONITORING", "FARGATE_RUNTIME_MONITORING", "RDS_DBI_PROTECTION_PROVISIONED", "RDS_DBI_PROTECTION_SERVERLESS"
+    #   resp.usage_statistics.top_accounts_by_feature[0].feature #=> String, one of "FLOW_LOGS", "CLOUD_TRAIL", "DNS_LOGS", "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "EC2_RUNTIME_MONITORING", "FARGATE_RUNTIME_MONITORING", "RDS_DBI_PROTECTION_PROVISIONED", "RDS_DBI_PROTECTION_SERVERLESS", "AI_PROTECTION"
     #   resp.usage_statistics.top_accounts_by_feature[0].accounts #=> Array
     #   resp.usage_statistics.top_accounts_by_feature[0].accounts[0].account_id #=> String
     #   resp.usage_statistics.top_accounts_by_feature[0].accounts[0].total.amount #=> String
@@ -5547,7 +5572,7 @@ module Aws::GuardDuty
     #   resp.usage_statistics.top_resources[0].total.amount #=> String
     #   resp.usage_statistics.top_resources[0].total.unit #=> String
     #   resp.usage_statistics.sum_by_feature #=> Array
-    #   resp.usage_statistics.sum_by_feature[0].feature #=> String, one of "FLOW_LOGS", "CLOUD_TRAIL", "DNS_LOGS", "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "EC2_RUNTIME_MONITORING", "FARGATE_RUNTIME_MONITORING", "RDS_DBI_PROTECTION_PROVISIONED", "RDS_DBI_PROTECTION_SERVERLESS"
+    #   resp.usage_statistics.sum_by_feature[0].feature #=> String, one of "FLOW_LOGS", "CLOUD_TRAIL", "DNS_LOGS", "S3_DATA_EVENTS", "EKS_AUDIT_LOGS", "EBS_MALWARE_PROTECTION", "RDS_LOGIN_EVENTS", "LAMBDA_NETWORK_LOGS", "EKS_RUNTIME_MONITORING", "EC2_RUNTIME_MONITORING", "FARGATE_RUNTIME_MONITORING", "RDS_DBI_PROTECTION_PROVISIONED", "RDS_DBI_PROTECTION_SERVERLESS", "AI_PROTECTION"
     #   resp.usage_statistics.sum_by_feature[0].total.amount #=> String
     #   resp.usage_statistics.sum_by_feature[0].total.unit #=> String
     #   resp.next_token #=> String
@@ -7098,7 +7123,7 @@ module Aws::GuardDuty
     #     },
     #     features: [
     #       {
-    #         name: "S3_DATA_EVENTS", # accepts S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, RUNTIME_MONITORING, AI_ANALYST
+    #         name: "S3_DATA_EVENTS", # accepts S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, RUNTIME_MONITORING, AI_PROTECTION, AI_ANALYST
     #         status: "ENABLED", # accepts ENABLED, DISABLED
     #         additional_configuration: [
     #           {
@@ -8793,7 +8818,7 @@ module Aws::GuardDuty
     #     },
     #     features: [
     #       {
-    #         name: "S3_DATA_EVENTS", # accepts S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, RUNTIME_MONITORING
+    #         name: "S3_DATA_EVENTS", # accepts S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, RUNTIME_MONITORING, AI_PROTECTION
     #         status: "ENABLED", # accepts ENABLED, DISABLED
     #         additional_configuration: [
     #           {
@@ -8923,7 +8948,7 @@ module Aws::GuardDuty
     #     },
     #     features: [
     #       {
-    #         name: "S3_DATA_EVENTS", # accepts S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, RUNTIME_MONITORING
+    #         name: "S3_DATA_EVENTS", # accepts S3_DATA_EVENTS, EKS_AUDIT_LOGS, EBS_MALWARE_PROTECTION, RDS_LOGIN_EVENTS, LAMBDA_NETWORK_LOGS, EKS_RUNTIME_MONITORING, RUNTIME_MONITORING, AI_PROTECTION
     #         auto_enable: "NEW", # accepts NEW, NONE, ALL
     #         additional_configuration: [
     #           {
@@ -9178,7 +9203,7 @@ module Aws::GuardDuty
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-guardduty'
-      context[:gem_version] = '1.156.0'
+      context[:gem_version] = '1.158.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-guardduty/client_api.rb

@@ -59,6 +59,13 @@ module Aws::GuardDuty
     AutoscalingAutoScalingGroup = Shapes::StructureShape.new(name: 'AutoscalingAutoScalingGroup')
     AwsApiCallAction = Shapes::StructureShape.new(name: 'AwsApiCallAction')
     BadRequestException = Shapes::StructureShape.new(name: 'BadRequestException')
+    BedrockGuardrail = Shapes::StructureShape.new(name: 'BedrockGuardrail')
+    BedrockGuardrailArnString = Shapes::StringShape.new(name: 'BedrockGuardrailArnString')
+    BedrockGuardrailDetails = Shapes::StructureShape.new(name: 'BedrockGuardrailDetails')
+    BedrockGuardrailDetailsGuardrailArnString = Shapes::StringShape.new(name: 'BedrockGuardrailDetailsGuardrailArnString')
+    BedrockGuardrailDetailsGuardrailVersionString = Shapes::StringShape.new(name: 'BedrockGuardrailDetailsGuardrailVersionString')
+    BedrockGuardrailVersionString = Shapes::StringShape.new(name: 'BedrockGuardrailVersionString')
+    BedrockGuardrails = Shapes::ListShape.new(name: 'BedrockGuardrails')
     Behavior = Shapes::MapShape.new(name: 'Behavior')
     BlockPublicAccess = Shapes::StructureShape.new(name: 'BlockPublicAccess')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
@@ -73,6 +80,7 @@ module Aws::GuardDuty
     ClusterStatus = Shapes::StringShape.new(name: 'ClusterStatus')
     Condition = Shapes::StructureShape.new(name: 'Condition')
     Confidence = Shapes::StringShape.new(name: 'Confidence')
+    ConfidenceLevel = Shapes::StringShape.new(name: 'ConfidenceLevel')
     ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
     Container = Shapes::StructureShape.new(name: 'Container')
     ContainerFindingResource = Shapes::StructureShape.new(name: 'ContainerFindingResource')
@@ -81,6 +89,10 @@ module Aws::GuardDuty
     ContainerUid = Shapes::StringShape.new(name: 'ContainerUid')
     ContainerUids = Shapes::ListShape.new(name: 'ContainerUids')
     Containers = Shapes::ListShape.new(name: 'Containers')
+    ContentPolicyFilter = Shapes::StructureShape.new(name: 'ContentPolicyFilter')
+    ContentPolicyFilterAction = Shapes::StringShape.new(name: 'ContentPolicyFilterAction')
+    ContentPolicyFilterType = Shapes::StringShape.new(name: 'ContentPolicyFilterType')
+    ContentPolicyFilters = Shapes::ListShape.new(name: 'ContentPolicyFilters')
     ContinuousScanDetails = Shapes::StructureShape.new(name: 'ContinuousScanDetails')
     CountByCoverageStatus = Shapes::MapShape.new(name: 'CountByCoverageStatus')
     CountByResourceType = Shapes::MapShape.new(name: 'CountByResourceType')
@@ -241,6 +253,7 @@ module Aws::GuardDuty
     FilterName = Shapes::StringShape.new(name: 'FilterName')
     FilterNames = Shapes::ListShape.new(name: 'FilterNames')
     FilterRank = Shapes::IntegerShape.new(name: 'FilterRank')
+    FilterVersion = Shapes::IntegerShape.new(name: 'FilterVersion')
     Finding = Shapes::StructureShape.new(name: 'Finding')
     FindingCriteria = Shapes::StructureShape.new(name: 'FindingCriteria')
     FindingId = Shapes::StringShape.new(name: 'FindingId')
@@ -310,6 +323,8 @@ module Aws::GuardDuty
     GroupedBySeverity = Shapes::ListShape.new(name: 'GroupedBySeverity')
     Groups = Shapes::ListShape.new(name: 'Groups')
     GuardDutyArn = Shapes::StringShape.new(name: 'GuardDutyArn')
+    GuardrailAction = Shapes::StringShape.new(name: 'GuardrailAction')
+    GuardrailSource = Shapes::StringShape.new(name: 'GuardrailSource')
     HighestSeverityThreatDetails = Shapes::StructureShape.new(name: 'HighestSeverityThreatDetails')
     HostPath = Shapes::StructureShape.new(name: 'HostPath')
     IamInstanceProfile = Shapes::StructureShape.new(name: 'IamInstanceProfile')
@@ -451,6 +466,9 @@ module Aws::GuardDuty
     Members = Shapes::ListShape.new(name: 'Members')
     MemoryRegionsList = Shapes::ListShape.new(name: 'MemoryRegionsList')
     MfaStatus = Shapes::StringShape.new(name: 'MfaStatus')
+    ModelDetail = Shapes::StructureShape.new(name: 'ModelDetail')
+    ModelDetailModelIdString = Shapes::StringShape.new(name: 'ModelDetailModelIdString')
+    ModelDetails = Shapes::ListShape.new(name: 'ModelDetails')
     Name = Shapes::StringShape.new(name: 'Name')
     Neq = Shapes::ListShape.new(name: 'Neq')
     NetworkConnection = Shapes::StructureShape.new(name: 'NetworkConnection')
@@ -467,6 +485,7 @@ module Aws::GuardDuty
     NotEquals = Shapes::ListShape.new(name: 'NotEquals')
     NotMatch = Shapes::StringShape.new(name: 'NotMatch')
     NotMatches = Shapes::ListShape.new(name: 'NotMatches')
+    ObservationNumbers = Shapes::ListShape.new(name: 'ObservationNumbers')
     ObservationTexts = Shapes::ListShape.new(name: 'ObservationTexts')
     Observations = Shapes::StructureShape.new(name: 'Observations')
     OrderBy = Shapes::StringShape.new(name: 'OrderBy')
@@ -872,6 +891,20 @@ module Aws::GuardDuty
     BadRequestException.add_member(:type, Shapes::ShapeRef.new(shape: String, location_name: "type"))
     BadRequestException.struct_class = Types::BadRequestException
 
+    BedrockGuardrail.add_member(:arn, Shapes::ShapeRef.new(shape: BedrockGuardrailArnString, location_name: "arn"))
+    BedrockGuardrail.add_member(:version, Shapes::ShapeRef.new(shape: BedrockGuardrailVersionString, location_name: "version"))
+    BedrockGuardrail.struct_class = Types::BedrockGuardrail
+
+    BedrockGuardrailDetails.add_member(:guardrail_arn, Shapes::ShapeRef.new(shape: BedrockGuardrailDetailsGuardrailArnString, deprecated: true, location_name: "guardrailArn", metadata: {"deprecatedMessage" => "Use guardrails list instead", "deprecatedSince" => "2026-07-13"}))
+    BedrockGuardrailDetails.add_member(:guardrail_version, Shapes::ShapeRef.new(shape: BedrockGuardrailDetailsGuardrailVersionString, deprecated: true, location_name: "guardrailVersion", metadata: {"deprecatedMessage" => "Use guardrails list instead", "deprecatedSince" => "2026-07-13"}))
+    BedrockGuardrailDetails.add_member(:guardrails, Shapes::ShapeRef.new(shape: BedrockGuardrails, location_name: "guardrails"))
+    BedrockGuardrailDetails.add_member(:guardrail_action, Shapes::ShapeRef.new(shape: GuardrailAction, location_name: "guardrailAction"))
+    BedrockGuardrailDetails.add_member(:guardrail_source, Shapes::ShapeRef.new(shape: GuardrailSource, location_name: "guardrailSource"))
+    BedrockGuardrailDetails.add_member(:content_policy_filters, Shapes::ShapeRef.new(shape: ContentPolicyFilters, location_name: "contentPolicyFilters"))
+    BedrockGuardrailDetails.struct_class = Types::BedrockGuardrailDetails
+
+    BedrockGuardrails.member = Shapes::ShapeRef.new(shape: BedrockGuardrail)
+
     Behavior.key = Shapes::ShapeRef.new(shape: String)
     Behavior.value = Shapes::ShapeRef.new(shape: AnomalyUnusualBehaviorFeature)
 
@@ -945,6 +978,13 @@ module Aws::GuardDuty
 
     Containers.member = Shapes::ShapeRef.new(shape: Container)
 
+    ContentPolicyFilter.add_member(:type, Shapes::ShapeRef.new(shape: ContentPolicyFilterType, location_name: "type"))
+    ContentPolicyFilter.add_member(:confidence, Shapes::ShapeRef.new(shape: ConfidenceLevel, location_name: "confidence"))
+    ContentPolicyFilter.add_member(:action, Shapes::ShapeRef.new(shape: ContentPolicyFilterAction, location_name: "action"))
+    ContentPolicyFilter.struct_class = Types::ContentPolicyFilter
+
+    ContentPolicyFilters.member = Shapes::ShapeRef.new(shape: ContentPolicyFilter)
+
     ContinuousScanDetails.add_member(:start_time, Shapes::ShapeRef.new(shape: Timestamp, location_name: "startTime"))
     ContinuousScanDetails.add_member(:end_time, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "endTime"))
     ContinuousScanDetails.struct_class = Types::ContinuousScanDetails
@@ -1601,6 +1641,9 @@ module Aws::GuardDuty
     GetFilterResponse.add_member(:rank, Shapes::ShapeRef.new(shape: FilterRank, location_name: "rank"))
     GetFilterResponse.add_member(:finding_criteria, Shapes::ShapeRef.new(shape: FindingCriteria, required: true, location_name: "findingCriteria"))
     GetFilterResponse.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
+    GetFilterResponse.add_member(:created_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "createdAt"))
+    GetFilterResponse.add_member(:updated_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "updatedAt"))
+    GetFilterResponse.add_member(:version, Shapes::ShapeRef.new(shape: FilterVersion, location_name: "version"))
     GetFilterResponse.struct_class = Types::GetFilterResponse
 
     GetFindingsRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "DetectorId"))
@@ -2299,6 +2342,11 @@ module Aws::GuardDuty
 
     MemoryRegionsList.member = Shapes::ShapeRef.new(shape: String)
 
+    ModelDetail.add_member(:model_id, Shapes::ShapeRef.new(shape: ModelDetailModelIdString, location_name: "modelId"))
+    ModelDetail.struct_class = Types::ModelDetail
+
+    ModelDetails.member = Shapes::ShapeRef.new(shape: ModelDetail)
+
     Neq.member = Shapes::ShapeRef.new(shape: String)
 
     NetworkConnection.add_member(:direction, Shapes::ShapeRef.new(shape: NetworkDirection, required: true, location_name: "direction"))
@@ -2349,9 +2397,12 @@ module Aws::GuardDuty
 
     NotMatches.member = Shapes::ShapeRef.new(shape: NotMatch)
 
+    ObservationNumbers.member = Shapes::ShapeRef.new(shape: Long)
+
     ObservationTexts.member = Shapes::ShapeRef.new(shape: String)
 
     Observations.add_member(:text, Shapes::ShapeRef.new(shape: ObservationTexts, location_name: "text"))
+    Observations.add_member(:number, Shapes::ShapeRef.new(shape: ObservationNumbers, location_name: "number"))
     Observations.struct_class = Types::Observations
 
     Organization.add_member(:asn, Shapes::ShapeRef.new(shape: String, location_name: "asn"))
@@ -2550,6 +2601,7 @@ module Aws::GuardDuty
 
     RecoveryPointDetails.add_member(:recovery_point_arn, Shapes::ShapeRef.new(shape: String, location_name: "recoveryPointArn"))
     RecoveryPointDetails.add_member(:backup_vault_name, Shapes::ShapeRef.new(shape: String, location_name: "backupVaultName"))
+    RecoveryPointDetails.add_member(:continuous_scan_details, Shapes::ShapeRef.new(shape: ScanConfigurationContinuousScanDetails, location_name: "continuousScanDetails"))
     RecoveryPointDetails.struct_class = Types::RecoveryPointDetails
 
     RelatedFilePathsList.member = Shapes::ShapeRef.new(shape: String)
@@ -2586,6 +2638,8 @@ module Aws::GuardDuty
     Resource.add_member(:ebs_snapshot_details, Shapes::ShapeRef.new(shape: EbsSnapshotDetails, location_name: "ebsSnapshotDetails"))
     Resource.add_member(:ec2_image_details, Shapes::ShapeRef.new(shape: Ec2ImageDetails, location_name: "ec2ImageDetails"))
     Resource.add_member(:recovery_point_details, Shapes::ShapeRef.new(shape: RecoveryPointDetails, location_name: "recoveryPointDetails"))
+    Resource.add_member(:bedrock_guardrail_details, Shapes::ShapeRef.new(shape: BedrockGuardrailDetails, location_name: "bedrockGuardrailDetails"))
+    Resource.add_member(:model_details, Shapes::ShapeRef.new(shape: ModelDetails, location_name: "modelDetails"))
     Resource.struct_class = Types::Resource
 
     ResourceData.add_member(:s3_bucket, Shapes::ShapeRef.new(shape: S3Bucket, location_name: "s3Bucket"))

data/lib/aws-sdk-guardduty/types.rb

@@ -729,6 +729,70 @@ module Aws::GuardDuty
       include Aws::Structure
     end
 
+    # Contains information about a Bedrock guardrail associated with a
+    # finding.
+    #
+    # @!attribute [rw] arn
+    #   The ARN of the Bedrock guardrail.
+    #   @return [String]
+    #
+    # @!attribute [rw] version
+    #   The version of the Bedrock guardrail.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/BedrockGuardrail AWS API Documentation
+    #
+    class BedrockGuardrail < Struct.new(
+      :arn,
+      :version)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains information about the Bedrock guardrail that was involved in
+    # a finding.
+    #
+    # @!attribute [rw] guardrail_arn
+    #   The ARN of the Bedrock guardrail. This field is deprecated. Use the
+    #   `guardrails` list instead.
+    #   @return [String]
+    #
+    # @!attribute [rw] guardrail_version
+    #   The version of the Bedrock guardrail. This field is deprecated. Use
+    #   the `guardrails` list instead.
+    #   @return [String]
+    #
+    # @!attribute [rw] guardrails
+    #   The list of Bedrock guardrails associated with the finding.
+    #   @return [Array<Types::BedrockGuardrail>]
+    #
+    # @!attribute [rw] guardrail_action
+    #   Indicates whether the guardrail intervened or not.
+    #   @return [String]
+    #
+    # @!attribute [rw] guardrail_source
+    #   Indicates whether the guardrail was applied on the input or output
+    #   of the model invocation.
+    #   @return [String]
+    #
+    # @!attribute [rw] content_policy_filters
+    #   The list of content policy filters that matched during the guardrail
+    #   evaluation.
+    #   @return [Array<Types::ContentPolicyFilter>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/BedrockGuardrailDetails AWS API Documentation
+    #
+    class BedrockGuardrailDetails < Struct.new(
+      :guardrail_arn,
+      :guardrail_version,
+      :guardrails,
+      :guardrail_action,
+      :guardrail_source,
+      :content_policy_filters)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains information on how the bucker owner's S3 Block Public Access
     # settings are being applied to the S3 bucket. See [S3 Block Public
     # Access][1] for more information.
@@ -1108,6 +1172,31 @@ module Aws::GuardDuty
       include Aws::Structure
     end
 
+    # Contains information about a content policy filter that matched during
+    # a guardrail evaluation.
+    #
+    # @!attribute [rw] type
+    #   The type of content that was filtered by the guardrail.
+    #   @return [String]
+    #
+    # @!attribute [rw] confidence
+    #   The confidence level that the content matched the filter.
+    #   @return [String]
+    #
+    # @!attribute [rw] action
+    #   The action taken by the guardrail filter.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ContentPolicyFilter AWS API Documentation
+    #
+    class ContentPolicyFilter < Struct.new(
+      :type,
+      :confidence,
+      :action)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains information about the time range within the continuous backup
     # in Amazon Web Services Backup to scan for a point-in-time recovery
     # resource.
@@ -5707,6 +5796,25 @@ module Aws::GuardDuty
     #   The tags of the filter resource.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] created_at
+    #   The timestamp when the filter was created. This field is not
+    #   available for filters that were created before the lifecycle
+    #   metadata feature was enabled (legacy filters).
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_at
+    #   The timestamp when the filter was last updated. For legacy filters,
+    #   this field is present only after the filter has been updated at
+    #   least once since the lifecycle metadata feature was enabled.
+    #   @return [Time]
+    #
+    # @!attribute [rw] version
+    #   The version of the filter. Every time the filter is updated, the
+    #   version increments by 1. This field is not available for legacy
+    #   filters that were created before the lifecycle metadata feature was
+    #   enabled.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetFilterResponse AWS API Documentation
     #
     class GetFilterResponse < Struct.new(
@@ -5715,7 +5823,10 @@ module Aws::GuardDuty
       :action,
       :rank,
       :finding_criteria,
-      :tags)
+      :tags,
+      :created_at,
+      :updated_at,
+      :version)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -9215,6 +9326,20 @@ module Aws::GuardDuty
       include Aws::Structure
     end
 
+    # Contains information about the AI model involved in a finding.
+    #
+    # @!attribute [rw] model_id
+    #   The identifier of the AI model.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ModelDetail AWS API Documentation
+    #
+    class ModelDetail < Struct.new(
+      :model_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains information about the network connection.
     #
     # @!attribute [rw] direction
@@ -9421,10 +9546,15 @@ module Aws::GuardDuty
     #   The text that was unusual.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] number
+    #   The numeric values that were unusual.
+    #   @return [Array<Integer>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Observations AWS API Documentation
     #
     class Observations < Struct.new(
-      :text)
+      :text,
+      :number)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -10446,11 +10576,18 @@ module Aws::GuardDuty
     #   The name of the backup vault containing the recovery point.
     #   @return [String]
     #
+    # @!attribute [rw] continuous_scan_details
+    #   Contains information about the time range within the continuous
+    #   backup in Amazon Web Services Backup that was scanned for a
+    #   point-in-time recovery resource.
+    #   @return [Types::ScanConfigurationContinuousScanDetails]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/RecoveryPointDetails AWS API Documentation
     #
     class RecoveryPointDetails < Struct.new(
       :recovery_point_arn,
-      :backup_vault_name)
+      :backup_vault_name,
+      :continuous_scan_details)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -10610,6 +10747,15 @@ module Aws::GuardDuty
     #   Contains details about the backup recovery point that was scanned.
     #   @return [Types::RecoveryPointDetails]
     #
+    # @!attribute [rw] bedrock_guardrail_details
+    #   Contains information about the Bedrock guardrail that was involved
+    #   in a finding.
+    #   @return [Types::BedrockGuardrailDetails]
+    #
+    # @!attribute [rw] model_details
+    #   Contains information about the AI models involved in a finding.
+    #   @return [Array<Types::ModelDetail>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Resource AWS API Documentation
     #
     class Resource < Struct.new(
@@ -10628,7 +10774,9 @@ module Aws::GuardDuty
       :rds_db_user_details,
       :ebs_snapshot_details,
       :ec2_image_details,
-      :recovery_point_details)
+      :recovery_point_details,
+      :bedrock_guardrail_details,
+      :model_details)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-guardduty.rb

@@ -54,7 +54,7 @@ module Aws::GuardDuty
   autoload :EndpointProvider, 'aws-sdk-guardduty/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-guardduty/endpoints'
 
-  GEM_VERSION = '1.156.0'
+  GEM_VERSION = '1.158.0'
 
 end
 

data/sig/client.rbs

@@ -553,6 +553,9 @@ module Aws
         def rank: () -> ::Integer
         def finding_criteria: () -> Types::FindingCriteria
         def tags: () -> ::Hash[::String, ::String]
+        def created_at: () -> ::Time
+        def updated_at: () -> ::Time
+        def version: () -> ::Integer
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/GuardDuty/Client.html#get_filter-instance_method
       def get_filter: (
@@ -803,7 +806,7 @@ module Aws
                                     account_ids: Array[::String]?,
                                     data_sources: Array[("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_LOGS" | "KUBERNETES_AUDIT_LOGS" | "EC2_MALWARE_SCAN")]?,
                                     resources: Array[::String]?,
-                                    features: Array[("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING" | "RDS_DBI_PROTECTION_PROVISIONED" | "RDS_DBI_PROTECTION_SERVERLESS")]?
+                                    features: Array[("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING" | "RDS_DBI_PROTECTION_PROVISIONED" | "RDS_DBI_PROTECTION_SERVERLESS" | "AI_PROTECTION")]?
                                   },
                                   ?unit: ::String,
                                   ?max_results: ::Integer,
@@ -1255,7 +1258,7 @@ module Aws
                                      ?data_sources: Params::data_source_configurations,
                                      ?features: Array[
                                        {
-                                         name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING")?,
+                                         name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION")?,
                                          status: ("ENABLED" | "DISABLED")?,
                                          additional_configuration: Array[
                                            {
@@ -1294,7 +1297,7 @@ module Aws
                                                },
                                                ?features: Array[
                                                  {
-                                                   name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING")?,
+                                                   name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION")?,
                                                    auto_enable: ("NEW" | "NONE" | "ALL")?,
                                                    additional_configuration: Array[
                                                      {

data/sig/params.rbs

@@ -25,7 +25,7 @@ module Aws
     }
 
       type detector_feature_configuration = {
-      name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_ANALYST")?,
+      name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION" | "AI_ANALYST")?,
       status: ("ENABLED" | "DISABLED")?,
       additional_configuration: Array[
         {

data/sig/types.rbs

@@ -153,8 +153,8 @@ module Aws::GuardDuty
     end
 
     class AnomalyObject
-      attr_accessor profile_type: ("FREQUENCY")
-      attr_accessor profile_subtype: ("FREQUENT" | "INFREQUENT" | "UNSEEN" | "RARE")
+      attr_accessor profile_type: ("FREQUENCY" | "VOLUME")
+      attr_accessor profile_subtype: ("FREQUENT" | "INFREQUENT" | "UNSEEN" | "RARE" | "COUNT" | "AVERAGE")
       attr_accessor observations: Types::Observations
       SENSITIVE: []
     end
@@ -203,6 +203,22 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class BedrockGuardrail
+      attr_accessor arn: ::String
+      attr_accessor version: ::String
+      SENSITIVE: []
+    end
+
+    class BedrockGuardrailDetails
+      attr_accessor guardrail_arn: ::String
+      attr_accessor guardrail_version: ::String
+      attr_accessor guardrails: ::Array[Types::BedrockGuardrail]
+      attr_accessor guardrail_action: ("GUARDRAIL_INTERVENED" | "NONE")
+      attr_accessor guardrail_source: ("INPUT" | "OUTPUT")
+      attr_accessor content_policy_filters: ::Array[Types::ContentPolicyFilter]
+      SENSITIVE: []
+    end
+
     class BlockPublicAccess
       attr_accessor ignore_public_acls: bool
       attr_accessor restrict_public_buckets: bool
@@ -293,6 +309,13 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class ContentPolicyFilter
+      attr_accessor type: ("PROMPT_ATTACK" | "JAILBREAK" | "HATE" | "INSULTS" | "SEXUAL" | "VIOLENCE" | "MISCONDUCT")
+      attr_accessor confidence: ("HIGH" | "MEDIUM" | "LOW" | "NONE")
+      attr_accessor action: ("BLOCKED" | "NONE")
+      SENSITIVE: []
+    end
+
     class ContinuousScanDetails
       attr_accessor start_time: ::Time
       attr_accessor end_time: ::Time
@@ -780,14 +803,14 @@ module Aws::GuardDuty
     end
 
     class DetectorFeatureConfiguration
-      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_ANALYST")
+      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION" | "AI_ANALYST")
       attr_accessor status: ("ENABLED" | "DISABLED")
       attr_accessor additional_configuration: ::Array[Types::DetectorAdditionalConfiguration]
       SENSITIVE: []
     end
 
     class DetectorFeatureConfigurationResult
-      attr_accessor name: ("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_ANALYST")
+      attr_accessor name: ("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION" | "AI_ANALYST")
       attr_accessor status: ("ENABLED" | "DISABLED")
       attr_accessor updated_at: ::Time
       attr_accessor additional_configuration: ::Array[Types::DetectorAdditionalConfigurationResult]
@@ -1065,7 +1088,7 @@ module Aws::GuardDuty
     end
 
     class FreeTrialFeatureConfigurationResult
-      attr_accessor name: ("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING")
+      attr_accessor name: ("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING" | "AI_PROTECTION")
       attr_accessor free_trial_days_remaining: ::Integer
       SENSITIVE: []
     end
@@ -1128,6 +1151,9 @@ module Aws::GuardDuty
       attr_accessor rank: ::Integer
       attr_accessor finding_criteria: Types::FindingCriteria
       attr_accessor tags: ::Hash[::String, ::String]
+      attr_accessor created_at: ::Time
+      attr_accessor updated_at: ::Time
+      attr_accessor version: ::Integer
       SENSITIVE: []
     end
 
@@ -1992,20 +2018,25 @@ module Aws::GuardDuty
     end
 
     class MemberFeaturesConfiguration
-      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING")
+      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION")
       attr_accessor status: ("ENABLED" | "DISABLED")
       attr_accessor additional_configuration: ::Array[Types::MemberAdditionalConfiguration]
       SENSITIVE: []
     end
 
     class MemberFeaturesConfigurationResult
-      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING")
+      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION")
       attr_accessor status: ("ENABLED" | "DISABLED")
       attr_accessor updated_at: ::Time
       attr_accessor additional_configuration: ::Array[Types::MemberAdditionalConfigurationResult]
       SENSITIVE: []
     end
 
+    class ModelDetail
+      attr_accessor model_id: ::String
+      SENSITIVE: []
+    end
+
     class NetworkConnection
       attr_accessor direction: ("INBOUND" | "OUTBOUND")
       SENSITIVE: []
@@ -2058,6 +2089,7 @@ module Aws::GuardDuty
 
     class Observations
       attr_accessor text: ::Array[::String]
+      attr_accessor number: ::Array[::Integer]
       SENSITIVE: []
     end
 
@@ -2112,21 +2144,21 @@ module Aws::GuardDuty
     end
 
     class OrganizationFeatureConfiguration
-      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING")
+      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION")
       attr_accessor auto_enable: ("NEW" | "NONE" | "ALL")
       attr_accessor additional_configuration: ::Array[Types::OrganizationAdditionalConfiguration]
       SENSITIVE: []
     end
 
     class OrganizationFeatureConfigurationResult
-      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING")
+      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION")
       attr_accessor auto_enable: ("NEW" | "NONE" | "ALL")
       attr_accessor additional_configuration: ::Array[Types::OrganizationAdditionalConfigurationResult]
       SENSITIVE: []
     end
 
     class OrganizationFeatureStatistics
-      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING")
+      attr_accessor name: ("S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "RUNTIME_MONITORING" | "AI_PROTECTION")
       attr_accessor enabled_accounts_count: ::Integer
       attr_accessor additional_configuration: ::Array[Types::OrganizationFeatureStatisticsAdditionalConfiguration]
       SENSITIVE: []
@@ -2316,6 +2348,7 @@ module Aws::GuardDuty
     class RecoveryPointDetails
       attr_accessor recovery_point_arn: ::String
       attr_accessor backup_vault_name: ::String
+      attr_accessor continuous_scan_details: Types::ScanConfigurationContinuousScanDetails
       SENSITIVE: []
     end
 
@@ -2358,6 +2391,8 @@ module Aws::GuardDuty
       attr_accessor ebs_snapshot_details: Types::EbsSnapshotDetails
       attr_accessor ec2_image_details: Types::Ec2ImageDetails
       attr_accessor recovery_point_details: Types::RecoveryPointDetails
+      attr_accessor bedrock_guardrail_details: Types::BedrockGuardrailDetails
+      attr_accessor model_details: ::Array[Types::ModelDetail]
       SENSITIVE: []
     end
 
@@ -3026,7 +3061,7 @@ module Aws::GuardDuty
       attr_accessor account_ids: ::Array[::String]
       attr_accessor data_sources: ::Array[("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_LOGS" | "KUBERNETES_AUDIT_LOGS" | "EC2_MALWARE_SCAN")]
       attr_accessor resources: ::Array[::String]
-      attr_accessor features: ::Array[("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING" | "RDS_DBI_PROTECTION_PROVISIONED" | "RDS_DBI_PROTECTION_SERVERLESS")]
+      attr_accessor features: ::Array[("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING" | "RDS_DBI_PROTECTION_PROVISIONED" | "RDS_DBI_PROTECTION_SERVERLESS" | "AI_PROTECTION")]
       SENSITIVE: []
     end
 
@@ -3037,7 +3072,7 @@ module Aws::GuardDuty
     end
 
     class UsageFeatureResult
-      attr_accessor feature: ("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING" | "RDS_DBI_PROTECTION_PROVISIONED" | "RDS_DBI_PROTECTION_SERVERLESS")
+      attr_accessor feature: ("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING" | "RDS_DBI_PROTECTION_PROVISIONED" | "RDS_DBI_PROTECTION_SERVERLESS" | "AI_PROTECTION")
       attr_accessor total: Types::Total
       SENSITIVE: []
     end
@@ -3065,7 +3100,7 @@ module Aws::GuardDuty
     end
 
     class UsageTopAccountsResult
-      attr_accessor feature: ("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING" | "RDS_DBI_PROTECTION_PROVISIONED" | "RDS_DBI_PROTECTION_SERVERLESS")
+      attr_accessor feature: ("FLOW_LOGS" | "CLOUD_TRAIL" | "DNS_LOGS" | "S3_DATA_EVENTS" | "EKS_AUDIT_LOGS" | "EBS_MALWARE_PROTECTION" | "RDS_LOGIN_EVENTS" | "LAMBDA_NETWORK_LOGS" | "EKS_RUNTIME_MONITORING" | "EC2_RUNTIME_MONITORING" | "FARGATE_RUNTIME_MONITORING" | "RDS_DBI_PROTECTION_PROVISIONED" | "RDS_DBI_PROTECTION_SERVERLESS" | "AI_PROTECTION")
       attr_accessor accounts: ::Array[Types::UsageTopAccountResult]
       SENSITIVE: []
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-guardduty
 version: !ruby/object:Gem::Version
-  version: 1.156.0
+  version: 1.158.0
 platform: ruby
 authors:
 - Amazon Web Services