aws-sdk-guardduty 1.162.0 → 1.164.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d65c1947a3279be636fcd07aad5c74684ef26b61d59773950ea0eec9088cb013
-  data.tar.gz: 7214c42b1482496ba1ceea43e334386c68e10cc531b93b0ae76de841faaa57e2
+  metadata.gz: 38581e81a330a8b4ea6f0ce66f21e1315a5b56a6ba981d47e6dad7620ab01b03
+  data.tar.gz: af4e2a3db1277f1b1db1ad3c969cec98fe37eeefe4357872e1b3d501ff7653a8
 SHA512:
-  metadata.gz: fe82adadef9d361fbdeb511492f867fddc33e8e951eaf03933f6575695fc066fb95cf85aeb85d9937ccc18cee1fffcb8218543af8c5e4b762687c3003113d2cf
-  data.tar.gz: f71c7cc098824f5c97e8a22946ab71741036872631b529a5fa01e28a970b436f4b002e0321a925e8882f490298c2dc0eec2bfa115efc7cadac214711eca42955
+  metadata.gz: e8063a59932366d22266631028948ea9409f200f9a169c6086677c6a7c12446084cf4d2be74937da3e07e6161143431e956067fc3b31eb39df072bca45d2a695
+  data.tar.gz: 02bfcbdc992444d677c48b27357c67511767e98739440f3a03923a68ebeefaae497f781293cef011afa6921094039a3bbf719dfc4946033a154ed6e27ff4d1a3

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.164.0 (2026-09-28)
+------------------
+
+* Feature - Adding awsServiceName field to GuardDuty Findings
+
+1.163.0 (2026-09-17)
+------------------
+
+* Feature - This change surfaces AI Protection resources on existing public IAM attack sequences. Customers will now see which model was accessed and whether a guardrail intervened as part of the credential-compromise sequence.
+
 1.162.0 (2026-09-11)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.162.0
+1.164.0

data/lib/aws-sdk-guardduty/client.rb

@@ -4455,6 +4455,7 @@ module Aws::GuardDuty
     #   resp.findings[0].service.action.aws_api_call_action.service_name #=> String
     #   resp.findings[0].service.action.aws_api_call_action.remote_account_details.account_id #=> String
     #   resp.findings[0].service.action.aws_api_call_action.remote_account_details.affiliated #=> Boolean
+    #   resp.findings[0].service.action.aws_api_call_action.remote_account_details.aws_service_name #=> String
     #   resp.findings[0].service.action.aws_api_call_action.affected_resources #=> Hash
     #   resp.findings[0].service.action.aws_api_call_action.affected_resources["String"] #=> String
     #   resp.findings[0].service.action.dns_request_action.domain #=> String
@@ -4725,7 +4726,7 @@ module Aws::GuardDuty
     #   resp.findings[0].service.detection.sequence.resources[0].uid #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].name #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].account_id #=> String
-    #   resp.findings[0].service.detection.sequence.resources[0].resource_type #=> String, one of "EC2_INSTANCE", "EC2_NETWORK_INTERFACE", "S3_BUCKET", "S3_OBJECT", "ACCESS_KEY", "EKS_CLUSTER", "KUBERNETES_WORKLOAD", "CONTAINER", "ECS_CLUSTER", "ECS_TASK", "AUTOSCALING_AUTO_SCALING_GROUP", "IAM_INSTANCE_PROFILE", "CLOUDFORMATION_STACK", "EC2_LAUNCH_TEMPLATE", "EC2_VPC", "EC2_IMAGE"
+    #   resp.findings[0].service.detection.sequence.resources[0].resource_type #=> String, one of "EC2_INSTANCE", "EC2_NETWORK_INTERFACE", "S3_BUCKET", "S3_OBJECT", "ACCESS_KEY", "EKS_CLUSTER", "KUBERNETES_WORKLOAD", "CONTAINER", "ECS_CLUSTER", "ECS_TASK", "AUTOSCALING_AUTO_SCALING_GROUP", "IAM_INSTANCE_PROFILE", "CLOUDFORMATION_STACK", "EC2_LAUNCH_TEMPLATE", "EC2_VPC", "EC2_IMAGE", "BEDROCK_CUSTOM_MODEL", "BEDROCK_IMPORTED_MODEL", "BEDROCK_PROVISIONED_MODEL", "BEDROCK_CUSTOM_MODEL_DEPLOYMENT", "BEDROCK_INFERENCE_PROFILE", "BEDROCK_APPLICATION_INFERENCE_PROFILE", "BEDROCK_PROMPT", "BEDROCK_PROMPT_ROUTER", "BEDROCK_GUARDRAIL", "SAGEMAKER_ENDPOINT"
     #   resp.findings[0].service.detection.sequence.resources[0].region #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].service #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].cloud_partition #=> String
@@ -4812,6 +4813,9 @@ module Aws::GuardDuty
     #   resp.findings[0].service.detection.sequence.resources[0].data.ec2_image.ec2_instance_uids[0] #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].data.cloudformation_stack.ec2_instance_uids #=> Array
     #   resp.findings[0].service.detection.sequence.resources[0].data.cloudformation_stack.ec2_instance_uids[0] #=> String
+    #   resp.findings[0].service.detection.sequence.resources[0].data.bedrock_guardrail.version #=> String
+    #   resp.findings[0].service.detection.sequence.resources[0].data.bedrock_guardrail.guardrail_action #=> String, one of "GUARDRAIL_INTERVENED", "NONE"
+    #   resp.findings[0].service.detection.sequence.resources[0].data.bedrock_guardrail.guardrail_source #=> String, one of "INPUT", "OUTPUT"
     #   resp.findings[0].service.detection.sequence.endpoints #=> Array
     #   resp.findings[0].service.detection.sequence.endpoints[0].id #=> String
     #   resp.findings[0].service.detection.sequence.endpoints[0].ip #=> String
@@ -9732,7 +9736,7 @@ module Aws::GuardDuty
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-guardduty'
-      context[:gem_version] = '1.162.0'
+      context[:gem_version] = '1.164.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-guardduty/client_api.rb

@@ -77,6 +77,8 @@ module Aws::GuardDuty
     BedrockGuardrailDetails = Shapes::StructureShape.new(name: 'BedrockGuardrailDetails')
     BedrockGuardrailDetailsGuardrailArnString = Shapes::StringShape.new(name: 'BedrockGuardrailDetailsGuardrailArnString')
     BedrockGuardrailDetailsGuardrailVersionString = Shapes::StringShape.new(name: 'BedrockGuardrailDetailsGuardrailVersionString')
+    BedrockGuardrailResource = Shapes::StructureShape.new(name: 'BedrockGuardrailResource')
+    BedrockGuardrailResourceVersionString = Shapes::StringShape.new(name: 'BedrockGuardrailResourceVersionString')
     BedrockGuardrailVersionString = Shapes::StringShape.new(name: 'BedrockGuardrailVersionString')
     BedrockGuardrails = Shapes::ListShape.new(name: 'BedrockGuardrails')
     Behavior = Shapes::MapShape.new(name: 'Behavior')
@@ -1001,6 +1003,11 @@ module Aws::GuardDuty
     BedrockGuardrailDetails.add_member(:content_policy_filters, Shapes::ShapeRef.new(shape: ContentPolicyFilters, location_name: "contentPolicyFilters"))
     BedrockGuardrailDetails.struct_class = Types::BedrockGuardrailDetails
 
+    BedrockGuardrailResource.add_member(:version, Shapes::ShapeRef.new(shape: BedrockGuardrailResourceVersionString, location_name: "version"))
+    BedrockGuardrailResource.add_member(:guardrail_action, Shapes::ShapeRef.new(shape: GuardrailAction, location_name: "guardrailAction"))
+    BedrockGuardrailResource.add_member(:guardrail_source, Shapes::ShapeRef.new(shape: GuardrailSource, location_name: "guardrailSource"))
+    BedrockGuardrailResource.struct_class = Types::BedrockGuardrailResource
+
     BedrockGuardrails.member = Shapes::ShapeRef.new(shape: BedrockGuardrail)
 
     Behavior.key = Shapes::ShapeRef.new(shape: String)
@@ -2818,6 +2825,7 @@ module Aws::GuardDuty
 
     RemoteAccountDetails.add_member(:account_id, Shapes::ShapeRef.new(shape: String, location_name: "accountId"))
     RemoteAccountDetails.add_member(:affiliated, Shapes::ShapeRef.new(shape: Boolean, location_name: "affiliated"))
+    RemoteAccountDetails.add_member(:aws_service_name, Shapes::ShapeRef.new(shape: String, location_name: "awsServiceName"))
     RemoteAccountDetails.struct_class = Types::RemoteAccountDetails
 
     RemoteIpDetails.add_member(:city, Shapes::ShapeRef.new(shape: City, location_name: "city"))
@@ -2868,6 +2876,7 @@ module Aws::GuardDuty
     ResourceData.add_member(:ec2_vpc, Shapes::ShapeRef.new(shape: Ec2Vpc, location_name: "ec2Vpc"))
     ResourceData.add_member(:ec2_image, Shapes::ShapeRef.new(shape: Ec2Image, location_name: "ec2Image"))
     ResourceData.add_member(:cloudformation_stack, Shapes::ShapeRef.new(shape: CloudformationStack, location_name: "cloudformationStack"))
+    ResourceData.add_member(:bedrock_guardrail, Shapes::ShapeRef.new(shape: BedrockGuardrailResource, location_name: "bedrockGuardrail"))
     ResourceData.struct_class = Types::ResourceData
 
     ResourceDetails.add_member(:instance_arn, Shapes::ShapeRef.new(shape: InstanceArn, location_name: "instanceArn"))

data/lib/aws-sdk-guardduty/types.rb

@@ -939,6 +939,34 @@ module Aws::GuardDuty
       include Aws::Structure
     end
 
+    # Contains details about an Amazon Bedrock guardrail evaluated during a
+    # model invocation.
+    #
+    # @!attribute [rw] version
+    #   The version of the Amazon Bedrock guardrail. Valid values are a
+    #   numeric version, `DRAFT`, or `ENFORCED`.
+    #   @return [String]
+    #
+    # @!attribute [rw] guardrail_action
+    #   Indicates whether the guardrail intervened during the model
+    #   invocation.
+    #   @return [String]
+    #
+    # @!attribute [rw] guardrail_source
+    #   Indicates whether the guardrail was applied on the input or output
+    #   of the model invocation.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/BedrockGuardrailResource AWS API Documentation
+    #
+    class BedrockGuardrailResource < Struct.new(
+      :version,
+      :guardrail_action,
+      :guardrail_source)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains information on how the bucker owner's S3 Block Public Access
     # settings are being applied to the S3 bucket. See [S3 Block Public
     # Access][1] for more information.
@@ -11234,11 +11262,17 @@ module Aws::GuardDuty
     #   it is `False` the API caller is from outside your environment.
     #   @return [Boolean]
     #
+    # @!attribute [rw] aws_service_name
+    #   If the remote account belongs to an Amazon Web Services service,
+    #   this field indicates which service the remote account belongs to.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/RemoteAccountDetails AWS API Documentation
     #
     class RemoteAccountDetails < Struct.new(
       :account_id,
-      :affiliated)
+      :affiliated,
+      :aws_service_name)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -11497,6 +11531,12 @@ module Aws::GuardDuty
     #   finding.
     #   @return [Types::CloudformationStack]
     #
+    # @!attribute [rw] bedrock_guardrail
+    #   Contains detailed information about the Amazon Bedrock guardrail
+    #   associated with the activity that prompted GuardDuty to generate a
+    #   finding.
+    #   @return [Types::BedrockGuardrailResource]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ResourceData AWS API Documentation
     #
     class ResourceData < Struct.new(
@@ -11515,7 +11555,8 @@ module Aws::GuardDuty
       :ec2_launch_template,
       :ec2_vpc,
       :ec2_image,
-      :cloudformation_stack)
+      :cloudformation_stack,
+      :bedrock_guardrail)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-guardduty.rb

@@ -54,7 +54,7 @@ module Aws::GuardDuty
   autoload :EndpointProvider, 'aws-sdk-guardduty/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-guardduty/endpoints'
 
-  GEM_VERSION = '1.162.0'
+  GEM_VERSION = '1.164.0'
 
 end
 

data/sig/types.rbs

@@ -256,6 +256,13 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class BedrockGuardrailResource
+      attr_accessor version: ::String
+      attr_accessor guardrail_action: ("GUARDRAIL_INTERVENED" | "NONE")
+      attr_accessor guardrail_source: ("INPUT" | "OUTPUT")
+      SENSITIVE: []
+    end
+
     class BlockPublicAccess
       attr_accessor ignore_public_acls: bool
       attr_accessor restrict_public_buckets: bool
@@ -2539,6 +2546,7 @@ module Aws::GuardDuty
     class RemoteAccountDetails
       attr_accessor account_id: ::String
       attr_accessor affiliated: bool
+      attr_accessor aws_service_name: ::String
       SENSITIVE: []
     end
 
@@ -2597,6 +2605,7 @@ module Aws::GuardDuty
       attr_accessor ec2_vpc: Types::Ec2Vpc
       attr_accessor ec2_image: Types::Ec2Image
       attr_accessor cloudformation_stack: Types::CloudformationStack
+      attr_accessor bedrock_guardrail: Types::BedrockGuardrailResource
       SENSITIVE: []
     end
 
@@ -2624,7 +2633,7 @@ module Aws::GuardDuty
       attr_accessor uid: ::String
       attr_accessor name: ::String
       attr_accessor account_id: ::String
-      attr_accessor resource_type: ("EC2_INSTANCE" | "EC2_NETWORK_INTERFACE" | "S3_BUCKET" | "S3_OBJECT" | "ACCESS_KEY" | "EKS_CLUSTER" | "KUBERNETES_WORKLOAD" | "CONTAINER" | "ECS_CLUSTER" | "ECS_TASK" | "AUTOSCALING_AUTO_SCALING_GROUP" | "IAM_INSTANCE_PROFILE" | "CLOUDFORMATION_STACK" | "EC2_LAUNCH_TEMPLATE" | "EC2_VPC" | "EC2_IMAGE")
+      attr_accessor resource_type: ("EC2_INSTANCE" | "EC2_NETWORK_INTERFACE" | "S3_BUCKET" | "S3_OBJECT" | "ACCESS_KEY" | "EKS_CLUSTER" | "KUBERNETES_WORKLOAD" | "CONTAINER" | "ECS_CLUSTER" | "ECS_TASK" | "AUTOSCALING_AUTO_SCALING_GROUP" | "IAM_INSTANCE_PROFILE" | "CLOUDFORMATION_STACK" | "EC2_LAUNCH_TEMPLATE" | "EC2_VPC" | "EC2_IMAGE" | "BEDROCK_CUSTOM_MODEL" | "BEDROCK_IMPORTED_MODEL" | "BEDROCK_PROVISIONED_MODEL" | "BEDROCK_CUSTOM_MODEL_DEPLOYMENT" | "BEDROCK_INFERENCE_PROFILE" | "BEDROCK_APPLICATION_INFERENCE_PROFILE" | "BEDROCK_PROMPT" | "BEDROCK_PROMPT_ROUTER" | "BEDROCK_GUARDRAIL" | "SAGEMAKER_ENDPOINT")
       attr_accessor region: ::String
       attr_accessor service: ::String
       attr_accessor cloud_partition: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-guardduty
 version: !ruby/object:Gem::Version
-  version: 1.162.0
+  version: 1.164.0
 platform: ruby
 authors:
 - Amazon Web Services