aws-sdk-guardduty 1.167.0 → 1.168.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9273fe81d5f44d79b8e37c12b5fdb1e993f1d7d9c0540ec0b2a6b97c043b28c9
-  data.tar.gz: 0ced319effb73a499326d49c3e4c15f0c756b2abcbfcb7748a0ccd9da2d7ea0c
+  metadata.gz: 4fc789bd70c1c224f66723b6fb055b16df2b5f89532f0d17df1dbe4f73ac8e1c
+  data.tar.gz: 3faeb5b6a9cf58b826e05774797067e7c733b9cf95eca103db839b0a2857846a
 SHA512:
-  metadata.gz: ec8d0a708dc3effa62136d6427f8bd9951af1d3059273db41e65a71d4416cbb39112e72fc2acd1fd5c644c9290f9fa2c0f5ad97d8fd5b15cc50bdfae34036b56
-  data.tar.gz: 3965b330df0c2af43dd3d87b95f39e8618950f13c5227caafcd39750a70e23839f50d6b5b908aecec54b4a52297182f1b149a7ae4bbb888cace7b4b1f504748a
+  metadata.gz: 1de4b48b0861710e6f2b969e5395d26133fb4e6c81daf8e8fc9a3c4f298723945710bc2d7be81ca5863b43e860c5be80b2f36bb20df21ab1ea3411e9cf0b8bb2
+  data.tar.gz: 9de7481b24bf4c4b219b24e45e652c202c293a36758dc282f21eafca1b31bec6ae1589cf5a289f71a4f6db0833a836b79e7af559c790c684f72cd06dfe687bd7

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.168.0 (2026-10-19)
+------------------
+
+* Feature - Adding a new Expected Bucket Owner optional field for GuardDuty publishing destination APIs
+
 1.167.0 (2026-10-14)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.167.0
+1.168.0

data/lib/aws-sdk-guardduty/client.rb

@@ -2593,6 +2593,7 @@ module Aws::GuardDuty
     #     destination_properties: { # required
     #       destination_arn: "String",
     #       kms_key_arn: "String",
+    #       expected_bucket_owner: "AccountId",
     #     },
     #     client_token: "ClientToken",
     #     tags: {
@@ -3570,6 +3571,7 @@ module Aws::GuardDuty
     #   resp.publishing_failure_start_timestamp #=> Integer
     #   resp.destination_properties.destination_arn #=> String
     #   resp.destination_properties.kms_key_arn #=> String
+    #   resp.destination_properties.expected_bucket_owner #=> String
     #   resp.tags #=> Hash
     #   resp.tags["TagKey"] #=> String
     #
@@ -9542,6 +9544,7 @@ module Aws::GuardDuty
     #     destination_properties: {
     #       destination_arn: "String",
     #       kms_key_arn: "String",
+    #       expected_bucket_owner: "AccountId",
     #     },
     #   })
     #
@@ -9744,7 +9747,7 @@ module Aws::GuardDuty
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-guardduty'
-      context[:gem_version] = '1.167.0'
+      context[:gem_version] = '1.168.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-guardduty/client_api.rb

@@ -1476,6 +1476,7 @@ module Aws::GuardDuty
 
     DestinationProperties.add_member(:destination_arn, Shapes::ShapeRef.new(shape: String, location_name: "destinationArn"))
     DestinationProperties.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: String, location_name: "kmsKeyArn"))
+    DestinationProperties.add_member(:expected_bucket_owner, Shapes::ShapeRef.new(shape: AccountId, location_name: "expectedBucketOwner"))
     DestinationProperties.struct_class = Types::DestinationProperties
 
     Destinations.member = Shapes::ShapeRef.new(shape: Destination)

data/lib/aws-sdk-guardduty/types.rb

@@ -4709,11 +4709,40 @@ module Aws::GuardDuty
     #   The ARN of the KMS key to use for encryption.
     #   @return [String]
     #
+    # @!attribute [rw] expected_bucket_owner
+    #   The 12-digit Amazon Web Services account ID of the account that owns
+    #   the Amazon S3 bucket specified in the `DestinationArn` parameter.
+    #
+    #   When you provide this value, GuardDuty verifies that the specified
+    #   account owns the bucket before it exports findings. If the account
+    #   ID doesn't match the actual owner of the bucket, GuardDuty doesn't
+    #   export findings to that bucket. This helps prevent GuardDuty from
+    #   exporting your findings to a bucket that a different Amazon Web
+    #   Services account owns (for example, if the original bucket was
+    #   deleted and its name was later claimed by another account). If you
+    #   don't specify this value, GuardDuty doesn't perform this
+    #   verification. GuardDuty strongly recommends that you provide the
+    #   expected bucket owner when possible.
+    #
+    #   When you update a publishing destination, omitting this field leaves
+    #   the currently stored value unchanged. This field appears in the
+    #   response only if it was provided when the publishing destination was
+    #   created or updated.
+    #
+    #   For more information, see [Verifying the Amazon S3 bucket owner][1]
+    #   in the *Amazon GuardDuty User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_exportfindings.html#guardduty-exportfindings-expected-bucket-owner
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DestinationProperties AWS API Documentation
     #
     class DestinationProperties < Struct.new(
       :destination_arn,
-      :kms_key_arn)
+      :kms_key_arn,
+      :expected_bucket_owner)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-guardduty.rb

@@ -54,7 +54,7 @@ module Aws::GuardDuty
   autoload :EndpointProvider, 'aws-sdk-guardduty/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-guardduty/endpoints'
 
-  GEM_VERSION = '1.167.0'
+  GEM_VERSION = '1.168.0'
 
 end
 

data/sig/client.rbs

@@ -249,7 +249,8 @@ module Aws
                                            destination_type: ("S3"),
                                            destination_properties: {
                                              destination_arn: ::String?,
-                                             kms_key_arn: ::String?
+                                             kms_key_arn: ::String?,
+                                             expected_bucket_owner: ::String?
                                            },
                                            ?client_token: ::String,
                                            ?tags: Hash[::String, ::String]
@@ -1468,7 +1469,8 @@ module Aws
                                            destination_id: ::String,
                                            ?destination_properties: {
                                              destination_arn: ::String?,
-                                             kms_key_arn: ::String?
+                                             kms_key_arn: ::String?,
+                                             expected_bucket_owner: ::String?
                                            }
                                          ) -> _UpdatePublishingDestinationResponseSuccess
                                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdatePublishingDestinationResponseSuccess

data/sig/errors.rbs

@@ -11,23 +11,23 @@ module Aws
       class ServiceError < ::Aws::Errors::ServiceError
       end
 
-      class AccessDeniedException < ::Aws::Errors::ServiceError
+      class AccessDeniedException < ServiceError
         def message: () -> ::String
         def type: () -> ::String
       end
-      class BadRequestException < ::Aws::Errors::ServiceError
+      class BadRequestException < ServiceError
         def message: () -> ::String
         def type: () -> ::String
       end
-      class ConflictException < ::Aws::Errors::ServiceError
+      class ConflictException < ServiceError
         def message: () -> ::String
         def type: () -> ::String
       end
-      class InternalServerErrorException < ::Aws::Errors::ServiceError
+      class InternalServerErrorException < ServiceError
         def message: () -> ::String
         def type: () -> ::String
       end
-      class ResourceNotFoundException < ::Aws::Errors::ServiceError
+      class ResourceNotFoundException < ServiceError
         def message: () -> ::String
         def type: () -> ::String
       end

data/sig/types.rbs

@@ -867,6 +867,7 @@ module Aws::GuardDuty
     class DestinationProperties
       attr_accessor destination_arn: ::String
       attr_accessor kms_key_arn: ::String
+      attr_accessor expected_bucket_owner: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-guardduty
 version: !ruby/object:Gem::Version
-  version: 1.167.0
+  version: 1.168.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.256.0
+        version: 3.258.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.256.0
+        version: 3.258.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement