aws-sdk-guardduty 1.22.0 → 1.23.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: dc1623d157c2755db50799cd90b0c5e987488f0a
4
- data.tar.gz: a9c2abc7755d8c608eb4807d0ce4a64671198548
3
+ metadata.gz: ca0488a948eb0fc34fa134df11c54e13aaca1640
4
+ data.tar.gz: 567027c5657fe10bd69338c69221a96b5c50f051
5
5
  SHA512:
6
- metadata.gz: cc361fca9b1e0498c55f231ef53fb9927232340c795a0dfe808e4a810cde0618732d59f3537ac5af0d2fe48a4c32ddc54a2078400fb2b7191915f7925f66ff3f
7
- data.tar.gz: 2d6450162f3a55a67bd8599e25ecc8d25b913704b17c65f981a946f3b1c4593f6b3696de71189af927c9122625d9f7e9b5d00271f286f4c03bf2df219501ed7b
6
+ metadata.gz: f18728817f44484fe68e84d16453d4a9ddd64b254a1e031743965bfdffe31e828000dde0f83d827f94fabb632141acbaeccc020d0095027470a6b850abab06ac
7
+ data.tar.gz: 24f085b0d3ab1059521393b080b6e154626e1af7830f5b4d5229880354fc716df31114e5abcf800593d37f408d307f5fae275bc1704cfe3b9409031b55c834c3
@@ -42,6 +42,6 @@ require_relative 'aws-sdk-guardduty/customizations'
42
42
  # @service
43
43
  module Aws::GuardDuty
44
44
 
45
- GEM_VERSION = '1.22.0'
45
+ GEM_VERSION = '1.23.0'
46
46
 
47
47
  end
@@ -286,8 +286,12 @@ module Aws::GuardDuty
286
286
  req.send_request(options)
287
287
  end
288
288
 
289
- # Archives Amazon GuardDuty findings specified by the list of finding
290
- # IDs.
289
+ # Archives GuardDuty findings specified by the list of finding IDs.
290
+ #
291
+ # <note markdown="1"> Only the master account can archive findings. Member accounts do not
292
+ # have permission to archive findings from their accounts.
293
+ #
294
+ # </note>
291
295
  #
292
296
  # @option params [required, String] :detector_id
293
297
  # The ID of the detector that specifies the GuardDuty service whose
@@ -314,9 +318,10 @@ module Aws::GuardDuty
314
318
  req.send_request(options)
315
319
  end
316
320
 
317
- # Creates a single Amazon GuardDuty detector. A detector is an object
318
- # that represents the GuardDuty service. A detector must be created in
319
- # order for GuardDuty to become operational.
321
+ # Creates a single Amazon GuardDuty detector. A detector is a resource
322
+ # that represents the GuardDuty service. To start using GuardDuty, you
323
+ # must create a detector in each region that you enable the service. You
324
+ # can have only one detector per account per region.
320
325
  #
321
326
  # @option params [required, Boolean] :enable
322
327
  # A boolean value that specifies whether the detector is to be enabled.
@@ -1126,6 +1131,10 @@ module Aws::GuardDuty
1126
1131
  # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.asn_org #=> String
1127
1132
  # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.isp #=> String
1128
1133
  # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.org #=> String
1134
+ # resp.findings[0].service.evidence.threat_intelligence_details #=> Array
1135
+ # resp.findings[0].service.evidence.threat_intelligence_details[0].threat_list_name #=> String
1136
+ # resp.findings[0].service.evidence.threat_intelligence_details[0].threat_names #=> Array
1137
+ # resp.findings[0].service.evidence.threat_intelligence_details[0].threat_names[0] #=> String
1129
1138
  # resp.findings[0].service.archived #=> Boolean
1130
1139
  # resp.findings[0].service.count #=> Integer
1131
1140
  # resp.findings[0].service.detector_id #=> String
@@ -1266,8 +1275,8 @@ module Aws::GuardDuty
1266
1275
  req.send_request(options)
1267
1276
  end
1268
1277
 
1269
- # Provides the details for the GuardDuty master account to the current
1270
- # GuardDuty member account.
1278
+ # Provides the details for the GuardDuty master account associated with
1279
+ # the current GuardDuty member account.
1271
1280
  #
1272
1281
  # @option params [required, String] :detector_id
1273
1282
  # The unique ID of the detector of the GuardDuty member account.
@@ -2218,7 +2227,7 @@ module Aws::GuardDuty
2218
2227
  params: params,
2219
2228
  config: config)
2220
2229
  context[:gem_name] = 'aws-sdk-guardduty'
2221
- context[:gem_version] = '1.22.0'
2230
+ context[:gem_version] = '1.23.0'
2222
2231
  Seahorse::Client::Request.new(handlers, context)
2223
2232
  end
2224
2233
 
@@ -69,6 +69,7 @@ module Aws::GuardDuty
69
69
  Email = Shapes::StringShape.new(name: 'Email')
70
70
  Eq = Shapes::ListShape.new(name: 'Eq')
71
71
  Equals = Shapes::ListShape.new(name: 'Equals')
72
+ Evidence = Shapes::StructureShape.new(name: 'Evidence')
72
73
  Feedback = Shapes::StringShape.new(name: 'Feedback')
73
74
  FilterAction = Shapes::StringShape.new(name: 'FilterAction')
74
75
  FilterDescription = Shapes::StringShape.new(name: 'FilterDescription')
@@ -179,6 +180,9 @@ module Aws::GuardDuty
179
180
  ThreatIntelSetFormat = Shapes::StringShape.new(name: 'ThreatIntelSetFormat')
180
181
  ThreatIntelSetIds = Shapes::ListShape.new(name: 'ThreatIntelSetIds')
181
182
  ThreatIntelSetStatus = Shapes::StringShape.new(name: 'ThreatIntelSetStatus')
183
+ ThreatIntelligenceDetail = Shapes::StructureShape.new(name: 'ThreatIntelligenceDetail')
184
+ ThreatIntelligenceDetails = Shapes::ListShape.new(name: 'ThreatIntelligenceDetails')
185
+ ThreatNames = Shapes::ListShape.new(name: 'ThreatNames')
182
186
  UnarchiveFindingsRequest = Shapes::StructureShape.new(name: 'UnarchiveFindingsRequest')
183
187
  UnarchiveFindingsResponse = Shapes::StructureShape.new(name: 'UnarchiveFindingsResponse')
184
188
  UnprocessedAccount = Shapes::StructureShape.new(name: 'UnprocessedAccount')
@@ -393,6 +397,9 @@ module Aws::GuardDuty
393
397
 
394
398
  Equals.member = Shapes::ShapeRef.new(shape: String)
395
399
 
400
+ Evidence.add_member(:threat_intelligence_details, Shapes::ShapeRef.new(shape: ThreatIntelligenceDetails, location_name: "threatIntelligenceDetails"))
401
+ Evidence.struct_class = Types::Evidence
402
+
396
403
  FilterNames.member = Shapes::ShapeRef.new(shape: FilterName)
397
404
 
398
405
  Finding.add_member(:account_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "accountId"))
@@ -721,6 +728,7 @@ module Aws::GuardDuty
721
728
  SecurityGroups.member = Shapes::ShapeRef.new(shape: SecurityGroup)
722
729
 
723
730
  Service.add_member(:action, Shapes::ShapeRef.new(shape: Action, location_name: "action"))
731
+ Service.add_member(:evidence, Shapes::ShapeRef.new(shape: Evidence, location_name: "evidence"))
724
732
  Service.add_member(:archived, Shapes::ShapeRef.new(shape: Boolean, location_name: "archived"))
725
733
  Service.add_member(:count, Shapes::ShapeRef.new(shape: Integer, location_name: "count"))
726
734
  Service.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, location_name: "detectorId"))
@@ -768,6 +776,14 @@ module Aws::GuardDuty
768
776
 
769
777
  ThreatIntelSetIds.member = Shapes::ShapeRef.new(shape: String)
770
778
 
779
+ ThreatIntelligenceDetail.add_member(:threat_list_name, Shapes::ShapeRef.new(shape: String, location_name: "threatListName"))
780
+ ThreatIntelligenceDetail.add_member(:threat_names, Shapes::ShapeRef.new(shape: ThreatNames, location_name: "threatNames"))
781
+ ThreatIntelligenceDetail.struct_class = Types::ThreatIntelligenceDetail
782
+
783
+ ThreatIntelligenceDetails.member = Shapes::ShapeRef.new(shape: ThreatIntelligenceDetail)
784
+
785
+ ThreatNames.member = Shapes::ShapeRef.new(shape: String)
786
+
771
787
  UnarchiveFindingsRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
772
788
  UnarchiveFindingsRequest.add_member(:finding_ids, Shapes::ShapeRef.new(shape: FindingIds, required: true, location_name: "findingIds"))
773
789
  UnarchiveFindingsRequest.struct_class = Types::UnarchiveFindingsRequest
@@ -44,6 +44,8 @@ module Aws::GuardDuty
44
44
  #
45
45
  class AcceptInvitationResponse < Aws::EmptyStructure; end
46
46
 
47
+ # Contains information about the access keys.
48
+ #
47
49
  # @!attribute [rw] access_key_id
48
50
  # Access key ID of the user.
49
51
  # @return [String]
@@ -70,6 +72,8 @@ module Aws::GuardDuty
70
72
  include Aws::Structure
71
73
  end
72
74
 
75
+ # Contains information about the account.
76
+ #
73
77
  # @note When making an API call, you may pass AccountDetail
74
78
  # data as a hash:
75
79
  #
@@ -94,6 +98,8 @@ module Aws::GuardDuty
94
98
  include Aws::Structure
95
99
  end
96
100
 
101
+ # Contains information about action.
102
+ #
97
103
  # @!attribute [rw] action_type
98
104
  # GuardDuty Finding activity type.
99
105
  # @return [String]
@@ -156,6 +162,8 @@ module Aws::GuardDuty
156
162
  #
157
163
  class ArchiveFindingsResponse < Aws::EmptyStructure; end
158
164
 
165
+ # Contains information about the API operation.
166
+ #
159
167
  # @!attribute [rw] api
160
168
  # AWS API name.
161
169
  # @return [String]
@@ -205,6 +213,8 @@ module Aws::GuardDuty
205
213
  include Aws::Structure
206
214
  end
207
215
 
216
+ # Contains information about the city associated with the IP address.
217
+ #
208
218
  # @!attribute [rw] city_name
209
219
  # City name of the remote IP address.
210
220
  # @return [String]
@@ -216,6 +226,8 @@ module Aws::GuardDuty
216
226
  include Aws::Structure
217
227
  end
218
228
 
229
+ # Contains information about the condition.
230
+ #
219
231
  # @note When making an API call, you may pass Condition
220
232
  # data as a hash:
221
233
  #
@@ -235,39 +247,43 @@ module Aws::GuardDuty
235
247
  # }
236
248
  #
237
249
  # @!attribute [rw] eq
238
- # Represents the equal condition to be applied to a single field when
239
- # querying for findings.
250
+ # Deprecated. Represents the equal condition to be applied to a single
251
+ # field when querying for findings.
240
252
  # @return [Array<String>]
241
253
  #
242
254
  # @!attribute [rw] neq
243
- # Represents the not equal condition to be applied to a single field
244
- # when querying for findings.
255
+ # Deprecated. Represents the not equal condition to be applied to a
256
+ # single field when querying for findings.
245
257
  # @return [Array<String>]
246
258
  #
247
259
  # @!attribute [rw] gt
248
- # Represents a greater than condition to be applied to a single field
249
- # when querying for findings.
260
+ # Deprecated. Represents a greater than condition to be applied to a
261
+ # single field when querying for findings.
250
262
  # @return [Integer]
251
263
  #
252
264
  # @!attribute [rw] gte
253
- # Represents a greater than equal condition to be applied to a single
254
- # field when querying for findings.
265
+ # Deprecated. Represents a greater than equal condition to be applied
266
+ # to a single field when querying for findings.
255
267
  # @return [Integer]
256
268
  #
257
269
  # @!attribute [rw] lt
258
- # Represents a less than condition to be applied to a single field
259
- # when querying for findings.
270
+ # Deprecated. Represents a less than condition to be applied to a
271
+ # single field when querying for findings.
260
272
  # @return [Integer]
261
273
  #
262
274
  # @!attribute [rw] lte
263
- # Represents a less than equal condition to be applied to a single
264
- # field when querying for findings.
275
+ # Deprecated. Represents a less than equal condition to be applied to
276
+ # a single field when querying for findings.
265
277
  # @return [Integer]
266
278
  #
267
279
  # @!attribute [rw] equals
280
+ # Represents an **equal** condition to be applied to a single field
281
+ # when querying for findings.
268
282
  # @return [Array<String>]
269
283
  #
270
284
  # @!attribute [rw] not_equals
285
+ # Represents an **not equal** condition to be applied to a single
286
+ # field when querying for findings.
271
287
  # @return [Array<String>]
272
288
  #
273
289
  # @!attribute [rw] greater_than
@@ -308,6 +324,8 @@ module Aws::GuardDuty
308
324
  include Aws::Structure
309
325
  end
310
326
 
327
+ # Contains information about the country.
328
+ #
311
329
  # @!attribute [rw] country_code
312
330
  # Country code of the remote IP address.
313
331
  # @return [String]
@@ -865,8 +883,7 @@ module Aws::GuardDuty
865
883
  end
866
884
 
867
885
  # @!attribute [rw] unprocessed_accounts
868
- # A list of objects containing the unprocessed account and a result
869
- # string explaining why it was unprocessed.
886
+ # The accounts that could not be processed.
870
887
  # @return [Array<Types::UnprocessedAccount>]
871
888
  #
872
889
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteMembersResponse AWS API Documentation
@@ -964,6 +981,8 @@ module Aws::GuardDuty
964
981
  include Aws::Structure
965
982
  end
966
983
 
984
+ # Contains information about the DNS request.
985
+ #
967
986
  # @!attribute [rw] domain
968
987
  # Domain information for the DNS request.
969
988
  # @return [String]
@@ -975,6 +994,8 @@ module Aws::GuardDuty
975
994
  include Aws::Structure
976
995
  end
977
996
 
997
+ # Contains information about the domain.
998
+ #
978
999
  # @!attribute [rw] domain
979
1000
  # Domain information for the AWS API call.
980
1001
  # @return [String]
@@ -986,69 +1007,79 @@ module Aws::GuardDuty
986
1007
  include Aws::Structure
987
1008
  end
988
1009
 
1010
+ # Contains information about the reason that the finding was generated.
1011
+ #
1012
+ # @!attribute [rw] threat_intelligence_details
1013
+ # A list of threat intelligence details related to the evidence.
1014
+ # @return [Array<Types::ThreatIntelligenceDetail>]
1015
+ #
1016
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Evidence AWS API Documentation
1017
+ #
1018
+ class Evidence < Struct.new(
1019
+ :threat_intelligence_details)
1020
+ include Aws::Structure
1021
+ end
1022
+
1023
+ # Contains information about the finding.
1024
+ #
989
1025
  # @!attribute [rw] account_id
990
- # AWS account ID where the activity occurred that prompted GuardDuty
991
- # to generate a finding.
1026
+ # The ID of the account in which the finding was generated.
992
1027
  # @return [String]
993
1028
  #
994
1029
  # @!attribute [rw] arn
995
- # The ARN of a finding described by the action.
1030
+ # The ARN for the finding.
996
1031
  # @return [String]
997
1032
  #
998
1033
  # @!attribute [rw] confidence
999
- # The confidence level of a finding.
1034
+ # The confidence score for the finding.
1000
1035
  # @return [Float]
1001
1036
  #
1002
1037
  # @!attribute [rw] created_at
1003
- # The time stamp at which a finding was generated.
1038
+ # The time and date at which the finding was created.
1004
1039
  # @return [String]
1005
1040
  #
1006
1041
  # @!attribute [rw] description
1007
- # The description of a finding.
1042
+ # The description of the finding.
1008
1043
  # @return [String]
1009
1044
  #
1010
1045
  # @!attribute [rw] id
1011
- # The identifier that corresponds to a finding described by the
1012
- # action.
1046
+ # The ID of the finding.
1013
1047
  # @return [String]
1014
1048
  #
1015
1049
  # @!attribute [rw] partition
1016
- # The AWS resource partition.
1050
+ # The partition associated with the finding.
1017
1051
  # @return [String]
1018
1052
  #
1019
1053
  # @!attribute [rw] region
1020
- # The AWS region where the activity occurred that prompted GuardDuty
1021
- # to generate a finding.
1054
+ # The Region in which the finding was generated.
1022
1055
  # @return [String]
1023
1056
  #
1024
1057
  # @!attribute [rw] resource
1025
- # The AWS resource associated with the activity that prompted
1026
- # GuardDuty to generate a finding.
1058
+ # Contains information about the resource.
1027
1059
  # @return [Types::Resource]
1028
1060
  #
1029
1061
  # @!attribute [rw] schema_version
1030
- # Findings' schema version.
1062
+ # The version of the schema used for the finding.
1031
1063
  # @return [String]
1032
1064
  #
1033
1065
  # @!attribute [rw] service
1034
- # Additional information assigned to the generated finding by
1035
- # GuardDuty.
1066
+ # Contains information about the service.
1036
1067
  # @return [Types::Service]
1037
1068
  #
1038
1069
  # @!attribute [rw] severity
1039
- # The severity of a finding.
1070
+ # The severity of the finding.
1040
1071
  # @return [Float]
1041
1072
  #
1042
1073
  # @!attribute [rw] title
1043
- # The title of a finding.
1074
+ # The title for the finding.
1044
1075
  # @return [String]
1045
1076
  #
1046
1077
  # @!attribute [rw] type
1047
- # The type of a finding described by the action.
1078
+ # The type of the finding.
1048
1079
  # @return [String]
1049
1080
  #
1050
1081
  # @!attribute [rw] updated_at
1051
- # The time stamp at which a finding was last updated.
1082
+ # The time and date at which the finding was laste updated.
1052
1083
  # @return [String]
1053
1084
  #
1054
1085
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Finding AWS API Documentation
@@ -1072,6 +1103,8 @@ module Aws::GuardDuty
1072
1103
  include Aws::Structure
1073
1104
  end
1074
1105
 
1106
+ # Contains finding criteria information.
1107
+ #
1075
1108
  # @note When making an API call, you may pass FindingCriteria
1076
1109
  # data as a hash:
1077
1110
  #
@@ -1106,6 +1139,8 @@ module Aws::GuardDuty
1106
1139
  include Aws::Structure
1107
1140
  end
1108
1141
 
1142
+ # Contains information about finding statistics.
1143
+ #
1109
1144
  # @!attribute [rw] count_by_severity
1110
1145
  # Represents a map of severity to count statistic for a set of
1111
1146
  # findings
@@ -1118,6 +1153,8 @@ module Aws::GuardDuty
1118
1153
  include Aws::Structure
1119
1154
  end
1120
1155
 
1156
+ # Contains information about the
1157
+ #
1121
1158
  # @!attribute [rw] lat
1122
1159
  # Latitude information of remote IP address.
1123
1160
  # @return [Float]
@@ -1561,6 +1598,8 @@ module Aws::GuardDuty
1561
1598
  include Aws::Structure
1562
1599
  end
1563
1600
 
1601
+ # Contains information about the instance profile.
1602
+ #
1564
1603
  # @!attribute [rw] arn
1565
1604
  # AWS EC2 instance profile ARN.
1566
1605
  # @return [String]
@@ -1577,6 +1616,8 @@ module Aws::GuardDuty
1577
1616
  include Aws::Structure
1578
1617
  end
1579
1618
 
1619
+ # Contains information about the details of an instance.
1620
+ #
1580
1621
  # @!attribute [rw] availability_zone
1581
1622
  # The availability zone of the EC2 instance.
1582
1623
  # @return [String]
@@ -1661,6 +1702,8 @@ module Aws::GuardDuty
1661
1702
  include Aws::Structure
1662
1703
  end
1663
1704
 
1705
+ # Contains information about the invitation.
1706
+ #
1664
1707
  # @!attribute [rw] account_id
1665
1708
  # Inviter account ID
1666
1709
  # @return [String]
@@ -2108,6 +2151,7 @@ module Aws::GuardDuty
2108
2151
  end
2109
2152
 
2110
2153
  # @!attribute [rw] tags
2154
+ # The tags associated with the resource.
2111
2155
  # @return [Hash<String,String>]
2112
2156
  #
2113
2157
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListTagsForResourceResponse AWS API Documentation
@@ -2170,6 +2214,8 @@ module Aws::GuardDuty
2170
2214
  include Aws::Structure
2171
2215
  end
2172
2216
 
2217
+ # Contains information about the port for the local connection.
2218
+ #
2173
2219
  # @!attribute [rw] port
2174
2220
  # Port number of the local connection.
2175
2221
  # @return [Integer]
@@ -2186,8 +2232,10 @@ module Aws::GuardDuty
2186
2232
  include Aws::Structure
2187
2233
  end
2188
2234
 
2235
+ # Contains information about the Master account and invitation.
2236
+ #
2189
2237
  # @!attribute [rw] account_id
2190
- # Master account ID
2238
+ # The ID of the account used as the Master account.
2191
2239
  # @return [String]
2192
2240
  #
2193
2241
  # @!attribute [rw] invitation_id
@@ -2201,7 +2249,7 @@ module Aws::GuardDuty
2201
2249
  # @return [String]
2202
2250
  #
2203
2251
  # @!attribute [rw] invited_at
2204
- # Timestamp at which the invitation was sent
2252
+ # Timestamp at which the invitation was sent.
2205
2253
  # @return [String]
2206
2254
  #
2207
2255
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Master AWS API Documentation
@@ -2214,6 +2262,8 @@ module Aws::GuardDuty
2214
2262
  include Aws::Structure
2215
2263
  end
2216
2264
 
2265
+ # Continas information about the member account
2266
+ #
2217
2267
  # @!attribute [rw] account_id
2218
2268
  # Member account ID.
2219
2269
  # @return [String]
@@ -2255,6 +2305,8 @@ module Aws::GuardDuty
2255
2305
  include Aws::Structure
2256
2306
  end
2257
2307
 
2308
+ # Contains information about the network connection.
2309
+ #
2258
2310
  # @!attribute [rw] blocked
2259
2311
  # Network connection blocked information.
2260
2312
  # @return [Boolean]
@@ -2291,6 +2343,8 @@ module Aws::GuardDuty
2291
2343
  include Aws::Structure
2292
2344
  end
2293
2345
 
2346
+ # Contains information about the network interface.
2347
+ #
2294
2348
  # @!attribute [rw] ipv_6_addresses
2295
2349
  # A list of EC2 instance IPv6 address information.
2296
2350
  # @return [Array<String>]
@@ -2347,6 +2401,8 @@ module Aws::GuardDuty
2347
2401
  include Aws::Structure
2348
2402
  end
2349
2403
 
2404
+ # Continas information about the organization.
2405
+ #
2350
2406
  # @!attribute [rw] asn
2351
2407
  # Autonomous system number of the internet provider of the remote IP
2352
2408
  # address.
@@ -2374,6 +2430,8 @@ module Aws::GuardDuty
2374
2430
  include Aws::Structure
2375
2431
  end
2376
2432
 
2433
+ # Contains information about the port probe.
2434
+ #
2377
2435
  # @!attribute [rw] blocked
2378
2436
  # Port probe blocked information.
2379
2437
  # @return [Boolean]
@@ -2390,6 +2448,8 @@ module Aws::GuardDuty
2390
2448
  include Aws::Structure
2391
2449
  end
2392
2450
 
2451
+ # Contains information about the port probe details.
2452
+ #
2393
2453
  # @!attribute [rw] local_port_details
2394
2454
  # Local port information of the connection.
2395
2455
  # @return [Types::LocalPortDetails]
@@ -2406,6 +2466,8 @@ module Aws::GuardDuty
2406
2466
  include Aws::Structure
2407
2467
  end
2408
2468
 
2469
+ # Contains information about the private IP address.
2470
+ #
2409
2471
  # @!attribute [rw] private_dns_name
2410
2472
  # Private DNS name of the EC2 instance.
2411
2473
  # @return [String]
@@ -2422,6 +2484,8 @@ module Aws::GuardDuty
2422
2484
  include Aws::Structure
2423
2485
  end
2424
2486
 
2487
+ # Contains information about the product code.
2488
+ #
2425
2489
  # @!attribute [rw] code
2426
2490
  # Product code information.
2427
2491
  # @return [String]
@@ -2438,6 +2502,8 @@ module Aws::GuardDuty
2438
2502
  include Aws::Structure
2439
2503
  end
2440
2504
 
2505
+ # Continas information about the remote IP address.
2506
+ #
2441
2507
  # @!attribute [rw] city
2442
2508
  # City information of the remote IP address.
2443
2509
  # @return [Types::City]
@@ -2469,6 +2535,8 @@ module Aws::GuardDuty
2469
2535
  include Aws::Structure
2470
2536
  end
2471
2537
 
2538
+ # Contains information about the remote port.
2539
+ #
2472
2540
  # @!attribute [rw] port
2473
2541
  # Port number of the remote connection.
2474
2542
  # @return [Integer]
@@ -2485,6 +2553,8 @@ module Aws::GuardDuty
2485
2553
  include Aws::Structure
2486
2554
  end
2487
2555
 
2556
+ # Contains information about the resource.
2557
+ #
2488
2558
  # @!attribute [rw] access_key_details
2489
2559
  # The IAM access key details (IAM user information) of a user that
2490
2560
  # engaged in the activity that prompted GuardDuty to generate a
@@ -2509,6 +2579,8 @@ module Aws::GuardDuty
2509
2579
  include Aws::Structure
2510
2580
  end
2511
2581
 
2582
+ # Contains information about the security group.
2583
+ #
2512
2584
  # @!attribute [rw] group_id
2513
2585
  # EC2 instance's security group ID.
2514
2586
  # @return [String]
@@ -2525,10 +2597,16 @@ module Aws::GuardDuty
2525
2597
  include Aws::Structure
2526
2598
  end
2527
2599
 
2600
+ # Contains information about the service.
2601
+ #
2528
2602
  # @!attribute [rw] action
2529
2603
  # Information about the activity described in a finding.
2530
2604
  # @return [Types::Action]
2531
2605
  #
2606
+ # @!attribute [rw] evidence
2607
+ # An evidence object associated with the service.
2608
+ # @return [Types::Evidence]
2609
+ #
2532
2610
  # @!attribute [rw] archived
2533
2611
  # Indicates whether this finding is archived.
2534
2612
  # @return [Boolean]
@@ -2567,6 +2645,7 @@ module Aws::GuardDuty
2567
2645
  #
2568
2646
  class Service < Struct.new(
2569
2647
  :action,
2648
+ :evidence,
2570
2649
  :archived,
2571
2650
  :count,
2572
2651
  :detector_id,
@@ -2578,6 +2657,8 @@ module Aws::GuardDuty
2578
2657
  include Aws::Structure
2579
2658
  end
2580
2659
 
2660
+ # Contains information about the criteria for sorting.
2661
+ #
2581
2662
  # @note When making an API call, you may pass SortCriteria
2582
2663
  # data as a hash:
2583
2664
  #
@@ -2679,6 +2760,8 @@ module Aws::GuardDuty
2679
2760
  include Aws::Structure
2680
2761
  end
2681
2762
 
2763
+ # Contains information about the tag associated with the resource.
2764
+ #
2682
2765
  # @!attribute [rw] key
2683
2766
  # EC2 instance tag key.
2684
2767
  # @return [String]
@@ -2725,6 +2808,26 @@ module Aws::GuardDuty
2725
2808
  #
2726
2809
  class TagResourceResponse < Aws::EmptyStructure; end
2727
2810
 
2811
+ # An instance of a threat intelligence detail that constitutes evidence
2812
+ # for the finding.
2813
+ #
2814
+ # @!attribute [rw] threat_list_name
2815
+ # The name of the threat intelligence list that triggered the finding.
2816
+ # @return [String]
2817
+ #
2818
+ # @!attribute [rw] threat_names
2819
+ # A list of names of the threats in the threat intelligence list that
2820
+ # triggered the finding.
2821
+ # @return [Array<String>]
2822
+ #
2823
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ThreatIntelligenceDetail AWS API Documentation
2824
+ #
2825
+ class ThreatIntelligenceDetail < Struct.new(
2826
+ :threat_list_name,
2827
+ :threat_names)
2828
+ include Aws::Structure
2829
+ end
2830
+
2728
2831
  # @note When making an API call, you may pass UnarchiveFindingsRequest
2729
2832
  # data as a hash:
2730
2833
  #
@@ -2754,6 +2857,8 @@ module Aws::GuardDuty
2754
2857
  #
2755
2858
  class UnarchiveFindingsResponse < Aws::EmptyStructure; end
2756
2859
 
2860
+ # Contains information about the accounts that were not processed.
2861
+ #
2757
2862
  # @!attribute [rw] account_id
2758
2863
  # AWS Account ID.
2759
2864
  # @return [String]
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-guardduty
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.22.0
4
+ version: 1.23.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-07-25 00:00:00.000000000 Z
11
+ date: 2019-08-09 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core