aws-sdk-guardduty 1.22.0 → 1.23.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/aws-sdk-guardduty.rb +1 -1
- data/lib/aws-sdk-guardduty/client.rb +17 -8
- data/lib/aws-sdk-guardduty/client_api.rb +16 -0
- data/lib/aws-sdk-guardduty/types.rb +141 -36
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: ca0488a948eb0fc34fa134df11c54e13aaca1640
|
4
|
+
data.tar.gz: 567027c5657fe10bd69338c69221a96b5c50f051
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: f18728817f44484fe68e84d16453d4a9ddd64b254a1e031743965bfdffe31e828000dde0f83d827f94fabb632141acbaeccc020d0095027470a6b850abab06ac
|
7
|
+
data.tar.gz: 24f085b0d3ab1059521393b080b6e154626e1af7830f5b4d5229880354fc716df31114e5abcf800593d37f408d307f5fae275bc1704cfe3b9409031b55c834c3
|
data/lib/aws-sdk-guardduty.rb
CHANGED
@@ -286,8 +286,12 @@ module Aws::GuardDuty
|
|
286
286
|
req.send_request(options)
|
287
287
|
end
|
288
288
|
|
289
|
-
# Archives
|
290
|
-
#
|
289
|
+
# Archives GuardDuty findings specified by the list of finding IDs.
|
290
|
+
#
|
291
|
+
# <note markdown="1"> Only the master account can archive findings. Member accounts do not
|
292
|
+
# have permission to archive findings from their accounts.
|
293
|
+
#
|
294
|
+
# </note>
|
291
295
|
#
|
292
296
|
# @option params [required, String] :detector_id
|
293
297
|
# The ID of the detector that specifies the GuardDuty service whose
|
@@ -314,9 +318,10 @@ module Aws::GuardDuty
|
|
314
318
|
req.send_request(options)
|
315
319
|
end
|
316
320
|
|
317
|
-
# Creates a single Amazon GuardDuty detector. A detector is
|
318
|
-
# that represents the GuardDuty service.
|
319
|
-
#
|
321
|
+
# Creates a single Amazon GuardDuty detector. A detector is a resource
|
322
|
+
# that represents the GuardDuty service. To start using GuardDuty, you
|
323
|
+
# must create a detector in each region that you enable the service. You
|
324
|
+
# can have only one detector per account per region.
|
320
325
|
#
|
321
326
|
# @option params [required, Boolean] :enable
|
322
327
|
# A boolean value that specifies whether the detector is to be enabled.
|
@@ -1126,6 +1131,10 @@ module Aws::GuardDuty
|
|
1126
1131
|
# resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.asn_org #=> String
|
1127
1132
|
# resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.isp #=> String
|
1128
1133
|
# resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.org #=> String
|
1134
|
+
# resp.findings[0].service.evidence.threat_intelligence_details #=> Array
|
1135
|
+
# resp.findings[0].service.evidence.threat_intelligence_details[0].threat_list_name #=> String
|
1136
|
+
# resp.findings[0].service.evidence.threat_intelligence_details[0].threat_names #=> Array
|
1137
|
+
# resp.findings[0].service.evidence.threat_intelligence_details[0].threat_names[0] #=> String
|
1129
1138
|
# resp.findings[0].service.archived #=> Boolean
|
1130
1139
|
# resp.findings[0].service.count #=> Integer
|
1131
1140
|
# resp.findings[0].service.detector_id #=> String
|
@@ -1266,8 +1275,8 @@ module Aws::GuardDuty
|
|
1266
1275
|
req.send_request(options)
|
1267
1276
|
end
|
1268
1277
|
|
1269
|
-
# Provides the details for the GuardDuty master account
|
1270
|
-
# GuardDuty member account.
|
1278
|
+
# Provides the details for the GuardDuty master account associated with
|
1279
|
+
# the current GuardDuty member account.
|
1271
1280
|
#
|
1272
1281
|
# @option params [required, String] :detector_id
|
1273
1282
|
# The unique ID of the detector of the GuardDuty member account.
|
@@ -2218,7 +2227,7 @@ module Aws::GuardDuty
|
|
2218
2227
|
params: params,
|
2219
2228
|
config: config)
|
2220
2229
|
context[:gem_name] = 'aws-sdk-guardduty'
|
2221
|
-
context[:gem_version] = '1.
|
2230
|
+
context[:gem_version] = '1.23.0'
|
2222
2231
|
Seahorse::Client::Request.new(handlers, context)
|
2223
2232
|
end
|
2224
2233
|
|
@@ -69,6 +69,7 @@ module Aws::GuardDuty
|
|
69
69
|
Email = Shapes::StringShape.new(name: 'Email')
|
70
70
|
Eq = Shapes::ListShape.new(name: 'Eq')
|
71
71
|
Equals = Shapes::ListShape.new(name: 'Equals')
|
72
|
+
Evidence = Shapes::StructureShape.new(name: 'Evidence')
|
72
73
|
Feedback = Shapes::StringShape.new(name: 'Feedback')
|
73
74
|
FilterAction = Shapes::StringShape.new(name: 'FilterAction')
|
74
75
|
FilterDescription = Shapes::StringShape.new(name: 'FilterDescription')
|
@@ -179,6 +180,9 @@ module Aws::GuardDuty
|
|
179
180
|
ThreatIntelSetFormat = Shapes::StringShape.new(name: 'ThreatIntelSetFormat')
|
180
181
|
ThreatIntelSetIds = Shapes::ListShape.new(name: 'ThreatIntelSetIds')
|
181
182
|
ThreatIntelSetStatus = Shapes::StringShape.new(name: 'ThreatIntelSetStatus')
|
183
|
+
ThreatIntelligenceDetail = Shapes::StructureShape.new(name: 'ThreatIntelligenceDetail')
|
184
|
+
ThreatIntelligenceDetails = Shapes::ListShape.new(name: 'ThreatIntelligenceDetails')
|
185
|
+
ThreatNames = Shapes::ListShape.new(name: 'ThreatNames')
|
182
186
|
UnarchiveFindingsRequest = Shapes::StructureShape.new(name: 'UnarchiveFindingsRequest')
|
183
187
|
UnarchiveFindingsResponse = Shapes::StructureShape.new(name: 'UnarchiveFindingsResponse')
|
184
188
|
UnprocessedAccount = Shapes::StructureShape.new(name: 'UnprocessedAccount')
|
@@ -393,6 +397,9 @@ module Aws::GuardDuty
|
|
393
397
|
|
394
398
|
Equals.member = Shapes::ShapeRef.new(shape: String)
|
395
399
|
|
400
|
+
Evidence.add_member(:threat_intelligence_details, Shapes::ShapeRef.new(shape: ThreatIntelligenceDetails, location_name: "threatIntelligenceDetails"))
|
401
|
+
Evidence.struct_class = Types::Evidence
|
402
|
+
|
396
403
|
FilterNames.member = Shapes::ShapeRef.new(shape: FilterName)
|
397
404
|
|
398
405
|
Finding.add_member(:account_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "accountId"))
|
@@ -721,6 +728,7 @@ module Aws::GuardDuty
|
|
721
728
|
SecurityGroups.member = Shapes::ShapeRef.new(shape: SecurityGroup)
|
722
729
|
|
723
730
|
Service.add_member(:action, Shapes::ShapeRef.new(shape: Action, location_name: "action"))
|
731
|
+
Service.add_member(:evidence, Shapes::ShapeRef.new(shape: Evidence, location_name: "evidence"))
|
724
732
|
Service.add_member(:archived, Shapes::ShapeRef.new(shape: Boolean, location_name: "archived"))
|
725
733
|
Service.add_member(:count, Shapes::ShapeRef.new(shape: Integer, location_name: "count"))
|
726
734
|
Service.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, location_name: "detectorId"))
|
@@ -768,6 +776,14 @@ module Aws::GuardDuty
|
|
768
776
|
|
769
777
|
ThreatIntelSetIds.member = Shapes::ShapeRef.new(shape: String)
|
770
778
|
|
779
|
+
ThreatIntelligenceDetail.add_member(:threat_list_name, Shapes::ShapeRef.new(shape: String, location_name: "threatListName"))
|
780
|
+
ThreatIntelligenceDetail.add_member(:threat_names, Shapes::ShapeRef.new(shape: ThreatNames, location_name: "threatNames"))
|
781
|
+
ThreatIntelligenceDetail.struct_class = Types::ThreatIntelligenceDetail
|
782
|
+
|
783
|
+
ThreatIntelligenceDetails.member = Shapes::ShapeRef.new(shape: ThreatIntelligenceDetail)
|
784
|
+
|
785
|
+
ThreatNames.member = Shapes::ShapeRef.new(shape: String)
|
786
|
+
|
771
787
|
UnarchiveFindingsRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
|
772
788
|
UnarchiveFindingsRequest.add_member(:finding_ids, Shapes::ShapeRef.new(shape: FindingIds, required: true, location_name: "findingIds"))
|
773
789
|
UnarchiveFindingsRequest.struct_class = Types::UnarchiveFindingsRequest
|
@@ -44,6 +44,8 @@ module Aws::GuardDuty
|
|
44
44
|
#
|
45
45
|
class AcceptInvitationResponse < Aws::EmptyStructure; end
|
46
46
|
|
47
|
+
# Contains information about the access keys.
|
48
|
+
#
|
47
49
|
# @!attribute [rw] access_key_id
|
48
50
|
# Access key ID of the user.
|
49
51
|
# @return [String]
|
@@ -70,6 +72,8 @@ module Aws::GuardDuty
|
|
70
72
|
include Aws::Structure
|
71
73
|
end
|
72
74
|
|
75
|
+
# Contains information about the account.
|
76
|
+
#
|
73
77
|
# @note When making an API call, you may pass AccountDetail
|
74
78
|
# data as a hash:
|
75
79
|
#
|
@@ -94,6 +98,8 @@ module Aws::GuardDuty
|
|
94
98
|
include Aws::Structure
|
95
99
|
end
|
96
100
|
|
101
|
+
# Contains information about action.
|
102
|
+
#
|
97
103
|
# @!attribute [rw] action_type
|
98
104
|
# GuardDuty Finding activity type.
|
99
105
|
# @return [String]
|
@@ -156,6 +162,8 @@ module Aws::GuardDuty
|
|
156
162
|
#
|
157
163
|
class ArchiveFindingsResponse < Aws::EmptyStructure; end
|
158
164
|
|
165
|
+
# Contains information about the API operation.
|
166
|
+
#
|
159
167
|
# @!attribute [rw] api
|
160
168
|
# AWS API name.
|
161
169
|
# @return [String]
|
@@ -205,6 +213,8 @@ module Aws::GuardDuty
|
|
205
213
|
include Aws::Structure
|
206
214
|
end
|
207
215
|
|
216
|
+
# Contains information about the city associated with the IP address.
|
217
|
+
#
|
208
218
|
# @!attribute [rw] city_name
|
209
219
|
# City name of the remote IP address.
|
210
220
|
# @return [String]
|
@@ -216,6 +226,8 @@ module Aws::GuardDuty
|
|
216
226
|
include Aws::Structure
|
217
227
|
end
|
218
228
|
|
229
|
+
# Contains information about the condition.
|
230
|
+
#
|
219
231
|
# @note When making an API call, you may pass Condition
|
220
232
|
# data as a hash:
|
221
233
|
#
|
@@ -235,39 +247,43 @@ module Aws::GuardDuty
|
|
235
247
|
# }
|
236
248
|
#
|
237
249
|
# @!attribute [rw] eq
|
238
|
-
# Represents the equal condition to be applied to a single
|
239
|
-
# querying for findings.
|
250
|
+
# Deprecated. Represents the equal condition to be applied to a single
|
251
|
+
# field when querying for findings.
|
240
252
|
# @return [Array<String>]
|
241
253
|
#
|
242
254
|
# @!attribute [rw] neq
|
243
|
-
# Represents the not equal condition to be applied to a
|
244
|
-
# when querying for findings.
|
255
|
+
# Deprecated. Represents the not equal condition to be applied to a
|
256
|
+
# single field when querying for findings.
|
245
257
|
# @return [Array<String>]
|
246
258
|
#
|
247
259
|
# @!attribute [rw] gt
|
248
|
-
# Represents a greater than condition to be applied to a
|
249
|
-
# when querying for findings.
|
260
|
+
# Deprecated. Represents a greater than condition to be applied to a
|
261
|
+
# single field when querying for findings.
|
250
262
|
# @return [Integer]
|
251
263
|
#
|
252
264
|
# @!attribute [rw] gte
|
253
|
-
# Represents a greater than equal condition to be applied
|
254
|
-
# field when querying for findings.
|
265
|
+
# Deprecated. Represents a greater than equal condition to be applied
|
266
|
+
# to a single field when querying for findings.
|
255
267
|
# @return [Integer]
|
256
268
|
#
|
257
269
|
# @!attribute [rw] lt
|
258
|
-
# Represents a less than condition to be applied to a
|
259
|
-
# when querying for findings.
|
270
|
+
# Deprecated. Represents a less than condition to be applied to a
|
271
|
+
# single field when querying for findings.
|
260
272
|
# @return [Integer]
|
261
273
|
#
|
262
274
|
# @!attribute [rw] lte
|
263
|
-
# Represents a less than equal condition to be applied to
|
264
|
-
# field when querying for findings.
|
275
|
+
# Deprecated. Represents a less than equal condition to be applied to
|
276
|
+
# a single field when querying for findings.
|
265
277
|
# @return [Integer]
|
266
278
|
#
|
267
279
|
# @!attribute [rw] equals
|
280
|
+
# Represents an **equal** condition to be applied to a single field
|
281
|
+
# when querying for findings.
|
268
282
|
# @return [Array<String>]
|
269
283
|
#
|
270
284
|
# @!attribute [rw] not_equals
|
285
|
+
# Represents an **not equal** condition to be applied to a single
|
286
|
+
# field when querying for findings.
|
271
287
|
# @return [Array<String>]
|
272
288
|
#
|
273
289
|
# @!attribute [rw] greater_than
|
@@ -308,6 +324,8 @@ module Aws::GuardDuty
|
|
308
324
|
include Aws::Structure
|
309
325
|
end
|
310
326
|
|
327
|
+
# Contains information about the country.
|
328
|
+
#
|
311
329
|
# @!attribute [rw] country_code
|
312
330
|
# Country code of the remote IP address.
|
313
331
|
# @return [String]
|
@@ -865,8 +883,7 @@ module Aws::GuardDuty
|
|
865
883
|
end
|
866
884
|
|
867
885
|
# @!attribute [rw] unprocessed_accounts
|
868
|
-
#
|
869
|
-
# string explaining why it was unprocessed.
|
886
|
+
# The accounts that could not be processed.
|
870
887
|
# @return [Array<Types::UnprocessedAccount>]
|
871
888
|
#
|
872
889
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteMembersResponse AWS API Documentation
|
@@ -964,6 +981,8 @@ module Aws::GuardDuty
|
|
964
981
|
include Aws::Structure
|
965
982
|
end
|
966
983
|
|
984
|
+
# Contains information about the DNS request.
|
985
|
+
#
|
967
986
|
# @!attribute [rw] domain
|
968
987
|
# Domain information for the DNS request.
|
969
988
|
# @return [String]
|
@@ -975,6 +994,8 @@ module Aws::GuardDuty
|
|
975
994
|
include Aws::Structure
|
976
995
|
end
|
977
996
|
|
997
|
+
# Contains information about the domain.
|
998
|
+
#
|
978
999
|
# @!attribute [rw] domain
|
979
1000
|
# Domain information for the AWS API call.
|
980
1001
|
# @return [String]
|
@@ -986,69 +1007,79 @@ module Aws::GuardDuty
|
|
986
1007
|
include Aws::Structure
|
987
1008
|
end
|
988
1009
|
|
1010
|
+
# Contains information about the reason that the finding was generated.
|
1011
|
+
#
|
1012
|
+
# @!attribute [rw] threat_intelligence_details
|
1013
|
+
# A list of threat intelligence details related to the evidence.
|
1014
|
+
# @return [Array<Types::ThreatIntelligenceDetail>]
|
1015
|
+
#
|
1016
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Evidence AWS API Documentation
|
1017
|
+
#
|
1018
|
+
class Evidence < Struct.new(
|
1019
|
+
:threat_intelligence_details)
|
1020
|
+
include Aws::Structure
|
1021
|
+
end
|
1022
|
+
|
1023
|
+
# Contains information about the finding.
|
1024
|
+
#
|
989
1025
|
# @!attribute [rw] account_id
|
990
|
-
#
|
991
|
-
# to generate a finding.
|
1026
|
+
# The ID of the account in which the finding was generated.
|
992
1027
|
# @return [String]
|
993
1028
|
#
|
994
1029
|
# @!attribute [rw] arn
|
995
|
-
# The ARN
|
1030
|
+
# The ARN for the finding.
|
996
1031
|
# @return [String]
|
997
1032
|
#
|
998
1033
|
# @!attribute [rw] confidence
|
999
|
-
# The confidence
|
1034
|
+
# The confidence score for the finding.
|
1000
1035
|
# @return [Float]
|
1001
1036
|
#
|
1002
1037
|
# @!attribute [rw] created_at
|
1003
|
-
# The time
|
1038
|
+
# The time and date at which the finding was created.
|
1004
1039
|
# @return [String]
|
1005
1040
|
#
|
1006
1041
|
# @!attribute [rw] description
|
1007
|
-
# The description of
|
1042
|
+
# The description of the finding.
|
1008
1043
|
# @return [String]
|
1009
1044
|
#
|
1010
1045
|
# @!attribute [rw] id
|
1011
|
-
# The
|
1012
|
-
# action.
|
1046
|
+
# The ID of the finding.
|
1013
1047
|
# @return [String]
|
1014
1048
|
#
|
1015
1049
|
# @!attribute [rw] partition
|
1016
|
-
# The
|
1050
|
+
# The partition associated with the finding.
|
1017
1051
|
# @return [String]
|
1018
1052
|
#
|
1019
1053
|
# @!attribute [rw] region
|
1020
|
-
# The
|
1021
|
-
# to generate a finding.
|
1054
|
+
# The Region in which the finding was generated.
|
1022
1055
|
# @return [String]
|
1023
1056
|
#
|
1024
1057
|
# @!attribute [rw] resource
|
1025
|
-
#
|
1026
|
-
# GuardDuty to generate a finding.
|
1058
|
+
# Contains information about the resource.
|
1027
1059
|
# @return [Types::Resource]
|
1028
1060
|
#
|
1029
1061
|
# @!attribute [rw] schema_version
|
1030
|
-
#
|
1062
|
+
# The version of the schema used for the finding.
|
1031
1063
|
# @return [String]
|
1032
1064
|
#
|
1033
1065
|
# @!attribute [rw] service
|
1034
|
-
#
|
1035
|
-
# GuardDuty.
|
1066
|
+
# Contains information about the service.
|
1036
1067
|
# @return [Types::Service]
|
1037
1068
|
#
|
1038
1069
|
# @!attribute [rw] severity
|
1039
|
-
# The severity of
|
1070
|
+
# The severity of the finding.
|
1040
1071
|
# @return [Float]
|
1041
1072
|
#
|
1042
1073
|
# @!attribute [rw] title
|
1043
|
-
# The title
|
1074
|
+
# The title for the finding.
|
1044
1075
|
# @return [String]
|
1045
1076
|
#
|
1046
1077
|
# @!attribute [rw] type
|
1047
|
-
# The type of
|
1078
|
+
# The type of the finding.
|
1048
1079
|
# @return [String]
|
1049
1080
|
#
|
1050
1081
|
# @!attribute [rw] updated_at
|
1051
|
-
# The time
|
1082
|
+
# The time and date at which the finding was laste updated.
|
1052
1083
|
# @return [String]
|
1053
1084
|
#
|
1054
1085
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Finding AWS API Documentation
|
@@ -1072,6 +1103,8 @@ module Aws::GuardDuty
|
|
1072
1103
|
include Aws::Structure
|
1073
1104
|
end
|
1074
1105
|
|
1106
|
+
# Contains finding criteria information.
|
1107
|
+
#
|
1075
1108
|
# @note When making an API call, you may pass FindingCriteria
|
1076
1109
|
# data as a hash:
|
1077
1110
|
#
|
@@ -1106,6 +1139,8 @@ module Aws::GuardDuty
|
|
1106
1139
|
include Aws::Structure
|
1107
1140
|
end
|
1108
1141
|
|
1142
|
+
# Contains information about finding statistics.
|
1143
|
+
#
|
1109
1144
|
# @!attribute [rw] count_by_severity
|
1110
1145
|
# Represents a map of severity to count statistic for a set of
|
1111
1146
|
# findings
|
@@ -1118,6 +1153,8 @@ module Aws::GuardDuty
|
|
1118
1153
|
include Aws::Structure
|
1119
1154
|
end
|
1120
1155
|
|
1156
|
+
# Contains information about the
|
1157
|
+
#
|
1121
1158
|
# @!attribute [rw] lat
|
1122
1159
|
# Latitude information of remote IP address.
|
1123
1160
|
# @return [Float]
|
@@ -1561,6 +1598,8 @@ module Aws::GuardDuty
|
|
1561
1598
|
include Aws::Structure
|
1562
1599
|
end
|
1563
1600
|
|
1601
|
+
# Contains information about the instance profile.
|
1602
|
+
#
|
1564
1603
|
# @!attribute [rw] arn
|
1565
1604
|
# AWS EC2 instance profile ARN.
|
1566
1605
|
# @return [String]
|
@@ -1577,6 +1616,8 @@ module Aws::GuardDuty
|
|
1577
1616
|
include Aws::Structure
|
1578
1617
|
end
|
1579
1618
|
|
1619
|
+
# Contains information about the details of an instance.
|
1620
|
+
#
|
1580
1621
|
# @!attribute [rw] availability_zone
|
1581
1622
|
# The availability zone of the EC2 instance.
|
1582
1623
|
# @return [String]
|
@@ -1661,6 +1702,8 @@ module Aws::GuardDuty
|
|
1661
1702
|
include Aws::Structure
|
1662
1703
|
end
|
1663
1704
|
|
1705
|
+
# Contains information about the invitation.
|
1706
|
+
#
|
1664
1707
|
# @!attribute [rw] account_id
|
1665
1708
|
# Inviter account ID
|
1666
1709
|
# @return [String]
|
@@ -2108,6 +2151,7 @@ module Aws::GuardDuty
|
|
2108
2151
|
end
|
2109
2152
|
|
2110
2153
|
# @!attribute [rw] tags
|
2154
|
+
# The tags associated with the resource.
|
2111
2155
|
# @return [Hash<String,String>]
|
2112
2156
|
#
|
2113
2157
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListTagsForResourceResponse AWS API Documentation
|
@@ -2170,6 +2214,8 @@ module Aws::GuardDuty
|
|
2170
2214
|
include Aws::Structure
|
2171
2215
|
end
|
2172
2216
|
|
2217
|
+
# Contains information about the port for the local connection.
|
2218
|
+
#
|
2173
2219
|
# @!attribute [rw] port
|
2174
2220
|
# Port number of the local connection.
|
2175
2221
|
# @return [Integer]
|
@@ -2186,8 +2232,10 @@ module Aws::GuardDuty
|
|
2186
2232
|
include Aws::Structure
|
2187
2233
|
end
|
2188
2234
|
|
2235
|
+
# Contains information about the Master account and invitation.
|
2236
|
+
#
|
2189
2237
|
# @!attribute [rw] account_id
|
2190
|
-
# Master account
|
2238
|
+
# The ID of the account used as the Master account.
|
2191
2239
|
# @return [String]
|
2192
2240
|
#
|
2193
2241
|
# @!attribute [rw] invitation_id
|
@@ -2201,7 +2249,7 @@ module Aws::GuardDuty
|
|
2201
2249
|
# @return [String]
|
2202
2250
|
#
|
2203
2251
|
# @!attribute [rw] invited_at
|
2204
|
-
# Timestamp at which the invitation was sent
|
2252
|
+
# Timestamp at which the invitation was sent.
|
2205
2253
|
# @return [String]
|
2206
2254
|
#
|
2207
2255
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Master AWS API Documentation
|
@@ -2214,6 +2262,8 @@ module Aws::GuardDuty
|
|
2214
2262
|
include Aws::Structure
|
2215
2263
|
end
|
2216
2264
|
|
2265
|
+
# Continas information about the member account
|
2266
|
+
#
|
2217
2267
|
# @!attribute [rw] account_id
|
2218
2268
|
# Member account ID.
|
2219
2269
|
# @return [String]
|
@@ -2255,6 +2305,8 @@ module Aws::GuardDuty
|
|
2255
2305
|
include Aws::Structure
|
2256
2306
|
end
|
2257
2307
|
|
2308
|
+
# Contains information about the network connection.
|
2309
|
+
#
|
2258
2310
|
# @!attribute [rw] blocked
|
2259
2311
|
# Network connection blocked information.
|
2260
2312
|
# @return [Boolean]
|
@@ -2291,6 +2343,8 @@ module Aws::GuardDuty
|
|
2291
2343
|
include Aws::Structure
|
2292
2344
|
end
|
2293
2345
|
|
2346
|
+
# Contains information about the network interface.
|
2347
|
+
#
|
2294
2348
|
# @!attribute [rw] ipv_6_addresses
|
2295
2349
|
# A list of EC2 instance IPv6 address information.
|
2296
2350
|
# @return [Array<String>]
|
@@ -2347,6 +2401,8 @@ module Aws::GuardDuty
|
|
2347
2401
|
include Aws::Structure
|
2348
2402
|
end
|
2349
2403
|
|
2404
|
+
# Continas information about the organization.
|
2405
|
+
#
|
2350
2406
|
# @!attribute [rw] asn
|
2351
2407
|
# Autonomous system number of the internet provider of the remote IP
|
2352
2408
|
# address.
|
@@ -2374,6 +2430,8 @@ module Aws::GuardDuty
|
|
2374
2430
|
include Aws::Structure
|
2375
2431
|
end
|
2376
2432
|
|
2433
|
+
# Contains information about the port probe.
|
2434
|
+
#
|
2377
2435
|
# @!attribute [rw] blocked
|
2378
2436
|
# Port probe blocked information.
|
2379
2437
|
# @return [Boolean]
|
@@ -2390,6 +2448,8 @@ module Aws::GuardDuty
|
|
2390
2448
|
include Aws::Structure
|
2391
2449
|
end
|
2392
2450
|
|
2451
|
+
# Contains information about the port probe details.
|
2452
|
+
#
|
2393
2453
|
# @!attribute [rw] local_port_details
|
2394
2454
|
# Local port information of the connection.
|
2395
2455
|
# @return [Types::LocalPortDetails]
|
@@ -2406,6 +2466,8 @@ module Aws::GuardDuty
|
|
2406
2466
|
include Aws::Structure
|
2407
2467
|
end
|
2408
2468
|
|
2469
|
+
# Contains information about the private IP address.
|
2470
|
+
#
|
2409
2471
|
# @!attribute [rw] private_dns_name
|
2410
2472
|
# Private DNS name of the EC2 instance.
|
2411
2473
|
# @return [String]
|
@@ -2422,6 +2484,8 @@ module Aws::GuardDuty
|
|
2422
2484
|
include Aws::Structure
|
2423
2485
|
end
|
2424
2486
|
|
2487
|
+
# Contains information about the product code.
|
2488
|
+
#
|
2425
2489
|
# @!attribute [rw] code
|
2426
2490
|
# Product code information.
|
2427
2491
|
# @return [String]
|
@@ -2438,6 +2502,8 @@ module Aws::GuardDuty
|
|
2438
2502
|
include Aws::Structure
|
2439
2503
|
end
|
2440
2504
|
|
2505
|
+
# Continas information about the remote IP address.
|
2506
|
+
#
|
2441
2507
|
# @!attribute [rw] city
|
2442
2508
|
# City information of the remote IP address.
|
2443
2509
|
# @return [Types::City]
|
@@ -2469,6 +2535,8 @@ module Aws::GuardDuty
|
|
2469
2535
|
include Aws::Structure
|
2470
2536
|
end
|
2471
2537
|
|
2538
|
+
# Contains information about the remote port.
|
2539
|
+
#
|
2472
2540
|
# @!attribute [rw] port
|
2473
2541
|
# Port number of the remote connection.
|
2474
2542
|
# @return [Integer]
|
@@ -2485,6 +2553,8 @@ module Aws::GuardDuty
|
|
2485
2553
|
include Aws::Structure
|
2486
2554
|
end
|
2487
2555
|
|
2556
|
+
# Contains information about the resource.
|
2557
|
+
#
|
2488
2558
|
# @!attribute [rw] access_key_details
|
2489
2559
|
# The IAM access key details (IAM user information) of a user that
|
2490
2560
|
# engaged in the activity that prompted GuardDuty to generate a
|
@@ -2509,6 +2579,8 @@ module Aws::GuardDuty
|
|
2509
2579
|
include Aws::Structure
|
2510
2580
|
end
|
2511
2581
|
|
2582
|
+
# Contains information about the security group.
|
2583
|
+
#
|
2512
2584
|
# @!attribute [rw] group_id
|
2513
2585
|
# EC2 instance's security group ID.
|
2514
2586
|
# @return [String]
|
@@ -2525,10 +2597,16 @@ module Aws::GuardDuty
|
|
2525
2597
|
include Aws::Structure
|
2526
2598
|
end
|
2527
2599
|
|
2600
|
+
# Contains information about the service.
|
2601
|
+
#
|
2528
2602
|
# @!attribute [rw] action
|
2529
2603
|
# Information about the activity described in a finding.
|
2530
2604
|
# @return [Types::Action]
|
2531
2605
|
#
|
2606
|
+
# @!attribute [rw] evidence
|
2607
|
+
# An evidence object associated with the service.
|
2608
|
+
# @return [Types::Evidence]
|
2609
|
+
#
|
2532
2610
|
# @!attribute [rw] archived
|
2533
2611
|
# Indicates whether this finding is archived.
|
2534
2612
|
# @return [Boolean]
|
@@ -2567,6 +2645,7 @@ module Aws::GuardDuty
|
|
2567
2645
|
#
|
2568
2646
|
class Service < Struct.new(
|
2569
2647
|
:action,
|
2648
|
+
:evidence,
|
2570
2649
|
:archived,
|
2571
2650
|
:count,
|
2572
2651
|
:detector_id,
|
@@ -2578,6 +2657,8 @@ module Aws::GuardDuty
|
|
2578
2657
|
include Aws::Structure
|
2579
2658
|
end
|
2580
2659
|
|
2660
|
+
# Contains information about the criteria for sorting.
|
2661
|
+
#
|
2581
2662
|
# @note When making an API call, you may pass SortCriteria
|
2582
2663
|
# data as a hash:
|
2583
2664
|
#
|
@@ -2679,6 +2760,8 @@ module Aws::GuardDuty
|
|
2679
2760
|
include Aws::Structure
|
2680
2761
|
end
|
2681
2762
|
|
2763
|
+
# Contains information about the tag associated with the resource.
|
2764
|
+
#
|
2682
2765
|
# @!attribute [rw] key
|
2683
2766
|
# EC2 instance tag key.
|
2684
2767
|
# @return [String]
|
@@ -2725,6 +2808,26 @@ module Aws::GuardDuty
|
|
2725
2808
|
#
|
2726
2809
|
class TagResourceResponse < Aws::EmptyStructure; end
|
2727
2810
|
|
2811
|
+
# An instance of a threat intelligence detail that constitutes evidence
|
2812
|
+
# for the finding.
|
2813
|
+
#
|
2814
|
+
# @!attribute [rw] threat_list_name
|
2815
|
+
# The name of the threat intelligence list that triggered the finding.
|
2816
|
+
# @return [String]
|
2817
|
+
#
|
2818
|
+
# @!attribute [rw] threat_names
|
2819
|
+
# A list of names of the threats in the threat intelligence list that
|
2820
|
+
# triggered the finding.
|
2821
|
+
# @return [Array<String>]
|
2822
|
+
#
|
2823
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ThreatIntelligenceDetail AWS API Documentation
|
2824
|
+
#
|
2825
|
+
class ThreatIntelligenceDetail < Struct.new(
|
2826
|
+
:threat_list_name,
|
2827
|
+
:threat_names)
|
2828
|
+
include Aws::Structure
|
2829
|
+
end
|
2830
|
+
|
2728
2831
|
# @note When making an API call, you may pass UnarchiveFindingsRequest
|
2729
2832
|
# data as a hash:
|
2730
2833
|
#
|
@@ -2754,6 +2857,8 @@ module Aws::GuardDuty
|
|
2754
2857
|
#
|
2755
2858
|
class UnarchiveFindingsResponse < Aws::EmptyStructure; end
|
2756
2859
|
|
2860
|
+
# Contains information about the accounts that were not processed.
|
2861
|
+
#
|
2757
2862
|
# @!attribute [rw] account_id
|
2758
2863
|
# AWS Account ID.
|
2759
2864
|
# @return [String]
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-guardduty
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.23.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2019-
|
11
|
+
date: 2019-08-09 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|