aws-sdk-guardduty 1.22.0 → 1.23.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: dc1623d157c2755db50799cd90b0c5e987488f0a
4
- data.tar.gz: a9c2abc7755d8c608eb4807d0ce4a64671198548
3
+ metadata.gz: ca0488a948eb0fc34fa134df11c54e13aaca1640
4
+ data.tar.gz: 567027c5657fe10bd69338c69221a96b5c50f051
5
5
  SHA512:
6
- metadata.gz: cc361fca9b1e0498c55f231ef53fb9927232340c795a0dfe808e4a810cde0618732d59f3537ac5af0d2fe48a4c32ddc54a2078400fb2b7191915f7925f66ff3f
7
- data.tar.gz: 2d6450162f3a55a67bd8599e25ecc8d25b913704b17c65f981a946f3b1c4593f6b3696de71189af927c9122625d9f7e9b5d00271f286f4c03bf2df219501ed7b
6
+ metadata.gz: f18728817f44484fe68e84d16453d4a9ddd64b254a1e031743965bfdffe31e828000dde0f83d827f94fabb632141acbaeccc020d0095027470a6b850abab06ac
7
+ data.tar.gz: 24f085b0d3ab1059521393b080b6e154626e1af7830f5b4d5229880354fc716df31114e5abcf800593d37f408d307f5fae275bc1704cfe3b9409031b55c834c3
@@ -42,6 +42,6 @@ require_relative 'aws-sdk-guardduty/customizations'
42
42
  # @service
43
43
  module Aws::GuardDuty
44
44
 
45
- GEM_VERSION = '1.22.0'
45
+ GEM_VERSION = '1.23.0'
46
46
 
47
47
  end
@@ -286,8 +286,12 @@ module Aws::GuardDuty
286
286
  req.send_request(options)
287
287
  end
288
288
 
289
- # Archives Amazon GuardDuty findings specified by the list of finding
290
- # IDs.
289
+ # Archives GuardDuty findings specified by the list of finding IDs.
290
+ #
291
+ # <note markdown="1"> Only the master account can archive findings. Member accounts do not
292
+ # have permission to archive findings from their accounts.
293
+ #
294
+ # </note>
291
295
  #
292
296
  # @option params [required, String] :detector_id
293
297
  # The ID of the detector that specifies the GuardDuty service whose
@@ -314,9 +318,10 @@ module Aws::GuardDuty
314
318
  req.send_request(options)
315
319
  end
316
320
 
317
- # Creates a single Amazon GuardDuty detector. A detector is an object
318
- # that represents the GuardDuty service. A detector must be created in
319
- # order for GuardDuty to become operational.
321
+ # Creates a single Amazon GuardDuty detector. A detector is a resource
322
+ # that represents the GuardDuty service. To start using GuardDuty, you
323
+ # must create a detector in each region that you enable the service. You
324
+ # can have only one detector per account per region.
320
325
  #
321
326
  # @option params [required, Boolean] :enable
322
327
  # A boolean value that specifies whether the detector is to be enabled.
@@ -1126,6 +1131,10 @@ module Aws::GuardDuty
1126
1131
  # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.asn_org #=> String
1127
1132
  # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.isp #=> String
1128
1133
  # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.org #=> String
1134
+ # resp.findings[0].service.evidence.threat_intelligence_details #=> Array
1135
+ # resp.findings[0].service.evidence.threat_intelligence_details[0].threat_list_name #=> String
1136
+ # resp.findings[0].service.evidence.threat_intelligence_details[0].threat_names #=> Array
1137
+ # resp.findings[0].service.evidence.threat_intelligence_details[0].threat_names[0] #=> String
1129
1138
  # resp.findings[0].service.archived #=> Boolean
1130
1139
  # resp.findings[0].service.count #=> Integer
1131
1140
  # resp.findings[0].service.detector_id #=> String
@@ -1266,8 +1275,8 @@ module Aws::GuardDuty
1266
1275
  req.send_request(options)
1267
1276
  end
1268
1277
 
1269
- # Provides the details for the GuardDuty master account to the current
1270
- # GuardDuty member account.
1278
+ # Provides the details for the GuardDuty master account associated with
1279
+ # the current GuardDuty member account.
1271
1280
  #
1272
1281
  # @option params [required, String] :detector_id
1273
1282
  # The unique ID of the detector of the GuardDuty member account.
@@ -2218,7 +2227,7 @@ module Aws::GuardDuty
2218
2227
  params: params,
2219
2228
  config: config)
2220
2229
  context[:gem_name] = 'aws-sdk-guardduty'
2221
- context[:gem_version] = '1.22.0'
2230
+ context[:gem_version] = '1.23.0'
2222
2231
  Seahorse::Client::Request.new(handlers, context)
2223
2232
  end
2224
2233
 
@@ -69,6 +69,7 @@ module Aws::GuardDuty
69
69
  Email = Shapes::StringShape.new(name: 'Email')
70
70
  Eq = Shapes::ListShape.new(name: 'Eq')
71
71
  Equals = Shapes::ListShape.new(name: 'Equals')
72
+ Evidence = Shapes::StructureShape.new(name: 'Evidence')
72
73
  Feedback = Shapes::StringShape.new(name: 'Feedback')
73
74
  FilterAction = Shapes::StringShape.new(name: 'FilterAction')
74
75
  FilterDescription = Shapes::StringShape.new(name: 'FilterDescription')
@@ -179,6 +180,9 @@ module Aws::GuardDuty
179
180
  ThreatIntelSetFormat = Shapes::StringShape.new(name: 'ThreatIntelSetFormat')
180
181
  ThreatIntelSetIds = Shapes::ListShape.new(name: 'ThreatIntelSetIds')
181
182
  ThreatIntelSetStatus = Shapes::StringShape.new(name: 'ThreatIntelSetStatus')
183
+ ThreatIntelligenceDetail = Shapes::StructureShape.new(name: 'ThreatIntelligenceDetail')
184
+ ThreatIntelligenceDetails = Shapes::ListShape.new(name: 'ThreatIntelligenceDetails')
185
+ ThreatNames = Shapes::ListShape.new(name: 'ThreatNames')
182
186
  UnarchiveFindingsRequest = Shapes::StructureShape.new(name: 'UnarchiveFindingsRequest')
183
187
  UnarchiveFindingsResponse = Shapes::StructureShape.new(name: 'UnarchiveFindingsResponse')
184
188
  UnprocessedAccount = Shapes::StructureShape.new(name: 'UnprocessedAccount')
@@ -393,6 +397,9 @@ module Aws::GuardDuty
393
397
 
394
398
  Equals.member = Shapes::ShapeRef.new(shape: String)
395
399
 
400
+ Evidence.add_member(:threat_intelligence_details, Shapes::ShapeRef.new(shape: ThreatIntelligenceDetails, location_name: "threatIntelligenceDetails"))
401
+ Evidence.struct_class = Types::Evidence
402
+
396
403
  FilterNames.member = Shapes::ShapeRef.new(shape: FilterName)
397
404
 
398
405
  Finding.add_member(:account_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "accountId"))
@@ -721,6 +728,7 @@ module Aws::GuardDuty
721
728
  SecurityGroups.member = Shapes::ShapeRef.new(shape: SecurityGroup)
722
729
 
723
730
  Service.add_member(:action, Shapes::ShapeRef.new(shape: Action, location_name: "action"))
731
+ Service.add_member(:evidence, Shapes::ShapeRef.new(shape: Evidence, location_name: "evidence"))
724
732
  Service.add_member(:archived, Shapes::ShapeRef.new(shape: Boolean, location_name: "archived"))
725
733
  Service.add_member(:count, Shapes::ShapeRef.new(shape: Integer, location_name: "count"))
726
734
  Service.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, location_name: "detectorId"))
@@ -768,6 +776,14 @@ module Aws::GuardDuty
768
776
 
769
777
  ThreatIntelSetIds.member = Shapes::ShapeRef.new(shape: String)
770
778
 
779
+ ThreatIntelligenceDetail.add_member(:threat_list_name, Shapes::ShapeRef.new(shape: String, location_name: "threatListName"))
780
+ ThreatIntelligenceDetail.add_member(:threat_names, Shapes::ShapeRef.new(shape: ThreatNames, location_name: "threatNames"))
781
+ ThreatIntelligenceDetail.struct_class = Types::ThreatIntelligenceDetail
782
+
783
+ ThreatIntelligenceDetails.member = Shapes::ShapeRef.new(shape: ThreatIntelligenceDetail)
784
+
785
+ ThreatNames.member = Shapes::ShapeRef.new(shape: String)
786
+
771
787
  UnarchiveFindingsRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
772
788
  UnarchiveFindingsRequest.add_member(:finding_ids, Shapes::ShapeRef.new(shape: FindingIds, required: true, location_name: "findingIds"))
773
789
  UnarchiveFindingsRequest.struct_class = Types::UnarchiveFindingsRequest
@@ -44,6 +44,8 @@ module Aws::GuardDuty
44
44
  #
45
45
  class AcceptInvitationResponse < Aws::EmptyStructure; end
46
46
 
47
+ # Contains information about the access keys.
48
+ #
47
49
  # @!attribute [rw] access_key_id
48
50
  # Access key ID of the user.
49
51
  # @return [String]
@@ -70,6 +72,8 @@ module Aws::GuardDuty
70
72
  include Aws::Structure
71
73
  end
72
74
 
75
+ # Contains information about the account.
76
+ #
73
77
  # @note When making an API call, you may pass AccountDetail
74
78
  # data as a hash:
75
79
  #
@@ -94,6 +98,8 @@ module Aws::GuardDuty
94
98
  include Aws::Structure
95
99
  end
96
100
 
101
+ # Contains information about action.
102
+ #
97
103
  # @!attribute [rw] action_type
98
104
  # GuardDuty Finding activity type.
99
105
  # @return [String]
@@ -156,6 +162,8 @@ module Aws::GuardDuty
156
162
  #
157
163
  class ArchiveFindingsResponse < Aws::EmptyStructure; end
158
164
 
165
+ # Contains information about the API operation.
166
+ #
159
167
  # @!attribute [rw] api
160
168
  # AWS API name.
161
169
  # @return [String]
@@ -205,6 +213,8 @@ module Aws::GuardDuty
205
213
  include Aws::Structure
206
214
  end
207
215
 
216
+ # Contains information about the city associated with the IP address.
217
+ #
208
218
  # @!attribute [rw] city_name
209
219
  # City name of the remote IP address.
210
220
  # @return [String]
@@ -216,6 +226,8 @@ module Aws::GuardDuty
216
226
  include Aws::Structure
217
227
  end
218
228
 
229
+ # Contains information about the condition.
230
+ #
219
231
  # @note When making an API call, you may pass Condition
220
232
  # data as a hash:
221
233
  #
@@ -235,39 +247,43 @@ module Aws::GuardDuty
235
247
  # }
236
248
  #
237
249
  # @!attribute [rw] eq
238
- # Represents the equal condition to be applied to a single field when
239
- # querying for findings.
250
+ # Deprecated. Represents the equal condition to be applied to a single
251
+ # field when querying for findings.
240
252
  # @return [Array<String>]
241
253
  #
242
254
  # @!attribute [rw] neq
243
- # Represents the not equal condition to be applied to a single field
244
- # when querying for findings.
255
+ # Deprecated. Represents the not equal condition to be applied to a
256
+ # single field when querying for findings.
245
257
  # @return [Array<String>]
246
258
  #
247
259
  # @!attribute [rw] gt
248
- # Represents a greater than condition to be applied to a single field
249
- # when querying for findings.
260
+ # Deprecated. Represents a greater than condition to be applied to a
261
+ # single field when querying for findings.
250
262
  # @return [Integer]
251
263
  #
252
264
  # @!attribute [rw] gte
253
- # Represents a greater than equal condition to be applied to a single
254
- # field when querying for findings.
265
+ # Deprecated. Represents a greater than equal condition to be applied
266
+ # to a single field when querying for findings.
255
267
  # @return [Integer]
256
268
  #
257
269
  # @!attribute [rw] lt
258
- # Represents a less than condition to be applied to a single field
259
- # when querying for findings.
270
+ # Deprecated. Represents a less than condition to be applied to a
271
+ # single field when querying for findings.
260
272
  # @return [Integer]
261
273
  #
262
274
  # @!attribute [rw] lte
263
- # Represents a less than equal condition to be applied to a single
264
- # field when querying for findings.
275
+ # Deprecated. Represents a less than equal condition to be applied to
276
+ # a single field when querying for findings.
265
277
  # @return [Integer]
266
278
  #
267
279
  # @!attribute [rw] equals
280
+ # Represents an **equal** condition to be applied to a single field
281
+ # when querying for findings.
268
282
  # @return [Array<String>]
269
283
  #
270
284
  # @!attribute [rw] not_equals
285
+ # Represents an **not equal** condition to be applied to a single
286
+ # field when querying for findings.
271
287
  # @return [Array<String>]
272
288
  #
273
289
  # @!attribute [rw] greater_than
@@ -308,6 +324,8 @@ module Aws::GuardDuty
308
324
  include Aws::Structure
309
325
  end
310
326
 
327
+ # Contains information about the country.
328
+ #
311
329
  # @!attribute [rw] country_code
312
330
  # Country code of the remote IP address.
313
331
  # @return [String]
@@ -865,8 +883,7 @@ module Aws::GuardDuty
865
883
  end
866
884
 
867
885
  # @!attribute [rw] unprocessed_accounts
868
- # A list of objects containing the unprocessed account and a result
869
- # string explaining why it was unprocessed.
886
+ # The accounts that could not be processed.
870
887
  # @return [Array<Types::UnprocessedAccount>]
871
888
  #
872
889
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteMembersResponse AWS API Documentation
@@ -964,6 +981,8 @@ module Aws::GuardDuty
964
981
  include Aws::Structure
965
982
  end
966
983
 
984
+ # Contains information about the DNS request.
985
+ #
967
986
  # @!attribute [rw] domain
968
987
  # Domain information for the DNS request.
969
988
  # @return [String]
@@ -975,6 +994,8 @@ module Aws::GuardDuty
975
994
  include Aws::Structure
976
995
  end
977
996
 
997
+ # Contains information about the domain.
998
+ #
978
999
  # @!attribute [rw] domain
979
1000
  # Domain information for the AWS API call.
980
1001
  # @return [String]
@@ -986,69 +1007,79 @@ module Aws::GuardDuty
986
1007
  include Aws::Structure
987
1008
  end
988
1009
 
1010
+ # Contains information about the reason that the finding was generated.
1011
+ #
1012
+ # @!attribute [rw] threat_intelligence_details
1013
+ # A list of threat intelligence details related to the evidence.
1014
+ # @return [Array<Types::ThreatIntelligenceDetail>]
1015
+ #
1016
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Evidence AWS API Documentation
1017
+ #
1018
+ class Evidence < Struct.new(
1019
+ :threat_intelligence_details)
1020
+ include Aws::Structure
1021
+ end
1022
+
1023
+ # Contains information about the finding.
1024
+ #
989
1025
  # @!attribute [rw] account_id
990
- # AWS account ID where the activity occurred that prompted GuardDuty
991
- # to generate a finding.
1026
+ # The ID of the account in which the finding was generated.
992
1027
  # @return [String]
993
1028
  #
994
1029
  # @!attribute [rw] arn
995
- # The ARN of a finding described by the action.
1030
+ # The ARN for the finding.
996
1031
  # @return [String]
997
1032
  #
998
1033
  # @!attribute [rw] confidence
999
- # The confidence level of a finding.
1034
+ # The confidence score for the finding.
1000
1035
  # @return [Float]
1001
1036
  #
1002
1037
  # @!attribute [rw] created_at
1003
- # The time stamp at which a finding was generated.
1038
+ # The time and date at which the finding was created.
1004
1039
  # @return [String]
1005
1040
  #
1006
1041
  # @!attribute [rw] description
1007
- # The description of a finding.
1042
+ # The description of the finding.
1008
1043
  # @return [String]
1009
1044
  #
1010
1045
  # @!attribute [rw] id
1011
- # The identifier that corresponds to a finding described by the
1012
- # action.
1046
+ # The ID of the finding.
1013
1047
  # @return [String]
1014
1048
  #
1015
1049
  # @!attribute [rw] partition
1016
- # The AWS resource partition.
1050
+ # The partition associated with the finding.
1017
1051
  # @return [String]
1018
1052
  #
1019
1053
  # @!attribute [rw] region
1020
- # The AWS region where the activity occurred that prompted GuardDuty
1021
- # to generate a finding.
1054
+ # The Region in which the finding was generated.
1022
1055
  # @return [String]
1023
1056
  #
1024
1057
  # @!attribute [rw] resource
1025
- # The AWS resource associated with the activity that prompted
1026
- # GuardDuty to generate a finding.
1058
+ # Contains information about the resource.
1027
1059
  # @return [Types::Resource]
1028
1060
  #
1029
1061
  # @!attribute [rw] schema_version
1030
- # Findings' schema version.
1062
+ # The version of the schema used for the finding.
1031
1063
  # @return [String]
1032
1064
  #
1033
1065
  # @!attribute [rw] service
1034
- # Additional information assigned to the generated finding by
1035
- # GuardDuty.
1066
+ # Contains information about the service.
1036
1067
  # @return [Types::Service]
1037
1068
  #
1038
1069
  # @!attribute [rw] severity
1039
- # The severity of a finding.
1070
+ # The severity of the finding.
1040
1071
  # @return [Float]
1041
1072
  #
1042
1073
  # @!attribute [rw] title
1043
- # The title of a finding.
1074
+ # The title for the finding.
1044
1075
  # @return [String]
1045
1076
  #
1046
1077
  # @!attribute [rw] type
1047
- # The type of a finding described by the action.
1078
+ # The type of the finding.
1048
1079
  # @return [String]
1049
1080
  #
1050
1081
  # @!attribute [rw] updated_at
1051
- # The time stamp at which a finding was last updated.
1082
+ # The time and date at which the finding was laste updated.
1052
1083
  # @return [String]
1053
1084
  #
1054
1085
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Finding AWS API Documentation
@@ -1072,6 +1103,8 @@ module Aws::GuardDuty
1072
1103
  include Aws::Structure
1073
1104
  end
1074
1105
 
1106
+ # Contains finding criteria information.
1107
+ #
1075
1108
  # @note When making an API call, you may pass FindingCriteria
1076
1109
  # data as a hash:
1077
1110
  #
@@ -1106,6 +1139,8 @@ module Aws::GuardDuty
1106
1139
  include Aws::Structure
1107
1140
  end
1108
1141
 
1142
+ # Contains information about finding statistics.
1143
+ #
1109
1144
  # @!attribute [rw] count_by_severity
1110
1145
  # Represents a map of severity to count statistic for a set of
1111
1146
  # findings
@@ -1118,6 +1153,8 @@ module Aws::GuardDuty
1118
1153
  include Aws::Structure
1119
1154
  end
1120
1155
 
1156
+ # Contains information about the
1157
+ #
1121
1158
  # @!attribute [rw] lat
1122
1159
  # Latitude information of remote IP address.
1123
1160
  # @return [Float]
@@ -1561,6 +1598,8 @@ module Aws::GuardDuty
1561
1598
  include Aws::Structure
1562
1599
  end
1563
1600
 
1601
+ # Contains information about the instance profile.
1602
+ #
1564
1603
  # @!attribute [rw] arn
1565
1604
  # AWS EC2 instance profile ARN.
1566
1605
  # @return [String]
@@ -1577,6 +1616,8 @@ module Aws::GuardDuty
1577
1616
  include Aws::Structure
1578
1617
  end
1579
1618
 
1619
+ # Contains information about the details of an instance.
1620
+ #
1580
1621
  # @!attribute [rw] availability_zone
1581
1622
  # The availability zone of the EC2 instance.
1582
1623
  # @return [String]
@@ -1661,6 +1702,8 @@ module Aws::GuardDuty
1661
1702
  include Aws::Structure
1662
1703
  end
1663
1704
 
1705
+ # Contains information about the invitation.
1706
+ #
1664
1707
  # @!attribute [rw] account_id
1665
1708
  # Inviter account ID
1666
1709
  # @return [String]
@@ -2108,6 +2151,7 @@ module Aws::GuardDuty
2108
2151
  end
2109
2152
 
2110
2153
  # @!attribute [rw] tags
2154
+ # The tags associated with the resource.
2111
2155
  # @return [Hash<String,String>]
2112
2156
  #
2113
2157
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListTagsForResourceResponse AWS API Documentation
@@ -2170,6 +2214,8 @@ module Aws::GuardDuty
2170
2214
  include Aws::Structure
2171
2215
  end
2172
2216
 
2217
+ # Contains information about the port for the local connection.
2218
+ #
2173
2219
  # @!attribute [rw] port
2174
2220
  # Port number of the local connection.
2175
2221
  # @return [Integer]
@@ -2186,8 +2232,10 @@ module Aws::GuardDuty
2186
2232
  include Aws::Structure
2187
2233
  end
2188
2234
 
2235
+ # Contains information about the Master account and invitation.
2236
+ #
2189
2237
  # @!attribute [rw] account_id
2190
- # Master account ID
2238
+ # The ID of the account used as the Master account.
2191
2239
  # @return [String]
2192
2240
  #
2193
2241
  # @!attribute [rw] invitation_id
@@ -2201,7 +2249,7 @@ module Aws::GuardDuty
2201
2249
  # @return [String]
2202
2250
  #
2203
2251
  # @!attribute [rw] invited_at
2204
- # Timestamp at which the invitation was sent
2252
+ # Timestamp at which the invitation was sent.
2205
2253
  # @return [String]
2206
2254
  #
2207
2255
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Master AWS API Documentation
@@ -2214,6 +2262,8 @@ module Aws::GuardDuty
2214
2262
  include Aws::Structure
2215
2263
  end
2216
2264
 
2265
+ # Continas information about the member account
2266
+ #
2217
2267
  # @!attribute [rw] account_id
2218
2268
  # Member account ID.
2219
2269
  # @return [String]
@@ -2255,6 +2305,8 @@ module Aws::GuardDuty
2255
2305
  include Aws::Structure
2256
2306
  end
2257
2307
 
2308
+ # Contains information about the network connection.
2309
+ #
2258
2310
  # @!attribute [rw] blocked
2259
2311
  # Network connection blocked information.
2260
2312
  # @return [Boolean]
@@ -2291,6 +2343,8 @@ module Aws::GuardDuty
2291
2343
  include Aws::Structure
2292
2344
  end
2293
2345
 
2346
+ # Contains information about the network interface.
2347
+ #
2294
2348
  # @!attribute [rw] ipv_6_addresses
2295
2349
  # A list of EC2 instance IPv6 address information.
2296
2350
  # @return [Array<String>]
@@ -2347,6 +2401,8 @@ module Aws::GuardDuty
2347
2401
  include Aws::Structure
2348
2402
  end
2349
2403
 
2404
+ # Continas information about the organization.
2405
+ #
2350
2406
  # @!attribute [rw] asn
2351
2407
  # Autonomous system number of the internet provider of the remote IP
2352
2408
  # address.
@@ -2374,6 +2430,8 @@ module Aws::GuardDuty
2374
2430
  include Aws::Structure
2375
2431
  end
2376
2432
 
2433
+ # Contains information about the port probe.
2434
+ #
2377
2435
  # @!attribute [rw] blocked
2378
2436
  # Port probe blocked information.
2379
2437
  # @return [Boolean]
@@ -2390,6 +2448,8 @@ module Aws::GuardDuty
2390
2448
  include Aws::Structure
2391
2449
  end
2392
2450
 
2451
+ # Contains information about the port probe details.
2452
+ #
2393
2453
  # @!attribute [rw] local_port_details
2394
2454
  # Local port information of the connection.
2395
2455
  # @return [Types::LocalPortDetails]
@@ -2406,6 +2466,8 @@ module Aws::GuardDuty
2406
2466
  include Aws::Structure
2407
2467
  end
2408
2468
 
2469
+ # Contains information about the private IP address.
2470
+ #
2409
2471
  # @!attribute [rw] private_dns_name
2410
2472
  # Private DNS name of the EC2 instance.
2411
2473
  # @return [String]
@@ -2422,6 +2484,8 @@ module Aws::GuardDuty
2422
2484
  include Aws::Structure
2423
2485
  end
2424
2486
 
2487
+ # Contains information about the product code.
2488
+ #
2425
2489
  # @!attribute [rw] code
2426
2490
  # Product code information.
2427
2491
  # @return [String]
@@ -2438,6 +2502,8 @@ module Aws::GuardDuty
2438
2502
  include Aws::Structure
2439
2503
  end
2440
2504
 
2505
+ # Continas information about the remote IP address.
2506
+ #
2441
2507
  # @!attribute [rw] city
2442
2508
  # City information of the remote IP address.
2443
2509
  # @return [Types::City]
@@ -2469,6 +2535,8 @@ module Aws::GuardDuty
2469
2535
  include Aws::Structure
2470
2536
  end
2471
2537
 
2538
+ # Contains information about the remote port.
2539
+ #
2472
2540
  # @!attribute [rw] port
2473
2541
  # Port number of the remote connection.
2474
2542
  # @return [Integer]
@@ -2485,6 +2553,8 @@ module Aws::GuardDuty
2485
2553
  include Aws::Structure
2486
2554
  end
2487
2555
 
2556
+ # Contains information about the resource.
2557
+ #
2488
2558
  # @!attribute [rw] access_key_details
2489
2559
  # The IAM access key details (IAM user information) of a user that
2490
2560
  # engaged in the activity that prompted GuardDuty to generate a
@@ -2509,6 +2579,8 @@ module Aws::GuardDuty
2509
2579
  include Aws::Structure
2510
2580
  end
2511
2581
 
2582
+ # Contains information about the security group.
2583
+ #
2512
2584
  # @!attribute [rw] group_id
2513
2585
  # EC2 instance's security group ID.
2514
2586
  # @return [String]
@@ -2525,10 +2597,16 @@ module Aws::GuardDuty
2525
2597
  include Aws::Structure
2526
2598
  end
2527
2599
 
2600
+ # Contains information about the service.
2601
+ #
2528
2602
  # @!attribute [rw] action
2529
2603
  # Information about the activity described in a finding.
2530
2604
  # @return [Types::Action]
2531
2605
  #
2606
+ # @!attribute [rw] evidence
2607
+ # An evidence object associated with the service.
2608
+ # @return [Types::Evidence]
2609
+ #
2532
2610
  # @!attribute [rw] archived
2533
2611
  # Indicates whether this finding is archived.
2534
2612
  # @return [Boolean]
@@ -2567,6 +2645,7 @@ module Aws::GuardDuty
2567
2645
  #
2568
2646
  class Service < Struct.new(
2569
2647
  :action,
2648
+ :evidence,
2570
2649
  :archived,
2571
2650
  :count,
2572
2651
  :detector_id,
@@ -2578,6 +2657,8 @@ module Aws::GuardDuty
2578
2657
  include Aws::Structure
2579
2658
  end
2580
2659
 
2660
+ # Contains information about the criteria for sorting.
2661
+ #
2581
2662
  # @note When making an API call, you may pass SortCriteria
2582
2663
  # data as a hash:
2583
2664
  #
@@ -2679,6 +2760,8 @@ module Aws::GuardDuty
2679
2760
  include Aws::Structure
2680
2761
  end
2681
2762
 
2763
+ # Contains information about the tag associated with the resource.
2764
+ #
2682
2765
  # @!attribute [rw] key
2683
2766
  # EC2 instance tag key.
2684
2767
  # @return [String]
@@ -2725,6 +2808,26 @@ module Aws::GuardDuty
2725
2808
  #
2726
2809
  class TagResourceResponse < Aws::EmptyStructure; end
2727
2810
 
2811
+ # An instance of a threat intelligence detail that constitutes evidence
2812
+ # for the finding.
2813
+ #
2814
+ # @!attribute [rw] threat_list_name
2815
+ # The name of the threat intelligence list that triggered the finding.
2816
+ # @return [String]
2817
+ #
2818
+ # @!attribute [rw] threat_names
2819
+ # A list of names of the threats in the threat intelligence list that
2820
+ # triggered the finding.
2821
+ # @return [Array<String>]
2822
+ #
2823
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ThreatIntelligenceDetail AWS API Documentation
2824
+ #
2825
+ class ThreatIntelligenceDetail < Struct.new(
2826
+ :threat_list_name,
2827
+ :threat_names)
2828
+ include Aws::Structure
2829
+ end
2830
+
2728
2831
  # @note When making an API call, you may pass UnarchiveFindingsRequest
2729
2832
  # data as a hash:
2730
2833
  #
@@ -2754,6 +2857,8 @@ module Aws::GuardDuty
2754
2857
  #
2755
2858
  class UnarchiveFindingsResponse < Aws::EmptyStructure; end
2756
2859
 
2860
+ # Contains information about the accounts that were not processed.
2861
+ #
2757
2862
  # @!attribute [rw] account_id
2758
2863
  # AWS Account ID.
2759
2864
  # @return [String]
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-guardduty
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.22.0
4
+ version: 1.23.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-07-25 00:00:00.000000000 Z
11
+ date: 2019-08-09 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core