aws-sdk-guardduty 1.27.0 → 1.32.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -19,6 +19,9 @@ module Aws::GuardDuty
19
19
  AccountId = Shapes::StringShape.new(name: 'AccountId')
20
20
  AccountIds = Shapes::ListShape.new(name: 'AccountIds')
21
21
  Action = Shapes::StructureShape.new(name: 'Action')
22
+ AdminAccount = Shapes::StructureShape.new(name: 'AdminAccount')
23
+ AdminAccounts = Shapes::ListShape.new(name: 'AdminAccounts')
24
+ AdminStatus = Shapes::StringShape.new(name: 'AdminStatus')
22
25
  ArchiveFindingsRequest = Shapes::StructureShape.new(name: 'ArchiveFindingsRequest')
23
26
  ArchiveFindingsResponse = Shapes::StructureShape.new(name: 'ArchiveFindingsResponse')
24
27
  AwsApiCallAction = Shapes::StructureShape.new(name: 'AwsApiCallAction')
@@ -60,6 +63,8 @@ module Aws::GuardDuty
60
63
  DeletePublishingDestinationResponse = Shapes::StructureShape.new(name: 'DeletePublishingDestinationResponse')
61
64
  DeleteThreatIntelSetRequest = Shapes::StructureShape.new(name: 'DeleteThreatIntelSetRequest')
62
65
  DeleteThreatIntelSetResponse = Shapes::StructureShape.new(name: 'DeleteThreatIntelSetResponse')
66
+ DescribeOrganizationConfigurationRequest = Shapes::StructureShape.new(name: 'DescribeOrganizationConfigurationRequest')
67
+ DescribeOrganizationConfigurationResponse = Shapes::StructureShape.new(name: 'DescribeOrganizationConfigurationResponse')
63
68
  DescribePublishingDestinationRequest = Shapes::StructureShape.new(name: 'DescribePublishingDestinationRequest')
64
69
  DescribePublishingDestinationResponse = Shapes::StructureShape.new(name: 'DescribePublishingDestinationResponse')
65
70
  Destination = Shapes::StructureShape.new(name: 'Destination')
@@ -69,6 +74,8 @@ module Aws::GuardDuty
69
74
  DetectorId = Shapes::StringShape.new(name: 'DetectorId')
70
75
  DetectorIds = Shapes::ListShape.new(name: 'DetectorIds')
71
76
  DetectorStatus = Shapes::StringShape.new(name: 'DetectorStatus')
77
+ DisableOrganizationAdminAccountRequest = Shapes::StructureShape.new(name: 'DisableOrganizationAdminAccountRequest')
78
+ DisableOrganizationAdminAccountResponse = Shapes::StructureShape.new(name: 'DisableOrganizationAdminAccountResponse')
72
79
  DisassociateFromMasterAccountRequest = Shapes::StructureShape.new(name: 'DisassociateFromMasterAccountRequest')
73
80
  DisassociateFromMasterAccountResponse = Shapes::StructureShape.new(name: 'DisassociateFromMasterAccountResponse')
74
81
  DisassociateMembersRequest = Shapes::StructureShape.new(name: 'DisassociateMembersRequest')
@@ -77,6 +84,8 @@ module Aws::GuardDuty
77
84
  DomainDetails = Shapes::StructureShape.new(name: 'DomainDetails')
78
85
  Double = Shapes::FloatShape.new(name: 'Double')
79
86
  Email = Shapes::StringShape.new(name: 'Email')
87
+ EnableOrganizationAdminAccountRequest = Shapes::StructureShape.new(name: 'EnableOrganizationAdminAccountRequest')
88
+ EnableOrganizationAdminAccountResponse = Shapes::StructureShape.new(name: 'EnableOrganizationAdminAccountResponse')
80
89
  Eq = Shapes::ListShape.new(name: 'Eq')
81
90
  Equals = Shapes::ListShape.new(name: 'Equals')
82
91
  Evidence = Shapes::StructureShape.new(name: 'Evidence')
@@ -141,6 +150,8 @@ module Aws::GuardDuty
141
150
  ListInvitationsResponse = Shapes::StructureShape.new(name: 'ListInvitationsResponse')
142
151
  ListMembersRequest = Shapes::StructureShape.new(name: 'ListMembersRequest')
143
152
  ListMembersResponse = Shapes::StructureShape.new(name: 'ListMembersResponse')
153
+ ListOrganizationAdminAccountsRequest = Shapes::StructureShape.new(name: 'ListOrganizationAdminAccountsRequest')
154
+ ListOrganizationAdminAccountsResponse = Shapes::StructureShape.new(name: 'ListOrganizationAdminAccountsResponse')
144
155
  ListPublishingDestinationsRequest = Shapes::StructureShape.new(name: 'ListPublishingDestinationsRequest')
145
156
  ListPublishingDestinationsResponse = Shapes::StructureShape.new(name: 'ListPublishingDestinationsResponse')
146
157
  ListTagsForResourceRequest = Shapes::StructureShape.new(name: 'ListTagsForResourceRequest')
@@ -211,6 +222,8 @@ module Aws::GuardDuty
211
222
  UpdateFindingsFeedbackResponse = Shapes::StructureShape.new(name: 'UpdateFindingsFeedbackResponse')
212
223
  UpdateIPSetRequest = Shapes::StructureShape.new(name: 'UpdateIPSetRequest')
213
224
  UpdateIPSetResponse = Shapes::StructureShape.new(name: 'UpdateIPSetResponse')
225
+ UpdateOrganizationConfigurationRequest = Shapes::StructureShape.new(name: 'UpdateOrganizationConfigurationRequest')
226
+ UpdateOrganizationConfigurationResponse = Shapes::StructureShape.new(name: 'UpdateOrganizationConfigurationResponse')
214
227
  UpdatePublishingDestinationRequest = Shapes::StructureShape.new(name: 'UpdatePublishingDestinationRequest')
215
228
  UpdatePublishingDestinationResponse = Shapes::StructureShape.new(name: 'UpdatePublishingDestinationResponse')
216
229
  UpdateThreatIntelSetRequest = Shapes::StructureShape.new(name: 'UpdateThreatIntelSetRequest')
@@ -244,6 +257,12 @@ module Aws::GuardDuty
244
257
  Action.add_member(:port_probe_action, Shapes::ShapeRef.new(shape: PortProbeAction, location_name: "portProbeAction"))
245
258
  Action.struct_class = Types::Action
246
259
 
260
+ AdminAccount.add_member(:admin_account_id, Shapes::ShapeRef.new(shape: String, location_name: "adminAccountId"))
261
+ AdminAccount.add_member(:admin_status, Shapes::ShapeRef.new(shape: AdminStatus, location_name: "adminStatus"))
262
+ AdminAccount.struct_class = Types::AdminAccount
263
+
264
+ AdminAccounts.member = Shapes::ShapeRef.new(shape: AdminAccount)
265
+
247
266
  ArchiveFindingsRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
248
267
  ArchiveFindingsRequest.add_member(:finding_ids, Shapes::ShapeRef.new(shape: FindingIds, required: true, location_name: "findingIds"))
249
268
  ArchiveFindingsRequest.struct_class = Types::ArchiveFindingsRequest
@@ -404,6 +423,13 @@ module Aws::GuardDuty
404
423
 
405
424
  DeleteThreatIntelSetResponse.struct_class = Types::DeleteThreatIntelSetResponse
406
425
 
426
+ DescribeOrganizationConfigurationRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
427
+ DescribeOrganizationConfigurationRequest.struct_class = Types::DescribeOrganizationConfigurationRequest
428
+
429
+ DescribeOrganizationConfigurationResponse.add_member(:auto_enable, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "autoEnable"))
430
+ DescribeOrganizationConfigurationResponse.add_member(:member_account_limit_reached, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "memberAccountLimitReached"))
431
+ DescribeOrganizationConfigurationResponse.struct_class = Types::DescribeOrganizationConfigurationResponse
432
+
407
433
  DescribePublishingDestinationRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
408
434
  DescribePublishingDestinationRequest.add_member(:destination_id, Shapes::ShapeRef.new(shape: String, required: true, location: "uri", location_name: "destinationId"))
409
435
  DescribePublishingDestinationRequest.struct_class = Types::DescribePublishingDestinationRequest
@@ -428,6 +454,11 @@ module Aws::GuardDuty
428
454
 
429
455
  DetectorIds.member = Shapes::ShapeRef.new(shape: DetectorId)
430
456
 
457
+ DisableOrganizationAdminAccountRequest.add_member(:admin_account_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "adminAccountId"))
458
+ DisableOrganizationAdminAccountRequest.struct_class = Types::DisableOrganizationAdminAccountRequest
459
+
460
+ DisableOrganizationAdminAccountResponse.struct_class = Types::DisableOrganizationAdminAccountResponse
461
+
431
462
  DisassociateFromMasterAccountRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
432
463
  DisassociateFromMasterAccountRequest.struct_class = Types::DisassociateFromMasterAccountRequest
433
464
 
@@ -446,6 +477,11 @@ module Aws::GuardDuty
446
477
  DomainDetails.add_member(:domain, Shapes::ShapeRef.new(shape: String, location_name: "domain"))
447
478
  DomainDetails.struct_class = Types::DomainDetails
448
479
 
480
+ EnableOrganizationAdminAccountRequest.add_member(:admin_account_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "adminAccountId"))
481
+ EnableOrganizationAdminAccountRequest.struct_class = Types::EnableOrganizationAdminAccountRequest
482
+
483
+ EnableOrganizationAdminAccountResponse.struct_class = Types::EnableOrganizationAdminAccountResponse
484
+
449
485
  Eq.member = Shapes::ShapeRef.new(shape: String)
450
486
 
451
487
  Equals.member = Shapes::ShapeRef.new(shape: String)
@@ -669,6 +705,14 @@ module Aws::GuardDuty
669
705
  ListMembersResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location_name: "nextToken"))
670
706
  ListMembersResponse.struct_class = Types::ListMembersResponse
671
707
 
708
+ ListOrganizationAdminAccountsRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location: "querystring", location_name: "maxResults"))
709
+ ListOrganizationAdminAccountsRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location: "querystring", location_name: "nextToken"))
710
+ ListOrganizationAdminAccountsRequest.struct_class = Types::ListOrganizationAdminAccountsRequest
711
+
712
+ ListOrganizationAdminAccountsResponse.add_member(:admin_accounts, Shapes::ShapeRef.new(shape: AdminAccounts, location_name: "adminAccounts"))
713
+ ListOrganizationAdminAccountsResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location_name: "nextToken"))
714
+ ListOrganizationAdminAccountsResponse.struct_class = Types::ListOrganizationAdminAccountsResponse
715
+
672
716
  ListPublishingDestinationsRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
673
717
  ListPublishingDestinationsRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location: "querystring", location_name: "maxResults"))
674
718
  ListPublishingDestinationsRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location: "querystring", location_name: "nextToken"))
@@ -905,6 +949,12 @@ module Aws::GuardDuty
905
949
 
906
950
  UpdateIPSetResponse.struct_class = Types::UpdateIPSetResponse
907
951
 
952
+ UpdateOrganizationConfigurationRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
953
+ UpdateOrganizationConfigurationRequest.add_member(:auto_enable, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "autoEnable"))
954
+ UpdateOrganizationConfigurationRequest.struct_class = Types::UpdateOrganizationConfigurationRequest
955
+
956
+ UpdateOrganizationConfigurationResponse.struct_class = Types::UpdateOrganizationConfigurationResponse
957
+
908
958
  UpdatePublishingDestinationRequest.add_member(:detector_id, Shapes::ShapeRef.new(shape: DetectorId, required: true, location: "uri", location_name: "detectorId"))
909
959
  UpdatePublishingDestinationRequest.add_member(:destination_id, Shapes::ShapeRef.new(shape: String, required: true, location: "uri", location_name: "destinationId"))
910
960
  UpdatePublishingDestinationRequest.add_member(:destination_properties, Shapes::ShapeRef.new(shape: DestinationProperties, location_name: "destinationProperties"))
@@ -1109,6 +1159,16 @@ module Aws::GuardDuty
1109
1159
  o.errors << Shapes::ShapeRef.new(shape: InternalServerErrorException)
1110
1160
  end)
1111
1161
 
1162
+ api.add_operation(:describe_organization_configuration, Seahorse::Model::Operation.new.tap do |o|
1163
+ o.name = "DescribeOrganizationConfiguration"
1164
+ o.http_method = "GET"
1165
+ o.http_request_uri = "/detector/{detectorId}/admin"
1166
+ o.input = Shapes::ShapeRef.new(shape: DescribeOrganizationConfigurationRequest)
1167
+ o.output = Shapes::ShapeRef.new(shape: DescribeOrganizationConfigurationResponse)
1168
+ o.errors << Shapes::ShapeRef.new(shape: BadRequestException)
1169
+ o.errors << Shapes::ShapeRef.new(shape: InternalServerErrorException)
1170
+ end)
1171
+
1112
1172
  api.add_operation(:describe_publishing_destination, Seahorse::Model::Operation.new.tap do |o|
1113
1173
  o.name = "DescribePublishingDestination"
1114
1174
  o.http_method = "GET"
@@ -1119,6 +1179,16 @@ module Aws::GuardDuty
1119
1179
  o.errors << Shapes::ShapeRef.new(shape: InternalServerErrorException)
1120
1180
  end)
1121
1181
 
1182
+ api.add_operation(:disable_organization_admin_account, Seahorse::Model::Operation.new.tap do |o|
1183
+ o.name = "DisableOrganizationAdminAccount"
1184
+ o.http_method = "POST"
1185
+ o.http_request_uri = "/admin/disable"
1186
+ o.input = Shapes::ShapeRef.new(shape: DisableOrganizationAdminAccountRequest)
1187
+ o.output = Shapes::ShapeRef.new(shape: DisableOrganizationAdminAccountResponse)
1188
+ o.errors << Shapes::ShapeRef.new(shape: BadRequestException)
1189
+ o.errors << Shapes::ShapeRef.new(shape: InternalServerErrorException)
1190
+ end)
1191
+
1122
1192
  api.add_operation(:disassociate_from_master_account, Seahorse::Model::Operation.new.tap do |o|
1123
1193
  o.name = "DisassociateFromMasterAccount"
1124
1194
  o.http_method = "POST"
@@ -1139,6 +1209,16 @@ module Aws::GuardDuty
1139
1209
  o.errors << Shapes::ShapeRef.new(shape: InternalServerErrorException)
1140
1210
  end)
1141
1211
 
1212
+ api.add_operation(:enable_organization_admin_account, Seahorse::Model::Operation.new.tap do |o|
1213
+ o.name = "EnableOrganizationAdminAccount"
1214
+ o.http_method = "POST"
1215
+ o.http_request_uri = "/admin/enable"
1216
+ o.input = Shapes::ShapeRef.new(shape: EnableOrganizationAdminAccountRequest)
1217
+ o.output = Shapes::ShapeRef.new(shape: EnableOrganizationAdminAccountResponse)
1218
+ o.errors << Shapes::ShapeRef.new(shape: BadRequestException)
1219
+ o.errors << Shapes::ShapeRef.new(shape: InternalServerErrorException)
1220
+ end)
1221
+
1142
1222
  api.add_operation(:get_detector, Seahorse::Model::Operation.new.tap do |o|
1143
1223
  o.name = "GetDetector"
1144
1224
  o.http_method = "GET"
@@ -1335,6 +1415,22 @@ module Aws::GuardDuty
1335
1415
  )
1336
1416
  end)
1337
1417
 
1418
+ api.add_operation(:list_organization_admin_accounts, Seahorse::Model::Operation.new.tap do |o|
1419
+ o.name = "ListOrganizationAdminAccounts"
1420
+ o.http_method = "GET"
1421
+ o.http_request_uri = "/admin"
1422
+ o.input = Shapes::ShapeRef.new(shape: ListOrganizationAdminAccountsRequest)
1423
+ o.output = Shapes::ShapeRef.new(shape: ListOrganizationAdminAccountsResponse)
1424
+ o.errors << Shapes::ShapeRef.new(shape: BadRequestException)
1425
+ o.errors << Shapes::ShapeRef.new(shape: InternalServerErrorException)
1426
+ o[:pager] = Aws::Pager.new(
1427
+ limit_key: "max_results",
1428
+ tokens: {
1429
+ "next_token" => "next_token"
1430
+ }
1431
+ )
1432
+ end)
1433
+
1338
1434
  api.add_operation(:list_publishing_destinations, Seahorse::Model::Operation.new.tap do |o|
1339
1435
  o.name = "ListPublishingDestinations"
1340
1436
  o.http_method = "GET"
@@ -1467,6 +1563,16 @@ module Aws::GuardDuty
1467
1563
  o.errors << Shapes::ShapeRef.new(shape: InternalServerErrorException)
1468
1564
  end)
1469
1565
 
1566
+ api.add_operation(:update_organization_configuration, Seahorse::Model::Operation.new.tap do |o|
1567
+ o.name = "UpdateOrganizationConfiguration"
1568
+ o.http_method = "POST"
1569
+ o.http_request_uri = "/detector/{detectorId}/admin"
1570
+ o.input = Shapes::ShapeRef.new(shape: UpdateOrganizationConfigurationRequest)
1571
+ o.output = Shapes::ShapeRef.new(shape: UpdateOrganizationConfigurationResponse)
1572
+ o.errors << Shapes::ShapeRef.new(shape: BadRequestException)
1573
+ o.errors << Shapes::ShapeRef.new(shape: InternalServerErrorException)
1574
+ end)
1575
+
1470
1576
  api.add_operation(:update_publishing_destination, Seahorse::Model::Operation.new.tap do |o|
1471
1577
  o.name = "UpdatePublishingDestination"
1472
1578
  o.http_method = "POST"
@@ -11,27 +11,23 @@ module Aws::GuardDuty
11
11
  # These errors all extend Aws::GuardDuty::Errors::ServiceError < {Aws::Errors::ServiceError}
12
12
  #
13
13
  # You can rescue all GuardDuty errors using ServiceError:
14
+ #
14
15
  # begin
15
16
  # # do stuff
16
17
  # rescue Aws::GuardDuty::Errors::ServiceError
17
18
  # # rescues all GuardDuty API errors
18
19
  # end
19
20
  #
21
+ #
20
22
  # ## Request Context
21
23
  # ServiceError objects have a {Aws::Errors::ServiceError#context #context} method that returns
22
- # information about the request that generated the error, including:
23
- # *
24
- # * #params - The request params
25
- # * #operation_name - Name of the API operation invoked
26
- # * #http_request
27
- # * #http_response
28
- # * etc ...
29
- #
24
+ # information about the request that generated the error.
30
25
  # See {Seahorse::Client::RequestContext} for more information.
31
26
  #
32
27
  # ## Error Classes
33
28
  # * {BadRequestException}
34
29
  # * {InternalServerErrorException}
30
+ #
35
31
  # Additionally, error classes are dynamically generated for service errors based on the error code
36
32
  # if they are not defined above.
37
33
  module Errors
@@ -56,7 +52,6 @@ module Aws::GuardDuty
56
52
  def type
57
53
  @data[:type]
58
54
  end
59
-
60
55
  end
61
56
 
62
57
  class InternalServerErrorException < ServiceError
@@ -77,7 +72,6 @@ module Aws::GuardDuty
77
72
  def type
78
73
  @data[:type]
79
74
  end
80
-
81
75
  end
82
76
 
83
77
  end
@@ -6,13 +6,7 @@
6
6
  # WARNING ABOUT GENERATED CODE
7
7
 
8
8
  module Aws::GuardDuty
9
- # This class provides a resource oriented interface for GuardDuty.
10
- # To create a resource object:
11
- # resource = Aws::GuardDuty::Resource.new(region: 'us-west-2')
12
- # You can supply a client object with custom configuration that will be used for all resource operations.
13
- # If you do not pass +:client+, a default client will be constructed.
14
- # client = Aws::GuardDuty::Client.new(region: 'us-west-2')
15
- # resource = Aws::GuardDuty::Resource.new(client: client)
9
+
16
10
  class Resource
17
11
 
18
12
  # @param options ({})
@@ -27,7 +27,7 @@ module Aws::GuardDuty
27
27
  # @return [String]
28
28
  #
29
29
  # @!attribute [rw] invitation_id
30
- # This value is used to validate the master account to the member
30
+ # The value that is used to validate the master account to the member
31
31
  # account.
32
32
  # @return [String]
33
33
  #
@@ -47,7 +47,7 @@ module Aws::GuardDuty
47
47
  # Contains information about the access keys.
48
48
  #
49
49
  # @!attribute [rw] access_key_id
50
- # Access key ID of the user.
50
+ # The access key ID of the user.
51
51
  # @return [String]
52
52
  #
53
53
  # @!attribute [rw] principal_id
@@ -83,11 +83,11 @@ module Aws::GuardDuty
83
83
  # }
84
84
  #
85
85
  # @!attribute [rw] account_id
86
- # Member account ID.
86
+ # The member account ID.
87
87
  # @return [String]
88
88
  #
89
89
  # @!attribute [rw] email
90
- # Member account's email address.
90
+ # The email address of the member account.
91
91
  # @return [String]
92
92
  #
93
93
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/AccountDetail AWS API Documentation
@@ -98,10 +98,10 @@ module Aws::GuardDuty
98
98
  include Aws::Structure
99
99
  end
100
100
 
101
- # Contains information about action.
101
+ # Contains information about actions.
102
102
  #
103
103
  # @!attribute [rw] action_type
104
- # GuardDuty Finding activity type.
104
+ # The GuardDuty finding activity type.
105
105
  # @return [String]
106
106
  #
107
107
  # @!attribute [rw] aws_api_call_action
@@ -133,6 +133,26 @@ module Aws::GuardDuty
133
133
  include Aws::Structure
134
134
  end
135
135
 
136
+ # The account within the organization specified as the GuardDuty
137
+ # delegated administrator.
138
+ #
139
+ # @!attribute [rw] admin_account_id
140
+ # The AWS account ID for the account.
141
+ # @return [String]
142
+ #
143
+ # @!attribute [rw] admin_status
144
+ # Indicates whether the account is enabled as the delegated
145
+ # administrator.
146
+ # @return [String]
147
+ #
148
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/AdminAccount AWS API Documentation
149
+ #
150
+ class AdminAccount < Struct.new(
151
+ :admin_account_id,
152
+ :admin_status)
153
+ include Aws::Structure
154
+ end
155
+
136
156
  # @note When making an API call, you may pass ArchiveFindingsRequest
137
157
  # data as a hash:
138
158
  #
@@ -147,7 +167,7 @@ module Aws::GuardDuty
147
167
  # @return [String]
148
168
  #
149
169
  # @!attribute [rw] finding_ids
150
- # IDs of the findings that you want to archive.
170
+ # The IDs of the findings that you want to archive.
151
171
  # @return [Array<String>]
152
172
  #
153
173
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ArchiveFindingsRequest AWS API Documentation
@@ -165,23 +185,23 @@ module Aws::GuardDuty
165
185
  # Contains information about the API operation.
166
186
  #
167
187
  # @!attribute [rw] api
168
- # AWS API name.
188
+ # The AWS API name.
169
189
  # @return [String]
170
190
  #
171
191
  # @!attribute [rw] caller_type
172
- # AWS API caller type.
192
+ # The AWS API caller type.
173
193
  # @return [String]
174
194
  #
175
195
  # @!attribute [rw] domain_details
176
- # Domain information for the AWS API call.
196
+ # The domain information for the AWS API call.
177
197
  # @return [Types::DomainDetails]
178
198
  #
179
199
  # @!attribute [rw] remote_ip_details
180
- # Remote IP information of the connection.
200
+ # The remote IP information of the connection.
181
201
  # @return [Types::RemoteIpDetails]
182
202
  #
183
203
  # @!attribute [rw] service_name
184
- # AWS service name whose API was invoked.
204
+ # The AWS service name whose API was invoked.
185
205
  # @return [String]
186
206
  #
187
207
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/AwsApiCallAction AWS API Documentation
@@ -195,7 +215,7 @@ module Aws::GuardDuty
195
215
  include Aws::Structure
196
216
  end
197
217
 
198
- # Bad request exception object.
218
+ # A bad request exception object.
199
219
  #
200
220
  # @!attribute [rw] message
201
221
  # The error message.
@@ -216,7 +236,7 @@ module Aws::GuardDuty
216
236
  # Contains information about the city associated with the IP address.
217
237
  #
218
238
  # @!attribute [rw] city_name
219
- # City name of the remote IP address.
239
+ # The city name of the remote IP address.
220
240
  # @return [String]
221
241
  #
222
242
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/City AWS API Documentation
@@ -247,63 +267,63 @@ module Aws::GuardDuty
247
267
  # }
248
268
  #
249
269
  # @!attribute [rw] eq
250
- # Represents the equal condition to be applied to a single field when
251
- # querying for findings.
270
+ # Represents the *equal* condition to be applied to a single field
271
+ # when querying for findings.
252
272
  # @return [Array<String>]
253
273
  #
254
274
  # @!attribute [rw] neq
255
- # Represents the not equal condition to be applied to a single field
275
+ # Represents the *not equal* condition to be applied to a single field
256
276
  # when querying for findings.
257
277
  # @return [Array<String>]
258
278
  #
259
279
  # @!attribute [rw] gt
260
- # Represents a greater than condition to be applied to a single field
261
- # when querying for findings.
280
+ # Represents a *greater than* condition to be applied to a single
281
+ # field when querying for findings.
262
282
  # @return [Integer]
263
283
  #
264
284
  # @!attribute [rw] gte
265
- # Represents a greater than equal condition to be applied to a single
266
- # field when querying for findings.
285
+ # Represents a *greater than or equal* condition to be applied to a
286
+ # single field when querying for findings.
267
287
  # @return [Integer]
268
288
  #
269
289
  # @!attribute [rw] lt
270
- # Represents a less than condition to be applied to a single field
290
+ # Represents a *less than* condition to be applied to a single field
271
291
  # when querying for findings.
272
292
  # @return [Integer]
273
293
  #
274
294
  # @!attribute [rw] lte
275
- # Represents a less than equal condition to be applied to a single
276
- # field when querying for findings.
295
+ # Represents a *less than or equal* condition to be applied to a
296
+ # single field when querying for findings.
277
297
  # @return [Integer]
278
298
  #
279
299
  # @!attribute [rw] equals
280
- # Represents an **equal** condition to be applied to a single field
300
+ # Represents an *equal* **** condition to be applied to a single field
281
301
  # when querying for findings.
282
302
  # @return [Array<String>]
283
303
  #
284
304
  # @!attribute [rw] not_equals
285
- # Represents an **not equal** condition to be applied to a single
305
+ # Represents a *not equal* **** condition to be applied to a single
286
306
  # field when querying for findings.
287
307
  # @return [Array<String>]
288
308
  #
289
309
  # @!attribute [rw] greater_than
290
- # Represents a greater than condition to be applied to a single field
291
- # when querying for findings.
310
+ # Represents a *greater than* condition to be applied to a single
311
+ # field when querying for findings.
292
312
  # @return [Integer]
293
313
  #
294
314
  # @!attribute [rw] greater_than_or_equal
295
- # Represents a greater than equal condition to be applied to a single
296
- # field when querying for findings.
315
+ # Represents a *greater than or equal* condition to be applied to a
316
+ # single field when querying for findings.
297
317
  # @return [Integer]
298
318
  #
299
319
  # @!attribute [rw] less_than
300
- # Represents a less than condition to be applied to a single field
320
+ # Represents a *less than* condition to be applied to a single field
301
321
  # when querying for findings.
302
322
  # @return [Integer]
303
323
  #
304
324
  # @!attribute [rw] less_than_or_equal
305
- # Represents a less than equal condition to be applied to a single
306
- # field when querying for findings.
325
+ # Represents a *less than or equal* condition to be applied to a
326
+ # single field when querying for findings.
307
327
  # @return [Integer]
308
328
  #
309
329
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Condition AWS API Documentation
@@ -324,15 +344,15 @@ module Aws::GuardDuty
324
344
  include Aws::Structure
325
345
  end
326
346
 
327
- # Contains information about the country in which the remote IP address
328
- # is located.
347
+ # Contains information about the country where the remote IP address is
348
+ # located.
329
349
  #
330
350
  # @!attribute [rw] country_code
331
- # Country code of the remote IP address.
351
+ # The country code of the remote IP address.
332
352
  # @return [String]
333
353
  #
334
354
  # @!attribute [rw] country_name
335
- # Country name of the remote IP address.
355
+ # The country name of the remote IP address.
336
356
  # @return [String]
337
357
  #
338
358
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Country AWS API Documentation
@@ -356,7 +376,7 @@ module Aws::GuardDuty
356
376
  # }
357
377
  #
358
378
  # @!attribute [rw] enable
359
- # A boolean value that specifies whether the detector is to be
379
+ # A Boolean value that specifies whether the detector is to be
360
380
  # enabled.
361
381
  # @return [Boolean]
362
382
  #
@@ -368,8 +388,8 @@ module Aws::GuardDuty
368
388
  # @return [String]
369
389
  #
370
390
  # @!attribute [rw] finding_publishing_frequency
371
- # A enum value that specifies how frequently customer got Finding
372
- # updates published.
391
+ # An enum value that specifies how frequently updated findings are
392
+ # exported.
373
393
  # @return [String]
374
394
  #
375
395
  # @!attribute [rw] tags
@@ -431,8 +451,8 @@ module Aws::GuardDuty
431
451
  # }
432
452
  #
433
453
  # @!attribute [rw] detector_id
434
- # The unique ID of the detector of the GuardDuty account for which you
435
- # want to create a filter.
454
+ # The unique ID of the detector of the GuardDuty account that you want
455
+ # to create a filter for.
436
456
  # @return [String]
437
457
  #
438
458
  # @!attribute [rw] name
@@ -457,6 +477,117 @@ module Aws::GuardDuty
457
477
  # @!attribute [rw] finding_criteria
458
478
  # Represents the criteria to be used in the filter for querying
459
479
  # findings.
480
+ #
481
+ # You can only use the following attributes to query findings:
482
+ #
483
+ # * accountId
484
+ #
485
+ # * region
486
+ #
487
+ # * confidence
488
+ #
489
+ # * id
490
+ #
491
+ # * resource.accessKeyDetails.accessKeyId
492
+ #
493
+ # * resource.accessKeyDetails.principalId
494
+ #
495
+ # * resource.accessKeyDetails.userName
496
+ #
497
+ # * resource.accessKeyDetails.userType
498
+ #
499
+ # * resource.instanceDetails.iamInstanceProfile.id
500
+ #
501
+ # * resource.instanceDetails.imageId
502
+ #
503
+ # * resource.instanceDetails.instanceId
504
+ #
505
+ # * resource.instanceDetails.outpostArn
506
+ #
507
+ # * resource.instanceDetails.networkInterfaces.ipv6Addresses
508
+ #
509
+ # * resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
510
+ #
511
+ # * resource.instanceDetails.networkInterfaces.publicDnsName
512
+ #
513
+ # * resource.instanceDetails.networkInterfaces.publicIp
514
+ #
515
+ # * resource.instanceDetails.networkInterfaces.securityGroups.groupId
516
+ #
517
+ # * resource.instanceDetails.networkInterfaces.securityGroups.groupName
518
+ #
519
+ # * resource.instanceDetails.networkInterfaces.subnetId
520
+ #
521
+ # * resource.instanceDetails.networkInterfaces.vpcId
522
+ #
523
+ # * resource.instanceDetails.tags.key
524
+ #
525
+ # * resource.instanceDetails.tags.value
526
+ #
527
+ # * resource.resourceType
528
+ #
529
+ # * service.action.actionType
530
+ #
531
+ # * service.action.awsApiCallAction.api
532
+ #
533
+ # * service.action.awsApiCallAction.callerType
534
+ #
535
+ # * service.action.awsApiCallAction.remoteIpDetails.city.cityName
536
+ #
537
+ # * service.action.awsApiCallAction.remoteIpDetails.country.countryName
538
+ #
539
+ # * service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
540
+ #
541
+ # * service.action.awsApiCallAction.remoteIpDetails.organization.asn
542
+ #
543
+ # * service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
544
+ #
545
+ # * service.action.awsApiCallAction.serviceName
546
+ #
547
+ # * service.action.dnsRequestAction.domain
548
+ #
549
+ # * service.action.networkConnectionAction.blocked
550
+ #
551
+ # * service.action.networkConnectionAction.connectionDirection
552
+ #
553
+ # * service.action.networkConnectionAction.localPortDetails.port
554
+ #
555
+ # * service.action.networkConnectionAction.protocol
556
+ #
557
+ # * service.action.networkConnectionAction.localIpDetails.ipAddressV4
558
+ #
559
+ # * service.action.networkConnectionAction.remoteIpDetails.city.cityName
560
+ #
561
+ # * service.action.networkConnectionAction.remoteIpDetails.country.countryName
562
+ #
563
+ # * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
564
+ #
565
+ # * service.action.networkConnectionAction.remoteIpDetails.organization.asn
566
+ #
567
+ # * service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
568
+ #
569
+ # * service.action.networkConnectionAction.remotePortDetails.port
570
+ #
571
+ # * service.additionalInfo.threatListName
572
+ #
573
+ # * service.archived
574
+ #
575
+ # When this attribute is set to TRUE, only archived findings are
576
+ # listed. When it's set to FALSE, only unarchived findings are
577
+ # listed. When this attribute is not set, all existing findings are
578
+ # listed.
579
+ #
580
+ # * service.resourceRole
581
+ #
582
+ # * severity
583
+ #
584
+ # * type
585
+ #
586
+ # * updatedAt
587
+ #
588
+ # Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or
589
+ # YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains
590
+ # milliseconds.
460
591
  # @return [Types::FindingCriteria]
461
592
  #
462
593
  # @!attribute [rw] client_token
@@ -511,14 +642,15 @@ module Aws::GuardDuty
511
642
  # }
512
643
  #
513
644
  # @!attribute [rw] detector_id
514
- # The unique ID of the detector of the GuardDuty account for which you
515
- # want to create an IPSet.
645
+ # The unique ID of the detector of the GuardDuty account that you want
646
+ # to create an IPSet for.
516
647
  # @return [String]
517
648
  #
518
649
  # @!attribute [rw] name
519
- # The user friendly name to identify the IPSet. This name is displayed
520
- # in all findings that are triggered by activity that involves IP
521
- # addresses included in this IPSet.
650
+ # The user-friendly name to identify the IPSet.
651
+ #
652
+ # Allowed characters are alphanumerics, spaces, hyphens (-), and
653
+ # underscores (\_).
522
654
  # @return [String]
523
655
  #
524
656
  # @!attribute [rw] format
@@ -526,12 +658,11 @@ module Aws::GuardDuty
526
658
  # @return [String]
527
659
  #
528
660
  # @!attribute [rw] location
529
- # The URI of the file that contains the IPSet. For example
530
- # (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key)
661
+ # The URI of the file that contains the IPSet.
531
662
  # @return [String]
532
663
  #
533
664
  # @!attribute [rw] activate
534
- # A boolean value that indicates whether GuardDuty is to start using
665
+ # A Boolean value that indicates whether GuardDuty is to start using
535
666
  # the uploaded IPSet.
536
667
  # @return [Boolean]
537
668
  #
@@ -584,8 +715,8 @@ module Aws::GuardDuty
584
715
  # }
585
716
  #
586
717
  # @!attribute [rw] detector_id
587
- # The unique ID of the detector of the GuardDuty account with which
588
- # you want to associate member accounts.
718
+ # The unique ID of the detector of the GuardDuty account that you want
719
+ # to associate member accounts with.
589
720
  # @return [String]
590
721
  #
591
722
  # @!attribute [rw] account_details
@@ -602,8 +733,8 @@ module Aws::GuardDuty
602
733
  end
603
734
 
604
735
  # @!attribute [rw] unprocessed_accounts
605
- # A list of objects containing the unprocessed account and a result
606
- # string explaining why it was unprocessed.
736
+ # A list of objects that include the `accountIds` of the unprocessed
737
+ # accounts and a result string that explains why each was unprocessed.
607
738
  # @return [Array<Types::UnprocessedAccount>]
608
739
  #
609
740
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/CreateMembersResponse AWS API Documentation
@@ -633,12 +764,12 @@ module Aws::GuardDuty
633
764
  #
634
765
  # @!attribute [rw] destination_type
635
766
  # The type of resource for the publishing destination. Currently only
636
- # S3 is supported.
767
+ # Amazon S3 buckets are supported.
637
768
  # @return [String]
638
769
  #
639
770
  # @!attribute [rw] destination_properties
640
- # Properties of the publishing destination, including the ARNs for the
641
- # destination and the KMS key used for encryption.
771
+ # The properties of the publishing destination, including the ARNs for
772
+ # the destination and the KMS key used for encryption.
642
773
  # @return [Types::DestinationProperties]
643
774
  #
644
775
  # @!attribute [rw] client_token
@@ -659,7 +790,7 @@ module Aws::GuardDuty
659
790
  end
660
791
 
661
792
  # @!attribute [rw] destination_id
662
- # The ID of the publishing destination created.
793
+ # The ID of the publishing destination that is created.
663
794
  # @return [String]
664
795
  #
665
796
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/CreatePublishingDestinationResponse AWS API Documentation
@@ -682,7 +813,7 @@ module Aws::GuardDuty
682
813
  # @return [String]
683
814
  #
684
815
  # @!attribute [rw] finding_types
685
- # Types of sample findings to generate.
816
+ # The types of sample findings to generate.
686
817
  # @return [Array<String>]
687
818
  #
688
819
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/CreateSampleFindingsRequest AWS API Documentation
@@ -713,14 +844,14 @@ module Aws::GuardDuty
713
844
  # }
714
845
  #
715
846
  # @!attribute [rw] detector_id
716
- # The unique ID of the detector of the GuardDuty account for which you
717
- # want to create a threatIntelSet.
847
+ # The unique ID of the detector of the GuardDuty account that you want
848
+ # to create a threatIntelSet for.
718
849
  # @return [String]
719
850
  #
720
851
  # @!attribute [rw] name
721
- # A user-friendly ThreatIntelSet name that is displayed in all finding
722
- # generated by activity that involves IP addresses included in this
723
- # ThreatIntelSet.
852
+ # A user-friendly ThreatIntelSet name displayed in all findings that
853
+ # are generated by activity that involves IP addresses included in
854
+ # this ThreatIntelSet.
724
855
  # @return [String]
725
856
  #
726
857
  # @!attribute [rw] format
@@ -728,12 +859,11 @@ module Aws::GuardDuty
728
859
  # @return [String]
729
860
  #
730
861
  # @!attribute [rw] location
731
- # The URI of the file that contains the ThreatIntelSet. For example
732
- # (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
862
+ # The URI of the file that contains the ThreatIntelSet.
733
863
  # @return [String]
734
864
  #
735
865
  # @!attribute [rw] activate
736
- # A boolean value that indicates whether GuardDuty is to start using
866
+ # A Boolean value that indicates whether GuardDuty is to start using
737
867
  # the uploaded ThreatIntelSet.
738
868
  # @return [Boolean]
739
869
  #
@@ -745,7 +875,7 @@ module Aws::GuardDuty
745
875
  # @return [String]
746
876
  #
747
877
  # @!attribute [rw] tags
748
- # The tags to be added to a new Threat List resource.
878
+ # The tags to be added to a new threat list resource.
749
879
  # @return [Hash<String,String>]
750
880
  #
751
881
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/CreateThreatIntelSetRequest AWS API Documentation
@@ -793,8 +923,8 @@ module Aws::GuardDuty
793
923
  end
794
924
 
795
925
  # @!attribute [rw] unprocessed_accounts
796
- # A list of objects containing the unprocessed account and a result
797
- # string explaining why it was unprocessed.
926
+ # A list of objects that contain the unprocessed account and a result
927
+ # string that explains why it was unprocessed.
798
928
  # @return [Array<Types::UnprocessedAccount>]
799
929
  #
800
930
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeclineInvitationsResponse AWS API Documentation
@@ -835,11 +965,11 @@ module Aws::GuardDuty
835
965
  # }
836
966
  #
837
967
  # @!attribute [rw] detector_id
838
- # The unique ID of the detector the filter is associated with.
968
+ # The unique ID of the detector that the filter is associated with.
839
969
  # @return [String]
840
970
  #
841
971
  # @!attribute [rw] filter_name
842
- # The name of the filter you want to delete.
972
+ # The name of the filter that you want to delete.
843
973
  # @return [String]
844
974
  #
845
975
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteFilterRequest AWS API Documentation
@@ -902,8 +1032,8 @@ module Aws::GuardDuty
902
1032
  end
903
1033
 
904
1034
  # @!attribute [rw] unprocessed_accounts
905
- # A list of objects containing the unprocessed account and a result
906
- # string explaining why it was unprocessed.
1035
+ # A list of objects that contain the unprocessed account and a result
1036
+ # string that explains why it was unprocessed.
907
1037
  # @return [Array<Types::UnprocessedAccount>]
908
1038
  #
909
1039
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteInvitationsResponse AWS API Documentation
@@ -988,11 +1118,12 @@ module Aws::GuardDuty
988
1118
  # }
989
1119
  #
990
1120
  # @!attribute [rw] detector_id
991
- # The unique ID of the detector the threatIntelSet is associated with.
1121
+ # The unique ID of the detector that the threatIntelSet is associated
1122
+ # with.
992
1123
  # @return [String]
993
1124
  #
994
1125
  # @!attribute [rw] threat_intel_set_id
995
- # The unique ID of the threatIntelSet you want to delete.
1126
+ # The unique ID of the threatIntelSet that you want to delete.
996
1127
  # @return [String]
997
1128
  #
998
1129
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteThreatIntelSetRequest AWS API Documentation
@@ -1007,6 +1138,43 @@ module Aws::GuardDuty
1007
1138
  #
1008
1139
  class DeleteThreatIntelSetResponse < Aws::EmptyStructure; end
1009
1140
 
1141
+ # @note When making an API call, you may pass DescribeOrganizationConfigurationRequest
1142
+ # data as a hash:
1143
+ #
1144
+ # {
1145
+ # detector_id: "DetectorId", # required
1146
+ # }
1147
+ #
1148
+ # @!attribute [rw] detector_id
1149
+ # The ID of the detector to retrieve information about the delegated
1150
+ # administrator from.
1151
+ # @return [String]
1152
+ #
1153
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DescribeOrganizationConfigurationRequest AWS API Documentation
1154
+ #
1155
+ class DescribeOrganizationConfigurationRequest < Struct.new(
1156
+ :detector_id)
1157
+ include Aws::Structure
1158
+ end
1159
+
1160
+ # @!attribute [rw] auto_enable
1161
+ # Indicates whether GuardDuty is automatically enabled for accounts
1162
+ # added to the organization.
1163
+ # @return [Boolean]
1164
+ #
1165
+ # @!attribute [rw] member_account_limit_reached
1166
+ # Indicates whether the maximum number of allowed member accounts are
1167
+ # already associated with the delegated administrator master account.
1168
+ # @return [Boolean]
1169
+ #
1170
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DescribeOrganizationConfigurationResponse AWS API Documentation
1171
+ #
1172
+ class DescribeOrganizationConfigurationResponse < Struct.new(
1173
+ :auto_enable,
1174
+ :member_account_limit_reached)
1175
+ include Aws::Structure
1176
+ end
1177
+
1010
1178
  # @note When making an API call, you may pass DescribePublishingDestinationRequest
1011
1179
  # data as a hash:
1012
1180
  #
@@ -1037,8 +1205,8 @@ module Aws::GuardDuty
1037
1205
  # @return [String]
1038
1206
  #
1039
1207
  # @!attribute [rw] destination_type
1040
- # The type of the publishing destination. Currently, only S3 is
1041
- # supported.
1208
+ # The type of publishing destination. Currently, only Amazon S3
1209
+ # buckets are supported.
1042
1210
  # @return [String]
1043
1211
  #
1044
1212
  # @!attribute [rw] status
@@ -1066,8 +1234,8 @@ module Aws::GuardDuty
1066
1234
  include Aws::Structure
1067
1235
  end
1068
1236
 
1069
- # Contains information about a publishing destination, including the ID,
1070
- # type, and status.
1237
+ # Contains information about the publishing destination, including the
1238
+ # ID, type, and status.
1071
1239
  #
1072
1240
  # @!attribute [rw] destination_id
1073
1241
  # The unique ID of the publishing destination.
@@ -1075,7 +1243,7 @@ module Aws::GuardDuty
1075
1243
  #
1076
1244
  # @!attribute [rw] destination_type
1077
1245
  # The type of resource used for the publishing destination. Currently,
1078
- # only S3 is supported.
1246
+ # only Amazon S3 buckets are supported.
1079
1247
  # @return [String]
1080
1248
  #
1081
1249
  # @!attribute [rw] status
@@ -1091,8 +1259,9 @@ module Aws::GuardDuty
1091
1259
  include Aws::Structure
1092
1260
  end
1093
1261
 
1094
- # Contains the ARN of the resource to publish to, such as an S3 bucket,
1095
- # and the ARN of the KMS key to use to encrypt published findings.
1262
+ # Contains the Amazon Resource Name (ARN) of the resource to publish to,
1263
+ # such as an S3 bucket, and the ARN of the KMS key to use to encrypt
1264
+ # published findings.
1096
1265
  #
1097
1266
  # @note When making an API call, you may pass DestinationProperties
1098
1267
  # data as a hash:
@@ -1118,6 +1287,29 @@ module Aws::GuardDuty
1118
1287
  include Aws::Structure
1119
1288
  end
1120
1289
 
1290
+ # @note When making an API call, you may pass DisableOrganizationAdminAccountRequest
1291
+ # data as a hash:
1292
+ #
1293
+ # {
1294
+ # admin_account_id: "String", # required
1295
+ # }
1296
+ #
1297
+ # @!attribute [rw] admin_account_id
1298
+ # The AWS Account ID for the organizations account to be disabled as a
1299
+ # GuardDuty delegated administrator.
1300
+ # @return [String]
1301
+ #
1302
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisableOrganizationAdminAccountRequest AWS API Documentation
1303
+ #
1304
+ class DisableOrganizationAdminAccountRequest < Struct.new(
1305
+ :admin_account_id)
1306
+ include Aws::Structure
1307
+ end
1308
+
1309
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisableOrganizationAdminAccountResponse AWS API Documentation
1310
+ #
1311
+ class DisableOrganizationAdminAccountResponse < Aws::EmptyStructure; end
1312
+
1121
1313
  # @note When making an API call, you may pass DisassociateFromMasterAccountRequest
1122
1314
  # data as a hash:
1123
1315
  #
@@ -1150,12 +1342,12 @@ module Aws::GuardDuty
1150
1342
  #
1151
1343
  # @!attribute [rw] detector_id
1152
1344
  # The unique ID of the detector of the GuardDuty account whose members
1153
- # you want to disassociate from master.
1345
+ # you want to disassociate from the master account.
1154
1346
  # @return [String]
1155
1347
  #
1156
1348
  # @!attribute [rw] account_ids
1157
1349
  # A list of account IDs of the GuardDuty member accounts that you want
1158
- # to disassociate from master.
1350
+ # to disassociate from the master account.
1159
1351
  # @return [Array<String>]
1160
1352
  #
1161
1353
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisassociateMembersRequest AWS API Documentation
@@ -1167,8 +1359,8 @@ module Aws::GuardDuty
1167
1359
  end
1168
1360
 
1169
1361
  # @!attribute [rw] unprocessed_accounts
1170
- # A list of objects containing the unprocessed account and a result
1171
- # string explaining why it was unprocessed.
1362
+ # A list of objects that contain the unprocessed account and a result
1363
+ # string that explains why it was unprocessed.
1172
1364
  # @return [Array<Types::UnprocessedAccount>]
1173
1365
  #
1174
1366
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisassociateMembersResponse AWS API Documentation
@@ -1182,7 +1374,7 @@ module Aws::GuardDuty
1182
1374
  # finding.
1183
1375
  #
1184
1376
  # @!attribute [rw] domain
1185
- # Domain information for the API request.
1377
+ # The domain information for the API request.
1186
1378
  # @return [String]
1187
1379
  #
1188
1380
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DnsRequestAction AWS API Documentation
@@ -1195,7 +1387,7 @@ module Aws::GuardDuty
1195
1387
  # Contains information about the domain.
1196
1388
  #
1197
1389
  # @!attribute [rw] domain
1198
- # Domain information for the AWS API call.
1390
+ # The domain information for the AWS API call.
1199
1391
  # @return [String]
1200
1392
  #
1201
1393
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DomainDetails AWS API Documentation
@@ -1205,6 +1397,29 @@ module Aws::GuardDuty
1205
1397
  include Aws::Structure
1206
1398
  end
1207
1399
 
1400
+ # @note When making an API call, you may pass EnableOrganizationAdminAccountRequest
1401
+ # data as a hash:
1402
+ #
1403
+ # {
1404
+ # admin_account_id: "String", # required
1405
+ # }
1406
+ #
1407
+ # @!attribute [rw] admin_account_id
1408
+ # The AWS Account ID for the organization account to be enabled as a
1409
+ # GuardDuty delegated administrator.
1410
+ # @return [String]
1411
+ #
1412
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/EnableOrganizationAdminAccountRequest AWS API Documentation
1413
+ #
1414
+ class EnableOrganizationAdminAccountRequest < Struct.new(
1415
+ :admin_account_id)
1416
+ include Aws::Structure
1417
+ end
1418
+
1419
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/EnableOrganizationAdminAccountResponse AWS API Documentation
1420
+ #
1421
+ class EnableOrganizationAdminAccountResponse < Aws::EmptyStructure; end
1422
+
1208
1423
  # Contains information about the reason that the finding was generated.
1209
1424
  #
1210
1425
  # @!attribute [rw] threat_intelligence_details
@@ -1226,7 +1441,7 @@ module Aws::GuardDuty
1226
1441
  # @return [String]
1227
1442
  #
1228
1443
  # @!attribute [rw] arn
1229
- # The ARN for the finding.
1444
+ # The ARN of the finding.
1230
1445
  # @return [String]
1231
1446
  #
1232
1447
  # @!attribute [rw] confidence
@@ -1234,7 +1449,7 @@ module Aws::GuardDuty
1234
1449
  # @return [Float]
1235
1450
  #
1236
1451
  # @!attribute [rw] created_at
1237
- # The time and date at which the finding was created.
1452
+ # The time and date when the finding was created.
1238
1453
  # @return [String]
1239
1454
  #
1240
1455
  # @!attribute [rw] description
@@ -1250,7 +1465,7 @@ module Aws::GuardDuty
1250
1465
  # @return [String]
1251
1466
  #
1252
1467
  # @!attribute [rw] region
1253
- # The Region in which the finding was generated.
1468
+ # The Region where the finding was generated.
1254
1469
  # @return [String]
1255
1470
  #
1256
1471
  # @!attribute [rw] resource
@@ -1271,15 +1486,15 @@ module Aws::GuardDuty
1271
1486
  # @return [Float]
1272
1487
  #
1273
1488
  # @!attribute [rw] title
1274
- # The title for the finding.
1489
+ # The title of the finding.
1275
1490
  # @return [String]
1276
1491
  #
1277
1492
  # @!attribute [rw] type
1278
- # The type of the finding.
1493
+ # The type of finding.
1279
1494
  # @return [String]
1280
1495
  #
1281
1496
  # @!attribute [rw] updated_at
1282
- # The time and date at which the finding was laste updated.
1497
+ # The time and date when the finding was last updated.
1283
1498
  # @return [String]
1284
1499
  #
1285
1500
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Finding AWS API Documentation
@@ -1342,8 +1557,8 @@ module Aws::GuardDuty
1342
1557
  # Contains information about finding statistics.
1343
1558
  #
1344
1559
  # @!attribute [rw] count_by_severity
1345
- # Represents a map of severity to count statistic for a set of
1346
- # findings
1560
+ # Represents a map of severity to count statistics for a set of
1561
+ # findings.
1347
1562
  # @return [Hash<String,Integer>]
1348
1563
  #
1349
1564
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/FindingStatistics AWS API Documentation
@@ -1356,11 +1571,11 @@ module Aws::GuardDuty
1356
1571
  # Contains information about the location of the remote IP address.
1357
1572
  #
1358
1573
  # @!attribute [rw] lat
1359
- # Latitude information of remote IP address.
1574
+ # The latitude information of the remote IP address.
1360
1575
  # @return [Float]
1361
1576
  #
1362
1577
  # @!attribute [rw] lon
1363
- # Longitude information of remote IP address.
1578
+ # The longitude information of the remote IP address.
1364
1579
  # @return [Float]
1365
1580
  #
1366
1581
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GeoLocation AWS API Documentation
@@ -1390,11 +1605,11 @@ module Aws::GuardDuty
1390
1605
  end
1391
1606
 
1392
1607
  # @!attribute [rw] created_at
1393
- # Detector creation timestamp.
1608
+ # The timestamp of when the detector was created.
1394
1609
  # @return [String]
1395
1610
  #
1396
1611
  # @!attribute [rw] finding_publishing_frequency
1397
- # Finding publishing frequency.
1612
+ # The publishing frequency of the finding.
1398
1613
  # @return [String]
1399
1614
  #
1400
1615
  # @!attribute [rw] service_role
@@ -1406,7 +1621,7 @@ module Aws::GuardDuty
1406
1621
  # @return [String]
1407
1622
  #
1408
1623
  # @!attribute [rw] updated_at
1409
- # Detector last update timestamp.
1624
+ # The last-updated timestamp for the detector.
1410
1625
  # @return [String]
1411
1626
  #
1412
1627
  # @!attribute [rw] tags
@@ -1434,7 +1649,7 @@ module Aws::GuardDuty
1434
1649
  # }
1435
1650
  #
1436
1651
  # @!attribute [rw] detector_id
1437
- # The unique ID of the detector the filter is associated with.
1652
+ # The unique ID of the detector that the filter is associated with.
1438
1653
  # @return [String]
1439
1654
  #
1440
1655
  # @!attribute [rw] filter_name
@@ -1507,7 +1722,7 @@ module Aws::GuardDuty
1507
1722
  # @return [String]
1508
1723
  #
1509
1724
  # @!attribute [rw] finding_ids
1510
- # IDs of the findings that you want to retrieve.
1725
+ # The IDs of the findings that you want to retrieve.
1511
1726
  # @return [Array<String>]
1512
1727
  #
1513
1728
  # @!attribute [rw] sort_criteria
@@ -1566,11 +1781,11 @@ module Aws::GuardDuty
1566
1781
  # @return [String]
1567
1782
  #
1568
1783
  # @!attribute [rw] finding_statistic_types
1569
- # Types of finding statistics to retrieve.
1784
+ # The types of finding statistics to retrieve.
1570
1785
  # @return [Array<String>]
1571
1786
  #
1572
1787
  # @!attribute [rw] finding_criteria
1573
- # Represents the criteria used for querying findings.
1788
+ # Represents the criteria that is used for querying findings.
1574
1789
  # @return [Types::FindingCriteria]
1575
1790
  #
1576
1791
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetFindingsStatisticsRequest AWS API Documentation
@@ -1583,7 +1798,7 @@ module Aws::GuardDuty
1583
1798
  end
1584
1799
 
1585
1800
  # @!attribute [rw] finding_statistics
1586
- # Finding statistics object.
1801
+ # The finding statistics object.
1587
1802
  # @return [Types::FindingStatistics]
1588
1803
  #
1589
1804
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetFindingsStatisticsResponse AWS API Documentation
@@ -1602,7 +1817,7 @@ module Aws::GuardDuty
1602
1817
  # }
1603
1818
  #
1604
1819
  # @!attribute [rw] detector_id
1605
- # The unique ID of the detector the ipSet is associated with.
1820
+ # The unique ID of the detector that the IPSet is associated with.
1606
1821
  # @return [String]
1607
1822
  #
1608
1823
  # @!attribute [rw] ip_set_id
@@ -1618,7 +1833,7 @@ module Aws::GuardDuty
1618
1833
  end
1619
1834
 
1620
1835
  # @!attribute [rw] name
1621
- # The user friendly name for the IPSet.
1836
+ # The user-friendly name for the IPSet.
1622
1837
  # @return [String]
1623
1838
  #
1624
1839
  # @!attribute [rw] format
@@ -1626,16 +1841,15 @@ module Aws::GuardDuty
1626
1841
  # @return [String]
1627
1842
  #
1628
1843
  # @!attribute [rw] location
1629
- # The URI of the file that contains the IPSet. For example
1630
- # (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key)
1844
+ # The URI of the file that contains the IPSet.
1631
1845
  # @return [String]
1632
1846
  #
1633
1847
  # @!attribute [rw] status
1634
- # The status of ipSet file uploaded.
1848
+ # The status of IPSet file that was uploaded.
1635
1849
  # @return [String]
1636
1850
  #
1637
1851
  # @!attribute [rw] tags
1638
- # The tags of the IP set resource.
1852
+ # The tags of the IPSet resource.
1639
1853
  # @return [Hash<String,String>]
1640
1854
  #
1641
1855
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetIPSetResponse AWS API Documentation
@@ -1685,7 +1899,7 @@ module Aws::GuardDuty
1685
1899
  end
1686
1900
 
1687
1901
  # @!attribute [rw] master
1688
- # Master account details.
1902
+ # The master account details.
1689
1903
  # @return [Types::Master]
1690
1904
  #
1691
1905
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetMasterAccountResponse AWS API Documentation
@@ -1726,8 +1940,8 @@ module Aws::GuardDuty
1726
1940
  # @return [Array<Types::Member>]
1727
1941
  #
1728
1942
  # @!attribute [rw] unprocessed_accounts
1729
- # A list of objects containing the unprocessed account and a result
1730
- # string explaining why it was unprocessed.
1943
+ # A list of objects that contain the unprocessed account and a result
1944
+ # string that explains why it was unprocessed.
1731
1945
  # @return [Array<Types::UnprocessedAccount>]
1732
1946
  #
1733
1947
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetMembersResponse AWS API Documentation
@@ -1747,11 +1961,12 @@ module Aws::GuardDuty
1747
1961
  # }
1748
1962
  #
1749
1963
  # @!attribute [rw] detector_id
1750
- # The unique ID of the detector the threatIntelSet is associated with.
1964
+ # The unique ID of the detector that the threatIntelSet is associated
1965
+ # with.
1751
1966
  # @return [String]
1752
1967
  #
1753
1968
  # @!attribute [rw] threat_intel_set_id
1754
- # The unique ID of the threatIntelSet you want to get.
1969
+ # The unique ID of the threatIntelSet that you want to get.
1755
1970
  # @return [String]
1756
1971
  #
1757
1972
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetThreatIntelSetRequest AWS API Documentation
@@ -1763,9 +1978,9 @@ module Aws::GuardDuty
1763
1978
  end
1764
1979
 
1765
1980
  # @!attribute [rw] name
1766
- # A user-friendly ThreatIntelSet name that is displayed in all finding
1767
- # generated by activity that involves IP addresses included in this
1768
- # ThreatIntelSet.
1981
+ # A user-friendly ThreatIntelSet name displayed in all findings that
1982
+ # are generated by activity that involves IP addresses included in
1983
+ # this ThreatIntelSet.
1769
1984
  # @return [String]
1770
1985
  #
1771
1986
  # @!attribute [rw] format
@@ -1773,8 +1988,7 @@ module Aws::GuardDuty
1773
1988
  # @return [String]
1774
1989
  #
1775
1990
  # @!attribute [rw] location
1776
- # The URI of the file that contains the ThreatIntelSet. For example
1777
- # (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
1991
+ # The URI of the file that contains the ThreatIntelSet.
1778
1992
  # @return [String]
1779
1993
  #
1780
1994
  # @!attribute [rw] status
@@ -1782,7 +1996,7 @@ module Aws::GuardDuty
1782
1996
  # @return [String]
1783
1997
  #
1784
1998
  # @!attribute [rw] tags
1785
- # The tags of the Threat List resource.
1999
+ # The tags of the threat list resource.
1786
2000
  # @return [Hash<String,String>]
1787
2001
  #
1788
2002
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetThreatIntelSetResponse AWS API Documentation
@@ -1799,11 +2013,11 @@ module Aws::GuardDuty
1799
2013
  # Contains information about the EC2 instance profile.
1800
2014
  #
1801
2015
  # @!attribute [rw] arn
1802
- # AWS EC2 instance profile ARN.
2016
+ # The profile ARN of the EC2 instance.
1803
2017
  # @return [String]
1804
2018
  #
1805
2019
  # @!attribute [rw] id
1806
- # AWS EC2 instance profile ID.
2020
+ # The profile ID of the EC2 instance.
1807
2021
  # @return [String]
1808
2022
  #
1809
2023
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/IamInstanceProfile AWS API Documentation
@@ -1817,7 +2031,7 @@ module Aws::GuardDuty
1817
2031
  # Contains information about the details of an instance.
1818
2032
  #
1819
2033
  # @!attribute [rw] availability_zone
1820
- # The availability zone of the EC2 instance.
2034
+ # The Availability Zone of the EC2 instance.
1821
2035
  # @return [String]
1822
2036
  #
1823
2037
  # @!attribute [rw] iam_instance_profile
@@ -1854,7 +2068,7 @@ module Aws::GuardDuty
1854
2068
  # @return [String]
1855
2069
  #
1856
2070
  # @!attribute [rw] network_interfaces
1857
- # The network interface information of the EC2 instance.
2071
+ # The elastic network interface information of the EC2 instance.
1858
2072
  # @return [Array<Types::NetworkInterface>]
1859
2073
  #
1860
2074
  # @!attribute [rw] platform
@@ -1888,7 +2102,7 @@ module Aws::GuardDuty
1888
2102
  include Aws::Structure
1889
2103
  end
1890
2104
 
1891
- # Internal server error exception object.
2105
+ # An internal server error exception object.
1892
2106
  #
1893
2107
  # @!attribute [rw] message
1894
2108
  # The error message.
@@ -1909,7 +2123,7 @@ module Aws::GuardDuty
1909
2123
  # Contains information about the invitation to become a member account.
1910
2124
  #
1911
2125
  # @!attribute [rw] account_id
1912
- # The ID of the account from which the invitations was sent.
2126
+ # The ID of the account that the invitation was sent from.
1913
2127
  # @return [String]
1914
2128
  #
1915
2129
  # @!attribute [rw] invitation_id
@@ -1923,7 +2137,7 @@ module Aws::GuardDuty
1923
2137
  # @return [String]
1924
2138
  #
1925
2139
  # @!attribute [rw] invited_at
1926
- # Timestamp at which the invitation was sent.
2140
+ # The timestamp when the invitation was sent.
1927
2141
  # @return [String]
1928
2142
  #
1929
2143
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Invitation AWS API Documentation
@@ -1947,8 +2161,8 @@ module Aws::GuardDuty
1947
2161
  # }
1948
2162
  #
1949
2163
  # @!attribute [rw] detector_id
1950
- # The unique ID of the detector of the GuardDuty account with which
1951
- # you want to invite members.
2164
+ # The unique ID of the detector of the GuardDuty account that you want
2165
+ # to invite members with.
1952
2166
  # @return [String]
1953
2167
  #
1954
2168
  # @!attribute [rw] account_ids
@@ -1957,7 +2171,7 @@ module Aws::GuardDuty
1957
2171
  # @return [Array<String>]
1958
2172
  #
1959
2173
  # @!attribute [rw] disable_email_notification
1960
- # A boolean value that specifies whether you want to disable email
2174
+ # A Boolean value that specifies whether you want to disable email
1961
2175
  # notification to the accounts that you’re inviting to GuardDuty as
1962
2176
  # members.
1963
2177
  # @return [Boolean]
@@ -1978,8 +2192,8 @@ module Aws::GuardDuty
1978
2192
  end
1979
2193
 
1980
2194
  # @!attribute [rw] unprocessed_accounts
1981
- # A list of objects containing the unprocessed account and a result
1982
- # string explaining why it was unprocessed.
2195
+ # A list of objects that contain the unprocessed account and a result
2196
+ # string that explains why it was unprocessed.
1983
2197
  # @return [Array<Types::UnprocessedAccount>]
1984
2198
  #
1985
2199
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/InviteMembersResponse AWS API Documentation
@@ -1999,14 +2213,14 @@ module Aws::GuardDuty
1999
2213
  #
2000
2214
  # @!attribute [rw] max_results
2001
2215
  # You can use this parameter to indicate the maximum number of items
2002
- # you want in the response. The default value is 50. The maximum value
2003
- # is 50.
2216
+ # that you want in the response. The default value is 50. The maximum
2217
+ # value is 50.
2004
2218
  # @return [Integer]
2005
2219
  #
2006
2220
  # @!attribute [rw] next_token
2007
2221
  # You can use this parameter when paginating results. Set the value of
2008
2222
  # this parameter to null on your first call to the list action. For
2009
- # subsequent calls to the action fill nextToken in the request with
2223
+ # subsequent calls to the action, fill nextToken in the request with
2010
2224
  # the value of NextToken from the previous response to continue
2011
2225
  # listing data.
2012
2226
  # @return [String]
@@ -2020,11 +2234,11 @@ module Aws::GuardDuty
2020
2234
  end
2021
2235
 
2022
2236
  # @!attribute [rw] detector_ids
2023
- # A list of detector Ids.
2237
+ # A list of detector IDs.
2024
2238
  # @return [Array<String>]
2025
2239
  #
2026
2240
  # @!attribute [rw] next_token
2027
- # Pagination parameter to be used on the next list operation to
2241
+ # The pagination parameter to be used on the next list operation to
2028
2242
  # retrieve more items.
2029
2243
  # @return [String]
2030
2244
  #
@@ -2046,19 +2260,19 @@ module Aws::GuardDuty
2046
2260
  # }
2047
2261
  #
2048
2262
  # @!attribute [rw] detector_id
2049
- # The unique ID of the detector the filter is associated with.
2263
+ # The unique ID of the detector that the filter is associated with.
2050
2264
  # @return [String]
2051
2265
  #
2052
2266
  # @!attribute [rw] max_results
2053
2267
  # You can use this parameter to indicate the maximum number of items
2054
- # you want in the response. The default value is 50. The maximum value
2055
- # is 50.
2268
+ # that you want in the response. The default value is 50. The maximum
2269
+ # value is 50.
2056
2270
  # @return [Integer]
2057
2271
  #
2058
2272
  # @!attribute [rw] next_token
2059
2273
  # You can use this parameter when paginating results. Set the value of
2060
2274
  # this parameter to null on your first call to the list action. For
2061
- # subsequent calls to the action fill nextToken in the request with
2275
+ # subsequent calls to the action, fill nextToken in the request with
2062
2276
  # the value of NextToken from the previous response to continue
2063
2277
  # listing data.
2064
2278
  # @return [String]
@@ -2073,11 +2287,11 @@ module Aws::GuardDuty
2073
2287
  end
2074
2288
 
2075
2289
  # @!attribute [rw] filter_names
2076
- # A list of filter names
2290
+ # A list of filter names.
2077
2291
  # @return [Array<String>]
2078
2292
  #
2079
2293
  # @!attribute [rw] next_token
2080
- # Pagination parameter to be used on the next list operation to
2294
+ # The pagination parameter to be used on the next list operation to
2081
2295
  # retrieve more items.
2082
2296
  # @return [String]
2083
2297
  #
@@ -2252,7 +2466,7 @@ module Aws::GuardDuty
2252
2466
  # @!attribute [rw] next_token
2253
2467
  # You can use this parameter when paginating results. Set the value of
2254
2468
  # this parameter to null on your first call to the list action. For
2255
- # subsequent calls to the action fill nextToken in the request with
2469
+ # subsequent calls to the action, fill nextToken in the request with
2256
2470
  # the value of NextToken from the previous response to continue
2257
2471
  # listing data.
2258
2472
  # @return [String]
@@ -2269,11 +2483,11 @@ module Aws::GuardDuty
2269
2483
  end
2270
2484
 
2271
2485
  # @!attribute [rw] finding_ids
2272
- # The IDs of the findings you are listing.
2486
+ # The IDs of the findings that you're listing.
2273
2487
  # @return [Array<String>]
2274
2488
  #
2275
2489
  # @!attribute [rw] next_token
2276
- # Pagination parameter to be used on the next list operation to
2490
+ # The pagination parameter to be used on the next list operation to
2277
2491
  # retrieve more items.
2278
2492
  # @return [String]
2279
2493
  #
@@ -2295,7 +2509,7 @@ module Aws::GuardDuty
2295
2509
  # }
2296
2510
  #
2297
2511
  # @!attribute [rw] detector_id
2298
- # The unique ID of the detector the ipSet is associated with.
2512
+ # The unique ID of the detector that the IPSet is associated with.
2299
2513
  # @return [String]
2300
2514
  #
2301
2515
  # @!attribute [rw] max_results
@@ -2307,7 +2521,7 @@ module Aws::GuardDuty
2307
2521
  # @!attribute [rw] next_token
2308
2522
  # You can use this parameter when paginating results. Set the value of
2309
2523
  # this parameter to null on your first call to the list action. For
2310
- # subsequent calls to the action fill nextToken in the request with
2524
+ # subsequent calls to the action, fill nextToken in the request with
2311
2525
  # the value of NextToken from the previous response to continue
2312
2526
  # listing data.
2313
2527
  # @return [String]
@@ -2326,7 +2540,7 @@ module Aws::GuardDuty
2326
2540
  # @return [Array<String>]
2327
2541
  #
2328
2542
  # @!attribute [rw] next_token
2329
- # Pagination parameter to be used on the next list operation to
2543
+ # The pagination parameter to be used on the next list operation to
2330
2544
  # retrieve more items.
2331
2545
  # @return [String]
2332
2546
  #
@@ -2348,14 +2562,14 @@ module Aws::GuardDuty
2348
2562
  #
2349
2563
  # @!attribute [rw] max_results
2350
2564
  # You can use this parameter to indicate the maximum number of items
2351
- # you want in the response. The default value is 50. The maximum value
2352
- # is 50.
2565
+ # that you want in the response. The default value is 50. The maximum
2566
+ # value is 50.
2353
2567
  # @return [Integer]
2354
2568
  #
2355
2569
  # @!attribute [rw] next_token
2356
2570
  # You can use this parameter when paginating results. Set the value of
2357
2571
  # this parameter to null on your first call to the list action. For
2358
- # subsequent calls to the action fill nextToken in the request with
2572
+ # subsequent calls to the action, fill nextToken in the request with
2359
2573
  # the value of NextToken from the previous response to continue
2360
2574
  # listing data.
2361
2575
  # @return [String]
@@ -2373,7 +2587,7 @@ module Aws::GuardDuty
2373
2587
  # @return [Array<Types::Invitation>]
2374
2588
  #
2375
2589
  # @!attribute [rw] next_token
2376
- # Pagination parameter to be used on the next list operation to
2590
+ # The pagination parameter to be used on the next list operation to
2377
2591
  # retrieve more items.
2378
2592
  # @return [String]
2379
2593
  #
@@ -2408,15 +2622,17 @@ module Aws::GuardDuty
2408
2622
  # @!attribute [rw] next_token
2409
2623
  # You can use this parameter when paginating results. Set the value of
2410
2624
  # this parameter to null on your first call to the list action. For
2411
- # subsequent calls to the action fill nextToken in the request with
2625
+ # subsequent calls to the action, fill nextToken in the request with
2412
2626
  # the value of NextToken from the previous response to continue
2413
2627
  # listing data.
2414
2628
  # @return [String]
2415
2629
  #
2416
2630
  # @!attribute [rw] only_associated
2417
- # Specifies whether to only return associated members or to return all
2418
- # members (including members which haven't been invited yet or have
2419
- # been disassociated).
2631
+ # Specifies what member accounts the response includes based on their
2632
+ # relationship status with the master account. The default value is
2633
+ # "true". If set to "false" the response includes all existing
2634
+ # member accounts (including members who haven't been invited yet or
2635
+ # have been disassociated).
2420
2636
  # @return [String]
2421
2637
  #
2422
2638
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListMembersRequest AWS API Documentation
@@ -2434,7 +2650,7 @@ module Aws::GuardDuty
2434
2650
  # @return [Array<Types::Member>]
2435
2651
  #
2436
2652
  # @!attribute [rw] next_token
2437
- # Pagination parameter to be used on the next list operation to
2653
+ # The pagination parameter to be used on the next list operation to
2438
2654
  # retrieve more items.
2439
2655
  # @return [String]
2440
2656
  #
@@ -2446,6 +2662,52 @@ module Aws::GuardDuty
2446
2662
  include Aws::Structure
2447
2663
  end
2448
2664
 
2665
+ # @note When making an API call, you may pass ListOrganizationAdminAccountsRequest
2666
+ # data as a hash:
2667
+ #
2668
+ # {
2669
+ # max_results: 1,
2670
+ # next_token: "String",
2671
+ # }
2672
+ #
2673
+ # @!attribute [rw] max_results
2674
+ # The maximum number of results to return in the response.
2675
+ # @return [Integer]
2676
+ #
2677
+ # @!attribute [rw] next_token
2678
+ # A token to use for paginating results that are returned in the
2679
+ # response. Set the value of this parameter to null for the first
2680
+ # request to a list action. For subsequent calls, use the `NextToken`
2681
+ # value returned from the previous request to continue listing results
2682
+ # after the first page.
2683
+ # @return [String]
2684
+ #
2685
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListOrganizationAdminAccountsRequest AWS API Documentation
2686
+ #
2687
+ class ListOrganizationAdminAccountsRequest < Struct.new(
2688
+ :max_results,
2689
+ :next_token)
2690
+ include Aws::Structure
2691
+ end
2692
+
2693
+ # @!attribute [rw] admin_accounts
2694
+ # An AdminAccounts object that includes a list of accounts configured
2695
+ # as GuardDuty delegated administrators.
2696
+ # @return [Array<Types::AdminAccount>]
2697
+ #
2698
+ # @!attribute [rw] next_token
2699
+ # The pagination parameter to be used on the next list operation to
2700
+ # retrieve more items.
2701
+ # @return [String]
2702
+ #
2703
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListOrganizationAdminAccountsResponse AWS API Documentation
2704
+ #
2705
+ class ListOrganizationAdminAccountsResponse < Struct.new(
2706
+ :admin_accounts,
2707
+ :next_token)
2708
+ include Aws::Structure
2709
+ end
2710
+
2449
2711
  # @note When making an API call, you may pass ListPublishingDestinationsRequest
2450
2712
  # data as a hash:
2451
2713
  #
@@ -2464,11 +2726,11 @@ module Aws::GuardDuty
2464
2726
  # @return [Integer]
2465
2727
  #
2466
2728
  # @!attribute [rw] next_token
2467
- # A token to use for paginating results returned in the repsonse. Set
2468
- # the value of this parameter to null for the first request to a list
2469
- # action. For subsequent calls, use the `NextToken` value returned
2470
- # from the previous request to continue listing results after the
2471
- # first page.
2729
+ # A token to use for paginating results that are returned in the
2730
+ # response. Set the value of this parameter to null for the first
2731
+ # request to a list action. For subsequent calls, use the `NextToken`
2732
+ # value returned from the previous request to continue listing results
2733
+ # after the first page.
2472
2734
  # @return [String]
2473
2735
  #
2474
2736
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListPublishingDestinationsRequest AWS API Documentation
@@ -2481,16 +2743,16 @@ module Aws::GuardDuty
2481
2743
  end
2482
2744
 
2483
2745
  # @!attribute [rw] destinations
2484
- # A `Destinations` obect that includes information about each
2746
+ # A `Destinations` object that includes information about each
2485
2747
  # publishing destination returned.
2486
2748
  # @return [Array<Types::Destination>]
2487
2749
  #
2488
2750
  # @!attribute [rw] next_token
2489
- # A token to use for paginating results returned in the repsonse. Set
2490
- # the value of this parameter to null for the first request to a list
2491
- # action. For subsequent calls, use the `NextToken` value returned
2492
- # from the previous request to continue listing results after the
2493
- # first page.
2751
+ # A token to use for paginating results that are returned in the
2752
+ # response. Set the value of this parameter to null for the first
2753
+ # request to a list action. For subsequent calls, use the `NextToken`
2754
+ # value returned from the previous request to continue listing results
2755
+ # after the first page.
2494
2756
  # @return [String]
2495
2757
  #
2496
2758
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListPublishingDestinationsResponse AWS API Documentation
@@ -2509,7 +2771,7 @@ module Aws::GuardDuty
2509
2771
  # }
2510
2772
  #
2511
2773
  # @!attribute [rw] resource_arn
2512
- # The Amazon Resource Name (ARN) for the given GuardDuty resource
2774
+ # The Amazon Resource Name (ARN) for the given GuardDuty resource.
2513
2775
  # @return [String]
2514
2776
  #
2515
2777
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListTagsForResourceRequest AWS API Documentation
@@ -2540,19 +2802,20 @@ module Aws::GuardDuty
2540
2802
  # }
2541
2803
  #
2542
2804
  # @!attribute [rw] detector_id
2543
- # The unique ID of the detector the threatIntelSet is associated with.
2805
+ # The unique ID of the detector that the threatIntelSet is associated
2806
+ # with.
2544
2807
  # @return [String]
2545
2808
  #
2546
2809
  # @!attribute [rw] max_results
2547
2810
  # You can use this parameter to indicate the maximum number of items
2548
- # you want in the response. The default value is 50. The maximum value
2549
- # is 50.
2811
+ # that you want in the response. The default value is 50. The maximum
2812
+ # value is 50.
2550
2813
  # @return [Integer]
2551
2814
  #
2552
2815
  # @!attribute [rw] next_token
2553
2816
  # You can use this parameter to paginate results in the response. Set
2554
2817
  # the value of this parameter to null on your first call to the list
2555
- # action. For subsequent calls to the action fill nextToken in the
2818
+ # action. For subsequent calls to the action, fill nextToken in the
2556
2819
  # request with the value of NextToken from the previous response to
2557
2820
  # continue listing data.
2558
2821
  # @return [String]
@@ -2571,7 +2834,7 @@ module Aws::GuardDuty
2571
2834
  # @return [Array<String>]
2572
2835
  #
2573
2836
  # @!attribute [rw] next_token
2574
- # Pagination parameter to be used on the next list operation to
2837
+ # The pagination parameter to be used on the next list operation to
2575
2838
  # retrieve more items.
2576
2839
  # @return [String]
2577
2840
  #
@@ -2586,7 +2849,7 @@ module Aws::GuardDuty
2586
2849
  # Contains information about the local IP address of the connection.
2587
2850
  #
2588
2851
  # @!attribute [rw] ip_address_v4
2589
- # IPV4 remote address of the connection.
2852
+ # The IPv4 local address of the connection.
2590
2853
  # @return [String]
2591
2854
  #
2592
2855
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/LocalIpDetails AWS API Documentation
@@ -2599,11 +2862,11 @@ module Aws::GuardDuty
2599
2862
  # Contains information about the port for the local connection.
2600
2863
  #
2601
2864
  # @!attribute [rw] port
2602
- # Port number of the local connection.
2865
+ # The port number of the local connection.
2603
2866
  # @return [Integer]
2604
2867
  #
2605
2868
  # @!attribute [rw] port_name
2606
- # Port name of the local connection.
2869
+ # The port name of the local connection.
2607
2870
  # @return [String]
2608
2871
  #
2609
2872
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/LocalPortDetails AWS API Documentation
@@ -2614,15 +2877,14 @@ module Aws::GuardDuty
2614
2877
  include Aws::Structure
2615
2878
  end
2616
2879
 
2617
- # Contains information about the Master account and invitation.
2880
+ # Contains information about the master account and invitation.
2618
2881
  #
2619
2882
  # @!attribute [rw] account_id
2620
- # The ID of the account used as the Master account.
2883
+ # The ID of the account used as the master account.
2621
2884
  # @return [String]
2622
2885
  #
2623
2886
  # @!attribute [rw] invitation_id
2624
- # This value is used to validate the master account to the member
2625
- # account.
2887
+ # The value used to validate the master account to the member account.
2626
2888
  # @return [String]
2627
2889
  #
2628
2890
  # @!attribute [rw] relationship_status
@@ -2631,7 +2893,7 @@ module Aws::GuardDuty
2631
2893
  # @return [String]
2632
2894
  #
2633
2895
  # @!attribute [rw] invited_at
2634
- # Timestamp at which the invitation was sent.
2896
+ # The timestamp when the invitation was sent.
2635
2897
  # @return [String]
2636
2898
  #
2637
2899
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Master AWS API Documentation
@@ -2644,22 +2906,22 @@ module Aws::GuardDuty
2644
2906
  include Aws::Structure
2645
2907
  end
2646
2908
 
2647
- # Continas information about the member account
2909
+ # Contains information about the member account.
2648
2910
  #
2649
2911
  # @!attribute [rw] account_id
2650
- # Member account ID.
2912
+ # The ID of the member account.
2651
2913
  # @return [String]
2652
2914
  #
2653
2915
  # @!attribute [rw] detector_id
2654
- # Member account's detector ID.
2916
+ # The detector ID of the member account.
2655
2917
  # @return [String]
2656
2918
  #
2657
2919
  # @!attribute [rw] master_id
2658
- # Master account ID.
2920
+ # The master account ID.
2659
2921
  # @return [String]
2660
2922
  #
2661
2923
  # @!attribute [rw] email
2662
- # Member account's email address.
2924
+ # The email address of the member account.
2663
2925
  # @return [String]
2664
2926
  #
2665
2927
  # @!attribute [rw] relationship_status
@@ -2667,11 +2929,11 @@ module Aws::GuardDuty
2667
2929
  # @return [String]
2668
2930
  #
2669
2931
  # @!attribute [rw] invited_at
2670
- # Timestamp at which the invitation was sent
2932
+ # The timestamp when the invitation was sent.
2671
2933
  # @return [String]
2672
2934
  #
2673
2935
  # @!attribute [rw] updated_at
2674
- # Member last updated timestamp.
2936
+ # The last-updated timestamp of the member.
2675
2937
  # @return [String]
2676
2938
  #
2677
2939
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Member AWS API Documentation
@@ -2691,31 +2953,32 @@ module Aws::GuardDuty
2691
2953
  # the finding.
2692
2954
  #
2693
2955
  # @!attribute [rw] blocked
2694
- # Network connection blocked information.
2956
+ # Indicates whether EC2 blocked the network connection to your
2957
+ # instance.
2695
2958
  # @return [Boolean]
2696
2959
  #
2697
2960
  # @!attribute [rw] connection_direction
2698
- # Network connection direction.
2961
+ # The network connection direction.
2699
2962
  # @return [String]
2700
2963
  #
2701
2964
  # @!attribute [rw] local_port_details
2702
- # Local port information of the connection.
2965
+ # The local port information of the connection.
2703
2966
  # @return [Types::LocalPortDetails]
2704
2967
  #
2705
2968
  # @!attribute [rw] protocol
2706
- # Network connection protocol.
2969
+ # The network connection protocol.
2707
2970
  # @return [String]
2708
2971
  #
2709
2972
  # @!attribute [rw] local_ip_details
2710
- # Local IP information of the connection.
2973
+ # The local IP information of the connection.
2711
2974
  # @return [Types::LocalIpDetails]
2712
2975
  #
2713
2976
  # @!attribute [rw] remote_ip_details
2714
- # Remote IP information of the connection.
2977
+ # The remote IP information of the connection.
2715
2978
  # @return [Types::RemoteIpDetails]
2716
2979
  #
2717
2980
  # @!attribute [rw] remote_port_details
2718
- # Remote port information of the connection.
2981
+ # The remote port information of the connection.
2719
2982
  # @return [Types::RemotePortDetails]
2720
2983
  #
2721
2984
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/NetworkConnectionAction AWS API Documentation
@@ -2731,22 +2994,23 @@ module Aws::GuardDuty
2731
2994
  include Aws::Structure
2732
2995
  end
2733
2996
 
2734
- # Contains information about the network interface of the Ec2 instance.
2997
+ # Contains information about the elastic network interface of the EC2
2998
+ # instance.
2735
2999
  #
2736
3000
  # @!attribute [rw] ipv_6_addresses
2737
- # A list of EC2 instance IPv6 address information.
3001
+ # A list of IPv6 addresses for the EC2 instance.
2738
3002
  # @return [Array<String>]
2739
3003
  #
2740
3004
  # @!attribute [rw] network_interface_id
2741
- # The ID of the network interface
3005
+ # The ID of the network interface.
2742
3006
  # @return [String]
2743
3007
  #
2744
3008
  # @!attribute [rw] private_dns_name
2745
- # Private DNS name of the EC2 instance.
3009
+ # The private DNS name of the EC2 instance.
2746
3010
  # @return [String]
2747
3011
  #
2748
3012
  # @!attribute [rw] private_ip_address
2749
- # Private IP address of the EC2 instance.
3013
+ # The private IP address of the EC2 instance.
2750
3014
  # @return [String]
2751
3015
  #
2752
3016
  # @!attribute [rw] private_ip_addresses
@@ -2754,15 +3018,15 @@ module Aws::GuardDuty
2754
3018
  # @return [Array<Types::PrivateIpAddressDetails>]
2755
3019
  #
2756
3020
  # @!attribute [rw] public_dns_name
2757
- # Public DNS name of the EC2 instance.
3021
+ # The public DNS name of the EC2 instance.
2758
3022
  # @return [String]
2759
3023
  #
2760
3024
  # @!attribute [rw] public_ip
2761
- # Public IP address of the EC2 instance.
3025
+ # The public IP address of the EC2 instance.
2762
3026
  # @return [String]
2763
3027
  #
2764
3028
  # @!attribute [rw] security_groups
2765
- # Security groups associated with the EC2 instance.
3029
+ # The security groups associated with the EC2 instance.
2766
3030
  # @return [Array<Types::SecurityGroup>]
2767
3031
  #
2768
3032
  # @!attribute [rw] subnet_id
@@ -2789,24 +3053,24 @@ module Aws::GuardDuty
2789
3053
  include Aws::Structure
2790
3054
  end
2791
3055
 
2792
- # Continas information about the ISP organization of the remote IP
3056
+ # Contains information about the ISP organization of the remote IP
2793
3057
  # address.
2794
3058
  #
2795
3059
  # @!attribute [rw] asn
2796
- # Autonomous system number of the internet provider of the remote IP
2797
- # address.
3060
+ # The Autonomous System Number (ASN) of the internet provider of the
3061
+ # remote IP address.
2798
3062
  # @return [String]
2799
3063
  #
2800
3064
  # @!attribute [rw] asn_org
2801
- # Organization that registered this ASN.
3065
+ # The organization that registered this ASN.
2802
3066
  # @return [String]
2803
3067
  #
2804
3068
  # @!attribute [rw] isp
2805
- # ISP information for the internet provider.
3069
+ # The ISP information for the internet provider.
2806
3070
  # @return [String]
2807
3071
  #
2808
3072
  # @!attribute [rw] org
2809
- # Name of the internet provider.
3073
+ # The name of the internet provider.
2810
3074
  # @return [String]
2811
3075
  #
2812
3076
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Organization AWS API Documentation
@@ -2823,11 +3087,12 @@ module Aws::GuardDuty
2823
3087
  # finding.
2824
3088
  #
2825
3089
  # @!attribute [rw] blocked
2826
- # Port probe blocked information.
3090
+ # Indicates whether EC2 blocked the port probe to the instance, such
3091
+ # as with an ACL.
2827
3092
  # @return [Boolean]
2828
3093
  #
2829
3094
  # @!attribute [rw] port_probe_details
2830
- # A list of port probe details objects.
3095
+ # A list of objects related to port probe details.
2831
3096
  # @return [Array<Types::PortProbeDetail>]
2832
3097
  #
2833
3098
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/PortProbeAction AWS API Documentation
@@ -2841,15 +3106,15 @@ module Aws::GuardDuty
2841
3106
  # Contains information about the port probe details.
2842
3107
  #
2843
3108
  # @!attribute [rw] local_port_details
2844
- # Local port information of the connection.
3109
+ # The local port information of the connection.
2845
3110
  # @return [Types::LocalPortDetails]
2846
3111
  #
2847
3112
  # @!attribute [rw] local_ip_details
2848
- # Local IP information of the connection.
3113
+ # The local IP information of the connection.
2849
3114
  # @return [Types::LocalIpDetails]
2850
3115
  #
2851
3116
  # @!attribute [rw] remote_ip_details
2852
- # Remote IP information of the connection.
3117
+ # The remote IP information of the connection.
2853
3118
  # @return [Types::RemoteIpDetails]
2854
3119
  #
2855
3120
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/PortProbeDetail AWS API Documentation
@@ -2864,11 +3129,11 @@ module Aws::GuardDuty
2864
3129
  # Contains other private IP address information of the EC2 instance.
2865
3130
  #
2866
3131
  # @!attribute [rw] private_dns_name
2867
- # Private DNS name of the EC2 instance.
3132
+ # The private DNS name of the EC2 instance.
2868
3133
  # @return [String]
2869
3134
  #
2870
3135
  # @!attribute [rw] private_ip_address
2871
- # Private IP address of the EC2 instance.
3136
+ # The private IP address of the EC2 instance.
2872
3137
  # @return [String]
2873
3138
  #
2874
3139
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/PrivateIpAddressDetails AWS API Documentation
@@ -2879,14 +3144,14 @@ module Aws::GuardDuty
2879
3144
  include Aws::Structure
2880
3145
  end
2881
3146
 
2882
- # Contains information about the product code for the Ec2 instance.
3147
+ # Contains information about the product code for the EC2 instance.
2883
3148
  #
2884
3149
  # @!attribute [rw] code
2885
- # Product code information.
3150
+ # The product code information.
2886
3151
  # @return [String]
2887
3152
  #
2888
3153
  # @!attribute [rw] product_type
2889
- # Product code type.
3154
+ # The product code type.
2890
3155
  # @return [String]
2891
3156
  #
2892
3157
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ProductCode AWS API Documentation
@@ -2897,26 +3162,26 @@ module Aws::GuardDuty
2897
3162
  include Aws::Structure
2898
3163
  end
2899
3164
 
2900
- # Continas information about the remote IP address of the connection.
3165
+ # Contains information about the remote IP address of the connection.
2901
3166
  #
2902
3167
  # @!attribute [rw] city
2903
- # City information of the remote IP address.
3168
+ # The city information of the remote IP address.
2904
3169
  # @return [Types::City]
2905
3170
  #
2906
3171
  # @!attribute [rw] country
2907
- # Country code of the remote IP address.
3172
+ # The country code of the remote IP address.
2908
3173
  # @return [Types::Country]
2909
3174
  #
2910
3175
  # @!attribute [rw] geo_location
2911
- # Location information of the remote IP address.
3176
+ # The location information of the remote IP address.
2912
3177
  # @return [Types::GeoLocation]
2913
3178
  #
2914
3179
  # @!attribute [rw] ip_address_v4
2915
- # IPV4 remote address of the connection.
3180
+ # The IPv4 remote address of the connection.
2916
3181
  # @return [String]
2917
3182
  #
2918
3183
  # @!attribute [rw] organization
2919
- # ISP Organization information of the remote IP address.
3184
+ # The ISP organization information of the remote IP address.
2920
3185
  # @return [Types::Organization]
2921
3186
  #
2922
3187
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/RemoteIpDetails AWS API Documentation
@@ -2933,11 +3198,11 @@ module Aws::GuardDuty
2933
3198
  # Contains information about the remote port.
2934
3199
  #
2935
3200
  # @!attribute [rw] port
2936
- # Port number of the remote connection.
3201
+ # The port number of the remote connection.
2937
3202
  # @return [Integer]
2938
3203
  #
2939
3204
  # @!attribute [rw] port_name
2940
- # Port name of the remote connection.
3205
+ # The port name of the remote connection.
2941
3206
  # @return [String]
2942
3207
  #
2943
3208
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/RemotePortDetails AWS API Documentation
@@ -2963,7 +3228,7 @@ module Aws::GuardDuty
2963
3228
  # @return [Types::InstanceDetails]
2964
3229
  #
2965
3230
  # @!attribute [rw] resource_type
2966
- # The type of the AWS resource.
3231
+ # The type of AWS resource.
2967
3232
  # @return [String]
2968
3233
  #
2969
3234
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Resource AWS API Documentation
@@ -2979,11 +3244,11 @@ module Aws::GuardDuty
2979
3244
  # instance.
2980
3245
  #
2981
3246
  # @!attribute [rw] group_id
2982
- # EC2 instance's security group ID.
3247
+ # The security group ID of the EC2 instance.
2983
3248
  # @return [String]
2984
3249
  #
2985
3250
  # @!attribute [rw] group_name
2986
- # EC2 instance's security group name.
3251
+ # The security group name of the EC2 instance.
2987
3252
  # @return [String]
2988
3253
  #
2989
3254
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/SecurityGroup AWS API Documentation
@@ -2997,7 +3262,7 @@ module Aws::GuardDuty
2997
3262
  # Contains additional information about the generated finding.
2998
3263
  #
2999
3264
  # @!attribute [rw] action
3000
- # Information about the activity described in a finding.
3265
+ # Information about the activity that is described in a finding.
3001
3266
  # @return [Types::Action]
3002
3267
  #
3003
3268
  # @!attribute [rw] evidence
@@ -3009,25 +3274,25 @@ module Aws::GuardDuty
3009
3274
  # @return [Boolean]
3010
3275
  #
3011
3276
  # @!attribute [rw] count
3012
- # Total count of the occurrences of this finding type.
3277
+ # The total count of the occurrences of this finding type.
3013
3278
  # @return [Integer]
3014
3279
  #
3015
3280
  # @!attribute [rw] detector_id
3016
- # Detector ID for the GuardDuty service.
3281
+ # The detector ID for the GuardDuty service.
3017
3282
  # @return [String]
3018
3283
  #
3019
3284
  # @!attribute [rw] event_first_seen
3020
- # First seen timestamp of the activity that prompted GuardDuty to
3285
+ # The first-seen timestamp of the activity that prompted GuardDuty to
3021
3286
  # generate this finding.
3022
3287
  # @return [String]
3023
3288
  #
3024
3289
  # @!attribute [rw] event_last_seen
3025
- # Last seen timestamp of the activity that prompted GuardDuty to
3290
+ # The last-seen timestamp of the activity that prompted GuardDuty to
3026
3291
  # generate this finding.
3027
3292
  # @return [String]
3028
3293
  #
3029
3294
  # @!attribute [rw] resource_role
3030
- # Resource role information for this finding.
3295
+ # The resource role information for this finding.
3031
3296
  # @return [String]
3032
3297
  #
3033
3298
  # @!attribute [rw] service_name
@@ -3035,7 +3300,7 @@ module Aws::GuardDuty
3035
3300
  # @return [String]
3036
3301
  #
3037
3302
  # @!attribute [rw] user_feedback
3038
- # Feedback left about the finding.
3303
+ # Feedback that was submitted about the finding.
3039
3304
  # @return [String]
3040
3305
  #
3041
3306
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Service AWS API Documentation
@@ -3065,12 +3330,12 @@ module Aws::GuardDuty
3065
3330
  # }
3066
3331
  #
3067
3332
  # @!attribute [rw] attribute_name
3068
- # Represents the finding attribute (for example, accountId) by which
3069
- # to sort findings.
3333
+ # Represents the finding attribute (for example, accountId) to sort
3334
+ # findings by.
3070
3335
  # @return [String]
3071
3336
  #
3072
3337
  # @!attribute [rw] order_by
3073
- # Order by which the sorted findings are to be displayed.
3338
+ # The order by which the sorted findings are to be displayed.
3074
3339
  # @return [String]
3075
3340
  #
3076
3341
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/SortCriteria AWS API Documentation
@@ -3108,8 +3373,8 @@ module Aws::GuardDuty
3108
3373
  end
3109
3374
 
3110
3375
  # @!attribute [rw] unprocessed_accounts
3111
- # A list of objects containing the unprocessed account and a result
3112
- # string explaining why it was unprocessed.
3376
+ # A list of objects that contain the unprocessed account and a result
3377
+ # string that explains why it was unprocessed.
3113
3378
  # @return [Array<Types::UnprocessedAccount>]
3114
3379
  #
3115
3380
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/StartMonitoringMembersResponse AWS API Documentation
@@ -3128,13 +3393,12 @@ module Aws::GuardDuty
3128
3393
  # }
3129
3394
  #
3130
3395
  # @!attribute [rw] detector_id
3131
- # The unique ID of the detector of the GuardDuty account that you want
3132
- # to stop from monitor members' findings.
3396
+ # The unique ID of the detector associated with the GuardDuty master
3397
+ # account that is monitoring member accounts.
3133
3398
  # @return [String]
3134
3399
  #
3135
3400
  # @!attribute [rw] account_ids
3136
- # A list of account IDs of the GuardDuty member accounts whose
3137
- # findings you want the master account to stop monitoring.
3401
+ # A list of account IDs for the member accounts to stop monitoring.
3138
3402
  # @return [Array<String>]
3139
3403
  #
3140
3404
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/StopMonitoringMembersRequest AWS API Documentation
@@ -3146,8 +3410,9 @@ module Aws::GuardDuty
3146
3410
  end
3147
3411
 
3148
3412
  # @!attribute [rw] unprocessed_accounts
3149
- # A list of objects containing the unprocessed account and a result
3150
- # string explaining why it was unprocessed.
3413
+ # A list of objects that contain an accountId for each account that
3414
+ # could not be processed, and a result string that indicates why the
3415
+ # account was not processed.
3151
3416
  # @return [Array<Types::UnprocessedAccount>]
3152
3417
  #
3153
3418
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/StopMonitoringMembersResponse AWS API Documentation
@@ -3157,14 +3422,14 @@ module Aws::GuardDuty
3157
3422
  include Aws::Structure
3158
3423
  end
3159
3424
 
3160
- # Contains information about a tag associated with the Ec2 instance.
3425
+ # Contains information about a tag associated with the EC2 instance.
3161
3426
  #
3162
3427
  # @!attribute [rw] key
3163
- # EC2 instance tag key.
3428
+ # The EC2 instance tag key.
3164
3429
  # @return [String]
3165
3430
  #
3166
3431
  # @!attribute [rw] value
3167
- # EC2 instance tag value.
3432
+ # The EC2 instance tag value.
3168
3433
  # @return [String]
3169
3434
  #
3170
3435
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Tag AWS API Documentation
@@ -3239,7 +3504,7 @@ module Aws::GuardDuty
3239
3504
  # @return [String]
3240
3505
  #
3241
3506
  # @!attribute [rw] finding_ids
3242
- # IDs of the findings to unarchive.
3507
+ # The IDs of the findings to unarchive.
3243
3508
  # @return [Array<String>]
3244
3509
  #
3245
3510
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/UnarchiveFindingsRequest AWS API Documentation
@@ -3254,10 +3519,10 @@ module Aws::GuardDuty
3254
3519
  #
3255
3520
  class UnarchiveFindingsResponse < Aws::EmptyStructure; end
3256
3521
 
3257
- # Contains information about the accounts that were not processed.
3522
+ # Contains information about the accounts that weren't processed.
3258
3523
  #
3259
3524
  # @!attribute [rw] account_id
3260
- # AWS Account ID.
3525
+ # The AWS account ID.
3261
3526
  # @return [String]
3262
3527
  #
3263
3528
  # @!attribute [rw] result
@@ -3318,7 +3583,7 @@ module Aws::GuardDuty
3318
3583
  # @return [Boolean]
3319
3584
  #
3320
3585
  # @!attribute [rw] finding_publishing_frequency
3321
- # A enum value that specifies how frequently findings are exported,
3586
+ # An enum value that specifies how frequently findings are exported,
3322
3587
  # such as to CloudWatch Events.
3323
3588
  # @return [String]
3324
3589
  #
@@ -3432,7 +3697,8 @@ module Aws::GuardDuty
3432
3697
  # @return [String]
3433
3698
  #
3434
3699
  # @!attribute [rw] finding_ids
3435
- # IDs of the findings that you want to mark as useful or not useful.
3700
+ # The IDs of the findings that you want to mark as useful or not
3701
+ # useful.
3436
3702
  # @return [Array<String>]
3437
3703
  #
3438
3704
  # @!attribute [rw] feedback
@@ -3482,12 +3748,11 @@ module Aws::GuardDuty
3482
3748
  # @return [String]
3483
3749
  #
3484
3750
  # @!attribute [rw] location
3485
- # The updated URI of the file that contains the IPSet. For example
3486
- # (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
3751
+ # The updated URI of the file that contains the IPSet.
3487
3752
  # @return [String]
3488
3753
  #
3489
3754
  # @!attribute [rw] activate
3490
- # The updated boolean value that specifies whether the IPSet is active
3755
+ # The updated Boolean value that specifies whether the IPSet is active
3491
3756
  # or not.
3492
3757
  # @return [Boolean]
3493
3758
  #
@@ -3506,6 +3771,35 @@ module Aws::GuardDuty
3506
3771
  #
3507
3772
  class UpdateIPSetResponse < Aws::EmptyStructure; end
3508
3773
 
3774
+ # @note When making an API call, you may pass UpdateOrganizationConfigurationRequest
3775
+ # data as a hash:
3776
+ #
3777
+ # {
3778
+ # detector_id: "DetectorId", # required
3779
+ # auto_enable: false, # required
3780
+ # }
3781
+ #
3782
+ # @!attribute [rw] detector_id
3783
+ # The ID of the detector to update the delegated administrator for.
3784
+ # @return [String]
3785
+ #
3786
+ # @!attribute [rw] auto_enable
3787
+ # Indicates whether to automatically enable member accounts in the
3788
+ # organization.
3789
+ # @return [Boolean]
3790
+ #
3791
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/UpdateOrganizationConfigurationRequest AWS API Documentation
3792
+ #
3793
+ class UpdateOrganizationConfigurationRequest < Struct.new(
3794
+ :detector_id,
3795
+ :auto_enable)
3796
+ include Aws::Structure
3797
+ end
3798
+
3799
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/UpdateOrganizationConfigurationResponse AWS API Documentation
3800
+ #
3801
+ class UpdateOrganizationConfigurationResponse < Aws::EmptyStructure; end
3802
+
3509
3803
  # @note When making an API call, you may pass UpdatePublishingDestinationRequest
3510
3804
  # data as a hash:
3511
3805
  #
@@ -3519,12 +3813,12 @@ module Aws::GuardDuty
3519
3813
  # }
3520
3814
  #
3521
3815
  # @!attribute [rw] detector_id
3522
- # The ID of the
3816
+ # The ID of the detector associated with the publishing destinations
3817
+ # to update.
3523
3818
  # @return [String]
3524
3819
  #
3525
3820
  # @!attribute [rw] destination_id
3526
- # The ID of the detector associated with the publishing destinations
3527
- # to update.
3821
+ # The ID of the publishing destination to update.
3528
3822
  # @return [String]
3529
3823
  #
3530
3824
  # @!attribute [rw] destination_properties
@@ -3572,12 +3866,11 @@ module Aws::GuardDuty
3572
3866
  # @return [String]
3573
3867
  #
3574
3868
  # @!attribute [rw] location
3575
- # The updated URI of the file that contains the ThreateIntelSet. For
3576
- # example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key)
3869
+ # The updated URI of the file that contains the ThreateIntelSet.
3577
3870
  # @return [String]
3578
3871
  #
3579
3872
  # @!attribute [rw] activate
3580
- # The updated boolean value that specifies whether the ThreateIntelSet
3873
+ # The updated Boolean value that specifies whether the ThreateIntelSet
3581
3874
  # is active or not.
3582
3875
  # @return [Boolean]
3583
3876
  #