aws-sdk-guardduty 1.52.0 → 1.53.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 2856d68ab0cbea427826b6dade7219c50cf9a4bb6d4d15d2b1b34529dab6d494
4
- data.tar.gz: 6cc9d2c8218673b9b596c28290bab8863a7708d01b4b4f382886bc56c8c55158
3
+ metadata.gz: 17b3f3bea4ddcd2bc98bb6358d91e3deeacbdcc1624ebc046970b8f2ec814498
4
+ data.tar.gz: 4a2a233baf7377d8ca1d48fb0ca6f1330a7ac1db47dbb99a229f744ffe5d5cda
5
5
  SHA512:
6
- metadata.gz: 98b51dde6d9dda2e69cefd76b46c35c7eff5e0cb1ba3edd3bb99a185bab9721dff5679642aa2444bad78ba12cf4af41c46dbf0ea0bd7f7ebee61bbcccccc252b
7
- data.tar.gz: 043ed69a190cbe8b92182b5e17971cddde2668ddeadc66b1a453bf3bbf8ddaf238a03a11c916950afd7c09f42dc0e642e7505ccaefb7cf8f40e99d54fb7561a5
6
+ metadata.gz: 19541da8bdeb995280d58b013c01a97d77e0624f78e95e7221de1f1e6c1a517abfea62c3ed45f5489c83096fdb0a02a1d599292ff845b5b1461b16fb107c9076
7
+ data.tar.gz: b3aa2a323a1eb62110fa1e15ffd30cedc5ad428b400447e282e03cd73fdfcf94278aad93978fe8c78fc1926a3edb3dcd24298f0df7f5766f1a8cb00e36e65a92
data/CHANGELOG.md CHANGED
@@ -1,6 +1,11 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.53.0 (2022-01-20)
5
+ ------------------
6
+
7
+ * Feature - Amazon GuardDuty findings now include remoteAccountDetails under AwsApiCallAction section if instance credential is exfiltrated.
8
+
4
9
  1.52.0 (2021-12-21)
5
10
  ------------------
6
11
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.52.0
1
+ 1.53.0
@@ -591,6 +591,16 @@ module Aws::GuardDuty
591
591
  #
592
592
  # * service.additionalInfo.threatListName
593
593
  #
594
+ # * resource.s3BucketDetails.publicAccess.effectivePermissions
595
+ #
596
+ # * resource.s3BucketDetails.name
597
+ #
598
+ # * resource.s3BucketDetails.tags.key
599
+ #
600
+ # * resource.s3BucketDetails.tags.value
601
+ #
602
+ # * resource.s3BucketDetails.type
603
+ #
594
604
  # * service.archived
595
605
  #
596
606
  # When this attribute is set to TRUE, only archived findings are
@@ -670,10 +680,10 @@ module Aws::GuardDuty
670
680
 
671
681
  # Creates a new IPSet, which is called a trusted IP list in the console
672
682
  # user interface. An IPSet is a list of IP addresses that are trusted
673
- # for secure communication with AWS infrastructure and applications.
674
- # GuardDuty doesn't generate findings for IP addresses that are
675
- # included in IPSets. Only users from the administrator account can use
676
- # this operation.
683
+ # for secure communication with Amazon Web Services infrastructure and
684
+ # applications. GuardDuty doesn't generate findings for IP addresses
685
+ # that are included in IPSets. Only users from the administrator account
686
+ # can use this operation.
677
687
  #
678
688
  # @option params [required, String] :detector_id
679
689
  # The unique ID of the detector of the GuardDuty account that you want
@@ -689,8 +699,7 @@ module Aws::GuardDuty
689
699
  # The format of the file that contains the IPSet.
690
700
  #
691
701
  # @option params [required, String] :location
692
- # The URI of the file that contains the IPSet. For example:
693
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
702
+ # The URI of the file that contains the IPSet.
694
703
  #
695
704
  # @option params [required, Boolean] :activate
696
705
  # A Boolean value that indicates whether GuardDuty is to start using the
@@ -736,10 +745,10 @@ module Aws::GuardDuty
736
745
  req.send_request(options)
737
746
  end
738
747
 
739
- # Creates member accounts of the current AWS account by specifying a
740
- # list of AWS account IDs. This step is a prerequisite for managing the
741
- # associated member accounts either by invitation or through an
742
- # organization.
748
+ # Creates member accounts of the current Amazon Web Services account by
749
+ # specifying a list of Amazon Web Services account IDs. This step is a
750
+ # prerequisite for managing the associated member accounts either by
751
+ # invitation or through an organization.
743
752
  #
744
753
  # When using `Create Members` as an organizations delegated
745
754
  # administrator this action will enable GuardDuty in the added member
@@ -890,8 +899,7 @@ module Aws::GuardDuty
890
899
  # The format of the file that contains the ThreatIntelSet.
891
900
  #
892
901
  # @option params [required, String] :location
893
- # The URI of the file that contains the ThreatIntelSet. For example:
894
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
902
+ # The URI of the file that contains the ThreatIntelSet.
895
903
  #
896
904
  # @option params [required, Boolean] :activate
897
905
  # A Boolean value that indicates whether GuardDuty is to start using the
@@ -937,12 +945,13 @@ module Aws::GuardDuty
937
945
  req.send_request(options)
938
946
  end
939
947
 
940
- # Declines invitations sent to the current member account by AWS
941
- # accounts specified by their account IDs.
948
+ # Declines invitations sent to the current member account by Amazon Web
949
+ # Services accounts specified by their account IDs.
942
950
  #
943
951
  # @option params [required, Array<String>] :account_ids
944
- # A list of account IDs of the AWS accounts that sent invitations to the
945
- # current member account that you want to decline invitations from.
952
+ # A list of account IDs of the Amazon Web Services accounts that sent
953
+ # invitations to the current member account that you want to decline
954
+ # invitations from.
946
955
  #
947
956
  # @return [Types::DeclineInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
948
957
  #
@@ -1045,12 +1054,13 @@ module Aws::GuardDuty
1045
1054
  req.send_request(options)
1046
1055
  end
1047
1056
 
1048
- # Deletes invitations sent to the current member account by AWS accounts
1049
- # specified by their account IDs.
1057
+ # Deletes invitations sent to the current member account by Amazon Web
1058
+ # Services accounts specified by their account IDs.
1050
1059
  #
1051
1060
  # @option params [required, Array<String>] :account_ids
1052
- # A list of account IDs of the AWS accounts that sent invitations to the
1053
- # current member account that you want to delete invitations from.
1061
+ # A list of account IDs of the Amazon Web Services accounts that sent
1062
+ # invitations to the current member account that you want to delete
1063
+ # invitations from.
1054
1064
  #
1055
1065
  # @return [Types::DeleteInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1056
1066
  #
@@ -1245,12 +1255,12 @@ module Aws::GuardDuty
1245
1255
  req.send_request(options)
1246
1256
  end
1247
1257
 
1248
- # Disables an AWS account within the Organization as the GuardDuty
1249
- # delegated administrator.
1258
+ # Disables an Amazon Web Services account within the Organization as the
1259
+ # GuardDuty delegated administrator.
1250
1260
  #
1251
1261
  # @option params [required, String] :admin_account_id
1252
- # The AWS Account ID for the organizations account to be disabled as a
1253
- # GuardDuty delegated administrator.
1262
+ # The Amazon Web Services Account ID for the organizations account to be
1263
+ # disabled as a GuardDuty delegated administrator.
1254
1264
  #
1255
1265
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
1256
1266
  #
@@ -1329,12 +1339,12 @@ module Aws::GuardDuty
1329
1339
  req.send_request(options)
1330
1340
  end
1331
1341
 
1332
- # Enables an AWS account within the organization as the GuardDuty
1333
- # delegated administrator.
1342
+ # Enables an Amazon Web Services account within the organization as the
1343
+ # GuardDuty delegated administrator.
1334
1344
  #
1335
1345
  # @option params [required, String] :admin_account_id
1336
- # The AWS Account ID for the organization account to be enabled as a
1337
- # GuardDuty delegated administrator.
1346
+ # The Amazon Web Services Account ID for the organization account to be
1347
+ # enabled as a GuardDuty delegated administrator.
1338
1348
  #
1339
1349
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
1340
1350
  #
@@ -1573,6 +1583,8 @@ module Aws::GuardDuty
1573
1583
  # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.isp #=> String
1574
1584
  # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.org #=> String
1575
1585
  # resp.findings[0].service.action.aws_api_call_action.service_name #=> String
1586
+ # resp.findings[0].service.action.aws_api_call_action.remote_account_details.account_id #=> String
1587
+ # resp.findings[0].service.action.aws_api_call_action.remote_account_details.affiliated #=> Boolean
1576
1588
  # resp.findings[0].service.action.dns_request_action.domain #=> String
1577
1589
  # resp.findings[0].service.action.network_connection_action.blocked #=> Boolean
1578
1590
  # resp.findings[0].service.action.network_connection_action.connection_direction #=> String
@@ -2000,10 +2012,11 @@ module Aws::GuardDuty
2000
2012
  req.send_request(options)
2001
2013
  end
2002
2014
 
2003
- # Invites other AWS accounts (created as members of the current AWS
2004
- # account by CreateMembers) to enable GuardDuty, and allow the current
2005
- # AWS account to view and manage these accounts' findings on their
2006
- # behalf as the GuardDuty administrator account.
2015
+ # Invites other Amazon Web Services accounts (created as members of the
2016
+ # current Amazon Web Services account by CreateMembers) to enable
2017
+ # GuardDuty, and allow the current Amazon Web Services account to view
2018
+ # and manage these accounts' findings on their behalf as the GuardDuty
2019
+ # administrator account.
2007
2020
  #
2008
2021
  # @option params [required, String] :detector_id
2009
2022
  # The unique ID of the detector of the GuardDuty account that you want
@@ -2225,8 +2238,6 @@ module Aws::GuardDuty
2225
2238
  #
2226
2239
  # * service.action.networkConnectionAction.protocol
2227
2240
  #
2228
- # * service.action.networkConnectionAction.remoteIpDetails.city.cityName
2229
- #
2230
2241
  # * service.action.networkConnectionAction.remoteIpDetails.country.countryName
2231
2242
  #
2232
2243
  # * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
@@ -2373,7 +2384,7 @@ module Aws::GuardDuty
2373
2384
  end
2374
2385
 
2375
2386
  # Lists all GuardDuty membership invitations that were sent to the
2376
- # current AWS account.
2387
+ # current Amazon Web Services account.
2377
2388
  #
2378
2389
  # @option params [Integer] :max_results
2379
2390
  # You can use this parameter to indicate the maximum number of items
@@ -2522,7 +2533,7 @@ module Aws::GuardDuty
2522
2533
  end
2523
2534
 
2524
2535
  # Returns a list of publishing destinations associated with the
2525
- # specified `dectectorId`.
2536
+ # specified `detectorId`.
2526
2537
  #
2527
2538
  # @option params [required, String] :detector_id
2528
2539
  # The ID of the detector to retrieve publishing destinations for.
@@ -2965,8 +2976,7 @@ module Aws::GuardDuty
2965
2976
  # The unique ID that specifies the IPSet that you want to update.
2966
2977
  #
2967
2978
  # @option params [String] :location
2968
- # The updated URI of the file that contains the IPSet. For example:
2969
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
2979
+ # The updated URI of the file that contains the IPSet.
2970
2980
  #
2971
2981
  # @option params [Boolean] :activate
2972
2982
  # The updated Boolean value that specifies whether the IPSet is active
@@ -3161,7 +3171,7 @@ module Aws::GuardDuty
3161
3171
  params: params,
3162
3172
  config: config)
3163
3173
  context[:gem_name] = 'aws-sdk-guardduty'
3164
- context[:gem_version] = '1.52.0'
3174
+ context[:gem_version] = '1.53.0'
3165
3175
  Seahorse::Client::Request.new(handlers, context)
3166
3176
  end
3167
3177
 
@@ -211,6 +211,7 @@ module Aws::GuardDuty
211
211
  ProductCodes = Shapes::ListShape.new(name: 'ProductCodes')
212
212
  PublicAccess = Shapes::StructureShape.new(name: 'PublicAccess')
213
213
  PublishingStatus = Shapes::StringShape.new(name: 'PublishingStatus')
214
+ RemoteAccountDetails = Shapes::StructureShape.new(name: 'RemoteAccountDetails')
214
215
  RemoteIpDetails = Shapes::StructureShape.new(name: 'RemoteIpDetails')
215
216
  RemotePortDetails = Shapes::StructureShape.new(name: 'RemotePortDetails')
216
217
  Resource = Shapes::StructureShape.new(name: 'Resource')
@@ -329,6 +330,7 @@ module Aws::GuardDuty
329
330
  AwsApiCallAction.add_member(:error_code, Shapes::ShapeRef.new(shape: String, location_name: "errorCode"))
330
331
  AwsApiCallAction.add_member(:remote_ip_details, Shapes::ShapeRef.new(shape: RemoteIpDetails, location_name: "remoteIpDetails"))
331
332
  AwsApiCallAction.add_member(:service_name, Shapes::ShapeRef.new(shape: String, location_name: "serviceName"))
333
+ AwsApiCallAction.add_member(:remote_account_details, Shapes::ShapeRef.new(shape: RemoteAccountDetails, location_name: "remoteAccountDetails"))
332
334
  AwsApiCallAction.struct_class = Types::AwsApiCallAction
333
335
 
334
336
  BadRequestException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
@@ -963,6 +965,10 @@ module Aws::GuardDuty
963
965
  PublicAccess.add_member(:effective_permission, Shapes::ShapeRef.new(shape: String, location_name: "effectivePermission"))
964
966
  PublicAccess.struct_class = Types::PublicAccess
965
967
 
968
+ RemoteAccountDetails.add_member(:account_id, Shapes::ShapeRef.new(shape: String, location_name: "accountId"))
969
+ RemoteAccountDetails.add_member(:affiliated, Shapes::ShapeRef.new(shape: Boolean, location_name: "affiliated"))
970
+ RemoteAccountDetails.struct_class = Types::RemoteAccountDetails
971
+
966
972
  RemoteIpDetails.add_member(:city, Shapes::ShapeRef.new(shape: City, location_name: "city"))
967
973
  RemoteIpDetails.add_member(:country, Shapes::ShapeRef.new(shape: Country, location_name: "country"))
968
974
  RemoteIpDetails.add_member(:geo_location, Shapes::ShapeRef.new(shape: GeoLocation, location_name: "geoLocation"))
@@ -181,7 +181,7 @@ module Aws::GuardDuty
181
181
  # delegated administrator.
182
182
  #
183
183
  # @!attribute [rw] admin_account_id
184
- # The AWS account ID for the account.
184
+ # The Amazon Web Services account ID for the account.
185
185
  # @return [String]
186
186
  #
187
187
  # @!attribute [rw] admin_status
@@ -231,30 +231,36 @@ module Aws::GuardDuty
231
231
  # Contains information about the API action.
232
232
  #
233
233
  # @!attribute [rw] api
234
- # The AWS API name.
234
+ # The Amazon Web Services API name.
235
235
  # @return [String]
236
236
  #
237
237
  # @!attribute [rw] caller_type
238
- # The AWS API caller type.
238
+ # The Amazon Web Services API caller type.
239
239
  # @return [String]
240
240
  #
241
241
  # @!attribute [rw] domain_details
242
- # The domain information for the AWS API call.
242
+ # The domain information for the Amazon Web Services API call.
243
243
  # @return [Types::DomainDetails]
244
244
  #
245
245
  # @!attribute [rw] error_code
246
- # The error code of the failed AWS API action.
246
+ # The error code of the failed Amazon Web Services API action.
247
247
  # @return [String]
248
248
  #
249
249
  # @!attribute [rw] remote_ip_details
250
- # The remote IP information of the connection that initiated the AWS
251
- # API call.
250
+ # The remote IP information of the connection that initiated the
251
+ # Amazon Web Services API call.
252
252
  # @return [Types::RemoteIpDetails]
253
253
  #
254
254
  # @!attribute [rw] service_name
255
- # The AWS service name whose API was invoked.
255
+ # The Amazon Web Services service name whose API was invoked.
256
256
  # @return [String]
257
257
  #
258
+ # @!attribute [rw] remote_account_details
259
+ # The details of the Amazon Web Services account that made the API
260
+ # call. This field appears if the call was made from outside your
261
+ # account.
262
+ # @return [Types::RemoteAccountDetails]
263
+ #
258
264
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/AwsApiCallAction AWS API Documentation
259
265
  #
260
266
  class AwsApiCallAction < Struct.new(
@@ -263,7 +269,8 @@ module Aws::GuardDuty
263
269
  :domain_details,
264
270
  :error_code,
265
271
  :remote_ip_details,
266
- :service_name)
272
+ :service_name,
273
+ :remote_account_details)
267
274
  SENSITIVE = []
268
275
  include Aws::Structure
269
276
  end
@@ -742,6 +749,16 @@ module Aws::GuardDuty
742
749
  #
743
750
  # * service.additionalInfo.threatListName
744
751
  #
752
+ # * resource.s3BucketDetails.publicAccess.effectivePermissions
753
+ #
754
+ # * resource.s3BucketDetails.name
755
+ #
756
+ # * resource.s3BucketDetails.tags.key
757
+ #
758
+ # * resource.s3BucketDetails.tags.value
759
+ #
760
+ # * resource.s3BucketDetails.type
761
+ #
745
762
  # * service.archived
746
763
  #
747
764
  # When this attribute is set to TRUE, only archived findings are
@@ -832,8 +849,7 @@ module Aws::GuardDuty
832
849
  # @return [String]
833
850
  #
834
851
  # @!attribute [rw] location
835
- # The URI of the file that contains the IPSet. For example:
836
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
852
+ # The URI of the file that contains the IPSet.
837
853
  # @return [String]
838
854
  #
839
855
  # @!attribute [rw] activate
@@ -1041,8 +1057,7 @@ module Aws::GuardDuty
1041
1057
  # @return [String]
1042
1058
  #
1043
1059
  # @!attribute [rw] location
1044
- # The URI of the file that contains the ThreatIntelSet. For example:
1045
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
1060
+ # The URI of the file that contains the ThreatIntelSet.
1046
1061
  # @return [String]
1047
1062
  #
1048
1063
  # @!attribute [rw] activate
@@ -1165,9 +1180,9 @@ module Aws::GuardDuty
1165
1180
  # }
1166
1181
  #
1167
1182
  # @!attribute [rw] account_ids
1168
- # A list of account IDs of the AWS accounts that sent invitations to
1169
- # the current member account that you want to decline invitations
1170
- # from.
1183
+ # A list of account IDs of the Amazon Web Services accounts that sent
1184
+ # invitations to the current member account that you want to decline
1185
+ # invitations from.
1171
1186
  # @return [Array<String>]
1172
1187
  #
1173
1188
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeclineInvitationsRequest AWS API Documentation
@@ -1305,8 +1320,9 @@ module Aws::GuardDuty
1305
1320
  # }
1306
1321
  #
1307
1322
  # @!attribute [rw] account_ids
1308
- # A list of account IDs of the AWS accounts that sent invitations to
1309
- # the current member account that you want to delete invitations from.
1323
+ # A list of account IDs of the Amazon Web Services accounts that sent
1324
+ # invitations to the current member account that you want to delete
1325
+ # invitations from.
1310
1326
  # @return [Array<String>]
1311
1327
  #
1312
1328
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteInvitationsRequest AWS API Documentation
@@ -1576,6 +1592,9 @@ module Aws::GuardDuty
1576
1592
  #
1577
1593
  # @!attribute [rw] destination_arn
1578
1594
  # The ARN of the resource to publish to.
1595
+ #
1596
+ # To specify an S3 bucket folder use the following format:
1597
+ # `arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/`
1579
1598
  # @return [String]
1580
1599
  #
1581
1600
  # @!attribute [rw] kms_key_arn
@@ -1599,8 +1618,8 @@ module Aws::GuardDuty
1599
1618
  # }
1600
1619
  #
1601
1620
  # @!attribute [rw] admin_account_id
1602
- # The AWS Account ID for the organizations account to be disabled as a
1603
- # GuardDuty delegated administrator.
1621
+ # The Amazon Web Services Account ID for the organizations account to
1622
+ # be disabled as a GuardDuty delegated administrator.
1604
1623
  # @return [String]
1605
1624
  #
1606
1625
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisableOrganizationAdminAccountRequest AWS API Documentation
@@ -1696,7 +1715,7 @@ module Aws::GuardDuty
1696
1715
  # Contains information about the domain.
1697
1716
  #
1698
1717
  # @!attribute [rw] domain
1699
- # The domain information for the AWS API call.
1718
+ # The domain information for the Amazon Web Services API call.
1700
1719
  # @return [String]
1701
1720
  #
1702
1721
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DomainDetails AWS API Documentation
@@ -1715,8 +1734,8 @@ module Aws::GuardDuty
1715
1734
  # }
1716
1735
  #
1717
1736
  # @!attribute [rw] admin_account_id
1718
- # The AWS Account ID for the organization account to be enabled as a
1719
- # GuardDuty delegated administrator.
1737
+ # The Amazon Web Services Account ID for the organization account to
1738
+ # be enabled as a GuardDuty delegated administrator.
1720
1739
  # @return [String]
1721
1740
  #
1722
1741
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/EnableOrganizationAdminAccountRequest AWS API Documentation
@@ -1781,8 +1800,9 @@ module Aws::GuardDuty
1781
1800
  # @return [String]
1782
1801
  #
1783
1802
  # @!attribute [rw] resource
1784
- # Contains information about the AWS resource associated with the
1785
- # activity that prompted GuardDuty to generate a finding.
1803
+ # Contains information about the Amazon Web Services resource
1804
+ # associated with the activity that prompted GuardDuty to generate a
1805
+ # finding.
1786
1806
  # @return [Types::Resource]
1787
1807
  #
1788
1808
  # @!attribute [rw] schema_version
@@ -2185,8 +2205,7 @@ module Aws::GuardDuty
2185
2205
  # @return [String]
2186
2206
  #
2187
2207
  # @!attribute [rw] location
2188
- # The URI of the file that contains the IPSet. For example:
2189
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
2208
+ # The URI of the file that contains the IPSet.
2190
2209
  # @return [String]
2191
2210
  #
2192
2211
  # @!attribute [rw] status
@@ -2384,8 +2403,7 @@ module Aws::GuardDuty
2384
2403
  # @return [String]
2385
2404
  #
2386
2405
  # @!attribute [rw] location
2387
- # The URI of the file that contains the ThreatIntelSet. For example:
2388
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
2406
+ # The URI of the file that contains the ThreatIntelSet.
2389
2407
  # @return [String]
2390
2408
  #
2391
2409
  # @!attribute [rw] status
@@ -2536,8 +2554,8 @@ module Aws::GuardDuty
2536
2554
  # @return [String]
2537
2555
  #
2538
2556
  # @!attribute [rw] outpost_arn
2539
- # The Amazon Resource Name (ARN) of the AWS Outpost. Only applicable
2540
- # to AWS Outposts instances.
2557
+ # The Amazon Resource Name (ARN) of the Amazon Web Services Outpost.
2558
+ # Only applicable to Amazon Web Services Outposts instances.
2541
2559
  # @return [String]
2542
2560
  #
2543
2561
  # @!attribute [rw] launch_time
@@ -2903,8 +2921,6 @@ module Aws::GuardDuty
2903
2921
  #
2904
2922
  # * service.action.networkConnectionAction.protocol
2905
2923
  #
2906
- # * service.action.networkConnectionAction.remoteIpDetails.city.cityName
2907
- #
2908
2924
  # * service.action.networkConnectionAction.remoteIpDetails.country.countryName
2909
2925
  #
2910
2926
  # * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
@@ -3833,6 +3849,29 @@ module Aws::GuardDuty
3833
3849
  include Aws::Structure
3834
3850
  end
3835
3851
 
3852
+ # Contains details about the remote Amazon Web Services account that
3853
+ # made the API call.
3854
+ #
3855
+ # @!attribute [rw] account_id
3856
+ # The Amazon Web Services account ID of the remote API caller.
3857
+ # @return [String]
3858
+ #
3859
+ # @!attribute [rw] affiliated
3860
+ # Details on whether the Amazon Web Services account of the remote API
3861
+ # caller is related to your GuardDuty environment. If this value is
3862
+ # `True` the API caller is affiliated to your account in some way. If
3863
+ # it is `False` the API caller is from outside your environment.
3864
+ # @return [Boolean]
3865
+ #
3866
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/RemoteAccountDetails AWS API Documentation
3867
+ #
3868
+ class RemoteAccountDetails < Struct.new(
3869
+ :account_id,
3870
+ :affiliated)
3871
+ SENSITIVE = []
3872
+ include Aws::Structure
3873
+ end
3874
+
3836
3875
  # Contains information about the remote IP address of the connection.
3837
3876
  #
3838
3877
  # @!attribute [rw] city
@@ -3886,8 +3925,8 @@ module Aws::GuardDuty
3886
3925
  include Aws::Structure
3887
3926
  end
3888
3927
 
3889
- # Contains information about the AWS resource associated with the
3890
- # activity that prompted GuardDuty to generate a finding.
3928
+ # Contains information about the Amazon Web Services resource associated
3929
+ # with the activity that prompted GuardDuty to generate a finding.
3891
3930
  #
3892
3931
  # @!attribute [rw] access_key_details
3893
3932
  # The IAM access key details (IAM user information) of a user that
@@ -3905,7 +3944,7 @@ module Aws::GuardDuty
3905
3944
  # @return [Types::InstanceDetails]
3906
3945
  #
3907
3946
  # @!attribute [rw] resource_type
3908
- # The type of AWS resource.
3947
+ # The type of Amazon Web Services resource.
3909
3948
  # @return [String]
3910
3949
  #
3911
3950
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Resource AWS API Documentation
@@ -4061,7 +4100,8 @@ module Aws::GuardDuty
4061
4100
  # @return [String]
4062
4101
  #
4063
4102
  # @!attribute [rw] service_name
4064
- # The name of the AWS service (GuardDuty) that generated a finding.
4103
+ # The name of the Amazon Web Services service (GuardDuty) that
4104
+ # generated a finding.
4065
4105
  # @return [String]
4066
4106
  #
4067
4107
  # @!attribute [rw] user_feedback
@@ -4317,7 +4357,7 @@ module Aws::GuardDuty
4317
4357
  # Contains information about the accounts that weren't processed.
4318
4358
  #
4319
4359
  # @!attribute [rw] account_id
4320
- # The AWS account ID.
4360
+ # The Amazon Web Services account ID.
4321
4361
  # @return [String]
4322
4362
  #
4323
4363
  # @!attribute [rw] result
@@ -4559,8 +4599,7 @@ module Aws::GuardDuty
4559
4599
  # @return [String]
4560
4600
  #
4561
4601
  # @!attribute [rw] location
4562
- # The updated URI of the file that contains the IPSet. For example:
4563
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
4602
+ # The updated URI of the file that contains the IPSet.
4564
4603
  # @return [String]
4565
4604
  #
4566
4605
  # @!attribute [rw] activate
@@ -4836,10 +4875,11 @@ module Aws::GuardDuty
4836
4875
  include Aws::Structure
4837
4876
  end
4838
4877
 
4839
- # Contains information on the sum of usage based on an AWS resource.
4878
+ # Contains information on the sum of usage based on an Amazon Web
4879
+ # Services resource.
4840
4880
  #
4841
4881
  # @!attribute [rw] resource
4842
- # The AWS resource that generated usage.
4882
+ # The Amazon Web Services resource that generated usage.
4843
4883
  # @return [String]
4844
4884
  #
4845
4885
  # @!attribute [rw] total
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-guardduty/customizations'
48
48
  # @!group service
49
49
  module Aws::GuardDuty
50
50
 
51
- GEM_VERSION = '1.52.0'
51
+ GEM_VERSION = '1.53.0'
52
52
 
53
53
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-guardduty
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.52.0
4
+ version: 1.53.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-12-21 00:00:00.000000000 Z
11
+ date: 2022-01-20 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core