aws-sdk-guardduty 1.52.0 → 1.53.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-guardduty/client.rb +49 -39
- data/lib/aws-sdk-guardduty/client_api.rb +6 -0
- data/lib/aws-sdk-guardduty/types.rb +82 -42
- data/lib/aws-sdk-guardduty.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 17b3f3bea4ddcd2bc98bb6358d91e3deeacbdcc1624ebc046970b8f2ec814498
|
4
|
+
data.tar.gz: 4a2a233baf7377d8ca1d48fb0ca6f1330a7ac1db47dbb99a229f744ffe5d5cda
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 19541da8bdeb995280d58b013c01a97d77e0624f78e95e7221de1f1e6c1a517abfea62c3ed45f5489c83096fdb0a02a1d599292ff845b5b1461b16fb107c9076
|
7
|
+
data.tar.gz: b3aa2a323a1eb62110fa1e15ffd30cedc5ad428b400447e282e03cd73fdfcf94278aad93978fe8c78fc1926a3edb3dcd24298f0df7f5766f1a8cb00e36e65a92
|
data/CHANGELOG.md
CHANGED
@@ -1,6 +1,11 @@
|
|
1
1
|
Unreleased Changes
|
2
2
|
------------------
|
3
3
|
|
4
|
+
1.53.0 (2022-01-20)
|
5
|
+
------------------
|
6
|
+
|
7
|
+
* Feature - Amazon GuardDuty findings now include remoteAccountDetails under AwsApiCallAction section if instance credential is exfiltrated.
|
8
|
+
|
4
9
|
1.52.0 (2021-12-21)
|
5
10
|
------------------
|
6
11
|
|
data/VERSION
CHANGED
@@ -1 +1 @@
|
|
1
|
-
1.
|
1
|
+
1.53.0
|
@@ -591,6 +591,16 @@ module Aws::GuardDuty
|
|
591
591
|
#
|
592
592
|
# * service.additionalInfo.threatListName
|
593
593
|
#
|
594
|
+
# * resource.s3BucketDetails.publicAccess.effectivePermissions
|
595
|
+
#
|
596
|
+
# * resource.s3BucketDetails.name
|
597
|
+
#
|
598
|
+
# * resource.s3BucketDetails.tags.key
|
599
|
+
#
|
600
|
+
# * resource.s3BucketDetails.tags.value
|
601
|
+
#
|
602
|
+
# * resource.s3BucketDetails.type
|
603
|
+
#
|
594
604
|
# * service.archived
|
595
605
|
#
|
596
606
|
# When this attribute is set to TRUE, only archived findings are
|
@@ -670,10 +680,10 @@ module Aws::GuardDuty
|
|
670
680
|
|
671
681
|
# Creates a new IPSet, which is called a trusted IP list in the console
|
672
682
|
# user interface. An IPSet is a list of IP addresses that are trusted
|
673
|
-
# for secure communication with
|
674
|
-
# GuardDuty doesn't generate findings for IP addresses
|
675
|
-
# included in IPSets. Only users from the administrator account
|
676
|
-
# this operation.
|
683
|
+
# for secure communication with Amazon Web Services infrastructure and
|
684
|
+
# applications. GuardDuty doesn't generate findings for IP addresses
|
685
|
+
# that are included in IPSets. Only users from the administrator account
|
686
|
+
# can use this operation.
|
677
687
|
#
|
678
688
|
# @option params [required, String] :detector_id
|
679
689
|
# The unique ID of the detector of the GuardDuty account that you want
|
@@ -689,8 +699,7 @@ module Aws::GuardDuty
|
|
689
699
|
# The format of the file that contains the IPSet.
|
690
700
|
#
|
691
701
|
# @option params [required, String] :location
|
692
|
-
# The URI of the file that contains the IPSet.
|
693
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
702
|
+
# The URI of the file that contains the IPSet.
|
694
703
|
#
|
695
704
|
# @option params [required, Boolean] :activate
|
696
705
|
# A Boolean value that indicates whether GuardDuty is to start using the
|
@@ -736,10 +745,10 @@ module Aws::GuardDuty
|
|
736
745
|
req.send_request(options)
|
737
746
|
end
|
738
747
|
|
739
|
-
# Creates member accounts of the current
|
740
|
-
# list of
|
741
|
-
# associated member accounts either by
|
742
|
-
# organization.
|
748
|
+
# Creates member accounts of the current Amazon Web Services account by
|
749
|
+
# specifying a list of Amazon Web Services account IDs. This step is a
|
750
|
+
# prerequisite for managing the associated member accounts either by
|
751
|
+
# invitation or through an organization.
|
743
752
|
#
|
744
753
|
# When using `Create Members` as an organizations delegated
|
745
754
|
# administrator this action will enable GuardDuty in the added member
|
@@ -890,8 +899,7 @@ module Aws::GuardDuty
|
|
890
899
|
# The format of the file that contains the ThreatIntelSet.
|
891
900
|
#
|
892
901
|
# @option params [required, String] :location
|
893
|
-
# The URI of the file that contains the ThreatIntelSet.
|
894
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
902
|
+
# The URI of the file that contains the ThreatIntelSet.
|
895
903
|
#
|
896
904
|
# @option params [required, Boolean] :activate
|
897
905
|
# A Boolean value that indicates whether GuardDuty is to start using the
|
@@ -937,12 +945,13 @@ module Aws::GuardDuty
|
|
937
945
|
req.send_request(options)
|
938
946
|
end
|
939
947
|
|
940
|
-
# Declines invitations sent to the current member account by
|
941
|
-
# accounts specified by their account IDs.
|
948
|
+
# Declines invitations sent to the current member account by Amazon Web
|
949
|
+
# Services accounts specified by their account IDs.
|
942
950
|
#
|
943
951
|
# @option params [required, Array<String>] :account_ids
|
944
|
-
# A list of account IDs of the
|
945
|
-
# current member account that you want to decline
|
952
|
+
# A list of account IDs of the Amazon Web Services accounts that sent
|
953
|
+
# invitations to the current member account that you want to decline
|
954
|
+
# invitations from.
|
946
955
|
#
|
947
956
|
# @return [Types::DeclineInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
948
957
|
#
|
@@ -1045,12 +1054,13 @@ module Aws::GuardDuty
|
|
1045
1054
|
req.send_request(options)
|
1046
1055
|
end
|
1047
1056
|
|
1048
|
-
# Deletes invitations sent to the current member account by
|
1049
|
-
# specified by their account IDs.
|
1057
|
+
# Deletes invitations sent to the current member account by Amazon Web
|
1058
|
+
# Services accounts specified by their account IDs.
|
1050
1059
|
#
|
1051
1060
|
# @option params [required, Array<String>] :account_ids
|
1052
|
-
# A list of account IDs of the
|
1053
|
-
# current member account that you want to delete
|
1061
|
+
# A list of account IDs of the Amazon Web Services accounts that sent
|
1062
|
+
# invitations to the current member account that you want to delete
|
1063
|
+
# invitations from.
|
1054
1064
|
#
|
1055
1065
|
# @return [Types::DeleteInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1056
1066
|
#
|
@@ -1245,12 +1255,12 @@ module Aws::GuardDuty
|
|
1245
1255
|
req.send_request(options)
|
1246
1256
|
end
|
1247
1257
|
|
1248
|
-
# Disables an
|
1249
|
-
# delegated administrator.
|
1258
|
+
# Disables an Amazon Web Services account within the Organization as the
|
1259
|
+
# GuardDuty delegated administrator.
|
1250
1260
|
#
|
1251
1261
|
# @option params [required, String] :admin_account_id
|
1252
|
-
# The
|
1253
|
-
# GuardDuty delegated administrator.
|
1262
|
+
# The Amazon Web Services Account ID for the organizations account to be
|
1263
|
+
# disabled as a GuardDuty delegated administrator.
|
1254
1264
|
#
|
1255
1265
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
1256
1266
|
#
|
@@ -1329,12 +1339,12 @@ module Aws::GuardDuty
|
|
1329
1339
|
req.send_request(options)
|
1330
1340
|
end
|
1331
1341
|
|
1332
|
-
# Enables an
|
1333
|
-
# delegated administrator.
|
1342
|
+
# Enables an Amazon Web Services account within the organization as the
|
1343
|
+
# GuardDuty delegated administrator.
|
1334
1344
|
#
|
1335
1345
|
# @option params [required, String] :admin_account_id
|
1336
|
-
# The
|
1337
|
-
# GuardDuty delegated administrator.
|
1346
|
+
# The Amazon Web Services Account ID for the organization account to be
|
1347
|
+
# enabled as a GuardDuty delegated administrator.
|
1338
1348
|
#
|
1339
1349
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
1340
1350
|
#
|
@@ -1573,6 +1583,8 @@ module Aws::GuardDuty
|
|
1573
1583
|
# resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.isp #=> String
|
1574
1584
|
# resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.org #=> String
|
1575
1585
|
# resp.findings[0].service.action.aws_api_call_action.service_name #=> String
|
1586
|
+
# resp.findings[0].service.action.aws_api_call_action.remote_account_details.account_id #=> String
|
1587
|
+
# resp.findings[0].service.action.aws_api_call_action.remote_account_details.affiliated #=> Boolean
|
1576
1588
|
# resp.findings[0].service.action.dns_request_action.domain #=> String
|
1577
1589
|
# resp.findings[0].service.action.network_connection_action.blocked #=> Boolean
|
1578
1590
|
# resp.findings[0].service.action.network_connection_action.connection_direction #=> String
|
@@ -2000,10 +2012,11 @@ module Aws::GuardDuty
|
|
2000
2012
|
req.send_request(options)
|
2001
2013
|
end
|
2002
2014
|
|
2003
|
-
# Invites other
|
2004
|
-
# account by CreateMembers) to enable
|
2005
|
-
#
|
2006
|
-
# behalf as the GuardDuty
|
2015
|
+
# Invites other Amazon Web Services accounts (created as members of the
|
2016
|
+
# current Amazon Web Services account by CreateMembers) to enable
|
2017
|
+
# GuardDuty, and allow the current Amazon Web Services account to view
|
2018
|
+
# and manage these accounts' findings on their behalf as the GuardDuty
|
2019
|
+
# administrator account.
|
2007
2020
|
#
|
2008
2021
|
# @option params [required, String] :detector_id
|
2009
2022
|
# The unique ID of the detector of the GuardDuty account that you want
|
@@ -2225,8 +2238,6 @@ module Aws::GuardDuty
|
|
2225
2238
|
#
|
2226
2239
|
# * service.action.networkConnectionAction.protocol
|
2227
2240
|
#
|
2228
|
-
# * service.action.networkConnectionAction.remoteIpDetails.city.cityName
|
2229
|
-
#
|
2230
2241
|
# * service.action.networkConnectionAction.remoteIpDetails.country.countryName
|
2231
2242
|
#
|
2232
2243
|
# * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
|
@@ -2373,7 +2384,7 @@ module Aws::GuardDuty
|
|
2373
2384
|
end
|
2374
2385
|
|
2375
2386
|
# Lists all GuardDuty membership invitations that were sent to the
|
2376
|
-
# current
|
2387
|
+
# current Amazon Web Services account.
|
2377
2388
|
#
|
2378
2389
|
# @option params [Integer] :max_results
|
2379
2390
|
# You can use this parameter to indicate the maximum number of items
|
@@ -2522,7 +2533,7 @@ module Aws::GuardDuty
|
|
2522
2533
|
end
|
2523
2534
|
|
2524
2535
|
# Returns a list of publishing destinations associated with the
|
2525
|
-
# specified `
|
2536
|
+
# specified `detectorId`.
|
2526
2537
|
#
|
2527
2538
|
# @option params [required, String] :detector_id
|
2528
2539
|
# The ID of the detector to retrieve publishing destinations for.
|
@@ -2965,8 +2976,7 @@ module Aws::GuardDuty
|
|
2965
2976
|
# The unique ID that specifies the IPSet that you want to update.
|
2966
2977
|
#
|
2967
2978
|
# @option params [String] :location
|
2968
|
-
# The updated URI of the file that contains the IPSet.
|
2969
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
2979
|
+
# The updated URI of the file that contains the IPSet.
|
2970
2980
|
#
|
2971
2981
|
# @option params [Boolean] :activate
|
2972
2982
|
# The updated Boolean value that specifies whether the IPSet is active
|
@@ -3161,7 +3171,7 @@ module Aws::GuardDuty
|
|
3161
3171
|
params: params,
|
3162
3172
|
config: config)
|
3163
3173
|
context[:gem_name] = 'aws-sdk-guardduty'
|
3164
|
-
context[:gem_version] = '1.
|
3174
|
+
context[:gem_version] = '1.53.0'
|
3165
3175
|
Seahorse::Client::Request.new(handlers, context)
|
3166
3176
|
end
|
3167
3177
|
|
@@ -211,6 +211,7 @@ module Aws::GuardDuty
|
|
211
211
|
ProductCodes = Shapes::ListShape.new(name: 'ProductCodes')
|
212
212
|
PublicAccess = Shapes::StructureShape.new(name: 'PublicAccess')
|
213
213
|
PublishingStatus = Shapes::StringShape.new(name: 'PublishingStatus')
|
214
|
+
RemoteAccountDetails = Shapes::StructureShape.new(name: 'RemoteAccountDetails')
|
214
215
|
RemoteIpDetails = Shapes::StructureShape.new(name: 'RemoteIpDetails')
|
215
216
|
RemotePortDetails = Shapes::StructureShape.new(name: 'RemotePortDetails')
|
216
217
|
Resource = Shapes::StructureShape.new(name: 'Resource')
|
@@ -329,6 +330,7 @@ module Aws::GuardDuty
|
|
329
330
|
AwsApiCallAction.add_member(:error_code, Shapes::ShapeRef.new(shape: String, location_name: "errorCode"))
|
330
331
|
AwsApiCallAction.add_member(:remote_ip_details, Shapes::ShapeRef.new(shape: RemoteIpDetails, location_name: "remoteIpDetails"))
|
331
332
|
AwsApiCallAction.add_member(:service_name, Shapes::ShapeRef.new(shape: String, location_name: "serviceName"))
|
333
|
+
AwsApiCallAction.add_member(:remote_account_details, Shapes::ShapeRef.new(shape: RemoteAccountDetails, location_name: "remoteAccountDetails"))
|
332
334
|
AwsApiCallAction.struct_class = Types::AwsApiCallAction
|
333
335
|
|
334
336
|
BadRequestException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
|
@@ -963,6 +965,10 @@ module Aws::GuardDuty
|
|
963
965
|
PublicAccess.add_member(:effective_permission, Shapes::ShapeRef.new(shape: String, location_name: "effectivePermission"))
|
964
966
|
PublicAccess.struct_class = Types::PublicAccess
|
965
967
|
|
968
|
+
RemoteAccountDetails.add_member(:account_id, Shapes::ShapeRef.new(shape: String, location_name: "accountId"))
|
969
|
+
RemoteAccountDetails.add_member(:affiliated, Shapes::ShapeRef.new(shape: Boolean, location_name: "affiliated"))
|
970
|
+
RemoteAccountDetails.struct_class = Types::RemoteAccountDetails
|
971
|
+
|
966
972
|
RemoteIpDetails.add_member(:city, Shapes::ShapeRef.new(shape: City, location_name: "city"))
|
967
973
|
RemoteIpDetails.add_member(:country, Shapes::ShapeRef.new(shape: Country, location_name: "country"))
|
968
974
|
RemoteIpDetails.add_member(:geo_location, Shapes::ShapeRef.new(shape: GeoLocation, location_name: "geoLocation"))
|
@@ -181,7 +181,7 @@ module Aws::GuardDuty
|
|
181
181
|
# delegated administrator.
|
182
182
|
#
|
183
183
|
# @!attribute [rw] admin_account_id
|
184
|
-
# The
|
184
|
+
# The Amazon Web Services account ID for the account.
|
185
185
|
# @return [String]
|
186
186
|
#
|
187
187
|
# @!attribute [rw] admin_status
|
@@ -231,30 +231,36 @@ module Aws::GuardDuty
|
|
231
231
|
# Contains information about the API action.
|
232
232
|
#
|
233
233
|
# @!attribute [rw] api
|
234
|
-
# The
|
234
|
+
# The Amazon Web Services API name.
|
235
235
|
# @return [String]
|
236
236
|
#
|
237
237
|
# @!attribute [rw] caller_type
|
238
|
-
# The
|
238
|
+
# The Amazon Web Services API caller type.
|
239
239
|
# @return [String]
|
240
240
|
#
|
241
241
|
# @!attribute [rw] domain_details
|
242
|
-
# The domain information for the
|
242
|
+
# The domain information for the Amazon Web Services API call.
|
243
243
|
# @return [Types::DomainDetails]
|
244
244
|
#
|
245
245
|
# @!attribute [rw] error_code
|
246
|
-
# The error code of the failed
|
246
|
+
# The error code of the failed Amazon Web Services API action.
|
247
247
|
# @return [String]
|
248
248
|
#
|
249
249
|
# @!attribute [rw] remote_ip_details
|
250
|
-
# The remote IP information of the connection that initiated the
|
251
|
-
# API call.
|
250
|
+
# The remote IP information of the connection that initiated the
|
251
|
+
# Amazon Web Services API call.
|
252
252
|
# @return [Types::RemoteIpDetails]
|
253
253
|
#
|
254
254
|
# @!attribute [rw] service_name
|
255
|
-
# The
|
255
|
+
# The Amazon Web Services service name whose API was invoked.
|
256
256
|
# @return [String]
|
257
257
|
#
|
258
|
+
# @!attribute [rw] remote_account_details
|
259
|
+
# The details of the Amazon Web Services account that made the API
|
260
|
+
# call. This field appears if the call was made from outside your
|
261
|
+
# account.
|
262
|
+
# @return [Types::RemoteAccountDetails]
|
263
|
+
#
|
258
264
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/AwsApiCallAction AWS API Documentation
|
259
265
|
#
|
260
266
|
class AwsApiCallAction < Struct.new(
|
@@ -263,7 +269,8 @@ module Aws::GuardDuty
|
|
263
269
|
:domain_details,
|
264
270
|
:error_code,
|
265
271
|
:remote_ip_details,
|
266
|
-
:service_name
|
272
|
+
:service_name,
|
273
|
+
:remote_account_details)
|
267
274
|
SENSITIVE = []
|
268
275
|
include Aws::Structure
|
269
276
|
end
|
@@ -742,6 +749,16 @@ module Aws::GuardDuty
|
|
742
749
|
#
|
743
750
|
# * service.additionalInfo.threatListName
|
744
751
|
#
|
752
|
+
# * resource.s3BucketDetails.publicAccess.effectivePermissions
|
753
|
+
#
|
754
|
+
# * resource.s3BucketDetails.name
|
755
|
+
#
|
756
|
+
# * resource.s3BucketDetails.tags.key
|
757
|
+
#
|
758
|
+
# * resource.s3BucketDetails.tags.value
|
759
|
+
#
|
760
|
+
# * resource.s3BucketDetails.type
|
761
|
+
#
|
745
762
|
# * service.archived
|
746
763
|
#
|
747
764
|
# When this attribute is set to TRUE, only archived findings are
|
@@ -832,8 +849,7 @@ module Aws::GuardDuty
|
|
832
849
|
# @return [String]
|
833
850
|
#
|
834
851
|
# @!attribute [rw] location
|
835
|
-
# The URI of the file that contains the IPSet.
|
836
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
852
|
+
# The URI of the file that contains the IPSet.
|
837
853
|
# @return [String]
|
838
854
|
#
|
839
855
|
# @!attribute [rw] activate
|
@@ -1041,8 +1057,7 @@ module Aws::GuardDuty
|
|
1041
1057
|
# @return [String]
|
1042
1058
|
#
|
1043
1059
|
# @!attribute [rw] location
|
1044
|
-
# The URI of the file that contains the ThreatIntelSet.
|
1045
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
1060
|
+
# The URI of the file that contains the ThreatIntelSet.
|
1046
1061
|
# @return [String]
|
1047
1062
|
#
|
1048
1063
|
# @!attribute [rw] activate
|
@@ -1165,9 +1180,9 @@ module Aws::GuardDuty
|
|
1165
1180
|
# }
|
1166
1181
|
#
|
1167
1182
|
# @!attribute [rw] account_ids
|
1168
|
-
# A list of account IDs of the
|
1169
|
-
# the current member account that you want to decline
|
1170
|
-
# from.
|
1183
|
+
# A list of account IDs of the Amazon Web Services accounts that sent
|
1184
|
+
# invitations to the current member account that you want to decline
|
1185
|
+
# invitations from.
|
1171
1186
|
# @return [Array<String>]
|
1172
1187
|
#
|
1173
1188
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeclineInvitationsRequest AWS API Documentation
|
@@ -1305,8 +1320,9 @@ module Aws::GuardDuty
|
|
1305
1320
|
# }
|
1306
1321
|
#
|
1307
1322
|
# @!attribute [rw] account_ids
|
1308
|
-
# A list of account IDs of the
|
1309
|
-
# the current member account that you want to delete
|
1323
|
+
# A list of account IDs of the Amazon Web Services accounts that sent
|
1324
|
+
# invitations to the current member account that you want to delete
|
1325
|
+
# invitations from.
|
1310
1326
|
# @return [Array<String>]
|
1311
1327
|
#
|
1312
1328
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteInvitationsRequest AWS API Documentation
|
@@ -1576,6 +1592,9 @@ module Aws::GuardDuty
|
|
1576
1592
|
#
|
1577
1593
|
# @!attribute [rw] destination_arn
|
1578
1594
|
# The ARN of the resource to publish to.
|
1595
|
+
#
|
1596
|
+
# To specify an S3 bucket folder use the following format:
|
1597
|
+
# `arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/`
|
1579
1598
|
# @return [String]
|
1580
1599
|
#
|
1581
1600
|
# @!attribute [rw] kms_key_arn
|
@@ -1599,8 +1618,8 @@ module Aws::GuardDuty
|
|
1599
1618
|
# }
|
1600
1619
|
#
|
1601
1620
|
# @!attribute [rw] admin_account_id
|
1602
|
-
# The
|
1603
|
-
# GuardDuty delegated administrator.
|
1621
|
+
# The Amazon Web Services Account ID for the organizations account to
|
1622
|
+
# be disabled as a GuardDuty delegated administrator.
|
1604
1623
|
# @return [String]
|
1605
1624
|
#
|
1606
1625
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisableOrganizationAdminAccountRequest AWS API Documentation
|
@@ -1696,7 +1715,7 @@ module Aws::GuardDuty
|
|
1696
1715
|
# Contains information about the domain.
|
1697
1716
|
#
|
1698
1717
|
# @!attribute [rw] domain
|
1699
|
-
# The domain information for the
|
1718
|
+
# The domain information for the Amazon Web Services API call.
|
1700
1719
|
# @return [String]
|
1701
1720
|
#
|
1702
1721
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DomainDetails AWS API Documentation
|
@@ -1715,8 +1734,8 @@ module Aws::GuardDuty
|
|
1715
1734
|
# }
|
1716
1735
|
#
|
1717
1736
|
# @!attribute [rw] admin_account_id
|
1718
|
-
# The
|
1719
|
-
# GuardDuty delegated administrator.
|
1737
|
+
# The Amazon Web Services Account ID for the organization account to
|
1738
|
+
# be enabled as a GuardDuty delegated administrator.
|
1720
1739
|
# @return [String]
|
1721
1740
|
#
|
1722
1741
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/EnableOrganizationAdminAccountRequest AWS API Documentation
|
@@ -1781,8 +1800,9 @@ module Aws::GuardDuty
|
|
1781
1800
|
# @return [String]
|
1782
1801
|
#
|
1783
1802
|
# @!attribute [rw] resource
|
1784
|
-
# Contains information about the
|
1785
|
-
# activity that prompted GuardDuty to generate a
|
1803
|
+
# Contains information about the Amazon Web Services resource
|
1804
|
+
# associated with the activity that prompted GuardDuty to generate a
|
1805
|
+
# finding.
|
1786
1806
|
# @return [Types::Resource]
|
1787
1807
|
#
|
1788
1808
|
# @!attribute [rw] schema_version
|
@@ -2185,8 +2205,7 @@ module Aws::GuardDuty
|
|
2185
2205
|
# @return [String]
|
2186
2206
|
#
|
2187
2207
|
# @!attribute [rw] location
|
2188
|
-
# The URI of the file that contains the IPSet.
|
2189
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
2208
|
+
# The URI of the file that contains the IPSet.
|
2190
2209
|
# @return [String]
|
2191
2210
|
#
|
2192
2211
|
# @!attribute [rw] status
|
@@ -2384,8 +2403,7 @@ module Aws::GuardDuty
|
|
2384
2403
|
# @return [String]
|
2385
2404
|
#
|
2386
2405
|
# @!attribute [rw] location
|
2387
|
-
# The URI of the file that contains the ThreatIntelSet.
|
2388
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
2406
|
+
# The URI of the file that contains the ThreatIntelSet.
|
2389
2407
|
# @return [String]
|
2390
2408
|
#
|
2391
2409
|
# @!attribute [rw] status
|
@@ -2536,8 +2554,8 @@ module Aws::GuardDuty
|
|
2536
2554
|
# @return [String]
|
2537
2555
|
#
|
2538
2556
|
# @!attribute [rw] outpost_arn
|
2539
|
-
# The Amazon Resource Name (ARN) of the
|
2540
|
-
# to
|
2557
|
+
# The Amazon Resource Name (ARN) of the Amazon Web Services Outpost.
|
2558
|
+
# Only applicable to Amazon Web Services Outposts instances.
|
2541
2559
|
# @return [String]
|
2542
2560
|
#
|
2543
2561
|
# @!attribute [rw] launch_time
|
@@ -2903,8 +2921,6 @@ module Aws::GuardDuty
|
|
2903
2921
|
#
|
2904
2922
|
# * service.action.networkConnectionAction.protocol
|
2905
2923
|
#
|
2906
|
-
# * service.action.networkConnectionAction.remoteIpDetails.city.cityName
|
2907
|
-
#
|
2908
2924
|
# * service.action.networkConnectionAction.remoteIpDetails.country.countryName
|
2909
2925
|
#
|
2910
2926
|
# * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
|
@@ -3833,6 +3849,29 @@ module Aws::GuardDuty
|
|
3833
3849
|
include Aws::Structure
|
3834
3850
|
end
|
3835
3851
|
|
3852
|
+
# Contains details about the remote Amazon Web Services account that
|
3853
|
+
# made the API call.
|
3854
|
+
#
|
3855
|
+
# @!attribute [rw] account_id
|
3856
|
+
# The Amazon Web Services account ID of the remote API caller.
|
3857
|
+
# @return [String]
|
3858
|
+
#
|
3859
|
+
# @!attribute [rw] affiliated
|
3860
|
+
# Details on whether the Amazon Web Services account of the remote API
|
3861
|
+
# caller is related to your GuardDuty environment. If this value is
|
3862
|
+
# `True` the API caller is affiliated to your account in some way. If
|
3863
|
+
# it is `False` the API caller is from outside your environment.
|
3864
|
+
# @return [Boolean]
|
3865
|
+
#
|
3866
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/RemoteAccountDetails AWS API Documentation
|
3867
|
+
#
|
3868
|
+
class RemoteAccountDetails < Struct.new(
|
3869
|
+
:account_id,
|
3870
|
+
:affiliated)
|
3871
|
+
SENSITIVE = []
|
3872
|
+
include Aws::Structure
|
3873
|
+
end
|
3874
|
+
|
3836
3875
|
# Contains information about the remote IP address of the connection.
|
3837
3876
|
#
|
3838
3877
|
# @!attribute [rw] city
|
@@ -3886,8 +3925,8 @@ module Aws::GuardDuty
|
|
3886
3925
|
include Aws::Structure
|
3887
3926
|
end
|
3888
3927
|
|
3889
|
-
# Contains information about the
|
3890
|
-
# activity that prompted GuardDuty to generate a finding.
|
3928
|
+
# Contains information about the Amazon Web Services resource associated
|
3929
|
+
# with the activity that prompted GuardDuty to generate a finding.
|
3891
3930
|
#
|
3892
3931
|
# @!attribute [rw] access_key_details
|
3893
3932
|
# The IAM access key details (IAM user information) of a user that
|
@@ -3905,7 +3944,7 @@ module Aws::GuardDuty
|
|
3905
3944
|
# @return [Types::InstanceDetails]
|
3906
3945
|
#
|
3907
3946
|
# @!attribute [rw] resource_type
|
3908
|
-
# The type of
|
3947
|
+
# The type of Amazon Web Services resource.
|
3909
3948
|
# @return [String]
|
3910
3949
|
#
|
3911
3950
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Resource AWS API Documentation
|
@@ -4061,7 +4100,8 @@ module Aws::GuardDuty
|
|
4061
4100
|
# @return [String]
|
4062
4101
|
#
|
4063
4102
|
# @!attribute [rw] service_name
|
4064
|
-
# The name of the
|
4103
|
+
# The name of the Amazon Web Services service (GuardDuty) that
|
4104
|
+
# generated a finding.
|
4065
4105
|
# @return [String]
|
4066
4106
|
#
|
4067
4107
|
# @!attribute [rw] user_feedback
|
@@ -4317,7 +4357,7 @@ module Aws::GuardDuty
|
|
4317
4357
|
# Contains information about the accounts that weren't processed.
|
4318
4358
|
#
|
4319
4359
|
# @!attribute [rw] account_id
|
4320
|
-
# The
|
4360
|
+
# The Amazon Web Services account ID.
|
4321
4361
|
# @return [String]
|
4322
4362
|
#
|
4323
4363
|
# @!attribute [rw] result
|
@@ -4559,8 +4599,7 @@ module Aws::GuardDuty
|
|
4559
4599
|
# @return [String]
|
4560
4600
|
#
|
4561
4601
|
# @!attribute [rw] location
|
4562
|
-
# The updated URI of the file that contains the IPSet.
|
4563
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
4602
|
+
# The updated URI of the file that contains the IPSet.
|
4564
4603
|
# @return [String]
|
4565
4604
|
#
|
4566
4605
|
# @!attribute [rw] activate
|
@@ -4836,10 +4875,11 @@ module Aws::GuardDuty
|
|
4836
4875
|
include Aws::Structure
|
4837
4876
|
end
|
4838
4877
|
|
4839
|
-
# Contains information on the sum of usage based on an
|
4878
|
+
# Contains information on the sum of usage based on an Amazon Web
|
4879
|
+
# Services resource.
|
4840
4880
|
#
|
4841
4881
|
# @!attribute [rw] resource
|
4842
|
-
# The
|
4882
|
+
# The Amazon Web Services resource that generated usage.
|
4843
4883
|
# @return [String]
|
4844
4884
|
#
|
4845
4885
|
# @!attribute [rw] total
|
data/lib/aws-sdk-guardduty.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: aws-sdk-guardduty
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.
|
4
|
+
version: 1.53.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Amazon Web Services
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2022-01-20 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-core
|