aws-sdk-guardduty 1.60.0 → 1.62.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-guardduty/client.rb +29 -8
- data/lib/aws-sdk-guardduty/endpoint_parameters.rb +69 -0
- data/lib/aws-sdk-guardduty/endpoint_provider.rb +116 -0
- data/lib/aws-sdk-guardduty/endpoints.rb +925 -0
- data/lib/aws-sdk-guardduty/plugins/endpoints.rb +198 -0
- data/lib/aws-sdk-guardduty/types.rb +10 -1043
- data/lib/aws-sdk-guardduty.rb +5 -1
- metadata +8 -4
@@ -10,15 +10,6 @@
|
|
10
10
|
module Aws::GuardDuty
|
11
11
|
module Types
|
12
12
|
|
13
|
-
# @note When making an API call, you may pass AcceptAdministratorInvitationRequest
|
14
|
-
# data as a hash:
|
15
|
-
#
|
16
|
-
# {
|
17
|
-
# detector_id: "DetectorId", # required
|
18
|
-
# administrator_id: "String", # required
|
19
|
-
# invitation_id: "String", # required
|
20
|
-
# }
|
21
|
-
#
|
22
13
|
# @!attribute [rw] detector_id
|
23
14
|
# The unique ID of the detector of the GuardDuty member account.
|
24
15
|
# @return [String]
|
@@ -47,15 +38,6 @@ module Aws::GuardDuty
|
|
47
38
|
#
|
48
39
|
class AcceptAdministratorInvitationResponse < Aws::EmptyStructure; end
|
49
40
|
|
50
|
-
# @note When making an API call, you may pass AcceptInvitationRequest
|
51
|
-
# data as a hash:
|
52
|
-
#
|
53
|
-
# {
|
54
|
-
# detector_id: "DetectorId", # required
|
55
|
-
# master_id: "String", # required
|
56
|
-
# invitation_id: "String", # required
|
57
|
-
# }
|
58
|
-
#
|
59
41
|
# @!attribute [rw] detector_id
|
60
42
|
# The unique ID of the detector of the GuardDuty member account.
|
61
43
|
# @return [String]
|
@@ -137,14 +119,6 @@ module Aws::GuardDuty
|
|
137
119
|
|
138
120
|
# Contains information about the account.
|
139
121
|
#
|
140
|
-
# @note When making an API call, you may pass AccountDetail
|
141
|
-
# data as a hash:
|
142
|
-
#
|
143
|
-
# {
|
144
|
-
# account_id: "AccountId", # required
|
145
|
-
# email: "Email", # required
|
146
|
-
# }
|
147
|
-
#
|
148
122
|
# @!attribute [rw] account_id
|
149
123
|
# The member account ID.
|
150
124
|
# @return [String]
|
@@ -292,14 +266,6 @@ module Aws::GuardDuty
|
|
292
266
|
include Aws::Structure
|
293
267
|
end
|
294
268
|
|
295
|
-
# @note When making an API call, you may pass ArchiveFindingsRequest
|
296
|
-
# data as a hash:
|
297
|
-
#
|
298
|
-
# {
|
299
|
-
# detector_id: "DetectorId", # required
|
300
|
-
# finding_ids: ["FindingId"], # required
|
301
|
-
# }
|
302
|
-
#
|
303
269
|
# @!attribute [rw] detector_id
|
304
270
|
# The ID of the detector that specifies the GuardDuty service whose
|
305
271
|
# findings you want to archive.
|
@@ -516,24 +482,6 @@ module Aws::GuardDuty
|
|
516
482
|
|
517
483
|
# Contains information about the condition.
|
518
484
|
#
|
519
|
-
# @note When making an API call, you may pass Condition
|
520
|
-
# data as a hash:
|
521
|
-
#
|
522
|
-
# {
|
523
|
-
# eq: ["String"],
|
524
|
-
# neq: ["String"],
|
525
|
-
# gt: 1,
|
526
|
-
# gte: 1,
|
527
|
-
# lt: 1,
|
528
|
-
# lte: 1,
|
529
|
-
# equals: ["String"],
|
530
|
-
# not_equals: ["String"],
|
531
|
-
# greater_than: 1,
|
532
|
-
# greater_than_or_equal: 1,
|
533
|
-
# less_than: 1,
|
534
|
-
# less_than_or_equal: 1,
|
535
|
-
# }
|
536
|
-
#
|
537
485
|
# @!attribute [rw] eq
|
538
486
|
# Represents the *equal* condition to be applied to a single field
|
539
487
|
# when querying for findings.
|
@@ -681,33 +629,6 @@ module Aws::GuardDuty
|
|
681
629
|
include Aws::Structure
|
682
630
|
end
|
683
631
|
|
684
|
-
# @note When making an API call, you may pass CreateDetectorRequest
|
685
|
-
# data as a hash:
|
686
|
-
#
|
687
|
-
# {
|
688
|
-
# enable: false, # required
|
689
|
-
# client_token: "ClientToken",
|
690
|
-
# finding_publishing_frequency: "FIFTEEN_MINUTES", # accepts FIFTEEN_MINUTES, ONE_HOUR, SIX_HOURS
|
691
|
-
# data_sources: {
|
692
|
-
# s3_logs: {
|
693
|
-
# enable: false, # required
|
694
|
-
# },
|
695
|
-
# kubernetes: {
|
696
|
-
# audit_logs: { # required
|
697
|
-
# enable: false, # required
|
698
|
-
# },
|
699
|
-
# },
|
700
|
-
# malware_protection: {
|
701
|
-
# scan_ec2_instance_with_findings: {
|
702
|
-
# ebs_volumes: false,
|
703
|
-
# },
|
704
|
-
# },
|
705
|
-
# },
|
706
|
-
# tags: {
|
707
|
-
# "TagKey" => "TagValue",
|
708
|
-
# },
|
709
|
-
# }
|
710
|
-
#
|
711
632
|
# @!attribute [rw] enable
|
712
633
|
# A Boolean value that specifies whether the detector is to be
|
713
634
|
# enabled.
|
@@ -762,52 +683,21 @@ module Aws::GuardDuty
|
|
762
683
|
include Aws::Structure
|
763
684
|
end
|
764
685
|
|
765
|
-
# @note When making an API call, you may pass CreateFilterRequest
|
766
|
-
# data as a hash:
|
767
|
-
#
|
768
|
-
# {
|
769
|
-
# detector_id: "DetectorId", # required
|
770
|
-
# name: "FilterName", # required
|
771
|
-
# description: "FilterDescription",
|
772
|
-
# action: "NOOP", # accepts NOOP, ARCHIVE
|
773
|
-
# rank: 1,
|
774
|
-
# finding_criteria: { # required
|
775
|
-
# criterion: {
|
776
|
-
# "String" => {
|
777
|
-
# eq: ["String"],
|
778
|
-
# neq: ["String"],
|
779
|
-
# gt: 1,
|
780
|
-
# gte: 1,
|
781
|
-
# lt: 1,
|
782
|
-
# lte: 1,
|
783
|
-
# equals: ["String"],
|
784
|
-
# not_equals: ["String"],
|
785
|
-
# greater_than: 1,
|
786
|
-
# greater_than_or_equal: 1,
|
787
|
-
# less_than: 1,
|
788
|
-
# less_than_or_equal: 1,
|
789
|
-
# },
|
790
|
-
# },
|
791
|
-
# },
|
792
|
-
# client_token: "ClientToken",
|
793
|
-
# tags: {
|
794
|
-
# "TagKey" => "TagValue",
|
795
|
-
# },
|
796
|
-
# }
|
797
|
-
#
|
798
686
|
# @!attribute [rw] detector_id
|
799
687
|
# The ID of the detector belonging to the GuardDuty account that you
|
800
688
|
# want to create a filter for.
|
801
689
|
# @return [String]
|
802
690
|
#
|
803
691
|
# @!attribute [rw] name
|
804
|
-
# The name of the filter.
|
805
|
-
#
|
806
|
-
#
|
692
|
+
# The name of the filter. Valid characters include period (.),
|
693
|
+
# underscore (\_), dash (-), and alphanumeric characters. A whitespace
|
694
|
+
# is considered to be an invalid character.
|
807
695
|
# @return [String]
|
808
696
|
#
|
809
697
|
# @!attribute [rw] description
|
810
|
-
# The description of the filter.
|
698
|
+
# The description of the filter. Valid special characters include
|
699
|
+
# period (.), underscore (\_), dash (-), and whitespace. The new line
|
700
|
+
# character is considered to be an invalid input for description.
|
811
701
|
# @return [String]
|
812
702
|
#
|
813
703
|
# @!attribute [rw] action
|
@@ -989,21 +879,6 @@ module Aws::GuardDuty
|
|
989
879
|
include Aws::Structure
|
990
880
|
end
|
991
881
|
|
992
|
-
# @note When making an API call, you may pass CreateIPSetRequest
|
993
|
-
# data as a hash:
|
994
|
-
#
|
995
|
-
# {
|
996
|
-
# detector_id: "DetectorId", # required
|
997
|
-
# name: "Name", # required
|
998
|
-
# format: "TXT", # required, accepts TXT, STIX, OTX_CSV, ALIEN_VAULT, PROOF_POINT, FIRE_EYE
|
999
|
-
# location: "Location", # required
|
1000
|
-
# activate: false, # required
|
1001
|
-
# client_token: "ClientToken",
|
1002
|
-
# tags: {
|
1003
|
-
# "TagKey" => "TagValue",
|
1004
|
-
# },
|
1005
|
-
# }
|
1006
|
-
#
|
1007
882
|
# @!attribute [rw] detector_id
|
1008
883
|
# The unique ID of the detector of the GuardDuty account that you want
|
1009
884
|
# to create an IPSet for.
|
@@ -1066,19 +941,6 @@ module Aws::GuardDuty
|
|
1066
941
|
include Aws::Structure
|
1067
942
|
end
|
1068
943
|
|
1069
|
-
# @note When making an API call, you may pass CreateMembersRequest
|
1070
|
-
# data as a hash:
|
1071
|
-
#
|
1072
|
-
# {
|
1073
|
-
# detector_id: "DetectorId", # required
|
1074
|
-
# account_details: [ # required
|
1075
|
-
# {
|
1076
|
-
# account_id: "AccountId", # required
|
1077
|
-
# email: "Email", # required
|
1078
|
-
# },
|
1079
|
-
# ],
|
1080
|
-
# }
|
1081
|
-
#
|
1082
944
|
# @!attribute [rw] detector_id
|
1083
945
|
# The unique ID of the detector of the GuardDuty account that you want
|
1084
946
|
# to associate member accounts with.
|
@@ -1111,19 +973,6 @@ module Aws::GuardDuty
|
|
1111
973
|
include Aws::Structure
|
1112
974
|
end
|
1113
975
|
|
1114
|
-
# @note When making an API call, you may pass CreatePublishingDestinationRequest
|
1115
|
-
# data as a hash:
|
1116
|
-
#
|
1117
|
-
# {
|
1118
|
-
# detector_id: "DetectorId", # required
|
1119
|
-
# destination_type: "S3", # required, accepts S3
|
1120
|
-
# destination_properties: { # required
|
1121
|
-
# destination_arn: "String",
|
1122
|
-
# kms_key_arn: "String",
|
1123
|
-
# },
|
1124
|
-
# client_token: "ClientToken",
|
1125
|
-
# }
|
1126
|
-
#
|
1127
976
|
# @!attribute [rw] detector_id
|
1128
977
|
# The ID of the GuardDuty detector associated with the publishing
|
1129
978
|
# destination.
|
@@ -1169,14 +1018,6 @@ module Aws::GuardDuty
|
|
1169
1018
|
include Aws::Structure
|
1170
1019
|
end
|
1171
1020
|
|
1172
|
-
# @note When making an API call, you may pass CreateSampleFindingsRequest
|
1173
|
-
# data as a hash:
|
1174
|
-
#
|
1175
|
-
# {
|
1176
|
-
# detector_id: "DetectorId", # required
|
1177
|
-
# finding_types: ["FindingType"],
|
1178
|
-
# }
|
1179
|
-
#
|
1180
1021
|
# @!attribute [rw] detector_id
|
1181
1022
|
# The ID of the detector to create sample findings for.
|
1182
1023
|
# @return [String]
|
@@ -1198,21 +1039,6 @@ module Aws::GuardDuty
|
|
1198
1039
|
#
|
1199
1040
|
class CreateSampleFindingsResponse < Aws::EmptyStructure; end
|
1200
1041
|
|
1201
|
-
# @note When making an API call, you may pass CreateThreatIntelSetRequest
|
1202
|
-
# data as a hash:
|
1203
|
-
#
|
1204
|
-
# {
|
1205
|
-
# detector_id: "DetectorId", # required
|
1206
|
-
# name: "Name", # required
|
1207
|
-
# format: "TXT", # required, accepts TXT, STIX, OTX_CSV, ALIEN_VAULT, PROOF_POINT, FIRE_EYE
|
1208
|
-
# location: "Location", # required
|
1209
|
-
# activate: false, # required
|
1210
|
-
# client_token: "ClientToken",
|
1211
|
-
# tags: {
|
1212
|
-
# "TagKey" => "TagValue",
|
1213
|
-
# },
|
1214
|
-
# }
|
1215
|
-
#
|
1216
1042
|
# @!attribute [rw] detector_id
|
1217
1043
|
# The unique ID of the detector of the GuardDuty account that you want
|
1218
1044
|
# to create a threatIntelSet for.
|
@@ -1290,25 +1116,6 @@ module Aws::GuardDuty
|
|
1290
1116
|
|
1291
1117
|
# Contains information about which data sources are enabled.
|
1292
1118
|
#
|
1293
|
-
# @note When making an API call, you may pass DataSourceConfigurations
|
1294
|
-
# data as a hash:
|
1295
|
-
#
|
1296
|
-
# {
|
1297
|
-
# s3_logs: {
|
1298
|
-
# enable: false, # required
|
1299
|
-
# },
|
1300
|
-
# kubernetes: {
|
1301
|
-
# audit_logs: { # required
|
1302
|
-
# enable: false, # required
|
1303
|
-
# },
|
1304
|
-
# },
|
1305
|
-
# malware_protection: {
|
1306
|
-
# scan_ec2_instance_with_findings: {
|
1307
|
-
# ebs_volumes: false,
|
1308
|
-
# },
|
1309
|
-
# },
|
1310
|
-
# }
|
1311
|
-
#
|
1312
1119
|
# @!attribute [rw] s3_logs
|
1313
1120
|
# Describes whether S3 data event logs are enabled as a data source.
|
1314
1121
|
# @return [Types::S3LogsConfiguration]
|
@@ -1433,13 +1240,6 @@ module Aws::GuardDuty
|
|
1433
1240
|
include Aws::Structure
|
1434
1241
|
end
|
1435
1242
|
|
1436
|
-
# @note When making an API call, you may pass DeclineInvitationsRequest
|
1437
|
-
# data as a hash:
|
1438
|
-
#
|
1439
|
-
# {
|
1440
|
-
# account_ids: ["AccountId"], # required
|
1441
|
-
# }
|
1442
|
-
#
|
1443
1243
|
# @!attribute [rw] account_ids
|
1444
1244
|
# A list of account IDs of the Amazon Web Services accounts that sent
|
1445
1245
|
# invitations to the current member account that you want to decline
|
@@ -1492,13 +1292,6 @@ module Aws::GuardDuty
|
|
1492
1292
|
include Aws::Structure
|
1493
1293
|
end
|
1494
1294
|
|
1495
|
-
# @note When making an API call, you may pass DeleteDetectorRequest
|
1496
|
-
# data as a hash:
|
1497
|
-
#
|
1498
|
-
# {
|
1499
|
-
# detector_id: "DetectorId", # required
|
1500
|
-
# }
|
1501
|
-
#
|
1502
1295
|
# @!attribute [rw] detector_id
|
1503
1296
|
# The unique ID of the detector that you want to delete.
|
1504
1297
|
# @return [String]
|
@@ -1515,14 +1308,6 @@ module Aws::GuardDuty
|
|
1515
1308
|
#
|
1516
1309
|
class DeleteDetectorResponse < Aws::EmptyStructure; end
|
1517
1310
|
|
1518
|
-
# @note When making an API call, you may pass DeleteFilterRequest
|
1519
|
-
# data as a hash:
|
1520
|
-
#
|
1521
|
-
# {
|
1522
|
-
# detector_id: "DetectorId", # required
|
1523
|
-
# filter_name: "String", # required
|
1524
|
-
# }
|
1525
|
-
#
|
1526
1311
|
# @!attribute [rw] detector_id
|
1527
1312
|
# The unique ID of the detector that the filter is associated with.
|
1528
1313
|
# @return [String]
|
@@ -1544,14 +1329,6 @@ module Aws::GuardDuty
|
|
1544
1329
|
#
|
1545
1330
|
class DeleteFilterResponse < Aws::EmptyStructure; end
|
1546
1331
|
|
1547
|
-
# @note When making an API call, you may pass DeleteIPSetRequest
|
1548
|
-
# data as a hash:
|
1549
|
-
#
|
1550
|
-
# {
|
1551
|
-
# detector_id: "DetectorId", # required
|
1552
|
-
# ip_set_id: "String", # required
|
1553
|
-
# }
|
1554
|
-
#
|
1555
1332
|
# @!attribute [rw] detector_id
|
1556
1333
|
# The unique ID of the detector associated with the IPSet.
|
1557
1334
|
# @return [String]
|
@@ -1573,13 +1350,6 @@ module Aws::GuardDuty
|
|
1573
1350
|
#
|
1574
1351
|
class DeleteIPSetResponse < Aws::EmptyStructure; end
|
1575
1352
|
|
1576
|
-
# @note When making an API call, you may pass DeleteInvitationsRequest
|
1577
|
-
# data as a hash:
|
1578
|
-
#
|
1579
|
-
# {
|
1580
|
-
# account_ids: ["AccountId"], # required
|
1581
|
-
# }
|
1582
|
-
#
|
1583
1353
|
# @!attribute [rw] account_ids
|
1584
1354
|
# A list of account IDs of the Amazon Web Services accounts that sent
|
1585
1355
|
# invitations to the current member account that you want to delete
|
@@ -1607,14 +1377,6 @@ module Aws::GuardDuty
|
|
1607
1377
|
include Aws::Structure
|
1608
1378
|
end
|
1609
1379
|
|
1610
|
-
# @note When making an API call, you may pass DeleteMembersRequest
|
1611
|
-
# data as a hash:
|
1612
|
-
#
|
1613
|
-
# {
|
1614
|
-
# detector_id: "DetectorId", # required
|
1615
|
-
# account_ids: ["AccountId"], # required
|
1616
|
-
# }
|
1617
|
-
#
|
1618
1380
|
# @!attribute [rw] detector_id
|
1619
1381
|
# The unique ID of the detector of the GuardDuty account whose members
|
1620
1382
|
# you want to delete.
|
@@ -1646,14 +1408,6 @@ module Aws::GuardDuty
|
|
1646
1408
|
include Aws::Structure
|
1647
1409
|
end
|
1648
1410
|
|
1649
|
-
# @note When making an API call, you may pass DeletePublishingDestinationRequest
|
1650
|
-
# data as a hash:
|
1651
|
-
#
|
1652
|
-
# {
|
1653
|
-
# detector_id: "DetectorId", # required
|
1654
|
-
# destination_id: "String", # required
|
1655
|
-
# }
|
1656
|
-
#
|
1657
1411
|
# @!attribute [rw] detector_id
|
1658
1412
|
# The unique ID of the detector associated with the publishing
|
1659
1413
|
# destination to delete.
|
@@ -1676,14 +1430,6 @@ module Aws::GuardDuty
|
|
1676
1430
|
#
|
1677
1431
|
class DeletePublishingDestinationResponse < Aws::EmptyStructure; end
|
1678
1432
|
|
1679
|
-
# @note When making an API call, you may pass DeleteThreatIntelSetRequest
|
1680
|
-
# data as a hash:
|
1681
|
-
#
|
1682
|
-
# {
|
1683
|
-
# detector_id: "DetectorId", # required
|
1684
|
-
# threat_intel_set_id: "String", # required
|
1685
|
-
# }
|
1686
|
-
#
|
1687
1433
|
# @!attribute [rw] detector_id
|
1688
1434
|
# The unique ID of the detector that the threatIntelSet is associated
|
1689
1435
|
# with.
|
@@ -1706,31 +1452,6 @@ module Aws::GuardDuty
|
|
1706
1452
|
#
|
1707
1453
|
class DeleteThreatIntelSetResponse < Aws::EmptyStructure; end
|
1708
1454
|
|
1709
|
-
# @note When making an API call, you may pass DescribeMalwareScansRequest
|
1710
|
-
# data as a hash:
|
1711
|
-
#
|
1712
|
-
# {
|
1713
|
-
# detector_id: "DetectorId", # required
|
1714
|
-
# next_token: "String",
|
1715
|
-
# max_results: 1,
|
1716
|
-
# filter_criteria: {
|
1717
|
-
# filter_criterion: [
|
1718
|
-
# {
|
1719
|
-
# criterion_key: "EC2_INSTANCE_ARN", # accepts EC2_INSTANCE_ARN, SCAN_ID, ACCOUNT_ID, GUARDDUTY_FINDING_ID, SCAN_START_TIME, SCAN_STATUS
|
1720
|
-
# filter_condition: {
|
1721
|
-
# equals_value: "NonEmptyString",
|
1722
|
-
# greater_than: 1,
|
1723
|
-
# less_than: 1,
|
1724
|
-
# },
|
1725
|
-
# },
|
1726
|
-
# ],
|
1727
|
-
# },
|
1728
|
-
# sort_criteria: {
|
1729
|
-
# attribute_name: "String",
|
1730
|
-
# order_by: "ASC", # accepts ASC, DESC
|
1731
|
-
# },
|
1732
|
-
# }
|
1733
|
-
#
|
1734
1455
|
# @!attribute [rw] detector_id
|
1735
1456
|
# The unique ID of the detector that the request is associated with.
|
1736
1457
|
# @return [String]
|
@@ -1788,13 +1509,6 @@ module Aws::GuardDuty
|
|
1788
1509
|
include Aws::Structure
|
1789
1510
|
end
|
1790
1511
|
|
1791
|
-
# @note When making an API call, you may pass DescribeOrganizationConfigurationRequest
|
1792
|
-
# data as a hash:
|
1793
|
-
#
|
1794
|
-
# {
|
1795
|
-
# detector_id: "DetectorId", # required
|
1796
|
-
# }
|
1797
|
-
#
|
1798
1512
|
# @!attribute [rw] detector_id
|
1799
1513
|
# The ID of the detector to retrieve information about the delegated
|
1800
1514
|
# administrator from.
|
@@ -1834,14 +1548,6 @@ module Aws::GuardDuty
|
|
1834
1548
|
include Aws::Structure
|
1835
1549
|
end
|
1836
1550
|
|
1837
|
-
# @note When making an API call, you may pass DescribePublishingDestinationRequest
|
1838
|
-
# data as a hash:
|
1839
|
-
#
|
1840
|
-
# {
|
1841
|
-
# detector_id: "DetectorId", # required
|
1842
|
-
# destination_id: "String", # required
|
1843
|
-
# }
|
1844
|
-
#
|
1845
1551
|
# @!attribute [rw] detector_id
|
1846
1552
|
# The unique ID of the detector associated with the publishing
|
1847
1553
|
# destination to retrieve.
|
@@ -1925,14 +1631,6 @@ module Aws::GuardDuty
|
|
1925
1631
|
# such as an S3 bucket, and the ARN of the KMS key to use to encrypt
|
1926
1632
|
# published findings.
|
1927
1633
|
#
|
1928
|
-
# @note When making an API call, you may pass DestinationProperties
|
1929
|
-
# data as a hash:
|
1930
|
-
#
|
1931
|
-
# {
|
1932
|
-
# destination_arn: "String",
|
1933
|
-
# kms_key_arn: "String",
|
1934
|
-
# }
|
1935
|
-
#
|
1936
1634
|
# @!attribute [rw] destination_arn
|
1937
1635
|
# The ARN of the resource to publish to.
|
1938
1636
|
#
|
@@ -1953,13 +1651,6 @@ module Aws::GuardDuty
|
|
1953
1651
|
include Aws::Structure
|
1954
1652
|
end
|
1955
1653
|
|
1956
|
-
# @note When making an API call, you may pass DisableOrganizationAdminAccountRequest
|
1957
|
-
# data as a hash:
|
1958
|
-
#
|
1959
|
-
# {
|
1960
|
-
# admin_account_id: "String", # required
|
1961
|
-
# }
|
1962
|
-
#
|
1963
1654
|
# @!attribute [rw] admin_account_id
|
1964
1655
|
# The Amazon Web Services Account ID for the organizations account to
|
1965
1656
|
# be disabled as a GuardDuty delegated administrator.
|
@@ -1977,13 +1668,6 @@ module Aws::GuardDuty
|
|
1977
1668
|
#
|
1978
1669
|
class DisableOrganizationAdminAccountResponse < Aws::EmptyStructure; end
|
1979
1670
|
|
1980
|
-
# @note When making an API call, you may pass DisassociateFromAdministratorAccountRequest
|
1981
|
-
# data as a hash:
|
1982
|
-
#
|
1983
|
-
# {
|
1984
|
-
# detector_id: "DetectorId", # required
|
1985
|
-
# }
|
1986
|
-
#
|
1987
1671
|
# @!attribute [rw] detector_id
|
1988
1672
|
# The unique ID of the detector of the GuardDuty member account.
|
1989
1673
|
# @return [String]
|
@@ -2000,13 +1684,6 @@ module Aws::GuardDuty
|
|
2000
1684
|
#
|
2001
1685
|
class DisassociateFromAdministratorAccountResponse < Aws::EmptyStructure; end
|
2002
1686
|
|
2003
|
-
# @note When making an API call, you may pass DisassociateFromMasterAccountRequest
|
2004
|
-
# data as a hash:
|
2005
|
-
#
|
2006
|
-
# {
|
2007
|
-
# detector_id: "DetectorId", # required
|
2008
|
-
# }
|
2009
|
-
#
|
2010
1687
|
# @!attribute [rw] detector_id
|
2011
1688
|
# The unique ID of the detector of the GuardDuty member account.
|
2012
1689
|
# @return [String]
|
@@ -2023,14 +1700,6 @@ module Aws::GuardDuty
|
|
2023
1700
|
#
|
2024
1701
|
class DisassociateFromMasterAccountResponse < Aws::EmptyStructure; end
|
2025
1702
|
|
2026
|
-
# @note When making an API call, you may pass DisassociateMembersRequest
|
2027
|
-
# data as a hash:
|
2028
|
-
#
|
2029
|
-
# {
|
2030
|
-
# detector_id: "DetectorId", # required
|
2031
|
-
# account_ids: ["AccountId"], # required
|
2032
|
-
# }
|
2033
|
-
#
|
2034
1703
|
# @!attribute [rw] detector_id
|
2035
1704
|
# The unique ID of the detector of the GuardDuty account whose members
|
2036
1705
|
# you want to disassociate from the administrator account.
|
@@ -2329,13 +1998,6 @@ module Aws::GuardDuty
|
|
2329
1998
|
include Aws::Structure
|
2330
1999
|
end
|
2331
2000
|
|
2332
|
-
# @note When making an API call, you may pass EnableOrganizationAdminAccountRequest
|
2333
|
-
# data as a hash:
|
2334
|
-
#
|
2335
|
-
# {
|
2336
|
-
# admin_account_id: "String", # required
|
2337
|
-
# }
|
2338
|
-
#
|
2339
2001
|
# @!attribute [rw] admin_account_id
|
2340
2002
|
# The Amazon Web Services Account ID for the organization account to
|
2341
2003
|
# be enabled as a GuardDuty delegated administrator.
|
@@ -2369,15 +2031,6 @@ module Aws::GuardDuty
|
|
2369
2031
|
|
2370
2032
|
# Contains information about the condition.
|
2371
2033
|
#
|
2372
|
-
# @note When making an API call, you may pass FilterCondition
|
2373
|
-
# data as a hash:
|
2374
|
-
#
|
2375
|
-
# {
|
2376
|
-
# equals_value: "NonEmptyString",
|
2377
|
-
# greater_than: 1,
|
2378
|
-
# less_than: 1,
|
2379
|
-
# }
|
2380
|
-
#
|
2381
2034
|
# @!attribute [rw] equals_value
|
2382
2035
|
# Represents an *equal* **** condition to be applied to a single field
|
2383
2036
|
# when querying for scan entries.
|
@@ -2406,22 +2059,6 @@ module Aws::GuardDuty
|
|
2406
2059
|
# Represents the criteria to be used in the filter for describing scan
|
2407
2060
|
# entries.
|
2408
2061
|
#
|
2409
|
-
# @note When making an API call, you may pass FilterCriteria
|
2410
|
-
# data as a hash:
|
2411
|
-
#
|
2412
|
-
# {
|
2413
|
-
# filter_criterion: [
|
2414
|
-
# {
|
2415
|
-
# criterion_key: "EC2_INSTANCE_ARN", # accepts EC2_INSTANCE_ARN, SCAN_ID, ACCOUNT_ID, GUARDDUTY_FINDING_ID, SCAN_START_TIME, SCAN_STATUS
|
2416
|
-
# filter_condition: {
|
2417
|
-
# equals_value: "NonEmptyString",
|
2418
|
-
# greater_than: 1,
|
2419
|
-
# less_than: 1,
|
2420
|
-
# },
|
2421
|
-
# },
|
2422
|
-
# ],
|
2423
|
-
# }
|
2424
|
-
#
|
2425
2062
|
# @!attribute [rw] filter_criterion
|
2426
2063
|
# Represents a condition that when matched will be added to the
|
2427
2064
|
# response of the operation.
|
@@ -2441,18 +2078,6 @@ module Aws::GuardDuty
|
|
2441
2078
|
# accounts. However, each member account can view the scan entries only
|
2442
2079
|
# for their own account.
|
2443
2080
|
#
|
2444
|
-
# @note When making an API call, you may pass FilterCriterion
|
2445
|
-
# data as a hash:
|
2446
|
-
#
|
2447
|
-
# {
|
2448
|
-
# criterion_key: "EC2_INSTANCE_ARN", # accepts EC2_INSTANCE_ARN, SCAN_ID, ACCOUNT_ID, GUARDDUTY_FINDING_ID, SCAN_START_TIME, SCAN_STATUS
|
2449
|
-
# filter_condition: {
|
2450
|
-
# equals_value: "NonEmptyString",
|
2451
|
-
# greater_than: 1,
|
2452
|
-
# less_than: 1,
|
2453
|
-
# },
|
2454
|
-
# }
|
2455
|
-
#
|
2456
2081
|
# @!attribute [rw] criterion_key
|
2457
2082
|
# An enum value representing possible scan properties to match with
|
2458
2083
|
# given scan entries.
|
@@ -2560,28 +2185,6 @@ module Aws::GuardDuty
|
|
2560
2185
|
|
2561
2186
|
# Contains information about the criteria used for querying findings.
|
2562
2187
|
#
|
2563
|
-
# @note When making an API call, you may pass FindingCriteria
|
2564
|
-
# data as a hash:
|
2565
|
-
#
|
2566
|
-
# {
|
2567
|
-
# criterion: {
|
2568
|
-
# "String" => {
|
2569
|
-
# eq: ["String"],
|
2570
|
-
# neq: ["String"],
|
2571
|
-
# gt: 1,
|
2572
|
-
# gte: 1,
|
2573
|
-
# lt: 1,
|
2574
|
-
# lte: 1,
|
2575
|
-
# equals: ["String"],
|
2576
|
-
# not_equals: ["String"],
|
2577
|
-
# greater_than: 1,
|
2578
|
-
# greater_than_or_equal: 1,
|
2579
|
-
# less_than: 1,
|
2580
|
-
# less_than_or_equal: 1,
|
2581
|
-
# },
|
2582
|
-
# },
|
2583
|
-
# }
|
2584
|
-
#
|
2585
2188
|
# @!attribute [rw] criterion
|
2586
2189
|
# Represents a map of finding properties that match specified
|
2587
2190
|
# conditions and values when querying findings.
|
@@ -2643,13 +2246,6 @@ module Aws::GuardDuty
|
|
2643
2246
|
include Aws::Structure
|
2644
2247
|
end
|
2645
2248
|
|
2646
|
-
# @note When making an API call, you may pass GetAdministratorAccountRequest
|
2647
|
-
# data as a hash:
|
2648
|
-
#
|
2649
|
-
# {
|
2650
|
-
# detector_id: "DetectorId", # required
|
2651
|
-
# }
|
2652
|
-
#
|
2653
2249
|
# @!attribute [rw] detector_id
|
2654
2250
|
# The unique ID of the detector of the GuardDuty member account.
|
2655
2251
|
# @return [String]
|
@@ -2674,13 +2270,6 @@ module Aws::GuardDuty
|
|
2674
2270
|
include Aws::Structure
|
2675
2271
|
end
|
2676
2272
|
|
2677
|
-
# @note When making an API call, you may pass GetDetectorRequest
|
2678
|
-
# data as a hash:
|
2679
|
-
#
|
2680
|
-
# {
|
2681
|
-
# detector_id: "DetectorId", # required
|
2682
|
-
# }
|
2683
|
-
#
|
2684
2273
|
# @!attribute [rw] detector_id
|
2685
2274
|
# The unique ID of the detector that you want to get.
|
2686
2275
|
# @return [String]
|
@@ -2735,14 +2324,6 @@ module Aws::GuardDuty
|
|
2735
2324
|
include Aws::Structure
|
2736
2325
|
end
|
2737
2326
|
|
2738
|
-
# @note When making an API call, you may pass GetFilterRequest
|
2739
|
-
# data as a hash:
|
2740
|
-
#
|
2741
|
-
# {
|
2742
|
-
# detector_id: "DetectorId", # required
|
2743
|
-
# filter_name: "String", # required
|
2744
|
-
# }
|
2745
|
-
#
|
2746
2327
|
# @!attribute [rw] detector_id
|
2747
2328
|
# The unique ID of the detector that the filter is associated with.
|
2748
2329
|
# @return [String]
|
@@ -2801,18 +2382,6 @@ module Aws::GuardDuty
|
|
2801
2382
|
include Aws::Structure
|
2802
2383
|
end
|
2803
2384
|
|
2804
|
-
# @note When making an API call, you may pass GetFindingsRequest
|
2805
|
-
# data as a hash:
|
2806
|
-
#
|
2807
|
-
# {
|
2808
|
-
# detector_id: "DetectorId", # required
|
2809
|
-
# finding_ids: ["FindingId"], # required
|
2810
|
-
# sort_criteria: {
|
2811
|
-
# attribute_name: "String",
|
2812
|
-
# order_by: "ASC", # accepts ASC, DESC
|
2813
|
-
# },
|
2814
|
-
# }
|
2815
|
-
#
|
2816
2385
|
# @!attribute [rw] detector_id
|
2817
2386
|
# The ID of the detector that specifies the GuardDuty service whose
|
2818
2387
|
# findings you want to retrieve.
|
@@ -2848,32 +2417,6 @@ module Aws::GuardDuty
|
|
2848
2417
|
include Aws::Structure
|
2849
2418
|
end
|
2850
2419
|
|
2851
|
-
# @note When making an API call, you may pass GetFindingsStatisticsRequest
|
2852
|
-
# data as a hash:
|
2853
|
-
#
|
2854
|
-
# {
|
2855
|
-
# detector_id: "DetectorId", # required
|
2856
|
-
# finding_statistic_types: ["COUNT_BY_SEVERITY"], # required, accepts COUNT_BY_SEVERITY
|
2857
|
-
# finding_criteria: {
|
2858
|
-
# criterion: {
|
2859
|
-
# "String" => {
|
2860
|
-
# eq: ["String"],
|
2861
|
-
# neq: ["String"],
|
2862
|
-
# gt: 1,
|
2863
|
-
# gte: 1,
|
2864
|
-
# lt: 1,
|
2865
|
-
# lte: 1,
|
2866
|
-
# equals: ["String"],
|
2867
|
-
# not_equals: ["String"],
|
2868
|
-
# greater_than: 1,
|
2869
|
-
# greater_than_or_equal: 1,
|
2870
|
-
# less_than: 1,
|
2871
|
-
# less_than_or_equal: 1,
|
2872
|
-
# },
|
2873
|
-
# },
|
2874
|
-
# },
|
2875
|
-
# }
|
2876
|
-
#
|
2877
2420
|
# @!attribute [rw] detector_id
|
2878
2421
|
# The ID of the detector that specifies the GuardDuty service whose
|
2879
2422
|
# findings' statistics you want to retrieve.
|
@@ -2909,14 +2452,6 @@ module Aws::GuardDuty
|
|
2909
2452
|
include Aws::Structure
|
2910
2453
|
end
|
2911
2454
|
|
2912
|
-
# @note When making an API call, you may pass GetIPSetRequest
|
2913
|
-
# data as a hash:
|
2914
|
-
#
|
2915
|
-
# {
|
2916
|
-
# detector_id: "DetectorId", # required
|
2917
|
-
# ip_set_id: "String", # required
|
2918
|
-
# }
|
2919
|
-
#
|
2920
2455
|
# @!attribute [rw] detector_id
|
2921
2456
|
# The unique ID of the detector that the IPSet is associated with.
|
2922
2457
|
# @return [String]
|
@@ -2984,13 +2519,6 @@ module Aws::GuardDuty
|
|
2984
2519
|
include Aws::Structure
|
2985
2520
|
end
|
2986
2521
|
|
2987
|
-
# @note When making an API call, you may pass GetMalwareScanSettingsRequest
|
2988
|
-
# data as a hash:
|
2989
|
-
#
|
2990
|
-
# {
|
2991
|
-
# detector_id: "DetectorId", # required
|
2992
|
-
# }
|
2993
|
-
#
|
2994
2522
|
# @!attribute [rw] detector_id
|
2995
2523
|
# The unique ID of the detector that the scan setting is associated
|
2996
2524
|
# with.
|
@@ -3022,13 +2550,6 @@ module Aws::GuardDuty
|
|
3022
2550
|
include Aws::Structure
|
3023
2551
|
end
|
3024
2552
|
|
3025
|
-
# @note When making an API call, you may pass GetMasterAccountRequest
|
3026
|
-
# data as a hash:
|
3027
|
-
#
|
3028
|
-
# {
|
3029
|
-
# detector_id: "DetectorId", # required
|
3030
|
-
# }
|
3031
|
-
#
|
3032
2553
|
# @!attribute [rw] detector_id
|
3033
2554
|
# The unique ID of the detector of the GuardDuty member account.
|
3034
2555
|
# @return [String]
|
@@ -3053,14 +2574,6 @@ module Aws::GuardDuty
|
|
3053
2574
|
include Aws::Structure
|
3054
2575
|
end
|
3055
2576
|
|
3056
|
-
# @note When making an API call, you may pass GetMemberDetectorsRequest
|
3057
|
-
# data as a hash:
|
3058
|
-
#
|
3059
|
-
# {
|
3060
|
-
# detector_id: "DetectorId", # required
|
3061
|
-
# account_ids: ["AccountId"], # required
|
3062
|
-
# }
|
3063
|
-
#
|
3064
2577
|
# @!attribute [rw] detector_id
|
3065
2578
|
# The detector ID for the administrator account.
|
3066
2579
|
# @return [String]
|
@@ -3097,14 +2610,6 @@ module Aws::GuardDuty
|
|
3097
2610
|
include Aws::Structure
|
3098
2611
|
end
|
3099
2612
|
|
3100
|
-
# @note When making an API call, you may pass GetMembersRequest
|
3101
|
-
# data as a hash:
|
3102
|
-
#
|
3103
|
-
# {
|
3104
|
-
# detector_id: "DetectorId", # required
|
3105
|
-
# account_ids: ["AccountId"], # required
|
3106
|
-
# }
|
3107
|
-
#
|
3108
2613
|
# @!attribute [rw] detector_id
|
3109
2614
|
# The unique ID of the detector of the GuardDuty account whose members
|
3110
2615
|
# you want to retrieve.
|
@@ -3142,14 +2647,6 @@ module Aws::GuardDuty
|
|
3142
2647
|
include Aws::Structure
|
3143
2648
|
end
|
3144
2649
|
|
3145
|
-
# @note When making an API call, you may pass GetRemainingFreeTrialDaysRequest
|
3146
|
-
# data as a hash:
|
3147
|
-
#
|
3148
|
-
# {
|
3149
|
-
# detector_id: "DetectorId", # required
|
3150
|
-
# account_ids: ["AccountId"],
|
3151
|
-
# }
|
3152
|
-
#
|
3153
2650
|
# @!attribute [rw] detector_id
|
3154
2651
|
# The unique ID of the detector of the GuardDuty member account.
|
3155
2652
|
# @return [String]
|
@@ -3186,14 +2683,6 @@ module Aws::GuardDuty
|
|
3186
2683
|
include Aws::Structure
|
3187
2684
|
end
|
3188
2685
|
|
3189
|
-
# @note When making an API call, you may pass GetThreatIntelSetRequest
|
3190
|
-
# data as a hash:
|
3191
|
-
#
|
3192
|
-
# {
|
3193
|
-
# detector_id: "DetectorId", # required
|
3194
|
-
# threat_intel_set_id: "String", # required
|
3195
|
-
# }
|
3196
|
-
#
|
3197
2686
|
# @!attribute [rw] detector_id
|
3198
2687
|
# The unique ID of the detector that the threatIntelSet is associated
|
3199
2688
|
# with.
|
@@ -3246,22 +2735,6 @@ module Aws::GuardDuty
|
|
3246
2735
|
include Aws::Structure
|
3247
2736
|
end
|
3248
2737
|
|
3249
|
-
# @note When making an API call, you may pass GetUsageStatisticsRequest
|
3250
|
-
# data as a hash:
|
3251
|
-
#
|
3252
|
-
# {
|
3253
|
-
# detector_id: "DetectorId", # required
|
3254
|
-
# usage_statistic_type: "SUM_BY_ACCOUNT", # required, accepts SUM_BY_ACCOUNT, SUM_BY_DATA_SOURCE, SUM_BY_RESOURCE, TOP_RESOURCES
|
3255
|
-
# usage_criteria: { # required
|
3256
|
-
# account_ids: ["AccountId"],
|
3257
|
-
# data_sources: ["FLOW_LOGS"], # required, accepts FLOW_LOGS, CLOUD_TRAIL, DNS_LOGS, S3_LOGS, KUBERNETES_AUDIT_LOGS, EC2_MALWARE_SCAN
|
3258
|
-
# resources: ["String"],
|
3259
|
-
# },
|
3260
|
-
# unit: "String",
|
3261
|
-
# max_results: 1,
|
3262
|
-
# next_token: "String",
|
3263
|
-
# }
|
3264
|
-
#
|
3265
2738
|
# @!attribute [rw] detector_id
|
3266
2739
|
# The ID of the detector that specifies the GuardDuty service whose
|
3267
2740
|
# usage statistics you want to retrieve.
|
@@ -3510,16 +2983,6 @@ module Aws::GuardDuty
|
|
3510
2983
|
include Aws::Structure
|
3511
2984
|
end
|
3512
2985
|
|
3513
|
-
# @note When making an API call, you may pass InviteMembersRequest
|
3514
|
-
# data as a hash:
|
3515
|
-
#
|
3516
|
-
# {
|
3517
|
-
# detector_id: "DetectorId", # required
|
3518
|
-
# account_ids: ["AccountId"], # required
|
3519
|
-
# disable_email_notification: false,
|
3520
|
-
# message: "String",
|
3521
|
-
# }
|
3522
|
-
#
|
3523
2986
|
# @!attribute [rw] detector_id
|
3524
2987
|
# The unique ID of the detector of the GuardDuty account that you want
|
3525
2988
|
# to invite members with.
|
@@ -3613,13 +3076,6 @@ module Aws::GuardDuty
|
|
3613
3076
|
|
3614
3077
|
# Describes whether Kubernetes audit logs are enabled as a data source.
|
3615
3078
|
#
|
3616
|
-
# @note When making an API call, you may pass KubernetesAuditLogsConfiguration
|
3617
|
-
# data as a hash:
|
3618
|
-
#
|
3619
|
-
# {
|
3620
|
-
# enable: false, # required
|
3621
|
-
# }
|
3622
|
-
#
|
3623
3079
|
# @!attribute [rw] enable
|
3624
3080
|
# The status of Kubernetes audit logs as a data source.
|
3625
3081
|
# @return [Boolean]
|
@@ -3649,15 +3105,6 @@ module Aws::GuardDuty
|
|
3649
3105
|
|
3650
3106
|
# Describes whether any Kubernetes data sources are enabled.
|
3651
3107
|
#
|
3652
|
-
# @note When making an API call, you may pass KubernetesConfiguration
|
3653
|
-
# data as a hash:
|
3654
|
-
#
|
3655
|
-
# {
|
3656
|
-
# audit_logs: { # required
|
3657
|
-
# enable: false, # required
|
3658
|
-
# },
|
3659
|
-
# }
|
3660
|
-
#
|
3661
3108
|
# @!attribute [rw] audit_logs
|
3662
3109
|
# The status of Kubernetes audit logs as a data source.
|
3663
3110
|
# @return [Types::KubernetesAuditLogsConfiguration]
|
@@ -3793,14 +3240,6 @@ module Aws::GuardDuty
|
|
3793
3240
|
include Aws::Structure
|
3794
3241
|
end
|
3795
3242
|
|
3796
|
-
# @note When making an API call, you may pass ListDetectorsRequest
|
3797
|
-
# data as a hash:
|
3798
|
-
#
|
3799
|
-
# {
|
3800
|
-
# max_results: 1,
|
3801
|
-
# next_token: "String",
|
3802
|
-
# }
|
3803
|
-
#
|
3804
3243
|
# @!attribute [rw] max_results
|
3805
3244
|
# You can use this parameter to indicate the maximum number of items
|
3806
3245
|
# that you want in the response. The default value is 50. The maximum
|
@@ -3842,15 +3281,6 @@ module Aws::GuardDuty
|
|
3842
3281
|
include Aws::Structure
|
3843
3282
|
end
|
3844
3283
|
|
3845
|
-
# @note When making an API call, you may pass ListFiltersRequest
|
3846
|
-
# data as a hash:
|
3847
|
-
#
|
3848
|
-
# {
|
3849
|
-
# detector_id: "DetectorId", # required
|
3850
|
-
# max_results: 1,
|
3851
|
-
# next_token: "String",
|
3852
|
-
# }
|
3853
|
-
#
|
3854
3284
|
# @!attribute [rw] detector_id
|
3855
3285
|
# The unique ID of the detector that the filter is associated with.
|
3856
3286
|
# @return [String]
|
@@ -3897,37 +3327,6 @@ module Aws::GuardDuty
|
|
3897
3327
|
include Aws::Structure
|
3898
3328
|
end
|
3899
3329
|
|
3900
|
-
# @note When making an API call, you may pass ListFindingsRequest
|
3901
|
-
# data as a hash:
|
3902
|
-
#
|
3903
|
-
# {
|
3904
|
-
# detector_id: "DetectorId", # required
|
3905
|
-
# finding_criteria: {
|
3906
|
-
# criterion: {
|
3907
|
-
# "String" => {
|
3908
|
-
# eq: ["String"],
|
3909
|
-
# neq: ["String"],
|
3910
|
-
# gt: 1,
|
3911
|
-
# gte: 1,
|
3912
|
-
# lt: 1,
|
3913
|
-
# lte: 1,
|
3914
|
-
# equals: ["String"],
|
3915
|
-
# not_equals: ["String"],
|
3916
|
-
# greater_than: 1,
|
3917
|
-
# greater_than_or_equal: 1,
|
3918
|
-
# less_than: 1,
|
3919
|
-
# less_than_or_equal: 1,
|
3920
|
-
# },
|
3921
|
-
# },
|
3922
|
-
# },
|
3923
|
-
# sort_criteria: {
|
3924
|
-
# attribute_name: "String",
|
3925
|
-
# order_by: "ASC", # accepts ASC, DESC
|
3926
|
-
# },
|
3927
|
-
# max_results: 1,
|
3928
|
-
# next_token: "String",
|
3929
|
-
# }
|
3930
|
-
#
|
3931
3330
|
# @!attribute [rw] detector_id
|
3932
3331
|
# The ID of the detector that specifies the GuardDuty service whose
|
3933
3332
|
# findings you want to list.
|
@@ -4089,15 +3488,6 @@ module Aws::GuardDuty
|
|
4089
3488
|
include Aws::Structure
|
4090
3489
|
end
|
4091
3490
|
|
4092
|
-
# @note When making an API call, you may pass ListIPSetsRequest
|
4093
|
-
# data as a hash:
|
4094
|
-
#
|
4095
|
-
# {
|
4096
|
-
# detector_id: "DetectorId", # required
|
4097
|
-
# max_results: 1,
|
4098
|
-
# next_token: "String",
|
4099
|
-
# }
|
4100
|
-
#
|
4101
3491
|
# @!attribute [rw] detector_id
|
4102
3492
|
# The unique ID of the detector that the IPSet is associated with.
|
4103
3493
|
# @return [String]
|
@@ -4144,14 +3534,6 @@ module Aws::GuardDuty
|
|
4144
3534
|
include Aws::Structure
|
4145
3535
|
end
|
4146
3536
|
|
4147
|
-
# @note When making an API call, you may pass ListInvitationsRequest
|
4148
|
-
# data as a hash:
|
4149
|
-
#
|
4150
|
-
# {
|
4151
|
-
# max_results: 1,
|
4152
|
-
# next_token: "String",
|
4153
|
-
# }
|
4154
|
-
#
|
4155
3537
|
# @!attribute [rw] max_results
|
4156
3538
|
# You can use this parameter to indicate the maximum number of items
|
4157
3539
|
# that you want in the response. The default value is 50. The maximum
|
@@ -4193,16 +3575,6 @@ module Aws::GuardDuty
|
|
4193
3575
|
include Aws::Structure
|
4194
3576
|
end
|
4195
3577
|
|
4196
|
-
# @note When making an API call, you may pass ListMembersRequest
|
4197
|
-
# data as a hash:
|
4198
|
-
#
|
4199
|
-
# {
|
4200
|
-
# detector_id: "DetectorId", # required
|
4201
|
-
# max_results: 1,
|
4202
|
-
# next_token: "String",
|
4203
|
-
# only_associated: "String",
|
4204
|
-
# }
|
4205
|
-
#
|
4206
3578
|
# @!attribute [rw] detector_id
|
4207
3579
|
# The unique ID of the detector the member is associated with.
|
4208
3580
|
# @return [String]
|
@@ -4262,14 +3634,6 @@ module Aws::GuardDuty
|
|
4262
3634
|
include Aws::Structure
|
4263
3635
|
end
|
4264
3636
|
|
4265
|
-
# @note When making an API call, you may pass ListOrganizationAdminAccountsRequest
|
4266
|
-
# data as a hash:
|
4267
|
-
#
|
4268
|
-
# {
|
4269
|
-
# max_results: 1,
|
4270
|
-
# next_token: "String",
|
4271
|
-
# }
|
4272
|
-
#
|
4273
3637
|
# @!attribute [rw] max_results
|
4274
3638
|
# The maximum number of results to return in the response.
|
4275
3639
|
# @return [Integer]
|
@@ -4309,15 +3673,6 @@ module Aws::GuardDuty
|
|
4309
3673
|
include Aws::Structure
|
4310
3674
|
end
|
4311
3675
|
|
4312
|
-
# @note When making an API call, you may pass ListPublishingDestinationsRequest
|
4313
|
-
# data as a hash:
|
4314
|
-
#
|
4315
|
-
# {
|
4316
|
-
# detector_id: "DetectorId", # required
|
4317
|
-
# max_results: 1,
|
4318
|
-
# next_token: "String",
|
4319
|
-
# }
|
4320
|
-
#
|
4321
3676
|
# @!attribute [rw] detector_id
|
4322
3677
|
# The ID of the detector to retrieve publishing destinations for.
|
4323
3678
|
# @return [String]
|
@@ -4366,13 +3721,6 @@ module Aws::GuardDuty
|
|
4366
3721
|
include Aws::Structure
|
4367
3722
|
end
|
4368
3723
|
|
4369
|
-
# @note When making an API call, you may pass ListTagsForResourceRequest
|
4370
|
-
# data as a hash:
|
4371
|
-
#
|
4372
|
-
# {
|
4373
|
-
# resource_arn: "GuardDutyArn", # required
|
4374
|
-
# }
|
4375
|
-
#
|
4376
3724
|
# @!attribute [rw] resource_arn
|
4377
3725
|
# The Amazon Resource Name (ARN) for the given GuardDuty resource.
|
4378
3726
|
# @return [String]
|
@@ -4397,15 +3745,6 @@ module Aws::GuardDuty
|
|
4397
3745
|
include Aws::Structure
|
4398
3746
|
end
|
4399
3747
|
|
4400
|
-
# @note When making an API call, you may pass ListThreatIntelSetsRequest
|
4401
|
-
# data as a hash:
|
4402
|
-
#
|
4403
|
-
# {
|
4404
|
-
# detector_id: "DetectorId", # required
|
4405
|
-
# max_results: 1,
|
4406
|
-
# next_token: "String",
|
4407
|
-
# }
|
4408
|
-
#
|
4409
3748
|
# @!attribute [rw] detector_id
|
4410
3749
|
# The unique ID of the detector that the threatIntelSet is associated
|
4411
3750
|
# with.
|
@@ -4488,15 +3827,6 @@ module Aws::GuardDuty
|
|
4488
3827
|
|
4489
3828
|
# Describes whether Malware Protection will be enabled as a data source.
|
4490
3829
|
#
|
4491
|
-
# @note When making an API call, you may pass MalwareProtectionConfiguration
|
4492
|
-
# data as a hash:
|
4493
|
-
#
|
4494
|
-
# {
|
4495
|
-
# scan_ec2_instance_with_findings: {
|
4496
|
-
# ebs_volumes: false,
|
4497
|
-
# },
|
4498
|
-
# }
|
4499
|
-
#
|
4500
3830
|
# @!attribute [rw] scan_ec2_instance_with_findings
|
4501
3831
|
# Describes the configuration of Malware Protection for EC2 instances
|
4502
3832
|
# with findings.
|
@@ -4789,27 +4119,6 @@ module Aws::GuardDuty
|
|
4789
4119
|
# configured to be automatically enabled for new members within the
|
4790
4120
|
# organization.
|
4791
4121
|
#
|
4792
|
-
# @note When making an API call, you may pass OrganizationDataSourceConfigurations
|
4793
|
-
# data as a hash:
|
4794
|
-
#
|
4795
|
-
# {
|
4796
|
-
# s3_logs: {
|
4797
|
-
# auto_enable: false, # required
|
4798
|
-
# },
|
4799
|
-
# kubernetes: {
|
4800
|
-
# audit_logs: { # required
|
4801
|
-
# auto_enable: false, # required
|
4802
|
-
# },
|
4803
|
-
# },
|
4804
|
-
# malware_protection: {
|
4805
|
-
# scan_ec2_instance_with_findings: {
|
4806
|
-
# ebs_volumes: {
|
4807
|
-
# auto_enable: false,
|
4808
|
-
# },
|
4809
|
-
# },
|
4810
|
-
# },
|
4811
|
-
# }
|
4812
|
-
#
|
4813
4122
|
# @!attribute [rw] s3_logs
|
4814
4123
|
# Describes whether S3 data event logs are enabled for new members of
|
4815
4124
|
# the organization.
|
@@ -4863,13 +4172,6 @@ module Aws::GuardDuty
|
|
4863
4172
|
|
4864
4173
|
# Organization-wide EBS volumes scan configuration.
|
4865
4174
|
#
|
4866
|
-
# @note When making an API call, you may pass OrganizationEbsVolumes
|
4867
|
-
# data as a hash:
|
4868
|
-
#
|
4869
|
-
# {
|
4870
|
-
# auto_enable: false,
|
4871
|
-
# }
|
4872
|
-
#
|
4873
4175
|
# @!attribute [rw] auto_enable
|
4874
4176
|
# Whether scanning EBS volumes should be auto-enabled for new members
|
4875
4177
|
# joining the organization.
|
@@ -4901,13 +4203,6 @@ module Aws::GuardDuty
|
|
4901
4203
|
|
4902
4204
|
# Organization-wide Kubernetes audit logs configuration.
|
4903
4205
|
#
|
4904
|
-
# @note When making an API call, you may pass OrganizationKubernetesAuditLogsConfiguration
|
4905
|
-
# data as a hash:
|
4906
|
-
#
|
4907
|
-
# {
|
4908
|
-
# auto_enable: false, # required
|
4909
|
-
# }
|
4910
|
-
#
|
4911
4206
|
# @!attribute [rw] auto_enable
|
4912
4207
|
# A value that contains information on whether Kubernetes audit logs
|
4913
4208
|
# should be enabled automatically as a data source for the
|
@@ -4940,15 +4235,6 @@ module Aws::GuardDuty
|
|
4940
4235
|
|
4941
4236
|
# Organization-wide Kubernetes data sources configurations.
|
4942
4237
|
#
|
4943
|
-
# @note When making an API call, you may pass OrganizationKubernetesConfiguration
|
4944
|
-
# data as a hash:
|
4945
|
-
#
|
4946
|
-
# {
|
4947
|
-
# audit_logs: { # required
|
4948
|
-
# auto_enable: false, # required
|
4949
|
-
# },
|
4950
|
-
# }
|
4951
|
-
#
|
4952
4238
|
# @!attribute [rw] audit_logs
|
4953
4239
|
# Whether Kubernetes audit logs data source should be auto-enabled for
|
4954
4240
|
# new members joining the organization.
|
@@ -4980,17 +4266,6 @@ module Aws::GuardDuty
|
|
4980
4266
|
|
4981
4267
|
# Organization-wide Malware Protection configurations.
|
4982
4268
|
#
|
4983
|
-
# @note When making an API call, you may pass OrganizationMalwareProtectionConfiguration
|
4984
|
-
# data as a hash:
|
4985
|
-
#
|
4986
|
-
# {
|
4987
|
-
# scan_ec2_instance_with_findings: {
|
4988
|
-
# ebs_volumes: {
|
4989
|
-
# auto_enable: false,
|
4990
|
-
# },
|
4991
|
-
# },
|
4992
|
-
# }
|
4993
|
-
#
|
4994
4269
|
# @!attribute [rw] scan_ec2_instance_with_findings
|
4995
4270
|
# Whether Malware Protection for EC2 instances with findings should be
|
4996
4271
|
# auto-enabled for new members joining the organization.
|
@@ -5023,13 +4298,6 @@ module Aws::GuardDuty
|
|
5023
4298
|
# Describes whether S3 data event logs will be automatically enabled for
|
5024
4299
|
# new members of the organization.
|
5025
4300
|
#
|
5026
|
-
# @note When making an API call, you may pass OrganizationS3LogsConfiguration
|
5027
|
-
# data as a hash:
|
5028
|
-
#
|
5029
|
-
# {
|
5030
|
-
# auto_enable: false, # required
|
5031
|
-
# }
|
5032
|
-
#
|
5033
4301
|
# @!attribute [rw] auto_enable
|
5034
4302
|
# A value that contains information on whether S3 data event logs will
|
5035
4303
|
# be enabled automatically as a data source for the organization.
|
@@ -5061,15 +4329,6 @@ module Aws::GuardDuty
|
|
5061
4329
|
|
5062
4330
|
# Organization-wide EC2 instances with findings scan configuration.
|
5063
4331
|
#
|
5064
|
-
# @note When making an API call, you may pass OrganizationScanEc2InstanceWithFindings
|
5065
|
-
# data as a hash:
|
5066
|
-
#
|
5067
|
-
# {
|
5068
|
-
# ebs_volumes: {
|
5069
|
-
# auto_enable: false,
|
5070
|
-
# },
|
5071
|
-
# }
|
5072
|
-
#
|
5073
4332
|
# @!attribute [rw] ebs_volumes
|
5074
4333
|
# Whether scanning EBS volumes should be auto-enabled for new members
|
5075
4334
|
# joining the organization.
|
@@ -5445,13 +4704,6 @@ module Aws::GuardDuty
|
|
5445
4704
|
|
5446
4705
|
# Describes whether S3 data event logs will be enabled as a data source.
|
5447
4706
|
#
|
5448
|
-
# @note When making an API call, you may pass S3LogsConfiguration
|
5449
|
-
# data as a hash:
|
5450
|
-
#
|
5451
|
-
# {
|
5452
|
-
# enable: false, # required
|
5453
|
-
# }
|
5454
|
-
#
|
5455
4707
|
# @!attribute [rw] enable
|
5456
4708
|
# The status of S3 data event logs as a data source.
|
5457
4709
|
# @return [Boolean]
|
@@ -5512,7 +4764,7 @@ module Aws::GuardDuty
|
|
5512
4764
|
# @return [Time]
|
5513
4765
|
#
|
5514
4766
|
# @!attribute [rw] trigger_details
|
5515
|
-
#
|
4767
|
+
# Specifies the reason why the scan was initiated.
|
5516
4768
|
# @return [Types::TriggerDetails]
|
5517
4769
|
#
|
5518
4770
|
# @!attribute [rw] resource_details
|
@@ -5563,18 +4815,6 @@ module Aws::GuardDuty
|
|
5563
4815
|
|
5564
4816
|
# Contains information about the condition.
|
5565
4817
|
#
|
5566
|
-
# @note When making an API call, you may pass ScanCondition
|
5567
|
-
# data as a hash:
|
5568
|
-
#
|
5569
|
-
# {
|
5570
|
-
# map_equals: [ # required
|
5571
|
-
# {
|
5572
|
-
# key: "TagKey", # required
|
5573
|
-
# value: "TagValue",
|
5574
|
-
# },
|
5575
|
-
# ],
|
5576
|
-
# }
|
5577
|
-
#
|
5578
4818
|
# @!attribute [rw] map_equals
|
5579
4819
|
# Represents an *mapEqual* **** condition to be applied to a single
|
5580
4820
|
# field when triggering for malware scan.
|
@@ -5591,14 +4831,6 @@ module Aws::GuardDuty
|
|
5591
4831
|
# Represents key, value pair to be matched against given resource
|
5592
4832
|
# property.
|
5593
4833
|
#
|
5594
|
-
# @note When making an API call, you may pass ScanConditionPair
|
5595
|
-
# data as a hash:
|
5596
|
-
#
|
5597
|
-
# {
|
5598
|
-
# key: "TagKey", # required
|
5599
|
-
# value: "TagValue",
|
5600
|
-
# }
|
5601
|
-
#
|
5602
4834
|
# @!attribute [rw] key
|
5603
4835
|
# Represents *key* **** in the map condition.
|
5604
4836
|
# @return [String]
|
@@ -5650,13 +4882,6 @@ module Aws::GuardDuty
|
|
5650
4882
|
# Describes whether Malware Protection for EC2 instances with findings
|
5651
4883
|
# will be enabled as a data source.
|
5652
4884
|
#
|
5653
|
-
# @note When making an API call, you may pass ScanEc2InstanceWithFindings
|
5654
|
-
# data as a hash:
|
5655
|
-
#
|
5656
|
-
# {
|
5657
|
-
# ebs_volumes: false,
|
5658
|
-
# }
|
5659
|
-
#
|
5660
4885
|
# @!attribute [rw] ebs_volumes
|
5661
4886
|
# Describes the configuration for scanning EBS volumes as data source.
|
5662
4887
|
# @return [Boolean]
|
@@ -5718,32 +4943,6 @@ module Aws::GuardDuty
|
|
5718
4943
|
# Contains information about criteria used to filter resources before
|
5719
4944
|
# triggering malware scan.
|
5720
4945
|
#
|
5721
|
-
# @note When making an API call, you may pass ScanResourceCriteria
|
5722
|
-
# data as a hash:
|
5723
|
-
#
|
5724
|
-
# {
|
5725
|
-
# include: {
|
5726
|
-
# "EC2_INSTANCE_TAG" => {
|
5727
|
-
# map_equals: [ # required
|
5728
|
-
# {
|
5729
|
-
# key: "TagKey", # required
|
5730
|
-
# value: "TagValue",
|
5731
|
-
# },
|
5732
|
-
# ],
|
5733
|
-
# },
|
5734
|
-
# },
|
5735
|
-
# exclude: {
|
5736
|
-
# "EC2_INSTANCE_TAG" => {
|
5737
|
-
# map_equals: [ # required
|
5738
|
-
# {
|
5739
|
-
# key: "TagKey", # required
|
5740
|
-
# value: "TagValue",
|
5741
|
-
# },
|
5742
|
-
# ],
|
5743
|
-
# },
|
5744
|
-
# },
|
5745
|
-
# }
|
5746
|
-
#
|
5747
4946
|
# @!attribute [rw] include
|
5748
4947
|
# Represents condition that when matched will allow a malware scan for
|
5749
4948
|
# a certain resource.
|
@@ -5963,14 +5162,6 @@ module Aws::GuardDuty
|
|
5963
5162
|
|
5964
5163
|
# Contains information about the criteria used for sorting findings.
|
5965
5164
|
#
|
5966
|
-
# @note When making an API call, you may pass SortCriteria
|
5967
|
-
# data as a hash:
|
5968
|
-
#
|
5969
|
-
# {
|
5970
|
-
# attribute_name: "String",
|
5971
|
-
# order_by: "ASC", # accepts ASC, DESC
|
5972
|
-
# }
|
5973
|
-
#
|
5974
5165
|
# @!attribute [rw] attribute_name
|
5975
5166
|
# Represents the finding attribute (for example, accountId) to sort
|
5976
5167
|
# findings by.
|
@@ -5989,14 +5180,6 @@ module Aws::GuardDuty
|
|
5989
5180
|
include Aws::Structure
|
5990
5181
|
end
|
5991
5182
|
|
5992
|
-
# @note When making an API call, you may pass StartMonitoringMembersRequest
|
5993
|
-
# data as a hash:
|
5994
|
-
#
|
5995
|
-
# {
|
5996
|
-
# detector_id: "DetectorId", # required
|
5997
|
-
# account_ids: ["AccountId"], # required
|
5998
|
-
# }
|
5999
|
-
#
|
6000
5183
|
# @!attribute [rw] detector_id
|
6001
5184
|
# The unique ID of the detector of the GuardDuty administrator account
|
6002
5185
|
# associated with the member accounts to monitor.
|
@@ -6029,14 +5212,6 @@ module Aws::GuardDuty
|
|
6029
5212
|
include Aws::Structure
|
6030
5213
|
end
|
6031
5214
|
|
6032
|
-
# @note When making an API call, you may pass StopMonitoringMembersRequest
|
6033
|
-
# data as a hash:
|
6034
|
-
#
|
6035
|
-
# {
|
6036
|
-
# detector_id: "DetectorId", # required
|
6037
|
-
# account_ids: ["AccountId"], # required
|
6038
|
-
# }
|
6039
|
-
#
|
6040
5215
|
# @!attribute [rw] detector_id
|
6041
5216
|
# The unique ID of the detector associated with the GuardDuty
|
6042
5217
|
# administrator account that is monitoring member accounts.
|
@@ -6088,16 +5263,6 @@ module Aws::GuardDuty
|
|
6088
5263
|
include Aws::Structure
|
6089
5264
|
end
|
6090
5265
|
|
6091
|
-
# @note When making an API call, you may pass TagResourceRequest
|
6092
|
-
# data as a hash:
|
6093
|
-
#
|
6094
|
-
# {
|
6095
|
-
# resource_arn: "GuardDutyArn", # required
|
6096
|
-
# tags: { # required
|
6097
|
-
# "TagKey" => "TagValue",
|
6098
|
-
# },
|
6099
|
-
# }
|
6100
|
-
#
|
6101
5266
|
# @!attribute [rw] resource_arn
|
6102
5267
|
# The Amazon Resource Name (ARN) for the GuardDuty resource to apply a
|
6103
5268
|
# tag to.
|
@@ -6225,14 +5390,6 @@ module Aws::GuardDuty
|
|
6225
5390
|
include Aws::Structure
|
6226
5391
|
end
|
6227
5392
|
|
6228
|
-
# @note When making an API call, you may pass UnarchiveFindingsRequest
|
6229
|
-
# data as a hash:
|
6230
|
-
#
|
6231
|
-
# {
|
6232
|
-
# detector_id: "DetectorId", # required
|
6233
|
-
# finding_ids: ["FindingId"], # required
|
6234
|
-
# }
|
6235
|
-
#
|
6236
5393
|
# @!attribute [rw] detector_id
|
6237
5394
|
# The ID of the detector associated with the findings to unarchive.
|
6238
5395
|
# @return [String]
|
@@ -6288,14 +5445,6 @@ module Aws::GuardDuty
|
|
6288
5445
|
include Aws::Structure
|
6289
5446
|
end
|
6290
5447
|
|
6291
|
-
# @note When making an API call, you may pass UntagResourceRequest
|
6292
|
-
# data as a hash:
|
6293
|
-
#
|
6294
|
-
# {
|
6295
|
-
# resource_arn: "GuardDutyArn", # required
|
6296
|
-
# tag_keys: ["TagKey"], # required
|
6297
|
-
# }
|
6298
|
-
#
|
6299
5448
|
# @!attribute [rw] resource_arn
|
6300
5449
|
# The Amazon Resource Name (ARN) for the resource to remove tags from.
|
6301
5450
|
# @return [String]
|
@@ -6317,30 +5466,6 @@ module Aws::GuardDuty
|
|
6317
5466
|
#
|
6318
5467
|
class UntagResourceResponse < Aws::EmptyStructure; end
|
6319
5468
|
|
6320
|
-
# @note When making an API call, you may pass UpdateDetectorRequest
|
6321
|
-
# data as a hash:
|
6322
|
-
#
|
6323
|
-
# {
|
6324
|
-
# detector_id: "DetectorId", # required
|
6325
|
-
# enable: false,
|
6326
|
-
# finding_publishing_frequency: "FIFTEEN_MINUTES", # accepts FIFTEEN_MINUTES, ONE_HOUR, SIX_HOURS
|
6327
|
-
# data_sources: {
|
6328
|
-
# s3_logs: {
|
6329
|
-
# enable: false, # required
|
6330
|
-
# },
|
6331
|
-
# kubernetes: {
|
6332
|
-
# audit_logs: { # required
|
6333
|
-
# enable: false, # required
|
6334
|
-
# },
|
6335
|
-
# },
|
6336
|
-
# malware_protection: {
|
6337
|
-
# scan_ec2_instance_with_findings: {
|
6338
|
-
# ebs_volumes: false,
|
6339
|
-
# },
|
6340
|
-
# },
|
6341
|
-
# },
|
6342
|
-
# }
|
6343
|
-
#
|
6344
5469
|
# @!attribute [rw] detector_id
|
6345
5470
|
# The unique ID of the detector to update.
|
6346
5471
|
# @return [String]
|
@@ -6373,35 +5498,6 @@ module Aws::GuardDuty
|
|
6373
5498
|
#
|
6374
5499
|
class UpdateDetectorResponse < Aws::EmptyStructure; end
|
6375
5500
|
|
6376
|
-
# @note When making an API call, you may pass UpdateFilterRequest
|
6377
|
-
# data as a hash:
|
6378
|
-
#
|
6379
|
-
# {
|
6380
|
-
# detector_id: "DetectorId", # required
|
6381
|
-
# filter_name: "String", # required
|
6382
|
-
# description: "FilterDescription",
|
6383
|
-
# action: "NOOP", # accepts NOOP, ARCHIVE
|
6384
|
-
# rank: 1,
|
6385
|
-
# finding_criteria: {
|
6386
|
-
# criterion: {
|
6387
|
-
# "String" => {
|
6388
|
-
# eq: ["String"],
|
6389
|
-
# neq: ["String"],
|
6390
|
-
# gt: 1,
|
6391
|
-
# gte: 1,
|
6392
|
-
# lt: 1,
|
6393
|
-
# lte: 1,
|
6394
|
-
# equals: ["String"],
|
6395
|
-
# not_equals: ["String"],
|
6396
|
-
# greater_than: 1,
|
6397
|
-
# greater_than_or_equal: 1,
|
6398
|
-
# less_than: 1,
|
6399
|
-
# less_than_or_equal: 1,
|
6400
|
-
# },
|
6401
|
-
# },
|
6402
|
-
# },
|
6403
|
-
# }
|
6404
|
-
#
|
6405
5501
|
# @!attribute [rw] detector_id
|
6406
5502
|
# The unique ID of the detector that specifies the GuardDuty service
|
6407
5503
|
# where you want to update a filter.
|
@@ -6412,7 +5508,9 @@ module Aws::GuardDuty
|
|
6412
5508
|
# @return [String]
|
6413
5509
|
#
|
6414
5510
|
# @!attribute [rw] description
|
6415
|
-
# The description of the filter.
|
5511
|
+
# The description of the filter. Valid special characters include
|
5512
|
+
# period (.), underscore (\_), dash (-), and whitespace. The new line
|
5513
|
+
# character is considered to be an invalid input for description.
|
6416
5514
|
# @return [String]
|
6417
5515
|
#
|
6418
5516
|
# @!attribute [rw] action
|
@@ -6456,16 +5554,6 @@ module Aws::GuardDuty
|
|
6456
5554
|
include Aws::Structure
|
6457
5555
|
end
|
6458
5556
|
|
6459
|
-
# @note When making an API call, you may pass UpdateFindingsFeedbackRequest
|
6460
|
-
# data as a hash:
|
6461
|
-
#
|
6462
|
-
# {
|
6463
|
-
# detector_id: "DetectorId", # required
|
6464
|
-
# finding_ids: ["FindingId"], # required
|
6465
|
-
# feedback: "USEFUL", # required, accepts USEFUL, NOT_USEFUL
|
6466
|
-
# comments: "String",
|
6467
|
-
# }
|
6468
|
-
#
|
6469
5557
|
# @!attribute [rw] detector_id
|
6470
5558
|
# The ID of the detector associated with the findings to update
|
6471
5559
|
# feedback for.
|
@@ -6499,17 +5587,6 @@ module Aws::GuardDuty
|
|
6499
5587
|
#
|
6500
5588
|
class UpdateFindingsFeedbackResponse < Aws::EmptyStructure; end
|
6501
5589
|
|
6502
|
-
# @note When making an API call, you may pass UpdateIPSetRequest
|
6503
|
-
# data as a hash:
|
6504
|
-
#
|
6505
|
-
# {
|
6506
|
-
# detector_id: "DetectorId", # required
|
6507
|
-
# ip_set_id: "String", # required
|
6508
|
-
# name: "Name",
|
6509
|
-
# location: "Location",
|
6510
|
-
# activate: false,
|
6511
|
-
# }
|
6512
|
-
#
|
6513
5590
|
# @!attribute [rw] detector_id
|
6514
5591
|
# The detectorID that specifies the GuardDuty service whose IPSet you
|
6515
5592
|
# want to update.
|
@@ -6548,36 +5625,6 @@ module Aws::GuardDuty
|
|
6548
5625
|
#
|
6549
5626
|
class UpdateIPSetResponse < Aws::EmptyStructure; end
|
6550
5627
|
|
6551
|
-
# @note When making an API call, you may pass UpdateMalwareScanSettingsRequest
|
6552
|
-
# data as a hash:
|
6553
|
-
#
|
6554
|
-
# {
|
6555
|
-
# detector_id: "DetectorId", # required
|
6556
|
-
# scan_resource_criteria: {
|
6557
|
-
# include: {
|
6558
|
-
# "EC2_INSTANCE_TAG" => {
|
6559
|
-
# map_equals: [ # required
|
6560
|
-
# {
|
6561
|
-
# key: "TagKey", # required
|
6562
|
-
# value: "TagValue",
|
6563
|
-
# },
|
6564
|
-
# ],
|
6565
|
-
# },
|
6566
|
-
# },
|
6567
|
-
# exclude: {
|
6568
|
-
# "EC2_INSTANCE_TAG" => {
|
6569
|
-
# map_equals: [ # required
|
6570
|
-
# {
|
6571
|
-
# key: "TagKey", # required
|
6572
|
-
# value: "TagValue",
|
6573
|
-
# },
|
6574
|
-
# ],
|
6575
|
-
# },
|
6576
|
-
# },
|
6577
|
-
# },
|
6578
|
-
# ebs_snapshot_preservation: "NO_RETENTION", # accepts NO_RETENTION, RETENTION_WITH_FINDING
|
6579
|
-
# }
|
6580
|
-
#
|
6581
5628
|
# @!attribute [rw] detector_id
|
6582
5629
|
# The unique ID of the detector that specifies the GuardDuty service
|
6583
5630
|
# where you want to update scan settings.
|
@@ -6606,29 +5653,6 @@ module Aws::GuardDuty
|
|
6606
5653
|
#
|
6607
5654
|
class UpdateMalwareScanSettingsResponse < Aws::EmptyStructure; end
|
6608
5655
|
|
6609
|
-
# @note When making an API call, you may pass UpdateMemberDetectorsRequest
|
6610
|
-
# data as a hash:
|
6611
|
-
#
|
6612
|
-
# {
|
6613
|
-
# detector_id: "DetectorId", # required
|
6614
|
-
# account_ids: ["AccountId"], # required
|
6615
|
-
# data_sources: {
|
6616
|
-
# s3_logs: {
|
6617
|
-
# enable: false, # required
|
6618
|
-
# },
|
6619
|
-
# kubernetes: {
|
6620
|
-
# audit_logs: { # required
|
6621
|
-
# enable: false, # required
|
6622
|
-
# },
|
6623
|
-
# },
|
6624
|
-
# malware_protection: {
|
6625
|
-
# scan_ec2_instance_with_findings: {
|
6626
|
-
# ebs_volumes: false,
|
6627
|
-
# },
|
6628
|
-
# },
|
6629
|
-
# },
|
6630
|
-
# }
|
6631
|
-
#
|
6632
5656
|
# @!attribute [rw] detector_id
|
6633
5657
|
# The detector ID of the administrator account.
|
6634
5658
|
# @return [String]
|
@@ -6664,31 +5688,6 @@ module Aws::GuardDuty
|
|
6664
5688
|
include Aws::Structure
|
6665
5689
|
end
|
6666
5690
|
|
6667
|
-
# @note When making an API call, you may pass UpdateOrganizationConfigurationRequest
|
6668
|
-
# data as a hash:
|
6669
|
-
#
|
6670
|
-
# {
|
6671
|
-
# detector_id: "DetectorId", # required
|
6672
|
-
# auto_enable: false, # required
|
6673
|
-
# data_sources: {
|
6674
|
-
# s3_logs: {
|
6675
|
-
# auto_enable: false, # required
|
6676
|
-
# },
|
6677
|
-
# kubernetes: {
|
6678
|
-
# audit_logs: { # required
|
6679
|
-
# auto_enable: false, # required
|
6680
|
-
# },
|
6681
|
-
# },
|
6682
|
-
# malware_protection: {
|
6683
|
-
# scan_ec2_instance_with_findings: {
|
6684
|
-
# ebs_volumes: {
|
6685
|
-
# auto_enable: false,
|
6686
|
-
# },
|
6687
|
-
# },
|
6688
|
-
# },
|
6689
|
-
# },
|
6690
|
-
# }
|
6691
|
-
#
|
6692
5691
|
# @!attribute [rw] detector_id
|
6693
5692
|
# The ID of the detector to update the delegated administrator for.
|
6694
5693
|
# @return [String]
|
@@ -6716,18 +5715,6 @@ module Aws::GuardDuty
|
|
6716
5715
|
#
|
6717
5716
|
class UpdateOrganizationConfigurationResponse < Aws::EmptyStructure; end
|
6718
5717
|
|
6719
|
-
# @note When making an API call, you may pass UpdatePublishingDestinationRequest
|
6720
|
-
# data as a hash:
|
6721
|
-
#
|
6722
|
-
# {
|
6723
|
-
# detector_id: "DetectorId", # required
|
6724
|
-
# destination_id: "String", # required
|
6725
|
-
# destination_properties: {
|
6726
|
-
# destination_arn: "String",
|
6727
|
-
# kms_key_arn: "String",
|
6728
|
-
# },
|
6729
|
-
# }
|
6730
|
-
#
|
6731
5718
|
# @!attribute [rw] detector_id
|
6732
5719
|
# The ID of the detector associated with the publishing destinations
|
6733
5720
|
# to update.
|
@@ -6756,17 +5743,6 @@ module Aws::GuardDuty
|
|
6756
5743
|
#
|
6757
5744
|
class UpdatePublishingDestinationResponse < Aws::EmptyStructure; end
|
6758
5745
|
|
6759
|
-
# @note When making an API call, you may pass UpdateThreatIntelSetRequest
|
6760
|
-
# data as a hash:
|
6761
|
-
#
|
6762
|
-
# {
|
6763
|
-
# detector_id: "DetectorId", # required
|
6764
|
-
# threat_intel_set_id: "String", # required
|
6765
|
-
# name: "Name",
|
6766
|
-
# location: "Location",
|
6767
|
-
# activate: false,
|
6768
|
-
# }
|
6769
|
-
#
|
6770
5746
|
# @!attribute [rw] detector_id
|
6771
5747
|
# The detectorID that specifies the GuardDuty service whose
|
6772
5748
|
# ThreatIntelSet you want to update.
|
@@ -6829,15 +5805,6 @@ module Aws::GuardDuty
|
|
6829
5805
|
# Contains information about the criteria used to query usage
|
6830
5806
|
# statistics.
|
6831
5807
|
#
|
6832
|
-
# @note When making an API call, you may pass UsageCriteria
|
6833
|
-
# data as a hash:
|
6834
|
-
#
|
6835
|
-
# {
|
6836
|
-
# account_ids: ["AccountId"],
|
6837
|
-
# data_sources: ["FLOW_LOGS"], # required, accepts FLOW_LOGS, CLOUD_TRAIL, DNS_LOGS, S3_LOGS, KUBERNETES_AUDIT_LOGS, EC2_MALWARE_SCAN
|
6838
|
-
# resources: ["String"],
|
6839
|
-
# }
|
6840
|
-
#
|
6841
5808
|
# @!attribute [rw] account_ids
|
6842
5809
|
# The account IDs to aggregate usage statistics from.
|
6843
5810
|
# @return [Array<String>]
|