aws-sdk-guardduty 1.162.0 → 1.163.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d65c1947a3279be636fcd07aad5c74684ef26b61d59773950ea0eec9088cb013
-  data.tar.gz: 7214c42b1482496ba1ceea43e334386c68e10cc531b93b0ae76de841faaa57e2
+  metadata.gz: '08ac5d74e490a77972084c55d6f1f75ed09b5bbc58a7492c9e608c4e22cbee1d'
+  data.tar.gz: e11d18913cd6c3eefa1835fd321c34176b79f28b7b663288375734ff908c23c5
 SHA512:
-  metadata.gz: fe82adadef9d361fbdeb511492f867fddc33e8e951eaf03933f6575695fc066fb95cf85aeb85d9937ccc18cee1fffcb8218543af8c5e4b762687c3003113d2cf
-  data.tar.gz: f71c7cc098824f5c97e8a22946ab71741036872631b529a5fa01e28a970b436f4b002e0321a925e8882f490298c2dc0eec2bfa115efc7cadac214711eca42955
+  metadata.gz: 5e6e0d8494863f27c0e62b4ed85a4ff3302b2e301e9ca9e759287916857046228e82278b7badc924aabf54e3096e8464b9017b649d007c5a93eb261797621e89
+  data.tar.gz: 3658a676f3cc2a4a001665350015c176c0edd2ff73bfa0d9d2b264d77395ab988c332e827f94d350f6aa6f9ea286df9bb505a69f3350d1dc371d343a3d582b10

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.163.0 (2026-09-17)
+------------------
+
+* Feature - This change surfaces AI Protection resources on existing public IAM attack sequences. Customers will now see which model was accessed and whether a guardrail intervened as part of the credential-compromise sequence.
+
 1.162.0 (2026-09-11)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.162.0
+1.163.0

data/lib/aws-sdk-guardduty/client.rb

@@ -4725,7 +4725,7 @@ module Aws::GuardDuty
     #   resp.findings[0].service.detection.sequence.resources[0].uid #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].name #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].account_id #=> String
-    #   resp.findings[0].service.detection.sequence.resources[0].resource_type #=> String, one of "EC2_INSTANCE", "EC2_NETWORK_INTERFACE", "S3_BUCKET", "S3_OBJECT", "ACCESS_KEY", "EKS_CLUSTER", "KUBERNETES_WORKLOAD", "CONTAINER", "ECS_CLUSTER", "ECS_TASK", "AUTOSCALING_AUTO_SCALING_GROUP", "IAM_INSTANCE_PROFILE", "CLOUDFORMATION_STACK", "EC2_LAUNCH_TEMPLATE", "EC2_VPC", "EC2_IMAGE"
+    #   resp.findings[0].service.detection.sequence.resources[0].resource_type #=> String, one of "EC2_INSTANCE", "EC2_NETWORK_INTERFACE", "S3_BUCKET", "S3_OBJECT", "ACCESS_KEY", "EKS_CLUSTER", "KUBERNETES_WORKLOAD", "CONTAINER", "ECS_CLUSTER", "ECS_TASK", "AUTOSCALING_AUTO_SCALING_GROUP", "IAM_INSTANCE_PROFILE", "CLOUDFORMATION_STACK", "EC2_LAUNCH_TEMPLATE", "EC2_VPC", "EC2_IMAGE", "BEDROCK_CUSTOM_MODEL", "BEDROCK_IMPORTED_MODEL", "BEDROCK_PROVISIONED_MODEL", "BEDROCK_CUSTOM_MODEL_DEPLOYMENT", "BEDROCK_INFERENCE_PROFILE", "BEDROCK_APPLICATION_INFERENCE_PROFILE", "BEDROCK_PROMPT", "BEDROCK_PROMPT_ROUTER", "BEDROCK_GUARDRAIL", "SAGEMAKER_ENDPOINT"
     #   resp.findings[0].service.detection.sequence.resources[0].region #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].service #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].cloud_partition #=> String
@@ -4812,6 +4812,9 @@ module Aws::GuardDuty
     #   resp.findings[0].service.detection.sequence.resources[0].data.ec2_image.ec2_instance_uids[0] #=> String
     #   resp.findings[0].service.detection.sequence.resources[0].data.cloudformation_stack.ec2_instance_uids #=> Array
     #   resp.findings[0].service.detection.sequence.resources[0].data.cloudformation_stack.ec2_instance_uids[0] #=> String
+    #   resp.findings[0].service.detection.sequence.resources[0].data.bedrock_guardrail.version #=> String
+    #   resp.findings[0].service.detection.sequence.resources[0].data.bedrock_guardrail.guardrail_action #=> String, one of "GUARDRAIL_INTERVENED", "NONE"
+    #   resp.findings[0].service.detection.sequence.resources[0].data.bedrock_guardrail.guardrail_source #=> String, one of "INPUT", "OUTPUT"
     #   resp.findings[0].service.detection.sequence.endpoints #=> Array
     #   resp.findings[0].service.detection.sequence.endpoints[0].id #=> String
     #   resp.findings[0].service.detection.sequence.endpoints[0].ip #=> String
@@ -9732,7 +9735,7 @@ module Aws::GuardDuty
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-guardduty'
-      context[:gem_version] = '1.162.0'
+      context[:gem_version] = '1.163.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-guardduty/client_api.rb

@@ -77,6 +77,8 @@ module Aws::GuardDuty
     BedrockGuardrailDetails = Shapes::StructureShape.new(name: 'BedrockGuardrailDetails')
     BedrockGuardrailDetailsGuardrailArnString = Shapes::StringShape.new(name: 'BedrockGuardrailDetailsGuardrailArnString')
     BedrockGuardrailDetailsGuardrailVersionString = Shapes::StringShape.new(name: 'BedrockGuardrailDetailsGuardrailVersionString')
+    BedrockGuardrailResource = Shapes::StructureShape.new(name: 'BedrockGuardrailResource')
+    BedrockGuardrailResourceVersionString = Shapes::StringShape.new(name: 'BedrockGuardrailResourceVersionString')
     BedrockGuardrailVersionString = Shapes::StringShape.new(name: 'BedrockGuardrailVersionString')
     BedrockGuardrails = Shapes::ListShape.new(name: 'BedrockGuardrails')
     Behavior = Shapes::MapShape.new(name: 'Behavior')
@@ -1001,6 +1003,11 @@ module Aws::GuardDuty
     BedrockGuardrailDetails.add_member(:content_policy_filters, Shapes::ShapeRef.new(shape: ContentPolicyFilters, location_name: "contentPolicyFilters"))
     BedrockGuardrailDetails.struct_class = Types::BedrockGuardrailDetails
 
+    BedrockGuardrailResource.add_member(:version, Shapes::ShapeRef.new(shape: BedrockGuardrailResourceVersionString, location_name: "version"))
+    BedrockGuardrailResource.add_member(:guardrail_action, Shapes::ShapeRef.new(shape: GuardrailAction, location_name: "guardrailAction"))
+    BedrockGuardrailResource.add_member(:guardrail_source, Shapes::ShapeRef.new(shape: GuardrailSource, location_name: "guardrailSource"))
+    BedrockGuardrailResource.struct_class = Types::BedrockGuardrailResource
+
     BedrockGuardrails.member = Shapes::ShapeRef.new(shape: BedrockGuardrail)
 
     Behavior.key = Shapes::ShapeRef.new(shape: String)
@@ -2868,6 +2875,7 @@ module Aws::GuardDuty
     ResourceData.add_member(:ec2_vpc, Shapes::ShapeRef.new(shape: Ec2Vpc, location_name: "ec2Vpc"))
     ResourceData.add_member(:ec2_image, Shapes::ShapeRef.new(shape: Ec2Image, location_name: "ec2Image"))
     ResourceData.add_member(:cloudformation_stack, Shapes::ShapeRef.new(shape: CloudformationStack, location_name: "cloudformationStack"))
+    ResourceData.add_member(:bedrock_guardrail, Shapes::ShapeRef.new(shape: BedrockGuardrailResource, location_name: "bedrockGuardrail"))
     ResourceData.struct_class = Types::ResourceData
 
     ResourceDetails.add_member(:instance_arn, Shapes::ShapeRef.new(shape: InstanceArn, location_name: "instanceArn"))

data/lib/aws-sdk-guardduty/types.rb

@@ -939,6 +939,34 @@ module Aws::GuardDuty
       include Aws::Structure
     end
 
+    # Contains details about an Amazon Bedrock guardrail evaluated during a
+    # model invocation.
+    #
+    # @!attribute [rw] version
+    #   The version of the Amazon Bedrock guardrail. Valid values are a
+    #   numeric version, `DRAFT`, or `ENFORCED`.
+    #   @return [String]
+    #
+    # @!attribute [rw] guardrail_action
+    #   Indicates whether the guardrail intervened during the model
+    #   invocation.
+    #   @return [String]
+    #
+    # @!attribute [rw] guardrail_source
+    #   Indicates whether the guardrail was applied on the input or output
+    #   of the model invocation.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/BedrockGuardrailResource AWS API Documentation
+    #
+    class BedrockGuardrailResource < Struct.new(
+      :version,
+      :guardrail_action,
+      :guardrail_source)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains information on how the bucker owner's S3 Block Public Access
     # settings are being applied to the S3 bucket. See [S3 Block Public
     # Access][1] for more information.
@@ -11497,6 +11525,12 @@ module Aws::GuardDuty
     #   finding.
     #   @return [Types::CloudformationStack]
     #
+    # @!attribute [rw] bedrock_guardrail
+    #   Contains detailed information about the Amazon Bedrock guardrail
+    #   associated with the activity that prompted GuardDuty to generate a
+    #   finding.
+    #   @return [Types::BedrockGuardrailResource]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ResourceData AWS API Documentation
     #
     class ResourceData < Struct.new(
@@ -11515,7 +11549,8 @@ module Aws::GuardDuty
       :ec2_launch_template,
       :ec2_vpc,
       :ec2_image,
-      :cloudformation_stack)
+      :cloudformation_stack,
+      :bedrock_guardrail)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-guardduty.rb

@@ -54,7 +54,7 @@ module Aws::GuardDuty
   autoload :EndpointProvider, 'aws-sdk-guardduty/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-guardduty/endpoints'
 
-  GEM_VERSION = '1.162.0'
+  GEM_VERSION = '1.163.0'
 
 end
 

data/sig/types.rbs

@@ -256,6 +256,13 @@ module Aws::GuardDuty
       SENSITIVE: []
     end
 
+    class BedrockGuardrailResource
+      attr_accessor version: ::String
+      attr_accessor guardrail_action: ("GUARDRAIL_INTERVENED" | "NONE")
+      attr_accessor guardrail_source: ("INPUT" | "OUTPUT")
+      SENSITIVE: []
+    end
+
     class BlockPublicAccess
       attr_accessor ignore_public_acls: bool
       attr_accessor restrict_public_buckets: bool
@@ -2597,6 +2604,7 @@ module Aws::GuardDuty
       attr_accessor ec2_vpc: Types::Ec2Vpc
       attr_accessor ec2_image: Types::Ec2Image
       attr_accessor cloudformation_stack: Types::CloudformationStack
+      attr_accessor bedrock_guardrail: Types::BedrockGuardrailResource
       SENSITIVE: []
     end
 
@@ -2624,7 +2632,7 @@ module Aws::GuardDuty
       attr_accessor uid: ::String
       attr_accessor name: ::String
       attr_accessor account_id: ::String
-      attr_accessor resource_type: ("EC2_INSTANCE" | "EC2_NETWORK_INTERFACE" | "S3_BUCKET" | "S3_OBJECT" | "ACCESS_KEY" | "EKS_CLUSTER" | "KUBERNETES_WORKLOAD" | "CONTAINER" | "ECS_CLUSTER" | "ECS_TASK" | "AUTOSCALING_AUTO_SCALING_GROUP" | "IAM_INSTANCE_PROFILE" | "CLOUDFORMATION_STACK" | "EC2_LAUNCH_TEMPLATE" | "EC2_VPC" | "EC2_IMAGE")
+      attr_accessor resource_type: ("EC2_INSTANCE" | "EC2_NETWORK_INTERFACE" | "S3_BUCKET" | "S3_OBJECT" | "ACCESS_KEY" | "EKS_CLUSTER" | "KUBERNETES_WORKLOAD" | "CONTAINER" | "ECS_CLUSTER" | "ECS_TASK" | "AUTOSCALING_AUTO_SCALING_GROUP" | "IAM_INSTANCE_PROFILE" | "CLOUDFORMATION_STACK" | "EC2_LAUNCH_TEMPLATE" | "EC2_VPC" | "EC2_IMAGE" | "BEDROCK_CUSTOM_MODEL" | "BEDROCK_IMPORTED_MODEL" | "BEDROCK_PROVISIONED_MODEL" | "BEDROCK_CUSTOM_MODEL_DEPLOYMENT" | "BEDROCK_INFERENCE_PROFILE" | "BEDROCK_APPLICATION_INFERENCE_PROFILE" | "BEDROCK_PROMPT" | "BEDROCK_PROMPT_ROUTER" | "BEDROCK_GUARDRAIL" | "SAGEMAKER_ENDPOINT")
       attr_accessor region: ::String
       attr_accessor service: ::String
       attr_accessor cloud_partition: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-guardduty
 version: !ruby/object:Gem::Version
-  version: 1.162.0
+  version: 1.163.0
 platform: ruby
 authors:
 - Amazon Web Services