aws-sdk-guardduty 1.52.0 → 1.53.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 2856d68ab0cbea427826b6dade7219c50cf9a4bb6d4d15d2b1b34529dab6d494
4
- data.tar.gz: 6cc9d2c8218673b9b596c28290bab8863a7708d01b4b4f382886bc56c8c55158
3
+ metadata.gz: 17b3f3bea4ddcd2bc98bb6358d91e3deeacbdcc1624ebc046970b8f2ec814498
4
+ data.tar.gz: 4a2a233baf7377d8ca1d48fb0ca6f1330a7ac1db47dbb99a229f744ffe5d5cda
5
5
  SHA512:
6
- metadata.gz: 98b51dde6d9dda2e69cefd76b46c35c7eff5e0cb1ba3edd3bb99a185bab9721dff5679642aa2444bad78ba12cf4af41c46dbf0ea0bd7f7ebee61bbcccccc252b
7
- data.tar.gz: 043ed69a190cbe8b92182b5e17971cddde2668ddeadc66b1a453bf3bbf8ddaf238a03a11c916950afd7c09f42dc0e642e7505ccaefb7cf8f40e99d54fb7561a5
6
+ metadata.gz: 19541da8bdeb995280d58b013c01a97d77e0624f78e95e7221de1f1e6c1a517abfea62c3ed45f5489c83096fdb0a02a1d599292ff845b5b1461b16fb107c9076
7
+ data.tar.gz: b3aa2a323a1eb62110fa1e15ffd30cedc5ad428b400447e282e03cd73fdfcf94278aad93978fe8c78fc1926a3edb3dcd24298f0df7f5766f1a8cb00e36e65a92
data/CHANGELOG.md CHANGED
@@ -1,6 +1,11 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.53.0 (2022-01-20)
5
+ ------------------
6
+
7
+ * Feature - Amazon GuardDuty findings now include remoteAccountDetails under AwsApiCallAction section if instance credential is exfiltrated.
8
+
4
9
  1.52.0 (2021-12-21)
5
10
  ------------------
6
11
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.52.0
1
+ 1.53.0
@@ -591,6 +591,16 @@ module Aws::GuardDuty
591
591
  #
592
592
  # * service.additionalInfo.threatListName
593
593
  #
594
+ # * resource.s3BucketDetails.publicAccess.effectivePermissions
595
+ #
596
+ # * resource.s3BucketDetails.name
597
+ #
598
+ # * resource.s3BucketDetails.tags.key
599
+ #
600
+ # * resource.s3BucketDetails.tags.value
601
+ #
602
+ # * resource.s3BucketDetails.type
603
+ #
594
604
  # * service.archived
595
605
  #
596
606
  # When this attribute is set to TRUE, only archived findings are
@@ -670,10 +680,10 @@ module Aws::GuardDuty
670
680
 
671
681
  # Creates a new IPSet, which is called a trusted IP list in the console
672
682
  # user interface. An IPSet is a list of IP addresses that are trusted
673
- # for secure communication with AWS infrastructure and applications.
674
- # GuardDuty doesn't generate findings for IP addresses that are
675
- # included in IPSets. Only users from the administrator account can use
676
- # this operation.
683
+ # for secure communication with Amazon Web Services infrastructure and
684
+ # applications. GuardDuty doesn't generate findings for IP addresses
685
+ # that are included in IPSets. Only users from the administrator account
686
+ # can use this operation.
677
687
  #
678
688
  # @option params [required, String] :detector_id
679
689
  # The unique ID of the detector of the GuardDuty account that you want
@@ -689,8 +699,7 @@ module Aws::GuardDuty
689
699
  # The format of the file that contains the IPSet.
690
700
  #
691
701
  # @option params [required, String] :location
692
- # The URI of the file that contains the IPSet. For example:
693
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
702
+ # The URI of the file that contains the IPSet.
694
703
  #
695
704
  # @option params [required, Boolean] :activate
696
705
  # A Boolean value that indicates whether GuardDuty is to start using the
@@ -736,10 +745,10 @@ module Aws::GuardDuty
736
745
  req.send_request(options)
737
746
  end
738
747
 
739
- # Creates member accounts of the current AWS account by specifying a
740
- # list of AWS account IDs. This step is a prerequisite for managing the
741
- # associated member accounts either by invitation or through an
742
- # organization.
748
+ # Creates member accounts of the current Amazon Web Services account by
749
+ # specifying a list of Amazon Web Services account IDs. This step is a
750
+ # prerequisite for managing the associated member accounts either by
751
+ # invitation or through an organization.
743
752
  #
744
753
  # When using `Create Members` as an organizations delegated
745
754
  # administrator this action will enable GuardDuty in the added member
@@ -890,8 +899,7 @@ module Aws::GuardDuty
890
899
  # The format of the file that contains the ThreatIntelSet.
891
900
  #
892
901
  # @option params [required, String] :location
893
- # The URI of the file that contains the ThreatIntelSet. For example:
894
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
902
+ # The URI of the file that contains the ThreatIntelSet.
895
903
  #
896
904
  # @option params [required, Boolean] :activate
897
905
  # A Boolean value that indicates whether GuardDuty is to start using the
@@ -937,12 +945,13 @@ module Aws::GuardDuty
937
945
  req.send_request(options)
938
946
  end
939
947
 
940
- # Declines invitations sent to the current member account by AWS
941
- # accounts specified by their account IDs.
948
+ # Declines invitations sent to the current member account by Amazon Web
949
+ # Services accounts specified by their account IDs.
942
950
  #
943
951
  # @option params [required, Array<String>] :account_ids
944
- # A list of account IDs of the AWS accounts that sent invitations to the
945
- # current member account that you want to decline invitations from.
952
+ # A list of account IDs of the Amazon Web Services accounts that sent
953
+ # invitations to the current member account that you want to decline
954
+ # invitations from.
946
955
  #
947
956
  # @return [Types::DeclineInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
948
957
  #
@@ -1045,12 +1054,13 @@ module Aws::GuardDuty
1045
1054
  req.send_request(options)
1046
1055
  end
1047
1056
 
1048
- # Deletes invitations sent to the current member account by AWS accounts
1049
- # specified by their account IDs.
1057
+ # Deletes invitations sent to the current member account by Amazon Web
1058
+ # Services accounts specified by their account IDs.
1050
1059
  #
1051
1060
  # @option params [required, Array<String>] :account_ids
1052
- # A list of account IDs of the AWS accounts that sent invitations to the
1053
- # current member account that you want to delete invitations from.
1061
+ # A list of account IDs of the Amazon Web Services accounts that sent
1062
+ # invitations to the current member account that you want to delete
1063
+ # invitations from.
1054
1064
  #
1055
1065
  # @return [Types::DeleteInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
1056
1066
  #
@@ -1245,12 +1255,12 @@ module Aws::GuardDuty
1245
1255
  req.send_request(options)
1246
1256
  end
1247
1257
 
1248
- # Disables an AWS account within the Organization as the GuardDuty
1249
- # delegated administrator.
1258
+ # Disables an Amazon Web Services account within the Organization as the
1259
+ # GuardDuty delegated administrator.
1250
1260
  #
1251
1261
  # @option params [required, String] :admin_account_id
1252
- # The AWS Account ID for the organizations account to be disabled as a
1253
- # GuardDuty delegated administrator.
1262
+ # The Amazon Web Services Account ID for the organizations account to be
1263
+ # disabled as a GuardDuty delegated administrator.
1254
1264
  #
1255
1265
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
1256
1266
  #
@@ -1329,12 +1339,12 @@ module Aws::GuardDuty
1329
1339
  req.send_request(options)
1330
1340
  end
1331
1341
 
1332
- # Enables an AWS account within the organization as the GuardDuty
1333
- # delegated administrator.
1342
+ # Enables an Amazon Web Services account within the organization as the
1343
+ # GuardDuty delegated administrator.
1334
1344
  #
1335
1345
  # @option params [required, String] :admin_account_id
1336
- # The AWS Account ID for the organization account to be enabled as a
1337
- # GuardDuty delegated administrator.
1346
+ # The Amazon Web Services Account ID for the organization account to be
1347
+ # enabled as a GuardDuty delegated administrator.
1338
1348
  #
1339
1349
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
1340
1350
  #
@@ -1573,6 +1583,8 @@ module Aws::GuardDuty
1573
1583
  # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.isp #=> String
1574
1584
  # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.org #=> String
1575
1585
  # resp.findings[0].service.action.aws_api_call_action.service_name #=> String
1586
+ # resp.findings[0].service.action.aws_api_call_action.remote_account_details.account_id #=> String
1587
+ # resp.findings[0].service.action.aws_api_call_action.remote_account_details.affiliated #=> Boolean
1576
1588
  # resp.findings[0].service.action.dns_request_action.domain #=> String
1577
1589
  # resp.findings[0].service.action.network_connection_action.blocked #=> Boolean
1578
1590
  # resp.findings[0].service.action.network_connection_action.connection_direction #=> String
@@ -2000,10 +2012,11 @@ module Aws::GuardDuty
2000
2012
  req.send_request(options)
2001
2013
  end
2002
2014
 
2003
- # Invites other AWS accounts (created as members of the current AWS
2004
- # account by CreateMembers) to enable GuardDuty, and allow the current
2005
- # AWS account to view and manage these accounts' findings on their
2006
- # behalf as the GuardDuty administrator account.
2015
+ # Invites other Amazon Web Services accounts (created as members of the
2016
+ # current Amazon Web Services account by CreateMembers) to enable
2017
+ # GuardDuty, and allow the current Amazon Web Services account to view
2018
+ # and manage these accounts' findings on their behalf as the GuardDuty
2019
+ # administrator account.
2007
2020
  #
2008
2021
  # @option params [required, String] :detector_id
2009
2022
  # The unique ID of the detector of the GuardDuty account that you want
@@ -2225,8 +2238,6 @@ module Aws::GuardDuty
2225
2238
  #
2226
2239
  # * service.action.networkConnectionAction.protocol
2227
2240
  #
2228
- # * service.action.networkConnectionAction.remoteIpDetails.city.cityName
2229
- #
2230
2241
  # * service.action.networkConnectionAction.remoteIpDetails.country.countryName
2231
2242
  #
2232
2243
  # * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
@@ -2373,7 +2384,7 @@ module Aws::GuardDuty
2373
2384
  end
2374
2385
 
2375
2386
  # Lists all GuardDuty membership invitations that were sent to the
2376
- # current AWS account.
2387
+ # current Amazon Web Services account.
2377
2388
  #
2378
2389
  # @option params [Integer] :max_results
2379
2390
  # You can use this parameter to indicate the maximum number of items
@@ -2522,7 +2533,7 @@ module Aws::GuardDuty
2522
2533
  end
2523
2534
 
2524
2535
  # Returns a list of publishing destinations associated with the
2525
- # specified `dectectorId`.
2536
+ # specified `detectorId`.
2526
2537
  #
2527
2538
  # @option params [required, String] :detector_id
2528
2539
  # The ID of the detector to retrieve publishing destinations for.
@@ -2965,8 +2976,7 @@ module Aws::GuardDuty
2965
2976
  # The unique ID that specifies the IPSet that you want to update.
2966
2977
  #
2967
2978
  # @option params [String] :location
2968
- # The updated URI of the file that contains the IPSet. For example:
2969
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
2979
+ # The updated URI of the file that contains the IPSet.
2970
2980
  #
2971
2981
  # @option params [Boolean] :activate
2972
2982
  # The updated Boolean value that specifies whether the IPSet is active
@@ -3161,7 +3171,7 @@ module Aws::GuardDuty
3161
3171
  params: params,
3162
3172
  config: config)
3163
3173
  context[:gem_name] = 'aws-sdk-guardduty'
3164
- context[:gem_version] = '1.52.0'
3174
+ context[:gem_version] = '1.53.0'
3165
3175
  Seahorse::Client::Request.new(handlers, context)
3166
3176
  end
3167
3177
 
@@ -211,6 +211,7 @@ module Aws::GuardDuty
211
211
  ProductCodes = Shapes::ListShape.new(name: 'ProductCodes')
212
212
  PublicAccess = Shapes::StructureShape.new(name: 'PublicAccess')
213
213
  PublishingStatus = Shapes::StringShape.new(name: 'PublishingStatus')
214
+ RemoteAccountDetails = Shapes::StructureShape.new(name: 'RemoteAccountDetails')
214
215
  RemoteIpDetails = Shapes::StructureShape.new(name: 'RemoteIpDetails')
215
216
  RemotePortDetails = Shapes::StructureShape.new(name: 'RemotePortDetails')
216
217
  Resource = Shapes::StructureShape.new(name: 'Resource')
@@ -329,6 +330,7 @@ module Aws::GuardDuty
329
330
  AwsApiCallAction.add_member(:error_code, Shapes::ShapeRef.new(shape: String, location_name: "errorCode"))
330
331
  AwsApiCallAction.add_member(:remote_ip_details, Shapes::ShapeRef.new(shape: RemoteIpDetails, location_name: "remoteIpDetails"))
331
332
  AwsApiCallAction.add_member(:service_name, Shapes::ShapeRef.new(shape: String, location_name: "serviceName"))
333
+ AwsApiCallAction.add_member(:remote_account_details, Shapes::ShapeRef.new(shape: RemoteAccountDetails, location_name: "remoteAccountDetails"))
332
334
  AwsApiCallAction.struct_class = Types::AwsApiCallAction
333
335
 
334
336
  BadRequestException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
@@ -963,6 +965,10 @@ module Aws::GuardDuty
963
965
  PublicAccess.add_member(:effective_permission, Shapes::ShapeRef.new(shape: String, location_name: "effectivePermission"))
964
966
  PublicAccess.struct_class = Types::PublicAccess
965
967
 
968
+ RemoteAccountDetails.add_member(:account_id, Shapes::ShapeRef.new(shape: String, location_name: "accountId"))
969
+ RemoteAccountDetails.add_member(:affiliated, Shapes::ShapeRef.new(shape: Boolean, location_name: "affiliated"))
970
+ RemoteAccountDetails.struct_class = Types::RemoteAccountDetails
971
+
966
972
  RemoteIpDetails.add_member(:city, Shapes::ShapeRef.new(shape: City, location_name: "city"))
967
973
  RemoteIpDetails.add_member(:country, Shapes::ShapeRef.new(shape: Country, location_name: "country"))
968
974
  RemoteIpDetails.add_member(:geo_location, Shapes::ShapeRef.new(shape: GeoLocation, location_name: "geoLocation"))
@@ -181,7 +181,7 @@ module Aws::GuardDuty
181
181
  # delegated administrator.
182
182
  #
183
183
  # @!attribute [rw] admin_account_id
184
- # The AWS account ID for the account.
184
+ # The Amazon Web Services account ID for the account.
185
185
  # @return [String]
186
186
  #
187
187
  # @!attribute [rw] admin_status
@@ -231,30 +231,36 @@ module Aws::GuardDuty
231
231
  # Contains information about the API action.
232
232
  #
233
233
  # @!attribute [rw] api
234
- # The AWS API name.
234
+ # The Amazon Web Services API name.
235
235
  # @return [String]
236
236
  #
237
237
  # @!attribute [rw] caller_type
238
- # The AWS API caller type.
238
+ # The Amazon Web Services API caller type.
239
239
  # @return [String]
240
240
  #
241
241
  # @!attribute [rw] domain_details
242
- # The domain information for the AWS API call.
242
+ # The domain information for the Amazon Web Services API call.
243
243
  # @return [Types::DomainDetails]
244
244
  #
245
245
  # @!attribute [rw] error_code
246
- # The error code of the failed AWS API action.
246
+ # The error code of the failed Amazon Web Services API action.
247
247
  # @return [String]
248
248
  #
249
249
  # @!attribute [rw] remote_ip_details
250
- # The remote IP information of the connection that initiated the AWS
251
- # API call.
250
+ # The remote IP information of the connection that initiated the
251
+ # Amazon Web Services API call.
252
252
  # @return [Types::RemoteIpDetails]
253
253
  #
254
254
  # @!attribute [rw] service_name
255
- # The AWS service name whose API was invoked.
255
+ # The Amazon Web Services service name whose API was invoked.
256
256
  # @return [String]
257
257
  #
258
+ # @!attribute [rw] remote_account_details
259
+ # The details of the Amazon Web Services account that made the API
260
+ # call. This field appears if the call was made from outside your
261
+ # account.
262
+ # @return [Types::RemoteAccountDetails]
263
+ #
258
264
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/AwsApiCallAction AWS API Documentation
259
265
  #
260
266
  class AwsApiCallAction < Struct.new(
@@ -263,7 +269,8 @@ module Aws::GuardDuty
263
269
  :domain_details,
264
270
  :error_code,
265
271
  :remote_ip_details,
266
- :service_name)
272
+ :service_name,
273
+ :remote_account_details)
267
274
  SENSITIVE = []
268
275
  include Aws::Structure
269
276
  end
@@ -742,6 +749,16 @@ module Aws::GuardDuty
742
749
  #
743
750
  # * service.additionalInfo.threatListName
744
751
  #
752
+ # * resource.s3BucketDetails.publicAccess.effectivePermissions
753
+ #
754
+ # * resource.s3BucketDetails.name
755
+ #
756
+ # * resource.s3BucketDetails.tags.key
757
+ #
758
+ # * resource.s3BucketDetails.tags.value
759
+ #
760
+ # * resource.s3BucketDetails.type
761
+ #
745
762
  # * service.archived
746
763
  #
747
764
  # When this attribute is set to TRUE, only archived findings are
@@ -832,8 +849,7 @@ module Aws::GuardDuty
832
849
  # @return [String]
833
850
  #
834
851
  # @!attribute [rw] location
835
- # The URI of the file that contains the IPSet. For example:
836
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
852
+ # The URI of the file that contains the IPSet.
837
853
  # @return [String]
838
854
  #
839
855
  # @!attribute [rw] activate
@@ -1041,8 +1057,7 @@ module Aws::GuardDuty
1041
1057
  # @return [String]
1042
1058
  #
1043
1059
  # @!attribute [rw] location
1044
- # The URI of the file that contains the ThreatIntelSet. For example:
1045
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
1060
+ # The URI of the file that contains the ThreatIntelSet.
1046
1061
  # @return [String]
1047
1062
  #
1048
1063
  # @!attribute [rw] activate
@@ -1165,9 +1180,9 @@ module Aws::GuardDuty
1165
1180
  # }
1166
1181
  #
1167
1182
  # @!attribute [rw] account_ids
1168
- # A list of account IDs of the AWS accounts that sent invitations to
1169
- # the current member account that you want to decline invitations
1170
- # from.
1183
+ # A list of account IDs of the Amazon Web Services accounts that sent
1184
+ # invitations to the current member account that you want to decline
1185
+ # invitations from.
1171
1186
  # @return [Array<String>]
1172
1187
  #
1173
1188
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeclineInvitationsRequest AWS API Documentation
@@ -1305,8 +1320,9 @@ module Aws::GuardDuty
1305
1320
  # }
1306
1321
  #
1307
1322
  # @!attribute [rw] account_ids
1308
- # A list of account IDs of the AWS accounts that sent invitations to
1309
- # the current member account that you want to delete invitations from.
1323
+ # A list of account IDs of the Amazon Web Services accounts that sent
1324
+ # invitations to the current member account that you want to delete
1325
+ # invitations from.
1310
1326
  # @return [Array<String>]
1311
1327
  #
1312
1328
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteInvitationsRequest AWS API Documentation
@@ -1576,6 +1592,9 @@ module Aws::GuardDuty
1576
1592
  #
1577
1593
  # @!attribute [rw] destination_arn
1578
1594
  # The ARN of the resource to publish to.
1595
+ #
1596
+ # To specify an S3 bucket folder use the following format:
1597
+ # `arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/`
1579
1598
  # @return [String]
1580
1599
  #
1581
1600
  # @!attribute [rw] kms_key_arn
@@ -1599,8 +1618,8 @@ module Aws::GuardDuty
1599
1618
  # }
1600
1619
  #
1601
1620
  # @!attribute [rw] admin_account_id
1602
- # The AWS Account ID for the organizations account to be disabled as a
1603
- # GuardDuty delegated administrator.
1621
+ # The Amazon Web Services Account ID for the organizations account to
1622
+ # be disabled as a GuardDuty delegated administrator.
1604
1623
  # @return [String]
1605
1624
  #
1606
1625
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisableOrganizationAdminAccountRequest AWS API Documentation
@@ -1696,7 +1715,7 @@ module Aws::GuardDuty
1696
1715
  # Contains information about the domain.
1697
1716
  #
1698
1717
  # @!attribute [rw] domain
1699
- # The domain information for the AWS API call.
1718
+ # The domain information for the Amazon Web Services API call.
1700
1719
  # @return [String]
1701
1720
  #
1702
1721
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DomainDetails AWS API Documentation
@@ -1715,8 +1734,8 @@ module Aws::GuardDuty
1715
1734
  # }
1716
1735
  #
1717
1736
  # @!attribute [rw] admin_account_id
1718
- # The AWS Account ID for the organization account to be enabled as a
1719
- # GuardDuty delegated administrator.
1737
+ # The Amazon Web Services Account ID for the organization account to
1738
+ # be enabled as a GuardDuty delegated administrator.
1720
1739
  # @return [String]
1721
1740
  #
1722
1741
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/EnableOrganizationAdminAccountRequest AWS API Documentation
@@ -1781,8 +1800,9 @@ module Aws::GuardDuty
1781
1800
  # @return [String]
1782
1801
  #
1783
1802
  # @!attribute [rw] resource
1784
- # Contains information about the AWS resource associated with the
1785
- # activity that prompted GuardDuty to generate a finding.
1803
+ # Contains information about the Amazon Web Services resource
1804
+ # associated with the activity that prompted GuardDuty to generate a
1805
+ # finding.
1786
1806
  # @return [Types::Resource]
1787
1807
  #
1788
1808
  # @!attribute [rw] schema_version
@@ -2185,8 +2205,7 @@ module Aws::GuardDuty
2185
2205
  # @return [String]
2186
2206
  #
2187
2207
  # @!attribute [rw] location
2188
- # The URI of the file that contains the IPSet. For example:
2189
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
2208
+ # The URI of the file that contains the IPSet.
2190
2209
  # @return [String]
2191
2210
  #
2192
2211
  # @!attribute [rw] status
@@ -2384,8 +2403,7 @@ module Aws::GuardDuty
2384
2403
  # @return [String]
2385
2404
  #
2386
2405
  # @!attribute [rw] location
2387
- # The URI of the file that contains the ThreatIntelSet. For example:
2388
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
2406
+ # The URI of the file that contains the ThreatIntelSet.
2389
2407
  # @return [String]
2390
2408
  #
2391
2409
  # @!attribute [rw] status
@@ -2536,8 +2554,8 @@ module Aws::GuardDuty
2536
2554
  # @return [String]
2537
2555
  #
2538
2556
  # @!attribute [rw] outpost_arn
2539
- # The Amazon Resource Name (ARN) of the AWS Outpost. Only applicable
2540
- # to AWS Outposts instances.
2557
+ # The Amazon Resource Name (ARN) of the Amazon Web Services Outpost.
2558
+ # Only applicable to Amazon Web Services Outposts instances.
2541
2559
  # @return [String]
2542
2560
  #
2543
2561
  # @!attribute [rw] launch_time
@@ -2903,8 +2921,6 @@ module Aws::GuardDuty
2903
2921
  #
2904
2922
  # * service.action.networkConnectionAction.protocol
2905
2923
  #
2906
- # * service.action.networkConnectionAction.remoteIpDetails.city.cityName
2907
- #
2908
2924
  # * service.action.networkConnectionAction.remoteIpDetails.country.countryName
2909
2925
  #
2910
2926
  # * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
@@ -3833,6 +3849,29 @@ module Aws::GuardDuty
3833
3849
  include Aws::Structure
3834
3850
  end
3835
3851
 
3852
+ # Contains details about the remote Amazon Web Services account that
3853
+ # made the API call.
3854
+ #
3855
+ # @!attribute [rw] account_id
3856
+ # The Amazon Web Services account ID of the remote API caller.
3857
+ # @return [String]
3858
+ #
3859
+ # @!attribute [rw] affiliated
3860
+ # Details on whether the Amazon Web Services account of the remote API
3861
+ # caller is related to your GuardDuty environment. If this value is
3862
+ # `True` the API caller is affiliated to your account in some way. If
3863
+ # it is `False` the API caller is from outside your environment.
3864
+ # @return [Boolean]
3865
+ #
3866
+ # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/RemoteAccountDetails AWS API Documentation
3867
+ #
3868
+ class RemoteAccountDetails < Struct.new(
3869
+ :account_id,
3870
+ :affiliated)
3871
+ SENSITIVE = []
3872
+ include Aws::Structure
3873
+ end
3874
+
3836
3875
  # Contains information about the remote IP address of the connection.
3837
3876
  #
3838
3877
  # @!attribute [rw] city
@@ -3886,8 +3925,8 @@ module Aws::GuardDuty
3886
3925
  include Aws::Structure
3887
3926
  end
3888
3927
 
3889
- # Contains information about the AWS resource associated with the
3890
- # activity that prompted GuardDuty to generate a finding.
3928
+ # Contains information about the Amazon Web Services resource associated
3929
+ # with the activity that prompted GuardDuty to generate a finding.
3891
3930
  #
3892
3931
  # @!attribute [rw] access_key_details
3893
3932
  # The IAM access key details (IAM user information) of a user that
@@ -3905,7 +3944,7 @@ module Aws::GuardDuty
3905
3944
  # @return [Types::InstanceDetails]
3906
3945
  #
3907
3946
  # @!attribute [rw] resource_type
3908
- # The type of AWS resource.
3947
+ # The type of Amazon Web Services resource.
3909
3948
  # @return [String]
3910
3949
  #
3911
3950
  # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Resource AWS API Documentation
@@ -4061,7 +4100,8 @@ module Aws::GuardDuty
4061
4100
  # @return [String]
4062
4101
  #
4063
4102
  # @!attribute [rw] service_name
4064
- # The name of the AWS service (GuardDuty) that generated a finding.
4103
+ # The name of the Amazon Web Services service (GuardDuty) that
4104
+ # generated a finding.
4065
4105
  # @return [String]
4066
4106
  #
4067
4107
  # @!attribute [rw] user_feedback
@@ -4317,7 +4357,7 @@ module Aws::GuardDuty
4317
4357
  # Contains information about the accounts that weren't processed.
4318
4358
  #
4319
4359
  # @!attribute [rw] account_id
4320
- # The AWS account ID.
4360
+ # The Amazon Web Services account ID.
4321
4361
  # @return [String]
4322
4362
  #
4323
4363
  # @!attribute [rw] result
@@ -4559,8 +4599,7 @@ module Aws::GuardDuty
4559
4599
  # @return [String]
4560
4600
  #
4561
4601
  # @!attribute [rw] location
4562
- # The updated URI of the file that contains the IPSet. For example:
4563
- # https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
4602
+ # The updated URI of the file that contains the IPSet.
4564
4603
  # @return [String]
4565
4604
  #
4566
4605
  # @!attribute [rw] activate
@@ -4836,10 +4875,11 @@ module Aws::GuardDuty
4836
4875
  include Aws::Structure
4837
4876
  end
4838
4877
 
4839
- # Contains information on the sum of usage based on an AWS resource.
4878
+ # Contains information on the sum of usage based on an Amazon Web
4879
+ # Services resource.
4840
4880
  #
4841
4881
  # @!attribute [rw] resource
4842
- # The AWS resource that generated usage.
4882
+ # The Amazon Web Services resource that generated usage.
4843
4883
  # @return [String]
4844
4884
  #
4845
4885
  # @!attribute [rw] total
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-guardduty/customizations'
48
48
  # @!group service
49
49
  module Aws::GuardDuty
50
50
 
51
- GEM_VERSION = '1.52.0'
51
+ GEM_VERSION = '1.53.0'
52
52
 
53
53
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-guardduty
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.52.0
4
+ version: 1.53.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-12-21 00:00:00.000000000 Z
11
+ date: 2022-01-20 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core