aws-sdk-guardduty 1.52.0 → 1.53.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-guardduty/client.rb +49 -39
- data/lib/aws-sdk-guardduty/client_api.rb +6 -0
- data/lib/aws-sdk-guardduty/types.rb +82 -42
- data/lib/aws-sdk-guardduty.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 17b3f3bea4ddcd2bc98bb6358d91e3deeacbdcc1624ebc046970b8f2ec814498
|
|
4
|
+
data.tar.gz: 4a2a233baf7377d8ca1d48fb0ca6f1330a7ac1db47dbb99a229f744ffe5d5cda
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 19541da8bdeb995280d58b013c01a97d77e0624f78e95e7221de1f1e6c1a517abfea62c3ed45f5489c83096fdb0a02a1d599292ff845b5b1461b16fb107c9076
|
|
7
|
+
data.tar.gz: b3aa2a323a1eb62110fa1e15ffd30cedc5ad428b400447e282e03cd73fdfcf94278aad93978fe8c78fc1926a3edb3dcd24298f0df7f5766f1a8cb00e36e65a92
|
data/CHANGELOG.md
CHANGED
|
@@ -1,6 +1,11 @@
|
|
|
1
1
|
Unreleased Changes
|
|
2
2
|
------------------
|
|
3
3
|
|
|
4
|
+
1.53.0 (2022-01-20)
|
|
5
|
+
------------------
|
|
6
|
+
|
|
7
|
+
* Feature - Amazon GuardDuty findings now include remoteAccountDetails under AwsApiCallAction section if instance credential is exfiltrated.
|
|
8
|
+
|
|
4
9
|
1.52.0 (2021-12-21)
|
|
5
10
|
------------------
|
|
6
11
|
|
data/VERSION
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
1.
|
|
1
|
+
1.53.0
|
|
@@ -591,6 +591,16 @@ module Aws::GuardDuty
|
|
|
591
591
|
#
|
|
592
592
|
# * service.additionalInfo.threatListName
|
|
593
593
|
#
|
|
594
|
+
# * resource.s3BucketDetails.publicAccess.effectivePermissions
|
|
595
|
+
#
|
|
596
|
+
# * resource.s3BucketDetails.name
|
|
597
|
+
#
|
|
598
|
+
# * resource.s3BucketDetails.tags.key
|
|
599
|
+
#
|
|
600
|
+
# * resource.s3BucketDetails.tags.value
|
|
601
|
+
#
|
|
602
|
+
# * resource.s3BucketDetails.type
|
|
603
|
+
#
|
|
594
604
|
# * service.archived
|
|
595
605
|
#
|
|
596
606
|
# When this attribute is set to TRUE, only archived findings are
|
|
@@ -670,10 +680,10 @@ module Aws::GuardDuty
|
|
|
670
680
|
|
|
671
681
|
# Creates a new IPSet, which is called a trusted IP list in the console
|
|
672
682
|
# user interface. An IPSet is a list of IP addresses that are trusted
|
|
673
|
-
# for secure communication with
|
|
674
|
-
# GuardDuty doesn't generate findings for IP addresses
|
|
675
|
-
# included in IPSets. Only users from the administrator account
|
|
676
|
-
# this operation.
|
|
683
|
+
# for secure communication with Amazon Web Services infrastructure and
|
|
684
|
+
# applications. GuardDuty doesn't generate findings for IP addresses
|
|
685
|
+
# that are included in IPSets. Only users from the administrator account
|
|
686
|
+
# can use this operation.
|
|
677
687
|
#
|
|
678
688
|
# @option params [required, String] :detector_id
|
|
679
689
|
# The unique ID of the detector of the GuardDuty account that you want
|
|
@@ -689,8 +699,7 @@ module Aws::GuardDuty
|
|
|
689
699
|
# The format of the file that contains the IPSet.
|
|
690
700
|
#
|
|
691
701
|
# @option params [required, String] :location
|
|
692
|
-
# The URI of the file that contains the IPSet.
|
|
693
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
|
702
|
+
# The URI of the file that contains the IPSet.
|
|
694
703
|
#
|
|
695
704
|
# @option params [required, Boolean] :activate
|
|
696
705
|
# A Boolean value that indicates whether GuardDuty is to start using the
|
|
@@ -736,10 +745,10 @@ module Aws::GuardDuty
|
|
|
736
745
|
req.send_request(options)
|
|
737
746
|
end
|
|
738
747
|
|
|
739
|
-
# Creates member accounts of the current
|
|
740
|
-
# list of
|
|
741
|
-
# associated member accounts either by
|
|
742
|
-
# organization.
|
|
748
|
+
# Creates member accounts of the current Amazon Web Services account by
|
|
749
|
+
# specifying a list of Amazon Web Services account IDs. This step is a
|
|
750
|
+
# prerequisite for managing the associated member accounts either by
|
|
751
|
+
# invitation or through an organization.
|
|
743
752
|
#
|
|
744
753
|
# When using `Create Members` as an organizations delegated
|
|
745
754
|
# administrator this action will enable GuardDuty in the added member
|
|
@@ -890,8 +899,7 @@ module Aws::GuardDuty
|
|
|
890
899
|
# The format of the file that contains the ThreatIntelSet.
|
|
891
900
|
#
|
|
892
901
|
# @option params [required, String] :location
|
|
893
|
-
# The URI of the file that contains the ThreatIntelSet.
|
|
894
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
|
902
|
+
# The URI of the file that contains the ThreatIntelSet.
|
|
895
903
|
#
|
|
896
904
|
# @option params [required, Boolean] :activate
|
|
897
905
|
# A Boolean value that indicates whether GuardDuty is to start using the
|
|
@@ -937,12 +945,13 @@ module Aws::GuardDuty
|
|
|
937
945
|
req.send_request(options)
|
|
938
946
|
end
|
|
939
947
|
|
|
940
|
-
# Declines invitations sent to the current member account by
|
|
941
|
-
# accounts specified by their account IDs.
|
|
948
|
+
# Declines invitations sent to the current member account by Amazon Web
|
|
949
|
+
# Services accounts specified by their account IDs.
|
|
942
950
|
#
|
|
943
951
|
# @option params [required, Array<String>] :account_ids
|
|
944
|
-
# A list of account IDs of the
|
|
945
|
-
# current member account that you want to decline
|
|
952
|
+
# A list of account IDs of the Amazon Web Services accounts that sent
|
|
953
|
+
# invitations to the current member account that you want to decline
|
|
954
|
+
# invitations from.
|
|
946
955
|
#
|
|
947
956
|
# @return [Types::DeclineInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
|
948
957
|
#
|
|
@@ -1045,12 +1054,13 @@ module Aws::GuardDuty
|
|
|
1045
1054
|
req.send_request(options)
|
|
1046
1055
|
end
|
|
1047
1056
|
|
|
1048
|
-
# Deletes invitations sent to the current member account by
|
|
1049
|
-
# specified by their account IDs.
|
|
1057
|
+
# Deletes invitations sent to the current member account by Amazon Web
|
|
1058
|
+
# Services accounts specified by their account IDs.
|
|
1050
1059
|
#
|
|
1051
1060
|
# @option params [required, Array<String>] :account_ids
|
|
1052
|
-
# A list of account IDs of the
|
|
1053
|
-
# current member account that you want to delete
|
|
1061
|
+
# A list of account IDs of the Amazon Web Services accounts that sent
|
|
1062
|
+
# invitations to the current member account that you want to delete
|
|
1063
|
+
# invitations from.
|
|
1054
1064
|
#
|
|
1055
1065
|
# @return [Types::DeleteInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
|
1056
1066
|
#
|
|
@@ -1245,12 +1255,12 @@ module Aws::GuardDuty
|
|
|
1245
1255
|
req.send_request(options)
|
|
1246
1256
|
end
|
|
1247
1257
|
|
|
1248
|
-
# Disables an
|
|
1249
|
-
# delegated administrator.
|
|
1258
|
+
# Disables an Amazon Web Services account within the Organization as the
|
|
1259
|
+
# GuardDuty delegated administrator.
|
|
1250
1260
|
#
|
|
1251
1261
|
# @option params [required, String] :admin_account_id
|
|
1252
|
-
# The
|
|
1253
|
-
# GuardDuty delegated administrator.
|
|
1262
|
+
# The Amazon Web Services Account ID for the organizations account to be
|
|
1263
|
+
# disabled as a GuardDuty delegated administrator.
|
|
1254
1264
|
#
|
|
1255
1265
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
|
1256
1266
|
#
|
|
@@ -1329,12 +1339,12 @@ module Aws::GuardDuty
|
|
|
1329
1339
|
req.send_request(options)
|
|
1330
1340
|
end
|
|
1331
1341
|
|
|
1332
|
-
# Enables an
|
|
1333
|
-
# delegated administrator.
|
|
1342
|
+
# Enables an Amazon Web Services account within the organization as the
|
|
1343
|
+
# GuardDuty delegated administrator.
|
|
1334
1344
|
#
|
|
1335
1345
|
# @option params [required, String] :admin_account_id
|
|
1336
|
-
# The
|
|
1337
|
-
# GuardDuty delegated administrator.
|
|
1346
|
+
# The Amazon Web Services Account ID for the organization account to be
|
|
1347
|
+
# enabled as a GuardDuty delegated administrator.
|
|
1338
1348
|
#
|
|
1339
1349
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
|
1340
1350
|
#
|
|
@@ -1573,6 +1583,8 @@ module Aws::GuardDuty
|
|
|
1573
1583
|
# resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.isp #=> String
|
|
1574
1584
|
# resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.org #=> String
|
|
1575
1585
|
# resp.findings[0].service.action.aws_api_call_action.service_name #=> String
|
|
1586
|
+
# resp.findings[0].service.action.aws_api_call_action.remote_account_details.account_id #=> String
|
|
1587
|
+
# resp.findings[0].service.action.aws_api_call_action.remote_account_details.affiliated #=> Boolean
|
|
1576
1588
|
# resp.findings[0].service.action.dns_request_action.domain #=> String
|
|
1577
1589
|
# resp.findings[0].service.action.network_connection_action.blocked #=> Boolean
|
|
1578
1590
|
# resp.findings[0].service.action.network_connection_action.connection_direction #=> String
|
|
@@ -2000,10 +2012,11 @@ module Aws::GuardDuty
|
|
|
2000
2012
|
req.send_request(options)
|
|
2001
2013
|
end
|
|
2002
2014
|
|
|
2003
|
-
# Invites other
|
|
2004
|
-
# account by CreateMembers) to enable
|
|
2005
|
-
#
|
|
2006
|
-
# behalf as the GuardDuty
|
|
2015
|
+
# Invites other Amazon Web Services accounts (created as members of the
|
|
2016
|
+
# current Amazon Web Services account by CreateMembers) to enable
|
|
2017
|
+
# GuardDuty, and allow the current Amazon Web Services account to view
|
|
2018
|
+
# and manage these accounts' findings on their behalf as the GuardDuty
|
|
2019
|
+
# administrator account.
|
|
2007
2020
|
#
|
|
2008
2021
|
# @option params [required, String] :detector_id
|
|
2009
2022
|
# The unique ID of the detector of the GuardDuty account that you want
|
|
@@ -2225,8 +2238,6 @@ module Aws::GuardDuty
|
|
|
2225
2238
|
#
|
|
2226
2239
|
# * service.action.networkConnectionAction.protocol
|
|
2227
2240
|
#
|
|
2228
|
-
# * service.action.networkConnectionAction.remoteIpDetails.city.cityName
|
|
2229
|
-
#
|
|
2230
2241
|
# * service.action.networkConnectionAction.remoteIpDetails.country.countryName
|
|
2231
2242
|
#
|
|
2232
2243
|
# * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
|
|
@@ -2373,7 +2384,7 @@ module Aws::GuardDuty
|
|
|
2373
2384
|
end
|
|
2374
2385
|
|
|
2375
2386
|
# Lists all GuardDuty membership invitations that were sent to the
|
|
2376
|
-
# current
|
|
2387
|
+
# current Amazon Web Services account.
|
|
2377
2388
|
#
|
|
2378
2389
|
# @option params [Integer] :max_results
|
|
2379
2390
|
# You can use this parameter to indicate the maximum number of items
|
|
@@ -2522,7 +2533,7 @@ module Aws::GuardDuty
|
|
|
2522
2533
|
end
|
|
2523
2534
|
|
|
2524
2535
|
# Returns a list of publishing destinations associated with the
|
|
2525
|
-
# specified `
|
|
2536
|
+
# specified `detectorId`.
|
|
2526
2537
|
#
|
|
2527
2538
|
# @option params [required, String] :detector_id
|
|
2528
2539
|
# The ID of the detector to retrieve publishing destinations for.
|
|
@@ -2965,8 +2976,7 @@ module Aws::GuardDuty
|
|
|
2965
2976
|
# The unique ID that specifies the IPSet that you want to update.
|
|
2966
2977
|
#
|
|
2967
2978
|
# @option params [String] :location
|
|
2968
|
-
# The updated URI of the file that contains the IPSet.
|
|
2969
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
|
2979
|
+
# The updated URI of the file that contains the IPSet.
|
|
2970
2980
|
#
|
|
2971
2981
|
# @option params [Boolean] :activate
|
|
2972
2982
|
# The updated Boolean value that specifies whether the IPSet is active
|
|
@@ -3161,7 +3171,7 @@ module Aws::GuardDuty
|
|
|
3161
3171
|
params: params,
|
|
3162
3172
|
config: config)
|
|
3163
3173
|
context[:gem_name] = 'aws-sdk-guardduty'
|
|
3164
|
-
context[:gem_version] = '1.
|
|
3174
|
+
context[:gem_version] = '1.53.0'
|
|
3165
3175
|
Seahorse::Client::Request.new(handlers, context)
|
|
3166
3176
|
end
|
|
3167
3177
|
|
|
@@ -211,6 +211,7 @@ module Aws::GuardDuty
|
|
|
211
211
|
ProductCodes = Shapes::ListShape.new(name: 'ProductCodes')
|
|
212
212
|
PublicAccess = Shapes::StructureShape.new(name: 'PublicAccess')
|
|
213
213
|
PublishingStatus = Shapes::StringShape.new(name: 'PublishingStatus')
|
|
214
|
+
RemoteAccountDetails = Shapes::StructureShape.new(name: 'RemoteAccountDetails')
|
|
214
215
|
RemoteIpDetails = Shapes::StructureShape.new(name: 'RemoteIpDetails')
|
|
215
216
|
RemotePortDetails = Shapes::StructureShape.new(name: 'RemotePortDetails')
|
|
216
217
|
Resource = Shapes::StructureShape.new(name: 'Resource')
|
|
@@ -329,6 +330,7 @@ module Aws::GuardDuty
|
|
|
329
330
|
AwsApiCallAction.add_member(:error_code, Shapes::ShapeRef.new(shape: String, location_name: "errorCode"))
|
|
330
331
|
AwsApiCallAction.add_member(:remote_ip_details, Shapes::ShapeRef.new(shape: RemoteIpDetails, location_name: "remoteIpDetails"))
|
|
331
332
|
AwsApiCallAction.add_member(:service_name, Shapes::ShapeRef.new(shape: String, location_name: "serviceName"))
|
|
333
|
+
AwsApiCallAction.add_member(:remote_account_details, Shapes::ShapeRef.new(shape: RemoteAccountDetails, location_name: "remoteAccountDetails"))
|
|
332
334
|
AwsApiCallAction.struct_class = Types::AwsApiCallAction
|
|
333
335
|
|
|
334
336
|
BadRequestException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
|
|
@@ -963,6 +965,10 @@ module Aws::GuardDuty
|
|
|
963
965
|
PublicAccess.add_member(:effective_permission, Shapes::ShapeRef.new(shape: String, location_name: "effectivePermission"))
|
|
964
966
|
PublicAccess.struct_class = Types::PublicAccess
|
|
965
967
|
|
|
968
|
+
RemoteAccountDetails.add_member(:account_id, Shapes::ShapeRef.new(shape: String, location_name: "accountId"))
|
|
969
|
+
RemoteAccountDetails.add_member(:affiliated, Shapes::ShapeRef.new(shape: Boolean, location_name: "affiliated"))
|
|
970
|
+
RemoteAccountDetails.struct_class = Types::RemoteAccountDetails
|
|
971
|
+
|
|
966
972
|
RemoteIpDetails.add_member(:city, Shapes::ShapeRef.new(shape: City, location_name: "city"))
|
|
967
973
|
RemoteIpDetails.add_member(:country, Shapes::ShapeRef.new(shape: Country, location_name: "country"))
|
|
968
974
|
RemoteIpDetails.add_member(:geo_location, Shapes::ShapeRef.new(shape: GeoLocation, location_name: "geoLocation"))
|
|
@@ -181,7 +181,7 @@ module Aws::GuardDuty
|
|
|
181
181
|
# delegated administrator.
|
|
182
182
|
#
|
|
183
183
|
# @!attribute [rw] admin_account_id
|
|
184
|
-
# The
|
|
184
|
+
# The Amazon Web Services account ID for the account.
|
|
185
185
|
# @return [String]
|
|
186
186
|
#
|
|
187
187
|
# @!attribute [rw] admin_status
|
|
@@ -231,30 +231,36 @@ module Aws::GuardDuty
|
|
|
231
231
|
# Contains information about the API action.
|
|
232
232
|
#
|
|
233
233
|
# @!attribute [rw] api
|
|
234
|
-
# The
|
|
234
|
+
# The Amazon Web Services API name.
|
|
235
235
|
# @return [String]
|
|
236
236
|
#
|
|
237
237
|
# @!attribute [rw] caller_type
|
|
238
|
-
# The
|
|
238
|
+
# The Amazon Web Services API caller type.
|
|
239
239
|
# @return [String]
|
|
240
240
|
#
|
|
241
241
|
# @!attribute [rw] domain_details
|
|
242
|
-
# The domain information for the
|
|
242
|
+
# The domain information for the Amazon Web Services API call.
|
|
243
243
|
# @return [Types::DomainDetails]
|
|
244
244
|
#
|
|
245
245
|
# @!attribute [rw] error_code
|
|
246
|
-
# The error code of the failed
|
|
246
|
+
# The error code of the failed Amazon Web Services API action.
|
|
247
247
|
# @return [String]
|
|
248
248
|
#
|
|
249
249
|
# @!attribute [rw] remote_ip_details
|
|
250
|
-
# The remote IP information of the connection that initiated the
|
|
251
|
-
# API call.
|
|
250
|
+
# The remote IP information of the connection that initiated the
|
|
251
|
+
# Amazon Web Services API call.
|
|
252
252
|
# @return [Types::RemoteIpDetails]
|
|
253
253
|
#
|
|
254
254
|
# @!attribute [rw] service_name
|
|
255
|
-
# The
|
|
255
|
+
# The Amazon Web Services service name whose API was invoked.
|
|
256
256
|
# @return [String]
|
|
257
257
|
#
|
|
258
|
+
# @!attribute [rw] remote_account_details
|
|
259
|
+
# The details of the Amazon Web Services account that made the API
|
|
260
|
+
# call. This field appears if the call was made from outside your
|
|
261
|
+
# account.
|
|
262
|
+
# @return [Types::RemoteAccountDetails]
|
|
263
|
+
#
|
|
258
264
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/AwsApiCallAction AWS API Documentation
|
|
259
265
|
#
|
|
260
266
|
class AwsApiCallAction < Struct.new(
|
|
@@ -263,7 +269,8 @@ module Aws::GuardDuty
|
|
|
263
269
|
:domain_details,
|
|
264
270
|
:error_code,
|
|
265
271
|
:remote_ip_details,
|
|
266
|
-
:service_name
|
|
272
|
+
:service_name,
|
|
273
|
+
:remote_account_details)
|
|
267
274
|
SENSITIVE = []
|
|
268
275
|
include Aws::Structure
|
|
269
276
|
end
|
|
@@ -742,6 +749,16 @@ module Aws::GuardDuty
|
|
|
742
749
|
#
|
|
743
750
|
# * service.additionalInfo.threatListName
|
|
744
751
|
#
|
|
752
|
+
# * resource.s3BucketDetails.publicAccess.effectivePermissions
|
|
753
|
+
#
|
|
754
|
+
# * resource.s3BucketDetails.name
|
|
755
|
+
#
|
|
756
|
+
# * resource.s3BucketDetails.tags.key
|
|
757
|
+
#
|
|
758
|
+
# * resource.s3BucketDetails.tags.value
|
|
759
|
+
#
|
|
760
|
+
# * resource.s3BucketDetails.type
|
|
761
|
+
#
|
|
745
762
|
# * service.archived
|
|
746
763
|
#
|
|
747
764
|
# When this attribute is set to TRUE, only archived findings are
|
|
@@ -832,8 +849,7 @@ module Aws::GuardDuty
|
|
|
832
849
|
# @return [String]
|
|
833
850
|
#
|
|
834
851
|
# @!attribute [rw] location
|
|
835
|
-
# The URI of the file that contains the IPSet.
|
|
836
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
|
852
|
+
# The URI of the file that contains the IPSet.
|
|
837
853
|
# @return [String]
|
|
838
854
|
#
|
|
839
855
|
# @!attribute [rw] activate
|
|
@@ -1041,8 +1057,7 @@ module Aws::GuardDuty
|
|
|
1041
1057
|
# @return [String]
|
|
1042
1058
|
#
|
|
1043
1059
|
# @!attribute [rw] location
|
|
1044
|
-
# The URI of the file that contains the ThreatIntelSet.
|
|
1045
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
|
1060
|
+
# The URI of the file that contains the ThreatIntelSet.
|
|
1046
1061
|
# @return [String]
|
|
1047
1062
|
#
|
|
1048
1063
|
# @!attribute [rw] activate
|
|
@@ -1165,9 +1180,9 @@ module Aws::GuardDuty
|
|
|
1165
1180
|
# }
|
|
1166
1181
|
#
|
|
1167
1182
|
# @!attribute [rw] account_ids
|
|
1168
|
-
# A list of account IDs of the
|
|
1169
|
-
# the current member account that you want to decline
|
|
1170
|
-
# from.
|
|
1183
|
+
# A list of account IDs of the Amazon Web Services accounts that sent
|
|
1184
|
+
# invitations to the current member account that you want to decline
|
|
1185
|
+
# invitations from.
|
|
1171
1186
|
# @return [Array<String>]
|
|
1172
1187
|
#
|
|
1173
1188
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeclineInvitationsRequest AWS API Documentation
|
|
@@ -1305,8 +1320,9 @@ module Aws::GuardDuty
|
|
|
1305
1320
|
# }
|
|
1306
1321
|
#
|
|
1307
1322
|
# @!attribute [rw] account_ids
|
|
1308
|
-
# A list of account IDs of the
|
|
1309
|
-
# the current member account that you want to delete
|
|
1323
|
+
# A list of account IDs of the Amazon Web Services accounts that sent
|
|
1324
|
+
# invitations to the current member account that you want to delete
|
|
1325
|
+
# invitations from.
|
|
1310
1326
|
# @return [Array<String>]
|
|
1311
1327
|
#
|
|
1312
1328
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteInvitationsRequest AWS API Documentation
|
|
@@ -1576,6 +1592,9 @@ module Aws::GuardDuty
|
|
|
1576
1592
|
#
|
|
1577
1593
|
# @!attribute [rw] destination_arn
|
|
1578
1594
|
# The ARN of the resource to publish to.
|
|
1595
|
+
#
|
|
1596
|
+
# To specify an S3 bucket folder use the following format:
|
|
1597
|
+
# `arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/`
|
|
1579
1598
|
# @return [String]
|
|
1580
1599
|
#
|
|
1581
1600
|
# @!attribute [rw] kms_key_arn
|
|
@@ -1599,8 +1618,8 @@ module Aws::GuardDuty
|
|
|
1599
1618
|
# }
|
|
1600
1619
|
#
|
|
1601
1620
|
# @!attribute [rw] admin_account_id
|
|
1602
|
-
# The
|
|
1603
|
-
# GuardDuty delegated administrator.
|
|
1621
|
+
# The Amazon Web Services Account ID for the organizations account to
|
|
1622
|
+
# be disabled as a GuardDuty delegated administrator.
|
|
1604
1623
|
# @return [String]
|
|
1605
1624
|
#
|
|
1606
1625
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisableOrganizationAdminAccountRequest AWS API Documentation
|
|
@@ -1696,7 +1715,7 @@ module Aws::GuardDuty
|
|
|
1696
1715
|
# Contains information about the domain.
|
|
1697
1716
|
#
|
|
1698
1717
|
# @!attribute [rw] domain
|
|
1699
|
-
# The domain information for the
|
|
1718
|
+
# The domain information for the Amazon Web Services API call.
|
|
1700
1719
|
# @return [String]
|
|
1701
1720
|
#
|
|
1702
1721
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DomainDetails AWS API Documentation
|
|
@@ -1715,8 +1734,8 @@ module Aws::GuardDuty
|
|
|
1715
1734
|
# }
|
|
1716
1735
|
#
|
|
1717
1736
|
# @!attribute [rw] admin_account_id
|
|
1718
|
-
# The
|
|
1719
|
-
# GuardDuty delegated administrator.
|
|
1737
|
+
# The Amazon Web Services Account ID for the organization account to
|
|
1738
|
+
# be enabled as a GuardDuty delegated administrator.
|
|
1720
1739
|
# @return [String]
|
|
1721
1740
|
#
|
|
1722
1741
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/EnableOrganizationAdminAccountRequest AWS API Documentation
|
|
@@ -1781,8 +1800,9 @@ module Aws::GuardDuty
|
|
|
1781
1800
|
# @return [String]
|
|
1782
1801
|
#
|
|
1783
1802
|
# @!attribute [rw] resource
|
|
1784
|
-
# Contains information about the
|
|
1785
|
-
# activity that prompted GuardDuty to generate a
|
|
1803
|
+
# Contains information about the Amazon Web Services resource
|
|
1804
|
+
# associated with the activity that prompted GuardDuty to generate a
|
|
1805
|
+
# finding.
|
|
1786
1806
|
# @return [Types::Resource]
|
|
1787
1807
|
#
|
|
1788
1808
|
# @!attribute [rw] schema_version
|
|
@@ -2185,8 +2205,7 @@ module Aws::GuardDuty
|
|
|
2185
2205
|
# @return [String]
|
|
2186
2206
|
#
|
|
2187
2207
|
# @!attribute [rw] location
|
|
2188
|
-
# The URI of the file that contains the IPSet.
|
|
2189
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
|
2208
|
+
# The URI of the file that contains the IPSet.
|
|
2190
2209
|
# @return [String]
|
|
2191
2210
|
#
|
|
2192
2211
|
# @!attribute [rw] status
|
|
@@ -2384,8 +2403,7 @@ module Aws::GuardDuty
|
|
|
2384
2403
|
# @return [String]
|
|
2385
2404
|
#
|
|
2386
2405
|
# @!attribute [rw] location
|
|
2387
|
-
# The URI of the file that contains the ThreatIntelSet.
|
|
2388
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
|
2406
|
+
# The URI of the file that contains the ThreatIntelSet.
|
|
2389
2407
|
# @return [String]
|
|
2390
2408
|
#
|
|
2391
2409
|
# @!attribute [rw] status
|
|
@@ -2536,8 +2554,8 @@ module Aws::GuardDuty
|
|
|
2536
2554
|
# @return [String]
|
|
2537
2555
|
#
|
|
2538
2556
|
# @!attribute [rw] outpost_arn
|
|
2539
|
-
# The Amazon Resource Name (ARN) of the
|
|
2540
|
-
# to
|
|
2557
|
+
# The Amazon Resource Name (ARN) of the Amazon Web Services Outpost.
|
|
2558
|
+
# Only applicable to Amazon Web Services Outposts instances.
|
|
2541
2559
|
# @return [String]
|
|
2542
2560
|
#
|
|
2543
2561
|
# @!attribute [rw] launch_time
|
|
@@ -2903,8 +2921,6 @@ module Aws::GuardDuty
|
|
|
2903
2921
|
#
|
|
2904
2922
|
# * service.action.networkConnectionAction.protocol
|
|
2905
2923
|
#
|
|
2906
|
-
# * service.action.networkConnectionAction.remoteIpDetails.city.cityName
|
|
2907
|
-
#
|
|
2908
2924
|
# * service.action.networkConnectionAction.remoteIpDetails.country.countryName
|
|
2909
2925
|
#
|
|
2910
2926
|
# * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
|
|
@@ -3833,6 +3849,29 @@ module Aws::GuardDuty
|
|
|
3833
3849
|
include Aws::Structure
|
|
3834
3850
|
end
|
|
3835
3851
|
|
|
3852
|
+
# Contains details about the remote Amazon Web Services account that
|
|
3853
|
+
# made the API call.
|
|
3854
|
+
#
|
|
3855
|
+
# @!attribute [rw] account_id
|
|
3856
|
+
# The Amazon Web Services account ID of the remote API caller.
|
|
3857
|
+
# @return [String]
|
|
3858
|
+
#
|
|
3859
|
+
# @!attribute [rw] affiliated
|
|
3860
|
+
# Details on whether the Amazon Web Services account of the remote API
|
|
3861
|
+
# caller is related to your GuardDuty environment. If this value is
|
|
3862
|
+
# `True` the API caller is affiliated to your account in some way. If
|
|
3863
|
+
# it is `False` the API caller is from outside your environment.
|
|
3864
|
+
# @return [Boolean]
|
|
3865
|
+
#
|
|
3866
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/RemoteAccountDetails AWS API Documentation
|
|
3867
|
+
#
|
|
3868
|
+
class RemoteAccountDetails < Struct.new(
|
|
3869
|
+
:account_id,
|
|
3870
|
+
:affiliated)
|
|
3871
|
+
SENSITIVE = []
|
|
3872
|
+
include Aws::Structure
|
|
3873
|
+
end
|
|
3874
|
+
|
|
3836
3875
|
# Contains information about the remote IP address of the connection.
|
|
3837
3876
|
#
|
|
3838
3877
|
# @!attribute [rw] city
|
|
@@ -3886,8 +3925,8 @@ module Aws::GuardDuty
|
|
|
3886
3925
|
include Aws::Structure
|
|
3887
3926
|
end
|
|
3888
3927
|
|
|
3889
|
-
# Contains information about the
|
|
3890
|
-
# activity that prompted GuardDuty to generate a finding.
|
|
3928
|
+
# Contains information about the Amazon Web Services resource associated
|
|
3929
|
+
# with the activity that prompted GuardDuty to generate a finding.
|
|
3891
3930
|
#
|
|
3892
3931
|
# @!attribute [rw] access_key_details
|
|
3893
3932
|
# The IAM access key details (IAM user information) of a user that
|
|
@@ -3905,7 +3944,7 @@ module Aws::GuardDuty
|
|
|
3905
3944
|
# @return [Types::InstanceDetails]
|
|
3906
3945
|
#
|
|
3907
3946
|
# @!attribute [rw] resource_type
|
|
3908
|
-
# The type of
|
|
3947
|
+
# The type of Amazon Web Services resource.
|
|
3909
3948
|
# @return [String]
|
|
3910
3949
|
#
|
|
3911
3950
|
# @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/Resource AWS API Documentation
|
|
@@ -4061,7 +4100,8 @@ module Aws::GuardDuty
|
|
|
4061
4100
|
# @return [String]
|
|
4062
4101
|
#
|
|
4063
4102
|
# @!attribute [rw] service_name
|
|
4064
|
-
# The name of the
|
|
4103
|
+
# The name of the Amazon Web Services service (GuardDuty) that
|
|
4104
|
+
# generated a finding.
|
|
4065
4105
|
# @return [String]
|
|
4066
4106
|
#
|
|
4067
4107
|
# @!attribute [rw] user_feedback
|
|
@@ -4317,7 +4357,7 @@ module Aws::GuardDuty
|
|
|
4317
4357
|
# Contains information about the accounts that weren't processed.
|
|
4318
4358
|
#
|
|
4319
4359
|
# @!attribute [rw] account_id
|
|
4320
|
-
# The
|
|
4360
|
+
# The Amazon Web Services account ID.
|
|
4321
4361
|
# @return [String]
|
|
4322
4362
|
#
|
|
4323
4363
|
# @!attribute [rw] result
|
|
@@ -4559,8 +4599,7 @@ module Aws::GuardDuty
|
|
|
4559
4599
|
# @return [String]
|
|
4560
4600
|
#
|
|
4561
4601
|
# @!attribute [rw] location
|
|
4562
|
-
# The updated URI of the file that contains the IPSet.
|
|
4563
|
-
# https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
|
|
4602
|
+
# The updated URI of the file that contains the IPSet.
|
|
4564
4603
|
# @return [String]
|
|
4565
4604
|
#
|
|
4566
4605
|
# @!attribute [rw] activate
|
|
@@ -4836,10 +4875,11 @@ module Aws::GuardDuty
|
|
|
4836
4875
|
include Aws::Structure
|
|
4837
4876
|
end
|
|
4838
4877
|
|
|
4839
|
-
# Contains information on the sum of usage based on an
|
|
4878
|
+
# Contains information on the sum of usage based on an Amazon Web
|
|
4879
|
+
# Services resource.
|
|
4840
4880
|
#
|
|
4841
4881
|
# @!attribute [rw] resource
|
|
4842
|
-
# The
|
|
4882
|
+
# The Amazon Web Services resource that generated usage.
|
|
4843
4883
|
# @return [String]
|
|
4844
4884
|
#
|
|
4845
4885
|
# @!attribute [rw] total
|
data/lib/aws-sdk-guardduty.rb
CHANGED
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: aws-sdk-guardduty
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.53.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Amazon Web Services
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2022-01-20 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: aws-sdk-core
|