aws-sdk-macie2 1.5.0 → 1.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -140,18 +140,8 @@ module Aws::Macie2
140
140
  include Aws::Structure
141
141
  end
142
142
 
143
- # For the affected resource:
144
- #
145
- # * The name of the operation that was invoked most recently and
146
- # produced the finding (api).
147
- #
148
- # * The first date and time when any operation was invoked and produced
149
- # the finding (firstSeen).
150
- #
151
- # * The most recent date and time when the specified operation was
152
- # invoked and produced the finding (lastSeen).
153
- #
154
- # All date and time values are in UTC and extended ISO 8601 format.
143
+ # Provides information about an API operation that an entity invoked for
144
+ # an affected resource.
155
145
  #
156
146
  # @!attribute [rw] api
157
147
  # @return [String]
@@ -176,7 +166,10 @@ module Aws::Macie2
176
166
  include Aws::Structure
177
167
  end
178
168
 
179
- # Reserved for future use.
169
+ # Provides information about an identity that performed an action on an
170
+ # affected resource by using temporary security credentials. The
171
+ # credentials were obtained using the AssumeRole operation of the AWS
172
+ # Security Token Service (AWS STS) API.
180
173
  #
181
174
  # @!attribute [rw] access_key_id
182
175
  # @return [String]
@@ -207,7 +200,9 @@ module Aws::Macie2
207
200
  include Aws::Structure
208
201
  end
209
202
 
210
- # Reserved for future use.
203
+ # Provides information about an AWS account and entity that performed an
204
+ # action on an affected resource. The action was performed using the
205
+ # credentials for an AWS account other than your own account.
211
206
  #
212
207
  # @!attribute [rw] account_id
213
208
  # @return [String]
@@ -224,7 +219,8 @@ module Aws::Macie2
224
219
  include Aws::Structure
225
220
  end
226
221
 
227
- # Reserved for future use.
222
+ # Provides information about an AWS service that performed an action on
223
+ # an affected resource.
228
224
  #
229
225
  # @!attribute [rw] invoked_by
230
226
  # @return [String]
@@ -341,8 +337,9 @@ module Aws::Macie2
341
337
  include Aws::Structure
342
338
  end
343
339
 
344
- # The total number of buckets that are publicly accessible, based on a
345
- # combination of permissions settings for each bucket.
340
+ # Provides information about the number of S3 buckets that are publicly
341
+ # accessible based on a combination of permissions settings for each
342
+ # bucket.
346
343
  #
347
344
  # @!attribute [rw] publicly_accessible
348
345
  # @return [Integer]
@@ -363,9 +360,8 @@ module Aws::Macie2
363
360
  include Aws::Structure
364
361
  end
365
362
 
366
- # The total number of buckets, grouped by server-side encryption type.
367
- # This object also reports the total number of buckets that aren't
368
- # encrypted.
363
+ # Provides information about the number of S3 buckets that use certain
364
+ # types of server-side encryption or don't encrypt objects by default.
369
365
  #
370
366
  # @!attribute [rw] kms_managed
371
367
  # @return [Integer]
@@ -386,8 +382,8 @@ module Aws::Macie2
386
382
  include Aws::Structure
387
383
  end
388
384
 
389
- # The total number of buckets that are shared with another AWS account
390
- # or configured to support cross-origin resource sharing (CORS).
385
+ # Provides information about the number of S3 buckets that are shared
386
+ # with other AWS accounts.
391
387
  #
392
388
  # @!attribute [rw] external
393
389
  # @return [Integer]
@@ -459,8 +455,8 @@ module Aws::Macie2
459
455
  include Aws::Structure
460
456
  end
461
457
 
462
- # Provides information about bucket-level permissions settings for an S3
463
- # bucket.
458
+ # Provides information about the bucket-level permissions settings for
459
+ # an S3 bucket.
464
460
  #
465
461
  # @!attribute [rw] access_control_list
466
462
  # Provides information about the permissions settings of the
@@ -512,6 +508,9 @@ module Aws::Macie2
512
508
  # @!attribute [rw] classifiable_object_count
513
509
  # @return [Integer]
514
510
  #
511
+ # @!attribute [rw] classifiable_size_in_bytes
512
+ # @return [Integer]
513
+ #
515
514
  # @!attribute [rw] last_updated
516
515
  # @return [Time]
517
516
  #
@@ -519,10 +518,13 @@ module Aws::Macie2
519
518
  # @return [Integer]
520
519
  #
521
520
  # @!attribute [rw] object_count_by_encryption_type
521
+ # Provides information about the number of objects that are in an S3
522
+ # bucket and use certain types of server-side encryption, use
523
+ # client-side encryption, or aren't encrypted.
522
524
  # @return [Types::ObjectCountByEncryptionType]
523
525
  #
524
526
  # @!attribute [rw] public_access
525
- # Provides information about permissions settings that determine
527
+ # Provides information about the permissions settings that determine
526
528
  # whether an S3 bucket is publicly accessible.
527
529
  # @return [Types::BucketPublicAccess]
528
530
  #
@@ -547,6 +549,22 @@ module Aws::Macie2
547
549
  # @!attribute [rw] tags
548
550
  # @return [Array<Types::KeyValuePair>]
549
551
  #
552
+ # @!attribute [rw] unclassifiable_object_count
553
+ # Provides information about the total storage size (in bytes) or
554
+ # number of objects that Amazon Macie can't analyze in one or more S3
555
+ # buckets. In a BucketMetadata object, this data is for a specific
556
+ # bucket. In a GetBucketStatisticsResponse object, this data is
557
+ # aggregated for all the buckets in the query results.
558
+ # @return [Types::ObjectLevelStatistics]
559
+ #
560
+ # @!attribute [rw] unclassifiable_object_size_in_bytes
561
+ # Provides information about the total storage size (in bytes) or
562
+ # number of objects that Amazon Macie can't analyze in one or more S3
563
+ # buckets. In a BucketMetadata object, this data is for a specific
564
+ # bucket. In a GetBucketStatisticsResponse object, this data is
565
+ # aggregated for all the buckets in the query results.
566
+ # @return [Types::ObjectLevelStatistics]
567
+ #
550
568
  # @!attribute [rw] versioning
551
569
  # @return [Boolean]
552
570
  #
@@ -558,6 +576,7 @@ module Aws::Macie2
558
576
  :bucket_created_at,
559
577
  :bucket_name,
560
578
  :classifiable_object_count,
579
+ :classifiable_size_in_bytes,
561
580
  :last_updated,
562
581
  :object_count,
563
582
  :object_count_by_encryption_type,
@@ -568,13 +587,15 @@ module Aws::Macie2
568
587
  :size_in_bytes,
569
588
  :size_in_bytes_compressed,
570
589
  :tags,
590
+ :unclassifiable_object_count,
591
+ :unclassifiable_object_size_in_bytes,
571
592
  :versioning)
572
593
  SENSITIVE = []
573
594
  include Aws::Structure
574
595
  end
575
596
 
576
- # The account-level and bucket-level permissions settings for an S3
577
- # bucket, or the bucket that contains an object.
597
+ # Provides information about the account-level and bucket-level
598
+ # permissions settings for an S3 bucket.
578
599
  #
579
600
  # @!attribute [rw] account_level_permissions
580
601
  # Provides information about account-level permissions settings that
@@ -582,8 +603,8 @@ module Aws::Macie2
582
603
  # @return [Types::AccountLevelPermissions]
583
604
  #
584
605
  # @!attribute [rw] bucket_level_permissions
585
- # Provides information about bucket-level permissions settings for an
586
- # S3 bucket.
606
+ # Provides information about the bucket-level permissions settings for
607
+ # an S3 bucket.
587
608
  # @return [Types::BucketLevelPermissions]
588
609
  #
589
610
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/BucketPermissionConfiguration AWS API Documentation
@@ -613,15 +634,15 @@ module Aws::Macie2
613
634
  include Aws::Structure
614
635
  end
615
636
 
616
- # Provides information about permissions settings that determine whether
617
- # an S3 bucket is publicly accessible.
637
+ # Provides information about the permissions settings that determine
638
+ # whether an S3 bucket is publicly accessible.
618
639
  #
619
640
  # @!attribute [rw] effective_permission
620
641
  # @return [String]
621
642
  #
622
643
  # @!attribute [rw] permission_configuration
623
- # The account-level and bucket-level permissions settings for an S3
624
- # bucket, or the bucket that contains an object.
644
+ # Provides information about the account-level and bucket-level
645
+ # permissions settings for an S3 bucket.
625
646
  # @return [Types::BucketPermissionConfiguration]
626
647
  #
627
648
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/BucketPublicAccess AWS API Documentation
@@ -673,8 +694,8 @@ module Aws::Macie2
673
694
  #
674
695
  # @!attribute [rw] result
675
696
  # Provides detailed information about a sensitive data finding,
676
- # including the types and number of occurrences of the data that was
677
- # found.
697
+ # including the types and number of occurrences of the sensitive data
698
+ # that was found.
678
699
  # @return [Types::ClassificationResult]
679
700
  #
680
701
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/ClassificationDetails AWS API Documentation
@@ -717,8 +738,8 @@ module Aws::Macie2
717
738
  end
718
739
 
719
740
  # Provides detailed information about a sensitive data finding,
720
- # including the types and number of occurrences of the data that was
721
- # found.
741
+ # including the types and number of occurrences of the sensitive data
742
+ # that was found.
722
743
  #
723
744
  # @!attribute [rw] custom_data_identifiers
724
745
  # Provides information about the number of occurrences of the data
@@ -785,7 +806,10 @@ module Aws::Macie2
785
806
  end
786
807
 
787
808
  # Specifies the scope, schedule, and other settings for a classification
788
- # job.
809
+ # job. You can't delete or change the settings for a classification job
810
+ # after you create it. This helps ensure that you have an immutable
811
+ # history of sensitive data findings and discovery results for data
812
+ # privacy and protection audits or investigations.
789
813
  #
790
814
  # @note When making an API call, you may pass CreateClassificationJobRequest
791
815
  # data as a hash:
@@ -942,7 +966,10 @@ module Aws::Macie2
942
966
  end
943
967
 
944
968
  # Specifies the criteria and other settings for a new custom data
945
- # identifier.
969
+ # identifier. You can't change a custom data identifier after you
970
+ # create it. This helps ensure that you have an immutable history of
971
+ # sensitive data findings and discovery results for data privacy and
972
+ # protection audits or investigations.
946
973
  #
947
974
  # @note When making an API call, you may pass CreateCustomDataIdentifierRequest
948
975
  # data as a hash:
@@ -1307,7 +1334,9 @@ module Aws::Macie2
1307
1334
  # that detected the data for the finding.
1308
1335
  #
1309
1336
  # @!attribute [rw] detections
1310
- # Reserved for future use.
1337
+ # Provides information about custom data identifiers that produced a
1338
+ # sensitive data finding, and the number of occurrences of the data
1339
+ # that each identifier detected.
1311
1340
  # @return [Array<Types::CustomDetection>]
1312
1341
  #
1313
1342
  # @!attribute [rw] total_count
@@ -1345,6 +1374,9 @@ module Aws::Macie2
1345
1374
  include Aws::Structure
1346
1375
  end
1347
1376
 
1377
+ # Specifies that a classification job runs once a day, every day. This
1378
+ # is an empty object.
1379
+ #
1348
1380
  # @api private
1349
1381
  #
1350
1382
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/DailySchedule AWS API Documentation
@@ -1388,7 +1420,7 @@ module Aws::Macie2
1388
1420
  end
1389
1421
 
1390
1422
  # Provides information about sensitive data that was detected by managed
1391
- # data identifiers and produced a finding.
1423
+ # data identifiers and produced a sensitive data finding.
1392
1424
  #
1393
1425
  # @!attribute [rw] count
1394
1426
  # @return [Integer]
@@ -1623,7 +1655,7 @@ module Aws::Macie2
1623
1655
  # @return [String]
1624
1656
  #
1625
1657
  # @!attribute [rw] job_status
1626
- # The current status of a classification job. Valid values are:
1658
+ # The current status of a classification job. Possible values are:
1627
1659
  # @return [String]
1628
1660
  #
1629
1661
  # @!attribute [rw] job_type
@@ -1769,6 +1801,9 @@ module Aws::Macie2
1769
1801
  #
1770
1802
  class DisassociateMemberResponse < Aws::EmptyStructure; end
1771
1803
 
1804
+ # Provides information about the domain name of the device that an
1805
+ # entity used to perform an action on an affected resource.
1806
+ #
1772
1807
  # @!attribute [rw] domain_name
1773
1808
  # @return [String]
1774
1809
  #
@@ -1862,7 +1897,10 @@ module Aws::Macie2
1862
1897
  #
1863
1898
  class EnableOrganizationAdminAccountResponse < Aws::EmptyStructure; end
1864
1899
 
1865
- # Reserved for future use.
1900
+ # Provides information about an identity that performed an action on an
1901
+ # affected resource by using temporary security credentials. The
1902
+ # credentials were obtained using the GetFederationToken operation of
1903
+ # the AWS Security Token Service (AWS STS) API.
1866
1904
  #
1867
1905
  # @!attribute [rw] access_key_id
1868
1906
  # @return [String]
@@ -1926,7 +1964,7 @@ module Aws::Macie2
1926
1964
  # @return [String]
1927
1965
  #
1928
1966
  # @!attribute [rw] policy_details
1929
- # Provides detailed information about a policy finding.
1967
+ # Provides the details of a policy finding.
1930
1968
  # @return [Types::PolicyDetails]
1931
1969
  #
1932
1970
  # @!attribute [rw] region
@@ -1987,22 +2025,12 @@ module Aws::Macie2
1987
2025
  #
1988
2026
  # @!attribute [rw] action_type
1989
2027
  # The type of action that occurred for the resource and produced the
1990
- # policy finding.
2028
+ # policy finding:
1991
2029
  # @return [String]
1992
2030
  #
1993
2031
  # @!attribute [rw] api_call_details
1994
- # For the affected resource:
1995
- #
1996
- # * The name of the operation that was invoked most recently and
1997
- # produced the finding (api).
1998
- #
1999
- # * The first date and time when any operation was invoked and
2000
- # produced the finding (firstSeen).
2001
- #
2002
- # * The most recent date and time when the specified operation was
2003
- # invoked and produced the finding (lastSeen).
2004
- #
2005
- # All date and time values are in UTC and extended ISO 8601 format.
2032
+ # Provides information about an API operation that an entity invoked
2033
+ # for an affected resource.
2006
2034
  # @return [Types::ApiCallDetails]
2007
2035
  #
2008
2036
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/FindingAction AWS API Documentation
@@ -2018,12 +2046,18 @@ module Aws::Macie2
2018
2046
  # produced a policy finding for a resource.
2019
2047
  #
2020
2048
  # @!attribute [rw] domain_details
2049
+ # Provides information about the domain name of the device that an
2050
+ # entity used to perform an action on an affected resource.
2021
2051
  # @return [Types::DomainDetails]
2022
2052
  #
2023
2053
  # @!attribute [rw] ip_address_details
2054
+ # Provides information about the IP address of the device that an
2055
+ # entity used to perform an action on an affected resource.
2024
2056
  # @return [Types::IpAddressDetails]
2025
2057
  #
2026
2058
  # @!attribute [rw] user_identity
2059
+ # Provides information about the type and other characteristics of an
2060
+ # entity that performed an action on an affected resource.
2027
2061
  # @return [Types::UserIdentity]
2028
2062
  #
2029
2063
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/FindingActor AWS API Documentation
@@ -2068,8 +2102,8 @@ module Aws::Macie2
2068
2102
  include Aws::Structure
2069
2103
  end
2070
2104
 
2071
- # Specifies criteria for sorting the results of a query for information
2072
- # about findings.
2105
+ # Specifies criteria for sorting the results of a query that retrieves
2106
+ # aggregated statistical data about findings.
2073
2107
  #
2074
2108
  # @note When making an API call, you may pass FindingStatisticsSortCriteria
2075
2109
  # data as a hash:
@@ -2097,6 +2131,12 @@ module Aws::Macie2
2097
2131
 
2098
2132
  # Provides information about a findings filter.
2099
2133
  #
2134
+ # @!attribute [rw] action
2135
+ # The action to perform on findings that meet the filter criteria. To
2136
+ # suppress (automatically archive) findings that meet the criteria,
2137
+ # set this value to ARCHIVE. Valid values are:
2138
+ # @return [String]
2139
+ #
2100
2140
  # @!attribute [rw] arn
2101
2141
  # @return [String]
2102
2142
  #
@@ -2115,6 +2155,7 @@ module Aws::Macie2
2115
2155
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/FindingsFilterListItem AWS API Documentation
2116
2156
  #
2117
2157
  class FindingsFilterListItem < Struct.new(
2158
+ :action,
2118
2159
  :arn,
2119
2160
  :id,
2120
2161
  :name,
@@ -2123,8 +2164,8 @@ module Aws::Macie2
2123
2164
  include Aws::Structure
2124
2165
  end
2125
2166
 
2126
- # Specifies an account that's associated with S3 buckets to retrieve
2127
- # aggregated statistical data for.
2167
+ # Specifies the account that owns the S3 buckets to retrieve aggregated
2168
+ # statistical data for.
2128
2169
  #
2129
2170
  # @note When making an API call, you may pass GetBucketStatisticsRequest
2130
2171
  # data as a hash:
@@ -2145,31 +2186,34 @@ module Aws::Macie2
2145
2186
  end
2146
2187
 
2147
2188
  # Provides the results of a query that retrieved aggregated statistical
2148
- # data for all the S3 buckets that Amazon Macie monitors and analyzes
2149
- # for an account.
2189
+ # data for the S3 buckets that are owned by an account.
2150
2190
  #
2151
2191
  # @!attribute [rw] bucket_count
2152
2192
  # @return [Integer]
2153
2193
  #
2154
2194
  # @!attribute [rw] bucket_count_by_effective_permission
2155
- # The total number of buckets that are publicly accessible, based on a
2156
- # combination of permissions settings for each bucket.
2195
+ # Provides information about the number of S3 buckets that are
2196
+ # publicly accessible based on a combination of permissions settings
2197
+ # for each bucket.
2157
2198
  # @return [Types::BucketCountByEffectivePermission]
2158
2199
  #
2159
2200
  # @!attribute [rw] bucket_count_by_encryption_type
2160
- # The total number of buckets, grouped by server-side encryption type.
2161
- # This object also reports the total number of buckets that aren't
2162
- # encrypted.
2201
+ # Provides information about the number of S3 buckets that use certain
2202
+ # types of server-side encryption or don't encrypt objects by
2203
+ # default.
2163
2204
  # @return [Types::BucketCountByEncryptionType]
2164
2205
  #
2165
2206
  # @!attribute [rw] bucket_count_by_shared_access_type
2166
- # The total number of buckets that are shared with another AWS account
2167
- # or configured to support cross-origin resource sharing (CORS).
2207
+ # Provides information about the number of S3 buckets that are shared
2208
+ # with other AWS accounts.
2168
2209
  # @return [Types::BucketCountBySharedAccessType]
2169
2210
  #
2170
2211
  # @!attribute [rw] classifiable_object_count
2171
2212
  # @return [Integer]
2172
2213
  #
2214
+ # @!attribute [rw] classifiable_size_in_bytes
2215
+ # @return [Integer]
2216
+ #
2173
2217
  # @!attribute [rw] last_updated
2174
2218
  # @return [Time]
2175
2219
  #
@@ -2182,6 +2226,22 @@ module Aws::Macie2
2182
2226
  # @!attribute [rw] size_in_bytes_compressed
2183
2227
  # @return [Integer]
2184
2228
  #
2229
+ # @!attribute [rw] unclassifiable_object_count
2230
+ # Provides information about the total storage size (in bytes) or
2231
+ # number of objects that Amazon Macie can't analyze in one or more S3
2232
+ # buckets. In a BucketMetadata object, this data is for a specific
2233
+ # bucket. In a GetBucketStatisticsResponse object, this data is
2234
+ # aggregated for all the buckets in the query results.
2235
+ # @return [Types::ObjectLevelStatistics]
2236
+ #
2237
+ # @!attribute [rw] unclassifiable_object_size_in_bytes
2238
+ # Provides information about the total storage size (in bytes) or
2239
+ # number of objects that Amazon Macie can't analyze in one or more S3
2240
+ # buckets. In a BucketMetadata object, this data is for a specific
2241
+ # bucket. In a GetBucketStatisticsResponse object, this data is
2242
+ # aggregated for all the buckets in the query results.
2243
+ # @return [Types::ObjectLevelStatistics]
2244
+ #
2185
2245
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetBucketStatisticsResponse AWS API Documentation
2186
2246
  #
2187
2247
  class GetBucketStatisticsResponse < Struct.new(
@@ -2190,10 +2250,13 @@ module Aws::Macie2
2190
2250
  :bucket_count_by_encryption_type,
2191
2251
  :bucket_count_by_shared_access_type,
2192
2252
  :classifiable_object_count,
2253
+ :classifiable_size_in_bytes,
2193
2254
  :last_updated,
2194
2255
  :object_count,
2195
2256
  :size_in_bytes,
2196
- :size_in_bytes_compressed)
2257
+ :size_in_bytes_compressed,
2258
+ :unclassifiable_object_count,
2259
+ :unclassifiable_object_size_in_bytes)
2197
2260
  SENSITIVE = []
2198
2261
  include Aws::Structure
2199
2262
  end
@@ -2298,7 +2361,8 @@ module Aws::Macie2
2298
2361
  end
2299
2362
 
2300
2363
  # Specifies criteria for filtering, grouping, sorting, and paginating
2301
- # the results of a query for information about findings.
2364
+ # the results of a query that retrieves aggregated statistical data
2365
+ # about findings.
2302
2366
  #
2303
2367
  # @note When making an API call, you may pass GetFindingStatisticsRequest
2304
2368
  # data as a hash:
@@ -2336,8 +2400,8 @@ module Aws::Macie2
2336
2400
  # @return [Integer]
2337
2401
  #
2338
2402
  # @!attribute [rw] sort_criteria
2339
- # Specifies criteria for sorting the results of a query for
2340
- # information about findings.
2403
+ # Specifies criteria for sorting the results of a query that retrieves
2404
+ # aggregated statistical data about findings.
2341
2405
  # @return [Types::FindingStatisticsSortCriteria]
2342
2406
  #
2343
2407
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetFindingStatisticsRequest AWS API Documentation
@@ -2383,7 +2447,8 @@ module Aws::Macie2
2383
2447
  include Aws::Structure
2384
2448
  end
2385
2449
 
2386
- # Provides information about a findings filter.
2450
+ # Provides information about the criteria and other settings for a
2451
+ # findings filter.
2387
2452
  #
2388
2453
  # @!attribute [rw] action
2389
2454
  # The action to perform on findings that meet the filter criteria. To
@@ -2638,14 +2703,15 @@ module Aws::Macie2
2638
2703
  # {
2639
2704
  # filter_by: [
2640
2705
  # {
2641
- # key: "accountId", # accepts accountId
2706
+ # comparator: "GT", # accepts GT, GTE, LT, LTE, EQ, NE, CONTAINS
2707
+ # key: "accountId", # accepts accountId, serviceLimit, freeTrialStartDate, total
2642
2708
  # values: ["__string"],
2643
2709
  # },
2644
2710
  # ],
2645
2711
  # max_results: 1,
2646
2712
  # next_token: "__string",
2647
2713
  # sort_by: {
2648
- # key: "accountId", # accepts accountId, total
2714
+ # key: "accountId", # accepts accountId, total, serviceLimitValue, freeTrialStartDate
2649
2715
  # order_by: "ASC", # accepts ASC, DESC
2650
2716
  # },
2651
2717
  # }
@@ -2713,8 +2779,8 @@ module Aws::Macie2
2713
2779
  include Aws::Structure
2714
2780
  end
2715
2781
 
2716
- # Provides a group of results for a query that retrieved information
2717
- # about findings.
2782
+ # Provides a group of results for a query that retrieved aggregated
2783
+ # statistical data about findings.
2718
2784
  #
2719
2785
  # @!attribute [rw] count
2720
2786
  # @return [Integer]
@@ -2731,7 +2797,8 @@ module Aws::Macie2
2731
2797
  include Aws::Structure
2732
2798
  end
2733
2799
 
2734
- # Reserved for future use.
2800
+ # Provides information about an AWS Identity and Access Management (IAM)
2801
+ # user who performed an action on an affected resource.
2735
2802
  #
2736
2803
  # @!attribute [rw] account_id
2737
2804
  # @return [String]
@@ -2799,23 +2866,29 @@ module Aws::Macie2
2799
2866
  include Aws::Structure
2800
2867
  end
2801
2868
 
2869
+ # Provides information about the IP address of the device that an entity
2870
+ # used to perform an action on an affected resource.
2871
+ #
2802
2872
  # @!attribute [rw] ip_address_v4
2803
2873
  # @return [String]
2804
2874
  #
2805
2875
  # @!attribute [rw] ip_city
2806
- # Reserved for future use.
2876
+ # Provides information about the city that an IP address originated
2877
+ # from.
2807
2878
  # @return [Types::IpCity]
2808
2879
  #
2809
2880
  # @!attribute [rw] ip_country
2810
- # Reserved for future use.
2881
+ # Provides information about the country that an IP address originated
2882
+ # from.
2811
2883
  # @return [Types::IpCountry]
2812
2884
  #
2813
2885
  # @!attribute [rw] ip_geo_location
2814
- # Reserved for future use.
2886
+ # Provides geographic coordinates that indicate where a specified IP
2887
+ # address originated from.
2815
2888
  # @return [Types::IpGeoLocation]
2816
2889
  #
2817
2890
  # @!attribute [rw] ip_owner
2818
- # Reserved for future use.
2891
+ # Provides information about the registered owner of an IP address.
2819
2892
  # @return [Types::IpOwner]
2820
2893
  #
2821
2894
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/IpAddressDetails AWS API Documentation
@@ -2830,7 +2903,8 @@ module Aws::Macie2
2830
2903
  include Aws::Structure
2831
2904
  end
2832
2905
 
2833
- # Reserved for future use.
2906
+ # Provides information about the city that an IP address originated
2907
+ # from.
2834
2908
  #
2835
2909
  # @!attribute [rw] name
2836
2910
  # @return [String]
@@ -2843,7 +2917,8 @@ module Aws::Macie2
2843
2917
  include Aws::Structure
2844
2918
  end
2845
2919
 
2846
- # Reserved for future use.
2920
+ # Provides information about the country that an IP address originated
2921
+ # from.
2847
2922
  #
2848
2923
  # @!attribute [rw] code
2849
2924
  # @return [String]
@@ -2860,7 +2935,8 @@ module Aws::Macie2
2860
2935
  include Aws::Structure
2861
2936
  end
2862
2937
 
2863
- # Reserved for future use.
2938
+ # Provides geographic coordinates that indicate where a specified IP
2939
+ # address originated from.
2864
2940
  #
2865
2941
  # @!attribute [rw] lat
2866
2942
  # @return [Float]
@@ -2877,7 +2953,7 @@ module Aws::Macie2
2877
2953
  include Aws::Structure
2878
2954
  end
2879
2955
 
2880
- # Reserved for future use.
2956
+ # Provides information about the registered owner of an IP address.
2881
2957
  #
2882
2958
  # @!attribute [rw] asn
2883
2959
  # @return [String]
@@ -2919,14 +2995,18 @@ module Aws::Macie2
2919
2995
  # }
2920
2996
  #
2921
2997
  # @!attribute [rw] daily_schedule
2998
+ # Specifies that a classification job runs once a day, every day. This
2999
+ # is an empty object.
2922
3000
  # @return [Types::DailySchedule]
2923
3001
  #
2924
3002
  # @!attribute [rw] monthly_schedule
2925
- # Run the job once a month, on a specific day of the month. This value
2926
- # can be an integer from 1 through 30.
3003
+ # Specifies a monthly recurrence pattern for running a classification
3004
+ # job.
2927
3005
  # @return [Types::MonthlySchedule]
2928
3006
  #
2929
3007
  # @!attribute [rw] weekly_schedule
3008
+ # Specifies a weekly recurrence pattern for running a classification
3009
+ # job.
2930
3010
  # @return [Types::WeeklySchedule]
2931
3011
  #
2932
3012
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/JobScheduleFrequency AWS API Documentation
@@ -2939,8 +3019,8 @@ module Aws::Macie2
2939
3019
  include Aws::Structure
2940
3020
  end
2941
3021
 
2942
- # Specifies one or more conditions that determine which objects a
2943
- # classification job analyzes.
3022
+ # Specifies a property- or tag-based condition that defines criteria for
3023
+ # including or excluding objects from a classification job.
2944
3024
  #
2945
3025
  # @note When making an API call, you may pass JobScopeTerm
2946
3026
  # data as a hash:
@@ -2983,7 +3063,8 @@ module Aws::Macie2
2983
3063
  include Aws::Structure
2984
3064
  end
2985
3065
 
2986
- # Reserved for future use.
3066
+ # Specifies one or more property- and tag-based conditions that define
3067
+ # criteria for including or excluding objects from a classification job.
2987
3068
  #
2988
3069
  # @note When making an API call, you may pass JobScopingBlock
2989
3070
  # data as a hash:
@@ -3035,7 +3116,7 @@ module Aws::Macie2
3035
3116
  # @return [String]
3036
3117
  #
3037
3118
  # @!attribute [rw] job_status
3038
- # The current status of a classification job. Valid values are:
3119
+ # The current status of a classification job. Possible values are:
3039
3120
  # @return [String]
3040
3121
  #
3041
3122
  # @!attribute [rw] job_type
@@ -3620,8 +3701,8 @@ module Aws::Macie2
3620
3701
  include Aws::Structure
3621
3702
  end
3622
3703
 
3623
- # Run the job once a month, on a specific day of the month. This value
3624
- # can be an integer from 1 through 30.
3704
+ # Specifies a monthly recurrence pattern for running a classification
3705
+ # job.
3625
3706
  #
3626
3707
  # @note When making an API call, you may pass MonthlySchedule
3627
3708
  # data as a hash:
@@ -3641,6 +3722,10 @@ module Aws::Macie2
3641
3722
  include Aws::Structure
3642
3723
  end
3643
3724
 
3725
+ # Provides information about the number of objects that are in an S3
3726
+ # bucket and use certain types of server-side encryption, use
3727
+ # client-side encryption, or aren't encrypted.
3728
+ #
3644
3729
  # @!attribute [rw] customer_managed
3645
3730
  # @return [Integer]
3646
3731
  #
@@ -3664,7 +3749,32 @@ module Aws::Macie2
3664
3749
  include Aws::Structure
3665
3750
  end
3666
3751
 
3667
- # Provides detailed information about a policy finding.
3752
+ # Provides information about the total storage size (in bytes) or number
3753
+ # of objects that Amazon Macie can't analyze in one or more S3 buckets.
3754
+ # In a BucketMetadata object, this data is for a specific bucket. In a
3755
+ # GetBucketStatisticsResponse object, this data is aggregated for all
3756
+ # the buckets in the query results.
3757
+ #
3758
+ # @!attribute [rw] file_type
3759
+ # @return [Integer]
3760
+ #
3761
+ # @!attribute [rw] storage_class
3762
+ # @return [Integer]
3763
+ #
3764
+ # @!attribute [rw] total
3765
+ # @return [Integer]
3766
+ #
3767
+ # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/ObjectLevelStatistics AWS API Documentation
3768
+ #
3769
+ class ObjectLevelStatistics < Struct.new(
3770
+ :file_type,
3771
+ :storage_class,
3772
+ :total)
3773
+ SENSITIVE = []
3774
+ include Aws::Structure
3775
+ end
3776
+
3777
+ # Provides the details of a policy finding.
3668
3778
  #
3669
3779
  # @!attribute [rw] action
3670
3780
  # Provides information about an action that occurred for a resource
@@ -3812,12 +3922,14 @@ module Aws::Macie2
3812
3922
  # @return [Types::S3BucketOwner]
3813
3923
  #
3814
3924
  # @!attribute [rw] public_access
3815
- # Provides information about permissions settings that determine
3925
+ # Provides information about the permissions settings that determine
3816
3926
  # whether an S3 bucket is publicly accessible.
3817
3927
  # @return [Types::BucketPublicAccess]
3818
3928
  #
3819
3929
  # @!attribute [rw] tags
3820
- # Reserved for future use.
3930
+ # Provides information about the tags that are associated with an S3
3931
+ # bucket or object. Each tag consists of a required tag key and an
3932
+ # associated tag value.
3821
3933
  # @return [Array<Types::KeyValuePair>]
3822
3934
  #
3823
3935
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/S3Bucket AWS API Documentation
@@ -3973,6 +4085,9 @@ module Aws::Macie2
3973
4085
  # @return [Array<Types::S3BucketDefinitionForJob>]
3974
4086
  #
3975
4087
  # @!attribute [rw] scoping
4088
+ # Specifies one or more property- and tag-based conditions that refine
4089
+ # the scope of a classification job. These conditions define criteria
4090
+ # that determine which objects a job analyzes.
3976
4091
  # @return [Types::Scoping]
3977
4092
  #
3978
4093
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/S3JobDefinition AWS API Documentation
@@ -4016,11 +4131,13 @@ module Aws::Macie2
4016
4131
  # @return [Integer]
4017
4132
  #
4018
4133
  # @!attribute [rw] storage_class
4019
- # The storage class of the S3 bucket or object. Valid values are:
4134
+ # The storage class of the S3 bucket or object. Possible values are:
4020
4135
  # @return [String]
4021
4136
  #
4022
4137
  # @!attribute [rw] tags
4023
- # Reserved for future use.
4138
+ # Provides information about the tags that are associated with an S3
4139
+ # bucket or object. Each tag consists of a required tag key and an
4140
+ # associated tag value.
4024
4141
  # @return [Array<Types::KeyValuePair>]
4025
4142
  #
4026
4143
  # @!attribute [rw] version_id
@@ -4045,6 +4162,10 @@ module Aws::Macie2
4045
4162
  include Aws::Structure
4046
4163
  end
4047
4164
 
4165
+ # Specifies one or more property- and tag-based conditions that refine
4166
+ # the scope of a classification job. These conditions define criteria
4167
+ # that determine which objects a job analyzes.
4168
+ #
4048
4169
  # @note When making an API call, you may pass Scoping
4049
4170
  # data as a hash:
4050
4171
  #
@@ -4096,11 +4217,15 @@ module Aws::Macie2
4096
4217
  # }
4097
4218
  #
4098
4219
  # @!attribute [rw] excludes
4099
- # Reserved for future use.
4220
+ # Specifies one or more property- and tag-based conditions that define
4221
+ # criteria for including or excluding objects from a classification
4222
+ # job.
4100
4223
  # @return [Types::JobScopingBlock]
4101
4224
  #
4102
4225
  # @!attribute [rw] includes
4103
- # Reserved for future use.
4226
+ # Specifies one or more property- and tag-based conditions that define
4227
+ # criteria for including or excluding objects from a classification
4228
+ # job.
4104
4229
  # @return [Types::JobScopingBlock]
4105
4230
  #
4106
4231
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/Scoping AWS API Documentation
@@ -4117,11 +4242,14 @@ module Aws::Macie2
4117
4242
  #
4118
4243
  # @!attribute [rw] category
4119
4244
  # The category of sensitive data that was detected and produced the
4120
- # finding.
4245
+ # finding. Possible values are:
4121
4246
  # @return [String]
4122
4247
  #
4123
4248
  # @!attribute [rw] detections
4124
- # Reserved for future use.
4249
+ # Provides information about sensitive data that was detected by
4250
+ # managed data identifiers and produced a sensitive data finding, and
4251
+ # the number of occurrences of each type of sensitive data that was
4252
+ # detected.
4125
4253
  # @return [Array<Types::DefaultDetection>]
4126
4254
  #
4127
4255
  # @!attribute [rw] total_count
@@ -4141,8 +4269,8 @@ module Aws::Macie2
4141
4269
  # S3 bucket or object.
4142
4270
  #
4143
4271
  # @!attribute [rw] encryption_type
4144
- # The server-side encryption algorithm that's used when storing the
4145
- # S3 bucket or object. Valid values are:
4272
+ # The type of server-side encryption that's used to encrypt objects
4273
+ # in the S3 bucket. Valid values are:
4146
4274
  # @return [String]
4147
4275
  #
4148
4276
  # @!attribute [rw] kms_master_key_id
@@ -4266,8 +4394,8 @@ module Aws::Macie2
4266
4394
  # value.
4267
4395
  #
4268
4396
  # @!attribute [rw] description
4269
- # The textual representation of the finding's severity. Valid values
4270
- # are:
4397
+ # The textual representation of the finding's severity. Possible
4398
+ # values are:
4271
4399
  # @return [String]
4272
4400
  #
4273
4401
  # @!attribute [rw] score
@@ -4601,7 +4729,7 @@ module Aws::Macie2
4601
4729
  # @return [String]
4602
4730
  #
4603
4731
  # @!attribute [rw] job_status
4604
- # The current status of a classification job. Valid values are:
4732
+ # The current status of a classification job. Possible values are:
4605
4733
  # @return [String]
4606
4734
  #
4607
4735
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/UpdateClassificationJobRequest AWS API Documentation
@@ -4838,20 +4966,26 @@ module Aws::Macie2
4838
4966
  include Aws::Structure
4839
4967
  end
4840
4968
 
4841
- # Specifies criteria for filtering the results of a query for account
4969
+ # Specifies a condition for filtering the results of a query for account
4842
4970
  # quotas and usage data.
4843
4971
  #
4844
4972
  # @note When making an API call, you may pass UsageStatisticsFilter
4845
4973
  # data as a hash:
4846
4974
  #
4847
4975
  # {
4848
- # key: "accountId", # accepts accountId
4976
+ # comparator: "GT", # accepts GT, GTE, LT, LTE, EQ, NE, CONTAINS
4977
+ # key: "accountId", # accepts accountId, serviceLimit, freeTrialStartDate, total
4849
4978
  # values: ["__string"],
4850
4979
  # }
4851
4980
  #
4981
+ # @!attribute [rw] comparator
4982
+ # The operator to use in a condition that filters the results of a
4983
+ # query for account quotas and usage data. Valid values are:
4984
+ # @return [String]
4985
+ #
4852
4986
  # @!attribute [rw] key
4853
- # The field to use to filter the results of a query for account quotas
4854
- # and usage data.
4987
+ # The field to use in a condition that filters the results of a query
4988
+ # for account quotas and usage data. Valid values are:
4855
4989
  # @return [String]
4856
4990
  #
4857
4991
  # @!attribute [rw] values
@@ -4860,6 +4994,7 @@ module Aws::Macie2
4860
4994
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/UsageStatisticsFilter AWS API Documentation
4861
4995
  #
4862
4996
  class UsageStatisticsFilter < Struct.new(
4997
+ :comparator,
4863
4998
  :key,
4864
4999
  :values)
4865
5000
  SENSITIVE = []
@@ -4873,13 +5008,13 @@ module Aws::Macie2
4873
5008
  # data as a hash:
4874
5009
  #
4875
5010
  # {
4876
- # key: "accountId", # accepts accountId, total
5011
+ # key: "accountId", # accepts accountId, total, serviceLimitValue, freeTrialStartDate
4877
5012
  # order_by: "ASC", # accepts ASC, DESC
4878
5013
  # }
4879
5014
  #
4880
5015
  # @!attribute [rw] key
4881
5016
  # The field to use to sort the results of a query for account quotas
4882
- # and usage data.
5017
+ # and usage data. Valid values are:
4883
5018
  # @return [String]
4884
5019
  #
4885
5020
  # @!attribute [rw] order_by
@@ -4919,32 +5054,48 @@ module Aws::Macie2
4919
5054
  include Aws::Structure
4920
5055
  end
4921
5056
 
5057
+ # Provides information about the type and other characteristics of an
5058
+ # entity that performed an action on an affected resource.
5059
+ #
4922
5060
  # @!attribute [rw] assumed_role
4923
- # Reserved for future use.
5061
+ # Provides information about an identity that performed an action on
5062
+ # an affected resource by using temporary security credentials. The
5063
+ # credentials were obtained using the AssumeRole operation of the AWS
5064
+ # Security Token Service (AWS STS) API.
4924
5065
  # @return [Types::AssumedRole]
4925
5066
  #
4926
5067
  # @!attribute [rw] aws_account
4927
- # Reserved for future use.
5068
+ # Provides information about an AWS account and entity that performed
5069
+ # an action on an affected resource. The action was performed using
5070
+ # the credentials for an AWS account other than your own account.
4928
5071
  # @return [Types::AwsAccount]
4929
5072
  #
4930
5073
  # @!attribute [rw] aws_service
4931
- # Reserved for future use.
5074
+ # Provides information about an AWS service that performed an action
5075
+ # on an affected resource.
4932
5076
  # @return [Types::AwsService]
4933
5077
  #
4934
5078
  # @!attribute [rw] federated_user
4935
- # Reserved for future use.
5079
+ # Provides information about an identity that performed an action on
5080
+ # an affected resource by using temporary security credentials. The
5081
+ # credentials were obtained using the GetFederationToken operation of
5082
+ # the AWS Security Token Service (AWS STS) API.
4936
5083
  # @return [Types::FederatedUser]
4937
5084
  #
4938
5085
  # @!attribute [rw] iam_user
4939
- # Reserved for future use.
5086
+ # Provides information about an AWS Identity and Access Management
5087
+ # (IAM) user who performed an action on an affected resource.
4940
5088
  # @return [Types::IamUser]
4941
5089
  #
4942
5090
  # @!attribute [rw] root
4943
- # Reserved for future use.
5091
+ # Provides information about an AWS account and entity that performed
5092
+ # an action on an affected resource. The action was performed using
5093
+ # the credentials for your AWS account.
4944
5094
  # @return [Types::UserIdentityRoot]
4945
5095
  #
4946
5096
  # @!attribute [rw] type
4947
- # Reserved for future use.
5097
+ # The type of entity that performed the action on the affected
5098
+ # resource. Possible values are:
4948
5099
  # @return [String]
4949
5100
  #
4950
5101
  # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/UserIdentity AWS API Documentation
@@ -4961,7 +5112,9 @@ module Aws::Macie2
4961
5112
  include Aws::Structure
4962
5113
  end
4963
5114
 
4964
- # Reserved for future use.
5115
+ # Provides information about an AWS account and entity that performed an
5116
+ # action on an affected resource. The action was performed using the
5117
+ # credentials for your AWS account.
4965
5118
  #
4966
5119
  # @!attribute [rw] account_id
4967
5120
  # @return [String]
@@ -4996,6 +5149,9 @@ module Aws::Macie2
4996
5149
  include Aws::Structure
4997
5150
  end
4998
5151
 
5152
+ # Specifies a weekly recurrence pattern for running a classification
5153
+ # job.
5154
+ #
4999
5155
  # @note When making an API call, you may pass WeeklySchedule
5000
5156
  # data as a hash:
5001
5157
  #