aws-sdk-securityhub 1.144.0 → 1.145.0

data/lib/aws-sdk-securityhub/client_api.rb

@@ -1079,6 +1079,9 @@ module Aws::SecurityHub
     OcsfFindingIdentifier = Shapes::StructureShape.new(name: 'OcsfFindingIdentifier')
     OcsfFindingIdentifierList = Shapes::ListShape.new(name: 'OcsfFindingIdentifierList')
     OcsfFindingsList = Shapes::ListShape.new(name: 'OcsfFindingsList')
+    OcsfIpField = Shapes::StringShape.new(name: 'OcsfIpField')
+    OcsfIpFilter = Shapes::StructureShape.new(name: 'OcsfIpFilter')
+    OcsfIpFilterList = Shapes::ListShape.new(name: 'OcsfIpFilterList')
     OcsfMapField = Shapes::StringShape.new(name: 'OcsfMapField')
     OcsfMapFilter = Shapes::StructureShape.new(name: 'OcsfMapFilter')
     OcsfMapFilterList = Shapes::ListShape.new(name: 'OcsfMapFilterList')
@@ -5502,6 +5505,8 @@ module Aws::SecurityHub
     CompositeFilter.add_member(:boolean_filters, Shapes::ShapeRef.new(shape: OcsfBooleanFilterList, location_name: "BooleanFilters"))
     CompositeFilter.add_member(:number_filters, Shapes::ShapeRef.new(shape: OcsfNumberFilterList, location_name: "NumberFilters"))
     CompositeFilter.add_member(:map_filters, Shapes::ShapeRef.new(shape: OcsfMapFilterList, location_name: "MapFilters"))
+    CompositeFilter.add_member(:ip_filters, Shapes::ShapeRef.new(shape: OcsfIpFilterList, location_name: "IpFilters"))
+    CompositeFilter.add_member(:nested_composite_filters, Shapes::ShapeRef.new(shape: CompositeFilterList, location_name: "NestedCompositeFilters"))
     CompositeFilter.add_member(:operator, Shapes::ShapeRef.new(shape: AllowedOperators, location_name: "Operator"))
     CompositeFilter.struct_class = Types::CompositeFilter
 
@@ -6627,6 +6632,12 @@ module Aws::SecurityHub
 
     OcsfFindingsList.member = Shapes::ShapeRef.new(shape: OcsfFinding)
 
+    OcsfIpFilter.add_member(:field_name, Shapes::ShapeRef.new(shape: OcsfIpField, location_name: "FieldName"))
+    OcsfIpFilter.add_member(:filter, Shapes::ShapeRef.new(shape: IpFilter, location_name: "Filter"))
+    OcsfIpFilter.struct_class = Types::OcsfIpFilter
+
+    OcsfIpFilterList.member = Shapes::ShapeRef.new(shape: OcsfIpFilter)
+
     OcsfMapFilter.add_member(:field_name, Shapes::ShapeRef.new(shape: OcsfMapField, location_name: "FieldName"))
     OcsfMapFilter.add_member(:filter, Shapes::ShapeRef.new(shape: MapFilter, location_name: "Filter"))
     OcsfMapFilter.struct_class = Types::OcsfMapFilter
@@ -6966,7 +6977,7 @@ module Aws::SecurityHub
     ResourceNotFoundException.add_member(:code, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Code"))
     ResourceNotFoundException.struct_class = Types::ResourceNotFoundException
 
-    ResourceResult.add_member(:resource_arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ResourceArn"))
+    ResourceResult.add_member(:resource_guid, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ResourceGuid"))
     ResourceResult.add_member(:resource_id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "ResourceId"))
     ResourceResult.add_member(:account_id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "AccountId"))
     ResourceResult.add_member(:region, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Region"))
@@ -7002,6 +7013,7 @@ module Aws::SecurityHub
     ResourcesCompositeFilter.add_member(:date_filters, Shapes::ShapeRef.new(shape: ResourcesDateFilterList, location_name: "DateFilters"))
     ResourcesCompositeFilter.add_member(:number_filters, Shapes::ShapeRef.new(shape: ResourcesNumberFilterList, location_name: "NumberFilters"))
     ResourcesCompositeFilter.add_member(:map_filters, Shapes::ShapeRef.new(shape: ResourcesMapFilterList, location_name: "MapFilters"))
+    ResourcesCompositeFilter.add_member(:nested_composite_filters, Shapes::ShapeRef.new(shape: ResourcesCompositeFilterList, location_name: "NestedCompositeFilters"))
     ResourcesCompositeFilter.add_member(:operator, Shapes::ShapeRef.new(shape: AllowedOperators, location_name: "Operator"))
     ResourcesCompositeFilter.struct_class = Types::ResourcesCompositeFilter
 

data/lib/aws-sdk-securityhub/endpoint_parameters.rb

@@ -13,22 +13,22 @@ module Aws::SecurityHub
   # @!attribute region
   #   The AWS region used to dispatch the request.
   #
-  #   @return [String]
+  #   @return [string]
   #
   # @!attribute use_dual_stack
   #   When true, use the dual-stack endpoint. If the configured endpoint does not support dual-stack, dispatching the request MAY return an error.
   #
-  #   @return [Boolean]
+  #   @return [boolean]
   #
   # @!attribute use_fips
   #   When true, send this request to the FIPS-compliant regional endpoint. If the configured endpoint does not have a FIPS compliant endpoint, dispatching the request will return an error.
   #
-  #   @return [Boolean]
+  #   @return [boolean]
   #
   # @!attribute endpoint
   #   Override the endpoint used to send this request
   #
-  #   @return [String]
+  #   @return [string]
   #
   EndpointParameters = Struct.new(
     :region,

data/lib/aws-sdk-securityhub/types.rb

@@ -22577,6 +22577,21 @@ module Aws::SecurityHub
     #   Enables filtering based on map field values.
     #   @return [Array<Types::OcsfMapFilter>]
     #
+    # @!attribute [rw] ip_filters
+    #   A list of IP address filters that allowing you to filter findings
+    #   based on IP address properties.
+    #   @return [Array<Types::OcsfIpFilter>]
+    #
+    # @!attribute [rw] nested_composite_filters
+    #   Provides an additional level of filtering, creating a three-layer
+    #   nested structure. The first layer is a `CompositeFilters` array with
+    #   a `CompositeOperator` (`AND`/`OR`). The second layer is a
+    #   `CompositeFilter` object that contains direct filters and
+    #   `NestedCompositeFilters`. The third layer is
+    #   `NestedCompositeFilters`, which contains additional filter
+    #   conditions.
+    #   @return [Array<Types::CompositeFilter>]
+    #
     # @!attribute [rw] operator
     #   The logical operator used to combine multiple filter conditions.
     #   @return [String]
@@ -22589,6 +22604,8 @@ module Aws::SecurityHub
       :boolean_filters,
       :number_filters,
       :map_filters,
+      :ip_filters,
+      :nested_composite_filters,
       :operator)
       SENSITIVE = []
       include Aws::Structure
@@ -28109,6 +28126,25 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # The structure for filtering findings based on IP address attributes.
+    #
+    # @!attribute [rw] field_name
+    #   The name of the IP address field to filter on.
+    #   @return [String]
+    #
+    # @!attribute [rw] filter
+    #   The IP filter for querying findings.
+    #   @return [Types::IpFilter]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/OcsfIpFilter AWS API Documentation
+    #
+    class OcsfIpFilter < Struct.new(
+      :field_name,
+      :filter)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Enables filtering of security findings based on map field values in
     # OCSF.
     #
@@ -29757,8 +29793,8 @@ module Aws::SecurityHub
     # Provides comprehensive details about an Amazon Web Services resource
     # and its associated security findings.
     #
-    # @!attribute [rw] resource_arn
-    #   Specifies the ARN that uniquely identifies a resource.
+    # @!attribute [rw] resource_guid
+    #   The global identifier used to identify a resource.
     #   @return [String]
     #
     # @!attribute [rw] resource_id
@@ -29808,7 +29844,7 @@ module Aws::SecurityHub
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ResourceResult AWS API Documentation
     #
     class ResourceResult < Struct.new(
-      :resource_arn,
+      :resource_guid,
       :resource_id,
       :account_id,
       :region,
@@ -29913,6 +29949,16 @@ module Aws::SecurityHub
     #   Enables filtering based on map-based field values.
     #   @return [Array<Types::ResourcesMapFilter>]
     #
+    # @!attribute [rw] nested_composite_filters
+    #   Provides an additional level of filtering, creating a three-layer
+    #   nested structure. The first layer is a `CompositeFilters` array with
+    #   a `CompositeOperator` (`AND`/`OR`). The second layer is a
+    #   `CompositeFilter` object that contains direct filters and
+    #   `NestedCompositeFilters`. The third layer is
+    #   `NestedCompositeFilters`, which contains additional filter
+    #   conditions.
+    #   @return [Array<Types::ResourcesCompositeFilter>]
+    #
     # @!attribute [rw] operator
     #   The logical operator used to combine multiple filter conditions.
     #   @return [String]
@@ -29924,6 +29970,7 @@ module Aws::SecurityHub
       :date_filters,
       :number_filters,
       :map_filters,
+      :nested_composite_filters,
       :operator)
       SENSITIVE = []
       include Aws::Structure
@@ -32367,7 +32414,9 @@ module Aws::SecurityHub
     #   @return [String]
     #
     # @!attribute [rw] error_code
-    #   The error code for the unprocessed security control.
+    #   The error code for the unprocessed security control. The `NOT_FOUND`
+    #   value has been deprecated and replaced by the `RESOURCE_NOT_FOUND`
+    #   value.
     #   @return [String]
     #
     # @!attribute [rw] error_reason
@@ -32408,6 +32457,8 @@ module Aws::SecurityHub
     #
     # @!attribute [rw] error_code
     #   The error code for the unprocessed standard and control association.
+    #   The `NOT_FOUND` value has been deprecated and replaced by the
+    #   `RESOURCE_NOT_FOUND` value.
     #   @return [String]
     #
     # @!attribute [rw] error_reason
@@ -32444,7 +32495,8 @@ module Aws::SecurityHub
     #
     # @!attribute [rw] error_code
     #   The error code for the unprocessed update of the control's
-    #   enablement status in the specified standard.
+    #   enablement status in the specified standard. The `NOT_FOUND` value
+    #   has been deprecated and replaced by the `RESOURCE_NOT_FOUND` value.
     #   @return [String]
     #
     # @!attribute [rw] error_reason

data/lib/aws-sdk-securityhub.rb

@@ -54,7 +54,7 @@ module Aws::SecurityHub
   autoload :EndpointProvider, 'aws-sdk-securityhub/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityhub/endpoints'
 
-  GEM_VERSION = '1.144.0'
+  GEM_VERSION = '1.145.0'
 
 end
 

data/sig/client.rbs

@@ -5215,7 +5215,7 @@ module Aws
                                              {
                                                string_filters: Array[
                                                  {
-                                                   field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name")?,
+                                                   field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name")?,
                                                    filter: {
                                                      value: ::String?,
                                                      comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -5224,7 +5224,7 @@ module Aws
                                                ]?,
                                                date_filters: Array[
                                                  {
-                                                   field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt")?,
+                                                   field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt" | "resources.image.created_time_dt" | "resources.image.last_used_time_dt" | "resources.modified_time_dt")?,
                                                    filter: {
                                                      start: ::String?,
                                                      end: ::String?,
@@ -5245,7 +5245,7 @@ module Aws
                                                ]?,
                                                number_filters: Array[
                                                  {
-                                                   field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count")?,
+                                                   field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count" | "evidences.api.response.code" | "evidences.dst_endpoint.autonomous_system.number" | "evidences.dst_endpoint.port" | "evidences.src_endpoint.autonomous_system.number" | "evidences.src_endpoint.port" | "resources.image.in_use_count")?,
                                                    filter: {
                                                      gte: ::Float?,
                                                      lte: ::Float?,
@@ -5257,7 +5257,7 @@ module Aws
                                                ]?,
                                                map_filters: Array[
                                                  {
-                                                   field_name: ("resources.tags")?,
+                                                   field_name: ("resources.tags" | "compliance.control_parameters" | "databucket.tags" | "finding_info.tags")?,
                                                    filter: {
                                                      key: ::String?,
                                                      value: ::String?,
@@ -5265,6 +5265,15 @@ module Aws
                                                    }?
                                                  },
                                                ]?,
+                                               ip_filters: Array[
+                                                 {
+                                                   field_name: ("evidences.dst_endpoint.ip" | "evidences.src_endpoint.ip")?,
+                                                   filter: {
+                                                     cidr: ::String?
+                                                   }?
+                                                 },
+                                               ]?,
+                                               nested_composite_filters: untyped?,
                                                operator: ("AND" | "OR")?
                                              },
                                            ]?,
@@ -6558,7 +6567,7 @@ module Aws
                                                {
                                                  string_filters: Array[
                                                    {
-                                                     field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name")?,
+                                                     field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name")?,
                                                      filter: {
                                                        value: ::String?,
                                                        comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -6567,7 +6576,7 @@ module Aws
                                                  ]?,
                                                  date_filters: Array[
                                                    {
-                                                     field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt")?,
+                                                     field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt" | "resources.image.created_time_dt" | "resources.image.last_used_time_dt" | "resources.modified_time_dt")?,
                                                      filter: {
                                                        start: ::String?,
                                                        end: ::String?,
@@ -6588,7 +6597,7 @@ module Aws
                                                  ]?,
                                                  number_filters: Array[
                                                    {
-                                                     field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count")?,
+                                                     field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count" | "evidences.api.response.code" | "evidences.dst_endpoint.autonomous_system.number" | "evidences.dst_endpoint.port" | "evidences.src_endpoint.autonomous_system.number" | "evidences.src_endpoint.port" | "resources.image.in_use_count")?,
                                                      filter: {
                                                        gte: ::Float?,
                                                        lte: ::Float?,
@@ -6600,7 +6609,7 @@ module Aws
                                                  ]?,
                                                  map_filters: Array[
                                                    {
-                                                     field_name: ("resources.tags")?,
+                                                     field_name: ("resources.tags" | "compliance.control_parameters" | "databucket.tags" | "finding_info.tags")?,
                                                      filter: {
                                                        key: ::String?,
                                                        value: ::String?,
@@ -6608,12 +6617,21 @@ module Aws
                                                      }?
                                                    },
                                                  ]?,
+                                                 ip_filters: Array[
+                                                   {
+                                                     field_name: ("evidences.dst_endpoint.ip" | "evidences.src_endpoint.ip")?,
+                                                     filter: {
+                                                       cidr: ::String?
+                                                     }?
+                                                   },
+                                                 ]?,
+                                                 nested_composite_filters: untyped?,
                                                  operator: ("AND" | "OR")?
                                                },
                                              ]?,
                                              composite_operator: ("AND" | "OR")?
                                            }?,
-                                           group_by_field: ("activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.name" | "compliance.status" | "compliance.control" | "finding_info.title" | "finding_info.types" | "metadata.product.name" | "metadata.product.uid" | "resources.type" | "resources.uid" | "severity" | "status" | "vulnerabilities.fix_coverage" | "class_name")
+                                           group_by_field: ("activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.name" | "compliance.status" | "compliance.control" | "finding_info.title" | "finding_info.types" | "metadata.product.name" | "metadata.product.uid" | "resources.type" | "resources.uid" | "severity" | "status" | "vulnerabilities.fix_coverage" | "class_name" | "vulnerabilities.affected_packages.name" | "finding_info.analytic.name" | "compliance.standards" | "cloud.account.name")
                                          },
                                        ],
                                        ?sort_order: ("asc" | "desc"),
@@ -7347,7 +7365,7 @@ module Aws
                                  {
                                    string_filters: Array[
                                      {
-                                       field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name")?,
+                                       field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name")?,
                                        filter: {
                                          value: ::String?,
                                          comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -7356,7 +7374,7 @@ module Aws
                                    ]?,
                                    date_filters: Array[
                                      {
-                                       field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt")?,
+                                       field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt" | "resources.image.created_time_dt" | "resources.image.last_used_time_dt" | "resources.modified_time_dt")?,
                                        filter: {
                                          start: ::String?,
                                          end: ::String?,
@@ -7377,7 +7395,7 @@ module Aws
                                    ]?,
                                    number_filters: Array[
                                      {
-                                       field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count")?,
+                                       field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count" | "evidences.api.response.code" | "evidences.dst_endpoint.autonomous_system.number" | "evidences.dst_endpoint.port" | "evidences.src_endpoint.autonomous_system.number" | "evidences.src_endpoint.port" | "resources.image.in_use_count")?,
                                        filter: {
                                          gte: ::Float?,
                                          lte: ::Float?,
@@ -7389,7 +7407,7 @@ module Aws
                                    ]?,
                                    map_filters: Array[
                                      {
-                                       field_name: ("resources.tags")?,
+                                       field_name: ("resources.tags" | "compliance.control_parameters" | "databucket.tags" | "finding_info.tags")?,
                                        filter: {
                                          key: ::String?,
                                          value: ::String?,
@@ -7397,6 +7415,15 @@ module Aws
                                        }?
                                      },
                                    ]?,
+                                   ip_filters: Array[
+                                     {
+                                       field_name: ("evidences.dst_endpoint.ip" | "evidences.src_endpoint.ip")?,
+                                       filter: {
+                                         cidr: ::String?
+                                       }?
+                                     },
+                                   ]?,
+                                   nested_composite_filters: untyped?,
                                    operator: ("AND" | "OR")?
                                  },
                                ]?,
@@ -7473,13 +7500,13 @@ module Aws
       def get_resources_statistics_v2: (
                                          group_by_rules: Array[
                                            {
-                                             group_by_field: ("account_id" | "region" | "resource_category" | "resource_type" | "resource_name" | "findings_summary.finding_type"),
+                                             group_by_field: ("AccountId" | "Region" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType"),
                                              filters: {
                                                composite_filters: Array[
                                                  {
                                                    string_filters: Array[
                                                      {
-                                                       field_name: ("resource_arn" | "resource_id" | "account_id" | "region" | "resource_category" | "resource_type" | "resource_name" | "findings_summary.finding_type" | "findings_summary.product_name")?,
+                                                       field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "Region" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName")?,
                                                        filter: {
                                                          value: ::String?,
                                                          comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -7488,7 +7515,7 @@ module Aws
                                                    ]?,
                                                    date_filters: Array[
                                                      {
-                                                       field_name: ("resource_detail_capture_time_dt" | "resource_creation_time_dt")?,
+                                                       field_name: ("ResourceDetailCaptureTime" | "ResourceCreationTime")?,
                                                        filter: {
                                                          start: ::String?,
                                                          end: ::String?,
@@ -7501,7 +7528,7 @@ module Aws
                                                    ]?,
                                                    number_filters: Array[
                                                      {
-                                                       field_name: ("findings_summary.total_findings" | "findings_summary.severities.other" | "findings_summary.severities.fatal" | "findings_summary.severities.critical" | "findings_summary.severities.high" | "findings_summary.severities.medium" | "findings_summary.severities.low" | "findings_summary.severities.informational" | "findings_summary.severities.unknown")?,
+                                                       field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown")?,
                                                        filter: {
                                                          gte: ::Float?,
                                                          lte: ::Float?,
@@ -7513,7 +7540,7 @@ module Aws
                                                    ]?,
                                                    map_filters: Array[
                                                      {
-                                                       field_name: ("tags")?,
+                                                       field_name: ("ResourceTags")?,
                                                        filter: {
                                                          key: ::String?,
                                                          value: ::String?,
@@ -7521,6 +7548,7 @@ module Aws
                                                        }?
                                                      },
                                                    ]?,
+                                                   nested_composite_filters: untyped?,
                                                    operator: ("AND" | "OR")?
                                                  },
                                                ]?,
@@ -7545,7 +7573,7 @@ module Aws
                                   {
                                     string_filters: Array[
                                       {
-                                        field_name: ("resource_arn" | "resource_id" | "account_id" | "region" | "resource_category" | "resource_type" | "resource_name" | "findings_summary.finding_type" | "findings_summary.product_name")?,
+                                        field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "Region" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName")?,
                                         filter: {
                                           value: ::String?,
                                           comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -7554,7 +7582,7 @@ module Aws
                                     ]?,
                                     date_filters: Array[
                                       {
-                                        field_name: ("resource_detail_capture_time_dt" | "resource_creation_time_dt")?,
+                                        field_name: ("ResourceDetailCaptureTime" | "ResourceCreationTime")?,
                                         filter: {
                                           start: ::String?,
                                           end: ::String?,
@@ -7567,7 +7595,7 @@ module Aws
                                     ]?,
                                     number_filters: Array[
                                       {
-                                        field_name: ("findings_summary.total_findings" | "findings_summary.severities.other" | "findings_summary.severities.fatal" | "findings_summary.severities.critical" | "findings_summary.severities.high" | "findings_summary.severities.medium" | "findings_summary.severities.low" | "findings_summary.severities.informational" | "findings_summary.severities.unknown")?,
+                                        field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown")?,
                                         filter: {
                                           gte: ::Float?,
                                           lte: ::Float?,
@@ -7579,7 +7607,7 @@ module Aws
                                     ]?,
                                     map_filters: Array[
                                       {
-                                        field_name: ("tags")?,
+                                        field_name: ("ResourceTags")?,
                                         filter: {
                                           key: ::String?,
                                           value: ::String?,
@@ -7587,6 +7615,7 @@ module Aws
                                         }?
                                       },
                                     ]?,
+                                    nested_composite_filters: untyped?,
                                     operator: ("AND" | "OR")?
                                   },
                                 ]?,
@@ -7898,7 +7927,7 @@ module Aws
                                              {
                                                string_filters: Array[
                                                  {
-                                                   field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name")?,
+                                                   field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name")?,
                                                    filter: {
                                                      value: ::String?,
                                                      comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -7907,7 +7936,7 @@ module Aws
                                                ]?,
                                                date_filters: Array[
                                                  {
-                                                   field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt")?,
+                                                   field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt" | "resources.image.created_time_dt" | "resources.image.last_used_time_dt" | "resources.modified_time_dt")?,
                                                    filter: {
                                                      start: ::String?,
                                                      end: ::String?,
@@ -7928,7 +7957,7 @@ module Aws
                                                ]?,
                                                number_filters: Array[
                                                  {
-                                                   field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count")?,
+                                                   field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count" | "evidences.api.response.code" | "evidences.dst_endpoint.autonomous_system.number" | "evidences.dst_endpoint.port" | "evidences.src_endpoint.autonomous_system.number" | "evidences.src_endpoint.port" | "resources.image.in_use_count")?,
                                                    filter: {
                                                      gte: ::Float?,
                                                      lte: ::Float?,
@@ -7940,7 +7969,7 @@ module Aws
                                                ]?,
                                                map_filters: Array[
                                                  {
-                                                   field_name: ("resources.tags")?,
+                                                   field_name: ("resources.tags" | "compliance.control_parameters" | "databucket.tags" | "finding_info.tags")?,
                                                    filter: {
                                                      key: ::String?,
                                                      value: ::String?,
@@ -7948,6 +7977,15 @@ module Aws
                                                    }?
                                                  },
                                                ]?,
+                                               ip_filters: Array[
+                                                 {
+                                                   field_name: ("evidences.dst_endpoint.ip" | "evidences.src_endpoint.ip")?,
+                                                   filter: {
+                                                     cidr: ::String?
+                                                   }?
+                                                 },
+                                               ]?,
+                                               nested_composite_filters: untyped?,
                                                operator: ("AND" | "OR")?
                                              },
                                            ]?,