aws-sdk-securityhub 1.144.0 → 1.146.0

data/sig/types.rbs

@@ -4931,6 +4931,8 @@ module Aws::SecurityHub
       attr_accessor boolean_filters: ::Array[Types::OcsfBooleanFilter]
       attr_accessor number_filters: ::Array[Types::OcsfNumberFilter]
       attr_accessor map_filters: ::Array[Types::OcsfMapFilter]
+      attr_accessor ip_filters: ::Array[Types::OcsfIpFilter]
+      attr_accessor nested_composite_filters: ::Array[Types::CompositeFilter]
       attr_accessor operator: ("AND" | "OR")
       SENSITIVE: []
     end
@@ -5604,6 +5606,25 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class FindingsTrendsCompositeFilter
+      attr_accessor string_filters: ::Array[Types::FindingsTrendsStringFilter]
+      attr_accessor nested_composite_filters: ::Array[Types::FindingsTrendsCompositeFilter]
+      attr_accessor operator: ("AND" | "OR")
+      SENSITIVE: []
+    end
+
+    class FindingsTrendsFilters
+      attr_accessor composite_filters: ::Array[Types::FindingsTrendsCompositeFilter]
+      attr_accessor composite_operator: ("AND" | "OR")
+      SENSITIVE: []
+    end
+
+    class FindingsTrendsStringFilter
+      attr_accessor field_name: ("account_id" | "region" | "finding_types" | "finding_status" | "finding_cve_ids" | "finding_compliance_status" | "finding_control_id" | "finding_class_name" | "finding_provider" | "finding_activity_name")
+      attr_accessor filter: Types::StringFilter
+      SENSITIVE: []
+    end
+
     class FirewallPolicyDetails
       attr_accessor stateful_rule_group_references: ::Array[Types::FirewallPolicyStatefulRuleGroupReferencesDetails]
       attr_accessor stateless_custom_actions: ::Array[Types::FirewallPolicyStatelessCustomActionsDetails]
@@ -5800,6 +5821,22 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class GetFindingsTrendsV2Request
+      attr_accessor filters: Types::FindingsTrendsFilters
+      attr_accessor start_time: ::Time
+      attr_accessor end_time: ::Time
+      attr_accessor next_token: ::String
+      attr_accessor max_results: ::Integer
+      SENSITIVE: []
+    end
+
+    class GetFindingsTrendsV2Response
+      attr_accessor granularity: ("Daily" | "Weekly" | "Monthly")
+      attr_accessor trends_metrics: ::Array[Types::TrendsMetricsResult]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class GetFindingsV2Request
       attr_accessor filters: Types::OcsfFindingFilters
       attr_accessor sort_criteria: ::Array[Types::SortCriterion]
@@ -5876,6 +5913,22 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class GetResourcesTrendsV2Request
+      attr_accessor filters: Types::ResourcesTrendsFilters
+      attr_accessor start_time: ::Time
+      attr_accessor end_time: ::Time
+      attr_accessor next_token: ::String
+      attr_accessor max_results: ::Integer
+      SENSITIVE: []
+    end
+
+    class GetResourcesTrendsV2Response
+      attr_accessor granularity: ("Daily" | "Weekly" | "Monthly")
+      attr_accessor trends_metrics: ::Array[Types::ResourcesTrendsMetricsResult]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class GetResourcesV2Request
       attr_accessor filters: Types::ResourcesFilters
       attr_accessor sort_criteria: ::Array[Types::SortCriterion]
@@ -5908,7 +5961,7 @@ module Aws::SecurityHub
 
     class GroupByRule
       attr_accessor filters: Types::OcsfFindingFilters
-      attr_accessor group_by_field: ("activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.name" | "compliance.status" | "compliance.control" | "finding_info.title" | "finding_info.types" | "metadata.product.name" | "metadata.product.uid" | "resources.type" | "resources.uid" | "severity" | "status" | "vulnerabilities.fix_coverage" | "class_name")
+      attr_accessor group_by_field: ("activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.name" | "compliance.status" | "compliance.control" | "finding_info.title" | "finding_info.types" | "metadata.product.name" | "metadata.product.uid" | "resources.type" | "resources.uid" | "severity" | "status" | "vulnerabilities.fix_coverage" | "class_name" | "vulnerabilities.affected_packages.name" | "finding_info.analytic.name" | "compliance.standards" | "cloud.account.name")
       SENSITIVE: []
     end
 
@@ -6395,7 +6448,7 @@ module Aws::SecurityHub
     end
 
     class OcsfDateFilter
-      attr_accessor field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt")
+      attr_accessor field_name: ("finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt" | "resources.image.created_time_dt" | "resources.image.last_used_time_dt" | "resources.modified_time_dt")
       attr_accessor filter: Types::DateFilter
       SENSITIVE: []
     end
@@ -6413,20 +6466,26 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class OcsfIpFilter
+      attr_accessor field_name: ("evidences.dst_endpoint.ip" | "evidences.src_endpoint.ip")
+      attr_accessor filter: Types::IpFilter
+      SENSITIVE: []
+    end
+
     class OcsfMapFilter
-      attr_accessor field_name: ("resources.tags")
+      attr_accessor field_name: ("resources.tags" | "compliance.control_parameters" | "databucket.tags" | "finding_info.tags")
       attr_accessor filter: Types::MapFilter
       SENSITIVE: []
     end
 
     class OcsfNumberFilter
-      attr_accessor field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count")
+      attr_accessor field_name: ("activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count" | "evidences.api.response.code" | "evidences.dst_endpoint.autonomous_system.number" | "evidences.dst_endpoint.port" | "evidences.src_endpoint.autonomous_system.number" | "evidences.src_endpoint.port" | "resources.image.in_use_count")
       attr_accessor filter: Types::NumberFilter
       SENSITIVE: []
     end
 
     class OcsfStringFilter
-      attr_accessor field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name")
+      attr_accessor field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name")
       attr_accessor filter: Types::StringFilter
       SENSITIVE: []
     end
@@ -6787,7 +6846,7 @@ module Aws::SecurityHub
     end
 
     class ResourceGroupByRule
-      attr_accessor group_by_field: ("account_id" | "region" | "resource_category" | "resource_type" | "resource_name" | "findings_summary.finding_type")
+      attr_accessor group_by_field: ("AccountId" | "Region" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType")
       attr_accessor filters: Types::ResourcesFilters
       SENSITIVE: []
     end
@@ -6805,7 +6864,7 @@ module Aws::SecurityHub
     end
 
     class ResourceResult
-      attr_accessor resource_arn: ::String
+      attr_accessor resource_guid: ::String
       attr_accessor resource_id: ::String
       attr_accessor account_id: ::String
       attr_accessor region: ::String
@@ -6843,12 +6902,18 @@ module Aws::SecurityHub
       attr_accessor date_filters: ::Array[Types::ResourcesDateFilter]
       attr_accessor number_filters: ::Array[Types::ResourcesNumberFilter]
       attr_accessor map_filters: ::Array[Types::ResourcesMapFilter]
+      attr_accessor nested_composite_filters: ::Array[Types::ResourcesCompositeFilter]
       attr_accessor operator: ("AND" | "OR")
       SENSITIVE: []
     end
 
+    class ResourcesCount
+      attr_accessor all_resources: ::Integer
+      SENSITIVE: []
+    end
+
     class ResourcesDateFilter
-      attr_accessor field_name: ("resource_detail_capture_time_dt" | "resource_creation_time_dt")
+      attr_accessor field_name: ("ResourceDetailCaptureTime" | "ResourceCreationTime")
       attr_accessor filter: Types::DateFilter
       SENSITIVE: []
     end
@@ -6860,23 +6925,53 @@ module Aws::SecurityHub
     end
 
     class ResourcesMapFilter
-      attr_accessor field_name: ("tags")
+      attr_accessor field_name: ("ResourceTags")
       attr_accessor filter: Types::MapFilter
       SENSITIVE: []
     end
 
     class ResourcesNumberFilter
-      attr_accessor field_name: ("findings_summary.total_findings" | "findings_summary.severities.other" | "findings_summary.severities.fatal" | "findings_summary.severities.critical" | "findings_summary.severities.high" | "findings_summary.severities.medium" | "findings_summary.severities.low" | "findings_summary.severities.informational" | "findings_summary.severities.unknown")
+      attr_accessor field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown")
       attr_accessor filter: Types::NumberFilter
       SENSITIVE: []
     end
 
     class ResourcesStringFilter
-      attr_accessor field_name: ("resource_arn" | "resource_id" | "account_id" | "region" | "resource_category" | "resource_type" | "resource_name" | "findings_summary.finding_type" | "findings_summary.product_name")
+      attr_accessor field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "Region" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName")
       attr_accessor filter: Types::StringFilter
       SENSITIVE: []
     end
 
+    class ResourcesTrendsCompositeFilter
+      attr_accessor string_filters: ::Array[Types::ResourcesTrendsStringFilter]
+      attr_accessor nested_composite_filters: ::Array[Types::ResourcesTrendsCompositeFilter]
+      attr_accessor operator: ("AND" | "OR")
+      SENSITIVE: []
+    end
+
+    class ResourcesTrendsFilters
+      attr_accessor composite_filters: ::Array[Types::ResourcesTrendsCompositeFilter]
+      attr_accessor composite_operator: ("AND" | "OR")
+      SENSITIVE: []
+    end
+
+    class ResourcesTrendsMetricsResult
+      attr_accessor timestamp: ::Time
+      attr_accessor trends_values: Types::ResourcesTrendsValues
+      SENSITIVE: []
+    end
+
+    class ResourcesTrendsStringFilter
+      attr_accessor field_name: ("account_id" | "region" | "resource_type" | "resource_category")
+      attr_accessor filter: Types::StringFilter
+      SENSITIVE: []
+    end
+
+    class ResourcesTrendsValues
+      attr_accessor resources_count: Types::ResourcesCount
+      SENSITIVE: []
+    end
+
     class Result
       attr_accessor account_id: ::String
       attr_accessor processing_result: ::String
@@ -7122,6 +7217,18 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class SeverityTrendsCount
+      attr_accessor unknown: ::Integer
+      attr_accessor informational: ::Integer
+      attr_accessor low: ::Integer
+      attr_accessor medium: ::Integer
+      attr_accessor high: ::Integer
+      attr_accessor critical: ::Integer
+      attr_accessor fatal: ::Integer
+      attr_accessor other: ::Integer
+      SENSITIVE: []
+    end
+
     class SeverityUpdate
       attr_accessor normalized: ::Integer
       attr_accessor product: ::Float
@@ -7378,6 +7485,17 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class TrendsMetricsResult
+      attr_accessor timestamp: ::Time
+      attr_accessor trends_values: Types::TrendsValues
+      SENSITIVE: []
+    end
+
+    class TrendsValues
+      attr_accessor severity_trends: Types::SeverityTrendsCount
+      SENSITIVE: []
+    end
+
     class UnprocessedAutomationRule
       attr_accessor rule_arn: ::String
       attr_accessor error_code: ::Integer

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityhub
 version: !ruby/object:Gem::Version
-  version: 1.144.0
+  version: 1.146.0
 platform: ruby
 authors:
 - Amazon Web Services