aws-sdk-securityhub 1.152.0 → 1.154.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-securityhub/client.rb +157 -18
- data/lib/aws-sdk-securityhub/client_api.rb +38 -0
- data/lib/aws-sdk-securityhub/errors.rb +42 -0
- data/lib/aws-sdk-securityhub/types.rb +186 -7
- data/lib/aws-sdk-securityhub.rb +1 -1
- data/sig/client.rbs +32 -0
- data/sig/errors.rbs +8 -0
- data/sig/types.rbs +32 -0
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: '0588c1ee7069ed61c7b5a392261c226405bfe38e0b44fddf728f0339d4b0e032'
|
|
4
|
+
data.tar.gz: 917627145b4a6b8bf9d58d57fb3d8d6cc9a629204ba6ca1ca824dadcf640856e
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: b5d92a8976ffc710bbf3467755e2f6a0192e2fe452acb4dd02568f3ff9b5bddb2607ddc7ec0109501d9b7760d432ca2076ba53565402e92683e7a7405aa0389e
|
|
7
|
+
data.tar.gz: 7f3b5bbc8285f1c23bf063343716ef7635b993c50997f664f231da73c11b568ce67ef36df7e6fca510b0d84261563147c4bd65cd9a1f6da5acd189fcbb3807e9
|
data/CHANGELOG.md
CHANGED
|
@@ -1,6 +1,16 @@
|
|
|
1
1
|
Unreleased Changes
|
|
2
2
|
------------------
|
|
3
3
|
|
|
4
|
+
1.154.0 (2026-04-13)
|
|
5
|
+
------------------
|
|
6
|
+
|
|
7
|
+
* Feature - Provide organizational unit scoping capability for GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2, GetResourcesStatisticsV2 APIs.
|
|
8
|
+
|
|
9
|
+
1.153.0 (2026-03-18)
|
|
10
|
+
------------------
|
|
11
|
+
|
|
12
|
+
* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
|
|
13
|
+
|
|
4
14
|
1.152.0 (2026-02-26)
|
|
5
15
|
------------------
|
|
6
16
|
|
data/VERSION
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
1.
|
|
1
|
+
1.154.0
|
|
@@ -2131,17 +2131,30 @@ module Aws::SecurityHub
|
|
|
2131
2131
|
req.send_request(options)
|
|
2132
2132
|
end
|
|
2133
2133
|
|
|
2134
|
-
#
|
|
2135
|
-
#
|
|
2136
|
-
# accounts.
|
|
2137
|
-
# their account
|
|
2138
|
-
#
|
|
2139
|
-
# `
|
|
2140
|
-
# the `Action` element of an IAM
|
|
2141
|
-
# permission to perform the
|
|
2134
|
+
# Updates information about a customer's investigation into a finding.
|
|
2135
|
+
# Delegated administrator accounts can update findings for their account
|
|
2136
|
+
# and their member accounts. Member accounts can update findings for
|
|
2137
|
+
# their own account.
|
|
2138
|
+
#
|
|
2139
|
+
# `BatchUpdateFindings` and `BatchUpdateFindingsV2` both use
|
|
2140
|
+
# `securityhub:BatchUpdateFindings` in the `Action` element of an IAM
|
|
2141
|
+
# policy statement. You must have permission to perform the
|
|
2142
|
+
# `securityhub:BatchUpdateFindings` action. You can configure IAM
|
|
2143
|
+
# policies to restrict access to specific finding fields or field values
|
|
2144
|
+
# by using the `securityhub:OCSFSyntaxPath/<fieldName>` condition key,
|
|
2145
|
+
# where `<fieldName>` is one of the following supported fields:
|
|
2146
|
+
# `SeverityId`, `StatusId`, or `Comment`.
|
|
2147
|
+
#
|
|
2148
|
+
# To prevent a user from updating a specific field, use a `Null`
|
|
2149
|
+
# condition with `securityhub:OCSFSyntaxPath/<fieldName>` set to
|
|
2150
|
+
# `"false"`. To prevent a user from setting a field to a specific value,
|
|
2151
|
+
# use a `StringEquals` condition with
|
|
2152
|
+
# `securityhub:OCSFSyntaxPath/<fieldName>` set to the disallowed value
|
|
2153
|
+
# or list of values.
|
|
2154
|
+
#
|
|
2142
2155
|
# Updates from `BatchUpdateFindingsV2` don't affect the value of
|
|
2143
|
-
#
|
|
2144
|
-
# `time_dt for a finding
|
|
2156
|
+
# `finding_info.modified_time`, `finding_info.modified_time_dt`, `time`,
|
|
2157
|
+
# or `time_dt` for a finding.
|
|
2145
2158
|
#
|
|
2146
2159
|
# @option params [Array<String>] :metadata_uids
|
|
2147
2160
|
# The list of finding `metadata.uid` to indicate findings to update.
|
|
@@ -2158,14 +2171,14 @@ module Aws::SecurityHub
|
|
|
2158
2171
|
#
|
|
2159
2172
|
# @option params [Integer] :severity_id
|
|
2160
2173
|
# The updated value for the normalized severity identifier. The severity
|
|
2161
|
-
# ID is an integer with the allowed enum values \[0, 1, 2, 3, 4, 5,
|
|
2174
|
+
# ID is an integer with the allowed enum values \[0, 1, 2, 3, 4, 5, 6,
|
|
2162
2175
|
# 99\]. When customer provides the updated severity ID, the string
|
|
2163
2176
|
# sibling severity will automatically be updated in the finding.
|
|
2164
2177
|
#
|
|
2165
2178
|
# @option params [Integer] :status_id
|
|
2166
2179
|
# The updated value for the normalized status identifier. The status ID
|
|
2167
|
-
# is an integer with the allowed enum values \[0, 1, 2, 3, 4, 5,
|
|
2168
|
-
#
|
|
2180
|
+
# is an integer with the allowed enum values \[0, 1, 2, 3, 4, 5, 99\].
|
|
2181
|
+
# When customer provides the updated status ID, the string sibling
|
|
2169
2182
|
# status will automatically be updated in the finding.
|
|
2170
2183
|
#
|
|
2171
2184
|
# @return [Types::BatchUpdateFindingsV2Response] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
|
@@ -6400,15 +6413,37 @@ module Aws::SecurityHub
|
|
|
6400
6413
|
end
|
|
6401
6414
|
|
|
6402
6415
|
# Returns aggregated statistical data about findings.
|
|
6403
|
-
#
|
|
6416
|
+
#
|
|
6417
|
+
# You can use the `Scopes` parameter to define the data boundary for the
|
|
6418
|
+
# query. Currently, `Scopes` supports `AwsOrganizations`, which lets you
|
|
6419
|
+
# aggregate findings from your entire organization or from specific
|
|
6420
|
+
# organizational units. Only the delegated administrator account can use
|
|
6421
|
+
# `Scopes`.
|
|
6422
|
+
#
|
|
6423
|
+
# `GetFindingStatisticsV2` uses `securityhub:GetAdhocInsightResults` in
|
|
6404
6424
|
# the `Action` element of an IAM policy statement. You must have
|
|
6405
|
-
# permission to perform the `
|
|
6425
|
+
# permission to perform the `securityhub:GetAdhocInsightResults` action.
|
|
6406
6426
|
#
|
|
6407
6427
|
# @option params [required, Array<Types::GroupByRule>] :group_by_rules
|
|
6408
6428
|
# Specifies how security findings should be aggregated and organized in
|
|
6409
6429
|
# the statistical analysis. It can accept up to 5 `groupBy` fields in a
|
|
6410
6430
|
# single call.
|
|
6411
6431
|
#
|
|
6432
|
+
# @option params [Types::FindingScopes] :scopes
|
|
6433
|
+
# Limits the results to findings from specific organizational units or
|
|
6434
|
+
# from the delegated administrator's organization. Only the delegated
|
|
6435
|
+
# administrator account can use this parameter. Other accounts receive
|
|
6436
|
+
# an `AccessDeniedException`.
|
|
6437
|
+
#
|
|
6438
|
+
# This parameter is optional. If you omit it, the delegated
|
|
6439
|
+
# administrator sees statistics from all accounts across the entire
|
|
6440
|
+
# organization. Other accounts see only statistics for their own
|
|
6441
|
+
# findings.
|
|
6442
|
+
#
|
|
6443
|
+
# You can specify up to 10 entries in `Scopes.AwsOrganizations`. If
|
|
6444
|
+
# multiple entries are specified, the entries are combined using OR
|
|
6445
|
+
# logic.
|
|
6446
|
+
#
|
|
6412
6447
|
# @option params [String] :sort_order
|
|
6413
6448
|
# Orders the aggregation count in descending or ascending order.
|
|
6414
6449
|
# Descending order is the default.
|
|
@@ -6499,6 +6534,14 @@ module Aws::SecurityHub
|
|
|
6499
6534
|
# group_by_field: "activity_name", # required, accepts activity_name, cloud.account.uid, cloud.provider, cloud.region, compliance.assessments.name, compliance.status, compliance.control, finding_info.title, finding_info.related_events.traits.category, finding_info.types, metadata.product.name, metadata.product.uid, resources.type, resources.uid, severity, status, vulnerabilities.fix_coverage, class_name, vulnerabilities.affected_packages.name, finding_info.analytic.name, compliance.standards, cloud.account.name, vendor_attributes.severity, metadata.product.vendor_name
|
|
6500
6535
|
# },
|
|
6501
6536
|
# ],
|
|
6537
|
+
# scopes: {
|
|
6538
|
+
# aws_organizations: [
|
|
6539
|
+
# {
|
|
6540
|
+
# organization_id: "NonEmptyString",
|
|
6541
|
+
# organizational_unit_id: "NonEmptyString",
|
|
6542
|
+
# },
|
|
6543
|
+
# ],
|
|
6544
|
+
# },
|
|
6502
6545
|
# sort_order: "asc", # accepts asc, desc
|
|
6503
6546
|
# max_statistic_results: 1,
|
|
6504
6547
|
# })
|
|
@@ -7469,7 +7512,19 @@ module Aws::SecurityHub
|
|
|
7469
7512
|
req.send_request(options)
|
|
7470
7513
|
end
|
|
7471
7514
|
|
|
7472
|
-
#
|
|
7515
|
+
# Returns a list of findings that match the specified criteria.
|
|
7516
|
+
#
|
|
7517
|
+
# You can use the `Scopes` parameter to define the data boundary for the
|
|
7518
|
+
# query. Currently, `Scopes` supports `AwsOrganizations`, which lets you
|
|
7519
|
+
# retrieve findings from your entire organization or from specific
|
|
7520
|
+
# organizational units. Only the delegated administrator account can use
|
|
7521
|
+
# `Scopes`.
|
|
7522
|
+
#
|
|
7523
|
+
# You can use the `Filters` parameter to refine results based on finding
|
|
7524
|
+
# attributes. You can use `Scopes` and `Filters` independently or
|
|
7525
|
+
# together. When both are provided, `Scopes` narrows the data set first,
|
|
7526
|
+
# and then `Filters` refines results within that scoped data set.
|
|
7527
|
+
#
|
|
7473
7528
|
# `GetFindings` and `GetFindingsV2` both use `securityhub:GetFindings`
|
|
7474
7529
|
# in the `Action` element of an IAM policy statement. You must have
|
|
7475
7530
|
# permission to perform the `securityhub:GetFindings` action.
|
|
@@ -7480,6 +7535,20 @@ module Aws::SecurityHub
|
|
|
7480
7535
|
# each filter type inside of a composite filter, you can provide up to
|
|
7481
7536
|
# 20 filters.
|
|
7482
7537
|
#
|
|
7538
|
+
# @option params [Types::FindingScopes] :scopes
|
|
7539
|
+
# Limits the results to findings from specific organizational units or
|
|
7540
|
+
# from the delegated administrator's organization. Only the delegated
|
|
7541
|
+
# administrator account can use this parameter. Other accounts receive
|
|
7542
|
+
# an `AccessDeniedException`.
|
|
7543
|
+
#
|
|
7544
|
+
# This parameter is optional. If you omit it, the delegated
|
|
7545
|
+
# administrator sees findings from all accounts across the entire
|
|
7546
|
+
# organization. Other accounts see only their own findings.
|
|
7547
|
+
#
|
|
7548
|
+
# You can specify up to 10 entries in `Scopes.AwsOrganizations`. If
|
|
7549
|
+
# multiple entries are specified, the entries are combined using OR
|
|
7550
|
+
# logic.
|
|
7551
|
+
#
|
|
7483
7552
|
# @option params [Array<Types::SortCriterion>] :sort_criteria
|
|
7484
7553
|
# The finding attributes used to sort the list of returned findings.
|
|
7485
7554
|
#
|
|
@@ -7573,6 +7642,14 @@ module Aws::SecurityHub
|
|
|
7573
7642
|
# ],
|
|
7574
7643
|
# composite_operator: "AND", # accepts AND, OR
|
|
7575
7644
|
# },
|
|
7645
|
+
# scopes: {
|
|
7646
|
+
# aws_organizations: [
|
|
7647
|
+
# {
|
|
7648
|
+
# organization_id: "NonEmptyString",
|
|
7649
|
+
# organizational_unit_id: "NonEmptyString",
|
|
7650
|
+
# },
|
|
7651
|
+
# ],
|
|
7652
|
+
# },
|
|
7576
7653
|
# sort_criteria: [
|
|
7577
7654
|
# {
|
|
7578
7655
|
# field: "NonEmptyString",
|
|
@@ -8274,10 +8351,31 @@ module Aws::SecurityHub
|
|
|
8274
8351
|
# Retrieves statistical information about Amazon Web Services resources
|
|
8275
8352
|
# and their associated security findings.
|
|
8276
8353
|
#
|
|
8354
|
+
# You can use the `Scopes` parameter to define the data boundary for the
|
|
8355
|
+
# query. Currently, `Scopes` supports `AwsOrganizations`, which lets you
|
|
8356
|
+
# aggregate resources from your entire organization or from specific
|
|
8357
|
+
# organizational units. Only the delegated administrator account can use
|
|
8358
|
+
# `Scopes`.
|
|
8359
|
+
#
|
|
8277
8360
|
# @option params [required, Array<Types::ResourceGroupByRule>] :group_by_rules
|
|
8278
8361
|
# How resource statistics should be aggregated and organized in the
|
|
8279
8362
|
# response.
|
|
8280
8363
|
#
|
|
8364
|
+
# @option params [Types::ResourceScopes] :scopes
|
|
8365
|
+
# Limits the results to resources from specific organizational units or
|
|
8366
|
+
# from the delegated administrator's organization. Only the delegated
|
|
8367
|
+
# administrator account can use this parameter. Other accounts receive
|
|
8368
|
+
# an `AccessDeniedException`.
|
|
8369
|
+
#
|
|
8370
|
+
# This parameter is optional. If you omit it, the delegated
|
|
8371
|
+
# administrator sees statistics from all accounts across the entire
|
|
8372
|
+
# organization. Other accounts see only statistics for their own
|
|
8373
|
+
# resources.
|
|
8374
|
+
#
|
|
8375
|
+
# You can specify up to 10 entries in `Scopes.AwsOrganizations`. If
|
|
8376
|
+
# multiple entries are specified, the entries are combined using OR
|
|
8377
|
+
# logic.
|
|
8378
|
+
#
|
|
8281
8379
|
# @option params [String] :sort_order
|
|
8282
8380
|
# Sorts aggregated statistics.
|
|
8283
8381
|
#
|
|
@@ -8351,6 +8449,14 @@ module Aws::SecurityHub
|
|
|
8351
8449
|
# },
|
|
8352
8450
|
# },
|
|
8353
8451
|
# ],
|
|
8452
|
+
# scopes: {
|
|
8453
|
+
# aws_organizations: [
|
|
8454
|
+
# {
|
|
8455
|
+
# organization_id: "NonEmptyString",
|
|
8456
|
+
# organizational_unit_id: "NonEmptyString",
|
|
8457
|
+
# },
|
|
8458
|
+
# ],
|
|
8459
|
+
# },
|
|
8354
8460
|
# sort_order: "asc", # accepts asc, desc
|
|
8355
8461
|
# max_statistic_results: 1,
|
|
8356
8462
|
# })
|
|
@@ -8451,11 +8557,36 @@ module Aws::SecurityHub
|
|
|
8451
8557
|
|
|
8452
8558
|
# Returns a list of resources.
|
|
8453
8559
|
#
|
|
8560
|
+
# You can use the `Scopes` parameter to define the data boundary for the
|
|
8561
|
+
# query. Currently, `Scopes` supports `AwsOrganizations`, which lets you
|
|
8562
|
+
# retrieve resources from your entire organization or from specific
|
|
8563
|
+
# organizational units. Only the delegated administrator account can use
|
|
8564
|
+
# `Scopes`.
|
|
8565
|
+
#
|
|
8566
|
+
# You can use the `Filters` parameter to refine results based on
|
|
8567
|
+
# resource attributes. You can use `Scopes` and `Filters` independently
|
|
8568
|
+
# or together. When both are provided, `Scopes` narrows the data set
|
|
8569
|
+
# first, and then `Filters` refines results within that scoped data set.
|
|
8570
|
+
#
|
|
8454
8571
|
# @option params [Types::ResourcesFilters] :filters
|
|
8455
8572
|
# Filters resources based on a set of criteria.
|
|
8456
8573
|
#
|
|
8574
|
+
# @option params [Types::ResourceScopes] :scopes
|
|
8575
|
+
# Limits the results to resources from specific organizational units or
|
|
8576
|
+
# from the delegated administrator's organization. Only the delegated
|
|
8577
|
+
# administrator account can use this parameter. Other accounts receive
|
|
8578
|
+
# an `AccessDeniedException`.
|
|
8579
|
+
#
|
|
8580
|
+
# This parameter is optional. If you omit it, the delegated
|
|
8581
|
+
# administrator sees resources from all accounts across the entire
|
|
8582
|
+
# organization. Other accounts see only their own resources.
|
|
8583
|
+
#
|
|
8584
|
+
# You can specify up to 10 entries in `Scopes.AwsOrganizations`. If
|
|
8585
|
+
# multiple entries are specified, the entries are combined using OR
|
|
8586
|
+
# logic.
|
|
8587
|
+
#
|
|
8457
8588
|
# @option params [Array<Types::SortCriterion>] :sort_criteria
|
|
8458
|
-
# The
|
|
8589
|
+
# The resource attributes used to sort the list of returned resources.
|
|
8459
8590
|
#
|
|
8460
8591
|
# @option params [String] :next_token
|
|
8461
8592
|
# The token required for pagination. On your first call, set the value
|
|
@@ -8531,6 +8662,14 @@ module Aws::SecurityHub
|
|
|
8531
8662
|
# ],
|
|
8532
8663
|
# composite_operator: "AND", # accepts AND, OR
|
|
8533
8664
|
# },
|
|
8665
|
+
# scopes: {
|
|
8666
|
+
# aws_organizations: [
|
|
8667
|
+
# {
|
|
8668
|
+
# organization_id: "NonEmptyString",
|
|
8669
|
+
# organizational_unit_id: "NonEmptyString",
|
|
8670
|
+
# },
|
|
8671
|
+
# ],
|
|
8672
|
+
# },
|
|
8534
8673
|
# sort_criteria: [
|
|
8535
8674
|
# {
|
|
8536
8675
|
# field: "NonEmptyString",
|
|
@@ -12409,7 +12548,7 @@ module Aws::SecurityHub
|
|
|
12409
12548
|
tracer: tracer
|
|
12410
12549
|
)
|
|
12411
12550
|
context[:gem_name] = 'aws-sdk-securityhub'
|
|
12412
|
-
context[:gem_version] = '1.
|
|
12551
|
+
context[:gem_version] = '1.154.0'
|
|
12413
12552
|
Seahorse::Client::Request.new(handlers, context)
|
|
12414
12553
|
end
|
|
12415
12554
|
|
|
@@ -544,6 +544,8 @@ module Aws::SecurityHub
|
|
|
544
544
|
AwsOpenSearchServiceDomainNodeToNodeEncryptionOptionsDetails = Shapes::StructureShape.new(name: 'AwsOpenSearchServiceDomainNodeToNodeEncryptionOptionsDetails')
|
|
545
545
|
AwsOpenSearchServiceDomainServiceSoftwareOptionsDetails = Shapes::StructureShape.new(name: 'AwsOpenSearchServiceDomainServiceSoftwareOptionsDetails')
|
|
546
546
|
AwsOpenSearchServiceDomainVpcOptionsDetails = Shapes::StructureShape.new(name: 'AwsOpenSearchServiceDomainVpcOptionsDetails')
|
|
547
|
+
AwsOrganizationScope = Shapes::StructureShape.new(name: 'AwsOrganizationScope')
|
|
548
|
+
AwsOrganizationScopeList = Shapes::ListShape.new(name: 'AwsOrganizationScopeList')
|
|
547
549
|
AwsRdsDbClusterAssociatedRole = Shapes::StructureShape.new(name: 'AwsRdsDbClusterAssociatedRole')
|
|
548
550
|
AwsRdsDbClusterAssociatedRoles = Shapes::ListShape.new(name: 'AwsRdsDbClusterAssociatedRoles')
|
|
549
551
|
AwsRdsDbClusterDetails = Shapes::StructureShape.new(name: 'AwsRdsDbClusterDetails')
|
|
@@ -910,6 +912,7 @@ module Aws::SecurityHub
|
|
|
910
912
|
FindingHistoryUpdatesList = Shapes::ListShape.new(name: 'FindingHistoryUpdatesList')
|
|
911
913
|
FindingProviderFields = Shapes::StructureShape.new(name: 'FindingProviderFields')
|
|
912
914
|
FindingProviderSeverity = Shapes::StructureShape.new(name: 'FindingProviderSeverity')
|
|
915
|
+
FindingScopes = Shapes::StructureShape.new(name: 'FindingScopes')
|
|
913
916
|
FindingsTrendsCompositeFilter = Shapes::StructureShape.new(name: 'FindingsTrendsCompositeFilter')
|
|
914
917
|
FindingsTrendsCompositeFilterList = Shapes::ListShape.new(name: 'FindingsTrendsCompositeFilterList')
|
|
915
918
|
FindingsTrendsFilters = Shapes::StructureShape.new(name: 'FindingsTrendsFilters')
|
|
@@ -1103,6 +1106,8 @@ module Aws::SecurityHub
|
|
|
1103
1106
|
OrganizationConfiguration = Shapes::StructureShape.new(name: 'OrganizationConfiguration')
|
|
1104
1107
|
OrganizationConfigurationConfigurationType = Shapes::StringShape.new(name: 'OrganizationConfigurationConfigurationType')
|
|
1105
1108
|
OrganizationConfigurationStatus = Shapes::StringShape.new(name: 'OrganizationConfigurationStatus')
|
|
1109
|
+
OrganizationNotFoundException = Shapes::StructureShape.new(name: 'OrganizationNotFoundException')
|
|
1110
|
+
OrganizationalUnitNotFoundException = Shapes::StructureShape.new(name: 'OrganizationalUnitNotFoundException')
|
|
1106
1111
|
Page = Shapes::StructureShape.new(name: 'Page')
|
|
1107
1112
|
Pages = Shapes::ListShape.new(name: 'Pages')
|
|
1108
1113
|
ParameterConfiguration = Shapes::StructureShape.new(name: 'ParameterConfiguration')
|
|
@@ -1161,6 +1166,7 @@ module Aws::SecurityHub
|
|
|
1161
1166
|
ResourceList = Shapes::ListShape.new(name: 'ResourceList')
|
|
1162
1167
|
ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
|
|
1163
1168
|
ResourceResult = Shapes::StructureShape.new(name: 'ResourceResult')
|
|
1169
|
+
ResourceScopes = Shapes::StructureShape.new(name: 'ResourceScopes')
|
|
1164
1170
|
ResourceSeverityBreakdown = Shapes::StructureShape.new(name: 'ResourceSeverityBreakdown')
|
|
1165
1171
|
ResourceTag = Shapes::StructureShape.new(name: 'ResourceTag')
|
|
1166
1172
|
ResourceTagList = Shapes::ListShape.new(name: 'ResourceTagList')
|
|
@@ -4204,6 +4210,12 @@ module Aws::SecurityHub
|
|
|
4204
4210
|
AwsOpenSearchServiceDomainVpcOptionsDetails.add_member(:subnet_ids, Shapes::ShapeRef.new(shape: NonEmptyStringList, location_name: "SubnetIds"))
|
|
4205
4211
|
AwsOpenSearchServiceDomainVpcOptionsDetails.struct_class = Types::AwsOpenSearchServiceDomainVpcOptionsDetails
|
|
4206
4212
|
|
|
4213
|
+
AwsOrganizationScope.add_member(:organization_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "OrganizationId"))
|
|
4214
|
+
AwsOrganizationScope.add_member(:organizational_unit_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "OrganizationalUnitId"))
|
|
4215
|
+
AwsOrganizationScope.struct_class = Types::AwsOrganizationScope
|
|
4216
|
+
|
|
4217
|
+
AwsOrganizationScopeList.member = Shapes::ShapeRef.new(shape: AwsOrganizationScope)
|
|
4218
|
+
|
|
4207
4219
|
AwsRdsDbClusterAssociatedRole.add_member(:role_arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "RoleArn"))
|
|
4208
4220
|
AwsRdsDbClusterAssociatedRole.add_member(:status, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Status"))
|
|
4209
4221
|
AwsRdsDbClusterAssociatedRole.struct_class = Types::AwsRdsDbClusterAssociatedRole
|
|
@@ -6028,6 +6040,9 @@ module Aws::SecurityHub
|
|
|
6028
6040
|
FindingProviderSeverity.add_member(:original, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Original"))
|
|
6029
6041
|
FindingProviderSeverity.struct_class = Types::FindingProviderSeverity
|
|
6030
6042
|
|
|
6043
|
+
FindingScopes.add_member(:aws_organizations, Shapes::ShapeRef.new(shape: AwsOrganizationScopeList, location_name: "AwsOrganizations"))
|
|
6044
|
+
FindingScopes.struct_class = Types::FindingScopes
|
|
6045
|
+
|
|
6031
6046
|
FindingsTrendsCompositeFilter.add_member(:string_filters, Shapes::ShapeRef.new(shape: FindingsTrendsStringFilterList, location_name: "StringFilters"))
|
|
6032
6047
|
FindingsTrendsCompositeFilter.add_member(:nested_composite_filters, Shapes::ShapeRef.new(shape: FindingsTrendsCompositeFilterList, location_name: "NestedCompositeFilters"))
|
|
6033
6048
|
FindingsTrendsCompositeFilter.add_member(:operator, Shapes::ShapeRef.new(shape: AllowedOperators, location_name: "Operator"))
|
|
@@ -6175,6 +6190,7 @@ module Aws::SecurityHub
|
|
|
6175
6190
|
GetFindingHistoryResponse.struct_class = Types::GetFindingHistoryResponse
|
|
6176
6191
|
|
|
6177
6192
|
GetFindingStatisticsV2Request.add_member(:group_by_rules, Shapes::ShapeRef.new(shape: GroupByRules, required: true, location_name: "GroupByRules"))
|
|
6193
|
+
GetFindingStatisticsV2Request.add_member(:scopes, Shapes::ShapeRef.new(shape: FindingScopes, location_name: "Scopes"))
|
|
6178
6194
|
GetFindingStatisticsV2Request.add_member(:sort_order, Shapes::ShapeRef.new(shape: SortOrder, location_name: "SortOrder"))
|
|
6179
6195
|
GetFindingStatisticsV2Request.add_member(:max_statistic_results, Shapes::ShapeRef.new(shape: MaxStatisticResults, location_name: "MaxStatisticResults"))
|
|
6180
6196
|
GetFindingStatisticsV2Request.struct_class = Types::GetFindingStatisticsV2Request
|
|
@@ -6205,6 +6221,7 @@ module Aws::SecurityHub
|
|
|
6205
6221
|
GetFindingsTrendsV2Response.struct_class = Types::GetFindingsTrendsV2Response
|
|
6206
6222
|
|
|
6207
6223
|
GetFindingsV2Request.add_member(:filters, Shapes::ShapeRef.new(shape: OcsfFindingFilters, location_name: "Filters"))
|
|
6224
|
+
GetFindingsV2Request.add_member(:scopes, Shapes::ShapeRef.new(shape: FindingScopes, location_name: "Scopes"))
|
|
6208
6225
|
GetFindingsV2Request.add_member(:sort_criteria, Shapes::ShapeRef.new(shape: SortCriteria, location_name: "SortCriteria"))
|
|
6209
6226
|
GetFindingsV2Request.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
|
|
6210
6227
|
GetFindingsV2Request.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location_name: "MaxResults"))
|
|
@@ -6247,6 +6264,7 @@ module Aws::SecurityHub
|
|
|
6247
6264
|
GetMembersResponse.struct_class = Types::GetMembersResponse
|
|
6248
6265
|
|
|
6249
6266
|
GetResourcesStatisticsV2Request.add_member(:group_by_rules, Shapes::ShapeRef.new(shape: ResourceGroupByRules, required: true, location_name: "GroupByRules"))
|
|
6267
|
+
GetResourcesStatisticsV2Request.add_member(:scopes, Shapes::ShapeRef.new(shape: ResourceScopes, location_name: "Scopes"))
|
|
6250
6268
|
GetResourcesStatisticsV2Request.add_member(:sort_order, Shapes::ShapeRef.new(shape: SortOrder, location_name: "SortOrder"))
|
|
6251
6269
|
GetResourcesStatisticsV2Request.add_member(:max_statistic_results, Shapes::ShapeRef.new(shape: MaxStatisticResults, location_name: "MaxStatisticResults"))
|
|
6252
6270
|
GetResourcesStatisticsV2Request.struct_class = Types::GetResourcesStatisticsV2Request
|
|
@@ -6267,6 +6285,7 @@ module Aws::SecurityHub
|
|
|
6267
6285
|
GetResourcesTrendsV2Response.struct_class = Types::GetResourcesTrendsV2Response
|
|
6268
6286
|
|
|
6269
6287
|
GetResourcesV2Request.add_member(:filters, Shapes::ShapeRef.new(shape: ResourcesFilters, location_name: "Filters"))
|
|
6288
|
+
GetResourcesV2Request.add_member(:scopes, Shapes::ShapeRef.new(shape: ResourceScopes, location_name: "Scopes"))
|
|
6270
6289
|
GetResourcesV2Request.add_member(:sort_criteria, Shapes::ShapeRef.new(shape: SortCriteria, location_name: "SortCriteria"))
|
|
6271
6290
|
GetResourcesV2Request.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
|
|
6272
6291
|
GetResourcesV2Request.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location_name: "MaxResults"))
|
|
@@ -6724,6 +6743,14 @@ module Aws::SecurityHub
|
|
|
6724
6743
|
OrganizationConfiguration.add_member(:status_message, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "StatusMessage"))
|
|
6725
6744
|
OrganizationConfiguration.struct_class = Types::OrganizationConfiguration
|
|
6726
6745
|
|
|
6746
|
+
OrganizationNotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Message"))
|
|
6747
|
+
OrganizationNotFoundException.add_member(:code, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Code"))
|
|
6748
|
+
OrganizationNotFoundException.struct_class = Types::OrganizationNotFoundException
|
|
6749
|
+
|
|
6750
|
+
OrganizationalUnitNotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Message"))
|
|
6751
|
+
OrganizationalUnitNotFoundException.add_member(:code, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Code"))
|
|
6752
|
+
OrganizationalUnitNotFoundException.struct_class = Types::OrganizationalUnitNotFoundException
|
|
6753
|
+
|
|
6727
6754
|
Page.add_member(:page_number, Shapes::ShapeRef.new(shape: Long, location_name: "PageNumber"))
|
|
6728
6755
|
Page.add_member(:line_range, Shapes::ShapeRef.new(shape: Range, location_name: "LineRange"))
|
|
6729
6756
|
Page.add_member(:offset_range, Shapes::ShapeRef.new(shape: Range, location_name: "OffsetRange"))
|
|
@@ -7065,6 +7092,9 @@ module Aws::SecurityHub
|
|
|
7065
7092
|
ResourceResult.add_member(:resource_config, Shapes::ShapeRef.new(shape: ResourceConfig, required: true, location_name: "ResourceConfig"))
|
|
7066
7093
|
ResourceResult.struct_class = Types::ResourceResult
|
|
7067
7094
|
|
|
7095
|
+
ResourceScopes.add_member(:aws_organizations, Shapes::ShapeRef.new(shape: AwsOrganizationScopeList, location_name: "AwsOrganizations"))
|
|
7096
|
+
ResourceScopes.struct_class = Types::ResourceScopes
|
|
7097
|
+
|
|
7068
7098
|
ResourceSeverityBreakdown.add_member(:other, Shapes::ShapeRef.new(shape: Integer, location_name: "Other"))
|
|
7069
7099
|
ResourceSeverityBreakdown.add_member(:fatal, Shapes::ShapeRef.new(shape: Integer, location_name: "Fatal"))
|
|
7070
7100
|
ResourceSeverityBreakdown.add_member(:critical, Shapes::ShapeRef.new(shape: Integer, location_name: "Critical"))
|
|
@@ -8753,6 +8783,8 @@ module Aws::SecurityHub
|
|
|
8753
8783
|
o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
|
|
8754
8784
|
o.errors << Shapes::ShapeRef.new(shape: ConflictException)
|
|
8755
8785
|
o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
|
|
8786
|
+
o.errors << Shapes::ShapeRef.new(shape: OrganizationalUnitNotFoundException)
|
|
8787
|
+
o.errors << Shapes::ShapeRef.new(shape: OrganizationNotFoundException)
|
|
8756
8788
|
end)
|
|
8757
8789
|
|
|
8758
8790
|
api.add_operation(:get_findings, Seahorse::Model::Operation.new.tap do |o|
|
|
@@ -8802,6 +8834,8 @@ module Aws::SecurityHub
|
|
|
8802
8834
|
o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
|
|
8803
8835
|
o.errors << Shapes::ShapeRef.new(shape: ConflictException)
|
|
8804
8836
|
o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
|
|
8837
|
+
o.errors << Shapes::ShapeRef.new(shape: OrganizationalUnitNotFoundException)
|
|
8838
|
+
o.errors << Shapes::ShapeRef.new(shape: OrganizationNotFoundException)
|
|
8805
8839
|
o[:pager] = Aws::Pager.new(
|
|
8806
8840
|
limit_key: "max_results",
|
|
8807
8841
|
tokens: {
|
|
@@ -8893,6 +8927,8 @@ module Aws::SecurityHub
|
|
|
8893
8927
|
o.errors << Shapes::ShapeRef.new(shape: ConflictException)
|
|
8894
8928
|
o.errors << Shapes::ShapeRef.new(shape: ValidationException)
|
|
8895
8929
|
o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
|
|
8930
|
+
o.errors << Shapes::ShapeRef.new(shape: OrganizationalUnitNotFoundException)
|
|
8931
|
+
o.errors << Shapes::ShapeRef.new(shape: OrganizationNotFoundException)
|
|
8896
8932
|
end)
|
|
8897
8933
|
|
|
8898
8934
|
api.add_operation(:get_resources_trends_v2, Seahorse::Model::Operation.new.tap do |o|
|
|
@@ -8925,6 +8961,8 @@ module Aws::SecurityHub
|
|
|
8925
8961
|
o.errors << Shapes::ShapeRef.new(shape: ConflictException)
|
|
8926
8962
|
o.errors << Shapes::ShapeRef.new(shape: ValidationException)
|
|
8927
8963
|
o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
|
|
8964
|
+
o.errors << Shapes::ShapeRef.new(shape: OrganizationalUnitNotFoundException)
|
|
8965
|
+
o.errors << Shapes::ShapeRef.new(shape: OrganizationNotFoundException)
|
|
8928
8966
|
o[:pager] = Aws::Pager.new(
|
|
8929
8967
|
limit_key: "max_results",
|
|
8930
8968
|
tokens: {
|
|
@@ -34,6 +34,8 @@ module Aws::SecurityHub
|
|
|
34
34
|
# * {InvalidAccessException}
|
|
35
35
|
# * {InvalidInputException}
|
|
36
36
|
# * {LimitExceededException}
|
|
37
|
+
# * {OrganizationNotFoundException}
|
|
38
|
+
# * {OrganizationalUnitNotFoundException}
|
|
37
39
|
# * {ResourceConflictException}
|
|
38
40
|
# * {ResourceInUseException}
|
|
39
41
|
# * {ResourceNotFoundException}
|
|
@@ -187,6 +189,46 @@ module Aws::SecurityHub
|
|
|
187
189
|
end
|
|
188
190
|
end
|
|
189
191
|
|
|
192
|
+
class OrganizationNotFoundException < ServiceError
|
|
193
|
+
|
|
194
|
+
# @param [Seahorse::Client::RequestContext] context
|
|
195
|
+
# @param [String] message
|
|
196
|
+
# @param [Aws::SecurityHub::Types::OrganizationNotFoundException] data
|
|
197
|
+
def initialize(context, message, data = Aws::EmptyStructure.new)
|
|
198
|
+
super(context, message, data)
|
|
199
|
+
end
|
|
200
|
+
|
|
201
|
+
# @return [String]
|
|
202
|
+
def message
|
|
203
|
+
@message || @data[:message]
|
|
204
|
+
end
|
|
205
|
+
|
|
206
|
+
# @return [String]
|
|
207
|
+
def code
|
|
208
|
+
@code || @data[:code]
|
|
209
|
+
end
|
|
210
|
+
end
|
|
211
|
+
|
|
212
|
+
class OrganizationalUnitNotFoundException < ServiceError
|
|
213
|
+
|
|
214
|
+
# @param [Seahorse::Client::RequestContext] context
|
|
215
|
+
# @param [String] message
|
|
216
|
+
# @param [Aws::SecurityHub::Types::OrganizationalUnitNotFoundException] data
|
|
217
|
+
def initialize(context, message, data = Aws::EmptyStructure.new)
|
|
218
|
+
super(context, message, data)
|
|
219
|
+
end
|
|
220
|
+
|
|
221
|
+
# @return [String]
|
|
222
|
+
def message
|
|
223
|
+
@message || @data[:message]
|
|
224
|
+
end
|
|
225
|
+
|
|
226
|
+
# @return [String]
|
|
227
|
+
def code
|
|
228
|
+
@code || @data[:code]
|
|
229
|
+
end
|
|
230
|
+
end
|
|
231
|
+
|
|
190
232
|
class ResourceConflictException < ServiceError
|
|
191
233
|
|
|
192
234
|
# @param [Seahorse::Client::RequestContext] context
|
|
@@ -15220,6 +15220,47 @@ module Aws::SecurityHub
|
|
|
15220
15220
|
include Aws::Structure
|
|
15221
15221
|
end
|
|
15222
15222
|
|
|
15223
|
+
# Specifies an Organizations scope. Data from the specified organization
|
|
15224
|
+
# or organizational unit is included in the response.
|
|
15225
|
+
#
|
|
15226
|
+
# To scope to a specific organizational unit, provide
|
|
15227
|
+
# `OrganizationalUnitId`. You can optionally include `OrganizationId`.
|
|
15228
|
+
# If you omit `OrganizationId`, Security Hub uses the caller's
|
|
15229
|
+
# organization ID. To scope to the delegated administrator's entire
|
|
15230
|
+
# organization, provide only `OrganizationId`.
|
|
15231
|
+
#
|
|
15232
|
+
# The organization ID and organizational unit must belong to the
|
|
15233
|
+
# delegated administrator's own organization. Each request must use one
|
|
15234
|
+
# scoping approach: either scope to the entire organization by providing
|
|
15235
|
+
# an `AwsOrganizationScope` entry with only `OrganizationId`, or scope
|
|
15236
|
+
# to specific organizational units by providing `AwsOrganizationScope`
|
|
15237
|
+
# entries with `OrganizationalUnitId`. You can't combine both
|
|
15238
|
+
# approaches in the same request.
|
|
15239
|
+
#
|
|
15240
|
+
# @!attribute [rw] organization_id
|
|
15241
|
+
# The unique identifier (ID) of the organization (for example,
|
|
15242
|
+
# `o-abcd1234567890`). The organization must be the delegated
|
|
15243
|
+
# administrator's own organization. If you omit this value and
|
|
15244
|
+
# provide `OrganizationalUnitId`, Security Hub uses the caller's
|
|
15245
|
+
# organization ID.
|
|
15246
|
+
# @return [String]
|
|
15247
|
+
#
|
|
15248
|
+
# @!attribute [rw] organizational_unit_id
|
|
15249
|
+
# The unique identifier (ID) of the organizational unit (OU) (for
|
|
15250
|
+
# example, `ou-ab12-cd345678`). The OU must exist within the delegated
|
|
15251
|
+
# administrator's own organization. When specified, the results
|
|
15252
|
+
# include only data from accounts in this OU.
|
|
15253
|
+
# @return [String]
|
|
15254
|
+
#
|
|
15255
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsOrganizationScope AWS API Documentation
|
|
15256
|
+
#
|
|
15257
|
+
class AwsOrganizationScope < Struct.new(
|
|
15258
|
+
:organization_id,
|
|
15259
|
+
:organizational_unit_id)
|
|
15260
|
+
SENSITIVE = []
|
|
15261
|
+
include Aws::Structure
|
|
15262
|
+
end
|
|
15263
|
+
|
|
15223
15264
|
# An IAM role that is associated with the Amazon RDS DB cluster.
|
|
15224
15265
|
#
|
|
15225
15266
|
# @!attribute [rw] role_arn
|
|
@@ -22131,14 +22172,14 @@ module Aws::SecurityHub
|
|
|
22131
22172
|
# @!attribute [rw] severity_id
|
|
22132
22173
|
# The updated value for the normalized severity identifier. The
|
|
22133
22174
|
# severity ID is an integer with the allowed enum values \[0, 1, 2, 3,
|
|
22134
|
-
# 4, 5, 99\]. When customer provides the updated severity ID, the
|
|
22175
|
+
# 4, 5, 6, 99\]. When customer provides the updated severity ID, the
|
|
22135
22176
|
# string sibling severity will automatically be updated in the
|
|
22136
22177
|
# finding.
|
|
22137
22178
|
# @return [Integer]
|
|
22138
22179
|
#
|
|
22139
22180
|
# @!attribute [rw] status_id
|
|
22140
22181
|
# The updated value for the normalized status identifier. The status
|
|
22141
|
-
# ID is an integer with the allowed enum values \[0, 1, 2, 3, 4, 5,
|
|
22182
|
+
# ID is an integer with the allowed enum values \[0, 1, 2, 3, 4, 5,
|
|
22142
22183
|
# 99\]. When customer provides the updated status ID, the string
|
|
22143
22184
|
# sibling status will automatically be updated in the finding.
|
|
22144
22185
|
# @return [Integer]
|
|
@@ -25007,6 +25048,24 @@ module Aws::SecurityHub
|
|
|
25007
25048
|
include Aws::Structure
|
|
25008
25049
|
end
|
|
25009
25050
|
|
|
25051
|
+
# Defines the data boundary for a findings query. Scopes determine which
|
|
25052
|
+
# organizational units or organizations to retrieve data from.
|
|
25053
|
+
#
|
|
25054
|
+
# @!attribute [rw] aws_organizations
|
|
25055
|
+
# A list of Organizations scopes to include in the query results. Each
|
|
25056
|
+
# entry in the list specifies an organization or organizational unit
|
|
25057
|
+
# to include for the delegated administrator's account. If the list
|
|
25058
|
+
# specifies multiple entries, the entries are combined using OR logic.
|
|
25059
|
+
# @return [Array<Types::AwsOrganizationScope>]
|
|
25060
|
+
#
|
|
25061
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/FindingScopes AWS API Documentation
|
|
25062
|
+
#
|
|
25063
|
+
class FindingScopes < Struct.new(
|
|
25064
|
+
:aws_organizations)
|
|
25065
|
+
SENSITIVE = []
|
|
25066
|
+
include Aws::Structure
|
|
25067
|
+
end
|
|
25068
|
+
|
|
25010
25069
|
# A filter structure that contains a logical combination of string
|
|
25011
25070
|
# filters and nested composite filters for findings trend data.
|
|
25012
25071
|
#
|
|
@@ -25737,6 +25796,22 @@ module Aws::SecurityHub
|
|
|
25737
25796
|
# in a single call.
|
|
25738
25797
|
# @return [Array<Types::GroupByRule>]
|
|
25739
25798
|
#
|
|
25799
|
+
# @!attribute [rw] scopes
|
|
25800
|
+
# Limits the results to findings from specific organizational units or
|
|
25801
|
+
# from the delegated administrator's organization. Only the delegated
|
|
25802
|
+
# administrator account can use this parameter. Other accounts receive
|
|
25803
|
+
# an `AccessDeniedException`.
|
|
25804
|
+
#
|
|
25805
|
+
# This parameter is optional. If you omit it, the delegated
|
|
25806
|
+
# administrator sees statistics from all accounts across the entire
|
|
25807
|
+
# organization. Other accounts see only statistics for their own
|
|
25808
|
+
# findings.
|
|
25809
|
+
#
|
|
25810
|
+
# You can specify up to 10 entries in `Scopes.AwsOrganizations`. If
|
|
25811
|
+
# multiple entries are specified, the entries are combined using OR
|
|
25812
|
+
# logic.
|
|
25813
|
+
# @return [Types::FindingScopes]
|
|
25814
|
+
#
|
|
25740
25815
|
# @!attribute [rw] sort_order
|
|
25741
25816
|
# Orders the aggregation count in descending or ascending order.
|
|
25742
25817
|
# Descending order is the default.
|
|
@@ -25750,6 +25825,7 @@ module Aws::SecurityHub
|
|
|
25750
25825
|
#
|
|
25751
25826
|
class GetFindingStatisticsV2Request < Struct.new(
|
|
25752
25827
|
:group_by_rules,
|
|
25828
|
+
:scopes,
|
|
25753
25829
|
:sort_order,
|
|
25754
25830
|
:max_statistic_results)
|
|
25755
25831
|
SENSITIVE = []
|
|
@@ -25893,6 +25969,21 @@ module Aws::SecurityHub
|
|
|
25893
25969
|
# up to 20 filters.
|
|
25894
25970
|
# @return [Types::OcsfFindingFilters]
|
|
25895
25971
|
#
|
|
25972
|
+
# @!attribute [rw] scopes
|
|
25973
|
+
# Limits the results to findings from specific organizational units or
|
|
25974
|
+
# from the delegated administrator's organization. Only the delegated
|
|
25975
|
+
# administrator account can use this parameter. Other accounts receive
|
|
25976
|
+
# an `AccessDeniedException`.
|
|
25977
|
+
#
|
|
25978
|
+
# This parameter is optional. If you omit it, the delegated
|
|
25979
|
+
# administrator sees findings from all accounts across the entire
|
|
25980
|
+
# organization. Other accounts see only their own findings.
|
|
25981
|
+
#
|
|
25982
|
+
# You can specify up to 10 entries in `Scopes.AwsOrganizations`. If
|
|
25983
|
+
# multiple entries are specified, the entries are combined using OR
|
|
25984
|
+
# logic.
|
|
25985
|
+
# @return [Types::FindingScopes]
|
|
25986
|
+
#
|
|
25896
25987
|
# @!attribute [rw] sort_criteria
|
|
25897
25988
|
# The finding attributes used to sort the list of returned findings.
|
|
25898
25989
|
# @return [Array<Types::SortCriterion>]
|
|
@@ -25912,6 +26003,7 @@ module Aws::SecurityHub
|
|
|
25912
26003
|
#
|
|
25913
26004
|
class GetFindingsV2Request < Struct.new(
|
|
25914
26005
|
:filters,
|
|
26006
|
+
:scopes,
|
|
25915
26007
|
:sort_criteria,
|
|
25916
26008
|
:next_token,
|
|
25917
26009
|
:max_results)
|
|
@@ -26083,6 +26175,22 @@ module Aws::SecurityHub
|
|
|
26083
26175
|
# response.
|
|
26084
26176
|
# @return [Array<Types::ResourceGroupByRule>]
|
|
26085
26177
|
#
|
|
26178
|
+
# @!attribute [rw] scopes
|
|
26179
|
+
# Limits the results to resources from specific organizational units
|
|
26180
|
+
# or from the delegated administrator's organization. Only the
|
|
26181
|
+
# delegated administrator account can use this parameter. Other
|
|
26182
|
+
# accounts receive an `AccessDeniedException`.
|
|
26183
|
+
#
|
|
26184
|
+
# This parameter is optional. If you omit it, the delegated
|
|
26185
|
+
# administrator sees statistics from all accounts across the entire
|
|
26186
|
+
# organization. Other accounts see only statistics for their own
|
|
26187
|
+
# resources.
|
|
26188
|
+
#
|
|
26189
|
+
# You can specify up to 10 entries in `Scopes.AwsOrganizations`. If
|
|
26190
|
+
# multiple entries are specified, the entries are combined using OR
|
|
26191
|
+
# logic.
|
|
26192
|
+
# @return [Types::ResourceScopes]
|
|
26193
|
+
#
|
|
26086
26194
|
# @!attribute [rw] sort_order
|
|
26087
26195
|
# Sorts aggregated statistics.
|
|
26088
26196
|
# @return [String]
|
|
@@ -26095,6 +26203,7 @@ module Aws::SecurityHub
|
|
|
26095
26203
|
#
|
|
26096
26204
|
class GetResourcesStatisticsV2Request < Struct.new(
|
|
26097
26205
|
:group_by_rules,
|
|
26206
|
+
:scopes,
|
|
26098
26207
|
:sort_order,
|
|
26099
26208
|
:max_statistic_results)
|
|
26100
26209
|
SENSITIVE = []
|
|
@@ -26179,8 +26288,23 @@ module Aws::SecurityHub
|
|
|
26179
26288
|
# Filters resources based on a set of criteria.
|
|
26180
26289
|
# @return [Types::ResourcesFilters]
|
|
26181
26290
|
#
|
|
26291
|
+
# @!attribute [rw] scopes
|
|
26292
|
+
# Limits the results to resources from specific organizational units
|
|
26293
|
+
# or from the delegated administrator's organization. Only the
|
|
26294
|
+
# delegated administrator account can use this parameter. Other
|
|
26295
|
+
# accounts receive an `AccessDeniedException`.
|
|
26296
|
+
#
|
|
26297
|
+
# This parameter is optional. If you omit it, the delegated
|
|
26298
|
+
# administrator sees resources from all accounts across the entire
|
|
26299
|
+
# organization. Other accounts see only their own resources.
|
|
26300
|
+
#
|
|
26301
|
+
# You can specify up to 10 entries in `Scopes.AwsOrganizations`. If
|
|
26302
|
+
# multiple entries are specified, the entries are combined using OR
|
|
26303
|
+
# logic.
|
|
26304
|
+
# @return [Types::ResourceScopes]
|
|
26305
|
+
#
|
|
26182
26306
|
# @!attribute [rw] sort_criteria
|
|
26183
|
-
# The
|
|
26307
|
+
# The resource attributes used to sort the list of returned resources.
|
|
26184
26308
|
# @return [Array<Types::SortCriterion>]
|
|
26185
26309
|
#
|
|
26186
26310
|
# @!attribute [rw] next_token
|
|
@@ -26198,6 +26322,7 @@ module Aws::SecurityHub
|
|
|
26198
26322
|
#
|
|
26199
26323
|
class GetResourcesV2Request < Struct.new(
|
|
26200
26324
|
:filters,
|
|
26325
|
+
:scopes,
|
|
26201
26326
|
:sort_criteria,
|
|
26202
26327
|
:next_token,
|
|
26203
26328
|
:max_results)
|
|
@@ -26206,7 +26331,7 @@ module Aws::SecurityHub
|
|
|
26206
26331
|
end
|
|
26207
26332
|
|
|
26208
26333
|
# @!attribute [rw] resources
|
|
26209
|
-
#
|
|
26334
|
+
# An array of resources returned by the operation.
|
|
26210
26335
|
# @return [Array<Types::ResourceResult>]
|
|
26211
26336
|
#
|
|
26212
26337
|
# @!attribute [rw] next_token
|
|
@@ -28425,6 +28550,42 @@ module Aws::SecurityHub
|
|
|
28425
28550
|
include Aws::Structure
|
|
28426
28551
|
end
|
|
28427
28552
|
|
|
28553
|
+
# The request failed because one or more organizations specified in the
|
|
28554
|
+
# request don't exist or don't belong to the caller's organization.
|
|
28555
|
+
#
|
|
28556
|
+
# @!attribute [rw] message
|
|
28557
|
+
# @return [String]
|
|
28558
|
+
#
|
|
28559
|
+
# @!attribute [rw] code
|
|
28560
|
+
# @return [String]
|
|
28561
|
+
#
|
|
28562
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/OrganizationNotFoundException AWS API Documentation
|
|
28563
|
+
#
|
|
28564
|
+
class OrganizationNotFoundException < Struct.new(
|
|
28565
|
+
:message,
|
|
28566
|
+
:code)
|
|
28567
|
+
SENSITIVE = []
|
|
28568
|
+
include Aws::Structure
|
|
28569
|
+
end
|
|
28570
|
+
|
|
28571
|
+
# The request failed because one or more organizational units specified
|
|
28572
|
+
# in the request don't exist within the caller's organization.
|
|
28573
|
+
#
|
|
28574
|
+
# @!attribute [rw] message
|
|
28575
|
+
# @return [String]
|
|
28576
|
+
#
|
|
28577
|
+
# @!attribute [rw] code
|
|
28578
|
+
# @return [String]
|
|
28579
|
+
#
|
|
28580
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/OrganizationalUnitNotFoundException AWS API Documentation
|
|
28581
|
+
#
|
|
28582
|
+
class OrganizationalUnitNotFoundException < Struct.new(
|
|
28583
|
+
:message,
|
|
28584
|
+
:code)
|
|
28585
|
+
SENSITIVE = []
|
|
28586
|
+
include Aws::Structure
|
|
28587
|
+
end
|
|
28588
|
+
|
|
28428
28589
|
# An occurrence of sensitive data in an Adobe Portable Document Format
|
|
28429
28590
|
# (PDF) file.
|
|
28430
28591
|
#
|
|
@@ -28956,8 +29117,8 @@ module Aws::SecurityHub
|
|
|
28956
29117
|
# @return [String]
|
|
28957
29118
|
#
|
|
28958
29119
|
# @!attribute [rw] marketplace_product_id
|
|
28959
|
-
# The identifier for the
|
|
28960
|
-
# integration.
|
|
29120
|
+
# The identifier for the Amazon Web Services Marketplace product
|
|
29121
|
+
# associated with this integration.
|
|
28961
29122
|
# @return [String]
|
|
28962
29123
|
#
|
|
28963
29124
|
# @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ProductV2 AWS API Documentation
|
|
@@ -30081,6 +30242,24 @@ module Aws::SecurityHub
|
|
|
30081
30242
|
include Aws::Structure
|
|
30082
30243
|
end
|
|
30083
30244
|
|
|
30245
|
+
# Defines the data boundary for a resources query. Scopes determine
|
|
30246
|
+
# which organizational units or organizations to retrieve data from.
|
|
30247
|
+
#
|
|
30248
|
+
# @!attribute [rw] aws_organizations
|
|
30249
|
+
# A list of Organizations scopes to include in the query results. Each
|
|
30250
|
+
# entry in the list specifies an organization or organizational unit
|
|
30251
|
+
# to include for the delegated administrator's account. If the list
|
|
30252
|
+
# specifies multiple entries, the entries are combined using OR logic.
|
|
30253
|
+
# @return [Array<Types::AwsOrganizationScope>]
|
|
30254
|
+
#
|
|
30255
|
+
# @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ResourceScopes AWS API Documentation
|
|
30256
|
+
#
|
|
30257
|
+
class ResourceScopes < Struct.new(
|
|
30258
|
+
:aws_organizations)
|
|
30259
|
+
SENSITIVE = []
|
|
30260
|
+
include Aws::Structure
|
|
30261
|
+
end
|
|
30262
|
+
|
|
30084
30263
|
# A comprehensive distribution of security findings by severity level
|
|
30085
30264
|
# for Amazon Web Services resources.
|
|
30086
30265
|
#
|
|
@@ -32564,7 +32743,7 @@ module Aws::SecurityHub
|
|
|
32564
32743
|
# `CONTAINS` and `NOT_CONTAINS` operators can be used only with
|
|
32565
32744
|
# automation rules V1. `CONTAINS_WORD` operator is only supported in
|
|
32566
32745
|
# `GetFindingsV2`, `GetFindingStatisticsV2`, `GetResourcesV2`, and
|
|
32567
|
-
# `
|
|
32746
|
+
# `GetResourcesStatisticsV2` APIs. For more information, see
|
|
32568
32747
|
# [Automation rules][1] in the *Security Hub CSPM User Guide*.
|
|
32569
32748
|
#
|
|
32570
32749
|
#
|
data/lib/aws-sdk-securityhub.rb
CHANGED
data/sig/client.rbs
CHANGED
|
@@ -6623,6 +6623,14 @@ module Aws
|
|
|
6623
6623
|
group_by_field: ("activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.name" | "compliance.status" | "compliance.control" | "finding_info.title" | "finding_info.related_events.traits.category" | "finding_info.types" | "metadata.product.name" | "metadata.product.uid" | "resources.type" | "resources.uid" | "severity" | "status" | "vulnerabilities.fix_coverage" | "class_name" | "vulnerabilities.affected_packages.name" | "finding_info.analytic.name" | "compliance.standards" | "cloud.account.name" | "vendor_attributes.severity" | "metadata.product.vendor_name")
|
|
6624
6624
|
},
|
|
6625
6625
|
],
|
|
6626
|
+
?scopes: {
|
|
6627
|
+
aws_organizations: Array[
|
|
6628
|
+
{
|
|
6629
|
+
organization_id: ::String?,
|
|
6630
|
+
organizational_unit_id: ::String?
|
|
6631
|
+
},
|
|
6632
|
+
]?
|
|
6633
|
+
},
|
|
6626
6634
|
?sort_order: ("asc" | "desc"),
|
|
6627
6635
|
?max_statistic_results: ::Integer
|
|
6628
6636
|
) -> _GetFindingStatisticsV2ResponseSuccess
|
|
@@ -7451,6 +7459,14 @@ module Aws
|
|
|
7451
7459
|
]?,
|
|
7452
7460
|
composite_operator: ("AND" | "OR")?
|
|
7453
7461
|
},
|
|
7462
|
+
?scopes: {
|
|
7463
|
+
aws_organizations: Array[
|
|
7464
|
+
{
|
|
7465
|
+
organization_id: ::String?,
|
|
7466
|
+
organizational_unit_id: ::String?
|
|
7467
|
+
},
|
|
7468
|
+
]?
|
|
7469
|
+
},
|
|
7454
7470
|
?sort_criteria: Array[
|
|
7455
7471
|
{
|
|
7456
7472
|
field: ::String?,
|
|
@@ -7578,6 +7594,14 @@ module Aws
|
|
|
7578
7594
|
}?
|
|
7579
7595
|
},
|
|
7580
7596
|
],
|
|
7597
|
+
?scopes: {
|
|
7598
|
+
aws_organizations: Array[
|
|
7599
|
+
{
|
|
7600
|
+
organization_id: ::String?,
|
|
7601
|
+
organizational_unit_id: ::String?
|
|
7602
|
+
},
|
|
7603
|
+
]?
|
|
7604
|
+
},
|
|
7581
7605
|
?sort_order: ("asc" | "desc"),
|
|
7582
7606
|
?max_statistic_results: ::Integer
|
|
7583
7607
|
) -> _GetResourcesStatisticsV2ResponseSuccess
|
|
@@ -7676,6 +7700,14 @@ module Aws
|
|
|
7676
7700
|
]?,
|
|
7677
7701
|
composite_operator: ("AND" | "OR")?
|
|
7678
7702
|
},
|
|
7703
|
+
?scopes: {
|
|
7704
|
+
aws_organizations: Array[
|
|
7705
|
+
{
|
|
7706
|
+
organization_id: ::String?,
|
|
7707
|
+
organizational_unit_id: ::String?
|
|
7708
|
+
},
|
|
7709
|
+
]?
|
|
7710
|
+
},
|
|
7679
7711
|
?sort_criteria: Array[
|
|
7680
7712
|
{
|
|
7681
7713
|
field: ::String?,
|
data/sig/errors.rbs
CHANGED
|
@@ -39,6 +39,14 @@ module Aws
|
|
|
39
39
|
def message: () -> ::String
|
|
40
40
|
def code: () -> ::String
|
|
41
41
|
end
|
|
42
|
+
class OrganizationNotFoundException < ::Aws::Errors::ServiceError
|
|
43
|
+
def message: () -> ::String
|
|
44
|
+
def code: () -> ::String
|
|
45
|
+
end
|
|
46
|
+
class OrganizationalUnitNotFoundException < ::Aws::Errors::ServiceError
|
|
47
|
+
def message: () -> ::String
|
|
48
|
+
def code: () -> ::String
|
|
49
|
+
end
|
|
42
50
|
class ResourceConflictException < ::Aws::Errors::ServiceError
|
|
43
51
|
def message: () -> ::String
|
|
44
52
|
def code: () -> ::String
|
data/sig/types.rbs
CHANGED
|
@@ -3367,6 +3367,12 @@ module Aws::SecurityHub
|
|
|
3367
3367
|
SENSITIVE: []
|
|
3368
3368
|
end
|
|
3369
3369
|
|
|
3370
|
+
class AwsOrganizationScope
|
|
3371
|
+
attr_accessor organization_id: ::String
|
|
3372
|
+
attr_accessor organizational_unit_id: ::String
|
|
3373
|
+
SENSITIVE: []
|
|
3374
|
+
end
|
|
3375
|
+
|
|
3370
3376
|
class AwsRdsDbClusterAssociatedRole
|
|
3371
3377
|
attr_accessor role_arn: ::String
|
|
3372
3378
|
attr_accessor status: ::String
|
|
@@ -5596,6 +5602,11 @@ module Aws::SecurityHub
|
|
|
5596
5602
|
SENSITIVE: []
|
|
5597
5603
|
end
|
|
5598
5604
|
|
|
5605
|
+
class FindingScopes
|
|
5606
|
+
attr_accessor aws_organizations: ::Array[Types::AwsOrganizationScope]
|
|
5607
|
+
SENSITIVE: []
|
|
5608
|
+
end
|
|
5609
|
+
|
|
5599
5610
|
class FindingsTrendsCompositeFilter
|
|
5600
5611
|
attr_accessor string_filters: ::Array[Types::FindingsTrendsStringFilter]
|
|
5601
5612
|
attr_accessor nested_composite_filters: ::Array[Types::FindingsTrendsCompositeFilter]
|
|
@@ -5787,6 +5798,7 @@ module Aws::SecurityHub
|
|
|
5787
5798
|
|
|
5788
5799
|
class GetFindingStatisticsV2Request
|
|
5789
5800
|
attr_accessor group_by_rules: ::Array[Types::GroupByRule]
|
|
5801
|
+
attr_accessor scopes: Types::FindingScopes
|
|
5790
5802
|
attr_accessor sort_order: ("asc" | "desc")
|
|
5791
5803
|
attr_accessor max_statistic_results: ::Integer
|
|
5792
5804
|
SENSITIVE: []
|
|
@@ -5829,6 +5841,7 @@ module Aws::SecurityHub
|
|
|
5829
5841
|
|
|
5830
5842
|
class GetFindingsV2Request
|
|
5831
5843
|
attr_accessor filters: Types::OcsfFindingFilters
|
|
5844
|
+
attr_accessor scopes: Types::FindingScopes
|
|
5832
5845
|
attr_accessor sort_criteria: ::Array[Types::SortCriterion]
|
|
5833
5846
|
attr_accessor next_token: ::String
|
|
5834
5847
|
attr_accessor max_results: ::Integer
|
|
@@ -5893,6 +5906,7 @@ module Aws::SecurityHub
|
|
|
5893
5906
|
|
|
5894
5907
|
class GetResourcesStatisticsV2Request
|
|
5895
5908
|
attr_accessor group_by_rules: ::Array[Types::ResourceGroupByRule]
|
|
5909
|
+
attr_accessor scopes: Types::ResourceScopes
|
|
5896
5910
|
attr_accessor sort_order: ("asc" | "desc")
|
|
5897
5911
|
attr_accessor max_statistic_results: ::Integer
|
|
5898
5912
|
SENSITIVE: []
|
|
@@ -5921,6 +5935,7 @@ module Aws::SecurityHub
|
|
|
5921
5935
|
|
|
5922
5936
|
class GetResourcesV2Request
|
|
5923
5937
|
attr_accessor filters: Types::ResourcesFilters
|
|
5938
|
+
attr_accessor scopes: Types::ResourceScopes
|
|
5924
5939
|
attr_accessor sort_criteria: ::Array[Types::SortCriterion]
|
|
5925
5940
|
attr_accessor next_token: ::String
|
|
5926
5941
|
attr_accessor max_results: ::Integer
|
|
@@ -6487,6 +6502,18 @@ module Aws::SecurityHub
|
|
|
6487
6502
|
SENSITIVE: []
|
|
6488
6503
|
end
|
|
6489
6504
|
|
|
6505
|
+
class OrganizationNotFoundException
|
|
6506
|
+
attr_accessor message: ::String
|
|
6507
|
+
attr_accessor code: ::String
|
|
6508
|
+
SENSITIVE: []
|
|
6509
|
+
end
|
|
6510
|
+
|
|
6511
|
+
class OrganizationalUnitNotFoundException
|
|
6512
|
+
attr_accessor message: ::String
|
|
6513
|
+
attr_accessor code: ::String
|
|
6514
|
+
SENSITIVE: []
|
|
6515
|
+
end
|
|
6516
|
+
|
|
6490
6517
|
class Page
|
|
6491
6518
|
attr_accessor page_number: ::Integer
|
|
6492
6519
|
attr_accessor line_range: Types::Range
|
|
@@ -6885,6 +6912,11 @@ module Aws::SecurityHub
|
|
|
6885
6912
|
SENSITIVE: []
|
|
6886
6913
|
end
|
|
6887
6914
|
|
|
6915
|
+
class ResourceScopes
|
|
6916
|
+
attr_accessor aws_organizations: ::Array[Types::AwsOrganizationScope]
|
|
6917
|
+
SENSITIVE: []
|
|
6918
|
+
end
|
|
6919
|
+
|
|
6888
6920
|
class ResourceSeverityBreakdown
|
|
6889
6921
|
attr_accessor other: ::Integer
|
|
6890
6922
|
attr_accessor fatal: ::Integer
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: aws-sdk-securityhub
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.154.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Amazon Web Services
|
|
@@ -18,7 +18,7 @@ dependencies:
|
|
|
18
18
|
version: '3'
|
|
19
19
|
- - ">="
|
|
20
20
|
- !ruby/object:Gem::Version
|
|
21
|
-
version: 3.
|
|
21
|
+
version: 3.244.0
|
|
22
22
|
type: :runtime
|
|
23
23
|
prerelease: false
|
|
24
24
|
version_requirements: !ruby/object:Gem::Requirement
|
|
@@ -28,7 +28,7 @@ dependencies:
|
|
|
28
28
|
version: '3'
|
|
29
29
|
- - ">="
|
|
30
30
|
- !ruby/object:Gem::Version
|
|
31
|
-
version: 3.
|
|
31
|
+
version: 3.244.0
|
|
32
32
|
- !ruby/object:Gem::Dependency
|
|
33
33
|
name: aws-sigv4
|
|
34
34
|
requirement: !ruby/object:Gem::Requirement
|