aws-sdk-securityhub 1.160.0 → 1.162.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a174fc1dc33225a2b71d85d52eb89e92130541c68e353b3f71daf83a157dfd86
-  data.tar.gz: 0bb9da97a70bb8377449c8d2838a7d9d1556861afa8aa6281065c29167a8fdfa
+  metadata.gz: 7db3daf164d9acc922544a6f4532f49988e8017f24aafa6978fcb64f6ac7255c
+  data.tar.gz: f20348a3950609218236b7762e90cd972b6d98616c4d762e7ef1c9df58582f1c
 SHA512:
-  metadata.gz: '008da0d51e8344a1e039e6a71319c48652379a9dcca80f7079ec9b76fb46ad45eab7898ec23c3b39545c7accd22713fbf5b1a31c3c5e3eb7c4aef7b11282e48c'
-  data.tar.gz: cf068e0df7c76d90bcfc150e69db73fb9c858f2e44a84c95965801c9c77d5d2f142f97060b83b098f070a948f99fc0525baa793a6193178b6aeec0ca9c28c397
+  metadata.gz: 266cd996a99ab52093d475aefdac4d6a93d95b6838b458a333ad91f7b3133452543051ca51c46fecacf8ac980275b4c60363ad0d61159e8fcffc7c143a298a10
+  data.tar.gz: 7cfb56e0db0a403948246940731e5eefe74d05e91bee79b6abb6725efb2b21652dff2185fffaba1fdc9faadeba047fc909e7e35d183f34a7007b8febf841b43e

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.162.0 (2026-07-21)
+------------------
+
+* Feature - Security Hub standard and control multicloud API documentation updates
+
+1.161.0 (2026-07-14)
+------------------
+
+* Feature - AWS Security Hub now provides an AI inventory, giving central security teams a continuously updated, organization-wide view of AI assets and their security posture
+
 1.160.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.160.0
+1.162.0

data/lib/aws-sdk-securityhub/client.rb

@@ -675,7 +675,9 @@ module Aws::SecurityHub
     #   {
     #     standards_subscriptions: [
     #       {
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:eu-central-1::standards/pci-dss/v/3.2.1", 
+    #         standards_controls_updatable: "NOT_READY_FOR_UPDATES", 
     #         standards_input: {
     #         }, 
     #         standards_status: "DELETING", 
@@ -746,7 +748,9 @@ module Aws::SecurityHub
     #   {
     #     standards_subscriptions: [
     #       {
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1", 
+    #         standards_controls_updatable: "NOT_READY_FOR_UPDATES", 
     #         standards_input: {
     #         }, 
     #         standards_status: "PENDING", 
@@ -1232,6 +1236,7 @@ module Aws::SecurityHub
     #             value_type: "DEFAULT", 
     #           }, 
     #         }, 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/ACM.1/remediation", 
     #         security_control_arn: "arn:aws:securityhub:us-west-2:123456789012:security-control/ACM.1", 
     #         security_control_id: "ACM.1", 
@@ -1251,6 +1256,7 @@ module Aws::SecurityHub
     #             value_type: "CUSTOM", 
     #           }, 
     #         }, 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/APIGateway.1/remediation", 
     #         security_control_arn: "arn:aws:securityhub:us-west-2:123456789012:security-control/APIGateway.1", 
     #         security_control_id: "APIGateway.1", 
@@ -3260,11 +3266,10 @@ module Aws::SecurityHub
       req.send_request(options)
     end
 
-    # Creates a cloud service provider management (CSPM) connector in
-    # Security Hub CSPM. A connector establishes a connection between
-    # Security Hub CSPM and a third-party cloud provider, enabling Security
-    # Hub CSPM to ingest security findings and resource data from the
-    # connected environment.
+    # Creates a connector to a third-party cloud provider in Security Hub
+    # CSPM. A connector establishes a connection between Security Hub CSPM
+    # and a third-party cloud provider, enabling Security Hub CSPM to ingest
+    # security findings and resource data from the connected environment.
     #
     # @option params [required, String] :name
     #   The name of the connector. Must be unique within the account.
@@ -5372,25 +5377,83 @@ module Aws::SecurityHub
     #         description: "The AWS Foundational Security Best Practices standard is a set of automated security checks that detect when AWS accounts and deployed resources do not align to security best practices. The standard is defined by AWS security experts. This curated set of controls helps improve your security posture in AWS, and cover AWS's most popular and foundational services.", 
     #         enabled_by_default: true, 
     #         name: "AWS Foundational Security Best Practices v1.0.0", 
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::standards/aws-foundational-security-best-practices/v/1.0.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
     #       }, 
     #       {
     #         description: "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.", 
     #         enabled_by_default: true, 
     #         name: "CIS AWS Foundations Benchmark v1.2.0", 
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::ruleset/cis-aws-foundations-benchmark/v/1.2.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
     #       }, 
     #       {
     #         description: "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.4.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.", 
     #         enabled_by_default: false, 
     #         name: "CIS AWS Foundations Benchmark v1.4.0", 
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws::securityhub:us-west-1::standards/cis-aws-foundations-benchmark/v/1.4.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
     #       }, 
     #       {
     #         description: "The Payment Card Industry Data Security Standard (PCI DSS) v3.2.1 is an information security standard for entities that store, process, and/or transmit cardholder data. This Security Hub standard automatically checks for your compliance readiness against a subset of PCI DSS requirements.", 
     #         enabled_by_default: false, 
     #         name: "PCI DSS v3.2.1", 
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
+    #       }, 
+    #       {
+    #         description: "The Center for Internet Security (CIS) Microsoft Azure Foundations Benchmark v4.0.0 is a set of security configuration best practices for Azure. This Security Hub standard automatically checks your compliance readiness against a subset of CIS requirements.", 
+    #         enabled_by_default: false, 
+    #         name: "CIS Azure Foundations Benchmark v4.0.0", 
+    #         provider: "Azure", 
+    #         standards_arn: "arn:aws:securityhub:us-west-1::standards/cis-azure-foundations-benchmark/v/4.0.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Example: To get available Azure security standards
+    #
+    #   # The following example returns a list of available security standards from a specified provider.
+    #
+    #   resp = client.describe_standards({
+    #     providers: [
+    #       "Azure", 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     standards: [
+    #       {
+    #         description: "The Center for Internet Security (CIS) Microsoft Azure Foundations Benchmark v4.0.0 is a set of security configuration best practices for Azure. This Security Hub standard automatically checks your compliance readiness against a subset of CIS requirements.", 
+    #         enabled_by_default: false, 
+    #         name: "CIS Azure Foundations Benchmark v4.0.0", 
+    #         provider: "Azure", 
+    #         standards_arn: "arn:aws:securityhub:us-west-1::standards/cis-azure-foundations-benchmark/v/4.0.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
     #       }, 
     #     ], 
     #   }
@@ -6599,6 +6662,7 @@ module Aws::SecurityHub
     #   {
     #     standards_subscriptions: [
     #       {
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1", 
     #         standards_input: {
     #         }, 
@@ -8920,6 +8984,12 @@ module Aws::SecurityHub
     # organizational units. Only the delegated administrator account can use
     # `Scopes`.
     #
+    # If you set `GroupByField` to `ResourceSubCategory`,
+    # `ResourceInfo.AIDetails.HostResourceType`, or
+    # `ResourceInfo.AIDetails.CanonicalId`, you must include a
+    # `ResourceCategory` string filter with comparison set to `EQUALS` and
+    # value `AI/ML` in the corresponding `ResourceGroupByRule`.
+    #
     # @option params [required, Array<Types::ResourceGroupByRule>] :group_by_rules
     #   How resource statistics should be aggregated and organized in the
     #   response.
@@ -8954,13 +9024,13 @@ module Aws::SecurityHub
     #   resp = client.get_resources_statistics_v2({
     #     group_by_rules: [ # required
     #       {
-    #         group_by_field: "AccountId", # required, accepts AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType
+    #         group_by_field: "AccountId", # required, accepts AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, ResourceSubCategory, DiscoveryType, ResourceInfo.AIDetails.HostResourceType, ResourceInfo.AIDetails.CanonicalId
     #         filters: {
     #           composite_filters: [
     #             {
     #               string_filters: [
     #                 {
-    #                   field_name: "ResourceGuid", # accepts ResourceGuid, ResourceId, AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, FindingsSummary.ProductName
+    #                   field_name: "ResourceGuid", # accepts ResourceGuid, ResourceId, AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, FindingsSummary.ProductName, ResourceSubCategory, DiscoveryType, ResourceInfo.AIDetails.HostResourceGuid, ResourceInfo.AIDetails.HostResourceType, ResourceInfo.AIDetails.CanonicalId
     #                   filter: {
     #                     value: "NonEmptyString",
     #                     comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS, CONTAINS, NOT_CONTAINS, CONTAINS_WORD
@@ -8983,7 +9053,7 @@ module Aws::SecurityHub
     #               ],
     #               number_filters: [
     #                 {
-    #                   field_name: "FindingsSummary.TotalFindings", # accepts FindingsSummary.TotalFindings, FindingsSummary.Severities.Other, FindingsSummary.Severities.Fatal, FindingsSummary.Severities.Critical, FindingsSummary.Severities.High, FindingsSummary.Severities.Medium, FindingsSummary.Severities.Low, FindingsSummary.Severities.Informational, FindingsSummary.Severities.Unknown
+    #                   field_name: "FindingsSummary.TotalFindings", # accepts FindingsSummary.TotalFindings, FindingsSummary.Severities.Other, FindingsSummary.Severities.Fatal, FindingsSummary.Severities.Critical, FindingsSummary.Severities.High, FindingsSummary.Severities.Medium, FindingsSummary.Severities.Low, FindingsSummary.Severities.Informational, FindingsSummary.Severities.Unknown, ResourceInfo.AIDetails.SelfHostedAIModelResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount, ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount, ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount, ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount, ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount
     #                   filter: {
     #                     gte: 1.0,
     #                     lte: 1.0,
@@ -9132,6 +9202,18 @@ module Aws::SecurityHub
     # or together. When both are provided, `Scopes` narrows the data set
     # first, and then `Filters` refines results within that scoped data set.
     #
+    # For AI/ML resources, the response includes the `ResourceSubCategory`
+    # field. For self-hosted AI resources and their host resources, the
+    # response also includes `ResourceInfo` with AI-specific details.
+    # Self-hosted AI resources use a `ResourceType` with the
+    # `SelfHosted::AI::` prefix, such as `SelfHosted::AI::Model`,
+    # `SelfHosted::AI::Agent`, `SelfHosted::AI::InferenceEndpoint`, and
+    # `SelfHosted::AI::ExternalEndpoint`.
+    #
+    # If you filter by `ResourceSubCategory`, you must also include a
+    # `ResourceCategory` string filter with comparison set to `EQUALS` and
+    # value `AI/ML` in the same request.
+    #
     # @option params [Types::ResourcesFilters] :filters
     #   Filters resources based on a set of criteria.
     #
@@ -9176,7 +9258,7 @@ module Aws::SecurityHub
     #         {
     #           string_filters: [
     #             {
-    #               field_name: "ResourceGuid", # accepts ResourceGuid, ResourceId, AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, FindingsSummary.ProductName
+    #               field_name: "ResourceGuid", # accepts ResourceGuid, ResourceId, AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, FindingsSummary.ProductName, ResourceSubCategory, DiscoveryType, ResourceInfo.AIDetails.HostResourceGuid, ResourceInfo.AIDetails.HostResourceType, ResourceInfo.AIDetails.CanonicalId
     #               filter: {
     #                 value: "NonEmptyString",
     #                 comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS, CONTAINS, NOT_CONTAINS, CONTAINS_WORD
@@ -9199,7 +9281,7 @@ module Aws::SecurityHub
     #           ],
     #           number_filters: [
     #             {
-    #               field_name: "FindingsSummary.TotalFindings", # accepts FindingsSummary.TotalFindings, FindingsSummary.Severities.Other, FindingsSummary.Severities.Fatal, FindingsSummary.Severities.Critical, FindingsSummary.Severities.High, FindingsSummary.Severities.Medium, FindingsSummary.Severities.Low, FindingsSummary.Severities.Informational, FindingsSummary.Severities.Unknown
+    #               field_name: "FindingsSummary.TotalFindings", # accepts FindingsSummary.TotalFindings, FindingsSummary.Severities.Other, FindingsSummary.Severities.Fatal, FindingsSummary.Severities.Critical, FindingsSummary.Severities.High, FindingsSummary.Severities.Medium, FindingsSummary.Severities.Low, FindingsSummary.Severities.Informational, FindingsSummary.Severities.Unknown, ResourceInfo.AIDetails.SelfHostedAIModelResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount, ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount, ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount, ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount, ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount
     #               filter: {
     #                 gte: 1.0,
     #                 lte: 1.0,
@@ -9278,6 +9360,19 @@ module Aws::SecurityHub
     #   resp.resources[0].resource_tags #=> Array
     #   resp.resources[0].resource_tags[0].key #=> String
     #   resp.resources[0].resource_tags[0].value #=> String
+    #   resp.resources[0].resource_sub_category #=> String, one of "Model", "ModelServing", "Agent", "AgentFramework", "AgentToolsAndIdentity", "SafetyAndGuardrail", "KnowledgeAndData", "OrchestrationAndPipeline", "ExternalEndpoint", "Development", "Other"
+    #   resp.resources[0].discovery_type #=> String, one of "Managed", "SelfHosted"
+    #   resp.resources[0].resource_info.ai_details.host_resource_guid #=> String
+    #   resp.resources[0].resource_info.ai_details.host_resource_type #=> String
+    #   resp.resources[0].resource_info.ai_details.canonical_id #=> String
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_model_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_agent_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_model_serving_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_external_endpoint_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_development_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_agent_framework_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_agent_tools_and_identity_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_total_ai_resource_count #=> Integer
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetResourcesV2 AWS API Documentation
@@ -9327,6 +9422,7 @@ module Aws::SecurityHub
     #           description: "Number of days the EC2 instance is allowed to be in a stopped state before generating a failed finding", 
     #         }, 
     #       }, 
+    #       provider: "AWS", 
     #       remediation_url: "https://docs.aws.amazon.com/console/securityhub/EC2.4/remediation", 
     #       security_control_id: "EC2.4", 
     #       severity_rating: "MEDIUM", 
@@ -10395,6 +10491,7 @@ module Aws::SecurityHub
     #           "Parameters", 
     #         ], 
     #         description: "This AWS control checks whether ACM Certificates in your account are marked for expiration within a specified time period. Certificates provided by ACM are automatically renewed. ACM does not automatically renew certificates that you import.", 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/ACM.1/remediation", 
     #         security_control_id: "ACM.1", 
     #         severity_rating: "MEDIUM", 
@@ -10406,6 +10503,7 @@ module Aws::SecurityHub
     #           "Parameters", 
     #         ], 
     #         description: "This control checks whether all stages of Amazon API Gateway REST and WebSocket APIs have logging enabled. The control fails if logging is not enabled for all methods of a stage or if loggingLevel is neither ERROR nor INFO.", 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/APIGateway.1/remediation", 
     #         security_control_id: "APIGateway.1", 
     #         severity_rating: "MEDIUM", 
@@ -10414,11 +10512,74 @@ module Aws::SecurityHub
     #       {
     #         current_region_availability: "AVAILABLE", 
     #         description: "This control checks whether Amazon API Gateway REST API stages have SSL certificates configured that backend systems can use to authenticate that incoming requests are from the API Gateway.", 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/APIGateway.2/remediation", 
     #         security_control_id: "APIGateway.2", 
     #         severity_rating: "MEDIUM", 
     #         title: "API Gateway REST API stages should be configured to use SSL certificates for backend authentication", 
     #       }, 
+    #       {
+    #         current_region_availability: "AVAILABLE", 
+    #         customizable_properties: [
+    #         ], 
+    #         description: "This control checks whether Azure Container Apps have managed identity enabled. The control fails if the Container App has a system-assigned or user-assigned managed identity enabled.", 
+    #         provider: "Azure", 
+    #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/Azure.App.1/remediation", 
+    #         security_control_id: "Azure.App.1", 
+    #         severity_rating: "MEDIUM", 
+    #         title: "Azure Container Apps with managed identity enabled should follow least privilege", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Example: To list Azure security control definitions
+    #
+    #   # The following example lists security control definitions for a specified provider.
+    #
+    #   resp = client.list_security_control_definitions({
+    #     max_results: 3, 
+    #     providers: [
+    #       "Azure", 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     next_token: "U2FsdGVkX1...", 
+    #     security_control_definitions: [
+    #       {
+    #         current_region_availability: "AVAILABLE", 
+    #         customizable_properties: [
+    #         ], 
+    #         description: "This control checks whether Azure Container Apps have managed identity enabled. The control fails if the Container App has a system-assigned or user-assigned managed identity enabled.", 
+    #         provider: "Azure", 
+    #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/Azure.App.1/remediation", 
+    #         security_control_id: "Azure.App.1", 
+    #         severity_rating: "MEDIUM", 
+    #         title: "Azure Container Apps with managed identity enabled should follow least privilege", 
+    #       }, 
+    #       {
+    #         current_region_availability: "AVAILABLE", 
+    #         customizable_properties: [
+    #         ], 
+    #         description: "This control checks whether an Azure Container App passes Azure SDK credentials as plain-text container environment variables. The control fails if any container (including initContainers) defines AZURE_CLIENT_SECRET, AZURE_CLIENT_CERTIFICATE_PASSWORD, or AZURE_PASSWORD as a plain-text environment variable instead of referencing a secret via secretRef.", 
+    #         provider: "Azure", 
+    #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/Azure.App.2/remediation", 
+    #         security_control_id: "Azure.App.2", 
+    #         severity_rating: "CRITICAL", 
+    #         title: "Azure Container Apps should not pass Azure SDK credentials as environment variables", 
+    #       }, 
+    #       {
+    #         current_region_availability: "AVAILABLE", 
+    #         customizable_properties: [
+    #         ], 
+    #         description: "This control checks whether Azure Container Apps have external ingress configured. The control fails if the Container App ingress is set to accept traffic from anywhere (external).", 
+    #         provider: "Azure", 
+    #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/Azure.App.3/remediation", 
+    #         security_control_id: "Azure.App.3", 
+    #         severity_rating: "HIGH", 
+    #         title: "Azure Container Apps should not have external ingress enabled", 
+    #       }, 
     #     ], 
     #   }
     #
@@ -13386,7 +13547,7 @@ module Aws::SecurityHub
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityhub'
-      context[:gem_version] = '1.160.0'
+      context[:gem_version] = '1.162.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityhub/client_api.rb

@@ -14,6 +14,7 @@ module Aws::SecurityHub
 
     include Seahorse::Model
 
+    AIDetails = Shapes::StructureShape.new(name: 'AIDetails')
     AcceptAdministratorInvitationRequest = Shapes::StructureShape.new(name: 'AcceptAdministratorInvitationRequest')
     AcceptAdministratorInvitationResponse = Shapes::StructureShape.new(name: 'AcceptAdministratorInvitationResponse')
     AcceptInvitationRequest = Shapes::StructureShape.new(name: 'AcceptInvitationRequest')
@@ -907,6 +908,7 @@ module Aws::SecurityHub
     DisassociateFromMasterAccountResponse = Shapes::StructureShape.new(name: 'DisassociateFromMasterAccountResponse')
     DisassociateMembersRequest = Shapes::StructureShape.new(name: 'DisassociateMembersRequest')
     DisassociateMembersResponse = Shapes::StructureShape.new(name: 'DisassociateMembersResponse')
+    DiscoveryType = Shapes::StringShape.new(name: 'DiscoveryType')
     DnsRequestAction = Shapes::StructureShape.new(name: 'DnsRequestAction')
     Double = Shapes::FloatShape.new(name: 'Double')
     DoubleConfigurationOptions = Shapes::StructureShape.new(name: 'DoubleConfigurationOptions')
@@ -1212,6 +1214,7 @@ module Aws::SecurityHub
     ResourceGroupByRule = Shapes::StructureShape.new(name: 'ResourceGroupByRule')
     ResourceGroupByRules = Shapes::ListShape.new(name: 'ResourceGroupByRules')
     ResourceInUseException = Shapes::StructureShape.new(name: 'ResourceInUseException')
+    ResourceInfo = Shapes::StructureShape.new(name: 'ResourceInfo')
     ResourceList = Shapes::ListShape.new(name: 'ResourceList')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     ResourceOwner = Shapes::StructureShape.new(name: 'ResourceOwner')
@@ -1220,6 +1223,7 @@ module Aws::SecurityHub
     ResourceResult = Shapes::StructureShape.new(name: 'ResourceResult')
     ResourceScopes = Shapes::StructureShape.new(name: 'ResourceScopes')
     ResourceSeverityBreakdown = Shapes::StructureShape.new(name: 'ResourceSeverityBreakdown')
+    ResourceSubCategory = Shapes::StringShape.new(name: 'ResourceSubCategory')
     ResourceTag = Shapes::StructureShape.new(name: 'ResourceTag')
     ResourceTagList = Shapes::ListShape.new(name: 'ResourceTagList')
     Resources = Shapes::ListShape.new(name: 'Resources')
@@ -1458,6 +1462,19 @@ module Aws::SecurityHub
     WorkflowStatus = Shapes::StringShape.new(name: 'WorkflowStatus')
     WorkflowUpdate = Shapes::StructureShape.new(name: 'WorkflowUpdate')
 
+    AIDetails.add_member(:host_resource_guid, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "HostResourceGuid"))
+    AIDetails.add_member(:host_resource_type, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "HostResourceType"))
+    AIDetails.add_member(:canonical_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CanonicalId"))
+    AIDetails.add_member(:self_hosted_ai_model_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIModelResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_agent_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIAgentResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_model_serving_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIModelServingResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_external_endpoint_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIExternalEndpointResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_development_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIDevelopmentResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_agent_framework_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIAgentFrameworkResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_agent_tools_and_identity_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIAgentToolsAndIdentityResourceCount"))
+    AIDetails.add_member(:self_hosted_total_ai_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedTotalAIResourceCount"))
+    AIDetails.struct_class = Types::AIDetails
+
     AcceptAdministratorInvitationRequest.add_member(:administrator_id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "AdministratorId"))
     AcceptAdministratorInvitationRequest.add_member(:invitation_id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "InvitationId"))
     AcceptAdministratorInvitationRequest.struct_class = Types::AcceptAdministratorInvitationRequest
@@ -7321,6 +7338,9 @@ module Aws::SecurityHub
     ResourceInUseException.add_member(:code, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Code"))
     ResourceInUseException.struct_class = Types::ResourceInUseException
 
+    ResourceInfo.add_member(:ai_details, Shapes::ShapeRef.new(shape: AIDetails, location_name: "AIDetails"))
+    ResourceInfo.struct_class = Types::ResourceInfo
+
     ResourceList.member = Shapes::ShapeRef.new(shape: Resource)
 
     ResourceNotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Message"))
@@ -7355,6 +7375,9 @@ module Aws::SecurityHub
     ResourceResult.add_member(:findings_summary, Shapes::ShapeRef.new(shape: ResourceFindingsSummaryList, location_name: "FindingsSummary"))
     ResourceResult.add_member(:resource_tags, Shapes::ShapeRef.new(shape: ResourceTagList, location_name: "ResourceTags"))
     ResourceResult.add_member(:resource_config, Shapes::ShapeRef.new(shape: ResourceConfig, required: true, location_name: "ResourceConfig"))
+    ResourceResult.add_member(:resource_sub_category, Shapes::ShapeRef.new(shape: ResourceSubCategory, location_name: "ResourceSubCategory"))
+    ResourceResult.add_member(:discovery_type, Shapes::ShapeRef.new(shape: DiscoveryType, location_name: "DiscoveryType"))
+    ResourceResult.add_member(:resource_info, Shapes::ShapeRef.new(shape: ResourceInfo, location_name: "ResourceInfo"))
     ResourceResult.struct_class = Types::ResourceResult
 
     ResourceScopes.add_member(:aws_organizations, Shapes::ShapeRef.new(shape: AwsOrganizationScopeList, location_name: "AwsOrganizations"))

data/lib/aws-sdk-securityhub/types.rb

@@ -10,6 +10,107 @@
 module Aws::SecurityHub
   module Types
 
+    # Contains information about self-hosted AI resources and their host
+    # resources. The fields that are present depend on the role of the
+    # resource.
+    #
+    # On a self-hosted AI resource (a resource with a `SelfHosted::AI::`
+    # resource type, such as `SelfHosted::AI::Model` or
+    # `SelfHosted::AI::Agent`), the `HostResourceGuid` and
+    # `HostResourceType` fields link the resource to its host. The
+    # `CanonicalId` field identifies what the resource is, enabling
+    # aggregation of identical resources across multiple hosts.
+    #
+    # On a host resource (such as an Amazon EC2 instance), the
+    # `SelfHostedAI*ResourceCount` fields contain the count for each
+    # `ResourceSubCategory` and the total count of self-hosted AI resources
+    # detected on the host.
+    #
+    # @!attribute [rw] host_resource_guid
+    #   The identifier of the host resource that hosts the self-hosted AI
+    #   resource. Present only on self-hosted AI resources.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_resource_type
+    #   The `ResourceType` of the host resource that hosts the self-hosted
+    #   AI resource, such as `AWS::EC2::Instance`. Present only on
+    #   self-hosted AI resources.
+    #   @return [String]
+    #
+    # @!attribute [rw] canonical_id
+    #   The canonical identifier for the AI resource, independent of where
+    #   it is deployed. Multiple occurrences of the same resource on
+    #   different hosts share the same `CanonicalId`. For model resources,
+    #   the value follows the format `model/<purl>`, such as
+    #   `model/pkg:huggingface/meta-llama/llama-3-8b`. Present only on
+    #   self-hosted AI resources.
+    #   @return [String]
+    #
+    # @!attribute [rw] self_hosted_ai_model_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `Model` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_agent_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `Agent` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_model_serving_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `ModelServing` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_external_endpoint_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `ExternalEndpoint` detected on the host resource. Present only on
+    #   host resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_development_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `Development` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_agent_framework_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `AgentFramework` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_agent_tools_and_identity_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `AgentToolsAndIdentity` detected on the host resource. Present only
+    #   on host resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_total_ai_resource_count
+    #   The total number of all self-hosted AI resources detected on the
+    #   host resource. Present only on host resources.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AIDetails AWS API Documentation
+    #
+    class AIDetails < Struct.new(
+      :host_resource_guid,
+      :host_resource_type,
+      :canonical_id,
+      :self_hosted_ai_model_resource_count,
+      :self_hosted_ai_agent_resource_count,
+      :self_hosted_ai_model_serving_resource_count,
+      :self_hosted_ai_external_endpoint_resource_count,
+      :self_hosted_ai_development_resource_count,
+      :self_hosted_ai_agent_framework_resource_count,
+      :self_hosted_ai_agent_tools_and_identity_resource_count,
+      :self_hosted_total_ai_resource_count)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] administrator_id
     #   The account ID of the Security Hub CSPM administrator account that
     #   sent the invitation.
@@ -21704,8 +21805,8 @@ module Aws::SecurityHub
     # The detailed Azure configuration for a connector.
     #
     # @!attribute [rw] aws_config_connector_arn
-    #   The ARN of the AWS Config connector used to establish the connection
-    #   to Azure.
+    #   The ARN of the multi-cloud configuration connector used to establish
+    #   the connection to Azure.
     #   @return [String]
     #
     # @!attribute [rw] scope_configuration
@@ -21730,8 +21831,8 @@ module Aws::SecurityHub
     # The configuration for connecting to an Azure environment.
     #
     # @!attribute [rw] aws_config_connector_arn
-    #   The ARN of the AWS Config connector used to establish the connection
-    #   to Azure.
+    #   The ARN of the multi-cloud configuration connector used to establish
+    #   the connection to Azure.
     #   @return [String]
     #
     # @!attribute [rw] scope_configuration
@@ -31033,6 +31134,23 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Additional details about a resource that are specific to its category.
+    # For AI/ML resources and their host resources, this structure contains
+    # `AIDetails`.
+    #
+    # @!attribute [rw] ai_details
+    #   Details that are specific to self-hosted AI resources and their host
+    #   resources.
+    #   @return [Types::AIDetails]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ResourceInfo AWS API Documentation
+    #
+    class ResourceInfo < Struct.new(
+      :ai_details)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The request was rejected because we can't find the specified
     # resource.
     #
@@ -31194,6 +31312,25 @@ module Aws::SecurityHub
     #   The configuration details of a resource.
     #   @return [Hash,Array,String,Numeric,Boolean]
     #
+    # @!attribute [rw] resource_sub_category
+    #   The AI/ML sub-grouping of the resource. Present only when
+    #   `ResourceCategory` is `AI/ML`.
+    #   @return [String]
+    #
+    # @!attribute [rw] discovery_type
+    #   Specifies how the resource was discovered. If the value is
+    #   `Managed`, the resource is natively provided by a cloud service
+    #   provider. If the value is `SelfHosted`, the resource is hosted on
+    #   customer-managed infrastructure, such as a compute instance or
+    #   container image.
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_info
+    #   Additional resource-type-specific details. For self-hosted AI
+    #   resources and their host resources, contains an `AIDetails`
+    #   structure.
+    #   @return [Types::ResourceInfo]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ResourceResult AWS API Documentation
     #
     class ResourceResult < Struct.new(
@@ -31214,7 +31351,10 @@ module Aws::SecurityHub
       :resource_detail_capture_time_dt,
       :findings_summary,
       :resource_tags,
-      :resource_config)
+      :resource_config,
+      :resource_sub_category,
+      :discovery_type,
+      :resource_info)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-securityhub.rb

@@ -54,7 +54,7 @@ module Aws::SecurityHub
   autoload :EndpointProvider, 'aws-sdk-securityhub/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityhub/endpoints'
 
-  GEM_VERSION = '1.160.0'
+  GEM_VERSION = '1.162.0'
 
 end
 

data/sig/client.rbs

@@ -4962,7 +4962,7 @@ module Aws
       def get_resources_statistics_v2: (
                                          group_by_rules: Array[
                                            {
-                                             group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType"),
+                                             group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId"),
                                              filters: Params::resources_filters?
                                            }
                                          ],

data/sig/params.rbs

@@ -1392,7 +1392,7 @@ module Aws
       type resources_composite_filter = {
       string_filters: Array[
         {
-          field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName")?,
+          field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")?,
           filter: {
             value: ::String?,
             comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -1412,7 +1412,7 @@ module Aws
         {
           string_filters: Array[
             {
-              field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName")?,
+              field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")?,
               filter: {
                 value: ::String?,
                 comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -1441,7 +1441,7 @@ module Aws
     }
 
       type resources_number_filter = {
-      field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown")?,
+      field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown" | "ResourceInfo.AIDetails.SelfHostedAIModelResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount" | "ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount")?,
       filter: {
         gte: ::Float?,
         lte: ::Float?,

data/sig/types.rbs

@@ -8,6 +8,21 @@
 module Aws::SecurityHub
   module Types
 
+    class AIDetails
+      attr_accessor host_resource_guid: ::String
+      attr_accessor host_resource_type: ::String
+      attr_accessor canonical_id: ::String
+      attr_accessor self_hosted_ai_model_resource_count: ::Integer
+      attr_accessor self_hosted_ai_agent_resource_count: ::Integer
+      attr_accessor self_hosted_ai_model_serving_resource_count: ::Integer
+      attr_accessor self_hosted_ai_external_endpoint_resource_count: ::Integer
+      attr_accessor self_hosted_ai_development_resource_count: ::Integer
+      attr_accessor self_hosted_ai_agent_framework_resource_count: ::Integer
+      attr_accessor self_hosted_ai_agent_tools_and_identity_resource_count: ::Integer
+      attr_accessor self_hosted_total_ai_resource_count: ::Integer
+      SENSITIVE: []
+    end
+
     class AcceptAdministratorInvitationRequest
       attr_accessor administrator_id: ::String
       attr_accessor invitation_id: ::String
@@ -7129,7 +7144,7 @@ module Aws::SecurityHub
     end
 
     class ResourceGroupByRule
-      attr_accessor group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType")
+      attr_accessor group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")
       attr_accessor filters: Types::ResourcesFilters
       SENSITIVE: []
     end
@@ -7140,6 +7155,11 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class ResourceInfo
+      attr_accessor ai_details: Types::AIDetails
+      SENSITIVE: []
+    end
+
     class ResourceNotFoundException
       attr_accessor message: ::String
       attr_accessor code: ::String
@@ -7181,6 +7201,9 @@ module Aws::SecurityHub
       attr_accessor findings_summary: ::Array[Types::ResourceFindingsSummary]
       attr_accessor resource_tags: ::Array[Types::ResourceTag]
       attr_accessor resource_config: untyped
+      attr_accessor resource_sub_category: ("Model" | "ModelServing" | "Agent" | "AgentFramework" | "AgentToolsAndIdentity" | "SafetyAndGuardrail" | "KnowledgeAndData" | "OrchestrationAndPipeline" | "ExternalEndpoint" | "Development" | "Other")
+      attr_accessor discovery_type: ("Managed" | "SelfHosted")
+      attr_accessor resource_info: Types::ResourceInfo
       SENSITIVE: []
     end
 
@@ -7241,13 +7264,13 @@ module Aws::SecurityHub
     end
 
     class ResourcesNumberFilter
-      attr_accessor field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown")
+      attr_accessor field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown" | "ResourceInfo.AIDetails.SelfHostedAIModelResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount" | "ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount")
       attr_accessor filter: Types::NumberFilter
       SENSITIVE: []
     end
 
     class ResourcesStringFilter
-      attr_accessor field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName")
+      attr_accessor field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")
       attr_accessor filter: Types::StringFilter
       SENSITIVE: []
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityhub
 version: !ruby/object:Gem::Version
-  version: 1.160.0
+  version: 1.162.0
 platform: ruby
 authors:
 - Amazon Web Services