aws-sdk-securityhub 1.161.0 → 1.163.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 953e0f1e343b94e6c9b62c34d5c68ecf4312d76ec8f15fe2b059f0bbfab26d30
-  data.tar.gz: '02359b710ee00d1e47d59f92ec351fce92b139b1ce955031a395341070aa0b0b'
+  metadata.gz: be585dab38b6766a0e3f3c81ab74c1e010da1e46fa3943926790f21329b89570
+  data.tar.gz: 6dae5b1fe0b8005e6a578fa5020642755274da81be204e2461ab61b590e0cf0b
 SHA512:
-  metadata.gz: 70b2700e4d3935fed1a4ae515dc2b451d74b0e084df64a980e646ed1c0a626e4a0a115dbf0a211c5324fbc47c25581ce5499b0fe4992160124e78b3b66230c7a
-  data.tar.gz: d9245af4bb859244ab25953694fe2a1937f4a0ff7957549d68009ef42cc59e01e8bbf79831d4fbeb888ecfe4aaba235db5de1a326189c38fa705107301f755a2
+  metadata.gz: 891568035eb8c97bf8532bcc806fe47b344ab945db4f015543758651a59b2473c856af42fd833a75c98d1a8c6c26c8acc92f6e50ba36e3ea4cd9eeb13ab6dfd3
+  data.tar.gz: eb3c3de3241414ce13dc963467883d1ee12f2eab2a3b0d127b31f0217cace1f39dd82391c94998e9ef828ab6eb36fe00ea9e4329dea2136508bd5201d70d983a

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.163.0 (2026-08-06)
+------------------
+
+* Feature - Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features.
+
+1.162.0 (2026-07-21)
+------------------
+
+* Feature - Security Hub standard and control multicloud API documentation updates
+
 1.161.0 (2026-07-14)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.161.0
+1.163.0

data/lib/aws-sdk-securityhub/client.rb

@@ -675,7 +675,9 @@ module Aws::SecurityHub
     #   {
     #     standards_subscriptions: [
     #       {
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:eu-central-1::standards/pci-dss/v/3.2.1", 
+    #         standards_controls_updatable: "NOT_READY_FOR_UPDATES", 
     #         standards_input: {
     #         }, 
     #         standards_status: "DELETING", 
@@ -746,7 +748,9 @@ module Aws::SecurityHub
     #   {
     #     standards_subscriptions: [
     #       {
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1", 
+    #         standards_controls_updatable: "NOT_READY_FOR_UPDATES", 
     #         standards_input: {
     #         }, 
     #         standards_status: "PENDING", 
@@ -1232,6 +1236,7 @@ module Aws::SecurityHub
     #             value_type: "DEFAULT", 
     #           }, 
     #         }, 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/ACM.1/remediation", 
     #         security_control_arn: "arn:aws:securityhub:us-west-2:123456789012:security-control/ACM.1", 
     #         security_control_id: "ACM.1", 
@@ -1251,6 +1256,7 @@ module Aws::SecurityHub
     #             value_type: "CUSTOM", 
     #           }, 
     #         }, 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/APIGateway.1/remediation", 
     #         security_control_arn: "arn:aws:securityhub:us-west-2:123456789012:security-control/APIGateway.1", 
     #         security_control_id: "APIGateway.1", 
@@ -5371,25 +5377,83 @@ module Aws::SecurityHub
     #         description: "The AWS Foundational Security Best Practices standard is a set of automated security checks that detect when AWS accounts and deployed resources do not align to security best practices. The standard is defined by AWS security experts. This curated set of controls helps improve your security posture in AWS, and cover AWS's most popular and foundational services.", 
     #         enabled_by_default: true, 
     #         name: "AWS Foundational Security Best Practices v1.0.0", 
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::standards/aws-foundational-security-best-practices/v/1.0.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
     #       }, 
     #       {
     #         description: "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.", 
     #         enabled_by_default: true, 
     #         name: "CIS AWS Foundations Benchmark v1.2.0", 
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::ruleset/cis-aws-foundations-benchmark/v/1.2.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
     #       }, 
     #       {
     #         description: "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.4.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.", 
     #         enabled_by_default: false, 
     #         name: "CIS AWS Foundations Benchmark v1.4.0", 
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws::securityhub:us-west-1::standards/cis-aws-foundations-benchmark/v/1.4.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
     #       }, 
     #       {
     #         description: "The Payment Card Industry Data Security Standard (PCI DSS) v3.2.1 is an information security standard for entities that store, process, and/or transmit cardholder data. This Security Hub standard automatically checks for your compliance readiness against a subset of PCI DSS requirements.", 
     #         enabled_by_default: false, 
     #         name: "PCI DSS v3.2.1", 
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
+    #       }, 
+    #       {
+    #         description: "The Center for Internet Security (CIS) Microsoft Azure Foundations Benchmark v4.0.0 is a set of security configuration best practices for Azure. This Security Hub standard automatically checks your compliance readiness against a subset of CIS requirements.", 
+    #         enabled_by_default: false, 
+    #         name: "CIS Azure Foundations Benchmark v4.0.0", 
+    #         provider: "Azure", 
+    #         standards_arn: "arn:aws:securityhub:us-west-1::standards/cis-azure-foundations-benchmark/v/4.0.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Example: To get available Azure security standards
+    #
+    #   # The following example returns a list of available security standards from a specified provider.
+    #
+    #   resp = client.describe_standards({
+    #     providers: [
+    #       "Azure", 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     standards: [
+    #       {
+    #         description: "The Center for Internet Security (CIS) Microsoft Azure Foundations Benchmark v4.0.0 is a set of security configuration best practices for Azure. This Security Hub standard automatically checks your compliance readiness against a subset of CIS requirements.", 
+    #         enabled_by_default: false, 
+    #         name: "CIS Azure Foundations Benchmark v4.0.0", 
+    #         provider: "Azure", 
+    #         standards_arn: "arn:aws:securityhub:us-west-1::standards/cis-azure-foundations-benchmark/v/4.0.0", 
+    #         standards_managed_by: {
+    #           company: "AWS", 
+    #           product: "Security Hub", 
+    #         }, 
     #       }, 
     #     ], 
     #   }
@@ -6598,6 +6662,7 @@ module Aws::SecurityHub
     #   {
     #     standards_subscriptions: [
     #       {
+    #         provider: "AWS", 
     #         standards_arn: "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1", 
     #         standards_input: {
     #         }, 
@@ -9357,6 +9422,7 @@ module Aws::SecurityHub
     #           description: "Number of days the EC2 instance is allowed to be in a stopped state before generating a failed finding", 
     #         }, 
     #       }, 
+    #       provider: "AWS", 
     #       remediation_url: "https://docs.aws.amazon.com/console/securityhub/EC2.4/remediation", 
     #       security_control_id: "EC2.4", 
     #       severity_rating: "MEDIUM", 
@@ -10124,6 +10190,68 @@ module Aws::SecurityHub
       req.send_request(options)
     end
 
+    # Lists the free trial status of Security Hub features. A delegated
+    # Security Hub administrator can list the status for accounts in its
+    # organization. Any other account can list the status only for itself.
+    # Free trial status remains available after a feature is disabled.
+    #
+    # @option params [Array<String>] :account_ids
+    #   The Amazon Web Services account identifiers to list free trial status
+    #   for. You can specify accounts other than your own only if you are a
+    #   delegated Security Hub administrator.
+    #
+    # @option params [Array<String>] :statuses
+    #   The free trial statuses to filter the results by. Valid values:
+    #
+    #   * `ACTIVE` returns only features with an ongoing free trial period.
+    #
+    #   * `INACTIVE` returns only features whose free trial period has ended,
+    #     or that never started.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to return. If you don't specify a
+    #   value, Security Hub returns up to 100 results.
+    #
+    # @option params [String] :next_token
+    #   The pagination token to request the next page of results.
+    #
+    # @return [Types::ListFreeTrialStatusesV2Response] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListFreeTrialStatusesV2Response#account_free_trial_statuses #account_free_trial_statuses} => Array&lt;Types::AccountFreeTrialStatus&gt;
+    #   * {Types::ListFreeTrialStatusesV2Response#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_free_trial_statuses_v2({
+    #     account_ids: ["FreeTrialAccountId"],
+    #     statuses: ["ACTIVE"], # accepts ACTIVE, INACTIVE
+    #     max_results: 1,
+    #     next_token: "NextToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.account_free_trial_statuses #=> Array
+    #   resp.account_free_trial_statuses[0].account_id #=> String
+    #   resp.account_free_trial_statuses[0].evaluated_at #=> Time
+    #   resp.account_free_trial_statuses[0].free_trial_statuses #=> Array
+    #   resp.account_free_trial_statuses[0].free_trial_statuses[0].feature_type #=> String, one of "SECURITY_HUB_V2", "SECURITY_HUB_V2_MULTI_CLOUD_AZURE"
+    #   resp.account_free_trial_statuses[0].free_trial_statuses[0].status #=> String, one of "ACTIVE", "INACTIVE"
+    #   resp.account_free_trial_statuses[0].free_trial_statuses[0].started_at #=> Time
+    #   resp.account_free_trial_statuses[0].free_trial_statuses[0].expires_at #=> Time
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ListFreeTrialStatusesV2 AWS API Documentation
+    #
+    # @overload list_free_trial_statuses_v2(params = {})
+    # @param [Hash] params ({})
+    def list_free_trial_statuses_v2(params = {}, options = {})
+      req = build_request(:list_free_trial_statuses_v2, params)
+      req.send_request(options)
+    end
+
     # <note markdown="1"> We recommend using Organizations instead of Security Hub CSPM
     # invitations to manage your member accounts. For information, see
     # [Managing Security Hub CSPM administrator and member accounts with
@@ -10425,6 +10553,7 @@ module Aws::SecurityHub
     #           "Parameters", 
     #         ], 
     #         description: "This AWS control checks whether ACM Certificates in your account are marked for expiration within a specified time period. Certificates provided by ACM are automatically renewed. ACM does not automatically renew certificates that you import.", 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/ACM.1/remediation", 
     #         security_control_id: "ACM.1", 
     #         severity_rating: "MEDIUM", 
@@ -10436,6 +10565,7 @@ module Aws::SecurityHub
     #           "Parameters", 
     #         ], 
     #         description: "This control checks whether all stages of Amazon API Gateway REST and WebSocket APIs have logging enabled. The control fails if logging is not enabled for all methods of a stage or if loggingLevel is neither ERROR nor INFO.", 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/APIGateway.1/remediation", 
     #         security_control_id: "APIGateway.1", 
     #         severity_rating: "MEDIUM", 
@@ -10444,11 +10574,74 @@ module Aws::SecurityHub
     #       {
     #         current_region_availability: "AVAILABLE", 
     #         description: "This control checks whether Amazon API Gateway REST API stages have SSL certificates configured that backend systems can use to authenticate that incoming requests are from the API Gateway.", 
+    #         provider: "AWS", 
     #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/APIGateway.2/remediation", 
     #         security_control_id: "APIGateway.2", 
     #         severity_rating: "MEDIUM", 
     #         title: "API Gateway REST API stages should be configured to use SSL certificates for backend authentication", 
     #       }, 
+    #       {
+    #         current_region_availability: "AVAILABLE", 
+    #         customizable_properties: [
+    #         ], 
+    #         description: "This control checks whether Azure Container Apps have managed identity enabled. The control fails if the Container App has a system-assigned or user-assigned managed identity enabled.", 
+    #         provider: "Azure", 
+    #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/Azure.App.1/remediation", 
+    #         security_control_id: "Azure.App.1", 
+    #         severity_rating: "MEDIUM", 
+    #         title: "Azure Container Apps with managed identity enabled should follow least privilege", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Example: To list Azure security control definitions
+    #
+    #   # The following example lists security control definitions for a specified provider.
+    #
+    #   resp = client.list_security_control_definitions({
+    #     max_results: 3, 
+    #     providers: [
+    #       "Azure", 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     next_token: "U2FsdGVkX1...", 
+    #     security_control_definitions: [
+    #       {
+    #         current_region_availability: "AVAILABLE", 
+    #         customizable_properties: [
+    #         ], 
+    #         description: "This control checks whether Azure Container Apps have managed identity enabled. The control fails if the Container App has a system-assigned or user-assigned managed identity enabled.", 
+    #         provider: "Azure", 
+    #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/Azure.App.1/remediation", 
+    #         security_control_id: "Azure.App.1", 
+    #         severity_rating: "MEDIUM", 
+    #         title: "Azure Container Apps with managed identity enabled should follow least privilege", 
+    #       }, 
+    #       {
+    #         current_region_availability: "AVAILABLE", 
+    #         customizable_properties: [
+    #         ], 
+    #         description: "This control checks whether an Azure Container App passes Azure SDK credentials as plain-text container environment variables. The control fails if any container (including initContainers) defines AZURE_CLIENT_SECRET, AZURE_CLIENT_CERTIFICATE_PASSWORD, or AZURE_PASSWORD as a plain-text environment variable instead of referencing a secret via secretRef.", 
+    #         provider: "Azure", 
+    #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/Azure.App.2/remediation", 
+    #         security_control_id: "Azure.App.2", 
+    #         severity_rating: "CRITICAL", 
+    #         title: "Azure Container Apps should not pass Azure SDK credentials as environment variables", 
+    #       }, 
+    #       {
+    #         current_region_availability: "AVAILABLE", 
+    #         customizable_properties: [
+    #         ], 
+    #         description: "This control checks whether Azure Container Apps have external ingress configured. The control fails if the Container App ingress is set to accept traffic from anywhere (external).", 
+    #         provider: "Azure", 
+    #         remediation_url: "https://docs.aws.amazon.com/console/securityhub/Azure.App.3/remediation", 
+    #         security_control_id: "Azure.App.3", 
+    #         severity_rating: "HIGH", 
+    #         title: "Azure Container Apps should not have external ingress enabled", 
+    #       }, 
     #     ], 
     #   }
     #
@@ -13416,7 +13609,7 @@ module Aws::SecurityHub
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityhub'
-      context[:gem_version] = '1.161.0'
+      context[:gem_version] = '1.163.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityhub/client_api.rb

@@ -22,6 +22,8 @@ module Aws::SecurityHub
     AccessDeniedException = Shapes::StructureShape.new(name: 'AccessDeniedException')
     AccountDetails = Shapes::StructureShape.new(name: 'AccountDetails')
     AccountDetailsList = Shapes::ListShape.new(name: 'AccountDetailsList')
+    AccountFreeTrialStatus = Shapes::StructureShape.new(name: 'AccountFreeTrialStatus')
+    AccountFreeTrialStatusList = Shapes::ListShape.new(name: 'AccountFreeTrialStatusList')
     AccountId = Shapes::StringShape.new(name: 'AccountId')
     AccountIdList = Shapes::ListShape.new(name: 'AccountIdList')
     Action = Shapes::StructureShape.new(name: 'Action')
@@ -960,6 +962,13 @@ module Aws::SecurityHub
     FirewallPolicyStatelessCustomActionsList = Shapes::ListShape.new(name: 'FirewallPolicyStatelessCustomActionsList')
     FirewallPolicyStatelessRuleGroupReferencesDetails = Shapes::StructureShape.new(name: 'FirewallPolicyStatelessRuleGroupReferencesDetails')
     FirewallPolicyStatelessRuleGroupReferencesList = Shapes::ListShape.new(name: 'FirewallPolicyStatelessRuleGroupReferencesList')
+    FreeTrialAccountId = Shapes::StringShape.new(name: 'FreeTrialAccountId')
+    FreeTrialAccountIdList = Shapes::ListShape.new(name: 'FreeTrialAccountIdList')
+    FreeTrialStatus = Shapes::StructureShape.new(name: 'FreeTrialStatus')
+    FreeTrialStatusList = Shapes::ListShape.new(name: 'FreeTrialStatusList')
+    FreeTrialStatusValue = Shapes::StringShape.new(name: 'FreeTrialStatusValue')
+    FreeTrialStatusValueList = Shapes::ListShape.new(name: 'FreeTrialStatusValueList')
+    FreeTrialType = Shapes::StringShape.new(name: 'FreeTrialType')
     GenerateRecommendedPolicyV2Request = Shapes::StructureShape.new(name: 'GenerateRecommendedPolicyV2Request')
     GenerateRecommendedPolicyV2Response = Shapes::StructureShape.new(name: 'GenerateRecommendedPolicyV2Response')
     GeneratorDetails = Shapes::StructureShape.new(name: 'GeneratorDetails')
@@ -1080,6 +1089,8 @@ module Aws::SecurityHub
     ListEnabledProductsForImportResponse = Shapes::StructureShape.new(name: 'ListEnabledProductsForImportResponse')
     ListFindingAggregatorsRequest = Shapes::StructureShape.new(name: 'ListFindingAggregatorsRequest')
     ListFindingAggregatorsResponse = Shapes::StructureShape.new(name: 'ListFindingAggregatorsResponse')
+    ListFreeTrialStatusesV2Request = Shapes::StructureShape.new(name: 'ListFreeTrialStatusesV2Request')
+    ListFreeTrialStatusesV2Response = Shapes::StructureShape.new(name: 'ListFreeTrialStatusesV2Response')
     ListInvitationsRequest = Shapes::StructureShape.new(name: 'ListInvitationsRequest')
     ListInvitationsResponse = Shapes::StructureShape.new(name: 'ListInvitationsResponse')
     ListMembersRequest = Shapes::StructureShape.new(name: 'ListMembersRequest')
@@ -1497,6 +1508,13 @@ module Aws::SecurityHub
 
     AccountDetailsList.member = Shapes::ShapeRef.new(shape: AccountDetails)
 
+    AccountFreeTrialStatus.add_member(:account_id, Shapes::ShapeRef.new(shape: FreeTrialAccountId, required: true, location_name: "AccountId"))
+    AccountFreeTrialStatus.add_member(:evaluated_at, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "EvaluatedAt"))
+    AccountFreeTrialStatus.add_member(:free_trial_statuses, Shapes::ShapeRef.new(shape: FreeTrialStatusList, required: true, location_name: "FreeTrialStatuses"))
+    AccountFreeTrialStatus.struct_class = Types::AccountFreeTrialStatus
+
+    AccountFreeTrialStatusList.member = Shapes::ShapeRef.new(shape: AccountFreeTrialStatus)
+
     AccountIdList.member = Shapes::ShapeRef.new(shape: NonEmptyString)
 
     Action.add_member(:action_type, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ActionType"))
@@ -6272,6 +6290,18 @@ module Aws::SecurityHub
 
     FirewallPolicyStatelessRuleGroupReferencesList.member = Shapes::ShapeRef.new(shape: FirewallPolicyStatelessRuleGroupReferencesDetails)
 
+    FreeTrialAccountIdList.member = Shapes::ShapeRef.new(shape: FreeTrialAccountId)
+
+    FreeTrialStatus.add_member(:feature_type, Shapes::ShapeRef.new(shape: FreeTrialType, required: true, location_name: "FeatureType"))
+    FreeTrialStatus.add_member(:status, Shapes::ShapeRef.new(shape: FreeTrialStatusValue, required: true, location_name: "Status"))
+    FreeTrialStatus.add_member(:started_at, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "StartedAt"))
+    FreeTrialStatus.add_member(:expires_at, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "ExpiresAt"))
+    FreeTrialStatus.struct_class = Types::FreeTrialStatus
+
+    FreeTrialStatusList.member = Shapes::ShapeRef.new(shape: FreeTrialStatus)
+
+    FreeTrialStatusValueList.member = Shapes::ShapeRef.new(shape: FreeTrialStatusValue)
+
     GenerateRecommendedPolicyV2Request.add_member(:metadata_uid, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location: "uri", location_name: "MetadataUid"))
     GenerateRecommendedPolicyV2Request.struct_class = Types::GenerateRecommendedPolicyV2Request
 
@@ -6759,6 +6789,16 @@ module Aws::SecurityHub
     ListFindingAggregatorsResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
     ListFindingAggregatorsResponse.struct_class = Types::ListFindingAggregatorsResponse
 
+    ListFreeTrialStatusesV2Request.add_member(:account_ids, Shapes::ShapeRef.new(shape: FreeTrialAccountIdList, location_name: "AccountIds"))
+    ListFreeTrialStatusesV2Request.add_member(:statuses, Shapes::ShapeRef.new(shape: FreeTrialStatusValueList, location_name: "Statuses"))
+    ListFreeTrialStatusesV2Request.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location_name: "MaxResults"))
+    ListFreeTrialStatusesV2Request.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
+    ListFreeTrialStatusesV2Request.struct_class = Types::ListFreeTrialStatusesV2Request
+
+    ListFreeTrialStatusesV2Response.add_member(:account_free_trial_statuses, Shapes::ShapeRef.new(shape: AccountFreeTrialStatusList, required: true, location_name: "AccountFreeTrialStatuses"))
+    ListFreeTrialStatusesV2Response.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
+    ListFreeTrialStatusesV2Response.struct_class = Types::ListFreeTrialStatusesV2Response
+
     ListInvitationsRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: CrossAccountMaxResults, location: "querystring", location_name: "MaxResults"))
     ListInvitationsRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location: "querystring", location_name: "NextToken"))
     ListInvitationsRequest.struct_class = Types::ListInvitationsRequest
@@ -9569,6 +9609,25 @@ module Aws::SecurityHub
         )
       end)
 
+      api.add_operation(:list_free_trial_statuses_v2, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "ListFreeTrialStatusesV2"
+        o.http_method = "POST"
+        o.http_request_uri = "/freetrial/statusv2/list"
+        o.input = Shapes::ShapeRef.new(shape: ListFreeTrialStatusesV2Request)
+        o.output = Shapes::ShapeRef.new(shape: ListFreeTrialStatusesV2Response)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o[:pager] = Aws::Pager.new(
+          limit_key: "max_results",
+          tokens: {
+            "next_token" => "next_token"
+          }
+        )
+      end)
+
       api.add_operation(:list_invitations, Seahorse::Model::Operation.new.tap do |o|
         o.name = "ListInvitations"
         o.http_method = "GET"

data/lib/aws-sdk-securityhub/types.rb

@@ -194,6 +194,35 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # The free trial status of each Security Hub feature for an account.
+    #
+    # @!attribute [rw] account_id
+    #   The Amazon Web Services account identifier that the free trial
+    #   statuses apply to.
+    #   @return [String]
+    #
+    # @!attribute [rw] evaluated_at
+    #   The date and time at which Security Hub evaluated the free trial
+    #   statuses for this account. Every status in `FreeTrialStatuses`
+    #   reflects this point in time.
+    #   @return [Time]
+    #
+    # @!attribute [rw] free_trial_statuses
+    #   An array of free trial statuses, one for each feature that has a
+    #   free trial period for the account. The array is empty if the account
+    #   has no free trial to report.
+    #   @return [Array<Types::FreeTrialStatus>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AccountFreeTrialStatus AWS API Documentation
+    #
+    class AccountFreeTrialStatus < Struct.new(
+      :account_id,
+      :evaluated_at,
+      :free_trial_statuses)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Provides details about one of the following actions that affects or
     # that was taken on a resource:
     #
@@ -25866,6 +25895,49 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # The free trial period for a Security Hub feature, and whether the
+    # trial is currently active.
+    #
+    # @!attribute [rw] feature_type
+    #   The feature that the free trial period applies to. Valid values:
+    #
+    #   * `SECURITY_HUB_V2` specifies Security Hub.
+    #
+    #   * `SECURITY_HUB_V2_MULTI_CLOUD_AZURE` specifies Security Hub
+    #     coverage for Microsoft Azure resources.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   Whether the free trial period is currently active. Valid values:
+    #
+    #   * `ACTIVE` specifies that the free trial period is ongoing.
+    #
+    #   * `INACTIVE` specifies that the free trial period has ended, or that
+    #     it never started.
+    #
+    #   To determine whether a trial has expired, compare `ExpiresAt` to the
+    #   current time.
+    #   @return [String]
+    #
+    # @!attribute [rw] started_at
+    #   The date and time at which the free trial period began.
+    #   @return [Time]
+    #
+    # @!attribute [rw] expires_at
+    #   The date and time at which the free trial period ends.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/FreeTrialStatus AWS API Documentation
+    #
+    class FreeTrialStatus < Struct.new(
+      :feature_type,
+      :status,
+      :started_at,
+      :expires_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] metadata_uid
     #   The unique identifier (ID) of Security Hub OCSF findings found under
     #   the `metadata.uid` field of the finding.
@@ -28243,6 +28315,59 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # @!attribute [rw] account_ids
+    #   The Amazon Web Services account identifiers to list free trial
+    #   status for. You can specify accounts other than your own only if you
+    #   are a delegated Security Hub administrator.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] statuses
+    #   The free trial statuses to filter the results by. Valid values:
+    #
+    #   * `ACTIVE` returns only features with an ongoing free trial period.
+    #
+    #   * `INACTIVE` returns only features whose free trial period has
+    #     ended, or that never started.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return. If you don't specify a
+    #   value, Security Hub returns up to 100 results.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The pagination token to request the next page of results.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ListFreeTrialStatusesV2Request AWS API Documentation
+    #
+    class ListFreeTrialStatusesV2Request < Struct.new(
+      :account_ids,
+      :statuses,
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] account_free_trial_statuses
+    #   An array of free trial statuses, one for each account in scope.
+    #   @return [Array<Types::AccountFreeTrialStatus>]
+    #
+    # @!attribute [rw] next_token
+    #   The pagination token to use to request the next page of results. If
+    #   there are no additional results, this value is null.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ListFreeTrialStatusesV2Response AWS API Documentation
+    #
+    class ListFreeTrialStatusesV2Response < Struct.new(
+      :account_free_trial_statuses,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] max_results
     #   The maximum number of items to return in the response.
     #   @return [Integer]

data/lib/aws-sdk-securityhub.rb

@@ -54,7 +54,7 @@ module Aws::SecurityHub
   autoload :EndpointProvider, 'aws-sdk-securityhub/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityhub/endpoints'
 
-  GEM_VERSION = '1.161.0'
+  GEM_VERSION = '1.163.0'
 
 end
 

data/sig/client.rbs

@@ -5166,6 +5166,20 @@ module Aws
                                     ) -> _ListFindingAggregatorsResponseSuccess
                                   | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListFindingAggregatorsResponseSuccess
 
+      interface _ListFreeTrialStatusesV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::ListFreeTrialStatusesV2Response]
+        def account_free_trial_statuses: () -> ::Array[Types::AccountFreeTrialStatus]
+        def next_token: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityHub/Client.html#list_free_trial_statuses_v2-instance_method
+      def list_free_trial_statuses_v2: (
+                                         ?account_ids: Array[::String],
+                                         ?statuses: Array[("ACTIVE" | "INACTIVE")],
+                                         ?max_results: ::Integer,
+                                         ?next_token: ::String
+                                       ) -> _ListFreeTrialStatusesV2ResponseSuccess
+                                     | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListFreeTrialStatusesV2ResponseSuccess
+
       interface _ListInvitationsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::ListInvitationsResponse]
         def invitations: () -> ::Array[Types::Invitation]

data/sig/types.rbs

@@ -53,6 +53,13 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class AccountFreeTrialStatus
+      attr_accessor account_id: ::String
+      attr_accessor evaluated_at: ::Time
+      attr_accessor free_trial_statuses: ::Array[Types::FreeTrialStatus]
+      SENSITIVE: []
+    end
+
     class Action
       attr_accessor action_type: ::String
       attr_accessor network_connection_action: Types::NetworkConnectionAction
@@ -5816,6 +5823,14 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class FreeTrialStatus
+      attr_accessor feature_type: ("SECURITY_HUB_V2" | "SECURITY_HUB_V2_MULTI_CLOUD_AZURE")
+      attr_accessor status: ("ACTIVE" | "INACTIVE")
+      attr_accessor started_at: ::Time
+      attr_accessor expires_at: ::Time
+      SENSITIVE: []
+    end
+
     class GenerateRecommendedPolicyV2Request
       attr_accessor metadata_uid: ::String
       SENSITIVE: []
@@ -6465,6 +6480,20 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class ListFreeTrialStatusesV2Request
+      attr_accessor account_ids: ::Array[::String]
+      attr_accessor statuses: ::Array[("ACTIVE" | "INACTIVE")]
+      attr_accessor max_results: ::Integer
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class ListFreeTrialStatusesV2Response
+      attr_accessor account_free_trial_statuses: ::Array[Types::AccountFreeTrialStatus]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class ListInvitationsRequest
       attr_accessor max_results: ::Integer
       attr_accessor next_token: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityhub
 version: !ruby/object:Gem::Version
-  version: 1.161.0
+  version: 1.163.0
 platform: ruby
 authors:
 - Amazon Web Services