aws-sdk-securityhub 1.165.0 → 1.166.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 21b02a0398f7cc6dfb637a9fa5e134a9d2f83044ef9a4c1f9f39c819e4102667
-  data.tar.gz: 89a11ff89597d1f327b4bb2b44e3b3621858ce45d15ca582246aa8277f4cd790
+  metadata.gz: f2b99343f8468f691eb06034c7068b319ac150851570109cf7f0810a667a1075
+  data.tar.gz: 06264f6d2aee3cf62ba6b98c5bbf8cd69765fb4661ab96da23c2311feb3cd4b2
 SHA512:
-  metadata.gz: d168ee0a8d583820a744a215448943ae49544e6f2d759832163984e37da23fa859c9b423cefa38d76f159853ff54b1bc2c7fd3c00626054e0e70f4052c2018ac
-  data.tar.gz: 760894b787243bbf22efab26278869305b9055be3c4820f0ec2daa80124e3de5a60300c239214bfbd7cb19275d563caaf6543d5db4b8d7c85dd48ecadb46ae2d
+  metadata.gz: b3ff04e68d59da71c955fe84dbd9da2ff08a5fa2b57c6e6e1311945a690745a0511a4bb49b1c5331311ec270b89fe1c6cf32c78c8bb6ab397841161cce70c646
+  data.tar.gz: bb0ef190c0ba627089543c22ad7633610dada0313933600356ea2b4a62e6dc3735ca77cc952ea1cf7341c665f60db3b3ecc1f43bf1ba530cde4ecea6bb93c22b

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.166.0 (2026-10-01)
+------------------
+
+* Feature - Adds GetRemediationsV2 and ListExposuresByRemediationV2 APIs. This feature allows customers to see their highest priority remediations for their Exposure findings. Remediations target key changes customers can make to resources to drive finding resolution.
+
 1.165.0 (2026-09-11)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.165.0
+1.166.0

data/lib/aws-sdk-securityhub/client.rb

@@ -8975,6 +8975,162 @@ module Aws::SecurityHub
       req.send_request(options)
     end
 
+    # Retrieves remediation targets for the account, or for all member
+    # accounts if the caller is the delegated administrator. Results are
+    # sorted by priority, highest first, and are paginated. Use `TargetUid`
+    # or `MetadataUid` to scope the request to a single target or finding.
+    #
+    # @option params [String] :target_uid
+    #   The unique identifier (ID) of an existing remediation target to
+    #   return. Returns the single matching target. You can't use `TargetUid`
+    #   together with `MetadataUid` or `Filters`.
+    #
+    # @option params [String] :metadata_uid
+    #   The unique identifier (ID) of the Security Hub exposure finding, found
+    #   under the `metadata.uid` field of the finding. Returns the remediation
+    #   targets associated with that finding. You can't use `MetadataUid`
+    #   together with `TargetUid` or `Filters`.
+    #
+    # @option params [Types::RemediationFilters] :filters
+    #   Filters remediation targets based on a set of criteria. You can't use
+    #   `Filters` together with `TargetUid` or `MetadataUid`.
+    #
+    # @option params [Boolean] :show_guidance
+    #   Specifies whether to show remediation target guidance.
+    #
+    # @option params [String] :guidance_format
+    #   The format of the remediation guidance examples to return. Valid
+    #   values are `All`, `AwsCli`, `Cli`, `Python`, `Terraform`, `Cdk`,
+    #   `CloudFormation`, `IaC`, and `Template`. If you don't specify a
+    #   value, all formats are returned. Applies only when `ShowGuidance` is
+    #   `true`.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to return. Valid range is 1-100. If you
+    #   don't specify a value, the operation returns up to 25 results.
+    #
+    # @option params [String] :next_token
+    #   The token used to paginate the remediations target list returned. On
+    #   your first call to `GetRemediationsV2`, omit this parameter or set it
+    #   to `NULL`. For subsequent calls, use the `NextToken` value returned in
+    #   the previous response to retrieve the next page of results.
+    #
+    # @return [Types::GetRemediationsV2Response] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetRemediationsV2Response#items #items} => Array<Types::RemediationV2Item>
+    #   * {Types::GetRemediationsV2Response#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_remediations_v2({
+    #     target_uid: "RemediationStringUid",
+    #     metadata_uid: "RemediationStringUid",
+    #     filters: {
+    #       composite_filters: [
+    #         {
+    #           string_filters: [
+    #             {
+    #               field_name: "Resource.Type", # required, accepts Resource.Type, Priority, Status, Resource.Id, Resource.ResourceOwnerAccountId, Resource.CloudProvider
+    #               filter: { # required
+    #                 value: "NonEmptyString", # required
+    #               },
+    #             },
+    #           ],
+    #         },
+    #       ],
+    #     },
+    #     show_guidance: false,
+    #     guidance_format: "All", # accepts All, AwsCli, Cli, Python, Terraform, Cdk, CloudFormation, IaC, Template
+    #     max_results: 1,
+    #     next_token: "NextToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.items #=> Array
+    #   resp.items[0].target_uid #=> String
+    #   resp.items[0].outcome.resolved_findings_count #=> Integer
+    #   resp.items[0].outcome.severity_reduction_findings_count #=> Integer
+    #   resp.items[0].outcome.severity_unchanged_count #=> Integer
+    #   resp.items[0].priority #=> String, one of "Critical", "High", "Medium", "Low"
+    #   resp.items[0].remediation_summary.action #=> String
+    #   resp.items[0].remediation_summary.description #=> String
+    #   resp.items[0].remediation_summary.is_immediate #=> Boolean
+    #   resp.items[0].remediation_summary.post_remediation_steps #=> Array
+    #   resp.items[0].remediation_summary.post_remediation_steps[0] #=> String
+    #   resp.items[0].remediation_summary.kb_articles #=> Array
+    #   resp.items[0].remediation_summary.kb_articles[0].title #=> String
+    #   resp.items[0].remediation_summary.kb_articles[0].url #=> String
+    #   resp.items[0].resource.account_id #=> String
+    #   resp.items[0].resource.region #=> String
+    #   resp.items[0].resource.resource_owner_account_id #=> String
+    #   resp.items[0].resource.resource_owner_org_id #=> String
+    #   resp.items[0].resource.type #=> String
+    #   resp.items[0].resource.name #=> String
+    #   resp.items[0].resource.id #=> String
+    #   resp.items[0].resource.resource_guid #=> String
+    #   resp.items[0].resource.resource_region #=> String
+    #   resp.items[0].resource.cloud_provider #=> String, one of "Azure", "AWS"
+    #   resp.items[0].status #=> String, one of "New", "Updated", "Resolved"
+    #   resp.items[0].trait.type #=> String
+    #   resp.items[0].trait.title #=> String
+    #   resp.items[0].guidance.target_type_name #=> String
+    #   resp.items[0].guidance.pattern #=> String
+    #   resp.items[0].guidance.version #=> String
+    #   resp.items[0].guidance.context.problem_statement #=> String
+    #   resp.items[0].guidance.context.risk_assessment #=> String
+    #   resp.items[0].guidance.context.affected_scope #=> String
+    #   resp.items[0].guidance.context.prerequisites #=> Array
+    #   resp.items[0].guidance.context.prerequisites[0] #=> String
+    #   resp.items[0].guidance.specification.parameters #=> Array
+    #   resp.items[0].guidance.specification.parameters[0].name #=> String
+    #   resp.items[0].guidance.specification.parameters[0].type #=> String
+    #   resp.items[0].guidance.specification.parameters[0].description #=> String
+    #   resp.items[0].guidance.specification.parameters[0].required #=> Boolean
+    #   resp.items[0].guidance.specification.steps #=> Array
+    #   resp.items[0].guidance.specification.steps[0].phase #=> String
+    #   resp.items[0].guidance.specification.steps[0].description #=> String
+    #   resp.items[0].guidance.specification.steps[0].service #=> String
+    #   resp.items[0].guidance.specification.steps[0].action #=> String
+    #   resp.items[0].guidance.specification.steps[0].logic #=> String
+    #   resp.items[0].guidance.specification.steps[0].inverse #=> String
+    #   resp.items[0].guidance.specification.steps[0].verify_after #=> String
+    #   resp.items[0].guidance.specification.expected_end_state #=> String
+    #   resp.items[0].guidance.specification.required_permissions #=> Array
+    #   resp.items[0].guidance.specification.required_permissions[0] #=> String
+    #   resp.items[0].guidance.examples.aws_cli #=> String
+    #   resp.items[0].guidance.examples.cli #=> String
+    #   resp.items[0].guidance.examples.python #=> String
+    #   resp.items[0].guidance.examples.terraform #=> String
+    #   resp.items[0].guidance.examples.cdk #=> String
+    #   resp.items[0].guidance.examples.cloud_formation #=> String
+    #   resp.items[0].guidance.examples.ia_c #=> String
+    #   resp.items[0].guidance.examples.template #=> String
+    #   resp.items[0].guidance.metadata.resource_type #=> String
+    #   resp.items[0].guidance.metadata.exposure_type #=> String
+    #   resp.items[0].guidance.metadata.trait_titles #=> Array
+    #   resp.items[0].guidance.metadata.trait_titles[0] #=> String
+    #   resp.items[0].guidance.metadata.reversibility #=> String
+    #   resp.items[0].guidance.metadata.fix_effect #=> String
+    #   resp.items[0].guidance.metadata.risk_level #=> String
+    #   resp.items[0].guidance.metadata.automation_level #=> String
+    #   resp.items[0].guidance.metadata.human_review_required #=> Boolean
+    #   resp.items[0].guidance.metadata.generated_at #=> Time
+    #   resp.items[0].guidance.metadata.verification_status #=> String
+    #   resp.items[0].updated_at #=> Time
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetRemediationsV2 AWS API Documentation
+    #
+    # @overload get_remediations_v2(params = {})
+    # @param [Hash] params ({})
+    def get_remediations_v2(params = {}, options = {})
+      req = build_request(:get_remediations_v2, params)
+      req.send_request(options)
+    end
+
     # Retrieves statistical information about Amazon Web Services resources
     # and their associated security findings.
     #
@@ -10132,6 +10288,76 @@ module Aws::SecurityHub
       req.send_request(options)
     end
 
+    # Retrieves the exposure findings tied to a specific remediation target.
+    # Results are sorted by previous severity, highest first, and are
+    # paginated.
+    #
+    # @option params [required, String] :target_uid
+    #   The unique identifier (ID) of an existing remediation target to list
+    #   exposure findings for.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to return. Valid range is 1-100. If you
+    #   don't specify a value, the operation returns up to 25 results.
+    #
+    # @option params [String] :next_token
+    #   The token used to paginate the exposures list returned. On your first
+    #   call to `ListExposuresByRemediationV2`, omit this parameter or set it
+    #   to `NULL`. For subsequent calls, use the `NextToken` value returned in
+    #   the previous response to retrieve the next page of results.
+    #
+    # @return [Types::ListExposuresByRemediationV2Response] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListExposuresByRemediationV2Response#items #items} => Array<Types::ExposureFinding>
+    #   * {Types::ListExposuresByRemediationV2Response#target_uid #target_uid} => String
+    #   * {Types::ListExposuresByRemediationV2Response#resource #resource} => Types::RemediationResource
+    #   * {Types::ListExposuresByRemediationV2Response#total_count #total_count} => Integer
+    #   * {Types::ListExposuresByRemediationV2Response#trait #trait} => Types::RemediationTrait
+    #   * {Types::ListExposuresByRemediationV2Response#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_exposures_by_remediation_v2({
+    #     target_uid: "RemediationStringUid", # required
+    #     max_results: 1,
+    #     next_token: "NextToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.items #=> Array
+    #   resp.items[0].metadata_uid #=> String
+    #   resp.items[0].title #=> String
+    #   resp.items[0].previous_severity #=> String, one of "Informational", "Low", "Medium", "High", "Critical"
+    #   resp.items[0].projected_severity #=> String, one of "Informational", "Low", "Medium", "High", "Critical"
+    #   resp.items[0].impact #=> String, one of "Reduces", "Resolves", "Unchanged"
+    #   resp.target_uid #=> String
+    #   resp.resource.account_id #=> String
+    #   resp.resource.region #=> String
+    #   resp.resource.resource_owner_account_id #=> String
+    #   resp.resource.resource_owner_org_id #=> String
+    #   resp.resource.type #=> String
+    #   resp.resource.name #=> String
+    #   resp.resource.id #=> String
+    #   resp.resource.resource_guid #=> String
+    #   resp.resource.resource_region #=> String
+    #   resp.resource.cloud_provider #=> String, one of "Azure", "AWS"
+    #   resp.total_count #=> Integer
+    #   resp.trait.type #=> String
+    #   resp.trait.title #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ListExposuresByRemediationV2 AWS API Documentation
+    #
+    # @overload list_exposures_by_remediation_v2(params = {})
+    # @param [Hash] params ({})
+    def list_exposures_by_remediation_v2(params = {}, options = {})
+      req = build_request(:list_exposures_by_remediation_v2, params)
+      req.send_request(options)
+    end
+
     # If cross-Region aggregation is enabled, then `ListFindingAggregators`
     # returns the Amazon Resource Name (ARN) of the finding aggregator. You
     # can run this operation from any Amazon Web Services Region.
@@ -13609,7 +13835,7 @@ module Aws::SecurityHub
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityhub'
-      context[:gem_version] = '1.165.0'
+      context[:gem_version] = '1.166.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityhub/client_api.rb

@@ -929,6 +929,10 @@ module Aws::SecurityHub
     EnablementStatus = Shapes::StringShape.new(name: 'EnablementStatus')
     EnumConfigurationOptions = Shapes::StructureShape.new(name: 'EnumConfigurationOptions')
     EnumListConfigurationOptions = Shapes::StructureShape.new(name: 'EnumListConfigurationOptions')
+    ExposureFinding = Shapes::StructureShape.new(name: 'ExposureFinding')
+    ExposureFindingItemsList = Shapes::ListShape.new(name: 'ExposureFindingItemsList')
+    ExposureImpact = Shapes::StringShape.new(name: 'ExposureImpact')
+    ExposureSeverity = Shapes::StringShape.new(name: 'ExposureSeverity')
     ExternalIntegrationConfiguration = Shapes::StructureShape.new(name: 'ExternalIntegrationConfiguration')
     FeatureDetail = Shapes::StructureShape.new(name: 'FeatureDetail')
     FeatureName = Shapes::StringShape.new(name: 'FeatureName')
@@ -1013,6 +1017,8 @@ module Aws::SecurityHub
     GetMembersResponse = Shapes::StructureShape.new(name: 'GetMembersResponse')
     GetRecommendedPolicyV2Request = Shapes::StructureShape.new(name: 'GetRecommendedPolicyV2Request')
     GetRecommendedPolicyV2Response = Shapes::StructureShape.new(name: 'GetRecommendedPolicyV2Response')
+    GetRemediationsV2Request = Shapes::StructureShape.new(name: 'GetRemediationsV2Request')
+    GetRemediationsV2Response = Shapes::StructureShape.new(name: 'GetRemediationsV2Response')
     GetResourcesStatisticsV2Request = Shapes::StructureShape.new(name: 'GetResourcesStatisticsV2Request')
     GetResourcesStatisticsV2Response = Shapes::StructureShape.new(name: 'GetResourcesStatisticsV2Response')
     GetResourcesTrendsV2Request = Shapes::StructureShape.new(name: 'GetResourcesTrendsV2Request')
@@ -1029,6 +1035,7 @@ module Aws::SecurityHub
     GroupByRules = Shapes::ListShape.new(name: 'GroupByRules')
     GroupByValue = Shapes::StructureShape.new(name: 'GroupByValue')
     GroupByValues = Shapes::ListShape.new(name: 'GroupByValues')
+    GuidanceFormat = Shapes::StringShape.new(name: 'GuidanceFormat')
     HealthCheck = Shapes::StructureShape.new(name: 'HealthCheck')
     HealthIssue = Shapes::StructureShape.new(name: 'HealthIssue')
     HealthIssueCode = Shapes::StringShape.new(name: 'HealthIssueCode')
@@ -1068,6 +1075,8 @@ module Aws::SecurityHub
     JiraCloudDetail = Shapes::StructureShape.new(name: 'JiraCloudDetail')
     JiraCloudProviderConfiguration = Shapes::StructureShape.new(name: 'JiraCloudProviderConfiguration')
     JiraCloudUpdateConfiguration = Shapes::StructureShape.new(name: 'JiraCloudUpdateConfiguration')
+    KbArticle = Shapes::StructureShape.new(name: 'KbArticle')
+    KbArticleList = Shapes::ListShape.new(name: 'KbArticleList')
     KeywordFilter = Shapes::StructureShape.new(name: 'KeywordFilter')
     KeywordFilterList = Shapes::ListShape.new(name: 'KeywordFilterList')
     LimitExceededException = Shapes::StructureShape.new(name: 'LimitExceededException')
@@ -1087,6 +1096,8 @@ module Aws::SecurityHub
     ListConnectorsV2Response = Shapes::StructureShape.new(name: 'ListConnectorsV2Response')
     ListEnabledProductsForImportRequest = Shapes::StructureShape.new(name: 'ListEnabledProductsForImportRequest')
     ListEnabledProductsForImportResponse = Shapes::StructureShape.new(name: 'ListEnabledProductsForImportResponse')
+    ListExposuresByRemediationV2Request = Shapes::StructureShape.new(name: 'ListExposuresByRemediationV2Request')
+    ListExposuresByRemediationV2Response = Shapes::StructureShape.new(name: 'ListExposuresByRemediationV2Response')
     ListFindingAggregatorsRequest = Shapes::StructureShape.new(name: 'ListFindingAggregatorsRequest')
     ListFindingAggregatorsResponse = Shapes::StructureShape.new(name: 'ListFindingAggregatorsResponse')
     ListFreeTrialStatusesV2Request = Shapes::StructureShape.new(name: 'ListFreeTrialStatusesV2Request')
@@ -1213,6 +1224,32 @@ module Aws::SecurityHub
     RelatedFindingList = Shapes::ListShape.new(name: 'RelatedFindingList')
     RelatedRequirementsList = Shapes::ListShape.new(name: 'RelatedRequirementsList')
     Remediation = Shapes::StructureShape.new(name: 'Remediation')
+    RemediationCompositeFilter = Shapes::StructureShape.new(name: 'RemediationCompositeFilter')
+    RemediationCompositeFilterList = Shapes::ListShape.new(name: 'RemediationCompositeFilterList')
+    RemediationFilters = Shapes::StructureShape.new(name: 'RemediationFilters')
+    RemediationGuidance = Shapes::StructureShape.new(name: 'RemediationGuidance')
+    RemediationGuidanceContext = Shapes::StructureShape.new(name: 'RemediationGuidanceContext')
+    RemediationGuidanceExamples = Shapes::StructureShape.new(name: 'RemediationGuidanceExamples')
+    RemediationGuidanceMetadata = Shapes::StructureShape.new(name: 'RemediationGuidanceMetadata')
+    RemediationGuidanceSpecification = Shapes::StructureShape.new(name: 'RemediationGuidanceSpecification')
+    RemediationOutcome = Shapes::StructureShape.new(name: 'RemediationOutcome')
+    RemediationParameter = Shapes::StructureShape.new(name: 'RemediationParameter')
+    RemediationParameterList = Shapes::ListShape.new(name: 'RemediationParameterList')
+    RemediationPriority = Shapes::StringShape.new(name: 'RemediationPriority')
+    RemediationResource = Shapes::StructureShape.new(name: 'RemediationResource')
+    RemediationStatus = Shapes::StringShape.new(name: 'RemediationStatus')
+    RemediationStep = Shapes::StructureShape.new(name: 'RemediationStep')
+    RemediationStepList = Shapes::ListShape.new(name: 'RemediationStepList')
+    RemediationStringField = Shapes::StringShape.new(name: 'RemediationStringField')
+    RemediationStringFilter = Shapes::StructureShape.new(name: 'RemediationStringFilter')
+    RemediationStringFilterCondition = Shapes::StructureShape.new(name: 'RemediationStringFilterCondition')
+    RemediationStringFilterList = Shapes::ListShape.new(name: 'RemediationStringFilterList')
+    RemediationStringList = Shapes::ListShape.new(name: 'RemediationStringList')
+    RemediationStringUid = Shapes::StringShape.new(name: 'RemediationStringUid')
+    RemediationSummaryDetail = Shapes::StructureShape.new(name: 'RemediationSummaryDetail')
+    RemediationTrait = Shapes::StructureShape.new(name: 'RemediationTrait')
+    RemediationV2Item = Shapes::StructureShape.new(name: 'RemediationV2Item')
+    RemediationV2ItemList = Shapes::ListShape.new(name: 'RemediationV2ItemList')
     Resource = Shapes::StructureShape.new(name: 'Resource')
     ResourceArn = Shapes::StringShape.new(name: 'ResourceArn')
     ResourceCategory = Shapes::StringShape.new(name: 'ResourceCategory')
@@ -6188,6 +6225,15 @@ module Aws::SecurityHub
     EnumListConfigurationOptions.add_member(:allowed_values, Shapes::ShapeRef.new(shape: StringList, location_name: "AllowedValues"))
     EnumListConfigurationOptions.struct_class = Types::EnumListConfigurationOptions
 
+    ExposureFinding.add_member(:metadata_uid, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "MetadataUid"))
+    ExposureFinding.add_member(:title, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Title"))
+    ExposureFinding.add_member(:previous_severity, Shapes::ShapeRef.new(shape: ExposureSeverity, required: true, location_name: "PreviousSeverity"))
+    ExposureFinding.add_member(:projected_severity, Shapes::ShapeRef.new(shape: ExposureSeverity, required: true, location_name: "ProjectedSeverity"))
+    ExposureFinding.add_member(:impact, Shapes::ShapeRef.new(shape: ExposureImpact, required: true, location_name: "Impact"))
+    ExposureFinding.struct_class = Types::ExposureFinding
+
+    ExposureFindingItemsList.member = Shapes::ShapeRef.new(shape: ExposureFinding)
+
     ExternalIntegrationConfiguration.add_member(:connector_arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ConnectorArn"))
     ExternalIntegrationConfiguration.struct_class = Types::ExternalIntegrationConfiguration
 
@@ -6517,6 +6563,19 @@ module Aws::SecurityHub
     GetRecommendedPolicyV2Response.add_member(:resource_arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ResourceArn"))
     GetRecommendedPolicyV2Response.struct_class = Types::GetRecommendedPolicyV2Response
 
+    GetRemediationsV2Request.add_member(:target_uid, Shapes::ShapeRef.new(shape: RemediationStringUid, location_name: "TargetUid"))
+    GetRemediationsV2Request.add_member(:metadata_uid, Shapes::ShapeRef.new(shape: RemediationStringUid, location_name: "MetadataUid"))
+    GetRemediationsV2Request.add_member(:filters, Shapes::ShapeRef.new(shape: RemediationFilters, location_name: "Filters"))
+    GetRemediationsV2Request.add_member(:show_guidance, Shapes::ShapeRef.new(shape: Boolean, location_name: "ShowGuidance"))
+    GetRemediationsV2Request.add_member(:guidance_format, Shapes::ShapeRef.new(shape: GuidanceFormat, location_name: "GuidanceFormat"))
+    GetRemediationsV2Request.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location_name: "MaxResults"))
+    GetRemediationsV2Request.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
+    GetRemediationsV2Request.struct_class = Types::GetRemediationsV2Request
+
+    GetRemediationsV2Response.add_member(:items, Shapes::ShapeRef.new(shape: RemediationV2ItemList, required: true, location_name: "Items"))
+    GetRemediationsV2Response.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
+    GetRemediationsV2Response.struct_class = Types::GetRemediationsV2Response
+
     GetResourcesStatisticsV2Request.add_member(:group_by_rules, Shapes::ShapeRef.new(shape: ResourceGroupByRules, required: true, location_name: "GroupByRules"))
     GetResourcesStatisticsV2Request.add_member(:scopes, Shapes::ShapeRef.new(shape: ResourceScopes, location_name: "Scopes"))
     GetResourcesStatisticsV2Request.add_member(:sort_order, Shapes::ShapeRef.new(shape: SortOrder, location_name: "SortOrder"))
@@ -6701,6 +6760,12 @@ module Aws::SecurityHub
     JiraCloudUpdateConfiguration.add_member(:project_key, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ProjectKey"))
     JiraCloudUpdateConfiguration.struct_class = Types::JiraCloudUpdateConfiguration
 
+    KbArticle.add_member(:title, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Title"))
+    KbArticle.add_member(:url, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Url"))
+    KbArticle.struct_class = Types::KbArticle
+
+    KbArticleList.member = Shapes::ShapeRef.new(shape: KbArticle)
+
     KeywordFilter.add_member(:value, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Value"))
     KeywordFilter.struct_class = Types::KeywordFilter
 
@@ -6781,6 +6846,19 @@ module Aws::SecurityHub
     ListEnabledProductsForImportResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
     ListEnabledProductsForImportResponse.struct_class = Types::ListEnabledProductsForImportResponse
 
+    ListExposuresByRemediationV2Request.add_member(:target_uid, Shapes::ShapeRef.new(shape: RemediationStringUid, required: true, location_name: "TargetUid"))
+    ListExposuresByRemediationV2Request.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location_name: "MaxResults"))
+    ListExposuresByRemediationV2Request.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
+    ListExposuresByRemediationV2Request.struct_class = Types::ListExposuresByRemediationV2Request
+
+    ListExposuresByRemediationV2Response.add_member(:items, Shapes::ShapeRef.new(shape: ExposureFindingItemsList, required: true, location_name: "Items"))
+    ListExposuresByRemediationV2Response.add_member(:target_uid, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "TargetUid"))
+    ListExposuresByRemediationV2Response.add_member(:resource, Shapes::ShapeRef.new(shape: RemediationResource, required: true, location_name: "Resource"))
+    ListExposuresByRemediationV2Response.add_member(:total_count, Shapes::ShapeRef.new(shape: Integer, required: true, location_name: "TotalCount"))
+    ListExposuresByRemediationV2Response.add_member(:trait, Shapes::ShapeRef.new(shape: RemediationTrait, required: true, location_name: "Trait"))
+    ListExposuresByRemediationV2Response.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
+    ListExposuresByRemediationV2Response.struct_class = Types::ListExposuresByRemediationV2Response
+
     ListFindingAggregatorsRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location: "querystring", location_name: "NextToken"))
     ListFindingAggregatorsRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location: "querystring", location_name: "MaxResults"))
     ListFindingAggregatorsRequest.struct_class = Types::ListFindingAggregatorsRequest
@@ -7239,6 +7317,128 @@ module Aws::SecurityHub
     Remediation.add_member(:recommendation, Shapes::ShapeRef.new(shape: Recommendation, location_name: "Recommendation"))
     Remediation.struct_class = Types::Remediation
 
+    RemediationCompositeFilter.add_member(:string_filters, Shapes::ShapeRef.new(shape: RemediationStringFilterList, location_name: "StringFilters"))
+    RemediationCompositeFilter.struct_class = Types::RemediationCompositeFilter
+
+    RemediationCompositeFilterList.member = Shapes::ShapeRef.new(shape: RemediationCompositeFilter)
+
+    RemediationFilters.add_member(:composite_filters, Shapes::ShapeRef.new(shape: RemediationCompositeFilterList, location_name: "CompositeFilters"))
+    RemediationFilters.struct_class = Types::RemediationFilters
+
+    RemediationGuidance.add_member(:target_type_name, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "TargetTypeName"))
+    RemediationGuidance.add_member(:pattern, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Pattern"))
+    RemediationGuidance.add_member(:version, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Version"))
+    RemediationGuidance.add_member(:context, Shapes::ShapeRef.new(shape: RemediationGuidanceContext, required: true, location_name: "Context"))
+    RemediationGuidance.add_member(:specification, Shapes::ShapeRef.new(shape: RemediationGuidanceSpecification, required: true, location_name: "Specification"))
+    RemediationGuidance.add_member(:examples, Shapes::ShapeRef.new(shape: RemediationGuidanceExamples, required: true, location_name: "Examples"))
+    RemediationGuidance.add_member(:metadata, Shapes::ShapeRef.new(shape: RemediationGuidanceMetadata, required: true, location_name: "Metadata"))
+    RemediationGuidance.struct_class = Types::RemediationGuidance
+
+    RemediationGuidanceContext.add_member(:problem_statement, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ProblemStatement"))
+    RemediationGuidanceContext.add_member(:risk_assessment, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "RiskAssessment"))
+    RemediationGuidanceContext.add_member(:affected_scope, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "AffectedScope"))
+    RemediationGuidanceContext.add_member(:prerequisites, Shapes::ShapeRef.new(shape: RemediationStringList, location_name: "Prerequisites"))
+    RemediationGuidanceContext.struct_class = Types::RemediationGuidanceContext
+
+    RemediationGuidanceExamples.add_member(:aws_cli, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "AwsCli"))
+    RemediationGuidanceExamples.add_member(:cli, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Cli"))
+    RemediationGuidanceExamples.add_member(:python, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Python"))
+    RemediationGuidanceExamples.add_member(:terraform, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Terraform"))
+    RemediationGuidanceExamples.add_member(:cdk, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Cdk"))
+    RemediationGuidanceExamples.add_member(:cloud_formation, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CloudFormation"))
+    RemediationGuidanceExamples.add_member(:ia_c, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "IaC"))
+    RemediationGuidanceExamples.add_member(:template, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Template"))
+    RemediationGuidanceExamples.struct_class = Types::RemediationGuidanceExamples
+
+    RemediationGuidanceMetadata.add_member(:resource_type, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "ResourceType"))
+    RemediationGuidanceMetadata.add_member(:exposure_type, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "ExposureType"))
+    RemediationGuidanceMetadata.add_member(:trait_titles, Shapes::ShapeRef.new(shape: RemediationStringList, required: true, location_name: "TraitTitles"))
+    RemediationGuidanceMetadata.add_member(:reversibility, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Reversibility"))
+    RemediationGuidanceMetadata.add_member(:fix_effect, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "FixEffect"))
+    RemediationGuidanceMetadata.add_member(:risk_level, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "RiskLevel"))
+    RemediationGuidanceMetadata.add_member(:automation_level, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "AutomationLevel"))
+    RemediationGuidanceMetadata.add_member(:human_review_required, Shapes::ShapeRef.new(shape: Boolean, location_name: "HumanReviewRequired"))
+    RemediationGuidanceMetadata.add_member(:generated_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "GeneratedAt"))
+    RemediationGuidanceMetadata.add_member(:verification_status, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "VerificationStatus"))
+    RemediationGuidanceMetadata.struct_class = Types::RemediationGuidanceMetadata
+
+    RemediationGuidanceSpecification.add_member(:parameters, Shapes::ShapeRef.new(shape: RemediationParameterList, location_name: "Parameters"))
+    RemediationGuidanceSpecification.add_member(:steps, Shapes::ShapeRef.new(shape: RemediationStepList, location_name: "Steps"))
+    RemediationGuidanceSpecification.add_member(:expected_end_state, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ExpectedEndState"))
+    RemediationGuidanceSpecification.add_member(:required_permissions, Shapes::ShapeRef.new(shape: RemediationStringList, location_name: "RequiredPermissions"))
+    RemediationGuidanceSpecification.struct_class = Types::RemediationGuidanceSpecification
+
+    RemediationOutcome.add_member(:resolved_findings_count, Shapes::ShapeRef.new(shape: Integer, required: true, location_name: "ResolvedFindingsCount"))
+    RemediationOutcome.add_member(:severity_reduction_findings_count, Shapes::ShapeRef.new(shape: Integer, required: true, location_name: "SeverityReductionFindingsCount"))
+    RemediationOutcome.add_member(:severity_unchanged_count, Shapes::ShapeRef.new(shape: Integer, required: true, location_name: "SeverityUnchangedCount"))
+    RemediationOutcome.struct_class = Types::RemediationOutcome
+
+    RemediationParameter.add_member(:name, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Name"))
+    RemediationParameter.add_member(:type, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Type"))
+    RemediationParameter.add_member(:description, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Description"))
+    RemediationParameter.add_member(:required, Shapes::ShapeRef.new(shape: Boolean, location_name: "Required"))
+    RemediationParameter.struct_class = Types::RemediationParameter
+
+    RemediationParameterList.member = Shapes::ShapeRef.new(shape: RemediationParameter)
+
+    RemediationResource.add_member(:account_id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "AccountId"))
+    RemediationResource.add_member(:region, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Region"))
+    RemediationResource.add_member(:resource_owner_account_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ResourceOwnerAccountId"))
+    RemediationResource.add_member(:resource_owner_org_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ResourceOwnerOrgId"))
+    RemediationResource.add_member(:type, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Type"))
+    RemediationResource.add_member(:name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Name"))
+    RemediationResource.add_member(:id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Id"))
+    RemediationResource.add_member(:resource_guid, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ResourceGuid"))
+    RemediationResource.add_member(:resource_region, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "ResourceRegion"))
+    RemediationResource.add_member(:cloud_provider, Shapes::ShapeRef.new(shape: CloudProviderName, required: true, location_name: "CloudProvider"))
+    RemediationResource.struct_class = Types::RemediationResource
+
+    RemediationStep.add_member(:phase, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Phase"))
+    RemediationStep.add_member(:description, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Description"))
+    RemediationStep.add_member(:service, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Service"))
+    RemediationStep.add_member(:action, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Action"))
+    RemediationStep.add_member(:logic, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Logic"))
+    RemediationStep.add_member(:inverse, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Inverse"))
+    RemediationStep.add_member(:verify_after, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "VerifyAfter"))
+    RemediationStep.struct_class = Types::RemediationStep
+
+    RemediationStepList.member = Shapes::ShapeRef.new(shape: RemediationStep)
+
+    RemediationStringFilter.add_member(:field_name, Shapes::ShapeRef.new(shape: RemediationStringField, required: true, location_name: "FieldName"))
+    RemediationStringFilter.add_member(:filter, Shapes::ShapeRef.new(shape: RemediationStringFilterCondition, required: true, location_name: "Filter"))
+    RemediationStringFilter.struct_class = Types::RemediationStringFilter
+
+    RemediationStringFilterCondition.add_member(:value, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Value"))
+    RemediationStringFilterCondition.struct_class = Types::RemediationStringFilterCondition
+
+    RemediationStringFilterList.member = Shapes::ShapeRef.new(shape: RemediationStringFilter)
+
+    RemediationStringList.member = Shapes::ShapeRef.new(shape: NonEmptyString)
+
+    RemediationSummaryDetail.add_member(:action, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Action"))
+    RemediationSummaryDetail.add_member(:description, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Description"))
+    RemediationSummaryDetail.add_member(:is_immediate, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "IsImmediate"))
+    RemediationSummaryDetail.add_member(:post_remediation_steps, Shapes::ShapeRef.new(shape: RemediationStringList, location_name: "PostRemediationSteps"))
+    RemediationSummaryDetail.add_member(:kb_articles, Shapes::ShapeRef.new(shape: KbArticleList, location_name: "KbArticles"))
+    RemediationSummaryDetail.struct_class = Types::RemediationSummaryDetail
+
+    RemediationTrait.add_member(:type, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Type"))
+    RemediationTrait.add_member(:title, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Title"))
+    RemediationTrait.struct_class = Types::RemediationTrait
+
+    RemediationV2Item.add_member(:target_uid, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "TargetUid"))
+    RemediationV2Item.add_member(:outcome, Shapes::ShapeRef.new(shape: RemediationOutcome, required: true, location_name: "Outcome"))
+    RemediationV2Item.add_member(:priority, Shapes::ShapeRef.new(shape: RemediationPriority, required: true, location_name: "Priority"))
+    RemediationV2Item.add_member(:remediation_summary, Shapes::ShapeRef.new(shape: RemediationSummaryDetail, required: true, location_name: "RemediationSummary"))
+    RemediationV2Item.add_member(:resource, Shapes::ShapeRef.new(shape: RemediationResource, required: true, location_name: "Resource"))
+    RemediationV2Item.add_member(:status, Shapes::ShapeRef.new(shape: RemediationStatus, required: true, location_name: "Status"))
+    RemediationV2Item.add_member(:trait, Shapes::ShapeRef.new(shape: RemediationTrait, required: true, location_name: "Trait"))
+    RemediationV2Item.add_member(:guidance, Shapes::ShapeRef.new(shape: RemediationGuidance, location_name: "Guidance"))
+    RemediationV2Item.add_member(:updated_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "UpdatedAt"))
+    RemediationV2Item.struct_class = Types::RemediationV2Item
+
+    RemediationV2ItemList.member = Shapes::ShapeRef.new(shape: RemediationV2Item)
+
     Resource.add_member(:type, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Type"))
     Resource.add_member(:id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Id"))
     Resource.add_member(:partition, Shapes::ShapeRef.new(shape: Partition, location_name: "Partition"))
@@ -9377,6 +9577,25 @@ module Aws::SecurityHub
         )
       end)
 
+      api.add_operation(:get_remediations_v2, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetRemediationsV2"
+        o.http_method = "POST"
+        o.http_request_uri = "/GetRemediationsV2"
+        o.input = Shapes::ShapeRef.new(shape: GetRemediationsV2Request)
+        o.output = Shapes::ShapeRef.new(shape: GetRemediationsV2Response)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o[:pager] = Aws::Pager.new(
+          limit_key: "max_results",
+          tokens: {
+            "next_token" => "next_token"
+          }
+        )
+      end)
+
       api.add_operation(:get_resources_statistics_v2, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetResourcesStatisticsV2"
         o.http_method = "POST"
@@ -9590,6 +9809,25 @@ module Aws::SecurityHub
         )
       end)
 
+      api.add_operation(:list_exposures_by_remediation_v2, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "ListExposuresByRemediationV2"
+        o.http_method = "POST"
+        o.http_request_uri = "/ListExposuresByRemediationV2"
+        o.input = Shapes::ShapeRef.new(shape: ListExposuresByRemediationV2Request)
+        o.output = Shapes::ShapeRef.new(shape: ListExposuresByRemediationV2Response)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o[:pager] = Aws::Pager.new(
+          limit_key: "max_results",
+          tokens: {
+            "next_token" => "next_token"
+          }
+        )
+      end)
+
       api.add_operation(:list_finding_aggregators, Seahorse::Model::Operation.new.tap do |o|
         o.name = "ListFindingAggregators"
         o.http_method = "GET"