aws-sdk-securityhub 1.166.0 → 1.168.0

data/lib/aws-sdk-securityhub.rb

@@ -54,7 +54,7 @@ module Aws::SecurityHub
   autoload :EndpointProvider, 'aws-sdk-securityhub/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityhub/endpoints'
 
-  GEM_VERSION = '1.166.0'
+  GEM_VERSION = '1.168.0'
 
 end
 

data/sig/client.rbs

@@ -4109,6 +4109,17 @@ module Aws
                                                        ) -> _BatchUpdateStandardsControlAssociationsResponseSuccess
                                                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _BatchUpdateStandardsControlAssociationsResponseSuccess
 
+      interface _CancelExportJobV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::CancelExportJobV2Response]
+        def export_job_id: () -> ::String
+        def status: () -> ("RUNNING" | "SUCCEEDED" | "FAILED" | "CANCELLED")
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityHub/Client.html#cancel_export_job_v2-instance_method
+      def cancel_export_job_v2: (
+                                  export_job_id: ::String
+                                ) -> _CancelExportJobV2ResponseSuccess
+                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CancelExportJobV2ResponseSuccess
+
       interface _CreateActionTargetResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::CreateActionTargetResponse]
         def action_target_arn: () -> ::String
@@ -4763,6 +4774,26 @@ module Aws
                                  ) -> _GetEnabledStandardsResponseSuccess
                                | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetEnabledStandardsResponseSuccess
 
+      interface _GetExportJobV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetExportJobV2Response]
+        def export_job_id: () -> ::String
+        def name: () -> ::String
+        def status: () -> ("RUNNING" | "SUCCEEDED" | "FAILED" | "CANCELLED")
+        def data_type: () -> ("FINDINGS")
+        def output_configuration: () -> Types::ExportOutput
+        def scopes: () -> Types::ExportScopes
+        def destination: () -> Types::ExportDestination
+        def failure_code: () -> ("ACCESS_DENIED" | "RESOURCE_NOT_FOUND" | "INTERNAL_ERROR")
+        def failure_message: () -> ::String
+        def started_at: () -> ::Time
+        def ended_at: () -> ::Time
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityHub/Client.html#get_export_job_v2-instance_method
+      def get_export_job_v2: (
+                               export_job_id: ::String
+                             ) -> _GetExportJobV2ResponseSuccess
+                           | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetExportJobV2ResponseSuccess
+
       interface _GetFindingAggregatorResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetFindingAggregatorResponse]
         def finding_aggregator_arn: () -> ::String
@@ -4803,7 +4834,7 @@ module Aws
                                        group_by_rules: Array[
                                          {
                                            filters: Params::ocsf_finding_filters?,
-                                           group_by_field: ("activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.name" | "compliance.status" | "compliance.control" | "finding_info.title" | "finding_info.related_events.traits.category" | "finding_info.types" | "metadata.product.name" | "metadata.product.uid" | "resources.type" | "resources.cloud_partition" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.uid" | "severity" | "status" | "vulnerabilities.fix_coverage" | "class_name" | "vulnerabilities.affected_packages.name" | "finding_info.analytic.name" | "compliance.standards" | "cloud.account.name" | "vendor_attributes.severity" | "metadata.product.vendor_name")
+                                           group_by_field: ("activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.name" | "compliance.status" | "compliance.control" | "finding_info.title" | "finding_info.related_events.traits.category" | "finding_info.types" | "impact" | "likelihood" | "metadata.product.name" | "metadata.product.uid" | "resources.type" | "resources.cloud_partition" | "resources.criticality" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.uid" | "severity" | "status" | "vulnerabilities.fix_coverage" | "class_name" | "vulnerabilities.affected_packages.name" | "finding_info.analytic.name" | "compliance.standards" | "cloud.account.name" | "vendor_attributes.severity" | "metadata.product.vendor_name")
                                          }
                                        ],
                                        ?scopes: {
@@ -4992,7 +5023,7 @@ module Aws
       def get_resources_statistics_v2: (
                                          group_by_rules: Array[
                                            {
-                                             group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId"),
+                                             group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId" | "ResourceCriticality"),
                                              filters: Params::resources_filters?
                                            }
                                          ],
@@ -5184,6 +5215,20 @@ module Aws
                                             ) -> _ListEnabledProductsForImportResponseSuccess
                                           | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListEnabledProductsForImportResponseSuccess
 
+      interface _ListExportJobsV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::ListExportJobsV2Response]
+        def items: () -> ::Array[Types::ExportSummary]
+        def next_token: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityHub/Client.html#list_export_jobs_v2-instance_method
+      def list_export_jobs_v2: (
+                                 ?status: ("RUNNING" | "SUCCEEDED" | "FAILED" | "CANCELLED"),
+                                 ?data_type: ("FINDINGS"),
+                                 ?max_results: ::Integer,
+                                 ?next_token: ::String
+                               ) -> _ListExportJobsV2ResponseSuccess
+                             | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListExportJobsV2ResponseSuccess
+
       interface _ListExposuresByRemediationV2ResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::ListExposuresByRemediationV2Response]
         def items: () -> ::Array[Types::ExposureFinding]
@@ -5350,6 +5395,39 @@ module Aws
                                                      ) -> _StartConfigurationPolicyDisassociationResponseSuccess
                                                    | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _StartConfigurationPolicyDisassociationResponseSuccess
 
+      interface _StartExportJobV2ResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::StartExportJobV2Response]
+        def export_job_id: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityHub/Client.html#start_export_job_v2-instance_method
+      def start_export_job_v2: (
+                                 ?name: ::String,
+                                 destination: {
+                                   s3: {
+                                     bucket_arn: ::String,
+                                     kms_key_arn: ::String,
+                                     object_prefix: ::String?
+                                   }?
+                                 },
+                                 output_configuration: {
+                                   findings: {
+                                     format: ("CSV" | "OCSF_JSON"),
+                                     filters: Params::ocsf_finding_filters?,
+                                     selected_fields: Array[("metadata.uid" | "activity_name" | "cloud.account.name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.traits.category" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.feature.uid" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.cvss.vendor_name" | "vulnerabilities.cve.cvss.version" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "vendor_attributes.severity" | "activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count" | "evidences.api.response.code" | "evidences.dst_endpoint.autonomous_system.number" | "evidences.dst_endpoint.port" | "evidences.src_endpoint.autonomous_system.number" | "evidences.src_endpoint.port" | "resources.image.in_use_count" | "vulnerabilities.cve.cvss.base_score" | "vendor_attributes.severity_id" | "finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt" | "resources.image.created_time_dt" | "resources.image.last_used_time_dt" | "resources.modified_time_dt" | "compliance.assessments.meets_criteria" | "vulnerabilities.is_exploit_available" | "vulnerabilities.is_fix_available" | "resources.tags" | "compliance.control_parameters" | "databucket.tags" | "finding_info.tags" | "evidences.dst_endpoint.ip" | "evidences.src_endpoint.ip")]?
+                                   }?
+                                 },
+                                 ?scopes: {
+                                   aws_organizations: Array[
+                                     {
+                                       organization_id: ::String?,
+                                       organizational_unit_id: ::String?
+                                     }
+                                   ]?
+                                 },
+                                 ?client_token: ::String
+                               ) -> _StartExportJobV2ResponseSuccess
+                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _StartExportJobV2ResponseSuccess
+
       interface _TagResourceResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::TagResourceResponse]
       end

data/sig/params.rbs

@@ -549,14 +549,22 @@ module Aws
       composite_operator: ("AND" | "OR")?
     }
 
+      type resources_filters = {
+      composite_filters: Array[
+        Params::resources_composite_filter
+      ]?,
+      composite_operator: ("AND" | "OR")?
+    }
+
       type criteria = {
-      ocsf_finding_criteria: Params::ocsf_finding_filters?
+      ocsf_finding_criteria: Params::ocsf_finding_filters?,
+      resource_criteria: Params::resources_filters?
     }
 
       type composite_filter = {
       string_filters: Array[
         {
-          field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.traits.category" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name" | "vendor_attributes.severity")?,
+          field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.traits.category" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "impact" | "likelihood" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.criticality" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name" | "vendor_attributes.severity")?,
           filter: {
             value: ::String?,
             comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -592,7 +600,7 @@ module Aws
         {
           string_filters: Array[
             {
-              field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.traits.category" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name" | "vendor_attributes.severity")?,
+              field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.traits.category" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "impact" | "likelihood" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.criticality" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name" | "vendor_attributes.severity")?,
               filter: {
                 value: ::String?,
                 comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -656,8 +664,79 @@ module Aws
       }?
     }
 
+      type resources_composite_filter = {
+      string_filters: Array[
+        {
+          field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId" | "ResourceCriticality")?,
+          filter: {
+            value: ::String?,
+            comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
+          }?
+        }
+      ]?,
+      date_filters: Array[
+        Params::resources_date_filter
+      ]?,
+      number_filters: Array[
+        Params::resources_number_filter
+      ]?,
+      map_filters: Array[
+        Params::resources_map_filter
+      ]?,
+      nested_composite_filters: Array[
+        {
+          string_filters: Array[
+            {
+              field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId" | "ResourceCriticality")?,
+              filter: {
+                value: ::String?,
+                comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
+              }?
+            }
+          ]?,
+          date_filters: Array[
+            Params::resources_date_filter
+          ]?,
+          number_filters: Array[
+            Params::resources_number_filter
+          ]?,
+          map_filters: Array[
+            Params::resources_map_filter
+          ]?,
+          nested_composite_filters: untyped?,
+          operator: ("AND" | "OR")?
+        }
+      ]?,
+      operator: ("AND" | "OR")?
+    }
+
+      type resources_date_filter = {
+      field_name: ("ResourceDetailCaptureTime" | "ResourceCreationTime")?,
+      filter: Params::date_filter?
+    }
+
+      type resources_number_filter = {
+      field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown" | "ResourceInfo.AIDetails.SelfHostedAIModelResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount" | "ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount")?,
+      filter: {
+        gte: ::Float?,
+        lte: ::Float?,
+        eq: ::Float?,
+        gt: ::Float?,
+        lt: ::Float?
+      }?
+    }
+
+      type resources_map_filter = {
+      field_name: ("ResourceTags")?,
+      filter: {
+        key: ::String?,
+        value: ::String?,
+        comparison: ("EQUALS" | "NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS")?
+      }?
+    }
+
       type automation_rules_action_v2 = {
-      type: ("FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION"),
+      type: ("FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION" | "RESOURCE_FIELDS_UPDATE"),
       finding_fields_update: {
         severity_id: ::Integer?,
         comment: ::String?,
@@ -665,6 +744,9 @@ module Aws
       }?,
       external_integration_configuration: {
         connector_arn: ::String?
+      }?,
+      resource_fields_update: {
+        criticality: ("Very High" | "High" | "Medium" | "Low" | "Unknown")
       }?
     }
 
@@ -1382,84 +1464,6 @@ module Aws
       operator: ("AND" | "OR")?
     }
 
-      type resources_filters = {
-      composite_filters: Array[
-        Params::resources_composite_filter
-      ]?,
-      composite_operator: ("AND" | "OR")?
-    }
-
-      type resources_composite_filter = {
-      string_filters: Array[
-        {
-          field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")?,
-          filter: {
-            value: ::String?,
-            comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
-          }?
-        }
-      ]?,
-      date_filters: Array[
-        Params::resources_date_filter
-      ]?,
-      number_filters: Array[
-        Params::resources_number_filter
-      ]?,
-      map_filters: Array[
-        Params::resources_map_filter
-      ]?,
-      nested_composite_filters: Array[
-        {
-          string_filters: Array[
-            {
-              field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")?,
-              filter: {
-                value: ::String?,
-                comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
-              }?
-            }
-          ]?,
-          date_filters: Array[
-            Params::resources_date_filter
-          ]?,
-          number_filters: Array[
-            Params::resources_number_filter
-          ]?,
-          map_filters: Array[
-            Params::resources_map_filter
-          ]?,
-          nested_composite_filters: untyped?,
-          operator: ("AND" | "OR")?
-        }
-      ]?,
-      operator: ("AND" | "OR")?
-    }
-
-      type resources_date_filter = {
-      field_name: ("ResourceDetailCaptureTime" | "ResourceCreationTime")?,
-      filter: Params::date_filter?
-    }
-
-      type resources_number_filter = {
-      field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown" | "ResourceInfo.AIDetails.SelfHostedAIModelResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount" | "ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount")?,
-      filter: {
-        gte: ::Float?,
-        lte: ::Float?,
-        eq: ::Float?,
-        gt: ::Float?,
-        lt: ::Float?
-      }?
-    }
-
-      type resources_map_filter = {
-      field_name: ("ResourceTags")?,
-      filter: {
-        key: ::String?,
-        value: ::String?,
-        comparison: ("EQUALS" | "NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS")?
-      }?
-    }
-
       type resources_trends_composite_filter = {
       string_filters: Array[
         {