aws-sdk-securityhub 1.166.0 → 1.168.0

data/sig/types.rbs

@@ -178,14 +178,15 @@ module Aws::SecurityHub
     end
 
     class AutomationRulesActionTypeObjectV2
-      attr_accessor type: ("FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION")
+      attr_accessor type: ("FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION" | "RESOURCE_FIELDS_UPDATE")
       SENSITIVE: []
     end
 
     class AutomationRulesActionV2
-      attr_accessor type: ("FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION")
+      attr_accessor type: ("FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION" | "RESOURCE_FIELDS_UPDATE")
       attr_accessor finding_fields_update: Types::AutomationRulesFindingFieldsUpdateV2
       attr_accessor external_integration_configuration: Types::ExternalIntegrationConfiguration
+      attr_accessor resource_fields_update: Types::AutomationRulesResourceFieldsUpdateV2
       SENSITIVE: []
     end
 
@@ -295,6 +296,11 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class AutomationRulesResourceFieldsUpdateV2
+      attr_accessor criticality: ("Very High" | "High" | "Medium" | "Low" | "Unknown")
+      SENSITIVE: []
+    end
+
     class AvailabilityZone
       attr_accessor zone_name: ::String
       attr_accessor subnet_id: ::String
@@ -4917,6 +4923,17 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class CancelExportJobV2Request
+      attr_accessor export_job_id: ::String
+      SENSITIVE: []
+    end
+
+    class CancelExportJobV2Response
+      attr_accessor export_job_id: ::String
+      attr_accessor status: ("RUNNING" | "SUCCEEDED" | "FAILED" | "CANCELLED")
+      SENSITIVE: []
+    end
+
     class Cell
       attr_accessor column: ::Integer
       attr_accessor row: ::Integer
@@ -5260,15 +5277,24 @@ module Aws::SecurityHub
 
     class Criteria
       attr_accessor ocsf_finding_criteria: Types::OcsfFindingFilters
+      attr_accessor resource_criteria: Types::ResourcesFilters
       attr_accessor unknown: untyped
       SENSITIVE: []
 
       class OcsfFindingCriteria < Criteria
       end
+      class ResourceCriteria < Criteria
+      end
       class Unknown < Criteria
       end
     end
 
+    class CriticalitySource
+      attr_accessor source: ("AutomationRule" | "ResourceName" | "TagInference")
+      attr_accessor reason: ::String
+      SENSITIVE: []
+    end
+
     class CspmConnectorSummary
       attr_accessor connector_arn: ::String
       attr_accessor connector_id: ::String
@@ -5711,6 +5737,59 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class ExportDestination
+      attr_accessor s3: Types::S3ExportDestination
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class S3 < ExportDestination
+      end
+      class Unknown < ExportDestination
+      end
+    end
+
+    class ExportOutput
+      attr_accessor findings: Types::FindingsOutput
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class Findings < ExportOutput
+      end
+      class Unknown < ExportOutput
+      end
+    end
+
+    class ExportOutputSummary
+      attr_accessor findings: Types::FindingsOutputSummary
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class Findings < ExportOutputSummary
+      end
+      class Unknown < ExportOutputSummary
+      end
+    end
+
+    class ExportScopes
+      attr_accessor aws_organizations: ::Array[Types::AwsOrganizationScope]
+      SENSITIVE: []
+    end
+
+    class ExportSummary
+      attr_accessor export_job_id: ::String
+      attr_accessor name: ::String
+      attr_accessor status: ("RUNNING" | "SUCCEEDED" | "FAILED" | "CANCELLED")
+      attr_accessor data_type: ("FINDINGS")
+      attr_accessor output_configuration: Types::ExportOutputSummary
+      attr_accessor scopes: Types::ExportScopes
+      attr_accessor destination: Types::ExportDestination
+      attr_accessor failure_code: ("ACCESS_DENIED" | "RESOURCE_NOT_FOUND" | "INTERNAL_ERROR")
+      attr_accessor failure_message: ::String
+      attr_accessor started_at: ::Time
+      attr_accessor ended_at: ::Time
+      SENSITIVE: []
+    end
+
     class ExposureFinding
       attr_accessor metadata_uid: ::String
       attr_accessor title: ::String
@@ -5787,6 +5866,18 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class FindingsOutput
+      attr_accessor format: ("CSV" | "OCSF_JSON")
+      attr_accessor filters: Types::OcsfFindingFilters
+      attr_accessor selected_fields: ::Array[("metadata.uid" | "activity_name" | "cloud.account.name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.traits.category" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.feature.uid" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.cvss.vendor_name" | "vulnerabilities.cve.cvss.version" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "vendor_attributes.severity" | "activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count" | "evidences.api.response.code" | "evidences.dst_endpoint.autonomous_system.number" | "evidences.dst_endpoint.port" | "evidences.src_endpoint.autonomous_system.number" | "evidences.src_endpoint.port" | "resources.image.in_use_count" | "vulnerabilities.cve.cvss.base_score" | "vendor_attributes.severity_id" | "finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt" | "resources.image.created_time_dt" | "resources.image.last_used_time_dt" | "resources.modified_time_dt" | "compliance.assessments.meets_criteria" | "vulnerabilities.is_exploit_available" | "vulnerabilities.is_fix_available" | "resources.tags" | "compliance.control_parameters" | "databucket.tags" | "finding_info.tags" | "evidences.dst_endpoint.ip" | "evidences.src_endpoint.ip")]
+      SENSITIVE: []
+    end
+
+    class FindingsOutputSummary
+      attr_accessor format: ("CSV" | "OCSF_JSON")
+      SENSITIVE: []
+    end
+
     class FindingsTrendsCompositeFilter
       attr_accessor string_filters: ::Array[Types::FindingsTrendsStringFilter]
       attr_accessor nested_composite_filters: ::Array[Types::FindingsTrendsCompositeFilter]
@@ -5986,6 +6077,26 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class GetExportJobV2Request
+      attr_accessor export_job_id: ::String
+      SENSITIVE: []
+    end
+
+    class GetExportJobV2Response
+      attr_accessor export_job_id: ::String
+      attr_accessor name: ::String
+      attr_accessor status: ("RUNNING" | "SUCCEEDED" | "FAILED" | "CANCELLED")
+      attr_accessor data_type: ("FINDINGS")
+      attr_accessor output_configuration: Types::ExportOutput
+      attr_accessor scopes: Types::ExportScopes
+      attr_accessor destination: Types::ExportDestination
+      attr_accessor failure_code: ("ACCESS_DENIED" | "RESOURCE_NOT_FOUND" | "INTERNAL_ERROR")
+      attr_accessor failure_message: ::String
+      attr_accessor started_at: ::Time
+      attr_accessor ended_at: ::Time
+      SENSITIVE: []
+    end
+
     class GetFindingAggregatorRequest
       attr_accessor finding_aggregator_arn: ::String
       SENSITIVE: []
@@ -6218,7 +6329,7 @@ module Aws::SecurityHub
 
     class GroupByRule
       attr_accessor filters: Types::OcsfFindingFilters
-      attr_accessor group_by_field: ("activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.name" | "compliance.status" | "compliance.control" | "finding_info.title" | "finding_info.related_events.traits.category" | "finding_info.types" | "metadata.product.name" | "metadata.product.uid" | "resources.type" | "resources.cloud_partition" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.uid" | "severity" | "status" | "vulnerabilities.fix_coverage" | "class_name" | "vulnerabilities.affected_packages.name" | "finding_info.analytic.name" | "compliance.standards" | "cloud.account.name" | "vendor_attributes.severity" | "metadata.product.vendor_name")
+      attr_accessor group_by_field: ("activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.name" | "compliance.status" | "compliance.control" | "finding_info.title" | "finding_info.related_events.traits.category" | "finding_info.types" | "impact" | "likelihood" | "metadata.product.name" | "metadata.product.uid" | "resources.type" | "resources.cloud_partition" | "resources.criticality" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.uid" | "severity" | "status" | "vulnerabilities.fix_coverage" | "class_name" | "vulnerabilities.affected_packages.name" | "finding_info.analytic.name" | "compliance.standards" | "cloud.account.name" | "vendor_attributes.severity" | "metadata.product.vendor_name")
       SENSITIVE: []
     end
 
@@ -6500,6 +6611,20 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class ListExportJobsV2Request
+      attr_accessor status: ("RUNNING" | "SUCCEEDED" | "FAILED" | "CANCELLED")
+      attr_accessor data_type: ("FINDINGS")
+      attr_accessor max_results: ::Integer
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class ListExportJobsV2Response
+      attr_accessor items: ::Array[Types::ExportSummary]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class ListExposuresByRemediationV2Request
       attr_accessor target_uid: ::String
       attr_accessor max_results: ::Integer
@@ -6803,7 +6928,7 @@ module Aws::SecurityHub
     end
 
     class OcsfStringFilter
-      attr_accessor field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.traits.category" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name" | "vendor_attributes.severity")
+      attr_accessor field_name: ("metadata.uid" | "activity_name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.traits.category" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "impact" | "likelihood" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.criticality" | "resources.name" | "resources.owner.account.uid" | "resources.owner.org.uid" | "resources.owner.account.name" | "resources.provider" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name" | "databucket.encryption_details.algorithm" | "databucket.encryption_details.key_uid" | "databucket.file.data_classifications.classifier_details.type" | "evidences.actor.user.account.uid" | "evidences.api.operation" | "evidences.api.response.error_message" | "evidences.api.service.name" | "evidences.connection_info.direction" | "evidences.connection_info.protocol_name" | "evidences.dst_endpoint.autonomous_system.name" | "evidences.dst_endpoint.location.city" | "evidences.dst_endpoint.location.country" | "evidences.src_endpoint.autonomous_system.name" | "evidences.src_endpoint.hostname" | "evidences.src_endpoint.location.city" | "evidences.src_endpoint.location.country" | "finding_info.analytic.name" | "malware.name" | "malware_scan_info.uid" | "malware.severity" | "resources.cloud_function.layers.uid_alt" | "resources.cloud_function.runtime" | "resources.cloud_function.user.uid" | "resources.device.encryption_details.key_uid" | "resources.device.image.uid" | "resources.image.architecture" | "resources.image.registry_uid" | "resources.image.repository_name" | "resources.image.uid" | "resources.subnet_info.uid" | "resources.vpc_uid" | "vulnerabilities.affected_code.file.path" | "vulnerabilities.affected_packages.name" | "vulnerabilities.cve.epss.score" | "vulnerabilities.cve.uid" | "vulnerabilities.related_vulnerabilities" | "cloud.account.name" | "vendor_attributes.severity")
       attr_accessor filter: Types::StringFilter
       SENSITIVE: []
     end
@@ -7364,7 +7489,7 @@ module Aws::SecurityHub
     end
 
     class ResourceGroupByRule
-      attr_accessor group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")
+      attr_accessor group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId" | "ResourceCriticality")
       attr_accessor filters: Types::ResourcesFilters
       SENSITIVE: []
     end
@@ -7424,6 +7549,8 @@ module Aws::SecurityHub
       attr_accessor resource_sub_category: ("Model" | "ModelServing" | "Agent" | "AgentFramework" | "AgentToolsAndIdentity" | "SafetyAndGuardrail" | "KnowledgeAndData" | "OrchestrationAndPipeline" | "ExternalEndpoint" | "Development" | "Other")
       attr_accessor discovery_type: ("Managed" | "SelfHosted")
       attr_accessor resource_info: Types::ResourceInfo
+      attr_accessor resource_criticality: ("Very High" | "High" | "Medium" | "Low" | "Unknown")
+      attr_accessor criticality_sources: ::Array[Types::CriticalitySource]
       SENSITIVE: []
     end
 
@@ -7490,7 +7617,7 @@ module Aws::SecurityHub
     end
 
     class ResourcesStringFilter
-      attr_accessor field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")
+      attr_accessor field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId" | "ResourceCriticality")
       attr_accessor filter: Types::StringFilter
       SENSITIVE: []
     end
@@ -7673,6 +7800,13 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class S3ExportDestination
+      attr_accessor bucket_arn: ::String
+      attr_accessor kms_key_arn: ::String
+      attr_accessor object_prefix: ::String
+      SENSITIVE: []
+    end
+
     class SecurityControl
       attr_accessor security_control_id: ::String
       attr_accessor security_control_arn: ::String
@@ -7960,6 +8094,20 @@ module Aws::SecurityHub
     class StartConfigurationPolicyDisassociationResponse < Aws::EmptyStructure
     end
 
+    class StartExportJobV2Request
+      attr_accessor name: ::String
+      attr_accessor destination: Types::ExportDestination
+      attr_accessor output_configuration: Types::ExportOutput
+      attr_accessor scopes: Types::ExportScopes
+      attr_accessor client_token: ::String
+      SENSITIVE: []
+    end
+
+    class StartExportJobV2Response
+      attr_accessor export_job_id: ::String
+      SENSITIVE: []
+    end
+
     class StatelessCustomActionDefinition
       attr_accessor publish_metric_action: Types::StatelessCustomPublishMetricAction
       SENSITIVE: []

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityhub
 version: !ruby/object:Gem::Version
-  version: 1.166.0
+  version: 1.168.0
 platform: ruby
 authors:
 - Amazon Web Services