aws-sdk-securityhub 1.37.0 → 1.42.0

data/lib/aws-sdk-securityhub/errors.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 

data/lib/aws-sdk-securityhub/resource.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 

data/lib/aws-sdk-securityhub/types.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 
@@ -85,6 +85,313 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Provides details about one of the following actions that affects or
+    # that was taken on a resource:
+    #
+    # * A remote IP address issued an AWS API call
+    #
+    # * A DNS request was received
+    #
+    # * A remote IP address attempted to connect to an EC2 instance
+    #
+    # * A remote IP address attempted a port probe on an EC2 instance
+    #
+    # @note When making an API call, you may pass Action
+    #   data as a hash:
+    #
+    #       {
+    #         action_type: "NonEmptyString",
+    #         network_connection_action: {
+    #           connection_direction: "NonEmptyString",
+    #           remote_ip_details: {
+    #             ip_address_v4: "NonEmptyString",
+    #             organization: {
+    #               asn: 1,
+    #               asn_org: "NonEmptyString",
+    #               isp: "NonEmptyString",
+    #               org: "NonEmptyString",
+    #             },
+    #             country: {
+    #               country_code: "NonEmptyString",
+    #               country_name: "NonEmptyString",
+    #             },
+    #             city: {
+    #               city_name: "NonEmptyString",
+    #             },
+    #             geo_location: {
+    #               lon: 1.0,
+    #               lat: 1.0,
+    #             },
+    #           },
+    #           remote_port_details: {
+    #             port: 1,
+    #             port_name: "NonEmptyString",
+    #           },
+    #           local_port_details: {
+    #             port: 1,
+    #             port_name: "NonEmptyString",
+    #           },
+    #           protocol: "NonEmptyString",
+    #           blocked: false,
+    #         },
+    #         aws_api_call_action: {
+    #           api: "NonEmptyString",
+    #           service_name: "NonEmptyString",
+    #           caller_type: "NonEmptyString",
+    #           remote_ip_details: {
+    #             ip_address_v4: "NonEmptyString",
+    #             organization: {
+    #               asn: 1,
+    #               asn_org: "NonEmptyString",
+    #               isp: "NonEmptyString",
+    #               org: "NonEmptyString",
+    #             },
+    #             country: {
+    #               country_code: "NonEmptyString",
+    #               country_name: "NonEmptyString",
+    #             },
+    #             city: {
+    #               city_name: "NonEmptyString",
+    #             },
+    #             geo_location: {
+    #               lon: 1.0,
+    #               lat: 1.0,
+    #             },
+    #           },
+    #           domain_details: {
+    #             domain: "NonEmptyString",
+    #           },
+    #           affected_resources: {
+    #             "NonEmptyString" => "NonEmptyString",
+    #           },
+    #           first_seen: "NonEmptyString",
+    #           last_seen: "NonEmptyString",
+    #         },
+    #         dns_request_action: {
+    #           domain: "NonEmptyString",
+    #           protocol: "NonEmptyString",
+    #           blocked: false,
+    #         },
+    #         port_probe_action: {
+    #           port_probe_details: [
+    #             {
+    #               local_port_details: {
+    #                 port: 1,
+    #                 port_name: "NonEmptyString",
+    #               },
+    #               local_ip_details: {
+    #                 ip_address_v4: "NonEmptyString",
+    #               },
+    #               remote_ip_details: {
+    #                 ip_address_v4: "NonEmptyString",
+    #                 organization: {
+    #                   asn: 1,
+    #                   asn_org: "NonEmptyString",
+    #                   isp: "NonEmptyString",
+    #                   org: "NonEmptyString",
+    #                 },
+    #                 country: {
+    #                   country_code: "NonEmptyString",
+    #                   country_name: "NonEmptyString",
+    #                 },
+    #                 city: {
+    #                   city_name: "NonEmptyString",
+    #                 },
+    #                 geo_location: {
+    #                   lon: 1.0,
+    #                   lat: 1.0,
+    #                 },
+    #               },
+    #             },
+    #           ],
+    #           blocked: false,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] action_type
+    #   The type of action that was detected. The possible action types are:
+    #
+    #   * `NETWORK_CONNECTION`
+    #
+    #   * `AWS_API_CALL`
+    #
+    #   * `DNS_REQUEST`
+    #
+    #   * `PORT_PROBE`
+    #   @return [String]
+    #
+    # @!attribute [rw] network_connection_action
+    #   Included if `ActionType` is `NETWORK_CONNECTION`. Provides details
+    #   about the network connection that was detected.
+    #   @return [Types::NetworkConnectionAction]
+    #
+    # @!attribute [rw] aws_api_call_action
+    #   Included if `ActionType` is `AWS_API_CALL`. Provides details about
+    #   the API call that was detected.
+    #   @return [Types::AwsApiCallAction]
+    #
+    # @!attribute [rw] dns_request_action
+    #   Included if `ActionType` is `DNS_REQUEST`. Provides details about
+    #   the DNS request that was detected.
+    #   @return [Types::DnsRequestAction]
+    #
+    # @!attribute [rw] port_probe_action
+    #   Included if `ActionType` is `PORT_PROBE`. Provides details about the
+    #   port probe that was detected.
+    #   @return [Types::PortProbeAction]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Action AWS API Documentation
+    #
+    class Action < Struct.new(
+      :action_type,
+      :network_connection_action,
+      :aws_api_call_action,
+      :dns_request_action,
+      :port_probe_action)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides information about the IP address where the scanned port is
+    # located.
+    #
+    # @note When making an API call, you may pass ActionLocalIpDetails
+    #   data as a hash:
+    #
+    #       {
+    #         ip_address_v4: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] ip_address_v4
+    #   The IP address.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ActionLocalIpDetails AWS API Documentation
+    #
+    class ActionLocalIpDetails < Struct.new(
+      :ip_address_v4)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # For `NetworkConnectionAction` and `PortProbeDetails`,
+    # `LocalPortDetails` provides information about the local port that was
+    # involved in the action.
+    #
+    # @note When making an API call, you may pass ActionLocalPortDetails
+    #   data as a hash:
+    #
+    #       {
+    #         port: 1,
+    #         port_name: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] port
+    #   The number of the port.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] port_name
+    #   The port name of the local connection.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ActionLocalPortDetails AWS API Documentation
+    #
+    class ActionLocalPortDetails < Struct.new(
+      :port,
+      :port_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # For `AwsApiAction`, `NetworkConnectionAction`, and `PortProbeAction`,
+    # `RemoteIpDetails` provides information about the remote IP address
+    # that was involved in the action.
+    #
+    # @note When making an API call, you may pass ActionRemoteIpDetails
+    #   data as a hash:
+    #
+    #       {
+    #         ip_address_v4: "NonEmptyString",
+    #         organization: {
+    #           asn: 1,
+    #           asn_org: "NonEmptyString",
+    #           isp: "NonEmptyString",
+    #           org: "NonEmptyString",
+    #         },
+    #         country: {
+    #           country_code: "NonEmptyString",
+    #           country_name: "NonEmptyString",
+    #         },
+    #         city: {
+    #           city_name: "NonEmptyString",
+    #         },
+    #         geo_location: {
+    #           lon: 1.0,
+    #           lat: 1.0,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] ip_address_v4
+    #   The IP address.
+    #   @return [String]
+    #
+    # @!attribute [rw] organization
+    #   The internet service provider (ISP) organization associated with the
+    #   remote IP address.
+    #   @return [Types::IpOrganizationDetails]
+    #
+    # @!attribute [rw] country
+    #   The country where the remote IP address is located.
+    #   @return [Types::Country]
+    #
+    # @!attribute [rw] city
+    #   The city where the remote IP address is located.
+    #   @return [Types::City]
+    #
+    # @!attribute [rw] geo_location
+    #   The coordinates of the location of the remote IP address.
+    #   @return [Types::GeoLocation]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ActionRemoteIpDetails AWS API Documentation
+    #
+    class ActionRemoteIpDetails < Struct.new(
+      :ip_address_v4,
+      :organization,
+      :country,
+      :city,
+      :geo_location)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides information about the remote port that was involved in an
+    # attempted network connection.
+    #
+    # @note When making an API call, you may pass ActionRemotePortDetails
+    #   data as a hash:
+    #
+    #       {
+    #         port: 1,
+    #         port_name: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] port
+    #   The number of the port.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] port_name
+    #   The port name of the remote connection.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ActionRemotePortDetails AWS API Documentation
+    #
+    class ActionRemotePortDetails < Struct.new(
+      :port,
+      :port_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An `ActionTarget` object.
     #
     # @!attribute [rw] action_target_arn
@@ -160,6 +467,120 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Provided if `ActionType` is `AWS_API_CALL`. It provides details about
+    # the API call that was detected.
+    #
+    # @note When making an API call, you may pass AwsApiCallAction
+    #   data as a hash:
+    #
+    #       {
+    #         api: "NonEmptyString",
+    #         service_name: "NonEmptyString",
+    #         caller_type: "NonEmptyString",
+    #         remote_ip_details: {
+    #           ip_address_v4: "NonEmptyString",
+    #           organization: {
+    #             asn: 1,
+    #             asn_org: "NonEmptyString",
+    #             isp: "NonEmptyString",
+    #             org: "NonEmptyString",
+    #           },
+    #           country: {
+    #             country_code: "NonEmptyString",
+    #             country_name: "NonEmptyString",
+    #           },
+    #           city: {
+    #             city_name: "NonEmptyString",
+    #           },
+    #           geo_location: {
+    #             lon: 1.0,
+    #             lat: 1.0,
+    #           },
+    #         },
+    #         domain_details: {
+    #           domain: "NonEmptyString",
+    #         },
+    #         affected_resources: {
+    #           "NonEmptyString" => "NonEmptyString",
+    #         },
+    #         first_seen: "NonEmptyString",
+    #         last_seen: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] api
+    #   The name of the API method that was issued.
+    #   @return [String]
+    #
+    # @!attribute [rw] service_name
+    #   The name of the AWS service that the API method belongs to.
+    #   @return [String]
+    #
+    # @!attribute [rw] caller_type
+    #   Indicates whether the API call originated from a remote IP address
+    #   (`remoteip`) or from a DNS domain (`domain`).
+    #   @return [String]
+    #
+    # @!attribute [rw] remote_ip_details
+    #   Provided if `CallerType` is `remoteIp`. Provides information about
+    #   the remote IP address that the API call originated from.
+    #   @return [Types::ActionRemoteIpDetails]
+    #
+    # @!attribute [rw] domain_details
+    #   Provided if `CallerType` is `domain`. Provides information about the
+    #   DNS domain that the API call originated from.
+    #   @return [Types::AwsApiCallActionDomainDetails]
+    #
+    # @!attribute [rw] affected_resources
+    #   Identifies the resources that were affected by the API call.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] first_seen
+    #   An ISO8601-formatted timestamp that indicates when the API call was
+    #   first observed.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_seen
+    #   An ISO8601-formatted timestamp that indicates when the API call was
+    #   most recently observed.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsApiCallAction AWS API Documentation
+    #
+    class AwsApiCallAction < Struct.new(
+      :api,
+      :service_name,
+      :caller_type,
+      :remote_ip_details,
+      :domain_details,
+      :affected_resources,
+      :first_seen,
+      :last_seen)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provided if `CallerType` is `domain`. It provides information about
+    # the DNS domain that issued the API call.
+    #
+    # @note When making an API call, you may pass AwsApiCallActionDomainDetails
+    #   data as a hash:
+    #
+    #       {
+    #         domain: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] domain
+    #   The name of the DNS domain that issued the API call.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsApiCallActionDomainDetails AWS API Documentation
+    #
+    class AwsApiCallActionDomainDetails < Struct.new(
+      :domain)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains information about settings for logging access for the stage.
     #
     # @note When making an API call, you may pass AwsApiGatewayAccessLogSettings
@@ -3488,6 +3909,19 @@ module Aws::SecurityHub
     #           },
     #         ],
     #         source_dest_check: false,
+    #         ip_v6_addresses: [
+    #           {
+    #             ip_v6_address: "NonEmptyString",
+    #           },
+    #         ],
+    #         private_ip_addresses: [
+    #           {
+    #             private_ip_address: "NonEmptyString",
+    #             private_dns_name: "NonEmptyString",
+    #           },
+    #         ],
+    #         public_dns_name: "NonEmptyString",
+    #         public_ip: "NonEmptyString",
     #       }
     #
     # @!attribute [rw] attachment
@@ -3506,13 +3940,84 @@ module Aws::SecurityHub
     #   Indicates whether traffic to or from the instance is validated.
     #   @return [Boolean]
     #
+    # @!attribute [rw] ip_v6_addresses
+    #   The IPv6 addresses associated with the network interface.
+    #   @return [Array<Types::AwsEc2NetworkInterfaceIpV6AddressDetail>]
+    #
+    # @!attribute [rw] private_ip_addresses
+    #   The private IPv4 addresses associated with the network interface.
+    #   @return [Array<Types::AwsEc2NetworkInterfacePrivateIpAddressDetail>]
+    #
+    # @!attribute [rw] public_dns_name
+    #   The public DNS name of the network interface.
+    #   @return [String]
+    #
+    # @!attribute [rw] public_ip
+    #   The address of the Elastic IP address bound to the network
+    #   interface.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsEc2NetworkInterfaceDetails AWS API Documentation
     #
     class AwsEc2NetworkInterfaceDetails < Struct.new(
       :attachment,
       :network_interface_id,
       :security_groups,
-      :source_dest_check)
+      :source_dest_check,
+      :ip_v6_addresses,
+      :private_ip_addresses,
+      :public_dns_name,
+      :public_ip)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides information about an IPV6 address that is associated with the
+    # network interface.
+    #
+    # @note When making an API call, you may pass AwsEc2NetworkInterfaceIpV6AddressDetail
+    #   data as a hash:
+    #
+    #       {
+    #         ip_v6_address: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] ip_v6_address
+    #   The IPV6 address.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsEc2NetworkInterfaceIpV6AddressDetail AWS API Documentation
+    #
+    class AwsEc2NetworkInterfaceIpV6AddressDetail < Struct.new(
+      :ip_v6_address)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides information about a private IPv4 address that is with the
+    # network interface.
+    #
+    # @note When making an API call, you may pass AwsEc2NetworkInterfacePrivateIpAddressDetail
+    #   data as a hash:
+    #
+    #       {
+    #         private_ip_address: "NonEmptyString",
+    #         private_dns_name: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] private_ip_address
+    #   The IP address.
+    #   @return [String]
+    #
+    # @!attribute [rw] private_dns_name
+    #   The private DNS name for the IP address.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsEc2NetworkInterfacePrivateIpAddressDetail AWS API Documentation
+    #
+    class AwsEc2NetworkInterfacePrivateIpAddressDetail < Struct.new(
+      :private_ip_address,
+      :private_dns_name)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6884,6 +7389,8 @@ module Aws::SecurityHub
     #   @return [String]
     #
     # @!attribute [rw] engine
+    #   The name of the database engine that you want to use for this DB
+    #   instance.
     #   @return [String]
     #
     # @!attribute [rw] allocated_storage
@@ -7667,6 +8174,8 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # An option group membership.
+    #
     # @note When making an API call, you may pass AwsRdsDbOptionGroupMembership
     #   data as a hash:
     #
@@ -7676,9 +8185,11 @@ module Aws::SecurityHub
     #       }
     #
     # @!attribute [rw] option_group_name
+    #   The name of the option group.
     #   @return [String]
     #
     # @!attribute [rw] status
+    #   The status of the option group membership.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsRdsDbOptionGroupMembership AWS API Documentation
@@ -7690,6 +8201,8 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Provides information about a parameter group for a DB instance.
+    #
     # @note When making an API call, you may pass AwsRdsDbParameterGroup
     #   data as a hash:
     #
@@ -7699,9 +8212,11 @@ module Aws::SecurityHub
     #       }
     #
     # @!attribute [rw] db_parameter_group_name
+    #   The name of the parameter group.
     #   @return [String]
     #
     # @!attribute [rw] parameter_apply_status
+    #   The status of parameter updates.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsRdsDbParameterGroup AWS API Documentation
@@ -7713,6 +8228,8 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Changes to a DB instance that are currently pending.
+    #
     # @note When making an API call, you may pass AwsRdsDbPendingModifiedValues
     #   data as a hash:
     #
@@ -7743,48 +8260,64 @@ module Aws::SecurityHub
     #       }
     #
     # @!attribute [rw] db_instance_class
+    #   The new DB instance class for the DB instance.
     #   @return [String]
     #
     # @!attribute [rw] allocated_storage
+    #   The new value of the allocated storage for the DB instance.
     #   @return [Integer]
     #
     # @!attribute [rw] master_user_password
+    #   The new master user password for the DB instance.
     #   @return [String]
     #
     # @!attribute [rw] port
+    #   The new port for the DB instance.
     #   @return [Integer]
     #
     # @!attribute [rw] backup_retention_period
+    #   The new backup retention period for the DB instance.
     #   @return [Integer]
     #
     # @!attribute [rw] multi_az
+    #   Indicates that a single Availability Zone DB instance is changing to
+    #   a multiple Availability Zone deployment.
     #   @return [Boolean]
     #
     # @!attribute [rw] engine_version
+    #   The new engine version for the DB instance.
     #   @return [String]
     #
     # @!attribute [rw] license_model
+    #   The new license model value for the DB instance.
     #   @return [String]
     #
     # @!attribute [rw] iops
+    #   The new provisioned IOPS value for the DB instance.
     #   @return [Integer]
     #
     # @!attribute [rw] db_instance_identifier
+    #   The new DB instance identifier for the DB instance.
     #   @return [String]
     #
     # @!attribute [rw] storage_type
+    #   The new storage type for the DB instance.
     #   @return [String]
     #
     # @!attribute [rw] ca_certificate_identifier
+    #   The new CA certificate identifier for the DB instance.
     #   @return [String]
     #
     # @!attribute [rw] db_subnet_group_name
+    #   The name of the new subnet group for the DB instance.
     #   @return [String]
     #
     # @!attribute [rw] pending_cloud_watch_logs_exports
+    #   A list of log types that are being enabled or disabled.
     #   @return [Types::AwsRdsPendingCloudWatchLogsExports]
     #
     # @!attribute [rw] processor_features
+    #   Processor features that are being updated.
     #   @return [Array<Types::AwsRdsDbProcessorFeature>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsRdsDbPendingModifiedValues AWS API Documentation
@@ -7809,6 +8342,8 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # A processor feature.
+    #
     # @note When making an API call, you may pass AwsRdsDbProcessorFeature
     #   data as a hash:
     #
@@ -7818,9 +8353,11 @@ module Aws::SecurityHub
     #       }
     #
     # @!attribute [rw] name
+    #   The name of the processor feature.
     #   @return [String]
     #
     # @!attribute [rw] value
+    #   The value of the processor feature.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsRdsDbProcessorFeature AWS API Documentation
@@ -7832,6 +8369,8 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Provides details about an Amazon RDS DB cluster snapshot.
+    #
     # @note When making an API call, you may pass AwsRdsDbSnapshotDetails
     #   data as a hash:
     #
@@ -7871,84 +8410,120 @@ module Aws::SecurityHub
     #       }
     #
     # @!attribute [rw] db_snapshot_identifier
+    #   The name or ARN of the DB snapshot that is used to restore the DB
+    #   instance.
     #   @return [String]
     #
     # @!attribute [rw] db_instance_identifier
+    #   A name for the DB instance.
     #   @return [String]
     #
     # @!attribute [rw] snapshot_create_time
+    #   When the snapshot was taken in Coordinated Universal Time (UTC).
     #   @return [String]
     #
     # @!attribute [rw] engine
+    #   The name of the database engine to use for this DB instance.
     #   @return [String]
     #
     # @!attribute [rw] allocated_storage
+    #   The amount of storage (in gigabytes) to be initially allocated for
+    #   the database instance.
     #   @return [Integer]
     #
     # @!attribute [rw] status
+    #   The status of this DB snapshot.
     #   @return [String]
     #
     # @!attribute [rw] port
+    #   The port that the database engine was listening on at the time of
+    #   the snapshot.
     #   @return [Integer]
     #
     # @!attribute [rw] availability_zone
+    #   Specifies the name of the Availability Zone in which the DB instance
+    #   was located at the time of the DB snapshot.
     #   @return [String]
     #
     # @!attribute [rw] vpc_id
+    #   The VPC ID associated with the DB snapshot.
     #   @return [String]
     #
     # @!attribute [rw] instance_create_time
+    #   Specifies the time in Coordinated Universal Time (UTC) when the DB
+    #   instance, from which the snapshot was taken, was created.
     #   @return [String]
     #
     # @!attribute [rw] master_username
+    #   The master user name for the DB snapshot.
     #   @return [String]
     #
     # @!attribute [rw] engine_version
+    #   The version of the database engine.
     #   @return [String]
     #
     # @!attribute [rw] license_model
+    #   License model information for the restored DB instance.
     #   @return [String]
     #
     # @!attribute [rw] snapshot_type
+    #   The type of the DB snapshot.
     #   @return [String]
     #
     # @!attribute [rw] iops
+    #   The provisioned IOPS (I/O operations per second) value of the DB
+    #   instance at the time of the snapshot.
     #   @return [Integer]
     #
     # @!attribute [rw] option_group_name
+    #   The option group name for the DB snapshot.
     #   @return [String]
     #
     # @!attribute [rw] percent_progress
+    #   The percentage of the estimated data that has been transferred.
     #   @return [Integer]
     #
     # @!attribute [rw] source_region
+    #   The AWS Region that the DB snapshot was created in or copied from.
     #   @return [String]
     #
     # @!attribute [rw] source_db_snapshot_identifier
+    #   The DB snapshot ARN that the DB snapshot was copied from.
     #   @return [String]
     #
     # @!attribute [rw] storage_type
+    #   The storage type associated with the DB snapshot.
     #   @return [String]
     #
     # @!attribute [rw] tde_credential_arn
+    #   The ARN from the key store with which to associate the instance for
+    #   TDE encryption.
     #   @return [String]
     #
     # @!attribute [rw] encrypted
+    #   Whether the DB snapshot is encrypted.
     #   @return [Boolean]
     #
     # @!attribute [rw] kms_key_id
+    #   If `Encrypted` is `true`, the AWS KMS key identifier for the
+    #   encrypted DB snapshot.
     #   @return [String]
     #
     # @!attribute [rw] timezone
+    #   The time zone of the DB snapshot.
     #   @return [String]
     #
     # @!attribute [rw] iam_database_authentication_enabled
+    #   Whether mapping of IAM accounts to database accounts is enabled.
     #   @return [Boolean]
     #
     # @!attribute [rw] processor_features
+    #   The number of CPU cores and the number of threads per core for the
+    #   DB instance class of the DB instance.
     #   @return [Array<Types::AwsRdsDbProcessorFeature>]
     #
     # @!attribute [rw] dbi_resource_id
+    #   The identifier for the source DB instance.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsRdsDbSnapshotDetails AWS API Documentation
@@ -9190,6 +9765,51 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # provides information about the Amazon S3 Public Access Block
+    # configuration for accounts.
+    #
+    # @note When making an API call, you may pass AwsS3AccountPublicAccessBlockDetails
+    #   data as a hash:
+    #
+    #       {
+    #         block_public_acls: false,
+    #         block_public_policy: false,
+    #         ignore_public_acls: false,
+    #         restrict_public_buckets: false,
+    #       }
+    #
+    # @!attribute [rw] block_public_acls
+    #   Indicates whether to reject calls to update an S3 bucket if the
+    #   calls include a public access control list (ACL).
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] block_public_policy
+    #   Indicates whether to reject calls to update the access policy for an
+    #   S3 bucket or access point if the policy allows public access.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] ignore_public_acls
+    #   Indicates whether Amazon S3 ignores public ACLs that are associated
+    #   with an S3 bucket.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] restrict_public_buckets
+    #   Indicates whether to restrict access to an access point or S3 bucket
+    #   that has a public policy to only AWS service principals and
+    #   authorized users within the S3 bucket owner's account.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsS3AccountPublicAccessBlockDetails AWS API Documentation
+    #
+    class AwsS3AccountPublicAccessBlockDetails < Struct.new(
+      :block_public_acls,
+      :block_public_policy,
+      :ignore_public_acls,
+      :restrict_public_buckets)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The details of an Amazon S3 bucket.
     #
     # @note When making an API call, you may pass AwsS3BucketDetails
@@ -9209,6 +9829,12 @@ module Aws::SecurityHub
     #             },
     #           ],
     #         },
+    #         public_access_block_configuration: {
+    #           block_public_acls: false,
+    #           block_public_policy: false,
+    #           ignore_public_acls: false,
+    #           restrict_public_buckets: false,
+    #         },
     #       }
     #
     # @!attribute [rw] owner_id
@@ -9235,13 +9861,19 @@ module Aws::SecurityHub
     #   The encryption rules that are applied to the S3 bucket.
     #   @return [Types::AwsS3BucketServerSideEncryptionConfiguration]
     #
+    # @!attribute [rw] public_access_block_configuration
+    #   Provides information about the Amazon S3 Public Access Block
+    #   configuration for the S3 bucket.
+    #   @return [Types::AwsS3AccountPublicAccessBlockDetails]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsS3BucketDetails AWS API Documentation
     #
     class AwsS3BucketDetails < Struct.new(
       :owner_id,
       :owner_name,
       :created_at,
-      :server_side_encryption_configuration)
+      :server_side_encryption_configuration,
+      :public_access_block_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -9502,12 +10134,12 @@ module Aws::SecurityHub
     #         product_arn: "NonEmptyString", # required
     #         generator_id: "NonEmptyString", # required
     #         aws_account_id: "NonEmptyString", # required
-    #         types: ["NonEmptyString"], # required
+    #         types: ["NonEmptyString"],
     #         first_observed_at: "NonEmptyString",
     #         last_observed_at: "NonEmptyString",
     #         created_at: "NonEmptyString", # required
     #         updated_at: "NonEmptyString", # required
-    #         severity: { # required
+    #         severity: {
     #           product: 1.0,
     #           label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
     #           normalized: 1,
@@ -9631,12 +10263,136 @@ module Aws::SecurityHub
     #             tags: {
     #               "NonEmptyString" => "NonEmptyString",
     #             },
-    #             details: {
-    #               aws_auto_scaling_auto_scaling_group: {
-    #                 launch_configuration_name: "NonEmptyString",
-    #                 load_balancer_names: ["NonEmptyString"],
-    #                 health_check_type: "NonEmptyString",
-    #                 health_check_grace_period: 1,
+    #             data_classification: {
+    #               detailed_results_location: "NonEmptyString",
+    #               result: {
+    #                 mime_type: "NonEmptyString",
+    #                 size_classified: 1,
+    #                 additional_occurrences: false,
+    #                 status: {
+    #                   code: "NonEmptyString",
+    #                   reason: "NonEmptyString",
+    #                 },
+    #                 sensitive_data: [
+    #                   {
+    #                     category: "NonEmptyString",
+    #                     detections: [
+    #                       {
+    #                         count: 1,
+    #                         type: "NonEmptyString",
+    #                         occurrences: {
+    #                           line_ranges: [
+    #                             {
+    #                               start: 1,
+    #                               end: 1,
+    #                               start_column: 1,
+    #                             },
+    #                           ],
+    #                           offset_ranges: [
+    #                             {
+    #                               start: 1,
+    #                               end: 1,
+    #                               start_column: 1,
+    #                             },
+    #                           ],
+    #                           pages: [
+    #                             {
+    #                               page_number: 1,
+    #                               line_range: {
+    #                                 start: 1,
+    #                                 end: 1,
+    #                                 start_column: 1,
+    #                               },
+    #                               offset_range: {
+    #                                 start: 1,
+    #                                 end: 1,
+    #                                 start_column: 1,
+    #                               },
+    #                             },
+    #                           ],
+    #                           records: [
+    #                             {
+    #                               json_path: "NonEmptyString",
+    #                               record_index: 1,
+    #                             },
+    #                           ],
+    #                           cells: [
+    #                             {
+    #                               column: 1,
+    #                               row: 1,
+    #                               column_name: "NonEmptyString",
+    #                               cell_reference: "NonEmptyString",
+    #                             },
+    #                           ],
+    #                         },
+    #                       },
+    #                     ],
+    #                     total_count: 1,
+    #                   },
+    #                 ],
+    #                 custom_data_identifiers: {
+    #                   detections: [
+    #                     {
+    #                       count: 1,
+    #                       arn: "NonEmptyString",
+    #                       name: "NonEmptyString",
+    #                       occurrences: {
+    #                         line_ranges: [
+    #                           {
+    #                             start: 1,
+    #                             end: 1,
+    #                             start_column: 1,
+    #                           },
+    #                         ],
+    #                         offset_ranges: [
+    #                           {
+    #                             start: 1,
+    #                             end: 1,
+    #                             start_column: 1,
+    #                           },
+    #                         ],
+    #                         pages: [
+    #                           {
+    #                             page_number: 1,
+    #                             line_range: {
+    #                               start: 1,
+    #                               end: 1,
+    #                               start_column: 1,
+    #                             },
+    #                             offset_range: {
+    #                               start: 1,
+    #                               end: 1,
+    #                               start_column: 1,
+    #                             },
+    #                           },
+    #                         ],
+    #                         records: [
+    #                           {
+    #                             json_path: "NonEmptyString",
+    #                             record_index: 1,
+    #                           },
+    #                         ],
+    #                         cells: [
+    #                           {
+    #                             column: 1,
+    #                             row: 1,
+    #                             column_name: "NonEmptyString",
+    #                             cell_reference: "NonEmptyString",
+    #                           },
+    #                         ],
+    #                       },
+    #                     },
+    #                   ],
+    #                   total_count: 1,
+    #                 },
+    #               },
+    #             },
+    #             details: {
+    #               aws_auto_scaling_auto_scaling_group: {
+    #                 launch_configuration_name: "NonEmptyString",
+    #                 load_balancer_names: ["NonEmptyString"],
+    #                 health_check_type: "NonEmptyString",
+    #                 health_check_grace_period: 1,
     #                 created_time: "NonEmptyString",
     #               },
     #               aws_code_build_project: {
@@ -9741,6 +10497,19 @@ module Aws::SecurityHub
     #                   },
     #                 ],
     #                 source_dest_check: false,
+    #                 ip_v6_addresses: [
+    #                   {
+    #                     ip_v6_address: "NonEmptyString",
+    #                   },
+    #                 ],
+    #                 private_ip_addresses: [
+    #                   {
+    #                     private_ip_address: "NonEmptyString",
+    #                     private_dns_name: "NonEmptyString",
+    #                   },
+    #                 ],
+    #                 public_dns_name: "NonEmptyString",
+    #                 public_ip: "NonEmptyString",
     #               },
     #               aws_ec2_security_group: {
     #                 group_name: "NonEmptyString",
@@ -9919,6 +10688,18 @@ module Aws::SecurityHub
     #                     },
     #                   ],
     #                 },
+    #                 public_access_block_configuration: {
+    #                   block_public_acls: false,
+    #                   block_public_policy: false,
+    #                   ignore_public_acls: false,
+    #                   restrict_public_buckets: false,
+    #                 },
+    #               },
+    #               aws_s3_account_public_access_block: {
+    #                 block_public_acls: false,
+    #                 block_public_policy: false,
+    #                 ignore_public_acls: false,
+    #                 restrict_public_buckets: false,
     #               },
     #               aws_s3_object: {
     #                 last_modified: "NonEmptyString",
@@ -10241,6 +11022,30 @@ module Aws::SecurityHub
     #                 sns_topic_name: "NonEmptyString",
     #                 trail_arn: "NonEmptyString",
     #               },
+    #               aws_ssm_patch_compliance: {
+    #                 patch: {
+    #                   compliance_summary: {
+    #                     status: "NonEmptyString",
+    #                     compliant_critical_count: 1,
+    #                     compliant_high_count: 1,
+    #                     compliant_medium_count: 1,
+    #                     execution_type: "NonEmptyString",
+    #                     non_compliant_critical_count: 1,
+    #                     compliant_informational_count: 1,
+    #                     non_compliant_informational_count: 1,
+    #                     compliant_unspecified_count: 1,
+    #                     non_compliant_low_count: 1,
+    #                     non_compliant_high_count: 1,
+    #                     compliant_low_count: 1,
+    #                     compliance_type: "NonEmptyString",
+    #                     patch_baseline_id: "NonEmptyString",
+    #                     overall_severity: "NonEmptyString",
+    #                     non_compliant_medium_count: 1,
+    #                     non_compliant_unspecified_count: 1,
+    #                     patch_group: "NonEmptyString",
+    #                   },
+    #                 },
+    #               },
     #               aws_certificate_manager_certificate: {
     #                 certificate_authority_arn: "NonEmptyString",
     #                 created_at: "NonEmptyString",
@@ -11017,6 +11822,129 @@ module Aws::SecurityHub
     #           reboot_option: "NonEmptyString",
     #           operation: "NonEmptyString",
     #         },
+    #         action: {
+    #           action_type: "NonEmptyString",
+    #           network_connection_action: {
+    #             connection_direction: "NonEmptyString",
+    #             remote_ip_details: {
+    #               ip_address_v4: "NonEmptyString",
+    #               organization: {
+    #                 asn: 1,
+    #                 asn_org: "NonEmptyString",
+    #                 isp: "NonEmptyString",
+    #                 org: "NonEmptyString",
+    #               },
+    #               country: {
+    #                 country_code: "NonEmptyString",
+    #                 country_name: "NonEmptyString",
+    #               },
+    #               city: {
+    #                 city_name: "NonEmptyString",
+    #               },
+    #               geo_location: {
+    #                 lon: 1.0,
+    #                 lat: 1.0,
+    #               },
+    #             },
+    #             remote_port_details: {
+    #               port: 1,
+    #               port_name: "NonEmptyString",
+    #             },
+    #             local_port_details: {
+    #               port: 1,
+    #               port_name: "NonEmptyString",
+    #             },
+    #             protocol: "NonEmptyString",
+    #             blocked: false,
+    #           },
+    #           aws_api_call_action: {
+    #             api: "NonEmptyString",
+    #             service_name: "NonEmptyString",
+    #             caller_type: "NonEmptyString",
+    #             remote_ip_details: {
+    #               ip_address_v4: "NonEmptyString",
+    #               organization: {
+    #                 asn: 1,
+    #                 asn_org: "NonEmptyString",
+    #                 isp: "NonEmptyString",
+    #                 org: "NonEmptyString",
+    #               },
+    #               country: {
+    #                 country_code: "NonEmptyString",
+    #                 country_name: "NonEmptyString",
+    #               },
+    #               city: {
+    #                 city_name: "NonEmptyString",
+    #               },
+    #               geo_location: {
+    #                 lon: 1.0,
+    #                 lat: 1.0,
+    #               },
+    #             },
+    #             domain_details: {
+    #               domain: "NonEmptyString",
+    #             },
+    #             affected_resources: {
+    #               "NonEmptyString" => "NonEmptyString",
+    #             },
+    #             first_seen: "NonEmptyString",
+    #             last_seen: "NonEmptyString",
+    #           },
+    #           dns_request_action: {
+    #             domain: "NonEmptyString",
+    #             protocol: "NonEmptyString",
+    #             blocked: false,
+    #           },
+    #           port_probe_action: {
+    #             port_probe_details: [
+    #               {
+    #                 local_port_details: {
+    #                   port: 1,
+    #                   port_name: "NonEmptyString",
+    #                 },
+    #                 local_ip_details: {
+    #                   ip_address_v4: "NonEmptyString",
+    #                 },
+    #                 remote_ip_details: {
+    #                   ip_address_v4: "NonEmptyString",
+    #                   organization: {
+    #                     asn: 1,
+    #                     asn_org: "NonEmptyString",
+    #                     isp: "NonEmptyString",
+    #                     org: "NonEmptyString",
+    #                   },
+    #                   country: {
+    #                     country_code: "NonEmptyString",
+    #                     country_name: "NonEmptyString",
+    #                   },
+    #                   city: {
+    #                     city_name: "NonEmptyString",
+    #                   },
+    #                   geo_location: {
+    #                     lon: 1.0,
+    #                     lat: 1.0,
+    #                   },
+    #                 },
+    #               },
+    #             ],
+    #             blocked: false,
+    #           },
+    #         },
+    #         finding_provider_fields: {
+    #           confidence: 1,
+    #           criticality: 1,
+    #           related_findings: [
+    #             {
+    #               product_arn: "NonEmptyString", # required
+    #               id: "NonEmptyString", # required
+    #             },
+    #           ],
+    #           severity: {
+    #             label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
+    #             original: "NonEmptyString",
+    #           },
+    #           types: ["NonEmptyString"],
+    #         },
     #       }
     #
     # @!attribute [rw] schema_version
@@ -11232,6 +12160,17 @@ module Aws::SecurityHub
     #   against a selected compliance standard.
     #   @return [Types::PatchSummary]
     #
+    # @!attribute [rw] action
+    #   Provides details about an action that affects or that was taken on a
+    #   resource.
+    #   @return [Types::Action]
+    #
+    # @!attribute [rw] finding_provider_fields
+    #   In a `BatchImportFindings` request, finding providers use
+    #   `FindingProviderFields` to provide and update their own values for
+    #   confidence, criticality, related findings, severity, and types.
+    #   @return [Types::FindingProviderFields]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsSecurityFinding AWS API Documentation
     #
     class AwsSecurityFinding < Struct.new(
@@ -11268,7 +12207,9 @@ module Aws::SecurityHub
       :related_findings,
       :note,
       :vulnerabilities,
-      :patch_summary)
+      :patch_summary,
+      :action,
+      :finding_provider_fields)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -11837,6 +12778,50 @@ module Aws::SecurityHub
     #             value: "NonEmptyString",
     #           },
     #         ],
+    #         finding_provider_fields_confidence: [
+    #           {
+    #             gte: 1.0,
+    #             lte: 1.0,
+    #             eq: 1.0,
+    #           },
+    #         ],
+    #         finding_provider_fields_criticality: [
+    #           {
+    #             gte: 1.0,
+    #             lte: 1.0,
+    #             eq: 1.0,
+    #           },
+    #         ],
+    #         finding_provider_fields_related_findings_id: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
+    #         finding_provider_fields_related_findings_product_arn: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
+    #         finding_provider_fields_severity_label: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
+    #         finding_provider_fields_severity_original: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
+    #         finding_provider_fields_types: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
     #       }
     #
     # @!attribute [rw] product_arn
@@ -12196,6 +13181,14 @@ module Aws::SecurityHub
     #
     #   * `NEW` - The initial state of a finding, before it is reviewed.
     #
+    #     Security Hub also resets the workflow status from `NOTIFIED` or
+    #     `RESOLVED` to `NEW` in the following cases:
+    #
+    #     * The record state changes from `ARCHIVED` to `ACTIVE`.
+    #
+    #     * The compliance status changes from `PASSED` to either `WARNING`,
+    #       `FAILED`, or `NOT_AVAILABLE`.
+    #
     #   * `NOTIFIED` - Indicates that the resource owner has been notified
     #     about the security issue. Used when the initial reviewer is not
     #     the resource owner, and needs intervention from the resource
@@ -12236,6 +13229,52 @@ module Aws::SecurityHub
     #   A keyword for a finding.
     #   @return [Array<Types::KeywordFilter>]
     #
+    # @!attribute [rw] finding_provider_fields_confidence
+    #   The finding provider value for the finding confidence. Confidence is
+    #   defined as the likelihood that a finding accurately identifies the
+    #   behavior or issue that it was intended to identify.
+    #
+    #   Confidence is scored on a 0-100 basis using a ratio scale, where 0
+    #   means zero percent confidence and 100 means 100 percent confidence.
+    #   @return [Array<Types::NumberFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_criticality
+    #   The finding provider value for the level of importance assigned to
+    #   the resources associated with the findings.
+    #
+    #   A score of 0 means that the underlying resources have no
+    #   criticality, and a score of 100 is reserved for the most critical
+    #   resources.
+    #   @return [Array<Types::NumberFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_related_findings_id
+    #   The finding identifier of a related finding that is identified by
+    #   the finding provider.
+    #   @return [Array<Types::StringFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_related_findings_product_arn
+    #   The ARN of the solution that generated a related finding that is
+    #   identified by the finding provider.
+    #   @return [Array<Types::StringFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_severity_label
+    #   The finding provider value for the severity label.
+    #   @return [Array<Types::StringFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_severity_original
+    #   The finding provider's original value for the severity.
+    #   @return [Array<Types::StringFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_types
+    #   One or more finding types that the finding provider assigned to the
+    #   finding. Uses the format of `namespace/category/classifier` that
+    #   classify a finding.
+    #
+    #   Valid namespace values are: Software and Configuration Checks \|
+    #   TTPs \| Effects \| Unusual Behaviors \| Sensitive Data
+    #   Identifications
+    #   @return [Array<Types::StringFilter>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsSecurityFindingFilters AWS API Documentation
     #
     class AwsSecurityFindingFilters < Struct.new(
@@ -12322,7 +13361,14 @@ module Aws::SecurityHub
       :note_text,
       :note_updated_at,
       :note_updated_by,
-      :keyword)
+      :keyword,
+      :finding_provider_fields_confidence,
+      :finding_provider_fields_criticality,
+      :finding_provider_fields_related_findings_id,
+      :finding_provider_fields_related_findings_product_arn,
+      :finding_provider_fields_severity_label,
+      :finding_provider_fields_severity_original,
+      :finding_provider_fields_types)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -12475,6 +13521,236 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Provides the details about the compliance status for a patch.
+    #
+    # @note When making an API call, you may pass AwsSsmComplianceSummary
+    #   data as a hash:
+    #
+    #       {
+    #         status: "NonEmptyString",
+    #         compliant_critical_count: 1,
+    #         compliant_high_count: 1,
+    #         compliant_medium_count: 1,
+    #         execution_type: "NonEmptyString",
+    #         non_compliant_critical_count: 1,
+    #         compliant_informational_count: 1,
+    #         non_compliant_informational_count: 1,
+    #         compliant_unspecified_count: 1,
+    #         non_compliant_low_count: 1,
+    #         non_compliant_high_count: 1,
+    #         compliant_low_count: 1,
+    #         compliance_type: "NonEmptyString",
+    #         patch_baseline_id: "NonEmptyString",
+    #         overall_severity: "NonEmptyString",
+    #         non_compliant_medium_count: 1,
+    #         non_compliant_unspecified_count: 1,
+    #         patch_group: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] status
+    #   The current patch compliance status.
+    #
+    #   The possible status values are:
+    #
+    #   * `COMPLIANT`
+    #
+    #   * `NON_COMPLIANT`
+    #
+    #   * `UNSPECIFIED_DATA`
+    #   @return [String]
+    #
+    # @!attribute [rw] compliant_critical_count
+    #   For the patches that are compliant, the number that have a severity
+    #   of `CRITICAL`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] compliant_high_count
+    #   For the patches that are compliant, the number that have a severity
+    #   of `HIGH`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] compliant_medium_count
+    #   For the patches that are compliant, the number that have a severity
+    #   of `MEDIUM`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] execution_type
+    #   The type of execution that was used determine compliance.
+    #   @return [String]
+    #
+    # @!attribute [rw] non_compliant_critical_count
+    #   For the patch items that are noncompliant, the number of items that
+    #   have a severity of `CRITICAL`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] compliant_informational_count
+    #   For the patches that are compliant, the number that have a severity
+    #   of `INFORMATIONAL`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] non_compliant_informational_count
+    #   For the patches that are noncompliant, the number that have a
+    #   severity of `INFORMATIONAL`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] compliant_unspecified_count
+    #   For the patches that are compliant, the number that have a severity
+    #   of `UNSPECIFIED`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] non_compliant_low_count
+    #   For the patches that are noncompliant, the number that have a
+    #   severity of `LOW`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] non_compliant_high_count
+    #   For the patches that are noncompliant, the number that have a
+    #   severity of `HIGH`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] compliant_low_count
+    #   For the patches that are compliant, the number that have a severity
+    #   of `LOW`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] compliance_type
+    #   The type of resource for which the compliance was determined. For
+    #   `AwsSsmPatchCompliance`, `ComplianceType` is `Patch`.
+    #   @return [String]
+    #
+    # @!attribute [rw] patch_baseline_id
+    #   The identifier of the patch baseline. The patch baseline lists the
+    #   patches that are approved for installation.
+    #   @return [String]
+    #
+    # @!attribute [rw] overall_severity
+    #   The highest severity for the patches.
+    #   @return [String]
+    #
+    # @!attribute [rw] non_compliant_medium_count
+    #   For the patches that are noncompliant, the number that have a
+    #   severity of `MEDIUM`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] non_compliant_unspecified_count
+    #   For the patches that are noncompliant, the number that have a
+    #   severity of `UNSPECIFIED`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] patch_group
+    #   The identifier of the patch group for which compliance was
+    #   determined. A patch group uses tags to group EC2 instances that
+    #   should have the same patch compliance.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsSsmComplianceSummary AWS API Documentation
+    #
+    class AwsSsmComplianceSummary < Struct.new(
+      :status,
+      :compliant_critical_count,
+      :compliant_high_count,
+      :compliant_medium_count,
+      :execution_type,
+      :non_compliant_critical_count,
+      :compliant_informational_count,
+      :non_compliant_informational_count,
+      :compliant_unspecified_count,
+      :non_compliant_low_count,
+      :non_compliant_high_count,
+      :compliant_low_count,
+      :compliance_type,
+      :patch_baseline_id,
+      :overall_severity,
+      :non_compliant_medium_count,
+      :non_compliant_unspecified_count,
+      :patch_group)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides details about the compliance for a patch.
+    #
+    # @note When making an API call, you may pass AwsSsmPatch
+    #   data as a hash:
+    #
+    #       {
+    #         compliance_summary: {
+    #           status: "NonEmptyString",
+    #           compliant_critical_count: 1,
+    #           compliant_high_count: 1,
+    #           compliant_medium_count: 1,
+    #           execution_type: "NonEmptyString",
+    #           non_compliant_critical_count: 1,
+    #           compliant_informational_count: 1,
+    #           non_compliant_informational_count: 1,
+    #           compliant_unspecified_count: 1,
+    #           non_compliant_low_count: 1,
+    #           non_compliant_high_count: 1,
+    #           compliant_low_count: 1,
+    #           compliance_type: "NonEmptyString",
+    #           patch_baseline_id: "NonEmptyString",
+    #           overall_severity: "NonEmptyString",
+    #           non_compliant_medium_count: 1,
+    #           non_compliant_unspecified_count: 1,
+    #           patch_group: "NonEmptyString",
+    #         },
+    #       }
+    #
+    # @!attribute [rw] compliance_summary
+    #   The compliance status details for the patch.
+    #   @return [Types::AwsSsmComplianceSummary]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsSsmPatch AWS API Documentation
+    #
+    class AwsSsmPatch < Struct.new(
+      :compliance_summary)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides information about the state of a patch on an instance based
+    # on the patch baseline that was used to patch the instance.
+    #
+    # @note When making an API call, you may pass AwsSsmPatchComplianceDetails
+    #   data as a hash:
+    #
+    #       {
+    #         patch: {
+    #           compliance_summary: {
+    #             status: "NonEmptyString",
+    #             compliant_critical_count: 1,
+    #             compliant_high_count: 1,
+    #             compliant_medium_count: 1,
+    #             execution_type: "NonEmptyString",
+    #             non_compliant_critical_count: 1,
+    #             compliant_informational_count: 1,
+    #             non_compliant_informational_count: 1,
+    #             compliant_unspecified_count: 1,
+    #             non_compliant_low_count: 1,
+    #             non_compliant_high_count: 1,
+    #             compliant_low_count: 1,
+    #             compliance_type: "NonEmptyString",
+    #             patch_baseline_id: "NonEmptyString",
+    #             overall_severity: "NonEmptyString",
+    #             non_compliant_medium_count: 1,
+    #             non_compliant_unspecified_count: 1,
+    #             patch_group: "NonEmptyString",
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] patch
+    #   Information about the status of a patch.
+    #   @return [Types::AwsSsmPatch]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsSsmPatchComplianceDetails AWS API Documentation
+    #
+    class AwsSsmPatchComplianceDetails < Struct.new(
+      :patch)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Details about a WAF WebACL.
     #
     # @note When making an API call, you may pass AwsWafWebAclDetails
@@ -12698,12 +13974,12 @@ module Aws::SecurityHub
     #             product_arn: "NonEmptyString", # required
     #             generator_id: "NonEmptyString", # required
     #             aws_account_id: "NonEmptyString", # required
-    #             types: ["NonEmptyString"], # required
+    #             types: ["NonEmptyString"],
     #             first_observed_at: "NonEmptyString",
     #             last_observed_at: "NonEmptyString",
     #             created_at: "NonEmptyString", # required
     #             updated_at: "NonEmptyString", # required
-    #             severity: { # required
+    #             severity: {
     #               product: 1.0,
     #               label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
     #               normalized: 1,
@@ -12827,9 +14103,133 @@ module Aws::SecurityHub
     #                 tags: {
     #                   "NonEmptyString" => "NonEmptyString",
     #                 },
-    #                 details: {
-    #                   aws_auto_scaling_auto_scaling_group: {
-    #                     launch_configuration_name: "NonEmptyString",
+    #                 data_classification: {
+    #                   detailed_results_location: "NonEmptyString",
+    #                   result: {
+    #                     mime_type: "NonEmptyString",
+    #                     size_classified: 1,
+    #                     additional_occurrences: false,
+    #                     status: {
+    #                       code: "NonEmptyString",
+    #                       reason: "NonEmptyString",
+    #                     },
+    #                     sensitive_data: [
+    #                       {
+    #                         category: "NonEmptyString",
+    #                         detections: [
+    #                           {
+    #                             count: 1,
+    #                             type: "NonEmptyString",
+    #                             occurrences: {
+    #                               line_ranges: [
+    #                                 {
+    #                                   start: 1,
+    #                                   end: 1,
+    #                                   start_column: 1,
+    #                                 },
+    #                               ],
+    #                               offset_ranges: [
+    #                                 {
+    #                                   start: 1,
+    #                                   end: 1,
+    #                                   start_column: 1,
+    #                                 },
+    #                               ],
+    #                               pages: [
+    #                                 {
+    #                                   page_number: 1,
+    #                                   line_range: {
+    #                                     start: 1,
+    #                                     end: 1,
+    #                                     start_column: 1,
+    #                                   },
+    #                                   offset_range: {
+    #                                     start: 1,
+    #                                     end: 1,
+    #                                     start_column: 1,
+    #                                   },
+    #                                 },
+    #                               ],
+    #                               records: [
+    #                                 {
+    #                                   json_path: "NonEmptyString",
+    #                                   record_index: 1,
+    #                                 },
+    #                               ],
+    #                               cells: [
+    #                                 {
+    #                                   column: 1,
+    #                                   row: 1,
+    #                                   column_name: "NonEmptyString",
+    #                                   cell_reference: "NonEmptyString",
+    #                                 },
+    #                               ],
+    #                             },
+    #                           },
+    #                         ],
+    #                         total_count: 1,
+    #                       },
+    #                     ],
+    #                     custom_data_identifiers: {
+    #                       detections: [
+    #                         {
+    #                           count: 1,
+    #                           arn: "NonEmptyString",
+    #                           name: "NonEmptyString",
+    #                           occurrences: {
+    #                             line_ranges: [
+    #                               {
+    #                                 start: 1,
+    #                                 end: 1,
+    #                                 start_column: 1,
+    #                               },
+    #                             ],
+    #                             offset_ranges: [
+    #                               {
+    #                                 start: 1,
+    #                                 end: 1,
+    #                                 start_column: 1,
+    #                               },
+    #                             ],
+    #                             pages: [
+    #                               {
+    #                                 page_number: 1,
+    #                                 line_range: {
+    #                                   start: 1,
+    #                                   end: 1,
+    #                                   start_column: 1,
+    #                                 },
+    #                                 offset_range: {
+    #                                   start: 1,
+    #                                   end: 1,
+    #                                   start_column: 1,
+    #                                 },
+    #                               },
+    #                             ],
+    #                             records: [
+    #                               {
+    #                                 json_path: "NonEmptyString",
+    #                                 record_index: 1,
+    #                               },
+    #                             ],
+    #                             cells: [
+    #                               {
+    #                                 column: 1,
+    #                                 row: 1,
+    #                                 column_name: "NonEmptyString",
+    #                                 cell_reference: "NonEmptyString",
+    #                               },
+    #                             ],
+    #                           },
+    #                         },
+    #                       ],
+    #                       total_count: 1,
+    #                     },
+    #                   },
+    #                 },
+    #                 details: {
+    #                   aws_auto_scaling_auto_scaling_group: {
+    #                     launch_configuration_name: "NonEmptyString",
     #                     load_balancer_names: ["NonEmptyString"],
     #                     health_check_type: "NonEmptyString",
     #                     health_check_grace_period: 1,
@@ -12937,6 +14337,19 @@ module Aws::SecurityHub
     #                       },
     #                     ],
     #                     source_dest_check: false,
+    #                     ip_v6_addresses: [
+    #                       {
+    #                         ip_v6_address: "NonEmptyString",
+    #                       },
+    #                     ],
+    #                     private_ip_addresses: [
+    #                       {
+    #                         private_ip_address: "NonEmptyString",
+    #                         private_dns_name: "NonEmptyString",
+    #                       },
+    #                     ],
+    #                     public_dns_name: "NonEmptyString",
+    #                     public_ip: "NonEmptyString",
     #                   },
     #                   aws_ec2_security_group: {
     #                     group_name: "NonEmptyString",
@@ -13115,6 +14528,18 @@ module Aws::SecurityHub
     #                         },
     #                       ],
     #                     },
+    #                     public_access_block_configuration: {
+    #                       block_public_acls: false,
+    #                       block_public_policy: false,
+    #                       ignore_public_acls: false,
+    #                       restrict_public_buckets: false,
+    #                     },
+    #                   },
+    #                   aws_s3_account_public_access_block: {
+    #                     block_public_acls: false,
+    #                     block_public_policy: false,
+    #                     ignore_public_acls: false,
+    #                     restrict_public_buckets: false,
     #                   },
     #                   aws_s3_object: {
     #                     last_modified: "NonEmptyString",
@@ -13437,6 +14862,30 @@ module Aws::SecurityHub
     #                     sns_topic_name: "NonEmptyString",
     #                     trail_arn: "NonEmptyString",
     #                   },
+    #                   aws_ssm_patch_compliance: {
+    #                     patch: {
+    #                       compliance_summary: {
+    #                         status: "NonEmptyString",
+    #                         compliant_critical_count: 1,
+    #                         compliant_high_count: 1,
+    #                         compliant_medium_count: 1,
+    #                         execution_type: "NonEmptyString",
+    #                         non_compliant_critical_count: 1,
+    #                         compliant_informational_count: 1,
+    #                         non_compliant_informational_count: 1,
+    #                         compliant_unspecified_count: 1,
+    #                         non_compliant_low_count: 1,
+    #                         non_compliant_high_count: 1,
+    #                         compliant_low_count: 1,
+    #                         compliance_type: "NonEmptyString",
+    #                         patch_baseline_id: "NonEmptyString",
+    #                         overall_severity: "NonEmptyString",
+    #                         non_compliant_medium_count: 1,
+    #                         non_compliant_unspecified_count: 1,
+    #                         patch_group: "NonEmptyString",
+    #                       },
+    #                     },
+    #                   },
     #                   aws_certificate_manager_certificate: {
     #                     certificate_authority_arn: "NonEmptyString",
     #                     created_at: "NonEmptyString",
@@ -14213,6 +15662,129 @@ module Aws::SecurityHub
     #               reboot_option: "NonEmptyString",
     #               operation: "NonEmptyString",
     #             },
+    #             action: {
+    #               action_type: "NonEmptyString",
+    #               network_connection_action: {
+    #                 connection_direction: "NonEmptyString",
+    #                 remote_ip_details: {
+    #                   ip_address_v4: "NonEmptyString",
+    #                   organization: {
+    #                     asn: 1,
+    #                     asn_org: "NonEmptyString",
+    #                     isp: "NonEmptyString",
+    #                     org: "NonEmptyString",
+    #                   },
+    #                   country: {
+    #                     country_code: "NonEmptyString",
+    #                     country_name: "NonEmptyString",
+    #                   },
+    #                   city: {
+    #                     city_name: "NonEmptyString",
+    #                   },
+    #                   geo_location: {
+    #                     lon: 1.0,
+    #                     lat: 1.0,
+    #                   },
+    #                 },
+    #                 remote_port_details: {
+    #                   port: 1,
+    #                   port_name: "NonEmptyString",
+    #                 },
+    #                 local_port_details: {
+    #                   port: 1,
+    #                   port_name: "NonEmptyString",
+    #                 },
+    #                 protocol: "NonEmptyString",
+    #                 blocked: false,
+    #               },
+    #               aws_api_call_action: {
+    #                 api: "NonEmptyString",
+    #                 service_name: "NonEmptyString",
+    #                 caller_type: "NonEmptyString",
+    #                 remote_ip_details: {
+    #                   ip_address_v4: "NonEmptyString",
+    #                   organization: {
+    #                     asn: 1,
+    #                     asn_org: "NonEmptyString",
+    #                     isp: "NonEmptyString",
+    #                     org: "NonEmptyString",
+    #                   },
+    #                   country: {
+    #                     country_code: "NonEmptyString",
+    #                     country_name: "NonEmptyString",
+    #                   },
+    #                   city: {
+    #                     city_name: "NonEmptyString",
+    #                   },
+    #                   geo_location: {
+    #                     lon: 1.0,
+    #                     lat: 1.0,
+    #                   },
+    #                 },
+    #                 domain_details: {
+    #                   domain: "NonEmptyString",
+    #                 },
+    #                 affected_resources: {
+    #                   "NonEmptyString" => "NonEmptyString",
+    #                 },
+    #                 first_seen: "NonEmptyString",
+    #                 last_seen: "NonEmptyString",
+    #               },
+    #               dns_request_action: {
+    #                 domain: "NonEmptyString",
+    #                 protocol: "NonEmptyString",
+    #                 blocked: false,
+    #               },
+    #               port_probe_action: {
+    #                 port_probe_details: [
+    #                   {
+    #                     local_port_details: {
+    #                       port: 1,
+    #                       port_name: "NonEmptyString",
+    #                     },
+    #                     local_ip_details: {
+    #                       ip_address_v4: "NonEmptyString",
+    #                     },
+    #                     remote_ip_details: {
+    #                       ip_address_v4: "NonEmptyString",
+    #                       organization: {
+    #                         asn: 1,
+    #                         asn_org: "NonEmptyString",
+    #                         isp: "NonEmptyString",
+    #                         org: "NonEmptyString",
+    #                       },
+    #                       country: {
+    #                         country_code: "NonEmptyString",
+    #                         country_name: "NonEmptyString",
+    #                       },
+    #                       city: {
+    #                         city_name: "NonEmptyString",
+    #                       },
+    #                       geo_location: {
+    #                         lon: 1.0,
+    #                         lat: 1.0,
+    #                       },
+    #                     },
+    #                   },
+    #                 ],
+    #                 blocked: false,
+    #               },
+    #             },
+    #             finding_provider_fields: {
+    #               confidence: 1,
+    #               criticality: 1,
+    #               related_findings: [
+    #                 {
+    #                   product_arn: "NonEmptyString", # required
+    #                   id: "NonEmptyString", # required
+    #                 },
+    #               ],
+    #               severity: {
+    #                 label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
+    #                 original: "NonEmptyString",
+    #               },
+    #               types: ["NonEmptyString"],
+    #             },
     #           },
     #         ],
     #       }
@@ -14436,6 +16008,52 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # An occurrence of sensitive data detected in a Microsoft Excel
+    # workbook, comma-separated value (CSV) file, or tab-separated value
+    # (TSV) file.
+    #
+    # @note When making an API call, you may pass Cell
+    #   data as a hash:
+    #
+    #       {
+    #         column: 1,
+    #         row: 1,
+    #         column_name: "NonEmptyString",
+    #         cell_reference: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] column
+    #   The column number of the column that contains the data. For a
+    #   Microsoft Excel workbook, the column number corresponds to the
+    #   alphabetical column identifiers. For example, a value of 1 for
+    #   Column corresponds to the A column in the workbook.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] row
+    #   The row number of the row that contains the data.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] column_name
+    #   The name of the column that contains the data.
+    #   @return [String]
+    #
+    # @!attribute [rw] cell_reference
+    #   For a Microsoft Excel workbook, provides the location of the cell,
+    #   as an absolute cell reference, that contains the data. For example,
+    #   Sheet2!C5 for cell C5 on Sheet2.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Cell AWS API Documentation
+    #
+    class Cell < Struct.new(
+      :column,
+      :row,
+      :column_name,
+      :cell_reference)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An IPv4 CIDR block association.
     #
     # @note When making an API call, you may pass CidrBlockAssociation
@@ -14469,6 +16087,224 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Information about a city.
+    #
+    # @note When making an API call, you may pass City
+    #   data as a hash:
+    #
+    #       {
+    #         city_name: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] city_name
+    #   The name of the city.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/City AWS API Documentation
+    #
+    class City < Struct.new(
+      :city_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Details about the sensitive data that was detected on the resource.
+    #
+    # @note When making an API call, you may pass ClassificationResult
+    #   data as a hash:
+    #
+    #       {
+    #         mime_type: "NonEmptyString",
+    #         size_classified: 1,
+    #         additional_occurrences: false,
+    #         status: {
+    #           code: "NonEmptyString",
+    #           reason: "NonEmptyString",
+    #         },
+    #         sensitive_data: [
+    #           {
+    #             category: "NonEmptyString",
+    #             detections: [
+    #               {
+    #                 count: 1,
+    #                 type: "NonEmptyString",
+    #                 occurrences: {
+    #                   line_ranges: [
+    #                     {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   ],
+    #                   offset_ranges: [
+    #                     {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   ],
+    #                   pages: [
+    #                     {
+    #                       page_number: 1,
+    #                       line_range: {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                       offset_range: {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     },
+    #                   ],
+    #                   records: [
+    #                     {
+    #                       json_path: "NonEmptyString",
+    #                       record_index: 1,
+    #                     },
+    #                   ],
+    #                   cells: [
+    #                     {
+    #                       column: 1,
+    #                       row: 1,
+    #                       column_name: "NonEmptyString",
+    #                       cell_reference: "NonEmptyString",
+    #                     },
+    #                   ],
+    #                 },
+    #               },
+    #             ],
+    #             total_count: 1,
+    #           },
+    #         ],
+    #         custom_data_identifiers: {
+    #           detections: [
+    #             {
+    #               count: 1,
+    #               arn: "NonEmptyString",
+    #               name: "NonEmptyString",
+    #               occurrences: {
+    #                 line_ranges: [
+    #                   {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                 ],
+    #                 offset_ranges: [
+    #                   {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                 ],
+    #                 pages: [
+    #                   {
+    #                     page_number: 1,
+    #                     line_range: {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                     offset_range: {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   },
+    #                 ],
+    #                 records: [
+    #                   {
+    #                     json_path: "NonEmptyString",
+    #                     record_index: 1,
+    #                   },
+    #                 ],
+    #                 cells: [
+    #                   {
+    #                     column: 1,
+    #                     row: 1,
+    #                     column_name: "NonEmptyString",
+    #                     cell_reference: "NonEmptyString",
+    #                   },
+    #                 ],
+    #               },
+    #             },
+    #           ],
+    #           total_count: 1,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] mime_type
+    #   The type of content that the finding applies to.
+    #   @return [String]
+    #
+    # @!attribute [rw] size_classified
+    #   The total size in bytes of the affected data.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] additional_occurrences
+    #   Indicates whether there are additional occurrences of sensitive data
+    #   that are not included in the finding. This occurs when the number of
+    #   occurrences exceeds the maximum that can be included.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] status
+    #   The current status of the sensitive data detection.
+    #   @return [Types::ClassificationStatus]
+    #
+    # @!attribute [rw] sensitive_data
+    #   Provides details about sensitive data that was identified based on
+    #   built-in configuration.
+    #   @return [Array<Types::SensitiveDataResult>]
+    #
+    # @!attribute [rw] custom_data_identifiers
+    #   Provides details about sensitive data that was identified based on
+    #   customer-defined configuration.
+    #   @return [Types::CustomDataIdentifiersResult]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ClassificationResult AWS API Documentation
+    #
+    class ClassificationResult < Struct.new(
+      :mime_type,
+      :size_classified,
+      :additional_occurrences,
+      :status,
+      :sensitive_data,
+      :custom_data_identifiers)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides details about the current status of the sensitive data
+    # detection.
+    #
+    # @note When making an API call, you may pass ClassificationStatus
+    #   data as a hash:
+    #
+    #       {
+    #         code: "NonEmptyString",
+    #         reason: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] code
+    #   The code that represents the status of the sensitive data detection.
+    #   @return [String]
+    #
+    # @!attribute [rw] reason
+    #   A longer description of the current status of the sensitive data
+    #   detection.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ClassificationStatus AWS API Documentation
+    #
+    class ClassificationStatus < Struct.new(
+      :code,
+      :reason)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains finding details that are specific to control-based findings.
     # Only returned for findings generated from controls.
     #
@@ -14580,6 +16416,33 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Information about a country.
+    #
+    # @note When making an API call, you may pass Country
+    #   data as a hash:
+    #
+    #       {
+    #         country_code: "NonEmptyString",
+    #         country_name: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] country_code
+    #   The 2-letter ISO 3166 country code for the country.
+    #   @return [String]
+    #
+    # @!attribute [rw] country_name
+    #   The name of the country.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Country AWS API Documentation
+    #
+    class Country < Struct.new(
+      :country_code,
+      :country_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass CreateActionTargetRequest
     #   data as a hash:
     #
@@ -15182,37 +17045,81 @@ module Aws::SecurityHub
     #               value: "NonEmptyString",
     #             },
     #           ],
-    #         },
-    #         group_by_attribute: "NonEmptyString", # required
-    #       }
-    #
-    # @!attribute [rw] name
-    #   The name of the custom insight to create.
-    #   @return [String]
-    #
-    # @!attribute [rw] filters
-    #   One or more attributes used to filter the findings included in the
-    #   insight. The insight only includes findings that match the criteria
-    #   defined in the filters.
-    #   @return [Types::AwsSecurityFindingFilters]
-    #
-    # @!attribute [rw] group_by_attribute
-    #   The attribute used to group the findings for the insight. The
-    #   grouping attribute identifies the type of item that the insight
-    #   applies to. For example, if an insight is grouped by resource
-    #   identifier, then the insight produces a list of resource
-    #   identifiers.
-    #   @return [String]
-    #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/CreateInsightRequest AWS API Documentation
-    #
-    class CreateInsightRequest < Struct.new(
-      :name,
-      :filters,
-      :group_by_attribute)
-      SENSITIVE = []
-      include Aws::Structure
-    end
+    #           finding_provider_fields_confidence: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_criticality: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_id: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_product_arn: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_label: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_original: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_types: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #         },
+    #         group_by_attribute: "NonEmptyString", # required
+    #       }
+    #
+    # @!attribute [rw] name
+    #   The name of the custom insight to create.
+    #   @return [String]
+    #
+    # @!attribute [rw] filters
+    #   One or more attributes used to filter the findings included in the
+    #   insight. The insight only includes findings that match the criteria
+    #   defined in the filters.
+    #   @return [Types::AwsSecurityFindingFilters]
+    #
+    # @!attribute [rw] group_by_attribute
+    #   The attribute used to group the findings for the insight. The
+    #   grouping attribute identifies the type of item that the insight
+    #   applies to. For example, if an insight is grouped by resource
+    #   identifier, then the insight produces a list of resource
+    #   identifiers.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/CreateInsightRequest AWS API Documentation
+    #
+    class CreateInsightRequest < Struct.new(
+      :name,
+      :filters,
+      :group_by_attribute)
+      SENSITIVE = []
+      include Aws::Structure
+    end
 
     # @!attribute [rw] insight_arn
     #   The ARN of the insight created.
@@ -15265,6 +17172,170 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # The list of detected instances of sensitive data.
+    #
+    # @note When making an API call, you may pass CustomDataIdentifiersDetections
+    #   data as a hash:
+    #
+    #       {
+    #         count: 1,
+    #         arn: "NonEmptyString",
+    #         name: "NonEmptyString",
+    #         occurrences: {
+    #           line_ranges: [
+    #             {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           ],
+    #           offset_ranges: [
+    #             {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           ],
+    #           pages: [
+    #             {
+    #               page_number: 1,
+    #               line_range: {
+    #                 start: 1,
+    #                 end: 1,
+    #                 start_column: 1,
+    #               },
+    #               offset_range: {
+    #                 start: 1,
+    #                 end: 1,
+    #                 start_column: 1,
+    #               },
+    #             },
+    #           ],
+    #           records: [
+    #             {
+    #               json_path: "NonEmptyString",
+    #               record_index: 1,
+    #             },
+    #           ],
+    #           cells: [
+    #             {
+    #               column: 1,
+    #               row: 1,
+    #               column_name: "NonEmptyString",
+    #               cell_reference: "NonEmptyString",
+    #             },
+    #           ],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] count
+    #   The total number of occurrences of sensitive data that were
+    #   detected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] arn
+    #   The ARN of the custom identifier that was used to detect the
+    #   sensitive data.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   he name of the custom identifier that detected the sensitive data.
+    #   @return [String]
+    #
+    # @!attribute [rw] occurrences
+    #   Details about the sensitive data that was detected.
+    #   @return [Types::Occurrences]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/CustomDataIdentifiersDetections AWS API Documentation
+    #
+    class CustomDataIdentifiersDetections < Struct.new(
+      :count,
+      :arn,
+      :name,
+      :occurrences)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains an instance of sensitive data that was detected by a
+    # customer-defined identifier.
+    #
+    # @note When making an API call, you may pass CustomDataIdentifiersResult
+    #   data as a hash:
+    #
+    #       {
+    #         detections: [
+    #           {
+    #             count: 1,
+    #             arn: "NonEmptyString",
+    #             name: "NonEmptyString",
+    #             occurrences: {
+    #               line_ranges: [
+    #                 {
+    #                   start: 1,
+    #                   end: 1,
+    #                   start_column: 1,
+    #                 },
+    #               ],
+    #               offset_ranges: [
+    #                 {
+    #                   start: 1,
+    #                   end: 1,
+    #                   start_column: 1,
+    #                 },
+    #               ],
+    #               pages: [
+    #                 {
+    #                   page_number: 1,
+    #                   line_range: {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                   offset_range: {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                 },
+    #               ],
+    #               records: [
+    #                 {
+    #                   json_path: "NonEmptyString",
+    #                   record_index: 1,
+    #                 },
+    #               ],
+    #               cells: [
+    #                 {
+    #                   column: 1,
+    #                   row: 1,
+    #                   column_name: "NonEmptyString",
+    #                   cell_reference: "NonEmptyString",
+    #                 },
+    #               ],
+    #             },
+    #           },
+    #         ],
+    #         total_count: 1,
+    #       }
+    #
+    # @!attribute [rw] detections
+    #   The list of detected instances of sensitive data.
+    #   @return [Array<Types::CustomDataIdentifiersDetections>]
+    #
+    # @!attribute [rw] total_count
+    #   The total number of occurrences of sensitive data.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/CustomDataIdentifiersResult AWS API Documentation
+    #
+    class CustomDataIdentifiersResult < Struct.new(
+      :detections,
+      :total_count)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # CVSS scores from the advisory related to the vulnerability.
     #
     # @note When making an API call, you may pass Cvss
@@ -15298,6 +17369,154 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Provides details about sensitive data that was detected on a resource.
+    #
+    # @note When making an API call, you may pass DataClassificationDetails
+    #   data as a hash:
+    #
+    #       {
+    #         detailed_results_location: "NonEmptyString",
+    #         result: {
+    #           mime_type: "NonEmptyString",
+    #           size_classified: 1,
+    #           additional_occurrences: false,
+    #           status: {
+    #             code: "NonEmptyString",
+    #             reason: "NonEmptyString",
+    #           },
+    #           sensitive_data: [
+    #             {
+    #               category: "NonEmptyString",
+    #               detections: [
+    #                 {
+    #                   count: 1,
+    #                   type: "NonEmptyString",
+    #                   occurrences: {
+    #                     line_ranges: [
+    #                       {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     ],
+    #                     offset_ranges: [
+    #                       {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     ],
+    #                     pages: [
+    #                       {
+    #                         page_number: 1,
+    #                         line_range: {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                         offset_range: {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                       },
+    #                     ],
+    #                     records: [
+    #                       {
+    #                         json_path: "NonEmptyString",
+    #                         record_index: 1,
+    #                       },
+    #                     ],
+    #                     cells: [
+    #                       {
+    #                         column: 1,
+    #                         row: 1,
+    #                         column_name: "NonEmptyString",
+    #                         cell_reference: "NonEmptyString",
+    #                       },
+    #                     ],
+    #                   },
+    #                 },
+    #               ],
+    #               total_count: 1,
+    #             },
+    #           ],
+    #           custom_data_identifiers: {
+    #             detections: [
+    #               {
+    #                 count: 1,
+    #                 arn: "NonEmptyString",
+    #                 name: "NonEmptyString",
+    #                 occurrences: {
+    #                   line_ranges: [
+    #                     {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   ],
+    #                   offset_ranges: [
+    #                     {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   ],
+    #                   pages: [
+    #                     {
+    #                       page_number: 1,
+    #                       line_range: {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                       offset_range: {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     },
+    #                   ],
+    #                   records: [
+    #                     {
+    #                       json_path: "NonEmptyString",
+    #                       record_index: 1,
+    #                     },
+    #                   ],
+    #                   cells: [
+    #                     {
+    #                       column: 1,
+    #                       row: 1,
+    #                       column_name: "NonEmptyString",
+    #                       cell_reference: "NonEmptyString",
+    #                     },
+    #                   ],
+    #                 },
+    #               },
+    #             ],
+    #             total_count: 1,
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] detailed_results_location
+    #   The path to the folder or file that contains the sensitive data.
+    #   @return [String]
+    #
+    # @!attribute [rw] result
+    #   The details about the sensitive data that was detected on the
+    #   resource.
+    #   @return [Types::ClassificationResult]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DataClassificationDetails AWS API Documentation
+    #
+    class DataClassificationDetails < Struct.new(
+      :detailed_results_location,
+      :result)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A date filter for querying findings.
     #
     # @note When making an API call, you may pass DateFilter
@@ -15658,6 +17877,7 @@ module Aws::SecurityHub
     #       {
     #         next_token: "NextToken",
     #         max_results: 1,
+    #         product_arn: "NonEmptyString",
     #       }
     #
     # @!attribute [rw] next_token
@@ -15674,11 +17894,16 @@ module Aws::SecurityHub
     #   The maximum number of results to return.
     #   @return [Integer]
     #
+    # @!attribute [rw] product_arn
+    #   The ARN of the integration to return.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DescribeProductsRequest AWS API Documentation
     #
     class DescribeProductsRequest < Struct.new(
       :next_token,
-      :max_results)
+      :max_results,
+      :product_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -15895,6 +18120,40 @@ module Aws::SecurityHub
     #
     class DisassociateMembersResponse < Aws::EmptyStructure; end
 
+    # Provided if `ActionType` is `DNS_REQUEST`. It provides details about
+    # the DNS request that was detected.
+    #
+    # @note When making an API call, you may pass DnsRequestAction
+    #   data as a hash:
+    #
+    #       {
+    #         domain: "NonEmptyString",
+    #         protocol: "NonEmptyString",
+    #         blocked: false,
+    #       }
+    #
+    # @!attribute [rw] domain
+    #   The DNS domain that is associated with the DNS request.
+    #   @return [String]
+    #
+    # @!attribute [rw] protocol
+    #   The protocol that was used for the DNS request.
+    #   @return [String]
+    #
+    # @!attribute [rw] blocked
+    #   Indicates whether the DNS request was blocked.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DnsRequestAction AWS API Documentation
+    #
+    class DnsRequestAction < Struct.new(
+      :domain,
+      :protocol,
+      :blocked)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass EnableImportFindingsForProductRequest
     #   data as a hash:
     #
@@ -15947,45 +18206,169 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
-    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/EnableOrganizationAdminAccountResponse AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/EnableOrganizationAdminAccountResponse AWS API Documentation
+    #
+    class EnableOrganizationAdminAccountResponse < Aws::EmptyStructure; end
+
+    # @note When making an API call, you may pass EnableSecurityHubRequest
+    #   data as a hash:
+    #
+    #       {
+    #         tags: {
+    #           "TagKey" => "TagValue",
+    #         },
+    #         enable_default_standards: false,
+    #       }
+    #
+    # @!attribute [rw] tags
+    #   The tags to add to the hub resource when you enable Security Hub.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] enable_default_standards
+    #   Whether to enable the security standards that Security Hub has
+    #   designated as automatically enabled. If you do not provide a value
+    #   for `EnableDefaultStandards`, it is set to `true`. To not enable the
+    #   automatically enabled standards, set `EnableDefaultStandards` to
+    #   `false`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/EnableSecurityHubRequest AWS API Documentation
+    #
+    class EnableSecurityHubRequest < Struct.new(
+      :tags,
+      :enable_default_standards)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/EnableSecurityHubResponse AWS API Documentation
+    #
+    class EnableSecurityHubResponse < Aws::EmptyStructure; end
+
+    # In a `BatchImportFindings` request, finding providers use
+    # `FindingProviderFields` to provide and update values for confidence,
+    # criticality, related findings, severity, and types.
+    #
+    # @note When making an API call, you may pass FindingProviderFields
+    #   data as a hash:
+    #
+    #       {
+    #         confidence: 1,
+    #         criticality: 1,
+    #         related_findings: [
+    #           {
+    #             product_arn: "NonEmptyString", # required
+    #             id: "NonEmptyString", # required
+    #           },
+    #         ],
+    #         severity: {
+    #           label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
+    #           original: "NonEmptyString",
+    #         },
+    #         types: ["NonEmptyString"],
+    #       }
+    #
+    # @!attribute [rw] confidence
+    #   A finding's confidence. Confidence is defined as the likelihood
+    #   that a finding accurately identifies the behavior or issue that it
+    #   was intended to identify.
+    #
+    #   Confidence is scored on a 0-100 basis using a ratio scale, where 0
+    #   means zero percent confidence and 100 means 100 percent confidence.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] criticality
+    #   The level of importance assigned to the resources associated with
+    #   the finding.
+    #
+    #   A score of 0 means that the underlying resources have no
+    #   criticality, and a score of 100 is reserved for the most critical
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] related_findings
+    #   A list of findings that are related to the current finding.
+    #   @return [Array<Types::RelatedFinding>]
+    #
+    # @!attribute [rw] severity
+    #   The severity of a finding.
+    #   @return [Types::FindingProviderSeverity]
+    #
+    # @!attribute [rw] types
+    #   One or more finding types in the format of
+    #   `namespace/category/classifier` that classify a finding.
+    #
+    #   Valid namespace values are: Software and Configuration Checks \|
+    #   TTPs \| Effects \| Unusual Behaviors \| Sensitive Data
+    #   Identifications
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/FindingProviderFields AWS API Documentation
+    #
+    class FindingProviderFields < Struct.new(
+      :confidence,
+      :criticality,
+      :related_findings,
+      :severity,
+      :types)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The severity assigned to the finding by the finding provider.
+    #
+    # @note When making an API call, you may pass FindingProviderSeverity
+    #   data as a hash:
+    #
+    #       {
+    #         label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
+    #         original: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] label
+    #   The severity label assigned to the finding by the finding provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] original
+    #   The finding provider's original value for the severity.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/FindingProviderSeverity AWS API Documentation
+    #
+    class FindingProviderSeverity < Struct.new(
+      :label,
+      :original)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides the latitude and longitude coordinates of a location.
     #
-    class EnableOrganizationAdminAccountResponse < Aws::EmptyStructure; end
-
-    # @note When making an API call, you may pass EnableSecurityHubRequest
+    # @note When making an API call, you may pass GeoLocation
     #   data as a hash:
     #
     #       {
-    #         tags: {
-    #           "TagKey" => "TagValue",
-    #         },
-    #         enable_default_standards: false,
+    #         lon: 1.0,
+    #         lat: 1.0,
     #       }
     #
-    # @!attribute [rw] tags
-    #   The tags to add to the hub resource when you enable Security Hub.
-    #   @return [Hash<String,String>]
+    # @!attribute [rw] lon
+    #   The longitude of the location.
+    #   @return [Float]
     #
-    # @!attribute [rw] enable_default_standards
-    #   Whether to enable the security standards that Security Hub has
-    #   designated as automatically enabled. If you do not provide a value
-    #   for `EnableDefaultStandards`, it is set to `true`. To not enable the
-    #   automatically enabled standards, set `EnableDefaultStandards` to
-    #   `false`.
-    #   @return [Boolean]
+    # @!attribute [rw] lat
+    #   The latitude of the location.
+    #   @return [Float]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/EnableSecurityHubRequest AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GeoLocation AWS API Documentation
     #
-    class EnableSecurityHubRequest < Struct.new(
-      :tags,
-      :enable_default_standards)
+    class GeoLocation < Struct.new(
+      :lon,
+      :lat)
       SENSITIVE = []
       include Aws::Structure
     end
 
-    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/EnableSecurityHubResponse AWS API Documentation
-    #
-    class EnableSecurityHubResponse < Aws::EmptyStructure; end
-
     # @note When making an API call, you may pass GetEnabledStandardsRequest
     #   data as a hash:
     #
@@ -16600,6 +18983,50 @@ module Aws::SecurityHub
     #               value: "NonEmptyString",
     #             },
     #           ],
+    #           finding_provider_fields_confidence: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_criticality: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_id: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_product_arn: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_label: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_original: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_types: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
     #         },
     #         sort_criteria: [
     #           {
@@ -17080,6 +19507,45 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Provides information about an internet provider.
+    #
+    # @note When making an API call, you may pass IpOrganizationDetails
+    #   data as a hash:
+    #
+    #       {
+    #         asn: 1,
+    #         asn_org: "NonEmptyString",
+    #         isp: "NonEmptyString",
+    #         org: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] asn
+    #   The Autonomous System Number (ASN) of the internet provider
+    #   @return [Integer]
+    #
+    # @!attribute [rw] asn_org
+    #   The name of the organization that registered the ASN.
+    #   @return [String]
+    #
+    # @!attribute [rw] isp
+    #   The ISP information for the internet provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] org
+    #   The name of the internet provider.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/IpOrganizationDetails AWS API Documentation
+    #
+    class IpOrganizationDetails < Struct.new(
+      :asn,
+      :asn_org,
+      :isp,
+      :org)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An IPV6 CIDR block association.
     #
     # @note When making an API call, you may pass Ipv6CidrBlockAssociation
@@ -17681,6 +20147,84 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Provided if `ActionType` is `NETWORK_CONNECTION`. It provides details
+    # about the attempted network connection that was detected.
+    #
+    # @note When making an API call, you may pass NetworkConnectionAction
+    #   data as a hash:
+    #
+    #       {
+    #         connection_direction: "NonEmptyString",
+    #         remote_ip_details: {
+    #           ip_address_v4: "NonEmptyString",
+    #           organization: {
+    #             asn: 1,
+    #             asn_org: "NonEmptyString",
+    #             isp: "NonEmptyString",
+    #             org: "NonEmptyString",
+    #           },
+    #           country: {
+    #             country_code: "NonEmptyString",
+    #             country_name: "NonEmptyString",
+    #           },
+    #           city: {
+    #             city_name: "NonEmptyString",
+    #           },
+    #           geo_location: {
+    #             lon: 1.0,
+    #             lat: 1.0,
+    #           },
+    #         },
+    #         remote_port_details: {
+    #           port: 1,
+    #           port_name: "NonEmptyString",
+    #         },
+    #         local_port_details: {
+    #           port: 1,
+    #           port_name: "NonEmptyString",
+    #         },
+    #         protocol: "NonEmptyString",
+    #         blocked: false,
+    #       }
+    #
+    # @!attribute [rw] connection_direction
+    #   The direction of the network connection request (`IN` or `OUT`).
+    #   @return [String]
+    #
+    # @!attribute [rw] remote_ip_details
+    #   Information about the remote IP address that issued the network
+    #   connection request.
+    #   @return [Types::ActionRemoteIpDetails]
+    #
+    # @!attribute [rw] remote_port_details
+    #   Information about the port on the remote IP address.
+    #   @return [Types::ActionRemotePortDetails]
+    #
+    # @!attribute [rw] local_port_details
+    #   Information about the port on the EC2 instance.
+    #   @return [Types::ActionLocalPortDetails]
+    #
+    # @!attribute [rw] protocol
+    #   The protocol used to make the network connection request.
+    #   @return [String]
+    #
+    # @!attribute [rw] blocked
+    #   Indicates whether the network connection attempt was blocked.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/NetworkConnectionAction AWS API Documentation
+    #
+    class NetworkConnectionAction < Struct.new(
+      :connection_direction,
+      :remote_ip_details,
+      :remote_port_details,
+      :local_port_details,
+      :protocol,
+      :blocked)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Details about a network path component that occurs before or after the
     # current component.
     #
@@ -17949,6 +20493,139 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # The detected occurrences of sensitive data.
+    #
+    # @note When making an API call, you may pass Occurrences
+    #   data as a hash:
+    #
+    #       {
+    #         line_ranges: [
+    #           {
+    #             start: 1,
+    #             end: 1,
+    #             start_column: 1,
+    #           },
+    #         ],
+    #         offset_ranges: [
+    #           {
+    #             start: 1,
+    #             end: 1,
+    #             start_column: 1,
+    #           },
+    #         ],
+    #         pages: [
+    #           {
+    #             page_number: 1,
+    #             line_range: {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #             offset_range: {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           },
+    #         ],
+    #         records: [
+    #           {
+    #             json_path: "NonEmptyString",
+    #             record_index: 1,
+    #           },
+    #         ],
+    #         cells: [
+    #           {
+    #             column: 1,
+    #             row: 1,
+    #             column_name: "NonEmptyString",
+    #             cell_reference: "NonEmptyString",
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] line_ranges
+    #   Occurrences of sensitive data detected in a non-binary text file or
+    #   a Microsoft Word file. Non-binary text files include files such as
+    #   HTML, XML, JSON, and TXT files.
+    #   @return [Array<Types::Range>]
+    #
+    # @!attribute [rw] offset_ranges
+    #   Occurrences of sensitive data detected in a binary text file.
+    #   @return [Array<Types::Range>]
+    #
+    # @!attribute [rw] pages
+    #   Occurrences of sensitive data in an Adobe Portable Document Format
+    #   (PDF) file.
+    #   @return [Array<Types::Page>]
+    #
+    # @!attribute [rw] records
+    #   Occurrences of sensitive data in an Apache Avro object container or
+    #   an Apache Parquet file.
+    #   @return [Array<Types::Record>]
+    #
+    # @!attribute [rw] cells
+    #   Occurrences of sensitive data detected in Microsoft Excel workbooks,
+    #   comma-separated value (CSV) files, or tab-separated value (TSV)
+    #   files.
+    #   @return [Array<Types::Cell>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Occurrences AWS API Documentation
+    #
+    class Occurrences < Struct.new(
+      :line_ranges,
+      :offset_ranges,
+      :pages,
+      :records,
+      :cells)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An occurrence of sensitive data in an Adobe Portable Document Format
+    # (PDF) file.
+    #
+    # @note When making an API call, you may pass Page
+    #   data as a hash:
+    #
+    #       {
+    #         page_number: 1,
+    #         line_range: {
+    #           start: 1,
+    #           end: 1,
+    #           start_column: 1,
+    #         },
+    #         offset_range: {
+    #           start: 1,
+    #           end: 1,
+    #           start_column: 1,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] page_number
+    #   The page number of the page that contains the sensitive data.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] line_range
+    #   An occurrence of sensitive data detected in a non-binary text file
+    #   or a Microsoft Word file. Non-binary text files include files such
+    #   as HTML, XML, JSON, and TXT files.
+    #   @return [Types::Range]
+    #
+    # @!attribute [rw] offset_range
+    #   An occurrence of sensitive data detected in a binary text file.
+    #   @return [Types::Range]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Page AWS API Documentation
+    #
+    class Page < Struct.new(
+      :page_number,
+      :line_range,
+      :offset_range)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Provides an overview of the patch compliance status for an instance
     # against a selected compliance standard.
     #
@@ -18056,6 +20733,126 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Provided if `ActionType` is `PORT_PROBE`. It provides details about
+    # the attempted port probe that was detected.
+    #
+    # @note When making an API call, you may pass PortProbeAction
+    #   data as a hash:
+    #
+    #       {
+    #         port_probe_details: [
+    #           {
+    #             local_port_details: {
+    #               port: 1,
+    #               port_name: "NonEmptyString",
+    #             },
+    #             local_ip_details: {
+    #               ip_address_v4: "NonEmptyString",
+    #             },
+    #             remote_ip_details: {
+    #               ip_address_v4: "NonEmptyString",
+    #               organization: {
+    #                 asn: 1,
+    #                 asn_org: "NonEmptyString",
+    #                 isp: "NonEmptyString",
+    #                 org: "NonEmptyString",
+    #               },
+    #               country: {
+    #                 country_code: "NonEmptyString",
+    #                 country_name: "NonEmptyString",
+    #               },
+    #               city: {
+    #                 city_name: "NonEmptyString",
+    #               },
+    #               geo_location: {
+    #                 lon: 1.0,
+    #                 lat: 1.0,
+    #               },
+    #             },
+    #           },
+    #         ],
+    #         blocked: false,
+    #       }
+    #
+    # @!attribute [rw] port_probe_details
+    #   Information about the ports affected by the port probe.
+    #   @return [Array<Types::PortProbeDetail>]
+    #
+    # @!attribute [rw] blocked
+    #   Indicates whether the port probe was blocked.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/PortProbeAction AWS API Documentation
+    #
+    class PortProbeAction < Struct.new(
+      :port_probe_details,
+      :blocked)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A port scan that was part of the port probe. For each scan,
+    # PortProbeDetails provides information about the local IP address and
+    # port that were scanned, and the remote IP address that the scan
+    # originated from.
+    #
+    # @note When making an API call, you may pass PortProbeDetail
+    #   data as a hash:
+    #
+    #       {
+    #         local_port_details: {
+    #           port: 1,
+    #           port_name: "NonEmptyString",
+    #         },
+    #         local_ip_details: {
+    #           ip_address_v4: "NonEmptyString",
+    #         },
+    #         remote_ip_details: {
+    #           ip_address_v4: "NonEmptyString",
+    #           organization: {
+    #             asn: 1,
+    #             asn_org: "NonEmptyString",
+    #             isp: "NonEmptyString",
+    #             org: "NonEmptyString",
+    #           },
+    #           country: {
+    #             country_code: "NonEmptyString",
+    #             country_name: "NonEmptyString",
+    #           },
+    #           city: {
+    #             city_name: "NonEmptyString",
+    #           },
+    #           geo_location: {
+    #             lon: 1.0,
+    #             lat: 1.0,
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] local_port_details
+    #   Provides information about the port that was scanned.
+    #   @return [Types::ActionLocalPortDetails]
+    #
+    # @!attribute [rw] local_ip_details
+    #   Provides information about the IP address where the scanned port is
+    #   located.
+    #   @return [Types::ActionLocalIpDetails]
+    #
+    # @!attribute [rw] remote_ip_details
+    #   Provides information about the remote IP address that performed the
+    #   scan.
+    #   @return [Types::ActionRemoteIpDetails]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/PortProbeDetail AWS API Documentation
+    #
+    class PortProbeDetail < Struct.new(
+      :local_port_details,
+      :local_ip_details,
+      :remote_ip_details)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A range of ports.
     #
     # @note When making an API call, you may pass PortRange
@@ -18212,6 +21009,44 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Identifies where the sensitive data begins and ends.
+    #
+    # @note When making an API call, you may pass Range
+    #   data as a hash:
+    #
+    #       {
+    #         start: 1,
+    #         end: 1,
+    #         start_column: 1,
+    #       }
+    #
+    # @!attribute [rw] start
+    #   The number of lines (for a line range) or characters (for an offset
+    #   range) from the beginning of the file to the end of the sensitive
+    #   data.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] end
+    #   The number of lines (for a line range) or characters (for an offset
+    #   range) from the beginning of the file to the end of the sensitive
+    #   data.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] start_column
+    #   In the line where the sensitive data starts, the column within the
+    #   line where the sensitive data starts.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Range AWS API Documentation
+    #
+    class Range < Struct.new(
+      :start,
+      :end,
+      :start_column)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A recommendation on how to remediate the issue identified in a
     # finding.
     #
@@ -18242,6 +21077,38 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # An occurrence of sensitive data in an Apache Avro object container or
+    # an Apache Parquet file.
+    #
+    # @note When making an API call, you may pass Record
+    #   data as a hash:
+    #
+    #       {
+    #         json_path: "NonEmptyString",
+    #         record_index: 1,
+    #       }
+    #
+    # @!attribute [rw] json_path
+    #   The path, as a JSONPath expression, to the field in the record that
+    #   contains the data. If the field name is longer than 20 characters,
+    #   it is truncated. If the path is longer than 250 characters, it is
+    #   truncated.
+    #   @return [String]
+    #
+    # @!attribute [rw] record_index
+    #   The record index, starting from 0, for the record that contains the
+    #   data.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Record AWS API Documentation
+    #
+    class Record < Struct.new(
+      :json_path,
+      :record_index)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Details about a related finding.
     #
     # @note When making an API call, you may pass RelatedFinding
@@ -18308,6 +21175,130 @@ module Aws::SecurityHub
     #         tags: {
     #           "NonEmptyString" => "NonEmptyString",
     #         },
+    #         data_classification: {
+    #           detailed_results_location: "NonEmptyString",
+    #           result: {
+    #             mime_type: "NonEmptyString",
+    #             size_classified: 1,
+    #             additional_occurrences: false,
+    #             status: {
+    #               code: "NonEmptyString",
+    #               reason: "NonEmptyString",
+    #             },
+    #             sensitive_data: [
+    #               {
+    #                 category: "NonEmptyString",
+    #                 detections: [
+    #                   {
+    #                     count: 1,
+    #                     type: "NonEmptyString",
+    #                     occurrences: {
+    #                       line_ranges: [
+    #                         {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                       ],
+    #                       offset_ranges: [
+    #                         {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                       ],
+    #                       pages: [
+    #                         {
+    #                           page_number: 1,
+    #                           line_range: {
+    #                             start: 1,
+    #                             end: 1,
+    #                             start_column: 1,
+    #                           },
+    #                           offset_range: {
+    #                             start: 1,
+    #                             end: 1,
+    #                             start_column: 1,
+    #                           },
+    #                         },
+    #                       ],
+    #                       records: [
+    #                         {
+    #                           json_path: "NonEmptyString",
+    #                           record_index: 1,
+    #                         },
+    #                       ],
+    #                       cells: [
+    #                         {
+    #                           column: 1,
+    #                           row: 1,
+    #                           column_name: "NonEmptyString",
+    #                           cell_reference: "NonEmptyString",
+    #                         },
+    #                       ],
+    #                     },
+    #                   },
+    #                 ],
+    #                 total_count: 1,
+    #               },
+    #             ],
+    #             custom_data_identifiers: {
+    #               detections: [
+    #                 {
+    #                   count: 1,
+    #                   arn: "NonEmptyString",
+    #                   name: "NonEmptyString",
+    #                   occurrences: {
+    #                     line_ranges: [
+    #                       {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     ],
+    #                     offset_ranges: [
+    #                       {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     ],
+    #                     pages: [
+    #                       {
+    #                         page_number: 1,
+    #                         line_range: {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                         offset_range: {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                       },
+    #                     ],
+    #                     records: [
+    #                       {
+    #                         json_path: "NonEmptyString",
+    #                         record_index: 1,
+    #                       },
+    #                     ],
+    #                     cells: [
+    #                       {
+    #                         column: 1,
+    #                         row: 1,
+    #                         column_name: "NonEmptyString",
+    #                         cell_reference: "NonEmptyString",
+    #                       },
+    #                     ],
+    #                   },
+    #                 },
+    #               ],
+    #               total_count: 1,
+    #             },
+    #           },
+    #         },
     #         details: {
     #           aws_auto_scaling_auto_scaling_group: {
     #             launch_configuration_name: "NonEmptyString",
@@ -18418,6 +21409,19 @@ module Aws::SecurityHub
     #               },
     #             ],
     #             source_dest_check: false,
+    #             ip_v6_addresses: [
+    #               {
+    #                 ip_v6_address: "NonEmptyString",
+    #               },
+    #             ],
+    #             private_ip_addresses: [
+    #               {
+    #                 private_ip_address: "NonEmptyString",
+    #                 private_dns_name: "NonEmptyString",
+    #               },
+    #             ],
+    #             public_dns_name: "NonEmptyString",
+    #             public_ip: "NonEmptyString",
     #           },
     #           aws_ec2_security_group: {
     #             group_name: "NonEmptyString",
@@ -18596,6 +21600,18 @@ module Aws::SecurityHub
     #                 },
     #               ],
     #             },
+    #             public_access_block_configuration: {
+    #               block_public_acls: false,
+    #               block_public_policy: false,
+    #               ignore_public_acls: false,
+    #               restrict_public_buckets: false,
+    #             },
+    #           },
+    #           aws_s3_account_public_access_block: {
+    #             block_public_acls: false,
+    #             block_public_policy: false,
+    #             ignore_public_acls: false,
+    #             restrict_public_buckets: false,
     #           },
     #           aws_s3_object: {
     #             last_modified: "NonEmptyString",
@@ -18918,6 +21934,30 @@ module Aws::SecurityHub
     #             sns_topic_name: "NonEmptyString",
     #             trail_arn: "NonEmptyString",
     #           },
+    #           aws_ssm_patch_compliance: {
+    #             patch: {
+    #               compliance_summary: {
+    #                 status: "NonEmptyString",
+    #                 compliant_critical_count: 1,
+    #                 compliant_high_count: 1,
+    #                 compliant_medium_count: 1,
+    #                 execution_type: "NonEmptyString",
+    #                 non_compliant_critical_count: 1,
+    #                 compliant_informational_count: 1,
+    #                 non_compliant_informational_count: 1,
+    #                 compliant_unspecified_count: 1,
+    #                 non_compliant_low_count: 1,
+    #                 non_compliant_high_count: 1,
+    #                 compliant_low_count: 1,
+    #                 compliance_type: "NonEmptyString",
+    #                 patch_baseline_id: "NonEmptyString",
+    #                 overall_severity: "NonEmptyString",
+    #                 non_compliant_medium_count: 1,
+    #                 non_compliant_unspecified_count: 1,
+    #                 patch_group: "NonEmptyString",
+    #               },
+    #             },
+    #           },
     #           aws_certificate_manager_certificate: {
     #             certificate_authority_arn: "NonEmptyString",
     #             created_at: "NonEmptyString",
@@ -19648,6 +22688,8 @@ module Aws::SecurityHub
     #   @return [String]
     #
     # @!attribute [rw] resource_role
+    #   Identifies the role of the resource in the finding. A resource is
+    #   either the actor or target of the finding activity,
     #   @return [String]
     #
     # @!attribute [rw] tags
@@ -19655,6 +22697,11 @@ module Aws::SecurityHub
     #   finding was processed.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] data_classification
+    #   Contains information about sensitive data that was detected on the
+    #   resource.
+    #   @return [Types::DataClassificationDetails]
+    #
     # @!attribute [rw] details
     #   Additional details about the resource related to a finding.
     #   @return [Types::ResourceDetails]
@@ -19668,6 +22715,7 @@ module Aws::SecurityHub
       :region,
       :resource_role,
       :tags,
+      :data_classification,
       :details)
       SENSITIVE = []
       include Aws::Structure
@@ -19817,6 +22865,19 @@ module Aws::SecurityHub
     #             },
     #           ],
     #           source_dest_check: false,
+    #           ip_v6_addresses: [
+    #             {
+    #               ip_v6_address: "NonEmptyString",
+    #             },
+    #           ],
+    #           private_ip_addresses: [
+    #             {
+    #               private_ip_address: "NonEmptyString",
+    #               private_dns_name: "NonEmptyString",
+    #             },
+    #           ],
+    #           public_dns_name: "NonEmptyString",
+    #           public_ip: "NonEmptyString",
     #         },
     #         aws_ec2_security_group: {
     #           group_name: "NonEmptyString",
@@ -19995,6 +23056,18 @@ module Aws::SecurityHub
     #               },
     #             ],
     #           },
+    #           public_access_block_configuration: {
+    #             block_public_acls: false,
+    #             block_public_policy: false,
+    #             ignore_public_acls: false,
+    #             restrict_public_buckets: false,
+    #           },
+    #         },
+    #         aws_s3_account_public_access_block: {
+    #           block_public_acls: false,
+    #           block_public_policy: false,
+    #           ignore_public_acls: false,
+    #           restrict_public_buckets: false,
     #         },
     #         aws_s3_object: {
     #           last_modified: "NonEmptyString",
@@ -20317,6 +23390,30 @@ module Aws::SecurityHub
     #           sns_topic_name: "NonEmptyString",
     #           trail_arn: "NonEmptyString",
     #         },
+    #         aws_ssm_patch_compliance: {
+    #           patch: {
+    #             compliance_summary: {
+    #               status: "NonEmptyString",
+    #               compliant_critical_count: 1,
+    #               compliant_high_count: 1,
+    #               compliant_medium_count: 1,
+    #               execution_type: "NonEmptyString",
+    #               non_compliant_critical_count: 1,
+    #               compliant_informational_count: 1,
+    #               non_compliant_informational_count: 1,
+    #               compliant_unspecified_count: 1,
+    #               non_compliant_low_count: 1,
+    #               non_compliant_high_count: 1,
+    #               compliant_low_count: 1,
+    #               compliance_type: "NonEmptyString",
+    #               patch_baseline_id: "NonEmptyString",
+    #               overall_severity: "NonEmptyString",
+    #               non_compliant_medium_count: 1,
+    #               non_compliant_unspecified_count: 1,
+    #               patch_group: "NonEmptyString",
+    #             },
+    #           },
+    #         },
     #         aws_certificate_manager_certificate: {
     #           certificate_authority_arn: "NonEmptyString",
     #           created_at: "NonEmptyString",
@@ -21070,6 +24167,11 @@ module Aws::SecurityHub
     #   Details about an Amazon S3 bucket related to a finding.
     #   @return [Types::AwsS3BucketDetails]
     #
+    # @!attribute [rw] aws_s3_account_public_access_block
+    #   Details about the Amazon S3 Public Access Block configuration for an
+    #   account.
+    #   @return [Types::AwsS3AccountPublicAccessBlockDetails]
+    #
     # @!attribute [rw] aws_s3_object
     #   Details about an Amazon S3 object related to a finding.
     #   @return [Types::AwsS3ObjectDetails]
@@ -21091,9 +24193,11 @@ module Aws::SecurityHub
     #   @return [Types::AwsIamPolicyDetails]
     #
     # @!attribute [rw] aws_api_gateway_v2_stage
+    #   Provides information about a version 2 stage for Amazon API Gateway.
     #   @return [Types::AwsApiGatewayV2StageDetails]
     #
     # @!attribute [rw] aws_api_gateway_v2_api
+    #   Provides information about a version 2 API in Amazon API Gateway.
     #   @return [Types::AwsApiGatewayV2ApiDetails]
     #
     # @!attribute [rw] aws_dynamo_db_table
@@ -21101,24 +24205,37 @@ module Aws::SecurityHub
     #   @return [Types::AwsDynamoDbTableDetails]
     #
     # @!attribute [rw] aws_api_gateway_stage
+    #   Provides information about a version 1 Amazon API Gateway stage.
     #   @return [Types::AwsApiGatewayStageDetails]
     #
     # @!attribute [rw] aws_api_gateway_rest_api
+    #   Provides information about a REST API in version 1 of Amazon API
+    #   Gateway.
     #   @return [Types::AwsApiGatewayRestApiDetails]
     #
     # @!attribute [rw] aws_cloud_trail_trail
+    #   Provides details about a CloudTrail trail.
     #   @return [Types::AwsCloudTrailTrailDetails]
     #
+    # @!attribute [rw] aws_ssm_patch_compliance
+    #   Provides information about the state of a patch on an instance based
+    #   on the patch baseline that was used to patch the instance.
+    #   @return [Types::AwsSsmPatchComplianceDetails]
+    #
     # @!attribute [rw] aws_certificate_manager_certificate
+    #   Provides details about an AWS Certificate Manager (ACM) certificate.
     #   @return [Types::AwsCertificateManagerCertificateDetails]
     #
     # @!attribute [rw] aws_redshift_cluster
+    #   Contains details about an Amazon Redshift cluster.
     #   @return [Types::AwsRedshiftClusterDetails]
     #
     # @!attribute [rw] aws_elb_load_balancer
+    #   contains details about a Classic Load Balancer.
     #   @return [Types::AwsElbLoadBalancerDetails]
     #
     # @!attribute [rw] aws_iam_group
+    #   Contains details about an IAM group.
     #   @return [Types::AwsIamGroupDetails]
     #
     # @!attribute [rw] aws_iam_role
@@ -21198,6 +24315,7 @@ module Aws::SecurityHub
       :aws_elbv_2_load_balancer,
       :aws_elasticsearch_domain,
       :aws_s3_bucket,
+      :aws_s3_account_public_access_block,
       :aws_s3_object,
       :aws_secrets_manager_secret,
       :aws_iam_access_key,
@@ -21209,6 +24327,7 @@ module Aws::SecurityHub
       :aws_api_gateway_stage,
       :aws_api_gateway_rest_api,
       :aws_cloud_trail_trail,
+      :aws_ssm_patch_compliance,
       :aws_certificate_manager_certificate,
       :aws_redshift_cluster,
       :aws_elb_load_balancer,
@@ -21267,6 +24386,171 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # The list of detected instances of sensitive data.
+    #
+    # @note When making an API call, you may pass SensitiveDataDetections
+    #   data as a hash:
+    #
+    #       {
+    #         count: 1,
+    #         type: "NonEmptyString",
+    #         occurrences: {
+    #           line_ranges: [
+    #             {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           ],
+    #           offset_ranges: [
+    #             {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           ],
+    #           pages: [
+    #             {
+    #               page_number: 1,
+    #               line_range: {
+    #                 start: 1,
+    #                 end: 1,
+    #                 start_column: 1,
+    #               },
+    #               offset_range: {
+    #                 start: 1,
+    #                 end: 1,
+    #                 start_column: 1,
+    #               },
+    #             },
+    #           ],
+    #           records: [
+    #             {
+    #               json_path: "NonEmptyString",
+    #               record_index: 1,
+    #             },
+    #           ],
+    #           cells: [
+    #             {
+    #               column: 1,
+    #               row: 1,
+    #               column_name: "NonEmptyString",
+    #               cell_reference: "NonEmptyString",
+    #             },
+    #           ],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] count
+    #   The total number of occurrences of sensitive data that were
+    #   detected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] type
+    #   The type of sensitive data that was detected. For example, the type
+    #   might indicate that the data is an email address.
+    #   @return [String]
+    #
+    # @!attribute [rw] occurrences
+    #   Details about the sensitive data that was detected.
+    #   @return [Types::Occurrences]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/SensitiveDataDetections AWS API Documentation
+    #
+    class SensitiveDataDetections < Struct.new(
+      :count,
+      :type,
+      :occurrences)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains a detected instance of sensitive data that are based on
+    # built-in identifiers.
+    #
+    # @note When making an API call, you may pass SensitiveDataResult
+    #   data as a hash:
+    #
+    #       {
+    #         category: "NonEmptyString",
+    #         detections: [
+    #           {
+    #             count: 1,
+    #             type: "NonEmptyString",
+    #             occurrences: {
+    #               line_ranges: [
+    #                 {
+    #                   start: 1,
+    #                   end: 1,
+    #                   start_column: 1,
+    #                 },
+    #               ],
+    #               offset_ranges: [
+    #                 {
+    #                   start: 1,
+    #                   end: 1,
+    #                   start_column: 1,
+    #                 },
+    #               ],
+    #               pages: [
+    #                 {
+    #                   page_number: 1,
+    #                   line_range: {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                   offset_range: {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                 },
+    #               ],
+    #               records: [
+    #                 {
+    #                   json_path: "NonEmptyString",
+    #                   record_index: 1,
+    #                 },
+    #               ],
+    #               cells: [
+    #                 {
+    #                   column: 1,
+    #                   row: 1,
+    #                   column_name: "NonEmptyString",
+    #                   cell_reference: "NonEmptyString",
+    #                 },
+    #               ],
+    #             },
+    #           },
+    #         ],
+    #         total_count: 1,
+    #       }
+    #
+    # @!attribute [rw] category
+    #   The category of sensitive data that was detected. For example, the
+    #   category can indicate that the sensitive data involved credentials,
+    #   financial information, or personal information.
+    #   @return [String]
+    #
+    # @!attribute [rw] detections
+    #   The list of detected instances of sensitive data.
+    #   @return [Array<Types::SensitiveDataDetections>]
+    #
+    # @!attribute [rw] total_count
+    #   The total number of occurrences of sensitive data.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/SensitiveDataResult AWS API Documentation
+    #
+    class SensitiveDataResult < Struct.new(
+      :category,
+      :detections,
+      :total_count)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The severity of the finding.
     #
     # The finding provider can provide the initial severity. The finding
@@ -21613,7 +24897,20 @@ module Aws::SecurityHub
     #   @return [Hash<String,String>]
     #
     # @!attribute [rw] standards_status
-    #   The status of the standards subscription.
+    #   The status of the standard subscription.
+    #
+    #   The status values are as follows:
+    #
+    #   * `PENDING` - Standard is in the process of being enabled.
+    #
+    #   * `READY` - Standard is enabled.
+    #
+    #   * `INCOMPLETE` - Standard could not be enabled completely. Some
+    #     controls may not be available.
+    #
+    #   * `DELETING` - Standard is in the process of being disabled.
+    #
+    #   * `FAILED` - Standard could not be disabled.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/StandardsSubscription AWS API Documentation
@@ -22502,6 +25799,50 @@ module Aws::SecurityHub
     #               value: "NonEmptyString",
     #             },
     #           ],
+    #           finding_provider_fields_confidence: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_criticality: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_id: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_product_arn: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_label: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_original: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_types: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
     #         },
     #         note: {
     #           text: "NonEmptyString", # required
@@ -23097,6 +26438,50 @@ module Aws::SecurityHub
     #               value: "NonEmptyString",
     #             },
     #           ],
+    #           finding_provider_fields_confidence: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_criticality: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_id: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_product_arn: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_label: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_original: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_types: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
     #         },
     #         group_by_attribute: "NonEmptyString",
     #       }
@@ -23457,6 +26842,14 @@ module Aws::SecurityHub
     #
     #   * `NEW` - The initial state of a finding, before it is reviewed.
     #
+    #     Security Hub also resets the workflow status from `NOTIFIED` or
+    #     `RESOLVED` to `NEW` in the following cases:
+    #
+    #     * `RecordState` changes from `ARCHIVED` to `ACTIVE`.
+    #
+    #     * `ComplianceStatus` changes from `PASSED` to either `WARNING`,
+    #       `FAILED`, or `NOT_AVAILABLE`.
+    #
     #   * `NOTIFIED` - Indicates that you notified the resource owner about
     #     the security issue. Used when the initial reviewer is not the
     #     resource owner, and needs intervention from the resource owner.
@@ -23491,6 +26884,14 @@ module Aws::SecurityHub
     #
     #   * `NEW` - The initial state of a finding, before it is reviewed.
     #
+    #     Security Hub also resets `WorkFlowStatus` from `NOTIFIED` or
+    #     `RESOLVED` to `NEW` in the following cases:
+    #
+    #     * The record state changes from `ARCHIVED` to `ACTIVE`.
+    #
+    #     * The compliance status changes from `PASSED` to either `WARNING`,
+    #       `FAILED`, or `NOT_AVAILABLE`.
+    #
     #   * `NOTIFIED` - Indicates that you notified the resource owner about
     #     the security issue. Used when the initial reviewer is not the
     #     resource owner, and needs intervention from the resource owner.