aws-sdk-securityhub 1.38.0 → 1.43.0

data/lib/aws-sdk-securityhub/errors.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 

data/lib/aws-sdk-securityhub/resource.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 

data/lib/aws-sdk-securityhub/types.rb

@@ -3,13 +3,44 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 
 module Aws::SecurityHub
   module Types
 
+    # @note When making an API call, you may pass AcceptAdministratorInvitationRequest
+    #   data as a hash:
+    #
+    #       {
+    #         administrator_id: "NonEmptyString", # required
+    #         invitation_id: "NonEmptyString", # required
+    #       }
+    #
+    # @!attribute [rw] administrator_id
+    #   The account ID of the Security Hub administrator account that sent
+    #   the invitation.
+    #   @return [String]
+    #
+    # @!attribute [rw] invitation_id
+    #   The identifier of the invitation sent from the Security Hub
+    #   administrator account.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AcceptAdministratorInvitationRequest AWS API Documentation
+    #
+    class AcceptAdministratorInvitationRequest < Struct.new(
+      :administrator_id,
+      :invitation_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AcceptAdministratorInvitationResponse AWS API Documentation
+    #
+    class AcceptAdministratorInvitationResponse < Aws::EmptyStructure; end
+
     # @note When making an API call, you may pass AcceptInvitationRequest
     #   data as a hash:
     #
@@ -19,12 +50,13 @@ module Aws::SecurityHub
     #       }
     #
     # @!attribute [rw] master_id
-    #   The account ID of the Security Hub master account that sent the
-    #   invitation.
+    #   The account ID of the Security Hub administrator account that sent
+    #   the invitation.
     #   @return [String]
     #
     # @!attribute [rw] invitation_id
-    #   The ID of the invitation sent from the Security Hub master account.
+    #   The identifier of the invitation sent from the Security Hub
+    #   administrator account.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AcceptInvitationRequest AWS API Documentation
@@ -85,8 +117,8 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
-    # Provides details about one of the following actions that were detected
-    # for the finding:
+    # Provides details about one of the following actions that affects or
+    # that was taken on a resource:
     #
     # * A remote IP address issued an AWS API call
     #
@@ -9765,6 +9797,51 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # provides information about the Amazon S3 Public Access Block
+    # configuration for accounts.
+    #
+    # @note When making an API call, you may pass AwsS3AccountPublicAccessBlockDetails
+    #   data as a hash:
+    #
+    #       {
+    #         block_public_acls: false,
+    #         block_public_policy: false,
+    #         ignore_public_acls: false,
+    #         restrict_public_buckets: false,
+    #       }
+    #
+    # @!attribute [rw] block_public_acls
+    #   Indicates whether to reject calls to update an S3 bucket if the
+    #   calls include a public access control list (ACL).
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] block_public_policy
+    #   Indicates whether to reject calls to update the access policy for an
+    #   S3 bucket or access point if the policy allows public access.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] ignore_public_acls
+    #   Indicates whether Amazon S3 ignores public ACLs that are associated
+    #   with an S3 bucket.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] restrict_public_buckets
+    #   Indicates whether to restrict access to an access point or S3 bucket
+    #   that has a public policy to only AWS service principals and
+    #   authorized users within the S3 bucket owner's account.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsS3AccountPublicAccessBlockDetails AWS API Documentation
+    #
+    class AwsS3AccountPublicAccessBlockDetails < Struct.new(
+      :block_public_acls,
+      :block_public_policy,
+      :ignore_public_acls,
+      :restrict_public_buckets)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The details of an Amazon S3 bucket.
     #
     # @note When making an API call, you may pass AwsS3BucketDetails
@@ -9784,6 +9861,12 @@ module Aws::SecurityHub
     #             },
     #           ],
     #         },
+    #         public_access_block_configuration: {
+    #           block_public_acls: false,
+    #           block_public_policy: false,
+    #           ignore_public_acls: false,
+    #           restrict_public_buckets: false,
+    #         },
     #       }
     #
     # @!attribute [rw] owner_id
@@ -9810,13 +9893,19 @@ module Aws::SecurityHub
     #   The encryption rules that are applied to the S3 bucket.
     #   @return [Types::AwsS3BucketServerSideEncryptionConfiguration]
     #
+    # @!attribute [rw] public_access_block_configuration
+    #   Provides information about the Amazon S3 Public Access Block
+    #   configuration for the S3 bucket.
+    #   @return [Types::AwsS3AccountPublicAccessBlockDetails]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsS3BucketDetails AWS API Documentation
     #
     class AwsS3BucketDetails < Struct.new(
       :owner_id,
       :owner_name,
       :created_at,
-      :server_side_encryption_configuration)
+      :server_side_encryption_configuration,
+      :public_access_block_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -10077,12 +10166,12 @@ module Aws::SecurityHub
     #         product_arn: "NonEmptyString", # required
     #         generator_id: "NonEmptyString", # required
     #         aws_account_id: "NonEmptyString", # required
-    #         types: ["NonEmptyString"], # required
+    #         types: ["NonEmptyString"],
     #         first_observed_at: "NonEmptyString",
     #         last_observed_at: "NonEmptyString",
     #         created_at: "NonEmptyString", # required
     #         updated_at: "NonEmptyString", # required
-    #         severity: { # required
+    #         severity: {
     #           product: 1.0,
     #           label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
     #           normalized: 1,
@@ -10206,6 +10295,130 @@ module Aws::SecurityHub
     #             tags: {
     #               "NonEmptyString" => "NonEmptyString",
     #             },
+    #             data_classification: {
+    #               detailed_results_location: "NonEmptyString",
+    #               result: {
+    #                 mime_type: "NonEmptyString",
+    #                 size_classified: 1,
+    #                 additional_occurrences: false,
+    #                 status: {
+    #                   code: "NonEmptyString",
+    #                   reason: "NonEmptyString",
+    #                 },
+    #                 sensitive_data: [
+    #                   {
+    #                     category: "NonEmptyString",
+    #                     detections: [
+    #                       {
+    #                         count: 1,
+    #                         type: "NonEmptyString",
+    #                         occurrences: {
+    #                           line_ranges: [
+    #                             {
+    #                               start: 1,
+    #                               end: 1,
+    #                               start_column: 1,
+    #                             },
+    #                           ],
+    #                           offset_ranges: [
+    #                             {
+    #                               start: 1,
+    #                               end: 1,
+    #                               start_column: 1,
+    #                             },
+    #                           ],
+    #                           pages: [
+    #                             {
+    #                               page_number: 1,
+    #                               line_range: {
+    #                                 start: 1,
+    #                                 end: 1,
+    #                                 start_column: 1,
+    #                               },
+    #                               offset_range: {
+    #                                 start: 1,
+    #                                 end: 1,
+    #                                 start_column: 1,
+    #                               },
+    #                             },
+    #                           ],
+    #                           records: [
+    #                             {
+    #                               json_path: "NonEmptyString",
+    #                               record_index: 1,
+    #                             },
+    #                           ],
+    #                           cells: [
+    #                             {
+    #                               column: 1,
+    #                               row: 1,
+    #                               column_name: "NonEmptyString",
+    #                               cell_reference: "NonEmptyString",
+    #                             },
+    #                           ],
+    #                         },
+    #                       },
+    #                     ],
+    #                     total_count: 1,
+    #                   },
+    #                 ],
+    #                 custom_data_identifiers: {
+    #                   detections: [
+    #                     {
+    #                       count: 1,
+    #                       arn: "NonEmptyString",
+    #                       name: "NonEmptyString",
+    #                       occurrences: {
+    #                         line_ranges: [
+    #                           {
+    #                             start: 1,
+    #                             end: 1,
+    #                             start_column: 1,
+    #                           },
+    #                         ],
+    #                         offset_ranges: [
+    #                           {
+    #                             start: 1,
+    #                             end: 1,
+    #                             start_column: 1,
+    #                           },
+    #                         ],
+    #                         pages: [
+    #                           {
+    #                             page_number: 1,
+    #                             line_range: {
+    #                               start: 1,
+    #                               end: 1,
+    #                               start_column: 1,
+    #                             },
+    #                             offset_range: {
+    #                               start: 1,
+    #                               end: 1,
+    #                               start_column: 1,
+    #                             },
+    #                           },
+    #                         ],
+    #                         records: [
+    #                           {
+    #                             json_path: "NonEmptyString",
+    #                             record_index: 1,
+    #                           },
+    #                         ],
+    #                         cells: [
+    #                           {
+    #                             column: 1,
+    #                             row: 1,
+    #                             column_name: "NonEmptyString",
+    #                             cell_reference: "NonEmptyString",
+    #                           },
+    #                         ],
+    #                       },
+    #                     },
+    #                   ],
+    #                   total_count: 1,
+    #                 },
+    #               },
+    #             },
     #             details: {
     #               aws_auto_scaling_auto_scaling_group: {
     #                 launch_configuration_name: "NonEmptyString",
@@ -10507,6 +10720,18 @@ module Aws::SecurityHub
     #                     },
     #                   ],
     #                 },
+    #                 public_access_block_configuration: {
+    #                   block_public_acls: false,
+    #                   block_public_policy: false,
+    #                   ignore_public_acls: false,
+    #                   restrict_public_buckets: false,
+    #                 },
+    #               },
+    #               aws_s3_account_public_access_block: {
+    #                 block_public_acls: false,
+    #                 block_public_policy: false,
+    #                 ignore_public_acls: false,
+    #                 restrict_public_buckets: false,
     #               },
     #               aws_s3_object: {
     #                 last_modified: "NonEmptyString",
@@ -11737,6 +11962,21 @@ module Aws::SecurityHub
     #             blocked: false,
     #           },
     #         },
+    #         finding_provider_fields: {
+    #           confidence: 1,
+    #           criticality: 1,
+    #           related_findings: [
+    #             {
+    #               product_arn: "NonEmptyString", # required
+    #               id: "NonEmptyString", # required
+    #             },
+    #           ],
+    #           severity: {
+    #             label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
+    #             original: "NonEmptyString",
+    #           },
+    #           types: ["NonEmptyString"],
+    #         },
     #       }
     #
     # @!attribute [rw] schema_version
@@ -11953,9 +12193,16 @@ module Aws::SecurityHub
     #   @return [Types::PatchSummary]
     #
     # @!attribute [rw] action
-    #   Provides details about an action that was detected for the finding.
+    #   Provides details about an action that affects or that was taken on a
+    #   resource.
     #   @return [Types::Action]
     #
+    # @!attribute [rw] finding_provider_fields
+    #   In a `BatchImportFindings` request, finding providers use
+    #   `FindingProviderFields` to provide and update their own values for
+    #   confidence, criticality, related findings, severity, and types.
+    #   @return [Types::FindingProviderFields]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsSecurityFinding AWS API Documentation
     #
     class AwsSecurityFinding < Struct.new(
@@ -11993,7 +12240,8 @@ module Aws::SecurityHub
       :note,
       :vulnerabilities,
       :patch_summary,
-      :action)
+      :action,
+      :finding_provider_fields)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -12562,6 +12810,50 @@ module Aws::SecurityHub
     #             value: "NonEmptyString",
     #           },
     #         ],
+    #         finding_provider_fields_confidence: [
+    #           {
+    #             gte: 1.0,
+    #             lte: 1.0,
+    #             eq: 1.0,
+    #           },
+    #         ],
+    #         finding_provider_fields_criticality: [
+    #           {
+    #             gte: 1.0,
+    #             lte: 1.0,
+    #             eq: 1.0,
+    #           },
+    #         ],
+    #         finding_provider_fields_related_findings_id: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
+    #         finding_provider_fields_related_findings_product_arn: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
+    #         finding_provider_fields_severity_label: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
+    #         finding_provider_fields_severity_original: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
+    #         finding_provider_fields_types: [
+    #           {
+    #             value: "NonEmptyString",
+    #             comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #           },
+    #         ],
     #       }
     #
     # @!attribute [rw] product_arn
@@ -12969,6 +13261,52 @@ module Aws::SecurityHub
     #   A keyword for a finding.
     #   @return [Array<Types::KeywordFilter>]
     #
+    # @!attribute [rw] finding_provider_fields_confidence
+    #   The finding provider value for the finding confidence. Confidence is
+    #   defined as the likelihood that a finding accurately identifies the
+    #   behavior or issue that it was intended to identify.
+    #
+    #   Confidence is scored on a 0-100 basis using a ratio scale, where 0
+    #   means zero percent confidence and 100 means 100 percent confidence.
+    #   @return [Array<Types::NumberFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_criticality
+    #   The finding provider value for the level of importance assigned to
+    #   the resources associated with the findings.
+    #
+    #   A score of 0 means that the underlying resources have no
+    #   criticality, and a score of 100 is reserved for the most critical
+    #   resources.
+    #   @return [Array<Types::NumberFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_related_findings_id
+    #   The finding identifier of a related finding that is identified by
+    #   the finding provider.
+    #   @return [Array<Types::StringFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_related_findings_product_arn
+    #   The ARN of the solution that generated a related finding that is
+    #   identified by the finding provider.
+    #   @return [Array<Types::StringFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_severity_label
+    #   The finding provider value for the severity label.
+    #   @return [Array<Types::StringFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_severity_original
+    #   The finding provider's original value for the severity.
+    #   @return [Array<Types::StringFilter>]
+    #
+    # @!attribute [rw] finding_provider_fields_types
+    #   One or more finding types that the finding provider assigned to the
+    #   finding. Uses the format of `namespace/category/classifier` that
+    #   classify a finding.
+    #
+    #   Valid namespace values are: Software and Configuration Checks \|
+    #   TTPs \| Effects \| Unusual Behaviors \| Sensitive Data
+    #   Identifications
+    #   @return [Array<Types::StringFilter>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AwsSecurityFindingFilters AWS API Documentation
     #
     class AwsSecurityFindingFilters < Struct.new(
@@ -13055,7 +13393,14 @@ module Aws::SecurityHub
       :note_text,
       :note_updated_at,
       :note_updated_by,
-      :keyword)
+      :keyword,
+      :finding_provider_fields_confidence,
+      :finding_provider_fields_criticality,
+      :finding_provider_fields_related_findings_id,
+      :finding_provider_fields_related_findings_product_arn,
+      :finding_provider_fields_severity_label,
+      :finding_provider_fields_severity_original,
+      :finding_provider_fields_types)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -13661,12 +14006,12 @@ module Aws::SecurityHub
     #             product_arn: "NonEmptyString", # required
     #             generator_id: "NonEmptyString", # required
     #             aws_account_id: "NonEmptyString", # required
-    #             types: ["NonEmptyString"], # required
+    #             types: ["NonEmptyString"],
     #             first_observed_at: "NonEmptyString",
     #             last_observed_at: "NonEmptyString",
     #             created_at: "NonEmptyString", # required
     #             updated_at: "NonEmptyString", # required
-    #             severity: { # required
+    #             severity: {
     #               product: 1.0,
     #               label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
     #               normalized: 1,
@@ -13790,6 +14135,130 @@ module Aws::SecurityHub
     #                 tags: {
     #                   "NonEmptyString" => "NonEmptyString",
     #                 },
+    #                 data_classification: {
+    #                   detailed_results_location: "NonEmptyString",
+    #                   result: {
+    #                     mime_type: "NonEmptyString",
+    #                     size_classified: 1,
+    #                     additional_occurrences: false,
+    #                     status: {
+    #                       code: "NonEmptyString",
+    #                       reason: "NonEmptyString",
+    #                     },
+    #                     sensitive_data: [
+    #                       {
+    #                         category: "NonEmptyString",
+    #                         detections: [
+    #                           {
+    #                             count: 1,
+    #                             type: "NonEmptyString",
+    #                             occurrences: {
+    #                               line_ranges: [
+    #                                 {
+    #                                   start: 1,
+    #                                   end: 1,
+    #                                   start_column: 1,
+    #                                 },
+    #                               ],
+    #                               offset_ranges: [
+    #                                 {
+    #                                   start: 1,
+    #                                   end: 1,
+    #                                   start_column: 1,
+    #                                 },
+    #                               ],
+    #                               pages: [
+    #                                 {
+    #                                   page_number: 1,
+    #                                   line_range: {
+    #                                     start: 1,
+    #                                     end: 1,
+    #                                     start_column: 1,
+    #                                   },
+    #                                   offset_range: {
+    #                                     start: 1,
+    #                                     end: 1,
+    #                                     start_column: 1,
+    #                                   },
+    #                                 },
+    #                               ],
+    #                               records: [
+    #                                 {
+    #                                   json_path: "NonEmptyString",
+    #                                   record_index: 1,
+    #                                 },
+    #                               ],
+    #                               cells: [
+    #                                 {
+    #                                   column: 1,
+    #                                   row: 1,
+    #                                   column_name: "NonEmptyString",
+    #                                   cell_reference: "NonEmptyString",
+    #                                 },
+    #                               ],
+    #                             },
+    #                           },
+    #                         ],
+    #                         total_count: 1,
+    #                       },
+    #                     ],
+    #                     custom_data_identifiers: {
+    #                       detections: [
+    #                         {
+    #                           count: 1,
+    #                           arn: "NonEmptyString",
+    #                           name: "NonEmptyString",
+    #                           occurrences: {
+    #                             line_ranges: [
+    #                               {
+    #                                 start: 1,
+    #                                 end: 1,
+    #                                 start_column: 1,
+    #                               },
+    #                             ],
+    #                             offset_ranges: [
+    #                               {
+    #                                 start: 1,
+    #                                 end: 1,
+    #                                 start_column: 1,
+    #                               },
+    #                             ],
+    #                             pages: [
+    #                               {
+    #                                 page_number: 1,
+    #                                 line_range: {
+    #                                   start: 1,
+    #                                   end: 1,
+    #                                   start_column: 1,
+    #                                 },
+    #                                 offset_range: {
+    #                                   start: 1,
+    #                                   end: 1,
+    #                                   start_column: 1,
+    #                                 },
+    #                               },
+    #                             ],
+    #                             records: [
+    #                               {
+    #                                 json_path: "NonEmptyString",
+    #                                 record_index: 1,
+    #                               },
+    #                             ],
+    #                             cells: [
+    #                               {
+    #                                 column: 1,
+    #                                 row: 1,
+    #                                 column_name: "NonEmptyString",
+    #                                 cell_reference: "NonEmptyString",
+    #                               },
+    #                             ],
+    #                           },
+    #                         },
+    #                       ],
+    #                       total_count: 1,
+    #                     },
+    #                   },
+    #                 },
     #                 details: {
     #                   aws_auto_scaling_auto_scaling_group: {
     #                     launch_configuration_name: "NonEmptyString",
@@ -14091,6 +14560,18 @@ module Aws::SecurityHub
     #                         },
     #                       ],
     #                     },
+    #                     public_access_block_configuration: {
+    #                       block_public_acls: false,
+    #                       block_public_policy: false,
+    #                       ignore_public_acls: false,
+    #                       restrict_public_buckets: false,
+    #                     },
+    #                   },
+    #                   aws_s3_account_public_access_block: {
+    #                     block_public_acls: false,
+    #                     block_public_policy: false,
+    #                     ignore_public_acls: false,
+    #                     restrict_public_buckets: false,
     #                   },
     #                   aws_s3_object: {
     #                     last_modified: "NonEmptyString",
@@ -15321,6 +15802,21 @@ module Aws::SecurityHub
     #                 blocked: false,
     #               },
     #             },
+    #             finding_provider_fields: {
+    #               confidence: 1,
+    #               criticality: 1,
+    #               related_findings: [
+    #                 {
+    #                   product_arn: "NonEmptyString", # required
+    #                   id: "NonEmptyString", # required
+    #                 },
+    #               ],
+    #               severity: {
+    #                 label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
+    #                 original: "NonEmptyString",
+    #               },
+    #               types: ["NonEmptyString"],
+    #             },
     #           },
     #         ],
     #       }
@@ -15544,6 +16040,52 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # An occurrence of sensitive data detected in a Microsoft Excel
+    # workbook, comma-separated value (CSV) file, or tab-separated value
+    # (TSV) file.
+    #
+    # @note When making an API call, you may pass Cell
+    #   data as a hash:
+    #
+    #       {
+    #         column: 1,
+    #         row: 1,
+    #         column_name: "NonEmptyString",
+    #         cell_reference: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] column
+    #   The column number of the column that contains the data. For a
+    #   Microsoft Excel workbook, the column number corresponds to the
+    #   alphabetical column identifiers. For example, a value of 1 for
+    #   Column corresponds to the A column in the workbook.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] row
+    #   The row number of the row that contains the data.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] column_name
+    #   The name of the column that contains the data.
+    #   @return [String]
+    #
+    # @!attribute [rw] cell_reference
+    #   For a Microsoft Excel workbook, provides the location of the cell,
+    #   as an absolute cell reference, that contains the data. For example,
+    #   Sheet2!C5 for cell C5 on Sheet2.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Cell AWS API Documentation
+    #
+    class Cell < Struct.new(
+      :column,
+      :row,
+      :column_name,
+      :cell_reference)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An IPv4 CIDR block association.
     #
     # @note When making an API call, you may pass CidrBlockAssociation
@@ -15598,39 +16140,236 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
-    # Contains finding details that are specific to control-based findings.
-    # Only returned for findings generated from controls.
+    # Details about the sensitive data that was detected on the resource.
     #
-    # @note When making an API call, you may pass Compliance
+    # @note When making an API call, you may pass ClassificationResult
     #   data as a hash:
     #
     #       {
-    #         status: "PASSED", # accepts PASSED, WARNING, FAILED, NOT_AVAILABLE
-    #         related_requirements: ["NonEmptyString"],
-    #         status_reasons: [
+    #         mime_type: "NonEmptyString",
+    #         size_classified: 1,
+    #         additional_occurrences: false,
+    #         status: {
+    #           code: "NonEmptyString",
+    #           reason: "NonEmptyString",
+    #         },
+    #         sensitive_data: [
     #           {
-    #             reason_code: "NonEmptyString", # required
-    #             description: "NonEmptyString",
+    #             category: "NonEmptyString",
+    #             detections: [
+    #               {
+    #                 count: 1,
+    #                 type: "NonEmptyString",
+    #                 occurrences: {
+    #                   line_ranges: [
+    #                     {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   ],
+    #                   offset_ranges: [
+    #                     {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   ],
+    #                   pages: [
+    #                     {
+    #                       page_number: 1,
+    #                       line_range: {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                       offset_range: {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     },
+    #                   ],
+    #                   records: [
+    #                     {
+    #                       json_path: "NonEmptyString",
+    #                       record_index: 1,
+    #                     },
+    #                   ],
+    #                   cells: [
+    #                     {
+    #                       column: 1,
+    #                       row: 1,
+    #                       column_name: "NonEmptyString",
+    #                       cell_reference: "NonEmptyString",
+    #                     },
+    #                   ],
+    #                 },
+    #               },
+    #             ],
+    #             total_count: 1,
     #           },
     #         ],
-    #       }
-    #
-    # @!attribute [rw] status
-    #   The result of a standards check.
-    #
-    #   The valid values for `Status` are as follows.
-    #
-    #   * * `PASSED` - Standards check passed for all evaluated resources.
-    #
-    #     * `WARNING` - Some information is missing or this check is not
-    #       supported for your configuration.
-    #
-    #     * `FAILED` - Standards check failed for at least one evaluated
-    #       resource.
-    #
-    #     * `NOT_AVAILABLE` - Check could not be performed due to a service
-    #       outage, API error, or because the result of the AWS Config
-    #       evaluation was `NOT_APPLICABLE`. If the AWS Config evaluation
+    #         custom_data_identifiers: {
+    #           detections: [
+    #             {
+    #               count: 1,
+    #               arn: "NonEmptyString",
+    #               name: "NonEmptyString",
+    #               occurrences: {
+    #                 line_ranges: [
+    #                   {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                 ],
+    #                 offset_ranges: [
+    #                   {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                 ],
+    #                 pages: [
+    #                   {
+    #                     page_number: 1,
+    #                     line_range: {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                     offset_range: {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   },
+    #                 ],
+    #                 records: [
+    #                   {
+    #                     json_path: "NonEmptyString",
+    #                     record_index: 1,
+    #                   },
+    #                 ],
+    #                 cells: [
+    #                   {
+    #                     column: 1,
+    #                     row: 1,
+    #                     column_name: "NonEmptyString",
+    #                     cell_reference: "NonEmptyString",
+    #                   },
+    #                 ],
+    #               },
+    #             },
+    #           ],
+    #           total_count: 1,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] mime_type
+    #   The type of content that the finding applies to.
+    #   @return [String]
+    #
+    # @!attribute [rw] size_classified
+    #   The total size in bytes of the affected data.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] additional_occurrences
+    #   Indicates whether there are additional occurrences of sensitive data
+    #   that are not included in the finding. This occurs when the number of
+    #   occurrences exceeds the maximum that can be included.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] status
+    #   The current status of the sensitive data detection.
+    #   @return [Types::ClassificationStatus]
+    #
+    # @!attribute [rw] sensitive_data
+    #   Provides details about sensitive data that was identified based on
+    #   built-in configuration.
+    #   @return [Array<Types::SensitiveDataResult>]
+    #
+    # @!attribute [rw] custom_data_identifiers
+    #   Provides details about sensitive data that was identified based on
+    #   customer-defined configuration.
+    #   @return [Types::CustomDataIdentifiersResult]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ClassificationResult AWS API Documentation
+    #
+    class ClassificationResult < Struct.new(
+      :mime_type,
+      :size_classified,
+      :additional_occurrences,
+      :status,
+      :sensitive_data,
+      :custom_data_identifiers)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides details about the current status of the sensitive data
+    # detection.
+    #
+    # @note When making an API call, you may pass ClassificationStatus
+    #   data as a hash:
+    #
+    #       {
+    #         code: "NonEmptyString",
+    #         reason: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] code
+    #   The code that represents the status of the sensitive data detection.
+    #   @return [String]
+    #
+    # @!attribute [rw] reason
+    #   A longer description of the current status of the sensitive data
+    #   detection.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ClassificationStatus AWS API Documentation
+    #
+    class ClassificationStatus < Struct.new(
+      :code,
+      :reason)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains finding details that are specific to control-based findings.
+    # Only returned for findings generated from controls.
+    #
+    # @note When making an API call, you may pass Compliance
+    #   data as a hash:
+    #
+    #       {
+    #         status: "PASSED", # accepts PASSED, WARNING, FAILED, NOT_AVAILABLE
+    #         related_requirements: ["NonEmptyString"],
+    #         status_reasons: [
+    #           {
+    #             reason_code: "NonEmptyString", # required
+    #             description: "NonEmptyString",
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] status
+    #   The result of a standards check.
+    #
+    #   The valid values for `Status` are as follows.
+    #
+    #   * * `PASSED` - Standards check passed for all evaluated resources.
+    #
+    #     * `WARNING` - Some information is missing or this check is not
+    #       supported for your configuration.
+    #
+    #     * `FAILED` - Standards check failed for at least one evaluated
+    #       resource.
+    #
+    #     * `NOT_AVAILABLE` - Check could not be performed due to a service
+    #       outage, API error, or because the result of the AWS Config
+    #       evaluation was `NOT_APPLICABLE`. If the AWS Config evaluation
     #       result was `NOT_APPLICABLE`, then after 3 days, Security Hub
     #       automatically archives the finding.
     #   @return [String]
@@ -16338,6 +17077,50 @@ module Aws::SecurityHub
     #               value: "NonEmptyString",
     #             },
     #           ],
+    #           finding_provider_fields_confidence: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_criticality: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_id: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_product_arn: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_label: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_original: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_types: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
     #         },
     #         group_by_attribute: "NonEmptyString", # required
     #       }
@@ -16395,9 +17178,9 @@ module Aws::SecurityHub
     #       }
     #
     # @!attribute [rw] account_details
-    #   The list of accounts to associate with the Security Hub master
-    #   account. For each account, the list includes the account ID and
-    #   optionally the email address.
+    #   The list of accounts to associate with the Security Hub
+    #   administrator account. For each account, the list includes the
+    #   account ID and optionally the email address.
     #   @return [Array<Types::AccountDetails>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/CreateMembersRequest AWS API Documentation
@@ -16421,6 +17204,170 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # The list of detected instances of sensitive data.
+    #
+    # @note When making an API call, you may pass CustomDataIdentifiersDetections
+    #   data as a hash:
+    #
+    #       {
+    #         count: 1,
+    #         arn: "NonEmptyString",
+    #         name: "NonEmptyString",
+    #         occurrences: {
+    #           line_ranges: [
+    #             {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           ],
+    #           offset_ranges: [
+    #             {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           ],
+    #           pages: [
+    #             {
+    #               page_number: 1,
+    #               line_range: {
+    #                 start: 1,
+    #                 end: 1,
+    #                 start_column: 1,
+    #               },
+    #               offset_range: {
+    #                 start: 1,
+    #                 end: 1,
+    #                 start_column: 1,
+    #               },
+    #             },
+    #           ],
+    #           records: [
+    #             {
+    #               json_path: "NonEmptyString",
+    #               record_index: 1,
+    #             },
+    #           ],
+    #           cells: [
+    #             {
+    #               column: 1,
+    #               row: 1,
+    #               column_name: "NonEmptyString",
+    #               cell_reference: "NonEmptyString",
+    #             },
+    #           ],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] count
+    #   The total number of occurrences of sensitive data that were
+    #   detected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] arn
+    #   The ARN of the custom identifier that was used to detect the
+    #   sensitive data.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   he name of the custom identifier that detected the sensitive data.
+    #   @return [String]
+    #
+    # @!attribute [rw] occurrences
+    #   Details about the sensitive data that was detected.
+    #   @return [Types::Occurrences]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/CustomDataIdentifiersDetections AWS API Documentation
+    #
+    class CustomDataIdentifiersDetections < Struct.new(
+      :count,
+      :arn,
+      :name,
+      :occurrences)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains an instance of sensitive data that was detected by a
+    # customer-defined identifier.
+    #
+    # @note When making an API call, you may pass CustomDataIdentifiersResult
+    #   data as a hash:
+    #
+    #       {
+    #         detections: [
+    #           {
+    #             count: 1,
+    #             arn: "NonEmptyString",
+    #             name: "NonEmptyString",
+    #             occurrences: {
+    #               line_ranges: [
+    #                 {
+    #                   start: 1,
+    #                   end: 1,
+    #                   start_column: 1,
+    #                 },
+    #               ],
+    #               offset_ranges: [
+    #                 {
+    #                   start: 1,
+    #                   end: 1,
+    #                   start_column: 1,
+    #                 },
+    #               ],
+    #               pages: [
+    #                 {
+    #                   page_number: 1,
+    #                   line_range: {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                   offset_range: {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                 },
+    #               ],
+    #               records: [
+    #                 {
+    #                   json_path: "NonEmptyString",
+    #                   record_index: 1,
+    #                 },
+    #               ],
+    #               cells: [
+    #                 {
+    #                   column: 1,
+    #                   row: 1,
+    #                   column_name: "NonEmptyString",
+    #                   cell_reference: "NonEmptyString",
+    #                 },
+    #               ],
+    #             },
+    #           },
+    #         ],
+    #         total_count: 1,
+    #       }
+    #
+    # @!attribute [rw] detections
+    #   The list of detected instances of sensitive data.
+    #   @return [Array<Types::CustomDataIdentifiersDetections>]
+    #
+    # @!attribute [rw] total_count
+    #   The total number of occurrences of sensitive data.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/CustomDataIdentifiersResult AWS API Documentation
+    #
+    class CustomDataIdentifiersResult < Struct.new(
+      :detections,
+      :total_count)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # CVSS scores from the advisory related to the vulnerability.
     #
     # @note When making an API call, you may pass Cvss
@@ -16432,24 +17379,172 @@ module Aws::SecurityHub
     #         base_vector: "NonEmptyString",
     #       }
     #
-    # @!attribute [rw] version
-    #   The version of CVSS for the CVSS score.
+    # @!attribute [rw] version
+    #   The version of CVSS for the CVSS score.
+    #   @return [String]
+    #
+    # @!attribute [rw] base_score
+    #   The base CVSS score.
+    #   @return [Float]
+    #
+    # @!attribute [rw] base_vector
+    #   The base scoring vector for the CVSS score.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Cvss AWS API Documentation
+    #
+    class Cvss < Struct.new(
+      :version,
+      :base_score,
+      :base_vector)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides details about sensitive data that was detected on a resource.
+    #
+    # @note When making an API call, you may pass DataClassificationDetails
+    #   data as a hash:
+    #
+    #       {
+    #         detailed_results_location: "NonEmptyString",
+    #         result: {
+    #           mime_type: "NonEmptyString",
+    #           size_classified: 1,
+    #           additional_occurrences: false,
+    #           status: {
+    #             code: "NonEmptyString",
+    #             reason: "NonEmptyString",
+    #           },
+    #           sensitive_data: [
+    #             {
+    #               category: "NonEmptyString",
+    #               detections: [
+    #                 {
+    #                   count: 1,
+    #                   type: "NonEmptyString",
+    #                   occurrences: {
+    #                     line_ranges: [
+    #                       {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     ],
+    #                     offset_ranges: [
+    #                       {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     ],
+    #                     pages: [
+    #                       {
+    #                         page_number: 1,
+    #                         line_range: {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                         offset_range: {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                       },
+    #                     ],
+    #                     records: [
+    #                       {
+    #                         json_path: "NonEmptyString",
+    #                         record_index: 1,
+    #                       },
+    #                     ],
+    #                     cells: [
+    #                       {
+    #                         column: 1,
+    #                         row: 1,
+    #                         column_name: "NonEmptyString",
+    #                         cell_reference: "NonEmptyString",
+    #                       },
+    #                     ],
+    #                   },
+    #                 },
+    #               ],
+    #               total_count: 1,
+    #             },
+    #           ],
+    #           custom_data_identifiers: {
+    #             detections: [
+    #               {
+    #                 count: 1,
+    #                 arn: "NonEmptyString",
+    #                 name: "NonEmptyString",
+    #                 occurrences: {
+    #                   line_ranges: [
+    #                     {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   ],
+    #                   offset_ranges: [
+    #                     {
+    #                       start: 1,
+    #                       end: 1,
+    #                       start_column: 1,
+    #                     },
+    #                   ],
+    #                   pages: [
+    #                     {
+    #                       page_number: 1,
+    #                       line_range: {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                       offset_range: {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     },
+    #                   ],
+    #                   records: [
+    #                     {
+    #                       json_path: "NonEmptyString",
+    #                       record_index: 1,
+    #                     },
+    #                   ],
+    #                   cells: [
+    #                     {
+    #                       column: 1,
+    #                       row: 1,
+    #                       column_name: "NonEmptyString",
+    #                       cell_reference: "NonEmptyString",
+    #                     },
+    #                   ],
+    #                 },
+    #               },
+    #             ],
+    #             total_count: 1,
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] detailed_results_location
+    #   The path to the folder or file that contains the sensitive data.
     #   @return [String]
     #
-    # @!attribute [rw] base_score
-    #   The base CVSS score.
-    #   @return [Float]
-    #
-    # @!attribute [rw] base_vector
-    #   The base scoring vector for the CVSS score.
-    #   @return [String]
+    # @!attribute [rw] result
+    #   The details about the sensitive data that was detected on the
+    #   resource.
+    #   @return [Types::ClassificationResult]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Cvss AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DataClassificationDetails AWS API Documentation
     #
-    class Cvss < Struct.new(
-      :version,
-      :base_score,
-      :base_vector)
+    class DataClassificationDetails < Struct.new(
+      :detailed_results_location,
+      :result)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -16814,6 +17909,7 @@ module Aws::SecurityHub
     #       {
     #         next_token: "NextToken",
     #         max_results: 1,
+    #         product_arn: "NonEmptyString",
     #       }
     #
     # @!attribute [rw] next_token
@@ -16830,11 +17926,16 @@ module Aws::SecurityHub
     #   The maximum number of results to return.
     #   @return [Integer]
     #
+    # @!attribute [rw] product_arn
+    #   The ARN of the integration to return.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DescribeProductsRequest AWS API Documentation
     #
     class DescribeProductsRequest < Struct.new(
       :next_token,
-      :max_results)
+      :max_results,
+      :product_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -17017,6 +18118,16 @@ module Aws::SecurityHub
     #
     class DisableSecurityHubResponse < Aws::EmptyStructure; end
 
+    # @api private
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DisassociateFromAdministratorAccountRequest AWS API Documentation
+    #
+    class DisassociateFromAdministratorAccountRequest < Aws::EmptyStructure; end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DisassociateFromAdministratorAccountResponse AWS API Documentation
+    #
+    class DisassociateFromAdministratorAccountResponse < Aws::EmptyStructure; end
+
     # @api private
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DisassociateFromMasterAccountRequest AWS API Documentation
@@ -17036,7 +18147,7 @@ module Aws::SecurityHub
     #
     # @!attribute [rw] account_ids
     #   The account IDs of the member accounts to disassociate from the
-    #   master account.
+    #   administrator account.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DisassociateMembersRequest AWS API Documentation
@@ -17176,6 +18287,103 @@ module Aws::SecurityHub
     #
     class EnableSecurityHubResponse < Aws::EmptyStructure; end
 
+    # In a `BatchImportFindings` request, finding providers use
+    # `FindingProviderFields` to provide and update values for confidence,
+    # criticality, related findings, severity, and types.
+    #
+    # @note When making an API call, you may pass FindingProviderFields
+    #   data as a hash:
+    #
+    #       {
+    #         confidence: 1,
+    #         criticality: 1,
+    #         related_findings: [
+    #           {
+    #             product_arn: "NonEmptyString", # required
+    #             id: "NonEmptyString", # required
+    #           },
+    #         ],
+    #         severity: {
+    #           label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
+    #           original: "NonEmptyString",
+    #         },
+    #         types: ["NonEmptyString"],
+    #       }
+    #
+    # @!attribute [rw] confidence
+    #   A finding's confidence. Confidence is defined as the likelihood
+    #   that a finding accurately identifies the behavior or issue that it
+    #   was intended to identify.
+    #
+    #   Confidence is scored on a 0-100 basis using a ratio scale, where 0
+    #   means zero percent confidence and 100 means 100 percent confidence.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] criticality
+    #   The level of importance assigned to the resources associated with
+    #   the finding.
+    #
+    #   A score of 0 means that the underlying resources have no
+    #   criticality, and a score of 100 is reserved for the most critical
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] related_findings
+    #   A list of findings that are related to the current finding.
+    #   @return [Array<Types::RelatedFinding>]
+    #
+    # @!attribute [rw] severity
+    #   The severity of a finding.
+    #   @return [Types::FindingProviderSeverity]
+    #
+    # @!attribute [rw] types
+    #   One or more finding types in the format of
+    #   `namespace/category/classifier` that classify a finding.
+    #
+    #   Valid namespace values are: Software and Configuration Checks \|
+    #   TTPs \| Effects \| Unusual Behaviors \| Sensitive Data
+    #   Identifications
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/FindingProviderFields AWS API Documentation
+    #
+    class FindingProviderFields < Struct.new(
+      :confidence,
+      :criticality,
+      :related_findings,
+      :severity,
+      :types)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The severity assigned to the finding by the finding provider.
+    #
+    # @note When making an API call, you may pass FindingProviderSeverity
+    #   data as a hash:
+    #
+    #       {
+    #         label: "INFORMATIONAL", # accepts INFORMATIONAL, LOW, MEDIUM, HIGH, CRITICAL
+    #         original: "NonEmptyString",
+    #       }
+    #
+    # @!attribute [rw] label
+    #   The severity label assigned to the finding by the finding provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] original
+    #   The finding provider's original value for the severity.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/FindingProviderSeverity AWS API Documentation
+    #
+    class FindingProviderSeverity < Struct.new(
+      :label,
+      :original)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Provides the latitude and longitude coordinates of a location.
     #
     # @note When making an API call, you may pass GeoLocation
@@ -17203,6 +18411,24 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # @api private
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetAdministratorAccountRequest AWS API Documentation
+    #
+    class GetAdministratorAccountRequest < Aws::EmptyStructure; end
+
+    # @!attribute [rw] administrator
+    #   Details about an invitation.
+    #   @return [Types::Invitation]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetAdministratorAccountResponse AWS API Documentation
+    #
+    class GetAdministratorAccountResponse < Struct.new(
+      :administrator)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass GetEnabledStandardsRequest
     #   data as a hash:
     #
@@ -17817,6 +19043,50 @@ module Aws::SecurityHub
     #               value: "NonEmptyString",
     #             },
     #           ],
+    #           finding_provider_fields_confidence: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_criticality: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_id: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_product_arn: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_label: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_original: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_types: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
     #         },
     #         sort_criteria: [
     #           {
@@ -17997,8 +19267,8 @@ module Aws::SecurityHub
     class GetMasterAccountRequest < Aws::EmptyStructure; end
 
     # @!attribute [rw] master
-    #   A list of details about the Security Hub master account for the
-    #   current member account.
+    #   A list of details about the Security Hub administrator account for
+    #   the current member account.
     #   @return [Types::Invitation]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetMasterAccountResponse AWS API Documentation
@@ -18215,7 +19485,7 @@ module Aws::SecurityHub
     # Details about an invitation.
     #
     # @!attribute [rw] account_id
-    #   The account ID of the Security Hub master account that the
+    #   The account ID of the Security Hub administrator account that the
     #   invitation was sent from.
     #   @return [String]
     #
@@ -18228,8 +19498,8 @@ module Aws::SecurityHub
     #   @return [Time]
     #
     # @!attribute [rw] member_status
-    #   The current status of the association between the member and master
-    #   accounts.
+    #   The current status of the association between the member and
+    #   administrator accounts.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Invitation AWS API Documentation
@@ -18517,12 +19787,12 @@ module Aws::SecurityHub
     #
     # @!attribute [rw] only_associated
     #   Specifies which member accounts to include in the response based on
-    #   their relationship status with the master account. The default value
-    #   is `TRUE`.
+    #   their relationship status with the administrator account. The
+    #   default value is `TRUE`.
     #
     #   If `OnlyAssociated` is set to `TRUE`, the response includes member
-    #   accounts whose relationship status with the master is set to
-    #   `ENABLED`.
+    #   accounts whose relationship status with the administrator account is
+    #   set to `ENABLED`.
     #
     #   If `OnlyAssociated` is set to `FALSE`, the response includes all
     #   existing member accounts.
@@ -18787,35 +20057,42 @@ module Aws::SecurityHub
     #   @return [String]
     #
     # @!attribute [rw] master_id
-    #   The AWS account ID of the Security Hub master account associated
-    #   with this member account.
+    #   This is replaced by `AdministratorID`.
+    #
+    #   The AWS account ID of the Security Hub administrator account
+    #   associated with this member account.
+    #   @return [String]
+    #
+    # @!attribute [rw] administrator_id
+    #   The AWS account ID of the Security Hub administrator account
+    #   associated with this member account.
     #   @return [String]
     #
     # @!attribute [rw] member_status
     #   The status of the relationship between the member account and its
-    #   master account.
+    #   administrator account.
     #
     #   The status can have one of the following values:
     #
-    #   * `CREATED` - Indicates that the master account added the member
-    #     account, but has not yet invited the member account.
+    #   * `CREATED` - Indicates that the administrator account added the
+    #     member account, but has not yet invited the member account.
     #
-    #   * `INVITED` - Indicates that the master account invited the member
-    #     account. The member account has not yet responded to the
+    #   * `INVITED` - Indicates that the administrator account invited the
+    #     member account. The member account has not yet responded to the
     #     invitation.
     #
     #   * `ENABLED` - Indicates that the member account is currently active.
     #     For manually invited member accounts, indicates that the member
     #     account accepted the invitation.
     #
-    #   * `REMOVED` - Indicates that the master account disassociated the
-    #     member account.
+    #   * `REMOVED` - Indicates that the administrator account disassociated
+    #     the member account.
     #
     #   * `RESIGNED` - Indicates that the member account disassociated
-    #     themselves from the master account.
+    #     themselves from the administrator account.
     #
-    #   * `DELETED` - Indicates that the master account deleted the member
-    #     account.
+    #   * `DELETED` - Indicates that the administrator account deleted the
+    #     member account.
     #   @return [String]
     #
     # @!attribute [rw] invited_at
@@ -18834,6 +20111,7 @@ module Aws::SecurityHub
       :account_id,
       :email,
       :master_id,
+      :administrator_id,
       :member_status,
       :invited_at,
       :updated_at)
@@ -19283,6 +20561,139 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # The detected occurrences of sensitive data.
+    #
+    # @note When making an API call, you may pass Occurrences
+    #   data as a hash:
+    #
+    #       {
+    #         line_ranges: [
+    #           {
+    #             start: 1,
+    #             end: 1,
+    #             start_column: 1,
+    #           },
+    #         ],
+    #         offset_ranges: [
+    #           {
+    #             start: 1,
+    #             end: 1,
+    #             start_column: 1,
+    #           },
+    #         ],
+    #         pages: [
+    #           {
+    #             page_number: 1,
+    #             line_range: {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #             offset_range: {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           },
+    #         ],
+    #         records: [
+    #           {
+    #             json_path: "NonEmptyString",
+    #             record_index: 1,
+    #           },
+    #         ],
+    #         cells: [
+    #           {
+    #             column: 1,
+    #             row: 1,
+    #             column_name: "NonEmptyString",
+    #             cell_reference: "NonEmptyString",
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] line_ranges
+    #   Occurrences of sensitive data detected in a non-binary text file or
+    #   a Microsoft Word file. Non-binary text files include files such as
+    #   HTML, XML, JSON, and TXT files.
+    #   @return [Array<Types::Range>]
+    #
+    # @!attribute [rw] offset_ranges
+    #   Occurrences of sensitive data detected in a binary text file.
+    #   @return [Array<Types::Range>]
+    #
+    # @!attribute [rw] pages
+    #   Occurrences of sensitive data in an Adobe Portable Document Format
+    #   (PDF) file.
+    #   @return [Array<Types::Page>]
+    #
+    # @!attribute [rw] records
+    #   Occurrences of sensitive data in an Apache Avro object container or
+    #   an Apache Parquet file.
+    #   @return [Array<Types::Record>]
+    #
+    # @!attribute [rw] cells
+    #   Occurrences of sensitive data detected in Microsoft Excel workbooks,
+    #   comma-separated value (CSV) files, or tab-separated value (TSV)
+    #   files.
+    #   @return [Array<Types::Cell>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Occurrences AWS API Documentation
+    #
+    class Occurrences < Struct.new(
+      :line_ranges,
+      :offset_ranges,
+      :pages,
+      :records,
+      :cells)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An occurrence of sensitive data in an Adobe Portable Document Format
+    # (PDF) file.
+    #
+    # @note When making an API call, you may pass Page
+    #   data as a hash:
+    #
+    #       {
+    #         page_number: 1,
+    #         line_range: {
+    #           start: 1,
+    #           end: 1,
+    #           start_column: 1,
+    #         },
+    #         offset_range: {
+    #           start: 1,
+    #           end: 1,
+    #           start_column: 1,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] page_number
+    #   The page number of the page that contains the sensitive data.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] line_range
+    #   An occurrence of sensitive data detected in a non-binary text file
+    #   or a Microsoft Word file. Non-binary text files include files such
+    #   as HTML, XML, JSON, and TXT files.
+    #   @return [Types::Range]
+    #
+    # @!attribute [rw] offset_range
+    #   An occurrence of sensitive data detected in a binary text file.
+    #   @return [Types::Range]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Page AWS API Documentation
+    #
+    class Page < Struct.new(
+      :page_number,
+      :line_range,
+      :offset_range)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Provides an overview of the patch compliance status for an instance
     # against a selected compliance standard.
     #
@@ -19630,38 +21041,85 @@ module Aws::SecurityHub
     #   The types of integration that the product supports. Available values
     #   are the following.
     #
-    #   * `SEND_FINDINGS_TO_SECURITY_HUB` - Indicates that the integration
-    #     sends findings to Security Hub.
+    #   * `SEND_FINDINGS_TO_SECURITY_HUB` - The integration sends findings
+    #     to Security Hub.
     #
-    #   * `RECEIVE_FINDINGS_FROM_SECURITY_HUB` - Indicates that the
-    #     integration receives findings from Security Hub.
+    #   * `RECEIVE_FINDINGS_FROM_SECURITY_HUB` - The integration receives
+    #     findings from Security Hub.
+    #
+    #   * `UPDATE_FINDINGS_IN_SECURITY_HUB` - The integration does not send
+    #     new findings to Security Hub, but does make updates to the
+    #     findings that it receives from Security Hub.
     #   @return [Array<String>]
     #
     # @!attribute [rw] marketplace_url
-    #   The URL for the page that contains more information about the
-    #   product.
+    #   For integrations with AWS services, the AWS Console URL from which
+    #   to activate the service.
+    #
+    #   For integrations with third-party products, the AWS Marketplace URL
+    #   from which to subscribe to or purchase the product.
     #   @return [String]
     #
     # @!attribute [rw] activation_url
-    #   The URL used to activate the product.
+    #   The URL to the service or product documentation about the
+    #   integration with Security Hub, including how to activate the
+    #   integration.
+    #   @return [String]
+    #
+    # @!attribute [rw] product_subscription_resource_policy
+    #   The resource policy associated with the product.
     #   @return [String]
     #
-    # @!attribute [rw] product_subscription_resource_policy
-    #   The resource policy associated with the product.
-    #   @return [String]
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Product AWS API Documentation
+    #
+    class Product < Struct.new(
+      :product_arn,
+      :product_name,
+      :company_name,
+      :description,
+      :categories,
+      :integration_types,
+      :marketplace_url,
+      :activation_url,
+      :product_subscription_resource_policy)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Identifies where the sensitive data begins and ends.
+    #
+    # @note When making an API call, you may pass Range
+    #   data as a hash:
+    #
+    #       {
+    #         start: 1,
+    #         end: 1,
+    #         start_column: 1,
+    #       }
+    #
+    # @!attribute [rw] start
+    #   The number of lines (for a line range) or characters (for an offset
+    #   range) from the beginning of the file to the end of the sensitive
+    #   data.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] end
+    #   The number of lines (for a line range) or characters (for an offset
+    #   range) from the beginning of the file to the end of the sensitive
+    #   data.
+    #   @return [Integer]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Product AWS API Documentation
+    # @!attribute [rw] start_column
+    #   In the line where the sensitive data starts, the column within the
+    #   line where the sensitive data starts.
+    #   @return [Integer]
     #
-    class Product < Struct.new(
-      :product_arn,
-      :product_name,
-      :company_name,
-      :description,
-      :categories,
-      :integration_types,
-      :marketplace_url,
-      :activation_url,
-      :product_subscription_resource_policy)
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Range AWS API Documentation
+    #
+    class Range < Struct.new(
+      :start,
+      :end,
+      :start_column)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -19696,6 +21154,38 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # An occurrence of sensitive data in an Apache Avro object container or
+    # an Apache Parquet file.
+    #
+    # @note When making an API call, you may pass Record
+    #   data as a hash:
+    #
+    #       {
+    #         json_path: "NonEmptyString",
+    #         record_index: 1,
+    #       }
+    #
+    # @!attribute [rw] json_path
+    #   The path, as a JSONPath expression, to the field in the record that
+    #   contains the data. If the field name is longer than 20 characters,
+    #   it is truncated. If the path is longer than 250 characters, it is
+    #   truncated.
+    #   @return [String]
+    #
+    # @!attribute [rw] record_index
+    #   The record index, starting from 0, for the record that contains the
+    #   data.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Record AWS API Documentation
+    #
+    class Record < Struct.new(
+      :json_path,
+      :record_index)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Details about a related finding.
     #
     # @note When making an API call, you may pass RelatedFinding
@@ -19762,6 +21252,130 @@ module Aws::SecurityHub
     #         tags: {
     #           "NonEmptyString" => "NonEmptyString",
     #         },
+    #         data_classification: {
+    #           detailed_results_location: "NonEmptyString",
+    #           result: {
+    #             mime_type: "NonEmptyString",
+    #             size_classified: 1,
+    #             additional_occurrences: false,
+    #             status: {
+    #               code: "NonEmptyString",
+    #               reason: "NonEmptyString",
+    #             },
+    #             sensitive_data: [
+    #               {
+    #                 category: "NonEmptyString",
+    #                 detections: [
+    #                   {
+    #                     count: 1,
+    #                     type: "NonEmptyString",
+    #                     occurrences: {
+    #                       line_ranges: [
+    #                         {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                       ],
+    #                       offset_ranges: [
+    #                         {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                       ],
+    #                       pages: [
+    #                         {
+    #                           page_number: 1,
+    #                           line_range: {
+    #                             start: 1,
+    #                             end: 1,
+    #                             start_column: 1,
+    #                           },
+    #                           offset_range: {
+    #                             start: 1,
+    #                             end: 1,
+    #                             start_column: 1,
+    #                           },
+    #                         },
+    #                       ],
+    #                       records: [
+    #                         {
+    #                           json_path: "NonEmptyString",
+    #                           record_index: 1,
+    #                         },
+    #                       ],
+    #                       cells: [
+    #                         {
+    #                           column: 1,
+    #                           row: 1,
+    #                           column_name: "NonEmptyString",
+    #                           cell_reference: "NonEmptyString",
+    #                         },
+    #                       ],
+    #                     },
+    #                   },
+    #                 ],
+    #                 total_count: 1,
+    #               },
+    #             ],
+    #             custom_data_identifiers: {
+    #               detections: [
+    #                 {
+    #                   count: 1,
+    #                   arn: "NonEmptyString",
+    #                   name: "NonEmptyString",
+    #                   occurrences: {
+    #                     line_ranges: [
+    #                       {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     ],
+    #                     offset_ranges: [
+    #                       {
+    #                         start: 1,
+    #                         end: 1,
+    #                         start_column: 1,
+    #                       },
+    #                     ],
+    #                     pages: [
+    #                       {
+    #                         page_number: 1,
+    #                         line_range: {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                         offset_range: {
+    #                           start: 1,
+    #                           end: 1,
+    #                           start_column: 1,
+    #                         },
+    #                       },
+    #                     ],
+    #                     records: [
+    #                       {
+    #                         json_path: "NonEmptyString",
+    #                         record_index: 1,
+    #                       },
+    #                     ],
+    #                     cells: [
+    #                       {
+    #                         column: 1,
+    #                         row: 1,
+    #                         column_name: "NonEmptyString",
+    #                         cell_reference: "NonEmptyString",
+    #                       },
+    #                     ],
+    #                   },
+    #                 },
+    #               ],
+    #               total_count: 1,
+    #             },
+    #           },
+    #         },
     #         details: {
     #           aws_auto_scaling_auto_scaling_group: {
     #             launch_configuration_name: "NonEmptyString",
@@ -20063,6 +21677,18 @@ module Aws::SecurityHub
     #                 },
     #               ],
     #             },
+    #             public_access_block_configuration: {
+    #               block_public_acls: false,
+    #               block_public_policy: false,
+    #               ignore_public_acls: false,
+    #               restrict_public_buckets: false,
+    #             },
+    #           },
+    #           aws_s3_account_public_access_block: {
+    #             block_public_acls: false,
+    #             block_public_policy: false,
+    #             ignore_public_acls: false,
+    #             restrict_public_buckets: false,
     #           },
     #           aws_s3_object: {
     #             last_modified: "NonEmptyString",
@@ -21148,6 +22774,11 @@ module Aws::SecurityHub
     #   finding was processed.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] data_classification
+    #   Contains information about sensitive data that was detected on the
+    #   resource.
+    #   @return [Types::DataClassificationDetails]
+    #
     # @!attribute [rw] details
     #   Additional details about the resource related to a finding.
     #   @return [Types::ResourceDetails]
@@ -21161,6 +22792,7 @@ module Aws::SecurityHub
       :region,
       :resource_role,
       :tags,
+      :data_classification,
       :details)
       SENSITIVE = []
       include Aws::Structure
@@ -21501,6 +23133,18 @@ module Aws::SecurityHub
     #               },
     #             ],
     #           },
+    #           public_access_block_configuration: {
+    #             block_public_acls: false,
+    #             block_public_policy: false,
+    #             ignore_public_acls: false,
+    #             restrict_public_buckets: false,
+    #           },
+    #         },
+    #         aws_s3_account_public_access_block: {
+    #           block_public_acls: false,
+    #           block_public_policy: false,
+    #           ignore_public_acls: false,
+    #           restrict_public_buckets: false,
     #         },
     #         aws_s3_object: {
     #           last_modified: "NonEmptyString",
@@ -22600,6 +24244,11 @@ module Aws::SecurityHub
     #   Details about an Amazon S3 bucket related to a finding.
     #   @return [Types::AwsS3BucketDetails]
     #
+    # @!attribute [rw] aws_s3_account_public_access_block
+    #   Details about the Amazon S3 Public Access Block configuration for an
+    #   account.
+    #   @return [Types::AwsS3AccountPublicAccessBlockDetails]
+    #
     # @!attribute [rw] aws_s3_object
     #   Details about an Amazon S3 object related to a finding.
     #   @return [Types::AwsS3ObjectDetails]
@@ -22743,6 +24392,7 @@ module Aws::SecurityHub
       :aws_elbv_2_load_balancer,
       :aws_elasticsearch_domain,
       :aws_s3_bucket,
+      :aws_s3_account_public_access_block,
       :aws_s3_object,
       :aws_secrets_manager_secret,
       :aws_iam_access_key,
@@ -22813,6 +24463,171 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # The list of detected instances of sensitive data.
+    #
+    # @note When making an API call, you may pass SensitiveDataDetections
+    #   data as a hash:
+    #
+    #       {
+    #         count: 1,
+    #         type: "NonEmptyString",
+    #         occurrences: {
+    #           line_ranges: [
+    #             {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           ],
+    #           offset_ranges: [
+    #             {
+    #               start: 1,
+    #               end: 1,
+    #               start_column: 1,
+    #             },
+    #           ],
+    #           pages: [
+    #             {
+    #               page_number: 1,
+    #               line_range: {
+    #                 start: 1,
+    #                 end: 1,
+    #                 start_column: 1,
+    #               },
+    #               offset_range: {
+    #                 start: 1,
+    #                 end: 1,
+    #                 start_column: 1,
+    #               },
+    #             },
+    #           ],
+    #           records: [
+    #             {
+    #               json_path: "NonEmptyString",
+    #               record_index: 1,
+    #             },
+    #           ],
+    #           cells: [
+    #             {
+    #               column: 1,
+    #               row: 1,
+    #               column_name: "NonEmptyString",
+    #               cell_reference: "NonEmptyString",
+    #             },
+    #           ],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] count
+    #   The total number of occurrences of sensitive data that were
+    #   detected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] type
+    #   The type of sensitive data that was detected. For example, the type
+    #   might indicate that the data is an email address.
+    #   @return [String]
+    #
+    # @!attribute [rw] occurrences
+    #   Details about the sensitive data that was detected.
+    #   @return [Types::Occurrences]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/SensitiveDataDetections AWS API Documentation
+    #
+    class SensitiveDataDetections < Struct.new(
+      :count,
+      :type,
+      :occurrences)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains a detected instance of sensitive data that are based on
+    # built-in identifiers.
+    #
+    # @note When making an API call, you may pass SensitiveDataResult
+    #   data as a hash:
+    #
+    #       {
+    #         category: "NonEmptyString",
+    #         detections: [
+    #           {
+    #             count: 1,
+    #             type: "NonEmptyString",
+    #             occurrences: {
+    #               line_ranges: [
+    #                 {
+    #                   start: 1,
+    #                   end: 1,
+    #                   start_column: 1,
+    #                 },
+    #               ],
+    #               offset_ranges: [
+    #                 {
+    #                   start: 1,
+    #                   end: 1,
+    #                   start_column: 1,
+    #                 },
+    #               ],
+    #               pages: [
+    #                 {
+    #                   page_number: 1,
+    #                   line_range: {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                   offset_range: {
+    #                     start: 1,
+    #                     end: 1,
+    #                     start_column: 1,
+    #                   },
+    #                 },
+    #               ],
+    #               records: [
+    #                 {
+    #                   json_path: "NonEmptyString",
+    #                   record_index: 1,
+    #                 },
+    #               ],
+    #               cells: [
+    #                 {
+    #                   column: 1,
+    #                   row: 1,
+    #                   column_name: "NonEmptyString",
+    #                   cell_reference: "NonEmptyString",
+    #                 },
+    #               ],
+    #             },
+    #           },
+    #         ],
+    #         total_count: 1,
+    #       }
+    #
+    # @!attribute [rw] category
+    #   The category of sensitive data that was detected. For example, the
+    #   category can indicate that the sensitive data involved credentials,
+    #   financial information, or personal information.
+    #   @return [String]
+    #
+    # @!attribute [rw] detections
+    #   The list of detected instances of sensitive data.
+    #   @return [Array<Types::SensitiveDataDetections>]
+    #
+    # @!attribute [rw] total_count
+    #   The total number of occurrences of sensitive data.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/SensitiveDataResult AWS API Documentation
+    #
+    class SensitiveDataResult < Struct.new(
+      :category,
+      :detections,
+      :total_count)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The severity of the finding.
     #
     # The finding provider can provide the initial severity. The finding
@@ -24061,6 +25876,50 @@ module Aws::SecurityHub
     #               value: "NonEmptyString",
     #             },
     #           ],
+    #           finding_provider_fields_confidence: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_criticality: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_id: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_product_arn: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_label: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_original: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_types: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
     #         },
     #         note: {
     #           text: "NonEmptyString", # required
@@ -24656,6 +26515,50 @@ module Aws::SecurityHub
     #               value: "NonEmptyString",
     #             },
     #           ],
+    #           finding_provider_fields_confidence: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_criticality: [
+    #             {
+    #               gte: 1.0,
+    #               lte: 1.0,
+    #               eq: 1.0,
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_id: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_related_findings_product_arn: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_label: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_severity_original: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
+    #           finding_provider_fields_types: [
+    #             {
+    #               value: "NonEmptyString",
+    #               comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS
+    #             },
+    #           ],
     #         },
     #         group_by_attribute: "NonEmptyString",
     #       }