aws-sdk-securityhub 1.49.0 → 1.53.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +20 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-securityhub/client.rb +608 -9
- data/lib/aws-sdk-securityhub/client_api.rb +470 -0
- data/lib/aws-sdk-securityhub/types.rb +4344 -60
- data/lib/aws-sdk-securityhub.rb +1 -1
- metadata +5 -5
|
@@ -825,8 +825,29 @@ module Aws::SecurityHub
|
|
|
825
825
|
# },
|
|
826
826
|
# aws_code_build_project: {
|
|
827
827
|
# encryption_key: "NonEmptyString",
|
|
828
|
+
# artifacts: [
|
|
829
|
+
# {
|
|
830
|
+
# artifact_identifier: "NonEmptyString",
|
|
831
|
+
# encryption_disabled: false,
|
|
832
|
+
# location: "NonEmptyString",
|
|
833
|
+
# name: "NonEmptyString",
|
|
834
|
+
# namespace_type: "NonEmptyString",
|
|
835
|
+
# override_artifact_name: false,
|
|
836
|
+
# packaging: "NonEmptyString",
|
|
837
|
+
# path: "NonEmptyString",
|
|
838
|
+
# type: "NonEmptyString",
|
|
839
|
+
# },
|
|
840
|
+
# ],
|
|
828
841
|
# environment: {
|
|
829
842
|
# certificate: "NonEmptyString",
|
|
843
|
+
# environment_variables: [
|
|
844
|
+
# {
|
|
845
|
+
# name: "NonEmptyString",
|
|
846
|
+
# type: "NonEmptyString",
|
|
847
|
+
# value: "NonEmptyString",
|
|
848
|
+
# },
|
|
849
|
+
# ],
|
|
850
|
+
# privileged_mode: false,
|
|
830
851
|
# image_pull_credentials_type: "NonEmptyString",
|
|
831
852
|
# registry_credential: {
|
|
832
853
|
# credential: "NonEmptyString",
|
|
@@ -842,6 +863,18 @@ module Aws::SecurityHub
|
|
|
842
863
|
# insecure_ssl: false,
|
|
843
864
|
# },
|
|
844
865
|
# service_role: "NonEmptyString",
|
|
866
|
+
# logs_config: {
|
|
867
|
+
# cloud_watch_logs: {
|
|
868
|
+
# group_name: "NonEmptyString",
|
|
869
|
+
# status: "NonEmptyString",
|
|
870
|
+
# stream_name: "NonEmptyString",
|
|
871
|
+
# },
|
|
872
|
+
# s3_logs: {
|
|
873
|
+
# encryption_disabled: false,
|
|
874
|
+
# location: "NonEmptyString",
|
|
875
|
+
# status: "NonEmptyString",
|
|
876
|
+
# },
|
|
877
|
+
# },
|
|
845
878
|
# vpc_config: {
|
|
846
879
|
# vpc_id: "NonEmptyString",
|
|
847
880
|
# subnets: ["NonEmptyString"],
|
|
@@ -893,6 +926,15 @@ module Aws::SecurityHub
|
|
|
893
926
|
# },
|
|
894
927
|
# ],
|
|
895
928
|
# },
|
|
929
|
+
# viewer_certificate: {
|
|
930
|
+
# acm_certificate_arn: "NonEmptyString",
|
|
931
|
+
# certificate: "NonEmptyString",
|
|
932
|
+
# certificate_source: "NonEmptyString",
|
|
933
|
+
# cloud_front_default_certificate: false,
|
|
934
|
+
# iam_certificate_id: "NonEmptyString",
|
|
935
|
+
# minimum_protocol_version: "NonEmptyString",
|
|
936
|
+
# ssl_support_method: "NonEmptyString",
|
|
937
|
+
# },
|
|
896
938
|
# status: "NonEmptyString",
|
|
897
939
|
# web_acl_id: "NonEmptyString",
|
|
898
940
|
# },
|
|
@@ -1131,6 +1173,12 @@ module Aws::SecurityHub
|
|
|
1131
1173
|
# },
|
|
1132
1174
|
# type: "NonEmptyString",
|
|
1133
1175
|
# vpc_id: "NonEmptyString",
|
|
1176
|
+
# load_balancer_attributes: [
|
|
1177
|
+
# {
|
|
1178
|
+
# key: "NonEmptyString",
|
|
1179
|
+
# value: "NonEmptyString",
|
|
1180
|
+
# },
|
|
1181
|
+
# ],
|
|
1134
1182
|
# },
|
|
1135
1183
|
# aws_elastic_beanstalk_environment: {
|
|
1136
1184
|
# application_name: "NonEmptyString",
|
|
@@ -1230,6 +1278,7 @@ module Aws::SecurityHub
|
|
|
1230
1278
|
# aws_s3_bucket: {
|
|
1231
1279
|
# owner_id: "NonEmptyString",
|
|
1232
1280
|
# owner_name: "NonEmptyString",
|
|
1281
|
+
# owner_account_id: "NonEmptyString",
|
|
1233
1282
|
# created_at: "NonEmptyString",
|
|
1234
1283
|
# server_side_encryption_configuration: {
|
|
1235
1284
|
# rules: [
|
|
@@ -1296,6 +1345,53 @@ module Aws::SecurityHub
|
|
|
1296
1345
|
# ignore_public_acls: false,
|
|
1297
1346
|
# restrict_public_buckets: false,
|
|
1298
1347
|
# },
|
|
1348
|
+
# access_control_list: "NonEmptyString",
|
|
1349
|
+
# bucket_logging_configuration: {
|
|
1350
|
+
# destination_bucket_name: "NonEmptyString",
|
|
1351
|
+
# log_file_prefix: "NonEmptyString",
|
|
1352
|
+
# },
|
|
1353
|
+
# bucket_website_configuration: {
|
|
1354
|
+
# error_document: "NonEmptyString",
|
|
1355
|
+
# index_document_suffix: "NonEmptyString",
|
|
1356
|
+
# redirect_all_requests_to: {
|
|
1357
|
+
# hostname: "NonEmptyString",
|
|
1358
|
+
# protocol: "NonEmptyString",
|
|
1359
|
+
# },
|
|
1360
|
+
# routing_rules: [
|
|
1361
|
+
# {
|
|
1362
|
+
# condition: {
|
|
1363
|
+
# http_error_code_returned_equals: "NonEmptyString",
|
|
1364
|
+
# key_prefix_equals: "NonEmptyString",
|
|
1365
|
+
# },
|
|
1366
|
+
# redirect: {
|
|
1367
|
+
# hostname: "NonEmptyString",
|
|
1368
|
+
# http_redirect_code: "NonEmptyString",
|
|
1369
|
+
# protocol: "NonEmptyString",
|
|
1370
|
+
# replace_key_prefix_with: "NonEmptyString",
|
|
1371
|
+
# replace_key_with: "NonEmptyString",
|
|
1372
|
+
# },
|
|
1373
|
+
# },
|
|
1374
|
+
# ],
|
|
1375
|
+
# },
|
|
1376
|
+
# bucket_notification_configuration: {
|
|
1377
|
+
# configurations: [
|
|
1378
|
+
# {
|
|
1379
|
+
# events: ["NonEmptyString"],
|
|
1380
|
+
# filter: {
|
|
1381
|
+
# s3_key_filter: {
|
|
1382
|
+
# filter_rules: [
|
|
1383
|
+
# {
|
|
1384
|
+
# name: "Prefix", # accepts Prefix, Suffix
|
|
1385
|
+
# value: "NonEmptyString",
|
|
1386
|
+
# },
|
|
1387
|
+
# ],
|
|
1388
|
+
# },
|
|
1389
|
+
# },
|
|
1390
|
+
# destination: "NonEmptyString",
|
|
1391
|
+
# type: "NonEmptyString",
|
|
1392
|
+
# },
|
|
1393
|
+
# ],
|
|
1394
|
+
# },
|
|
1299
1395
|
# },
|
|
1300
1396
|
# aws_s3_account_public_access_block: {
|
|
1301
1397
|
# block_public_acls: false,
|
|
@@ -1983,6 +2079,7 @@ module Aws::SecurityHub
|
|
|
1983
2079
|
# key_state: "NonEmptyString",
|
|
1984
2080
|
# origin: "NonEmptyString",
|
|
1985
2081
|
# description: "NonEmptyString",
|
|
2082
|
+
# key_rotation_status: false,
|
|
1986
2083
|
# },
|
|
1987
2084
|
# aws_lambda_function: {
|
|
1988
2085
|
# code: {
|
|
@@ -2674,6 +2771,250 @@ module Aws::SecurityHub
|
|
|
2674
2771
|
# ],
|
|
2675
2772
|
# task_definition: "NonEmptyString",
|
|
2676
2773
|
# },
|
|
2774
|
+
# aws_auto_scaling_launch_configuration: {
|
|
2775
|
+
# associate_public_ip_address: false,
|
|
2776
|
+
# block_device_mappings: [
|
|
2777
|
+
# {
|
|
2778
|
+
# device_name: "NonEmptyString",
|
|
2779
|
+
# ebs: {
|
|
2780
|
+
# delete_on_termination: false,
|
|
2781
|
+
# encrypted: false,
|
|
2782
|
+
# iops: 1,
|
|
2783
|
+
# snapshot_id: "NonEmptyString",
|
|
2784
|
+
# volume_size: 1,
|
|
2785
|
+
# volume_type: "NonEmptyString",
|
|
2786
|
+
# },
|
|
2787
|
+
# no_device: false,
|
|
2788
|
+
# virtual_name: "NonEmptyString",
|
|
2789
|
+
# },
|
|
2790
|
+
# ],
|
|
2791
|
+
# classic_link_vpc_id: "NonEmptyString",
|
|
2792
|
+
# classic_link_vpc_security_groups: ["NonEmptyString"],
|
|
2793
|
+
# created_time: "NonEmptyString",
|
|
2794
|
+
# ebs_optimized: false,
|
|
2795
|
+
# iam_instance_profile: "NonEmptyString",
|
|
2796
|
+
# image_id: "NonEmptyString",
|
|
2797
|
+
# instance_monitoring: {
|
|
2798
|
+
# enabled: false,
|
|
2799
|
+
# },
|
|
2800
|
+
# instance_type: "NonEmptyString",
|
|
2801
|
+
# kernel_id: "NonEmptyString",
|
|
2802
|
+
# key_name: "NonEmptyString",
|
|
2803
|
+
# launch_configuration_name: "NonEmptyString",
|
|
2804
|
+
# placement_tenancy: "NonEmptyString",
|
|
2805
|
+
# ramdisk_id: "NonEmptyString",
|
|
2806
|
+
# security_groups: ["NonEmptyString"],
|
|
2807
|
+
# spot_price: "NonEmptyString",
|
|
2808
|
+
# user_data: "NonEmptyString",
|
|
2809
|
+
# },
|
|
2810
|
+
# aws_ec2_vpn_connection: {
|
|
2811
|
+
# vpn_connection_id: "NonEmptyString",
|
|
2812
|
+
# state: "NonEmptyString",
|
|
2813
|
+
# customer_gateway_id: "NonEmptyString",
|
|
2814
|
+
# customer_gateway_configuration: "NonEmptyString",
|
|
2815
|
+
# type: "NonEmptyString",
|
|
2816
|
+
# vpn_gateway_id: "NonEmptyString",
|
|
2817
|
+
# category: "NonEmptyString",
|
|
2818
|
+
# vgw_telemetry: [
|
|
2819
|
+
# {
|
|
2820
|
+
# accepted_route_count: 1,
|
|
2821
|
+
# certificate_arn: "NonEmptyString",
|
|
2822
|
+
# last_status_change: "NonEmptyString",
|
|
2823
|
+
# outside_ip_address: "NonEmptyString",
|
|
2824
|
+
# status: "NonEmptyString",
|
|
2825
|
+
# status_message: "NonEmptyString",
|
|
2826
|
+
# },
|
|
2827
|
+
# ],
|
|
2828
|
+
# options: {
|
|
2829
|
+
# static_routes_only: false,
|
|
2830
|
+
# tunnel_options: [
|
|
2831
|
+
# {
|
|
2832
|
+
# dpd_timeout_seconds: 1,
|
|
2833
|
+
# ike_versions: ["NonEmptyString"],
|
|
2834
|
+
# outside_ip_address: "NonEmptyString",
|
|
2835
|
+
# phase_1_dh_group_numbers: [1],
|
|
2836
|
+
# phase_1_encryption_algorithms: ["NonEmptyString"],
|
|
2837
|
+
# phase_1_integrity_algorithms: ["NonEmptyString"],
|
|
2838
|
+
# phase_1_lifetime_seconds: 1,
|
|
2839
|
+
# phase_2_dh_group_numbers: [1],
|
|
2840
|
+
# phase_2_encryption_algorithms: ["NonEmptyString"],
|
|
2841
|
+
# phase_2_integrity_algorithms: ["NonEmptyString"],
|
|
2842
|
+
# phase_2_lifetime_seconds: 1,
|
|
2843
|
+
# pre_shared_key: "NonEmptyString",
|
|
2844
|
+
# rekey_fuzz_percentage: 1,
|
|
2845
|
+
# rekey_margin_time_seconds: 1,
|
|
2846
|
+
# replay_window_size: 1,
|
|
2847
|
+
# tunnel_inside_cidr: "NonEmptyString",
|
|
2848
|
+
# },
|
|
2849
|
+
# ],
|
|
2850
|
+
# },
|
|
2851
|
+
# routes: [
|
|
2852
|
+
# {
|
|
2853
|
+
# destination_cidr_block: "NonEmptyString",
|
|
2854
|
+
# state: "NonEmptyString",
|
|
2855
|
+
# },
|
|
2856
|
+
# ],
|
|
2857
|
+
# transit_gateway_id: "NonEmptyString",
|
|
2858
|
+
# },
|
|
2859
|
+
# aws_ecr_container_image: {
|
|
2860
|
+
# registry_id: "NonEmptyString",
|
|
2861
|
+
# repository_name: "NonEmptyString",
|
|
2862
|
+
# architecture: "NonEmptyString",
|
|
2863
|
+
# image_digest: "NonEmptyString",
|
|
2864
|
+
# image_tags: ["NonEmptyString"],
|
|
2865
|
+
# image_published_at: "NonEmptyString",
|
|
2866
|
+
# },
|
|
2867
|
+
# aws_open_search_service_domain: {
|
|
2868
|
+
# arn: "NonEmptyString",
|
|
2869
|
+
# access_policies: "NonEmptyString",
|
|
2870
|
+
# domain_name: "NonEmptyString",
|
|
2871
|
+
# id: "NonEmptyString",
|
|
2872
|
+
# domain_endpoint: "NonEmptyString",
|
|
2873
|
+
# engine_version: "NonEmptyString",
|
|
2874
|
+
# encryption_at_rest_options: {
|
|
2875
|
+
# enabled: false,
|
|
2876
|
+
# kms_key_id: "NonEmptyString",
|
|
2877
|
+
# },
|
|
2878
|
+
# node_to_node_encryption_options: {
|
|
2879
|
+
# enabled: false,
|
|
2880
|
+
# },
|
|
2881
|
+
# service_software_options: {
|
|
2882
|
+
# automated_update_date: "NonEmptyString",
|
|
2883
|
+
# cancellable: false,
|
|
2884
|
+
# current_version: "NonEmptyString",
|
|
2885
|
+
# description: "NonEmptyString",
|
|
2886
|
+
# new_version: "NonEmptyString",
|
|
2887
|
+
# update_available: false,
|
|
2888
|
+
# update_status: "NonEmptyString",
|
|
2889
|
+
# optional_deployment: false,
|
|
2890
|
+
# },
|
|
2891
|
+
# cluster_config: {
|
|
2892
|
+
# instance_count: 1,
|
|
2893
|
+
# warm_enabled: false,
|
|
2894
|
+
# warm_count: 1,
|
|
2895
|
+
# dedicated_master_enabled: false,
|
|
2896
|
+
# zone_awareness_config: {
|
|
2897
|
+
# availability_zone_count: 1,
|
|
2898
|
+
# },
|
|
2899
|
+
# dedicated_master_count: 1,
|
|
2900
|
+
# instance_type: "NonEmptyString",
|
|
2901
|
+
# warm_type: "NonEmptyString",
|
|
2902
|
+
# zone_awareness_enabled: false,
|
|
2903
|
+
# dedicated_master_type: "NonEmptyString",
|
|
2904
|
+
# },
|
|
2905
|
+
# domain_endpoint_options: {
|
|
2906
|
+
# custom_endpoint_certificate_arn: "NonEmptyString",
|
|
2907
|
+
# custom_endpoint_enabled: false,
|
|
2908
|
+
# enforce_https: false,
|
|
2909
|
+
# custom_endpoint: "NonEmptyString",
|
|
2910
|
+
# tls_security_policy: "NonEmptyString",
|
|
2911
|
+
# },
|
|
2912
|
+
# vpc_options: {
|
|
2913
|
+
# security_group_ids: ["NonEmptyString"],
|
|
2914
|
+
# subnet_ids: ["NonEmptyString"],
|
|
2915
|
+
# },
|
|
2916
|
+
# log_publishing_options: {
|
|
2917
|
+
# index_slow_logs: {
|
|
2918
|
+
# cloud_watch_logs_log_group_arn: "NonEmptyString",
|
|
2919
|
+
# enabled: false,
|
|
2920
|
+
# },
|
|
2921
|
+
# search_slow_logs: {
|
|
2922
|
+
# cloud_watch_logs_log_group_arn: "NonEmptyString",
|
|
2923
|
+
# enabled: false,
|
|
2924
|
+
# },
|
|
2925
|
+
# audit_logs: {
|
|
2926
|
+
# cloud_watch_logs_log_group_arn: "NonEmptyString",
|
|
2927
|
+
# enabled: false,
|
|
2928
|
+
# },
|
|
2929
|
+
# },
|
|
2930
|
+
# domain_endpoints: {
|
|
2931
|
+
# "NonEmptyString" => "NonEmptyString",
|
|
2932
|
+
# },
|
|
2933
|
+
# },
|
|
2934
|
+
# aws_ec2_vpc_endpoint_service: {
|
|
2935
|
+
# acceptance_required: false,
|
|
2936
|
+
# availability_zones: ["NonEmptyString"],
|
|
2937
|
+
# base_endpoint_dns_names: ["NonEmptyString"],
|
|
2938
|
+
# manages_vpc_endpoints: false,
|
|
2939
|
+
# gateway_load_balancer_arns: ["NonEmptyString"],
|
|
2940
|
+
# network_load_balancer_arns: ["NonEmptyString"],
|
|
2941
|
+
# private_dns_name: "NonEmptyString",
|
|
2942
|
+
# service_id: "NonEmptyString",
|
|
2943
|
+
# service_name: "NonEmptyString",
|
|
2944
|
+
# service_state: "NonEmptyString",
|
|
2945
|
+
# service_type: [
|
|
2946
|
+
# {
|
|
2947
|
+
# service_type: "NonEmptyString",
|
|
2948
|
+
# },
|
|
2949
|
+
# ],
|
|
2950
|
+
# },
|
|
2951
|
+
# aws_xray_encryption_config: {
|
|
2952
|
+
# key_id: "NonEmptyString",
|
|
2953
|
+
# status: "NonEmptyString",
|
|
2954
|
+
# type: "NonEmptyString",
|
|
2955
|
+
# },
|
|
2956
|
+
# aws_waf_rate_based_rule: {
|
|
2957
|
+
# metric_name: "NonEmptyString",
|
|
2958
|
+
# name: "NonEmptyString",
|
|
2959
|
+
# rate_key: "NonEmptyString",
|
|
2960
|
+
# rate_limit: 1,
|
|
2961
|
+
# rule_id: "NonEmptyString",
|
|
2962
|
+
# match_predicates: [
|
|
2963
|
+
# {
|
|
2964
|
+
# data_id: "NonEmptyString",
|
|
2965
|
+
# negated: false,
|
|
2966
|
+
# type: "NonEmptyString",
|
|
2967
|
+
# },
|
|
2968
|
+
# ],
|
|
2969
|
+
# },
|
|
2970
|
+
# aws_waf_regional_rate_based_rule: {
|
|
2971
|
+
# metric_name: "NonEmptyString",
|
|
2972
|
+
# name: "NonEmptyString",
|
|
2973
|
+
# rate_key: "NonEmptyString",
|
|
2974
|
+
# rate_limit: 1,
|
|
2975
|
+
# rule_id: "NonEmptyString",
|
|
2976
|
+
# match_predicates: [
|
|
2977
|
+
# {
|
|
2978
|
+
# data_id: "NonEmptyString",
|
|
2979
|
+
# negated: false,
|
|
2980
|
+
# type: "NonEmptyString",
|
|
2981
|
+
# },
|
|
2982
|
+
# ],
|
|
2983
|
+
# },
|
|
2984
|
+
# aws_ecr_repository: {
|
|
2985
|
+
# arn: "NonEmptyString",
|
|
2986
|
+
# image_scanning_configuration: {
|
|
2987
|
+
# scan_on_push: false,
|
|
2988
|
+
# },
|
|
2989
|
+
# image_tag_mutability: "NonEmptyString",
|
|
2990
|
+
# lifecycle_policy: {
|
|
2991
|
+
# lifecycle_policy_text: "NonEmptyString",
|
|
2992
|
+
# registry_id: "NonEmptyString",
|
|
2993
|
+
# },
|
|
2994
|
+
# repository_name: "NonEmptyString",
|
|
2995
|
+
# repository_policy_text: "NonEmptyString",
|
|
2996
|
+
# },
|
|
2997
|
+
# aws_eks_cluster: {
|
|
2998
|
+
# arn: "NonEmptyString",
|
|
2999
|
+
# certificate_authority_data: "NonEmptyString",
|
|
3000
|
+
# cluster_status: "NonEmptyString",
|
|
3001
|
+
# endpoint: "NonEmptyString",
|
|
3002
|
+
# name: "NonEmptyString",
|
|
3003
|
+
# resources_vpc_config: {
|
|
3004
|
+
# security_group_ids: ["NonEmptyString"],
|
|
3005
|
+
# subnet_ids: ["NonEmptyString"],
|
|
3006
|
+
# },
|
|
3007
|
+
# role_arn: "NonEmptyString",
|
|
3008
|
+
# version: "NonEmptyString",
|
|
3009
|
+
# logging: {
|
|
3010
|
+
# cluster_logging: [
|
|
3011
|
+
# {
|
|
3012
|
+
# enabled: false,
|
|
3013
|
+
# types: ["NonEmptyString"],
|
|
3014
|
+
# },
|
|
3015
|
+
# ],
|
|
3016
|
+
# },
|
|
3017
|
+
# },
|
|
2677
3018
|
# },
|
|
2678
3019
|
# },
|
|
2679
3020
|
# ],
|
|
@@ -2714,6 +3055,8 @@ module Aws::SecurityHub
|
|
|
2714
3055
|
# epoch: "NonEmptyString",
|
|
2715
3056
|
# release: "NonEmptyString",
|
|
2716
3057
|
# architecture: "NonEmptyString",
|
|
3058
|
+
# package_manager: "NonEmptyString",
|
|
3059
|
+
# file_path: "NonEmptyString",
|
|
2717
3060
|
# },
|
|
2718
3061
|
# ],
|
|
2719
3062
|
# cvss: [
|
|
@@ -2721,6 +3064,13 @@ module Aws::SecurityHub
|
|
|
2721
3064
|
# version: "NonEmptyString",
|
|
2722
3065
|
# base_score: 1.0,
|
|
2723
3066
|
# base_vector: "NonEmptyString",
|
|
3067
|
+
# source: "NonEmptyString",
|
|
3068
|
+
# adjustments: [
|
|
3069
|
+
# {
|
|
3070
|
+
# metric: "NonEmptyString",
|
|
3071
|
+
# reason: "NonEmptyString",
|
|
3072
|
+
# },
|
|
3073
|
+
# ],
|
|
2724
3074
|
# },
|
|
2725
3075
|
# ],
|
|
2726
3076
|
# related_vulnerabilities: ["NonEmptyString"],
|
|
@@ -3795,16 +4145,21 @@ module Aws::SecurityHub
|
|
|
3795
4145
|
#
|
|
3796
4146
|
# Accounts that are managed using Organizations do not receive an
|
|
3797
4147
|
# invitation. They automatically become a member account in Security
|
|
3798
|
-
# Hub
|
|
3799
|
-
#
|
|
3800
|
-
# organization
|
|
3801
|
-
#
|
|
3802
|
-
#
|
|
4148
|
+
# Hub.
|
|
4149
|
+
#
|
|
4150
|
+
# * If the organization account does not have Security Hub enabled, then
|
|
4151
|
+
# Security Hub and the default standards are automatically enabled.
|
|
4152
|
+
# Note that Security Hub cannot be enabled automatically for the
|
|
4153
|
+
# organization management account. The organization management account
|
|
4154
|
+
# must enable Security Hub before the administrator account enables it
|
|
4155
|
+
# as a member account.
|
|
4156
|
+
#
|
|
4157
|
+
# * For organization accounts that already have Security Hub enabled,
|
|
4158
|
+
# Security Hub does not make any other changes to those accounts. It
|
|
4159
|
+
# does not change their enabled standards or controls.
|
|
3803
4160
|
#
|
|
3804
4161
|
# A permissions policy is added that permits the administrator account
|
|
3805
|
-
# to view the findings generated in the member account.
|
|
3806
|
-
# Hub is enabled in a member account, the member account findings are
|
|
3807
|
-
# also visible to the administrator account.
|
|
4162
|
+
# to view the findings generated in the member account.
|
|
3808
4163
|
#
|
|
3809
4164
|
# To remove the association between the administrator and member
|
|
3810
4165
|
# accounts, use the `DisassociateFromMasterAccount` or
|
|
@@ -5464,7 +5819,22 @@ module Aws::SecurityHub
|
|
|
5464
5819
|
# resp.findings[0].resources[0].details.aws_auto_scaling_auto_scaling_group.health_check_grace_period #=> Integer
|
|
5465
5820
|
# resp.findings[0].resources[0].details.aws_auto_scaling_auto_scaling_group.created_time #=> String
|
|
5466
5821
|
# resp.findings[0].resources[0].details.aws_code_build_project.encryption_key #=> String
|
|
5822
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts #=> Array
|
|
5823
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].artifact_identifier #=> String
|
|
5824
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].encryption_disabled #=> Boolean
|
|
5825
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].location #=> String
|
|
5826
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].name #=> String
|
|
5827
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].namespace_type #=> String
|
|
5828
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].override_artifact_name #=> Boolean
|
|
5829
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].packaging #=> String
|
|
5830
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].path #=> String
|
|
5831
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].type #=> String
|
|
5467
5832
|
# resp.findings[0].resources[0].details.aws_code_build_project.environment.certificate #=> String
|
|
5833
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.environment.environment_variables #=> Array
|
|
5834
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.environment.environment_variables[0].name #=> String
|
|
5835
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.environment.environment_variables[0].type #=> String
|
|
5836
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.environment.environment_variables[0].value #=> String
|
|
5837
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.environment.privileged_mode #=> Boolean
|
|
5468
5838
|
# resp.findings[0].resources[0].details.aws_code_build_project.environment.image_pull_credentials_type #=> String
|
|
5469
5839
|
# resp.findings[0].resources[0].details.aws_code_build_project.environment.registry_credential.credential #=> String
|
|
5470
5840
|
# resp.findings[0].resources[0].details.aws_code_build_project.environment.registry_credential.credential_provider #=> String
|
|
@@ -5475,6 +5845,12 @@ module Aws::SecurityHub
|
|
|
5475
5845
|
# resp.findings[0].resources[0].details.aws_code_build_project.source.git_clone_depth #=> Integer
|
|
5476
5846
|
# resp.findings[0].resources[0].details.aws_code_build_project.source.insecure_ssl #=> Boolean
|
|
5477
5847
|
# resp.findings[0].resources[0].details.aws_code_build_project.service_role #=> String
|
|
5848
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.logs_config.cloud_watch_logs.group_name #=> String
|
|
5849
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.logs_config.cloud_watch_logs.status #=> String
|
|
5850
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.logs_config.cloud_watch_logs.stream_name #=> String
|
|
5851
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.logs_config.s3_logs.encryption_disabled #=> Boolean
|
|
5852
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.logs_config.s3_logs.location #=> String
|
|
5853
|
+
# resp.findings[0].resources[0].details.aws_code_build_project.logs_config.s3_logs.status #=> String
|
|
5478
5854
|
# resp.findings[0].resources[0].details.aws_code_build_project.vpc_config.vpc_id #=> String
|
|
5479
5855
|
# resp.findings[0].resources[0].details.aws_code_build_project.vpc_config.subnets #=> Array
|
|
5480
5856
|
# resp.findings[0].resources[0].details.aws_code_build_project.vpc_config.subnets[0] #=> String
|
|
@@ -5500,6 +5876,13 @@ module Aws::SecurityHub
|
|
|
5500
5876
|
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.origin_groups.items[0].failover_criteria.status_codes.items #=> Array
|
|
5501
5877
|
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.origin_groups.items[0].failover_criteria.status_codes.items[0] #=> Integer
|
|
5502
5878
|
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.origin_groups.items[0].failover_criteria.status_codes.quantity #=> Integer
|
|
5879
|
+
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.viewer_certificate.acm_certificate_arn #=> String
|
|
5880
|
+
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.viewer_certificate.certificate #=> String
|
|
5881
|
+
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.viewer_certificate.certificate_source #=> String
|
|
5882
|
+
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.viewer_certificate.cloud_front_default_certificate #=> Boolean
|
|
5883
|
+
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.viewer_certificate.iam_certificate_id #=> String
|
|
5884
|
+
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.viewer_certificate.minimum_protocol_version #=> String
|
|
5885
|
+
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.viewer_certificate.ssl_support_method #=> String
|
|
5503
5886
|
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.status #=> String
|
|
5504
5887
|
# resp.findings[0].resources[0].details.aws_cloud_front_distribution.web_acl_id #=> String
|
|
5505
5888
|
# resp.findings[0].resources[0].details.aws_ec2_instance.type #=> String
|
|
@@ -5652,6 +6035,9 @@ module Aws::SecurityHub
|
|
|
5652
6035
|
# resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.state.reason #=> String
|
|
5653
6036
|
# resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.type #=> String
|
|
5654
6037
|
# resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.vpc_id #=> String
|
|
6038
|
+
# resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.load_balancer_attributes #=> Array
|
|
6039
|
+
# resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.load_balancer_attributes[0].key #=> String
|
|
6040
|
+
# resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.load_balancer_attributes[0].value #=> String
|
|
5655
6041
|
# resp.findings[0].resources[0].details.aws_elastic_beanstalk_environment.application_name #=> String
|
|
5656
6042
|
# resp.findings[0].resources[0].details.aws_elastic_beanstalk_environment.cname #=> String
|
|
5657
6043
|
# resp.findings[0].resources[0].details.aws_elastic_beanstalk_environment.date_created #=> String
|
|
@@ -5717,6 +6103,7 @@ module Aws::SecurityHub
|
|
|
5717
6103
|
# resp.findings[0].resources[0].details.aws_elasticsearch_domain.vpc_options.vpc_id #=> String
|
|
5718
6104
|
# resp.findings[0].resources[0].details.aws_s3_bucket.owner_id #=> String
|
|
5719
6105
|
# resp.findings[0].resources[0].details.aws_s3_bucket.owner_name #=> String
|
|
6106
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.owner_account_id #=> String
|
|
5720
6107
|
# resp.findings[0].resources[0].details.aws_s3_bucket.created_at #=> String
|
|
5721
6108
|
# resp.findings[0].resources[0].details.aws_s3_bucket.server_side_encryption_configuration.rules #=> Array
|
|
5722
6109
|
# resp.findings[0].resources[0].details.aws_s3_bucket.server_side_encryption_configuration.rules[0].apply_server_side_encryption_by_default.sse_algorithm #=> String
|
|
@@ -5750,6 +6137,29 @@ module Aws::SecurityHub
|
|
|
5750
6137
|
# resp.findings[0].resources[0].details.aws_s3_bucket.public_access_block_configuration.block_public_policy #=> Boolean
|
|
5751
6138
|
# resp.findings[0].resources[0].details.aws_s3_bucket.public_access_block_configuration.ignore_public_acls #=> Boolean
|
|
5752
6139
|
# resp.findings[0].resources[0].details.aws_s3_bucket.public_access_block_configuration.restrict_public_buckets #=> Boolean
|
|
6140
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.access_control_list #=> String
|
|
6141
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_logging_configuration.destination_bucket_name #=> String
|
|
6142
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_logging_configuration.log_file_prefix #=> String
|
|
6143
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.error_document #=> String
|
|
6144
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.index_document_suffix #=> String
|
|
6145
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.redirect_all_requests_to.hostname #=> String
|
|
6146
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.redirect_all_requests_to.protocol #=> String
|
|
6147
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.routing_rules #=> Array
|
|
6148
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.routing_rules[0].condition.http_error_code_returned_equals #=> String
|
|
6149
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.routing_rules[0].condition.key_prefix_equals #=> String
|
|
6150
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.routing_rules[0].redirect.hostname #=> String
|
|
6151
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.routing_rules[0].redirect.http_redirect_code #=> String
|
|
6152
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.routing_rules[0].redirect.protocol #=> String
|
|
6153
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.routing_rules[0].redirect.replace_key_prefix_with #=> String
|
|
6154
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_website_configuration.routing_rules[0].redirect.replace_key_with #=> String
|
|
6155
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_notification_configuration.configurations #=> Array
|
|
6156
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_notification_configuration.configurations[0].events #=> Array
|
|
6157
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_notification_configuration.configurations[0].events[0] #=> String
|
|
6158
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_notification_configuration.configurations[0].filter.s3_key_filter.filter_rules #=> Array
|
|
6159
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_notification_configuration.configurations[0].filter.s3_key_filter.filter_rules[0].name #=> String, one of "Prefix", "Suffix"
|
|
6160
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_notification_configuration.configurations[0].filter.s3_key_filter.filter_rules[0].value #=> String
|
|
6161
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_notification_configuration.configurations[0].destination #=> String
|
|
6162
|
+
# resp.findings[0].resources[0].details.aws_s3_bucket.bucket_notification_configuration.configurations[0].type #=> String
|
|
5753
6163
|
# resp.findings[0].resources[0].details.aws_s3_account_public_access_block.block_public_acls #=> Boolean
|
|
5754
6164
|
# resp.findings[0].resources[0].details.aws_s3_account_public_access_block.block_public_policy #=> Boolean
|
|
5755
6165
|
# resp.findings[0].resources[0].details.aws_s3_account_public_access_block.ignore_public_acls #=> Boolean
|
|
@@ -6224,6 +6634,7 @@ module Aws::SecurityHub
|
|
|
6224
6634
|
# resp.findings[0].resources[0].details.aws_kms_key.key_state #=> String
|
|
6225
6635
|
# resp.findings[0].resources[0].details.aws_kms_key.origin #=> String
|
|
6226
6636
|
# resp.findings[0].resources[0].details.aws_kms_key.description #=> String
|
|
6637
|
+
# resp.findings[0].resources[0].details.aws_kms_key.key_rotation_status #=> Boolean
|
|
6227
6638
|
# resp.findings[0].resources[0].details.aws_lambda_function.code.s3_bucket #=> String
|
|
6228
6639
|
# resp.findings[0].resources[0].details.aws_lambda_function.code.s3_key #=> String
|
|
6229
6640
|
# resp.findings[0].resources[0].details.aws_lambda_function.code.s3_object_version #=> String
|
|
@@ -6709,6 +7120,188 @@ module Aws::SecurityHub
|
|
|
6709
7120
|
# resp.findings[0].resources[0].details.aws_ecs_service.service_registries[0].port #=> Integer
|
|
6710
7121
|
# resp.findings[0].resources[0].details.aws_ecs_service.service_registries[0].registry_arn #=> String
|
|
6711
7122
|
# resp.findings[0].resources[0].details.aws_ecs_service.task_definition #=> String
|
|
7123
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.associate_public_ip_address #=> Boolean
|
|
7124
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings #=> Array
|
|
7125
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings[0].device_name #=> String
|
|
7126
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings[0].ebs.delete_on_termination #=> Boolean
|
|
7127
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings[0].ebs.encrypted #=> Boolean
|
|
7128
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings[0].ebs.iops #=> Integer
|
|
7129
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings[0].ebs.snapshot_id #=> String
|
|
7130
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings[0].ebs.volume_size #=> Integer
|
|
7131
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings[0].ebs.volume_type #=> String
|
|
7132
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings[0].no_device #=> Boolean
|
|
7133
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.block_device_mappings[0].virtual_name #=> String
|
|
7134
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.classic_link_vpc_id #=> String
|
|
7135
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.classic_link_vpc_security_groups #=> Array
|
|
7136
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.classic_link_vpc_security_groups[0] #=> String
|
|
7137
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.created_time #=> String
|
|
7138
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.ebs_optimized #=> Boolean
|
|
7139
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.iam_instance_profile #=> String
|
|
7140
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.image_id #=> String
|
|
7141
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.instance_monitoring.enabled #=> Boolean
|
|
7142
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.instance_type #=> String
|
|
7143
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.kernel_id #=> String
|
|
7144
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.key_name #=> String
|
|
7145
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.launch_configuration_name #=> String
|
|
7146
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.placement_tenancy #=> String
|
|
7147
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.ramdisk_id #=> String
|
|
7148
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.security_groups #=> Array
|
|
7149
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.security_groups[0] #=> String
|
|
7150
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.spot_price #=> String
|
|
7151
|
+
# resp.findings[0].resources[0].details.aws_auto_scaling_launch_configuration.user_data #=> String
|
|
7152
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.vpn_connection_id #=> String
|
|
7153
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.state #=> String
|
|
7154
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.customer_gateway_id #=> String
|
|
7155
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.customer_gateway_configuration #=> String
|
|
7156
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.type #=> String
|
|
7157
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.vpn_gateway_id #=> String
|
|
7158
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.category #=> String
|
|
7159
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.vgw_telemetry #=> Array
|
|
7160
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.vgw_telemetry[0].accepted_route_count #=> Integer
|
|
7161
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.vgw_telemetry[0].certificate_arn #=> String
|
|
7162
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.vgw_telemetry[0].last_status_change #=> String
|
|
7163
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.vgw_telemetry[0].outside_ip_address #=> String
|
|
7164
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.vgw_telemetry[0].status #=> String
|
|
7165
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.vgw_telemetry[0].status_message #=> String
|
|
7166
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.static_routes_only #=> Boolean
|
|
7167
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options #=> Array
|
|
7168
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].dpd_timeout_seconds #=> Integer
|
|
7169
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].ike_versions #=> Array
|
|
7170
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].ike_versions[0] #=> String
|
|
7171
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].outside_ip_address #=> String
|
|
7172
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_1_dh_group_numbers #=> Array
|
|
7173
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_1_dh_group_numbers[0] #=> Integer
|
|
7174
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_1_encryption_algorithms #=> Array
|
|
7175
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_1_encryption_algorithms[0] #=> String
|
|
7176
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_1_integrity_algorithms #=> Array
|
|
7177
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_1_integrity_algorithms[0] #=> String
|
|
7178
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_1_lifetime_seconds #=> Integer
|
|
7179
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_2_dh_group_numbers #=> Array
|
|
7180
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_2_dh_group_numbers[0] #=> Integer
|
|
7181
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_2_encryption_algorithms #=> Array
|
|
7182
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_2_encryption_algorithms[0] #=> String
|
|
7183
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_2_integrity_algorithms #=> Array
|
|
7184
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_2_integrity_algorithms[0] #=> String
|
|
7185
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].phase_2_lifetime_seconds #=> Integer
|
|
7186
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].pre_shared_key #=> String
|
|
7187
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].rekey_fuzz_percentage #=> Integer
|
|
7188
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].rekey_margin_time_seconds #=> Integer
|
|
7189
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].replay_window_size #=> Integer
|
|
7190
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.options.tunnel_options[0].tunnel_inside_cidr #=> String
|
|
7191
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.routes #=> Array
|
|
7192
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.routes[0].destination_cidr_block #=> String
|
|
7193
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.routes[0].state #=> String
|
|
7194
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpn_connection.transit_gateway_id #=> String
|
|
7195
|
+
# resp.findings[0].resources[0].details.aws_ecr_container_image.registry_id #=> String
|
|
7196
|
+
# resp.findings[0].resources[0].details.aws_ecr_container_image.repository_name #=> String
|
|
7197
|
+
# resp.findings[0].resources[0].details.aws_ecr_container_image.architecture #=> String
|
|
7198
|
+
# resp.findings[0].resources[0].details.aws_ecr_container_image.image_digest #=> String
|
|
7199
|
+
# resp.findings[0].resources[0].details.aws_ecr_container_image.image_tags #=> Array
|
|
7200
|
+
# resp.findings[0].resources[0].details.aws_ecr_container_image.image_tags[0] #=> String
|
|
7201
|
+
# resp.findings[0].resources[0].details.aws_ecr_container_image.image_published_at #=> String
|
|
7202
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.arn #=> String
|
|
7203
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.access_policies #=> String
|
|
7204
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.domain_name #=> String
|
|
7205
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.id #=> String
|
|
7206
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.domain_endpoint #=> String
|
|
7207
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.engine_version #=> String
|
|
7208
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.encryption_at_rest_options.enabled #=> Boolean
|
|
7209
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.encryption_at_rest_options.kms_key_id #=> String
|
|
7210
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.node_to_node_encryption_options.enabled #=> Boolean
|
|
7211
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.service_software_options.automated_update_date #=> String
|
|
7212
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.service_software_options.cancellable #=> Boolean
|
|
7213
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.service_software_options.current_version #=> String
|
|
7214
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.service_software_options.description #=> String
|
|
7215
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.service_software_options.new_version #=> String
|
|
7216
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.service_software_options.update_available #=> Boolean
|
|
7217
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.service_software_options.update_status #=> String
|
|
7218
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.service_software_options.optional_deployment #=> Boolean
|
|
7219
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.instance_count #=> Integer
|
|
7220
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.warm_enabled #=> Boolean
|
|
7221
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.warm_count #=> Integer
|
|
7222
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.dedicated_master_enabled #=> Boolean
|
|
7223
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.zone_awareness_config.availability_zone_count #=> Integer
|
|
7224
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.dedicated_master_count #=> Integer
|
|
7225
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.instance_type #=> String
|
|
7226
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.warm_type #=> String
|
|
7227
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.zone_awareness_enabled #=> Boolean
|
|
7228
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.cluster_config.dedicated_master_type #=> String
|
|
7229
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.domain_endpoint_options.custom_endpoint_certificate_arn #=> String
|
|
7230
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.domain_endpoint_options.custom_endpoint_enabled #=> Boolean
|
|
7231
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.domain_endpoint_options.enforce_https #=> Boolean
|
|
7232
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.domain_endpoint_options.custom_endpoint #=> String
|
|
7233
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.domain_endpoint_options.tls_security_policy #=> String
|
|
7234
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.vpc_options.security_group_ids #=> Array
|
|
7235
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.vpc_options.security_group_ids[0] #=> String
|
|
7236
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.vpc_options.subnet_ids #=> Array
|
|
7237
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.vpc_options.subnet_ids[0] #=> String
|
|
7238
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.log_publishing_options.index_slow_logs.cloud_watch_logs_log_group_arn #=> String
|
|
7239
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.log_publishing_options.index_slow_logs.enabled #=> Boolean
|
|
7240
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.log_publishing_options.search_slow_logs.cloud_watch_logs_log_group_arn #=> String
|
|
7241
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.log_publishing_options.search_slow_logs.enabled #=> Boolean
|
|
7242
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.log_publishing_options.audit_logs.cloud_watch_logs_log_group_arn #=> String
|
|
7243
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.log_publishing_options.audit_logs.enabled #=> Boolean
|
|
7244
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.domain_endpoints #=> Hash
|
|
7245
|
+
# resp.findings[0].resources[0].details.aws_open_search_service_domain.domain_endpoints["NonEmptyString"] #=> String
|
|
7246
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.acceptance_required #=> Boolean
|
|
7247
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.availability_zones #=> Array
|
|
7248
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.availability_zones[0] #=> String
|
|
7249
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.base_endpoint_dns_names #=> Array
|
|
7250
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.base_endpoint_dns_names[0] #=> String
|
|
7251
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.manages_vpc_endpoints #=> Boolean
|
|
7252
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.gateway_load_balancer_arns #=> Array
|
|
7253
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.gateway_load_balancer_arns[0] #=> String
|
|
7254
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.network_load_balancer_arns #=> Array
|
|
7255
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.network_load_balancer_arns[0] #=> String
|
|
7256
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.private_dns_name #=> String
|
|
7257
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.service_id #=> String
|
|
7258
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.service_name #=> String
|
|
7259
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.service_state #=> String
|
|
7260
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.service_type #=> Array
|
|
7261
|
+
# resp.findings[0].resources[0].details.aws_ec2_vpc_endpoint_service.service_type[0].service_type #=> String
|
|
7262
|
+
# resp.findings[0].resources[0].details.aws_xray_encryption_config.key_id #=> String
|
|
7263
|
+
# resp.findings[0].resources[0].details.aws_xray_encryption_config.status #=> String
|
|
7264
|
+
# resp.findings[0].resources[0].details.aws_xray_encryption_config.type #=> String
|
|
7265
|
+
# resp.findings[0].resources[0].details.aws_waf_rate_based_rule.metric_name #=> String
|
|
7266
|
+
# resp.findings[0].resources[0].details.aws_waf_rate_based_rule.name #=> String
|
|
7267
|
+
# resp.findings[0].resources[0].details.aws_waf_rate_based_rule.rate_key #=> String
|
|
7268
|
+
# resp.findings[0].resources[0].details.aws_waf_rate_based_rule.rate_limit #=> Integer
|
|
7269
|
+
# resp.findings[0].resources[0].details.aws_waf_rate_based_rule.rule_id #=> String
|
|
7270
|
+
# resp.findings[0].resources[0].details.aws_waf_rate_based_rule.match_predicates #=> Array
|
|
7271
|
+
# resp.findings[0].resources[0].details.aws_waf_rate_based_rule.match_predicates[0].data_id #=> String
|
|
7272
|
+
# resp.findings[0].resources[0].details.aws_waf_rate_based_rule.match_predicates[0].negated #=> Boolean
|
|
7273
|
+
# resp.findings[0].resources[0].details.aws_waf_rate_based_rule.match_predicates[0].type #=> String
|
|
7274
|
+
# resp.findings[0].resources[0].details.aws_waf_regional_rate_based_rule.metric_name #=> String
|
|
7275
|
+
# resp.findings[0].resources[0].details.aws_waf_regional_rate_based_rule.name #=> String
|
|
7276
|
+
# resp.findings[0].resources[0].details.aws_waf_regional_rate_based_rule.rate_key #=> String
|
|
7277
|
+
# resp.findings[0].resources[0].details.aws_waf_regional_rate_based_rule.rate_limit #=> Integer
|
|
7278
|
+
# resp.findings[0].resources[0].details.aws_waf_regional_rate_based_rule.rule_id #=> String
|
|
7279
|
+
# resp.findings[0].resources[0].details.aws_waf_regional_rate_based_rule.match_predicates #=> Array
|
|
7280
|
+
# resp.findings[0].resources[0].details.aws_waf_regional_rate_based_rule.match_predicates[0].data_id #=> String
|
|
7281
|
+
# resp.findings[0].resources[0].details.aws_waf_regional_rate_based_rule.match_predicates[0].negated #=> Boolean
|
|
7282
|
+
# resp.findings[0].resources[0].details.aws_waf_regional_rate_based_rule.match_predicates[0].type #=> String
|
|
7283
|
+
# resp.findings[0].resources[0].details.aws_ecr_repository.arn #=> String
|
|
7284
|
+
# resp.findings[0].resources[0].details.aws_ecr_repository.image_scanning_configuration.scan_on_push #=> Boolean
|
|
7285
|
+
# resp.findings[0].resources[0].details.aws_ecr_repository.image_tag_mutability #=> String
|
|
7286
|
+
# resp.findings[0].resources[0].details.aws_ecr_repository.lifecycle_policy.lifecycle_policy_text #=> String
|
|
7287
|
+
# resp.findings[0].resources[0].details.aws_ecr_repository.lifecycle_policy.registry_id #=> String
|
|
7288
|
+
# resp.findings[0].resources[0].details.aws_ecr_repository.repository_name #=> String
|
|
7289
|
+
# resp.findings[0].resources[0].details.aws_ecr_repository.repository_policy_text #=> String
|
|
7290
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.arn #=> String
|
|
7291
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.certificate_authority_data #=> String
|
|
7292
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.cluster_status #=> String
|
|
7293
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.endpoint #=> String
|
|
7294
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.name #=> String
|
|
7295
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.resources_vpc_config.security_group_ids #=> Array
|
|
7296
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.resources_vpc_config.security_group_ids[0] #=> String
|
|
7297
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.resources_vpc_config.subnet_ids #=> Array
|
|
7298
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.resources_vpc_config.subnet_ids[0] #=> String
|
|
7299
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.role_arn #=> String
|
|
7300
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.version #=> String
|
|
7301
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.logging.cluster_logging #=> Array
|
|
7302
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.logging.cluster_logging[0].enabled #=> Boolean
|
|
7303
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.logging.cluster_logging[0].types #=> Array
|
|
7304
|
+
# resp.findings[0].resources[0].details.aws_eks_cluster.logging.cluster_logging[0].types[0] #=> String
|
|
6712
7305
|
# resp.findings[0].compliance.status #=> String, one of "PASSED", "WARNING", "FAILED", "NOT_AVAILABLE"
|
|
6713
7306
|
# resp.findings[0].compliance.related_requirements #=> Array
|
|
6714
7307
|
# resp.findings[0].compliance.related_requirements[0] #=> String
|
|
@@ -6733,10 +7326,16 @@ module Aws::SecurityHub
|
|
|
6733
7326
|
# resp.findings[0].vulnerabilities[0].vulnerable_packages[0].epoch #=> String
|
|
6734
7327
|
# resp.findings[0].vulnerabilities[0].vulnerable_packages[0].release #=> String
|
|
6735
7328
|
# resp.findings[0].vulnerabilities[0].vulnerable_packages[0].architecture #=> String
|
|
7329
|
+
# resp.findings[0].vulnerabilities[0].vulnerable_packages[0].package_manager #=> String
|
|
7330
|
+
# resp.findings[0].vulnerabilities[0].vulnerable_packages[0].file_path #=> String
|
|
6736
7331
|
# resp.findings[0].vulnerabilities[0].cvss #=> Array
|
|
6737
7332
|
# resp.findings[0].vulnerabilities[0].cvss[0].version #=> String
|
|
6738
7333
|
# resp.findings[0].vulnerabilities[0].cvss[0].base_score #=> Float
|
|
6739
7334
|
# resp.findings[0].vulnerabilities[0].cvss[0].base_vector #=> String
|
|
7335
|
+
# resp.findings[0].vulnerabilities[0].cvss[0].source #=> String
|
|
7336
|
+
# resp.findings[0].vulnerabilities[0].cvss[0].adjustments #=> Array
|
|
7337
|
+
# resp.findings[0].vulnerabilities[0].cvss[0].adjustments[0].metric #=> String
|
|
7338
|
+
# resp.findings[0].vulnerabilities[0].cvss[0].adjustments[0].reason #=> String
|
|
6740
7339
|
# resp.findings[0].vulnerabilities[0].related_vulnerabilities #=> Array
|
|
6741
7340
|
# resp.findings[0].vulnerabilities[0].related_vulnerabilities[0] #=> String
|
|
6742
7341
|
# resp.findings[0].vulnerabilities[0].vendor.name #=> String
|
|
@@ -9101,7 +9700,7 @@ module Aws::SecurityHub
|
|
|
9101
9700
|
params: params,
|
|
9102
9701
|
config: config)
|
|
9103
9702
|
context[:gem_name] = 'aws-sdk-securityhub'
|
|
9104
|
-
context[:gem_version] = '1.
|
|
9703
|
+
context[:gem_version] = '1.53.0'
|
|
9105
9704
|
Seahorse::Client::Request.new(handlers, context)
|
|
9106
9705
|
end
|
|
9107
9706
|
|