aws-sdk-securityhub 1.61.0 → 1.64.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7006dee2dad952c02366f2cf05400a1f390268a34b2fa6d482565d7e5e2bba3c
-  data.tar.gz: 622f15b3dd5bdc1fc0c7059f287a06c6ed7be2d673995f0bbfcbce4956c64f53
+  metadata.gz: a1e44d15048a877e690e3471897d355ee64a8cbcabe58c8cdc94e5202a932210
+  data.tar.gz: b44878943ae11653b9aed5403f35732bd6a79e71d3f4b4c8e77c81bef8359f0b
 SHA512:
-  metadata.gz: 2062d0217fb0a3cf3fe109bce0ad9de3abc21531d333b1d7aba3ac7b1561700a9e468becc6dc112d6aa7b68192f5c17f731bdf4a266ada48be0ac88c14593ca2
-  data.tar.gz: 15634d5fd83bed5ef9688be7e56db65aba9d8be1bc2f5dfbe82a2e14326594dcaf89dfc79753d4a0f7c809900f16fbbb0190759efa9993a5d187d79392692d20
+  metadata.gz: dcda037db40f3fc0702b8ddd2668427e7fa05e25efb61860685c9e082b1d6a4ca263000fd65b6ee1808a3820ddc7f2dd1922f4574c4b4df8b8ab6360e4ec9e4f
+  data.tar.gz: b62d92a760a10adee50aa82a3bbd52c35f0c745366973b13655dce2d6f18cb35a36afccb5862a95e64bbace487b60c3dc735984cf7f2c884f0d8e9297cb09590

data/CHANGELOG.md

@@ -1,6 +1,21 @@
 Unreleased Changes
 ------------------
 
+1.64.0 (2022-04-25)
+------------------
+
+* Feature - Security Hub now lets you opt-out of auto-enabling the defaults standards (CIS and FSBP) in accounts that are auto-enabled with Security Hub via Security Hub's integration with AWS Organizations.
+
+1.63.0 (2022-04-05)
+------------------
+
+* Feature - Added additional ASFF details for RdsSecurityGroup AutoScalingGroup, ElbLoadBalancer, CodeBuildProject and RedshiftCluster.
+
+1.62.0 (2022-02-24)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.61.0 (2022-02-03)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.61.0
+1.64.0

data/lib/aws-sdk-securityhub/client.rb

@@ -27,6 +27,7 @@ require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
 require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
 require 'aws-sdk-core/plugins/transfer_encoding.rb'
 require 'aws-sdk-core/plugins/http_checksum.rb'
+require 'aws-sdk-core/plugins/checksum_algorithm.rb'
 require 'aws-sdk-core/plugins/defaults_mode.rb'
 require 'aws-sdk-core/plugins/recursion_detection.rb'
 require 'aws-sdk-core/plugins/signature_v4.rb'
@@ -75,6 +76,7 @@ module Aws::SecurityHub
     add_plugin(Aws::Plugins::ClientMetricsSendPlugin)
     add_plugin(Aws::Plugins::TransferEncoding)
     add_plugin(Aws::Plugins::HttpChecksum)
+    add_plugin(Aws::Plugins::ChecksumAlgorithm)
     add_plugin(Aws::Plugins::DefaultsMode)
     add_plugin(Aws::Plugins::RecursionDetection)
     add_plugin(Aws::Plugins::SignatureV4)
@@ -883,6 +885,12 @@ module Aws::SecurityHub
     #                     value: "NonEmptyString",
     #                   },
     #                 ],
+    #                 launch_template: {
+    #                   launch_template_id: "NonEmptyString",
+    #                   launch_template_name: "NonEmptyString",
+    #                   version: "NonEmptyString",
+    #                 },
+    #                 capacity_rebalance: false,
     #               },
     #               aws_code_build_project: {
     #                 encryption_key: "NonEmptyString",
@@ -941,6 +949,19 @@ module Aws::SecurityHub
     #                   subnets: ["NonEmptyString"],
     #                   security_group_ids: ["NonEmptyString"],
     #                 },
+    #                 secondary_artifacts: [
+    #                   {
+    #                     artifact_identifier: "NonEmptyString",
+    #                     encryption_disabled: false,
+    #                     location: "NonEmptyString",
+    #                     name: "NonEmptyString",
+    #                     namespace_type: "NonEmptyString",
+    #                     override_artifact_name: false,
+    #                     packaging: "NonEmptyString",
+    #                     path: "NonEmptyString",
+    #                     type: "NonEmptyString",
+    #                   },
+    #                 ],
     #               },
     #               aws_cloud_front_distribution: {
     #                 cache_behaviors: {
@@ -1997,6 +2018,14 @@ module Aws::SecurityHub
     #                     vpc_security_group_id: "NonEmptyString",
     #                   },
     #                 ],
+    #                 logging_status: {
+    #                   bucket_name: "NonEmptyString",
+    #                   last_failure_message: "NonEmptyString",
+    #                   last_failure_time: "NonEmptyString",
+    #                   last_successful_delivery_time: "NonEmptyString",
+    #                   logging_enabled: false,
+    #                   s3_key_prefix: "NonEmptyString",
+    #                 },
     #               },
     #               aws_elb_load_balancer: {
     #                 availability_zones: ["NonEmptyString"],
@@ -2051,6 +2080,12 @@ module Aws::SecurityHub
     #                   cross_zone_load_balancing: {
     #                     enabled: false,
     #                   },
+    #                   additional_attributes: [
+    #                     {
+    #                       key: "NonEmptyString",
+    #                       value: "NonEmptyString",
+    #                     },
+    #                   ],
     #                 },
     #                 load_balancer_name: "NonEmptyString",
     #                 policies: {
@@ -3236,6 +3271,27 @@ module Aws::SecurityHub
     #                 rule_group_name: "NonEmptyString",
     #                 type: "NonEmptyString",
     #               },
+    #               aws_rds_db_security_group: {
+    #                 db_security_group_arn: "NonEmptyString",
+    #                 db_security_group_description: "NonEmptyString",
+    #                 db_security_group_name: "NonEmptyString",
+    #                 ec2_security_groups: [
+    #                   {
+    #                     ec2_security_group_id: "NonEmptyString",
+    #                     ec2_security_group_name: "NonEmptyString",
+    #                     ec2_security_group_owner_id: "NonEmptyString",
+    #                     status: "NonEmptyString",
+    #                   },
+    #                 ],
+    #                 ip_ranges: [
+    #                   {
+    #                     cidr_ip: "NonEmptyString",
+    #                     status: "NonEmptyString",
+    #                   },
+    #                 ],
+    #                 owner_id: "NonEmptyString",
+    #                 vpc_id: "NonEmptyString",
+    #               },
     #             },
     #           },
     #         ],
@@ -3680,9 +3736,11 @@ module Aws::SecurityHub
     # aggregation Region.
     #
     # For more details about cross-Region replication, see [Configuring
-    # finding
-    # aggregation](securityhub/latest/userguide/finding-aggregation.html) in
-    # the *Security Hub User Guide*.
+    # finding aggregation][1] in the *Security Hub User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html
     #
     # @option params [required, String] :region_linking_mode
     #   Indicates whether to aggregate findings from all of the available
@@ -4782,11 +4840,13 @@ module Aws::SecurityHub
     #
     #   * {Types::DescribeOrganizationConfigurationResponse#auto_enable #auto_enable} => Boolean
     #   * {Types::DescribeOrganizationConfigurationResponse#member_account_limit_reached #member_account_limit_reached} => Boolean
+    #   * {Types::DescribeOrganizationConfigurationResponse#auto_enable_standards #auto_enable_standards} => String
     #
     # @example Response structure
     #
     #   resp.auto_enable #=> Boolean
     #   resp.member_account_limit_reached #=> Boolean
+    #   resp.auto_enable_standards #=> String, one of "NONE", "DEFAULT"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DescribeOrganizationConfiguration AWS API Documentation
     #
@@ -6208,6 +6268,10 @@ module Aws::SecurityHub
     #   resp.findings[0].resources[0].details.aws_auto_scaling_auto_scaling_group.mixed_instances_policy.launch_template.overrides[0].weighted_capacity #=> String
     #   resp.findings[0].resources[0].details.aws_auto_scaling_auto_scaling_group.availability_zones #=> Array
     #   resp.findings[0].resources[0].details.aws_auto_scaling_auto_scaling_group.availability_zones[0].value #=> String
+    #   resp.findings[0].resources[0].details.aws_auto_scaling_auto_scaling_group.launch_template.launch_template_id #=> String
+    #   resp.findings[0].resources[0].details.aws_auto_scaling_auto_scaling_group.launch_template.launch_template_name #=> String
+    #   resp.findings[0].resources[0].details.aws_auto_scaling_auto_scaling_group.launch_template.version #=> String
+    #   resp.findings[0].resources[0].details.aws_auto_scaling_auto_scaling_group.capacity_rebalance #=> Boolean
     #   resp.findings[0].resources[0].details.aws_code_build_project.encryption_key #=> String
     #   resp.findings[0].resources[0].details.aws_code_build_project.artifacts #=> Array
     #   resp.findings[0].resources[0].details.aws_code_build_project.artifacts[0].artifact_identifier #=> String
@@ -6246,6 +6310,16 @@ module Aws::SecurityHub
     #   resp.findings[0].resources[0].details.aws_code_build_project.vpc_config.subnets[0] #=> String
     #   resp.findings[0].resources[0].details.aws_code_build_project.vpc_config.security_group_ids #=> Array
     #   resp.findings[0].resources[0].details.aws_code_build_project.vpc_config.security_group_ids[0] #=> String
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts #=> Array
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts[0].artifact_identifier #=> String
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts[0].encryption_disabled #=> Boolean
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts[0].location #=> String
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts[0].name #=> String
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts[0].namespace_type #=> String
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts[0].override_artifact_name #=> Boolean
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts[0].packaging #=> String
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts[0].path #=> String
+    #   resp.findings[0].resources[0].details.aws_code_build_project.secondary_artifacts[0].type #=> String
     #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.cache_behaviors.items #=> Array
     #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.cache_behaviors.items[0].viewer_protocol_policy #=> String
     #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.default_cache_behavior.viewer_protocol_policy #=> String
@@ -6934,6 +7008,12 @@ module Aws::SecurityHub
     #   resp.findings[0].resources[0].details.aws_redshift_cluster.vpc_security_groups #=> Array
     #   resp.findings[0].resources[0].details.aws_redshift_cluster.vpc_security_groups[0].status #=> String
     #   resp.findings[0].resources[0].details.aws_redshift_cluster.vpc_security_groups[0].vpc_security_group_id #=> String
+    #   resp.findings[0].resources[0].details.aws_redshift_cluster.logging_status.bucket_name #=> String
+    #   resp.findings[0].resources[0].details.aws_redshift_cluster.logging_status.last_failure_message #=> String
+    #   resp.findings[0].resources[0].details.aws_redshift_cluster.logging_status.last_failure_time #=> String
+    #   resp.findings[0].resources[0].details.aws_redshift_cluster.logging_status.last_successful_delivery_time #=> String
+    #   resp.findings[0].resources[0].details.aws_redshift_cluster.logging_status.logging_enabled #=> Boolean
+    #   resp.findings[0].resources[0].details.aws_redshift_cluster.logging_status.s3_key_prefix #=> String
     #   resp.findings[0].resources[0].details.aws_elb_load_balancer.availability_zones #=> Array
     #   resp.findings[0].resources[0].details.aws_elb_load_balancer.availability_zones[0] #=> String
     #   resp.findings[0].resources[0].details.aws_elb_load_balancer.backend_server_descriptions #=> Array
@@ -6967,6 +7047,9 @@ module Aws::SecurityHub
     #   resp.findings[0].resources[0].details.aws_elb_load_balancer.load_balancer_attributes.connection_draining.timeout #=> Integer
     #   resp.findings[0].resources[0].details.aws_elb_load_balancer.load_balancer_attributes.connection_settings.idle_timeout #=> Integer
     #   resp.findings[0].resources[0].details.aws_elb_load_balancer.load_balancer_attributes.cross_zone_load_balancing.enabled #=> Boolean
+    #   resp.findings[0].resources[0].details.aws_elb_load_balancer.load_balancer_attributes.additional_attributes #=> Array
+    #   resp.findings[0].resources[0].details.aws_elb_load_balancer.load_balancer_attributes.additional_attributes[0].key #=> String
+    #   resp.findings[0].resources[0].details.aws_elb_load_balancer.load_balancer_attributes.additional_attributes[0].value #=> String
     #   resp.findings[0].resources[0].details.aws_elb_load_balancer.load_balancer_name #=> String
     #   resp.findings[0].resources[0].details.aws_elb_load_balancer.policies.app_cookie_stickiness_policies #=> Array
     #   resp.findings[0].resources[0].details.aws_elb_load_balancer.policies.app_cookie_stickiness_policies[0].cookie_name #=> String
@@ -7778,6 +7861,19 @@ module Aws::SecurityHub
     #   resp.findings[0].resources[0].details.aws_network_firewall_rule_group.rule_group_id #=> String
     #   resp.findings[0].resources[0].details.aws_network_firewall_rule_group.rule_group_name #=> String
     #   resp.findings[0].resources[0].details.aws_network_firewall_rule_group.type #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.db_security_group_arn #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.db_security_group_description #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.db_security_group_name #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.ec2_security_groups #=> Array
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.ec2_security_groups[0].ec2_security_group_id #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.ec2_security_groups[0].ec2_security_group_name #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.ec2_security_groups[0].ec2_security_group_owner_id #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.ec2_security_groups[0].status #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.ip_ranges #=> Array
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.ip_ranges[0].cidr_ip #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.ip_ranges[0].status #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.owner_id #=> String
+    #   resp.findings[0].resources[0].details.aws_rds_db_security_group.vpc_id #=> String
     #   resp.findings[0].compliance.status #=> String, one of "PASSED", "WARNING", "FAILED", "NOT_AVAILABLE"
     #   resp.findings[0].compliance.related_requirements #=> Array
     #   resp.findings[0].compliance.related_requirements[0] #=> String
@@ -10219,12 +10315,28 @@ module Aws::SecurityHub
     #   To automatically enable Security Hub for new accounts, set this to
     #   `true`.
     #
+    # @option params [String] :auto_enable_standards
+    #   Whether to automatically enable Security Hub [default standards][1]
+    #   for new member accounts in the organization.
+    #
+    #   By default, this parameter is equal to `DEFAULT`, and new member
+    #   accounts are automatically enabled with default Security Hub
+    #   standards.
+    #
+    #   To opt out of enabling default standards for new member accounts, set
+    #   this parameter equal to `NONE`.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-enable-disable.html
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
     #
     #   resp = client.update_organization_configuration({
     #     auto_enable: false, # required
+    #     auto_enable_standards: "NONE", # accepts NONE, DEFAULT
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/UpdateOrganizationConfiguration AWS API Documentation
@@ -10308,7 +10420,7 @@ module Aws::SecurityHub
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-securityhub'
-      context[:gem_version] = '1.61.0'
+      context[:gem_version] = '1.64.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityhub/client_api.rb

@@ -36,6 +36,7 @@ module Aws::SecurityHub
     AdminStatus = Shapes::StringShape.new(name: 'AdminStatus')
     AdminsMaxResults = Shapes::IntegerShape.new(name: 'AdminsMaxResults')
     ArnList = Shapes::ListShape.new(name: 'ArnList')
+    AutoEnableStandards = Shapes::StringShape.new(name: 'AutoEnableStandards')
     AvailabilityZone = Shapes::StructureShape.new(name: 'AvailabilityZone')
     AvailabilityZones = Shapes::ListShape.new(name: 'AvailabilityZones')
     AwsApiCallAction = Shapes::StructureShape.new(name: 'AwsApiCallAction')
@@ -53,6 +54,7 @@ module Aws::SecurityHub
     AwsAutoScalingAutoScalingGroupAvailabilityZonesList = Shapes::ListShape.new(name: 'AwsAutoScalingAutoScalingGroupAvailabilityZonesList')
     AwsAutoScalingAutoScalingGroupAvailabilityZonesListDetails = Shapes::StructureShape.new(name: 'AwsAutoScalingAutoScalingGroupAvailabilityZonesListDetails')
     AwsAutoScalingAutoScalingGroupDetails = Shapes::StructureShape.new(name: 'AwsAutoScalingAutoScalingGroupDetails')
+    AwsAutoScalingAutoScalingGroupLaunchTemplateLaunchTemplateSpecification = Shapes::StructureShape.new(name: 'AwsAutoScalingAutoScalingGroupLaunchTemplateLaunchTemplateSpecification')
     AwsAutoScalingAutoScalingGroupMixedInstancesPolicyDetails = Shapes::StructureShape.new(name: 'AwsAutoScalingAutoScalingGroupMixedInstancesPolicyDetails')
     AwsAutoScalingAutoScalingGroupMixedInstancesPolicyInstancesDistributionDetails = Shapes::StructureShape.new(name: 'AwsAutoScalingAutoScalingGroupMixedInstancesPolicyInstancesDistributionDetails')
     AwsAutoScalingAutoScalingGroupMixedInstancesPolicyLaunchTemplateDetails = Shapes::StructureShape.new(name: 'AwsAutoScalingAutoScalingGroupMixedInstancesPolicyLaunchTemplateDetails')
@@ -274,6 +276,8 @@ module Aws::SecurityHub
     AwsElbLbCookieStickinessPolicies = Shapes::ListShape.new(name: 'AwsElbLbCookieStickinessPolicies')
     AwsElbLbCookieStickinessPolicy = Shapes::StructureShape.new(name: 'AwsElbLbCookieStickinessPolicy')
     AwsElbLoadBalancerAccessLog = Shapes::StructureShape.new(name: 'AwsElbLoadBalancerAccessLog')
+    AwsElbLoadBalancerAdditionalAttribute = Shapes::StructureShape.new(name: 'AwsElbLoadBalancerAdditionalAttribute')
+    AwsElbLoadBalancerAdditionalAttributeList = Shapes::ListShape.new(name: 'AwsElbLoadBalancerAdditionalAttributeList')
     AwsElbLoadBalancerAttributes = Shapes::StructureShape.new(name: 'AwsElbLoadBalancerAttributes')
     AwsElbLoadBalancerBackendServerDescription = Shapes::StructureShape.new(name: 'AwsElbLoadBalancerBackendServerDescription')
     AwsElbLoadBalancerBackendServerDescriptions = Shapes::ListShape.new(name: 'AwsElbLoadBalancerBackendServerDescriptions')
@@ -367,6 +371,11 @@ module Aws::SecurityHub
     AwsRdsDbPendingModifiedValues = Shapes::StructureShape.new(name: 'AwsRdsDbPendingModifiedValues')
     AwsRdsDbProcessorFeature = Shapes::StructureShape.new(name: 'AwsRdsDbProcessorFeature')
     AwsRdsDbProcessorFeatures = Shapes::ListShape.new(name: 'AwsRdsDbProcessorFeatures')
+    AwsRdsDbSecurityGroupDetails = Shapes::StructureShape.new(name: 'AwsRdsDbSecurityGroupDetails')
+    AwsRdsDbSecurityGroupEc2SecurityGroup = Shapes::StructureShape.new(name: 'AwsRdsDbSecurityGroupEc2SecurityGroup')
+    AwsRdsDbSecurityGroupEc2SecurityGroups = Shapes::ListShape.new(name: 'AwsRdsDbSecurityGroupEc2SecurityGroups')
+    AwsRdsDbSecurityGroupIpRange = Shapes::StructureShape.new(name: 'AwsRdsDbSecurityGroupIpRange')
+    AwsRdsDbSecurityGroupIpRanges = Shapes::ListShape.new(name: 'AwsRdsDbSecurityGroupIpRanges')
     AwsRdsDbSnapshotDetails = Shapes::StructureShape.new(name: 'AwsRdsDbSnapshotDetails')
     AwsRdsDbStatusInfo = Shapes::StructureShape.new(name: 'AwsRdsDbStatusInfo')
     AwsRdsDbStatusInfos = Shapes::ListShape.new(name: 'AwsRdsDbStatusInfos')
@@ -393,6 +402,7 @@ module Aws::SecurityHub
     AwsRedshiftClusterHsmStatus = Shapes::StructureShape.new(name: 'AwsRedshiftClusterHsmStatus')
     AwsRedshiftClusterIamRole = Shapes::StructureShape.new(name: 'AwsRedshiftClusterIamRole')
     AwsRedshiftClusterIamRoles = Shapes::ListShape.new(name: 'AwsRedshiftClusterIamRoles')
+    AwsRedshiftClusterLoggingStatus = Shapes::StructureShape.new(name: 'AwsRedshiftClusterLoggingStatus')
     AwsRedshiftClusterPendingModifiedValues = Shapes::StructureShape.new(name: 'AwsRedshiftClusterPendingModifiedValues')
     AwsRedshiftClusterResizeInfo = Shapes::StructureShape.new(name: 'AwsRedshiftClusterResizeInfo')
     AwsRedshiftClusterRestoreStatus = Shapes::StructureShape.new(name: 'AwsRedshiftClusterRestoreStatus')
@@ -982,8 +992,15 @@ module Aws::SecurityHub
     AwsAutoScalingAutoScalingGroupDetails.add_member(:created_time, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CreatedTime"))
     AwsAutoScalingAutoScalingGroupDetails.add_member(:mixed_instances_policy, Shapes::ShapeRef.new(shape: AwsAutoScalingAutoScalingGroupMixedInstancesPolicyDetails, location_name: "MixedInstancesPolicy"))
     AwsAutoScalingAutoScalingGroupDetails.add_member(:availability_zones, Shapes::ShapeRef.new(shape: AwsAutoScalingAutoScalingGroupAvailabilityZonesList, location_name: "AvailabilityZones"))
+    AwsAutoScalingAutoScalingGroupDetails.add_member(:launch_template, Shapes::ShapeRef.new(shape: AwsAutoScalingAutoScalingGroupLaunchTemplateLaunchTemplateSpecification, location_name: "LaunchTemplate"))
+    AwsAutoScalingAutoScalingGroupDetails.add_member(:capacity_rebalance, Shapes::ShapeRef.new(shape: Boolean, location_name: "CapacityRebalance"))
     AwsAutoScalingAutoScalingGroupDetails.struct_class = Types::AwsAutoScalingAutoScalingGroupDetails
 
+    AwsAutoScalingAutoScalingGroupLaunchTemplateLaunchTemplateSpecification.add_member(:launch_template_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "LaunchTemplateId"))
+    AwsAutoScalingAutoScalingGroupLaunchTemplateLaunchTemplateSpecification.add_member(:launch_template_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "LaunchTemplateName"))
+    AwsAutoScalingAutoScalingGroupLaunchTemplateLaunchTemplateSpecification.add_member(:version, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Version"))
+    AwsAutoScalingAutoScalingGroupLaunchTemplateLaunchTemplateSpecification.struct_class = Types::AwsAutoScalingAutoScalingGroupLaunchTemplateLaunchTemplateSpecification
+
     AwsAutoScalingAutoScalingGroupMixedInstancesPolicyDetails.add_member(:instances_distribution, Shapes::ShapeRef.new(shape: AwsAutoScalingAutoScalingGroupMixedInstancesPolicyInstancesDistributionDetails, location_name: "InstancesDistribution"))
     AwsAutoScalingAutoScalingGroupMixedInstancesPolicyDetails.add_member(:launch_template, Shapes::ShapeRef.new(shape: AwsAutoScalingAutoScalingGroupMixedInstancesPolicyLaunchTemplateDetails, location_name: "LaunchTemplate"))
     AwsAutoScalingAutoScalingGroupMixedInstancesPolicyDetails.struct_class = Types::AwsAutoScalingAutoScalingGroupMixedInstancesPolicyDetails
@@ -1225,6 +1242,7 @@ module Aws::SecurityHub
     AwsCodeBuildProjectDetails.add_member(:service_role, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ServiceRole"))
     AwsCodeBuildProjectDetails.add_member(:logs_config, Shapes::ShapeRef.new(shape: AwsCodeBuildProjectLogsConfigDetails, location_name: "LogsConfig"))
     AwsCodeBuildProjectDetails.add_member(:vpc_config, Shapes::ShapeRef.new(shape: AwsCodeBuildProjectVpcConfig, location_name: "VpcConfig"))
+    AwsCodeBuildProjectDetails.add_member(:secondary_artifacts, Shapes::ShapeRef.new(shape: AwsCodeBuildProjectArtifactsList, location_name: "SecondaryArtifacts"))
     AwsCodeBuildProjectDetails.struct_class = Types::AwsCodeBuildProjectDetails
 
     AwsCodeBuildProjectEnvironment.add_member(:certificate, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Certificate"))
@@ -2137,10 +2155,17 @@ module Aws::SecurityHub
     AwsElbLoadBalancerAccessLog.add_member(:s3_bucket_prefix, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "S3BucketPrefix"))
     AwsElbLoadBalancerAccessLog.struct_class = Types::AwsElbLoadBalancerAccessLog
 
+    AwsElbLoadBalancerAdditionalAttribute.add_member(:key, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Key"))
+    AwsElbLoadBalancerAdditionalAttribute.add_member(:value, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Value"))
+    AwsElbLoadBalancerAdditionalAttribute.struct_class = Types::AwsElbLoadBalancerAdditionalAttribute
+
+    AwsElbLoadBalancerAdditionalAttributeList.member = Shapes::ShapeRef.new(shape: AwsElbLoadBalancerAdditionalAttribute)
+
     AwsElbLoadBalancerAttributes.add_member(:access_log, Shapes::ShapeRef.new(shape: AwsElbLoadBalancerAccessLog, location_name: "AccessLog"))
     AwsElbLoadBalancerAttributes.add_member(:connection_draining, Shapes::ShapeRef.new(shape: AwsElbLoadBalancerConnectionDraining, location_name: "ConnectionDraining"))
     AwsElbLoadBalancerAttributes.add_member(:connection_settings, Shapes::ShapeRef.new(shape: AwsElbLoadBalancerConnectionSettings, location_name: "ConnectionSettings"))
     AwsElbLoadBalancerAttributes.add_member(:cross_zone_load_balancing, Shapes::ShapeRef.new(shape: AwsElbLoadBalancerCrossZoneLoadBalancing, location_name: "CrossZoneLoadBalancing"))
+    AwsElbLoadBalancerAttributes.add_member(:additional_attributes, Shapes::ShapeRef.new(shape: AwsElbLoadBalancerAdditionalAttributeList, location_name: "AdditionalAttributes"))
     AwsElbLoadBalancerAttributes.struct_class = Types::AwsElbLoadBalancerAttributes
 
     AwsElbLoadBalancerBackendServerDescription.add_member(:instance_port, Shapes::ShapeRef.new(shape: Integer, location_name: "InstancePort"))
@@ -2718,6 +2743,29 @@ module Aws::SecurityHub
 
     AwsRdsDbProcessorFeatures.member = Shapes::ShapeRef.new(shape: AwsRdsDbProcessorFeature)
 
+    AwsRdsDbSecurityGroupDetails.add_member(:db_security_group_arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DbSecurityGroupArn"))
+    AwsRdsDbSecurityGroupDetails.add_member(:db_security_group_description, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DbSecurityGroupDescription"))
+    AwsRdsDbSecurityGroupDetails.add_member(:db_security_group_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DbSecurityGroupName"))
+    AwsRdsDbSecurityGroupDetails.add_member(:ec2_security_groups, Shapes::ShapeRef.new(shape: AwsRdsDbSecurityGroupEc2SecurityGroups, location_name: "Ec2SecurityGroups"))
+    AwsRdsDbSecurityGroupDetails.add_member(:ip_ranges, Shapes::ShapeRef.new(shape: AwsRdsDbSecurityGroupIpRanges, location_name: "IpRanges"))
+    AwsRdsDbSecurityGroupDetails.add_member(:owner_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "OwnerId"))
+    AwsRdsDbSecurityGroupDetails.add_member(:vpc_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "VpcId"))
+    AwsRdsDbSecurityGroupDetails.struct_class = Types::AwsRdsDbSecurityGroupDetails
+
+    AwsRdsDbSecurityGroupEc2SecurityGroup.add_member(:ec2_security_group_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Ec2SecurityGroupId"))
+    AwsRdsDbSecurityGroupEc2SecurityGroup.add_member(:ec2_security_group_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Ec2SecurityGroupName"))
+    AwsRdsDbSecurityGroupEc2SecurityGroup.add_member(:ec2_security_group_owner_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Ec2SecurityGroupOwnerId"))
+    AwsRdsDbSecurityGroupEc2SecurityGroup.add_member(:status, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Status"))
+    AwsRdsDbSecurityGroupEc2SecurityGroup.struct_class = Types::AwsRdsDbSecurityGroupEc2SecurityGroup
+
+    AwsRdsDbSecurityGroupEc2SecurityGroups.member = Shapes::ShapeRef.new(shape: AwsRdsDbSecurityGroupEc2SecurityGroup)
+
+    AwsRdsDbSecurityGroupIpRange.add_member(:cidr_ip, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CidrIp"))
+    AwsRdsDbSecurityGroupIpRange.add_member(:status, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Status"))
+    AwsRdsDbSecurityGroupIpRange.struct_class = Types::AwsRdsDbSecurityGroupIpRange
+
+    AwsRdsDbSecurityGroupIpRanges.member = Shapes::ShapeRef.new(shape: AwsRdsDbSecurityGroupIpRange)
+
     AwsRdsDbSnapshotDetails.add_member(:db_snapshot_identifier, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DbSnapshotIdentifier"))
     AwsRdsDbSnapshotDetails.add_member(:db_instance_identifier, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DbInstanceIdentifier"))
     AwsRdsDbSnapshotDetails.add_member(:snapshot_create_time, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "SnapshotCreateTime"))
@@ -2872,6 +2920,7 @@ module Aws::SecurityHub
     AwsRedshiftClusterDetails.add_member(:snapshot_schedule_state, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "SnapshotScheduleState"))
     AwsRedshiftClusterDetails.add_member(:vpc_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "VpcId"))
     AwsRedshiftClusterDetails.add_member(:vpc_security_groups, Shapes::ShapeRef.new(shape: AwsRedshiftClusterVpcSecurityGroups, location_name: "VpcSecurityGroups"))
+    AwsRedshiftClusterDetails.add_member(:logging_status, Shapes::ShapeRef.new(shape: AwsRedshiftClusterLoggingStatus, location_name: "LoggingStatus"))
     AwsRedshiftClusterDetails.struct_class = Types::AwsRedshiftClusterDetails
 
     AwsRedshiftClusterElasticIpStatus.add_member(:elastic_ip, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ElasticIp"))
@@ -2893,6 +2942,14 @@ module Aws::SecurityHub
 
     AwsRedshiftClusterIamRoles.member = Shapes::ShapeRef.new(shape: AwsRedshiftClusterIamRole)
 
+    AwsRedshiftClusterLoggingStatus.add_member(:bucket_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "BucketName"))
+    AwsRedshiftClusterLoggingStatus.add_member(:last_failure_message, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "LastFailureMessage"))
+    AwsRedshiftClusterLoggingStatus.add_member(:last_failure_time, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "LastFailureTime"))
+    AwsRedshiftClusterLoggingStatus.add_member(:last_successful_delivery_time, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "LastSuccessfulDeliveryTime"))
+    AwsRedshiftClusterLoggingStatus.add_member(:logging_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "LoggingEnabled"))
+    AwsRedshiftClusterLoggingStatus.add_member(:s3_key_prefix, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "S3KeyPrefix"))
+    AwsRedshiftClusterLoggingStatus.struct_class = Types::AwsRedshiftClusterLoggingStatus
+
     AwsRedshiftClusterPendingModifiedValues.add_member(:automated_snapshot_retention_period, Shapes::ShapeRef.new(shape: Integer, location_name: "AutomatedSnapshotRetentionPeriod"))
     AwsRedshiftClusterPendingModifiedValues.add_member(:cluster_identifier, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ClusterIdentifier"))
     AwsRedshiftClusterPendingModifiedValues.add_member(:cluster_type, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ClusterType"))
@@ -3558,6 +3615,7 @@ module Aws::SecurityHub
 
     DescribeOrganizationConfigurationResponse.add_member(:auto_enable, Shapes::ShapeRef.new(shape: Boolean, location_name: "AutoEnable"))
     DescribeOrganizationConfigurationResponse.add_member(:member_account_limit_reached, Shapes::ShapeRef.new(shape: Boolean, location_name: "MemberAccountLimitReached"))
+    DescribeOrganizationConfigurationResponse.add_member(:auto_enable_standards, Shapes::ShapeRef.new(shape: AutoEnableStandards, location_name: "AutoEnableStandards"))
     DescribeOrganizationConfigurationResponse.struct_class = Types::DescribeOrganizationConfigurationResponse
 
     DescribeProductsRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location: "querystring", location_name: "NextToken"))
@@ -4143,6 +4201,7 @@ module Aws::SecurityHub
     ResourceDetails.add_member(:aws_network_firewall_firewall_policy, Shapes::ShapeRef.new(shape: AwsNetworkFirewallFirewallPolicyDetails, location_name: "AwsNetworkFirewallFirewallPolicy"))
     ResourceDetails.add_member(:aws_network_firewall_firewall, Shapes::ShapeRef.new(shape: AwsNetworkFirewallFirewallDetails, location_name: "AwsNetworkFirewallFirewall"))
     ResourceDetails.add_member(:aws_network_firewall_rule_group, Shapes::ShapeRef.new(shape: AwsNetworkFirewallRuleGroupDetails, location_name: "AwsNetworkFirewallRuleGroup"))
+    ResourceDetails.add_member(:aws_rds_db_security_group, Shapes::ShapeRef.new(shape: AwsRdsDbSecurityGroupDetails, location_name: "AwsRdsDbSecurityGroup"))
     ResourceDetails.struct_class = Types::ResourceDetails
 
     ResourceList.member = Shapes::ShapeRef.new(shape: Resource)
@@ -4440,6 +4499,7 @@ module Aws::SecurityHub
     UpdateInsightResponse.struct_class = Types::UpdateInsightResponse
 
     UpdateOrganizationConfigurationRequest.add_member(:auto_enable, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "AutoEnable"))
+    UpdateOrganizationConfigurationRequest.add_member(:auto_enable_standards, Shapes::ShapeRef.new(shape: AutoEnableStandards, location_name: "AutoEnableStandards"))
     UpdateOrganizationConfigurationRequest.struct_class = Types::UpdateOrganizationConfigurationRequest
 
     UpdateOrganizationConfigurationResponse.struct_class = Types::UpdateOrganizationConfigurationResponse