aws-sdk-securityhub 1.120.0 → 1.121.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-securityhub/client.rb +139 -51
- data/lib/aws-sdk-securityhub/types.rb +55 -56
- data/lib/aws-sdk-securityhub.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: c3634ad59a35b3c3b369192d2feaee6fbf73f541b83045a132032a5d2e04c06d
|
|
4
|
+
data.tar.gz: 9327d2f928e0ad5c480b32f05934097eaa28af504d803afa560040eeb272609d
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 9b765a3b0fb170a39a814ade3ac5f2b683316e0b0945a6087d087acb0edc0e0b5230209cf3ebadd4730cb50a720d067851bd256131d33ee560710bde004d3fbe
|
|
7
|
+
data.tar.gz: ffa90991ab202eca8e09744eadf3a3ccea17652e9f831729ab2ae57305f97c90174d462a19022d63c007e6850f3c1ae52a3855d6dc1f4487c51afb5f26d0658a
|
data/CHANGELOG.md
CHANGED
data/VERSION
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
1.
|
|
1
|
+
1.121.0
|
|
@@ -447,6 +447,13 @@ module Aws::SecurityHub
|
|
|
447
447
|
|
|
448
448
|
# @!group API Operations
|
|
449
449
|
|
|
450
|
+
# <note markdown="1"> We recommend using Organizations instead of Security Hub invitations
|
|
451
|
+
# to manage your member accounts. For information, see [Managing
|
|
452
|
+
# Security Hub administrator and member accounts with Organizations][1]
|
|
453
|
+
# in the *Security Hub User Guide*.
|
|
454
|
+
#
|
|
455
|
+
# </note>
|
|
456
|
+
#
|
|
450
457
|
# Accepts the invitation to be a member account and be monitored by the
|
|
451
458
|
# Security Hub administrator account that the invitation was sent from.
|
|
452
459
|
#
|
|
@@ -457,6 +464,10 @@ module Aws::SecurityHub
|
|
|
457
464
|
# to the administrator account to view findings generated in the member
|
|
458
465
|
# account.
|
|
459
466
|
#
|
|
467
|
+
#
|
|
468
|
+
#
|
|
469
|
+
# [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html
|
|
470
|
+
#
|
|
460
471
|
# @option params [required, String] :administrator_id
|
|
461
472
|
# The account ID of the Security Hub administrator account that sent the
|
|
462
473
|
# invitation.
|
|
@@ -1855,7 +1866,7 @@ module Aws::SecurityHub
|
|
|
1855
1866
|
# account and their member accounts. Member accounts can update findings
|
|
1856
1867
|
# for their account.
|
|
1857
1868
|
#
|
|
1858
|
-
# Updates from `BatchUpdateFindings`
|
|
1869
|
+
# Updates from `BatchUpdateFindings` don't affect the value of
|
|
1859
1870
|
# `UpdatedAt` for a finding.
|
|
1860
1871
|
#
|
|
1861
1872
|
# Administrator and member accounts can use `BatchUpdateFindings` to
|
|
@@ -2848,11 +2859,16 @@ module Aws::SecurityHub
|
|
|
2848
2859
|
req.send_request(options)
|
|
2849
2860
|
end
|
|
2850
2861
|
|
|
2851
|
-
#
|
|
2852
|
-
# aggregation Region.
|
|
2862
|
+
# <note markdown="1"> The *aggregation Region* is now called the *home Region*.
|
|
2853
2863
|
#
|
|
2854
|
-
#
|
|
2855
|
-
#
|
|
2864
|
+
# </note>
|
|
2865
|
+
#
|
|
2866
|
+
# Used to enable cross-Region aggregation. This operation can be invoked
|
|
2867
|
+
# from the home Region only.
|
|
2868
|
+
#
|
|
2869
|
+
# For information about how cross-Region aggregation works, see
|
|
2870
|
+
# [Understanding cross-Region aggregation in Security Hub][1] in the
|
|
2871
|
+
# *Security Hub User Guide*.
|
|
2856
2872
|
#
|
|
2857
2873
|
#
|
|
2858
2874
|
#
|
|
@@ -2889,12 +2905,12 @@ module Aws::SecurityHub
|
|
|
2889
2905
|
#
|
|
2890
2906
|
# @option params [Array<String>] :regions
|
|
2891
2907
|
# If `RegionLinkingMode` is `ALL_REGIONS_EXCEPT_SPECIFIED`, then this is
|
|
2892
|
-
# a space-separated list of Regions that
|
|
2893
|
-
# the
|
|
2908
|
+
# a space-separated list of Regions that don't replicate and send
|
|
2909
|
+
# findings to the home Region.
|
|
2894
2910
|
#
|
|
2895
2911
|
# If `RegionLinkingMode` is `SPECIFIED_REGIONS`, then this is a
|
|
2896
|
-
# space-separated list of Regions that do
|
|
2897
|
-
#
|
|
2912
|
+
# space-separated list of Regions that do replicate and send findings to
|
|
2913
|
+
# the home Region.
|
|
2898
2914
|
#
|
|
2899
2915
|
# An `InvalidInputException` error results if you populate this field
|
|
2900
2916
|
# while `RegionLinkingMode` is `NO_REGIONS`.
|
|
@@ -3752,7 +3768,7 @@ module Aws::SecurityHub
|
|
|
3752
3768
|
# owner accepts the invitation, the account becomes a member account in
|
|
3753
3769
|
# Security Hub.
|
|
3754
3770
|
#
|
|
3755
|
-
# Accounts that are managed using Organizations
|
|
3771
|
+
# Accounts that are managed using Organizations don't receive an
|
|
3756
3772
|
# invitation. They automatically become a member account in Security
|
|
3757
3773
|
# Hub.
|
|
3758
3774
|
#
|
|
@@ -3832,13 +3848,25 @@ module Aws::SecurityHub
|
|
|
3832
3848
|
req.send_request(options)
|
|
3833
3849
|
end
|
|
3834
3850
|
|
|
3835
|
-
#
|
|
3851
|
+
# <note markdown="1"> We recommend using Organizations instead of Security Hub invitations
|
|
3852
|
+
# to manage your member accounts. For information, see [Managing
|
|
3853
|
+
# Security Hub administrator and member accounts with Organizations][1]
|
|
3854
|
+
# in the *Security Hub User Guide*.
|
|
3855
|
+
#
|
|
3856
|
+
# </note>
|
|
3857
|
+
#
|
|
3858
|
+
# Declines invitations to become a Security Hub member account.
|
|
3836
3859
|
#
|
|
3837
3860
|
# A prospective member account uses this operation to decline an
|
|
3838
3861
|
# invitation to become a member.
|
|
3839
3862
|
#
|
|
3840
|
-
#
|
|
3841
|
-
#
|
|
3863
|
+
# Only member accounts that aren't part of an Amazon Web Services
|
|
3864
|
+
# organization should use this operation. Organization accounts don't
|
|
3865
|
+
# receive invitations.
|
|
3866
|
+
#
|
|
3867
|
+
#
|
|
3868
|
+
#
|
|
3869
|
+
# [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html
|
|
3842
3870
|
#
|
|
3843
3871
|
# @option params [required, Array<String>] :account_ids
|
|
3844
3872
|
# The list of prospective member account IDs for which to decline an
|
|
@@ -3972,13 +4000,18 @@ module Aws::SecurityHub
|
|
|
3972
4000
|
req.send_request(options)
|
|
3973
4001
|
end
|
|
3974
4002
|
|
|
4003
|
+
# <note markdown="1"> The *aggregation Region* is now called the *home Region*.
|
|
4004
|
+
#
|
|
4005
|
+
# </note>
|
|
4006
|
+
#
|
|
3975
4007
|
# Deletes a finding aggregator. When you delete the finding aggregator,
|
|
3976
|
-
# you stop
|
|
4008
|
+
# you stop cross-Region aggregation. Finding replication stops occurring
|
|
4009
|
+
# from the linked Regions to the home Region.
|
|
3977
4010
|
#
|
|
3978
|
-
# When you stop
|
|
3979
|
-
#
|
|
3980
|
-
#
|
|
3981
|
-
#
|
|
4011
|
+
# When you stop cross-Region aggregation, findings that were already
|
|
4012
|
+
# replicated and sent to the home Region are still visible from the home
|
|
4013
|
+
# Region. However, new findings and finding updates are no longer
|
|
4014
|
+
# replicated and sent to the home Region.
|
|
3982
4015
|
#
|
|
3983
4016
|
# @option params [required, String] :finding_aggregator_arn
|
|
3984
4017
|
# The ARN of the finding aggregator to delete. To obtain the ARN, use
|
|
@@ -4053,15 +4086,26 @@ module Aws::SecurityHub
|
|
|
4053
4086
|
req.send_request(options)
|
|
4054
4087
|
end
|
|
4055
4088
|
|
|
4056
|
-
#
|
|
4057
|
-
#
|
|
4089
|
+
# <note markdown="1"> We recommend using Organizations instead of Security Hub invitations
|
|
4090
|
+
# to manage your member accounts. For information, see [Managing
|
|
4091
|
+
# Security Hub administrator and member accounts with Organizations][1]
|
|
4092
|
+
# in the *Security Hub User Guide*.
|
|
4093
|
+
#
|
|
4094
|
+
# </note>
|
|
4095
|
+
#
|
|
4096
|
+
# Deletes invitations to become a Security Hub member account.
|
|
4058
4097
|
#
|
|
4059
4098
|
# A Security Hub administrator account can use this operation to delete
|
|
4060
|
-
# invitations sent to one or more member accounts.
|
|
4099
|
+
# invitations sent to one or more prospective member accounts.
|
|
4061
4100
|
#
|
|
4062
4101
|
# This operation is only used to delete invitations that are sent to
|
|
4063
|
-
# member accounts that aren't part of an
|
|
4064
|
-
# accounts don't receive
|
|
4102
|
+
# prospective member accounts that aren't part of an Amazon Web
|
|
4103
|
+
# Services organization. Organization accounts don't receive
|
|
4104
|
+
# invitations.
|
|
4105
|
+
#
|
|
4106
|
+
#
|
|
4107
|
+
#
|
|
4108
|
+
# [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html
|
|
4065
4109
|
#
|
|
4066
4110
|
# @option params [required, Array<String>] :account_ids
|
|
4067
4111
|
# The list of member account IDs that received the invitations you want
|
|
@@ -4345,7 +4389,7 @@ module Aws::SecurityHub
|
|
|
4345
4389
|
# You can optionally provide an integration ARN. If you provide an
|
|
4346
4390
|
# integration ARN, then the results only include that integration.
|
|
4347
4391
|
#
|
|
4348
|
-
# If you
|
|
4392
|
+
# If you don't provide an integration ARN, then the results include all
|
|
4349
4393
|
# of the available product integrations.
|
|
4350
4394
|
#
|
|
4351
4395
|
# @option params [String] :next_token
|
|
@@ -4952,7 +4996,7 @@ module Aws::SecurityHub
|
|
|
4952
4996
|
#
|
|
4953
4997
|
# @option params [Boolean] :enable_default_standards
|
|
4954
4998
|
# Whether to enable the security standards that Security Hub has
|
|
4955
|
-
# designated as automatically enabled. If you
|
|
4999
|
+
# designated as automatically enabled. If you don't provide a value for
|
|
4956
5000
|
# `EnableDefaultStandards`, it is set to `true`. To not enable the
|
|
4957
5001
|
# automatically enabled standards, set `EnableDefaultStandards` to
|
|
4958
5002
|
# `false`.
|
|
@@ -5312,7 +5356,13 @@ module Aws::SecurityHub
|
|
|
5312
5356
|
req.send_request(options)
|
|
5313
5357
|
end
|
|
5314
5358
|
|
|
5315
|
-
#
|
|
5359
|
+
# <note markdown="1"> The *aggregation Region* is now called the *home Region*.
|
|
5360
|
+
#
|
|
5361
|
+
# </note>
|
|
5362
|
+
#
|
|
5363
|
+
# Returns the current configuration in the calling account for
|
|
5364
|
+
# cross-Region aggregation. A finding aggregator is a resource that
|
|
5365
|
+
# establishes the home Region and any linked Regions.
|
|
5316
5366
|
#
|
|
5317
5367
|
# @option params [required, String] :finding_aggregator_arn
|
|
5318
5368
|
# The ARN of the finding aggregator to return details for. To obtain the
|
|
@@ -5550,9 +5600,9 @@ module Aws::SecurityHub
|
|
|
5550
5600
|
|
|
5551
5601
|
# Returns a list of findings that match the specified criteria.
|
|
5552
5602
|
#
|
|
5553
|
-
# If
|
|
5554
|
-
# from the
|
|
5555
|
-
# findings from both the
|
|
5603
|
+
# If cross-Region aggregation is enabled, then when you call
|
|
5604
|
+
# `GetFindings` from the home Region, the results include all of the
|
|
5605
|
+
# matching findings from both the home Region and linked Regions.
|
|
5556
5606
|
#
|
|
5557
5607
|
# @option params [Types::AwsSecurityFindingFilters] :filters
|
|
5558
5608
|
# The finding attributes used to define a condition to filter the
|
|
@@ -6476,7 +6526,7 @@ module Aws::SecurityHub
|
|
|
6476
6526
|
# Lists and describes insights for the specified insight ARNs.
|
|
6477
6527
|
#
|
|
6478
6528
|
# @option params [Array<String>] :insight_arns
|
|
6479
|
-
# The ARNs of the insights to describe. If you
|
|
6529
|
+
# The ARNs of the insights to describe. If you don't provide any
|
|
6480
6530
|
# insight ARNs, then `GetInsights` returns all of your custom insights.
|
|
6481
6531
|
# It does not return any managed insights.
|
|
6482
6532
|
#
|
|
@@ -6919,10 +6969,21 @@ module Aws::SecurityHub
|
|
|
6919
6969
|
req.send_request(options)
|
|
6920
6970
|
end
|
|
6921
6971
|
|
|
6972
|
+
# <note markdown="1"> We recommend using Organizations instead of Security Hub invitations
|
|
6973
|
+
# to manage your member accounts. For information, see [Managing
|
|
6974
|
+
# Security Hub administrator and member accounts with Organizations][1]
|
|
6975
|
+
# in the *Security Hub User Guide*.
|
|
6976
|
+
#
|
|
6977
|
+
# </note>
|
|
6978
|
+
#
|
|
6922
6979
|
# Returns the count of all Security Hub membership invitations that were
|
|
6923
|
-
# sent to the
|
|
6980
|
+
# sent to the calling member account, not including the currently
|
|
6924
6981
|
# accepted invitation.
|
|
6925
6982
|
#
|
|
6983
|
+
#
|
|
6984
|
+
#
|
|
6985
|
+
# [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html
|
|
6986
|
+
#
|
|
6926
6987
|
# @return [Types::GetInvitationsCountResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
|
6927
6988
|
#
|
|
6928
6989
|
# * {Types::GetInvitationsCountResponse#invitations_count #invitations_count} => Integer
|
|
@@ -7176,12 +7237,20 @@ module Aws::SecurityHub
|
|
|
7176
7237
|
req.send_request(options)
|
|
7177
7238
|
end
|
|
7178
7239
|
|
|
7240
|
+
# <note markdown="1"> We recommend using Organizations instead of Security Hub invitations
|
|
7241
|
+
# to manage your member accounts. For information, see [Managing
|
|
7242
|
+
# Security Hub administrator and member accounts with Organizations][1]
|
|
7243
|
+
# in the *Security Hub User Guide*.
|
|
7244
|
+
#
|
|
7245
|
+
# </note>
|
|
7246
|
+
#
|
|
7179
7247
|
# Invites other Amazon Web Services accounts to become member accounts
|
|
7180
7248
|
# for the Security Hub administrator account that the invitation is sent
|
|
7181
7249
|
# from.
|
|
7182
7250
|
#
|
|
7183
|
-
# This operation is only used to invite accounts that
|
|
7184
|
-
# an organization. Organization accounts
|
|
7251
|
+
# This operation is only used to invite accounts that don't belong to
|
|
7252
|
+
# an Amazon Web Services organization. Organization accounts don't
|
|
7253
|
+
# receive invitations.
|
|
7185
7254
|
#
|
|
7186
7255
|
# Before you can use this action to invite a member, you must first use
|
|
7187
7256
|
# the `CreateMembers` action to create the member account in Security
|
|
@@ -7189,7 +7258,11 @@ module Aws::SecurityHub
|
|
|
7189
7258
|
#
|
|
7190
7259
|
# When the account owner enables Security Hub and accepts the invitation
|
|
7191
7260
|
# to become a member account, the administrator account can view the
|
|
7192
|
-
# findings generated
|
|
7261
|
+
# findings generated in the member account.
|
|
7262
|
+
#
|
|
7263
|
+
#
|
|
7264
|
+
#
|
|
7265
|
+
# [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html
|
|
7193
7266
|
#
|
|
7194
7267
|
# @option params [required, Array<String>] :account_ids
|
|
7195
7268
|
# The list of account IDs of the Amazon Web Services accounts to invite
|
|
@@ -7564,9 +7637,9 @@ module Aws::SecurityHub
|
|
|
7564
7637
|
req.send_request(options)
|
|
7565
7638
|
end
|
|
7566
7639
|
|
|
7567
|
-
# If
|
|
7568
|
-
# returns the ARN of the finding aggregator. You
|
|
7569
|
-
# from any Region.
|
|
7640
|
+
# If cross-Region aggregation is enabled, then `ListFindingAggregators`
|
|
7641
|
+
# returns the Amazon Resource Name (ARN) of the finding aggregator. You
|
|
7642
|
+
# can run this operation from any Amazon Web Services Region.
|
|
7570
7643
|
#
|
|
7571
7644
|
# @option params [String] :next_token
|
|
7572
7645
|
# The token returned with the previous set of results. Identifies the
|
|
@@ -7622,12 +7695,23 @@ module Aws::SecurityHub
|
|
|
7622
7695
|
req.send_request(options)
|
|
7623
7696
|
end
|
|
7624
7697
|
|
|
7698
|
+
# <note markdown="1"> We recommend using Organizations instead of Security Hub invitations
|
|
7699
|
+
# to manage your member accounts. For information, see [Managing
|
|
7700
|
+
# Security Hub administrator and member accounts with Organizations][1]
|
|
7701
|
+
# in the *Security Hub User Guide*.
|
|
7702
|
+
#
|
|
7703
|
+
# </note>
|
|
7704
|
+
#
|
|
7625
7705
|
# Lists all Security Hub membership invitations that were sent to the
|
|
7626
|
-
#
|
|
7706
|
+
# calling account.
|
|
7707
|
+
#
|
|
7708
|
+
# Only accounts that are managed by invitation can use this operation.
|
|
7709
|
+
# Accounts that are managed using the integration with Organizations
|
|
7710
|
+
# don't receive invitations.
|
|
7627
7711
|
#
|
|
7628
|
-
#
|
|
7629
|
-
#
|
|
7630
|
-
#
|
|
7712
|
+
#
|
|
7713
|
+
#
|
|
7714
|
+
# [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html
|
|
7631
7715
|
#
|
|
7632
7716
|
# @option params [Integer] :max_results
|
|
7633
7717
|
# The maximum number of items to return in the response.
|
|
@@ -8594,12 +8678,16 @@ module Aws::SecurityHub
|
|
|
8594
8678
|
req.send_request(options)
|
|
8595
8679
|
end
|
|
8596
8680
|
|
|
8597
|
-
#
|
|
8598
|
-
# Region linking mode and the list of included or excluded Regions. You
|
|
8599
|
-
# cannot use `UpdateFindingAggregator` to change the aggregation Region.
|
|
8681
|
+
# <note markdown="1"> The *aggregation Region* is now called the *home Region*.
|
|
8600
8682
|
#
|
|
8601
|
-
#
|
|
8602
|
-
#
|
|
8683
|
+
# </note>
|
|
8684
|
+
#
|
|
8685
|
+
# Updates cross-Region aggregation settings. You can use this operation
|
|
8686
|
+
# to update the Region linking mode and the list of included or excluded
|
|
8687
|
+
# Amazon Web Services Regions. However, you can't use this operation to
|
|
8688
|
+
# change the home Region.
|
|
8689
|
+
#
|
|
8690
|
+
# You can invoke this operation from the current home Region only.
|
|
8603
8691
|
#
|
|
8604
8692
|
# @option params [required, String] :finding_aggregator_arn
|
|
8605
8693
|
# The ARN of the finding aggregator. To obtain the ARN, use
|
|
@@ -8636,12 +8724,12 @@ module Aws::SecurityHub
|
|
|
8636
8724
|
#
|
|
8637
8725
|
# @option params [Array<String>] :regions
|
|
8638
8726
|
# If `RegionLinkingMode` is `ALL_REGIONS_EXCEPT_SPECIFIED`, then this is
|
|
8639
|
-
# a space-separated list of Regions that
|
|
8640
|
-
# the
|
|
8727
|
+
# a space-separated list of Regions that don't replicate and send
|
|
8728
|
+
# findings to the home Region.
|
|
8641
8729
|
#
|
|
8642
8730
|
# If `RegionLinkingMode` is `SPECIFIED_REGIONS`, then this is a
|
|
8643
|
-
# space-separated list of Regions that do
|
|
8644
|
-
#
|
|
8731
|
+
# space-separated list of Regions that do replicate and send findings to
|
|
8732
|
+
# the home Region.
|
|
8645
8733
|
#
|
|
8646
8734
|
# An `InvalidInputException` error results if you populate this field
|
|
8647
8735
|
# while `RegionLinkingMode` is `NO_REGIONS`.
|
|
@@ -10460,7 +10548,7 @@ module Aws::SecurityHub
|
|
|
10460
10548
|
tracer: tracer
|
|
10461
10549
|
)
|
|
10462
10550
|
context[:gem_name] = 'aws-sdk-securityhub'
|
|
10463
|
-
context[:gem_version] = '1.
|
|
10551
|
+
context[:gem_version] = '1.121.0'
|
|
10464
10552
|
Seahorse::Client::Request.new(handlers, context)
|
|
10465
10553
|
end
|
|
10466
10554
|
|
|
@@ -425,18 +425,12 @@ module Aws::SecurityHub
|
|
|
425
425
|
include Aws::Structure
|
|
426
426
|
end
|
|
427
427
|
|
|
428
|
-
# One or more actions
|
|
429
|
-
# defined criteria of
|
|
428
|
+
# One or more actions that Security Hub takes when a finding matches the
|
|
429
|
+
# defined criteria of a rule.
|
|
430
430
|
#
|
|
431
431
|
# @!attribute [rw] type
|
|
432
|
-
# Specifies
|
|
433
|
-
#
|
|
434
|
-
# of namespace/category/classifier. For more information, see [Types
|
|
435
|
-
# taxonomy for ASFF][1] in the *Security Hub User Guide*.
|
|
436
|
-
#
|
|
437
|
-
#
|
|
438
|
-
#
|
|
439
|
-
# [1]: https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html
|
|
432
|
+
# Specifies the type of action that Security Hub takes when a finding
|
|
433
|
+
# matches the defined criteria of a rule.
|
|
440
434
|
# @return [String]
|
|
441
435
|
#
|
|
442
436
|
# @!attribute [rw] finding_fields_update
|
|
@@ -865,7 +859,7 @@ module Aws::SecurityHub
|
|
|
865
859
|
# The identifier for the given resource type. For Amazon Web Services
|
|
866
860
|
# resources that are identified by Amazon Resource Names (ARNs), this
|
|
867
861
|
# is the ARN. For Amazon Web Services resources that lack ARNs, this
|
|
868
|
-
# is the identifier as defined by the Amazon Web
|
|
862
|
+
# is the identifier as defined by the Amazon Web Services service that
|
|
869
863
|
# created the resource. For non-Amazon Web Services resources, this is
|
|
870
864
|
# a unique identifier that is associated with the resource.
|
|
871
865
|
#
|
|
@@ -3299,9 +3293,9 @@ module Aws::SecurityHub
|
|
|
3299
3293
|
# @!attribute [rw] lifecycle
|
|
3300
3294
|
# Defines when a protected resource is transitioned to cold storage
|
|
3301
3295
|
# and when it expires. Backup transitions and expires backups
|
|
3302
|
-
# automatically according to the lifecycle that you define. If you
|
|
3303
|
-
#
|
|
3304
|
-
# source backup to the destination backup.
|
|
3296
|
+
# automatically according to the lifecycle that you define. If you
|
|
3297
|
+
# don't specify a lifecycle, Backup applies the lifecycle policy of
|
|
3298
|
+
# the source backup to the destination backup.
|
|
3305
3299
|
#
|
|
3306
3300
|
# Backups transitioned to cold storage must be stored in cold storage
|
|
3307
3301
|
# for a minimum of 90 days.
|
|
@@ -3366,9 +3360,9 @@ module Aws::SecurityHub
|
|
|
3366
3360
|
# @!attribute [rw] lifecycle
|
|
3367
3361
|
# Defines when a protected resource is transitioned to cold storage
|
|
3368
3362
|
# and when it expires. Backup transitions and expires backups
|
|
3369
|
-
# automatically according to the lifecycle that you define. If you
|
|
3370
|
-
#
|
|
3371
|
-
# source backup to the destination backup.
|
|
3363
|
+
# automatically according to the lifecycle that you define. If you
|
|
3364
|
+
# don't specify a lifecycle, Backup applies the lifecycle policy of
|
|
3365
|
+
# the source backup to the destination backup.
|
|
3372
3366
|
#
|
|
3373
3367
|
# Backups transitioned to cold storage must be stored in cold storage
|
|
3374
3368
|
# for a minimum of 90 days.
|
|
@@ -3409,7 +3403,7 @@ module Aws::SecurityHub
|
|
|
3409
3403
|
# @!attribute [rw] encryption_key_arn
|
|
3410
3404
|
# The unique ARN associated with the server-side encryption key. You
|
|
3411
3405
|
# can specify a key to encrypt your backups from services that support
|
|
3412
|
-
# full Backup management. If you
|
|
3406
|
+
# full Backup management. If you don't specify a key, Backup creates
|
|
3413
3407
|
# an KMS key for you by default.
|
|
3414
3408
|
# @return [String]
|
|
3415
3409
|
#
|
|
@@ -10075,7 +10069,7 @@ module Aws::SecurityHub
|
|
|
10075
10069
|
# active container instance that meets all of the task placement
|
|
10076
10070
|
# constraints that are specified in the cluster. The service scheduler
|
|
10077
10071
|
# also evaluates the task placement constraints for running tasks and
|
|
10078
|
-
# stops tasks that
|
|
10072
|
+
# stops tasks that don't meet the placement constraints.
|
|
10079
10073
|
#
|
|
10080
10074
|
# Valid values: `REPLICA` \| `DAEMON`
|
|
10081
10075
|
# @return [String]
|
|
@@ -16283,7 +16277,7 @@ module Aws::SecurityHub
|
|
|
16283
16277
|
# **Oracle**
|
|
16284
16278
|
#
|
|
16285
16279
|
# Contains the Oracle System ID (SID) of the created DB instance. Not
|
|
16286
|
-
# shown when the returned parameters
|
|
16280
|
+
# shown when the returned parameters don't apply to an Oracle DB
|
|
16287
16281
|
# instance.
|
|
16288
16282
|
# @return [String]
|
|
16289
16283
|
#
|
|
@@ -20542,7 +20536,7 @@ module Aws::SecurityHub
|
|
|
20542
20536
|
# * `Compliance.Status` changes from `PASSED` to `FAILED`,
|
|
20543
20537
|
# `WARNING`, or `NOT_AVAILABLE`.
|
|
20544
20538
|
#
|
|
20545
|
-
# * `SUPPRESSED` - Indicates that you reviewed the finding and
|
|
20539
|
+
# * `SUPPRESSED` - Indicates that you reviewed the finding and don't
|
|
20546
20540
|
# believe that any action is needed.
|
|
20547
20541
|
#
|
|
20548
20542
|
# The workflow status of a `SUPPRESSED` finding does not change if
|
|
@@ -20647,7 +20641,7 @@ module Aws::SecurityHub
|
|
|
20647
20641
|
#
|
|
20648
20642
|
# @!attribute [rw] compliance_security_control_id
|
|
20649
20643
|
# The unique identifier of a control across standards. Values for this
|
|
20650
|
-
# field typically consist of an Amazon Web
|
|
20644
|
+
# field typically consist of an Amazon Web Services service and a
|
|
20651
20645
|
# number, such as APIGateway.5.
|
|
20652
20646
|
# @return [Array<Types::StringFilter>]
|
|
20653
20647
|
#
|
|
@@ -21887,7 +21881,7 @@ module Aws::SecurityHub
|
|
|
21887
21881
|
# counted.
|
|
21888
21882
|
#
|
|
21889
21883
|
# `ActivatedRule`\|`OverrideAction` applies only when updating or
|
|
21890
|
-
# adding a `RuleGroup` to a web ACL. In this case you
|
|
21884
|
+
# adding a `RuleGroup` to a web ACL. In this case you don't use
|
|
21891
21885
|
# `ActivatedRule` `Action`. For all other update requests,
|
|
21892
21886
|
# `ActivatedRule` `Action` is used instead of `ActivatedRule`
|
|
21893
21887
|
# `OverrideAction`.
|
|
@@ -21897,7 +21891,7 @@ module Aws::SecurityHub
|
|
|
21897
21891
|
# Specifies the order in which the rules in a web ACL are evaluated.
|
|
21898
21892
|
# Rules with a lower value for `Priority` are evaluated before rules
|
|
21899
21893
|
# with a higher value. The value must be a unique integer. If you add
|
|
21900
|
-
# multiple rules to a web ACL, the values
|
|
21894
|
+
# multiple rules to a web ACL, the values don't need to be
|
|
21901
21895
|
# consecutive.
|
|
21902
21896
|
# @return [Integer]
|
|
21903
21897
|
#
|
|
@@ -23160,7 +23154,7 @@ module Aws::SecurityHub
|
|
|
23160
23154
|
# @!attribute [rw] security_control_id
|
|
23161
23155
|
# Typically provides the unique identifier of a control across
|
|
23162
23156
|
# standards. For Security Hub controls, this field consists of an
|
|
23163
|
-
# Amazon Web
|
|
23157
|
+
# Amazon Web Services service and a unique number, such as
|
|
23164
23158
|
# `APIGateway.5`.
|
|
23165
23159
|
# @return [String]
|
|
23166
23160
|
#
|
|
@@ -23703,12 +23697,12 @@ module Aws::SecurityHub
|
|
|
23703
23697
|
#
|
|
23704
23698
|
# @!attribute [rw] regions
|
|
23705
23699
|
# If `RegionLinkingMode` is `ALL_REGIONS_EXCEPT_SPECIFIED`, then this
|
|
23706
|
-
# is a space-separated list of Regions that
|
|
23707
|
-
# to the
|
|
23700
|
+
# is a space-separated list of Regions that don't replicate and send
|
|
23701
|
+
# findings to the home Region.
|
|
23708
23702
|
#
|
|
23709
23703
|
# If `RegionLinkingMode` is `SPECIFIED_REGIONS`, then this is a
|
|
23710
|
-
# space-separated list of Regions that do
|
|
23711
|
-
#
|
|
23704
|
+
# space-separated list of Regions that do replicate and send findings
|
|
23705
|
+
# to the home Region.
|
|
23712
23706
|
#
|
|
23713
23707
|
# An `InvalidInputException` error results if you populate this field
|
|
23714
23708
|
# while `RegionLinkingMode` is `NO_REGIONS`.
|
|
@@ -23725,11 +23719,13 @@ module Aws::SecurityHub
|
|
|
23725
23719
|
|
|
23726
23720
|
# @!attribute [rw] finding_aggregator_arn
|
|
23727
23721
|
# The ARN of the finding aggregator. You use the finding aggregator
|
|
23728
|
-
# ARN to retrieve details for, update, and stop
|
|
23722
|
+
# ARN to retrieve details for, update, and stop cross-Region
|
|
23723
|
+
# aggregation.
|
|
23729
23724
|
# @return [String]
|
|
23730
23725
|
#
|
|
23731
23726
|
# @!attribute [rw] finding_aggregation_region
|
|
23732
|
-
# The
|
|
23727
|
+
# The home Region. Findings generated in linked Regions are replicated
|
|
23728
|
+
# and sent to the home Region.
|
|
23733
23729
|
# @return [String]
|
|
23734
23730
|
#
|
|
23735
23731
|
# @!attribute [rw] region_linking_mode
|
|
@@ -24655,7 +24651,7 @@ module Aws::SecurityHub
|
|
|
24655
24651
|
#
|
|
24656
24652
|
# @!attribute [rw] enable_default_standards
|
|
24657
24653
|
# Whether to enable the security standards that Security Hub has
|
|
24658
|
-
# designated as automatically enabled. If you
|
|
24654
|
+
# designated as automatically enabled. If you don't provide a value
|
|
24659
24655
|
# for `EnableDefaultStandards`, it is set to `true`. To not enable the
|
|
24660
24656
|
# automatically enabled standards, set `EnableDefaultStandards` to
|
|
24661
24657
|
# `false`.
|
|
@@ -24781,8 +24777,9 @@ module Aws::SecurityHub
|
|
|
24781
24777
|
include Aws::Structure
|
|
24782
24778
|
end
|
|
24783
24779
|
|
|
24784
|
-
# A finding aggregator
|
|
24785
|
-
#
|
|
24780
|
+
# A finding aggregator is a Security Hub resource that specifies
|
|
24781
|
+
# cross-Region aggregation settings, including the home Region and any
|
|
24782
|
+
# linked Regions.
|
|
24786
24783
|
#
|
|
24787
24784
|
# @!attribute [rw] finding_aggregator_arn
|
|
24788
24785
|
# The ARN of the finding aggregator. You use the finding aggregator
|
|
@@ -24839,7 +24836,7 @@ module Aws::SecurityHub
|
|
|
24839
24836
|
#
|
|
24840
24837
|
# @!attribute [rw] update_source
|
|
24841
24838
|
# Identifies the source of the event that changed the finding. For
|
|
24842
|
-
# example, an integrated Amazon Web
|
|
24839
|
+
# example, an integrated Amazon Web Services service or third-party
|
|
24843
24840
|
# partner integration may call [ `BatchImportFindings` ][1], or an
|
|
24844
24841
|
# Security Hub customer may call [ `BatchUpdateFindings` ][2].
|
|
24845
24842
|
#
|
|
@@ -24917,8 +24914,8 @@ module Aws::SecurityHub
|
|
|
24917
24914
|
#
|
|
24918
24915
|
# @!attribute [rw] type
|
|
24919
24916
|
# Describes the type of finding change event, such as a call to [
|
|
24920
|
-
# `BatchImportFindings` ][1] (by an integrated Amazon Web
|
|
24921
|
-
#
|
|
24917
|
+
# `BatchImportFindings` ][1] (by an integrated Amazon Web Services
|
|
24918
|
+
# service or third party partner integration) or [
|
|
24922
24919
|
# `BatchUpdateFindings` ][2] (by a Security Hub customer).
|
|
24923
24920
|
#
|
|
24924
24921
|
#
|
|
@@ -25442,7 +25439,8 @@ module Aws::SecurityHub
|
|
|
25442
25439
|
# @return [String]
|
|
25443
25440
|
#
|
|
25444
25441
|
# @!attribute [rw] finding_aggregation_region
|
|
25445
|
-
# The
|
|
25442
|
+
# The home Region. Findings generated in linked Regions are replicated
|
|
25443
|
+
# and sent to the home Region.
|
|
25446
25444
|
# @return [String]
|
|
25447
25445
|
#
|
|
25448
25446
|
# @!attribute [rw] region_linking_mode
|
|
@@ -25681,7 +25679,7 @@ module Aws::SecurityHub
|
|
|
25681
25679
|
end
|
|
25682
25680
|
|
|
25683
25681
|
# @!attribute [rw] insight_arns
|
|
25684
|
-
# The ARNs of the insights to describe. If you
|
|
25682
|
+
# The ARNs of the insights to describe. If you don't provide any
|
|
25685
25683
|
# insight ARNs, then `GetInsights` returns all of your custom
|
|
25686
25684
|
# insights. It does not return any managed insights.
|
|
25687
25685
|
# @return [Array<String>]
|
|
@@ -27637,8 +27635,8 @@ module Aws::SecurityHub
|
|
|
27637
27635
|
# @note Policy is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of Policy corresponding to the set member.
|
|
27638
27636
|
#
|
|
27639
27637
|
# @!attribute [rw] security_hub
|
|
27640
|
-
# The Amazon Web
|
|
27641
|
-
# to.
|
|
27638
|
+
# The Amazon Web Services service that the configuration policy
|
|
27639
|
+
# applies to.
|
|
27642
27640
|
# @return [Types::SecurityHubPolicy]
|
|
27643
27641
|
#
|
|
27644
27642
|
# @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/Policy AWS API Documentation
|
|
@@ -28772,7 +28770,7 @@ module Aws::SecurityHub
|
|
|
28772
28770
|
# @return [String]
|
|
28773
28771
|
#
|
|
28774
28772
|
# @!attribute [rw] destination_prefix_list_id
|
|
28775
|
-
# The prefix of the destination Amazon Web
|
|
28773
|
+
# The prefix of the destination Amazon Web Services service.
|
|
28776
28774
|
# @return [String]
|
|
28777
28775
|
#
|
|
28778
28776
|
# @!attribute [rw] egress_only_internet_gateway_id
|
|
@@ -29287,7 +29285,7 @@ module Aws::SecurityHub
|
|
|
29287
29285
|
#
|
|
29288
29286
|
# @!attribute [rw] security_control_id
|
|
29289
29287
|
# The unique identifier of a security control across standards. Values
|
|
29290
|
-
# for this field typically consist of an Amazon Web
|
|
29288
|
+
# for this field typically consist of an Amazon Web Services service
|
|
29291
29289
|
# name and a number, such as APIGateway.3.
|
|
29292
29290
|
# @return [String]
|
|
29293
29291
|
#
|
|
@@ -29400,7 +29398,7 @@ module Aws::SecurityHub
|
|
|
29400
29398
|
#
|
|
29401
29399
|
# @!attribute [rw] security_control_id
|
|
29402
29400
|
# The unique identifier of a security control across standards. Values
|
|
29403
|
-
# for this field typically consist of an Amazon Web
|
|
29401
|
+
# for this field typically consist of an Amazon Web Services service
|
|
29404
29402
|
# name and a number (for example, APIGateway.3). This parameter
|
|
29405
29403
|
# differs from `SecurityControlArn`, which is a unique Amazon Resource
|
|
29406
29404
|
# Name (ARN) assigned to a control. The ARN references the security
|
|
@@ -29640,7 +29638,7 @@ module Aws::SecurityHub
|
|
|
29640
29638
|
# * `CRITICAL` - The issue must be remediated immediately to avoid it
|
|
29641
29639
|
# escalating.
|
|
29642
29640
|
#
|
|
29643
|
-
# If you provide `Normalized` and
|
|
29641
|
+
# If you provide `Normalized` and don't provide `Label`, then `Label`
|
|
29644
29642
|
# is set automatically as follows.
|
|
29645
29643
|
#
|
|
29646
29644
|
# * 0 - `INFORMATIONAL`
|
|
@@ -29660,7 +29658,7 @@ module Aws::SecurityHub
|
|
|
29660
29658
|
#
|
|
29661
29659
|
# The value of `Normalized` can be an integer between `0` and `100`.
|
|
29662
29660
|
#
|
|
29663
|
-
# If you provide `Label` and
|
|
29661
|
+
# If you provide `Label` and don't provide `Normalized`, then
|
|
29664
29662
|
# `Normalized` is set automatically as follows.
|
|
29665
29663
|
#
|
|
29666
29664
|
# * `INFORMATIONAL` - 0
|
|
@@ -29698,7 +29696,7 @@ module Aws::SecurityHub
|
|
|
29698
29696
|
# The normalized severity for the finding. This attribute is to be
|
|
29699
29697
|
# deprecated in favor of `Label`.
|
|
29700
29698
|
#
|
|
29701
|
-
# If you provide `Normalized` and
|
|
29699
|
+
# If you provide `Normalized` and don't provide `Label`, `Label` is
|
|
29702
29700
|
# set automatically as follows.
|
|
29703
29701
|
#
|
|
29704
29702
|
# * 0 - `INFORMATIONAL`
|
|
@@ -29947,7 +29945,7 @@ module Aws::SecurityHub
|
|
|
29947
29945
|
#
|
|
29948
29946
|
# @!attribute [rw] security_control_id
|
|
29949
29947
|
# The unique identifier of a security control across standards. Values
|
|
29950
|
-
# for this field typically consist of an Amazon Web
|
|
29948
|
+
# for this field typically consist of an Amazon Web Services service
|
|
29951
29949
|
# name and a number, such as APIGateway.3.
|
|
29952
29950
|
# @return [String]
|
|
29953
29951
|
#
|
|
@@ -30048,7 +30046,7 @@ module Aws::SecurityHub
|
|
|
30048
30046
|
#
|
|
30049
30047
|
# @!attribute [rw] security_control_id
|
|
30050
30048
|
# A unique standard-agnostic identifier for a control. Values for this
|
|
30051
|
-
# field typically consist of an Amazon Web
|
|
30049
|
+
# field typically consist of an Amazon Web Services service and a
|
|
30052
30050
|
# number, such as APIGateway.5. This field doesn't reference a
|
|
30053
30051
|
# specific standard.
|
|
30054
30052
|
# @return [String]
|
|
@@ -31156,12 +31154,12 @@ module Aws::SecurityHub
|
|
|
31156
31154
|
#
|
|
31157
31155
|
# @!attribute [rw] regions
|
|
31158
31156
|
# If `RegionLinkingMode` is `ALL_REGIONS_EXCEPT_SPECIFIED`, then this
|
|
31159
|
-
# is a space-separated list of Regions that
|
|
31160
|
-
# to the
|
|
31157
|
+
# is a space-separated list of Regions that don't replicate and send
|
|
31158
|
+
# findings to the home Region.
|
|
31161
31159
|
#
|
|
31162
31160
|
# If `RegionLinkingMode` is `SPECIFIED_REGIONS`, then this is a
|
|
31163
|
-
# space-separated list of Regions that do
|
|
31164
|
-
#
|
|
31161
|
+
# space-separated list of Regions that do replicate and send findings
|
|
31162
|
+
# to the home Region.
|
|
31165
31163
|
#
|
|
31166
31164
|
# An `InvalidInputException` error results if you populate this field
|
|
31167
31165
|
# while `RegionLinkingMode` is `NO_REGIONS`.
|
|
@@ -31182,7 +31180,8 @@ module Aws::SecurityHub
|
|
|
31182
31180
|
# @return [String]
|
|
31183
31181
|
#
|
|
31184
31182
|
# @!attribute [rw] finding_aggregation_region
|
|
31185
|
-
# The
|
|
31183
|
+
# The home Region. Findings generated in linked Regions are replicated
|
|
31184
|
+
# and sent to the home Region.
|
|
31186
31185
|
# @return [String]
|
|
31187
31186
|
#
|
|
31188
31187
|
# @!attribute [rw] region_linking_mode
|
|
@@ -31757,7 +31756,7 @@ module Aws::SecurityHub
|
|
|
31757
31756
|
# the security issue. Used when the initial reviewer is not the
|
|
31758
31757
|
# resource owner, and needs intervention from the resource owner.
|
|
31759
31758
|
#
|
|
31760
|
-
# * `SUPPRESSED` - Indicates that you reviewed the finding and
|
|
31759
|
+
# * `SUPPRESSED` - Indicates that you reviewed the finding and don't
|
|
31761
31760
|
# believe that any action is needed. The finding is no longer
|
|
31762
31761
|
# updated.
|
|
31763
31762
|
#
|
|
@@ -31801,7 +31800,7 @@ module Aws::SecurityHub
|
|
|
31801
31800
|
# * `RESOLVED` - The finding was reviewed and remediated and is now
|
|
31802
31801
|
# considered resolved.
|
|
31803
31802
|
#
|
|
31804
|
-
# * `SUPPRESSED` - Indicates that you reviewed the finding and
|
|
31803
|
+
# * `SUPPRESSED` - Indicates that you reviewed the finding and don't
|
|
31805
31804
|
# believe that any action is needed. The finding is no longer
|
|
31806
31805
|
# updated.
|
|
31807
31806
|
# @return [String]
|
data/lib/aws-sdk-securityhub.rb
CHANGED
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: aws-sdk-securityhub
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.121.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Amazon Web Services
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2024-09-
|
|
11
|
+
date: 2024-09-27 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: aws-sdk-core
|