aws-sdk-securityhub 1.14.0 → 1.15.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d3fb50025b4a690e3c88dd82c871ecd21a0fc170
-  data.tar.gz: d694e7b4306ab70a45a7fec6ebaa8cc670383343
+  metadata.gz: 1c05a52e7fa6f9df651af11efde048a6977ad574
+  data.tar.gz: 35c8e5d58f0c8eff8a2dc2f12d3c8d2b27ee5cd6
 SHA512:
-  metadata.gz: 2e1560a2fa7d3e41e17a4e4a19f7aac3f270dee45527420ec167a1f2b95ff784ef04737f30c9a7d10ceb1f2bf608fcb9d5151a4464162d6a938be9d0b021fa96
-  data.tar.gz: 0f231a1ec5e5f41dded071aa1d104ffeef94c4e6ceefb43ea9f880d3d6676ccd8acb92b9cbb4a27ad9add032d32112c1552af402b90d19fa9478f45ed1bdab15
+  metadata.gz: 5efc69312ab83b36848d4bd32a1ec4f2195404f35b8f437bbac997cf64f94a71c4f49cf8c32074c4135c0b2e95b53de09d25bdd3b15dd3d211761daeebd98c8b
+  data.tar.gz: cb77197f10ea6058699efff2a50eb24c5546e4d186d718d6bbfde7b4f3c494a894ca486e4b20e12a8a56eec9164a282b4de56e637e41c6355b5bda9644045998

data/lib/aws-sdk-securityhub.rb

@@ -42,6 +42,6 @@ require_relative 'aws-sdk-securityhub/customizations'
 # @service
 module Aws::SecurityHub
 
-  GEM_VERSION = '1.14.0'
+  GEM_VERSION = '1.15.0'
 
 end

data/lib/aws-sdk-securityhub/client.rb

@@ -383,7 +383,8 @@ module Aws::SecurityHub
     #
     # @option params [required, Array<Types::AwsSecurityFinding>] :findings
     #   A list of findings to import. To successfully import a finding, it
-    #   must follow the [AWS Security Finding Format][1].
+    #   must follow the [AWS Security Finding Format][1]. Maximum of 100
+    #   findings per request.
     #
     #
     #
@@ -480,6 +481,28 @@ module Aws::SecurityHub
     #               "NonEmptyString" => "NonEmptyString",
     #             },
     #             details: {
+    #               aws_cloud_front_distribution: {
+    #                 domain_name: "NonEmptyString",
+    #                 etag: "NonEmptyString",
+    #                 last_modified_time: "NonEmptyString",
+    #                 logging: {
+    #                   bucket: "NonEmptyString",
+    #                   enabled: false,
+    #                   include_cookies: false,
+    #                   prefix: "NonEmptyString",
+    #                 },
+    #                 origins: {
+    #                   items: [
+    #                     {
+    #                       domain_name: "NonEmptyString",
+    #                       id: "NonEmptyString",
+    #                       origin_path: "NonEmptyString",
+    #                     },
+    #                   ],
+    #                 },
+    #                 status: "NonEmptyString",
+    #                 web_acl_id: "NonEmptyString",
+    #               },
     #               aws_ec2_instance: {
     #                 type: "NonEmptyString",
     #                 image_id: "NonEmptyString",
@@ -491,6 +514,26 @@ module Aws::SecurityHub
     #                 subnet_id: "NonEmptyString",
     #                 launched_at: "NonEmptyString",
     #               },
+    #               aws_elbv_2_load_balancer: {
+    #                 availability_zones: [
+    #                   {
+    #                     zone_name: "NonEmptyString",
+    #                     subnet_id: "NonEmptyString",
+    #                   },
+    #                 ],
+    #                 canonical_hosted_zone_id: "NonEmptyString",
+    #                 created_time: "NonEmptyString",
+    #                 dns_name: "NonEmptyString",
+    #                 ip_address_type: "NonEmptyString",
+    #                 scheme: "NonEmptyString",
+    #                 security_groups: ["NonEmptyString"],
+    #                 state: {
+    #                   code: "NonEmptyString",
+    #                   reason: "NonEmptyString",
+    #                 },
+    #                 type: "NonEmptyString",
+    #                 vpc_id: "NonEmptyString",
+    #               },
     #               aws_s3_bucket: {
     #                 owner_id: "NonEmptyString",
     #                 owner_name: "NonEmptyString",
@@ -499,6 +542,88 @@ module Aws::SecurityHub
     #                 user_name: "NonEmptyString",
     #                 status: "Active", # accepts Active, Inactive
     #                 created_at: "NonEmptyString",
+    #                 principal_id: "NonEmptyString",
+    #                 principal_type: "NonEmptyString",
+    #                 principal_name: "NonEmptyString",
+    #               },
+    #               aws_iam_role: {
+    #                 assume_role_policy_document: "AwsIamRoleAssumeRolePolicyDocument",
+    #                 create_date: "NonEmptyString",
+    #                 role_id: "NonEmptyString",
+    #                 role_name: "NonEmptyString",
+    #                 max_session_duration: 1,
+    #                 path: "NonEmptyString",
+    #               },
+    #               aws_kms_key: {
+    #                 aws_account_id: "NonEmptyString",
+    #                 creation_date: 1.0,
+    #                 key_id: "NonEmptyString",
+    #                 key_manager: "NonEmptyString",
+    #                 key_state: "NonEmptyString",
+    #                 origin: "NonEmptyString",
+    #               },
+    #               aws_lambda_function: {
+    #                 code: {
+    #                   s3_bucket: "NonEmptyString",
+    #                   s3_key: "NonEmptyString",
+    #                   s3_object_version: "NonEmptyString",
+    #                   zip_file: "NonEmptyString",
+    #                 },
+    #                 code_sha_256: "NonEmptyString",
+    #                 dead_letter_config: {
+    #                   target_arn: "NonEmptyString",
+    #                 },
+    #                 environment: {
+    #                   variables: {
+    #                     "NonEmptyString" => "NonEmptyString",
+    #                   },
+    #                   error: {
+    #                     error_code: "NonEmptyString",
+    #                     message: "NonEmptyString",
+    #                   },
+    #                 },
+    #                 function_name: "NonEmptyString",
+    #                 handler: "NonEmptyString",
+    #                 kms_key_arn: "NonEmptyString",
+    #                 last_modified: "NonEmptyString",
+    #                 layers: [
+    #                   {
+    #                     arn: "NonEmptyString",
+    #                     code_size: 1,
+    #                   },
+    #                 ],
+    #                 master_arn: "NonEmptyString",
+    #                 memory_size: 1,
+    #                 revision_id: "NonEmptyString",
+    #                 role: "NonEmptyString",
+    #                 runtime: "NonEmptyString",
+    #                 timeout: 1,
+    #                 tracing_config: {
+    #                   mode: "NonEmptyString",
+    #                 },
+    #                 vpc_config: {
+    #                   security_group_ids: ["NonEmptyString"],
+    #                   subnet_ids: ["NonEmptyString"],
+    #                   vpc_id: "NonEmptyString",
+    #                 },
+    #                 version: "NonEmptyString",
+    #               },
+    #               aws_sns_topic: {
+    #                 kms_master_key_id: "NonEmptyString",
+    #                 subscription: [
+    #                   {
+    #                     endpoint: "NonEmptyString",
+    #                     protocol: "NonEmptyString",
+    #                   },
+    #                 ],
+    #                 topic_name: "NonEmptyString",
+    #                 owner: "NonEmptyString",
+    #               },
+    #               aws_sqs_queue: {
+    #                 kms_data_key_reuse_period_seconds: 1,
+    #                 kms_master_key_id: "NonEmptyString",
+    #                 queue_name: "NonEmptyString",
+    #                 dead_letter_target_arn: "NonEmptyString",
     #               },
     #               container: {
     #                 name: "NonEmptyString",
@@ -1619,7 +1744,8 @@ module Aws::SecurityHub
     end
 
     # Enables Security Hub for your account in the current Region or the
-    # Region you specify in the request. When you enable Security Hub, you
+    # Region you specify in the request. Enabling Security Hub also enables
+    # the CIS AWS Foundations standard. When you enable Security Hub, you
     # grant to Security Hub the permissions necessary to gather findings
     # from AWS Config, Amazon GuardDuty, Amazon Inspector, and Amazon Macie.
     # To learn more, see [Setting Up AWS Security Hub][1].
@@ -2345,6 +2471,19 @@ module Aws::SecurityHub
     #   resp.findings[0].resources[0].region #=> String
     #   resp.findings[0].resources[0].tags #=> Hash
     #   resp.findings[0].resources[0].tags["NonEmptyString"] #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.domain_name #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.etag #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.last_modified_time #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.logging.bucket #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.logging.enabled #=> Boolean
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.logging.include_cookies #=> Boolean
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.logging.prefix #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.origins.items #=> Array
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.origins.items[0].domain_name #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.origins.items[0].id #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.origins.items[0].origin_path #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.status #=> String
+    #   resp.findings[0].resources[0].details.aws_cloud_front_distribution.web_acl_id #=> String
     #   resp.findings[0].resources[0].details.aws_ec2_instance.type #=> String
     #   resp.findings[0].resources[0].details.aws_ec2_instance.image_id #=> String
     #   resp.findings[0].resources[0].details.aws_ec2_instance.ip_v4_addresses #=> Array
@@ -2356,11 +2495,80 @@ module Aws::SecurityHub
     #   resp.findings[0].resources[0].details.aws_ec2_instance.vpc_id #=> String
     #   resp.findings[0].resources[0].details.aws_ec2_instance.subnet_id #=> String
     #   resp.findings[0].resources[0].details.aws_ec2_instance.launched_at #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.availability_zones #=> Array
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.availability_zones[0].zone_name #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.availability_zones[0].subnet_id #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.canonical_hosted_zone_id #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.created_time #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.dns_name #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.ip_address_type #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.scheme #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.security_groups #=> Array
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.security_groups[0] #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.state.code #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.state.reason #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.type #=> String
+    #   resp.findings[0].resources[0].details.aws_elbv_2_load_balancer.vpc_id #=> String
     #   resp.findings[0].resources[0].details.aws_s3_bucket.owner_id #=> String
     #   resp.findings[0].resources[0].details.aws_s3_bucket.owner_name #=> String
     #   resp.findings[0].resources[0].details.aws_iam_access_key.user_name #=> String
     #   resp.findings[0].resources[0].details.aws_iam_access_key.status #=> String, one of "Active", "Inactive"
     #   resp.findings[0].resources[0].details.aws_iam_access_key.created_at #=> String
+    #   resp.findings[0].resources[0].details.aws_iam_access_key.principal_id #=> String
+    #   resp.findings[0].resources[0].details.aws_iam_access_key.principal_type #=> String
+    #   resp.findings[0].resources[0].details.aws_iam_access_key.principal_name #=> String
+    #   resp.findings[0].resources[0].details.aws_iam_role.assume_role_policy_document #=> String
+    #   resp.findings[0].resources[0].details.aws_iam_role.create_date #=> String
+    #   resp.findings[0].resources[0].details.aws_iam_role.role_id #=> String
+    #   resp.findings[0].resources[0].details.aws_iam_role.role_name #=> String
+    #   resp.findings[0].resources[0].details.aws_iam_role.max_session_duration #=> Integer
+    #   resp.findings[0].resources[0].details.aws_iam_role.path #=> String
+    #   resp.findings[0].resources[0].details.aws_kms_key.aws_account_id #=> String
+    #   resp.findings[0].resources[0].details.aws_kms_key.creation_date #=> Float
+    #   resp.findings[0].resources[0].details.aws_kms_key.key_id #=> String
+    #   resp.findings[0].resources[0].details.aws_kms_key.key_manager #=> String
+    #   resp.findings[0].resources[0].details.aws_kms_key.key_state #=> String
+    #   resp.findings[0].resources[0].details.aws_kms_key.origin #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.code.s3_bucket #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.code.s3_key #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.code.s3_object_version #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.code.zip_file #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.code_sha_256 #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.dead_letter_config.target_arn #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.environment.variables #=> Hash
+    #   resp.findings[0].resources[0].details.aws_lambda_function.environment.variables["NonEmptyString"] #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.environment.error.error_code #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.environment.error.message #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.function_name #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.handler #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.kms_key_arn #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.last_modified #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.layers #=> Array
+    #   resp.findings[0].resources[0].details.aws_lambda_function.layers[0].arn #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.layers[0].code_size #=> Integer
+    #   resp.findings[0].resources[0].details.aws_lambda_function.master_arn #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.memory_size #=> Integer
+    #   resp.findings[0].resources[0].details.aws_lambda_function.revision_id #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.role #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.runtime #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.timeout #=> Integer
+    #   resp.findings[0].resources[0].details.aws_lambda_function.tracing_config.mode #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.vpc_config.security_group_ids #=> Array
+    #   resp.findings[0].resources[0].details.aws_lambda_function.vpc_config.security_group_ids[0] #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.vpc_config.subnet_ids #=> Array
+    #   resp.findings[0].resources[0].details.aws_lambda_function.vpc_config.subnet_ids[0] #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.vpc_config.vpc_id #=> String
+    #   resp.findings[0].resources[0].details.aws_lambda_function.version #=> String
+    #   resp.findings[0].resources[0].details.aws_sns_topic.kms_master_key_id #=> String
+    #   resp.findings[0].resources[0].details.aws_sns_topic.subscription #=> Array
+    #   resp.findings[0].resources[0].details.aws_sns_topic.subscription[0].endpoint #=> String
+    #   resp.findings[0].resources[0].details.aws_sns_topic.subscription[0].protocol #=> String
+    #   resp.findings[0].resources[0].details.aws_sns_topic.topic_name #=> String
+    #   resp.findings[0].resources[0].details.aws_sns_topic.owner #=> String
+    #   resp.findings[0].resources[0].details.aws_sqs_queue.kms_data_key_reuse_period_seconds #=> Integer
+    #   resp.findings[0].resources[0].details.aws_sqs_queue.kms_master_key_id #=> String
+    #   resp.findings[0].resources[0].details.aws_sqs_queue.queue_name #=> String
+    #   resp.findings[0].resources[0].details.aws_sqs_queue.dead_letter_target_arn #=> String
     #   resp.findings[0].resources[0].details.container.name #=> String
     #   resp.findings[0].resources[0].details.container.image_id #=> String
     #   resp.findings[0].resources[0].details.container.image_name #=> String
@@ -4290,7 +4498,7 @@ module Aws::SecurityHub
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-securityhub'
-      context[:gem_version] = '1.14.0'
+      context[:gem_version] = '1.15.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityhub/client_api.rb

@@ -21,13 +21,37 @@ module Aws::SecurityHub
     ActionTarget = Shapes::StructureShape.new(name: 'ActionTarget')
     ActionTargetList = Shapes::ListShape.new(name: 'ActionTargetList')
     ArnList = Shapes::ListShape.new(name: 'ArnList')
+    AvailabilityZone = Shapes::StructureShape.new(name: 'AvailabilityZone')
+    AvailabilityZones = Shapes::ListShape.new(name: 'AvailabilityZones')
+    AwsCloudFrontDistributionDetails = Shapes::StructureShape.new(name: 'AwsCloudFrontDistributionDetails')
+    AwsCloudFrontDistributionLogging = Shapes::StructureShape.new(name: 'AwsCloudFrontDistributionLogging')
+    AwsCloudFrontDistributionOriginItem = Shapes::StructureShape.new(name: 'AwsCloudFrontDistributionOriginItem')
+    AwsCloudFrontDistributionOriginItemList = Shapes::ListShape.new(name: 'AwsCloudFrontDistributionOriginItemList')
+    AwsCloudFrontDistributionOrigins = Shapes::StructureShape.new(name: 'AwsCloudFrontDistributionOrigins')
     AwsEc2InstanceDetails = Shapes::StructureShape.new(name: 'AwsEc2InstanceDetails')
+    AwsElbv2LoadBalancerDetails = Shapes::StructureShape.new(name: 'AwsElbv2LoadBalancerDetails')
     AwsIamAccessKeyDetails = Shapes::StructureShape.new(name: 'AwsIamAccessKeyDetails')
     AwsIamAccessKeyStatus = Shapes::StringShape.new(name: 'AwsIamAccessKeyStatus')
+    AwsIamRoleAssumeRolePolicyDocument = Shapes::StringShape.new(name: 'AwsIamRoleAssumeRolePolicyDocument')
+    AwsIamRoleDetails = Shapes::StructureShape.new(name: 'AwsIamRoleDetails')
+    AwsKmsKeyDetails = Shapes::StructureShape.new(name: 'AwsKmsKeyDetails')
+    AwsLambdaFunctionCode = Shapes::StructureShape.new(name: 'AwsLambdaFunctionCode')
+    AwsLambdaFunctionDeadLetterConfig = Shapes::StructureShape.new(name: 'AwsLambdaFunctionDeadLetterConfig')
+    AwsLambdaFunctionDetails = Shapes::StructureShape.new(name: 'AwsLambdaFunctionDetails')
+    AwsLambdaFunctionEnvironment = Shapes::StructureShape.new(name: 'AwsLambdaFunctionEnvironment')
+    AwsLambdaFunctionEnvironmentError = Shapes::StructureShape.new(name: 'AwsLambdaFunctionEnvironmentError')
+    AwsLambdaFunctionLayer = Shapes::StructureShape.new(name: 'AwsLambdaFunctionLayer')
+    AwsLambdaFunctionLayerList = Shapes::ListShape.new(name: 'AwsLambdaFunctionLayerList')
+    AwsLambdaFunctionTracingConfig = Shapes::StructureShape.new(name: 'AwsLambdaFunctionTracingConfig')
+    AwsLambdaFunctionVpcConfig = Shapes::StructureShape.new(name: 'AwsLambdaFunctionVpcConfig')
     AwsS3BucketDetails = Shapes::StructureShape.new(name: 'AwsS3BucketDetails')
     AwsSecurityFinding = Shapes::StructureShape.new(name: 'AwsSecurityFinding')
     AwsSecurityFindingFilters = Shapes::StructureShape.new(name: 'AwsSecurityFindingFilters')
     AwsSecurityFindingList = Shapes::ListShape.new(name: 'AwsSecurityFindingList')
+    AwsSnsTopicDetails = Shapes::StructureShape.new(name: 'AwsSnsTopicDetails')
+    AwsSnsTopicSubscription = Shapes::StructureShape.new(name: 'AwsSnsTopicSubscription')
+    AwsSnsTopicSubscriptionList = Shapes::ListShape.new(name: 'AwsSnsTopicSubscriptionList')
+    AwsSqsQueueDetails = Shapes::StructureShape.new(name: 'AwsSqsQueueDetails')
     BatchDisableStandardsRequest = Shapes::StructureShape.new(name: 'BatchDisableStandardsRequest')
     BatchDisableStandardsResponse = Shapes::StructureShape.new(name: 'BatchDisableStandardsResponse')
     BatchEnableStandardsRequest = Shapes::StructureShape.new(name: 'BatchEnableStandardsRequest')
@@ -121,6 +145,7 @@ module Aws::SecurityHub
     ListMembersResponse = Shapes::StructureShape.new(name: 'ListMembersResponse')
     ListTagsForResourceRequest = Shapes::StructureShape.new(name: 'ListTagsForResourceRequest')
     ListTagsForResourceResponse = Shapes::StructureShape.new(name: 'ListTagsForResourceResponse')
+    LoadBalancerState = Shapes::StructureShape.new(name: 'LoadBalancerState')
     Malware = Shapes::StructureShape.new(name: 'Malware')
     MalwareList = Shapes::ListShape.new(name: 'MalwareList')
     MalwareState = Shapes::StringShape.new(name: 'MalwareState')
@@ -135,6 +160,7 @@ module Aws::SecurityHub
     NetworkDirection = Shapes::StringShape.new(name: 'NetworkDirection')
     NextToken = Shapes::StringShape.new(name: 'NextToken')
     NonEmptyString = Shapes::StringShape.new(name: 'NonEmptyString')
+    NonEmptyStringList = Shapes::ListShape.new(name: 'NonEmptyStringList')
     Note = Shapes::StructureShape.new(name: 'Note')
     NoteUpdate = Shapes::StructureShape.new(name: 'NoteUpdate')
     NumberFilter = Shapes::StructureShape.new(name: 'NumberFilter')
@@ -157,6 +183,7 @@ module Aws::SecurityHub
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     Result = Shapes::StructureShape.new(name: 'Result')
     ResultList = Shapes::ListShape.new(name: 'ResultList')
+    SecurityGroups = Shapes::ListShape.new(name: 'SecurityGroups')
     Severity = Shapes::StructureShape.new(name: 'Severity')
     SortCriteria = Shapes::ListShape.new(name: 'SortCriteria')
     SortCriterion = Shapes::StructureShape.new(name: 'SortCriterion')
@@ -222,6 +249,37 @@ module Aws::SecurityHub
 
     ArnList.member = Shapes::ShapeRef.new(shape: NonEmptyString)
 
+    AvailabilityZone.add_member(:zone_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ZoneName"))
+    AvailabilityZone.add_member(:subnet_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "SubnetId"))
+    AvailabilityZone.struct_class = Types::AvailabilityZone
+
+    AvailabilityZones.member = Shapes::ShapeRef.new(shape: AvailabilityZone)
+
+    AwsCloudFrontDistributionDetails.add_member(:domain_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DomainName"))
+    AwsCloudFrontDistributionDetails.add_member(:etag, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ETag"))
+    AwsCloudFrontDistributionDetails.add_member(:last_modified_time, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "LastModifiedTime"))
+    AwsCloudFrontDistributionDetails.add_member(:logging, Shapes::ShapeRef.new(shape: AwsCloudFrontDistributionLogging, location_name: "Logging"))
+    AwsCloudFrontDistributionDetails.add_member(:origins, Shapes::ShapeRef.new(shape: AwsCloudFrontDistributionOrigins, location_name: "Origins"))
+    AwsCloudFrontDistributionDetails.add_member(:status, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Status"))
+    AwsCloudFrontDistributionDetails.add_member(:web_acl_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "WebAclId"))
+    AwsCloudFrontDistributionDetails.struct_class = Types::AwsCloudFrontDistributionDetails
+
+    AwsCloudFrontDistributionLogging.add_member(:bucket, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Bucket"))
+    AwsCloudFrontDistributionLogging.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "Enabled"))
+    AwsCloudFrontDistributionLogging.add_member(:include_cookies, Shapes::ShapeRef.new(shape: Boolean, location_name: "IncludeCookies"))
+    AwsCloudFrontDistributionLogging.add_member(:prefix, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Prefix"))
+    AwsCloudFrontDistributionLogging.struct_class = Types::AwsCloudFrontDistributionLogging
+
+    AwsCloudFrontDistributionOriginItem.add_member(:domain_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DomainName"))
+    AwsCloudFrontDistributionOriginItem.add_member(:id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Id"))
+    AwsCloudFrontDistributionOriginItem.add_member(:origin_path, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "OriginPath"))
+    AwsCloudFrontDistributionOriginItem.struct_class = Types::AwsCloudFrontDistributionOriginItem
+
+    AwsCloudFrontDistributionOriginItemList.member = Shapes::ShapeRef.new(shape: AwsCloudFrontDistributionOriginItem)
+
+    AwsCloudFrontDistributionOrigins.add_member(:items, Shapes::ShapeRef.new(shape: AwsCloudFrontDistributionOriginItemList, location_name: "Items"))
+    AwsCloudFrontDistributionOrigins.struct_class = Types::AwsCloudFrontDistributionOrigins
+
     AwsEc2InstanceDetails.add_member(:type, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Type"))
     AwsEc2InstanceDetails.add_member(:image_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ImageId"))
     AwsEc2InstanceDetails.add_member(:ip_v4_addresses, Shapes::ShapeRef.new(shape: StringList, location_name: "IpV4Addresses"))
@@ -233,11 +291,93 @@ module Aws::SecurityHub
     AwsEc2InstanceDetails.add_member(:launched_at, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "LaunchedAt"))
     AwsEc2InstanceDetails.struct_class = Types::AwsEc2InstanceDetails
 
-    AwsIamAccessKeyDetails.add_member(:user_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "UserName"))
+    AwsElbv2LoadBalancerDetails.add_member(:availability_zones, Shapes::ShapeRef.new(shape: AvailabilityZones, location_name: "AvailabilityZones"))
+    AwsElbv2LoadBalancerDetails.add_member(:canonical_hosted_zone_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CanonicalHostedZoneId"))
+    AwsElbv2LoadBalancerDetails.add_member(:created_time, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CreatedTime"))
+    AwsElbv2LoadBalancerDetails.add_member(:dns_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DNSName"))
+    AwsElbv2LoadBalancerDetails.add_member(:ip_address_type, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "IpAddressType"))
+    AwsElbv2LoadBalancerDetails.add_member(:scheme, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Scheme"))
+    AwsElbv2LoadBalancerDetails.add_member(:security_groups, Shapes::ShapeRef.new(shape: SecurityGroups, location_name: "SecurityGroups"))
+    AwsElbv2LoadBalancerDetails.add_member(:state, Shapes::ShapeRef.new(shape: LoadBalancerState, location_name: "State"))
+    AwsElbv2LoadBalancerDetails.add_member(:type, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Type"))
+    AwsElbv2LoadBalancerDetails.add_member(:vpc_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "VpcId"))
+    AwsElbv2LoadBalancerDetails.struct_class = Types::AwsElbv2LoadBalancerDetails
+
+    AwsIamAccessKeyDetails.add_member(:user_name, Shapes::ShapeRef.new(shape: NonEmptyString, deprecated: true, location_name: "UserName", metadata: {"deprecatedMessage"=>"This field is deprecated, use PrincipalName instead."}))
     AwsIamAccessKeyDetails.add_member(:status, Shapes::ShapeRef.new(shape: AwsIamAccessKeyStatus, location_name: "Status"))
     AwsIamAccessKeyDetails.add_member(:created_at, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CreatedAt"))
+    AwsIamAccessKeyDetails.add_member(:principal_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "PrincipalId"))
+    AwsIamAccessKeyDetails.add_member(:principal_type, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "PrincipalType"))
+    AwsIamAccessKeyDetails.add_member(:principal_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "PrincipalName"))
     AwsIamAccessKeyDetails.struct_class = Types::AwsIamAccessKeyDetails
 
+    AwsIamRoleDetails.add_member(:assume_role_policy_document, Shapes::ShapeRef.new(shape: AwsIamRoleAssumeRolePolicyDocument, location_name: "AssumeRolePolicyDocument"))
+    AwsIamRoleDetails.add_member(:create_date, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CreateDate"))
+    AwsIamRoleDetails.add_member(:role_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "RoleId"))
+    AwsIamRoleDetails.add_member(:role_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "RoleName"))
+    AwsIamRoleDetails.add_member(:max_session_duration, Shapes::ShapeRef.new(shape: Integer, location_name: "MaxSessionDuration"))
+    AwsIamRoleDetails.add_member(:path, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Path"))
+    AwsIamRoleDetails.struct_class = Types::AwsIamRoleDetails
+
+    AwsKmsKeyDetails.add_member(:aws_account_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "AWSAccountId"))
+    AwsKmsKeyDetails.add_member(:creation_date, Shapes::ShapeRef.new(shape: Double, location_name: "CreationDate"))
+    AwsKmsKeyDetails.add_member(:key_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "KeyId"))
+    AwsKmsKeyDetails.add_member(:key_manager, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "KeyManager"))
+    AwsKmsKeyDetails.add_member(:key_state, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "KeyState"))
+    AwsKmsKeyDetails.add_member(:origin, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Origin"))
+    AwsKmsKeyDetails.struct_class = Types::AwsKmsKeyDetails
+
+    AwsLambdaFunctionCode.add_member(:s3_bucket, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "S3Bucket"))
+    AwsLambdaFunctionCode.add_member(:s3_key, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "S3Key"))
+    AwsLambdaFunctionCode.add_member(:s3_object_version, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "S3ObjectVersion"))
+    AwsLambdaFunctionCode.add_member(:zip_file, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ZipFile"))
+    AwsLambdaFunctionCode.struct_class = Types::AwsLambdaFunctionCode
+
+    AwsLambdaFunctionDeadLetterConfig.add_member(:target_arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "TargetArn"))
+    AwsLambdaFunctionDeadLetterConfig.struct_class = Types::AwsLambdaFunctionDeadLetterConfig
+
+    AwsLambdaFunctionDetails.add_member(:code, Shapes::ShapeRef.new(shape: AwsLambdaFunctionCode, location_name: "Code"))
+    AwsLambdaFunctionDetails.add_member(:code_sha_256, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CodeSha256"))
+    AwsLambdaFunctionDetails.add_member(:dead_letter_config, Shapes::ShapeRef.new(shape: AwsLambdaFunctionDeadLetterConfig, location_name: "DeadLetterConfig"))
+    AwsLambdaFunctionDetails.add_member(:environment, Shapes::ShapeRef.new(shape: AwsLambdaFunctionEnvironment, location_name: "Environment"))
+    AwsLambdaFunctionDetails.add_member(:function_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "FunctionName"))
+    AwsLambdaFunctionDetails.add_member(:handler, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Handler"))
+    AwsLambdaFunctionDetails.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "KmsKeyArn"))
+    AwsLambdaFunctionDetails.add_member(:last_modified, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "LastModified"))
+    AwsLambdaFunctionDetails.add_member(:layers, Shapes::ShapeRef.new(shape: AwsLambdaFunctionLayerList, location_name: "Layers"))
+    AwsLambdaFunctionDetails.add_member(:master_arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "MasterArn"))
+    AwsLambdaFunctionDetails.add_member(:memory_size, Shapes::ShapeRef.new(shape: Integer, location_name: "MemorySize"))
+    AwsLambdaFunctionDetails.add_member(:revision_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "RevisionId"))
+    AwsLambdaFunctionDetails.add_member(:role, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Role"))
+    AwsLambdaFunctionDetails.add_member(:runtime, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Runtime"))
+    AwsLambdaFunctionDetails.add_member(:timeout, Shapes::ShapeRef.new(shape: Integer, location_name: "Timeout"))
+    AwsLambdaFunctionDetails.add_member(:tracing_config, Shapes::ShapeRef.new(shape: AwsLambdaFunctionTracingConfig, location_name: "TracingConfig"))
+    AwsLambdaFunctionDetails.add_member(:vpc_config, Shapes::ShapeRef.new(shape: AwsLambdaFunctionVpcConfig, location_name: "VpcConfig"))
+    AwsLambdaFunctionDetails.add_member(:version, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Version"))
+    AwsLambdaFunctionDetails.struct_class = Types::AwsLambdaFunctionDetails
+
+    AwsLambdaFunctionEnvironment.add_member(:variables, Shapes::ShapeRef.new(shape: FieldMap, location_name: "Variables"))
+    AwsLambdaFunctionEnvironment.add_member(:error, Shapes::ShapeRef.new(shape: AwsLambdaFunctionEnvironmentError, location_name: "Error"))
+    AwsLambdaFunctionEnvironment.struct_class = Types::AwsLambdaFunctionEnvironment
+
+    AwsLambdaFunctionEnvironmentError.add_member(:error_code, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "ErrorCode"))
+    AwsLambdaFunctionEnvironmentError.add_member(:message, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Message"))
+    AwsLambdaFunctionEnvironmentError.struct_class = Types::AwsLambdaFunctionEnvironmentError
+
+    AwsLambdaFunctionLayer.add_member(:arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Arn"))
+    AwsLambdaFunctionLayer.add_member(:code_size, Shapes::ShapeRef.new(shape: Integer, location_name: "CodeSize"))
+    AwsLambdaFunctionLayer.struct_class = Types::AwsLambdaFunctionLayer
+
+    AwsLambdaFunctionLayerList.member = Shapes::ShapeRef.new(shape: AwsLambdaFunctionLayer)
+
+    AwsLambdaFunctionTracingConfig.add_member(:mode, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Mode"))
+    AwsLambdaFunctionTracingConfig.struct_class = Types::AwsLambdaFunctionTracingConfig
+
+    AwsLambdaFunctionVpcConfig.add_member(:security_group_ids, Shapes::ShapeRef.new(shape: NonEmptyStringList, location_name: "SecurityGroupIds"))
+    AwsLambdaFunctionVpcConfig.add_member(:subnet_ids, Shapes::ShapeRef.new(shape: NonEmptyStringList, location_name: "SubnetIds"))
+    AwsLambdaFunctionVpcConfig.add_member(:vpc_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "VpcId"))
+    AwsLambdaFunctionVpcConfig.struct_class = Types::AwsLambdaFunctionVpcConfig
+
     AwsS3BucketDetails.add_member(:owner_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "OwnerId"))
     AwsS3BucketDetails.add_member(:owner_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "OwnerName"))
     AwsS3BucketDetails.struct_class = Types::AwsS3BucketDetails
@@ -361,6 +501,24 @@ module Aws::SecurityHub
 
     AwsSecurityFindingList.member = Shapes::ShapeRef.new(shape: AwsSecurityFinding)
 
+    AwsSnsTopicDetails.add_member(:kms_master_key_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "KmsMasterKeyId"))
+    AwsSnsTopicDetails.add_member(:subscription, Shapes::ShapeRef.new(shape: AwsSnsTopicSubscriptionList, location_name: "Subscription"))
+    AwsSnsTopicDetails.add_member(:topic_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "TopicName"))
+    AwsSnsTopicDetails.add_member(:owner, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Owner"))
+    AwsSnsTopicDetails.struct_class = Types::AwsSnsTopicDetails
+
+    AwsSnsTopicSubscription.add_member(:endpoint, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Endpoint"))
+    AwsSnsTopicSubscription.add_member(:protocol, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Protocol"))
+    AwsSnsTopicSubscription.struct_class = Types::AwsSnsTopicSubscription
+
+    AwsSnsTopicSubscriptionList.member = Shapes::ShapeRef.new(shape: AwsSnsTopicSubscription)
+
+    AwsSqsQueueDetails.add_member(:kms_data_key_reuse_period_seconds, Shapes::ShapeRef.new(shape: Integer, location_name: "KmsDataKeyReusePeriodSeconds"))
+    AwsSqsQueueDetails.add_member(:kms_master_key_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "KmsMasterKeyId"))
+    AwsSqsQueueDetails.add_member(:queue_name, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "QueueName"))
+    AwsSqsQueueDetails.add_member(:dead_letter_target_arn, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DeadLetterTargetArn"))
+    AwsSqsQueueDetails.struct_class = Types::AwsSqsQueueDetails
+
     BatchDisableStandardsRequest.add_member(:standards_subscription_arns, Shapes::ShapeRef.new(shape: StandardsSubscriptionArns, required: true, location_name: "StandardsSubscriptionArns"))
     BatchDisableStandardsRequest.struct_class = Types::BatchDisableStandardsRequest
 
@@ -659,6 +817,10 @@ module Aws::SecurityHub
     ListTagsForResourceResponse.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "Tags"))
     ListTagsForResourceResponse.struct_class = Types::ListTagsForResourceResponse
 
+    LoadBalancerState.add_member(:code, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Code"))
+    LoadBalancerState.add_member(:reason, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Reason"))
+    LoadBalancerState.struct_class = Types::LoadBalancerState
+
     Malware.add_member(:name, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Name"))
     Malware.add_member(:type, Shapes::ShapeRef.new(shape: MalwareType, location_name: "Type"))
     Malware.add_member(:path, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Path"))
@@ -697,6 +859,8 @@ module Aws::SecurityHub
     Network.add_member(:destination_domain, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "DestinationDomain"))
     Network.struct_class = Types::Network
 
+    NonEmptyStringList.member = Shapes::ShapeRef.new(shape: NonEmptyString)
+
     Note.add_member(:text, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "Text"))
     Note.add_member(:updated_by, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "UpdatedBy"))
     Note.add_member(:updated_at, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "UpdatedAt"))
@@ -760,9 +924,16 @@ module Aws::SecurityHub
     ResourceConflictException.add_member(:code, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Code"))
     ResourceConflictException.struct_class = Types::ResourceConflictException
 
+    ResourceDetails.add_member(:aws_cloud_front_distribution, Shapes::ShapeRef.new(shape: AwsCloudFrontDistributionDetails, location_name: "AwsCloudFrontDistribution"))
     ResourceDetails.add_member(:aws_ec2_instance, Shapes::ShapeRef.new(shape: AwsEc2InstanceDetails, location_name: "AwsEc2Instance"))
+    ResourceDetails.add_member(:aws_elbv_2_load_balancer, Shapes::ShapeRef.new(shape: AwsElbv2LoadBalancerDetails, location_name: "AwsElbv2LoadBalancer"))
     ResourceDetails.add_member(:aws_s3_bucket, Shapes::ShapeRef.new(shape: AwsS3BucketDetails, location_name: "AwsS3Bucket"))
     ResourceDetails.add_member(:aws_iam_access_key, Shapes::ShapeRef.new(shape: AwsIamAccessKeyDetails, location_name: "AwsIamAccessKey"))
+    ResourceDetails.add_member(:aws_iam_role, Shapes::ShapeRef.new(shape: AwsIamRoleDetails, location_name: "AwsIamRole"))
+    ResourceDetails.add_member(:aws_kms_key, Shapes::ShapeRef.new(shape: AwsKmsKeyDetails, location_name: "AwsKmsKey"))
+    ResourceDetails.add_member(:aws_lambda_function, Shapes::ShapeRef.new(shape: AwsLambdaFunctionDetails, location_name: "AwsLambdaFunction"))
+    ResourceDetails.add_member(:aws_sns_topic, Shapes::ShapeRef.new(shape: AwsSnsTopicDetails, location_name: "AwsSnsTopic"))
+    ResourceDetails.add_member(:aws_sqs_queue, Shapes::ShapeRef.new(shape: AwsSqsQueueDetails, location_name: "AwsSqsQueue"))
     ResourceDetails.add_member(:container, Shapes::ShapeRef.new(shape: ContainerDetails, location_name: "Container"))
     ResourceDetails.add_member(:other, Shapes::ShapeRef.new(shape: FieldMap, location_name: "Other"))
     ResourceDetails.struct_class = Types::ResourceDetails
@@ -779,6 +950,8 @@ module Aws::SecurityHub
 
     ResultList.member = Shapes::ShapeRef.new(shape: Result)
 
+    SecurityGroups.member = Shapes::ShapeRef.new(shape: NonEmptyString)
+
     Severity.add_member(:product, Shapes::ShapeRef.new(shape: Double, location_name: "Product"))
     Severity.add_member(:normalized, Shapes::ShapeRef.new(shape: Integer, required: true, location_name: "Normalized"))
     Severity.struct_class = Types::Severity