aws-sdk-securityhub 1.160.0 → 1.161.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a174fc1dc33225a2b71d85d52eb89e92130541c68e353b3f71daf83a157dfd86
-  data.tar.gz: 0bb9da97a70bb8377449c8d2838a7d9d1556861afa8aa6281065c29167a8fdfa
+  metadata.gz: 953e0f1e343b94e6c9b62c34d5c68ecf4312d76ec8f15fe2b059f0bbfab26d30
+  data.tar.gz: '02359b710ee00d1e47d59f92ec351fce92b139b1ce955031a395341070aa0b0b'
 SHA512:
-  metadata.gz: '008da0d51e8344a1e039e6a71319c48652379a9dcca80f7079ec9b76fb46ad45eab7898ec23c3b39545c7accd22713fbf5b1a31c3c5e3eb7c4aef7b11282e48c'
-  data.tar.gz: cf068e0df7c76d90bcfc150e69db73fb9c858f2e44a84c95965801c9c77d5d2f142f97060b83b098f070a948f99fc0525baa793a6193178b6aeec0ca9c28c397
+  metadata.gz: 70b2700e4d3935fed1a4ae515dc2b451d74b0e084df64a980e646ed1c0a626e4a0a115dbf0a211c5324fbc47c25581ce5499b0fe4992160124e78b3b66230c7a
+  data.tar.gz: d9245af4bb859244ab25953694fe2a1937f4a0ff7957549d68009ef42cc59e01e8bbf79831d4fbeb888ecfe4aaba235db5de1a326189c38fa705107301f755a2

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.161.0 (2026-07-14)
+------------------
+
+* Feature - AWS Security Hub now provides an AI inventory, giving central security teams a continuously updated, organization-wide view of AI assets and their security posture
+
 1.160.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.160.0
+1.161.0

data/lib/aws-sdk-securityhub/client.rb

@@ -3260,11 +3260,10 @@ module Aws::SecurityHub
       req.send_request(options)
     end
 
-    # Creates a cloud service provider management (CSPM) connector in
-    # Security Hub CSPM. A connector establishes a connection between
-    # Security Hub CSPM and a third-party cloud provider, enabling Security
-    # Hub CSPM to ingest security findings and resource data from the
-    # connected environment.
+    # Creates a connector to a third-party cloud provider in Security Hub
+    # CSPM. A connector establishes a connection between Security Hub CSPM
+    # and a third-party cloud provider, enabling Security Hub CSPM to ingest
+    # security findings and resource data from the connected environment.
     #
     # @option params [required, String] :name
     #   The name of the connector. Must be unique within the account.
@@ -8920,6 +8919,12 @@ module Aws::SecurityHub
     # organizational units. Only the delegated administrator account can use
     # `Scopes`.
     #
+    # If you set `GroupByField` to `ResourceSubCategory`,
+    # `ResourceInfo.AIDetails.HostResourceType`, or
+    # `ResourceInfo.AIDetails.CanonicalId`, you must include a
+    # `ResourceCategory` string filter with comparison set to `EQUALS` and
+    # value `AI/ML` in the corresponding `ResourceGroupByRule`.
+    #
     # @option params [required, Array<Types::ResourceGroupByRule>] :group_by_rules
     #   How resource statistics should be aggregated and organized in the
     #   response.
@@ -8954,13 +8959,13 @@ module Aws::SecurityHub
     #   resp = client.get_resources_statistics_v2({
     #     group_by_rules: [ # required
     #       {
-    #         group_by_field: "AccountId", # required, accepts AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType
+    #         group_by_field: "AccountId", # required, accepts AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, ResourceSubCategory, DiscoveryType, ResourceInfo.AIDetails.HostResourceType, ResourceInfo.AIDetails.CanonicalId
     #         filters: {
     #           composite_filters: [
     #             {
     #               string_filters: [
     #                 {
-    #                   field_name: "ResourceGuid", # accepts ResourceGuid, ResourceId, AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, FindingsSummary.ProductName
+    #                   field_name: "ResourceGuid", # accepts ResourceGuid, ResourceId, AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, FindingsSummary.ProductName, ResourceSubCategory, DiscoveryType, ResourceInfo.AIDetails.HostResourceGuid, ResourceInfo.AIDetails.HostResourceType, ResourceInfo.AIDetails.CanonicalId
     #                   filter: {
     #                     value: "NonEmptyString",
     #                     comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS, CONTAINS, NOT_CONTAINS, CONTAINS_WORD
@@ -8983,7 +8988,7 @@ module Aws::SecurityHub
     #               ],
     #               number_filters: [
     #                 {
-    #                   field_name: "FindingsSummary.TotalFindings", # accepts FindingsSummary.TotalFindings, FindingsSummary.Severities.Other, FindingsSummary.Severities.Fatal, FindingsSummary.Severities.Critical, FindingsSummary.Severities.High, FindingsSummary.Severities.Medium, FindingsSummary.Severities.Low, FindingsSummary.Severities.Informational, FindingsSummary.Severities.Unknown
+    #                   field_name: "FindingsSummary.TotalFindings", # accepts FindingsSummary.TotalFindings, FindingsSummary.Severities.Other, FindingsSummary.Severities.Fatal, FindingsSummary.Severities.Critical, FindingsSummary.Severities.High, FindingsSummary.Severities.Medium, FindingsSummary.Severities.Low, FindingsSummary.Severities.Informational, FindingsSummary.Severities.Unknown, ResourceInfo.AIDetails.SelfHostedAIModelResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount, ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount, ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount, ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount, ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount
     #                   filter: {
     #                     gte: 1.0,
     #                     lte: 1.0,
@@ -9132,6 +9137,18 @@ module Aws::SecurityHub
     # or together. When both are provided, `Scopes` narrows the data set
     # first, and then `Filters` refines results within that scoped data set.
     #
+    # For AI/ML resources, the response includes the `ResourceSubCategory`
+    # field. For self-hosted AI resources and their host resources, the
+    # response also includes `ResourceInfo` with AI-specific details.
+    # Self-hosted AI resources use a `ResourceType` with the
+    # `SelfHosted::AI::` prefix, such as `SelfHosted::AI::Model`,
+    # `SelfHosted::AI::Agent`, `SelfHosted::AI::InferenceEndpoint`, and
+    # `SelfHosted::AI::ExternalEndpoint`.
+    #
+    # If you filter by `ResourceSubCategory`, you must also include a
+    # `ResourceCategory` string filter with comparison set to `EQUALS` and
+    # value `AI/ML` in the same request.
+    #
     # @option params [Types::ResourcesFilters] :filters
     #   Filters resources based on a set of criteria.
     #
@@ -9176,7 +9193,7 @@ module Aws::SecurityHub
     #         {
     #           string_filters: [
     #             {
-    #               field_name: "ResourceGuid", # accepts ResourceGuid, ResourceId, AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, FindingsSummary.ProductName
+    #               field_name: "ResourceGuid", # accepts ResourceGuid, ResourceId, AccountId, AccountName, Region, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion, ResourceCategory, ResourceType, ResourceName, FindingsSummary.FindingType, FindingsSummary.ProductName, ResourceSubCategory, DiscoveryType, ResourceInfo.AIDetails.HostResourceGuid, ResourceInfo.AIDetails.HostResourceType, ResourceInfo.AIDetails.CanonicalId
     #               filter: {
     #                 value: "NonEmptyString",
     #                 comparison: "EQUALS", # accepts EQUALS, PREFIX, NOT_EQUALS, PREFIX_NOT_EQUALS, CONTAINS, NOT_CONTAINS, CONTAINS_WORD
@@ -9199,7 +9216,7 @@ module Aws::SecurityHub
     #           ],
     #           number_filters: [
     #             {
-    #               field_name: "FindingsSummary.TotalFindings", # accepts FindingsSummary.TotalFindings, FindingsSummary.Severities.Other, FindingsSummary.Severities.Fatal, FindingsSummary.Severities.Critical, FindingsSummary.Severities.High, FindingsSummary.Severities.Medium, FindingsSummary.Severities.Low, FindingsSummary.Severities.Informational, FindingsSummary.Severities.Unknown
+    #               field_name: "FindingsSummary.TotalFindings", # accepts FindingsSummary.TotalFindings, FindingsSummary.Severities.Other, FindingsSummary.Severities.Fatal, FindingsSummary.Severities.Critical, FindingsSummary.Severities.High, FindingsSummary.Severities.Medium, FindingsSummary.Severities.Low, FindingsSummary.Severities.Informational, FindingsSummary.Severities.Unknown, ResourceInfo.AIDetails.SelfHostedAIModelResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount, ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount, ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount, ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount, ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount, ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount
     #               filter: {
     #                 gte: 1.0,
     #                 lte: 1.0,
@@ -9278,6 +9295,19 @@ module Aws::SecurityHub
     #   resp.resources[0].resource_tags #=> Array
     #   resp.resources[0].resource_tags[0].key #=> String
     #   resp.resources[0].resource_tags[0].value #=> String
+    #   resp.resources[0].resource_sub_category #=> String, one of "Model", "ModelServing", "Agent", "AgentFramework", "AgentToolsAndIdentity", "SafetyAndGuardrail", "KnowledgeAndData", "OrchestrationAndPipeline", "ExternalEndpoint", "Development", "Other"
+    #   resp.resources[0].discovery_type #=> String, one of "Managed", "SelfHosted"
+    #   resp.resources[0].resource_info.ai_details.host_resource_guid #=> String
+    #   resp.resources[0].resource_info.ai_details.host_resource_type #=> String
+    #   resp.resources[0].resource_info.ai_details.canonical_id #=> String
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_model_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_agent_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_model_serving_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_external_endpoint_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_development_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_agent_framework_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_ai_agent_tools_and_identity_resource_count #=> Integer
+    #   resp.resources[0].resource_info.ai_details.self_hosted_total_ai_resource_count #=> Integer
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetResourcesV2 AWS API Documentation
@@ -13386,7 +13416,7 @@ module Aws::SecurityHub
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-securityhub'
-      context[:gem_version] = '1.160.0'
+      context[:gem_version] = '1.161.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securityhub/client_api.rb

@@ -14,6 +14,7 @@ module Aws::SecurityHub
 
     include Seahorse::Model
 
+    AIDetails = Shapes::StructureShape.new(name: 'AIDetails')
     AcceptAdministratorInvitationRequest = Shapes::StructureShape.new(name: 'AcceptAdministratorInvitationRequest')
     AcceptAdministratorInvitationResponse = Shapes::StructureShape.new(name: 'AcceptAdministratorInvitationResponse')
     AcceptInvitationRequest = Shapes::StructureShape.new(name: 'AcceptInvitationRequest')
@@ -907,6 +908,7 @@ module Aws::SecurityHub
     DisassociateFromMasterAccountResponse = Shapes::StructureShape.new(name: 'DisassociateFromMasterAccountResponse')
     DisassociateMembersRequest = Shapes::StructureShape.new(name: 'DisassociateMembersRequest')
     DisassociateMembersResponse = Shapes::StructureShape.new(name: 'DisassociateMembersResponse')
+    DiscoveryType = Shapes::StringShape.new(name: 'DiscoveryType')
     DnsRequestAction = Shapes::StructureShape.new(name: 'DnsRequestAction')
     Double = Shapes::FloatShape.new(name: 'Double')
     DoubleConfigurationOptions = Shapes::StructureShape.new(name: 'DoubleConfigurationOptions')
@@ -1212,6 +1214,7 @@ module Aws::SecurityHub
     ResourceGroupByRule = Shapes::StructureShape.new(name: 'ResourceGroupByRule')
     ResourceGroupByRules = Shapes::ListShape.new(name: 'ResourceGroupByRules')
     ResourceInUseException = Shapes::StructureShape.new(name: 'ResourceInUseException')
+    ResourceInfo = Shapes::StructureShape.new(name: 'ResourceInfo')
     ResourceList = Shapes::ListShape.new(name: 'ResourceList')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     ResourceOwner = Shapes::StructureShape.new(name: 'ResourceOwner')
@@ -1220,6 +1223,7 @@ module Aws::SecurityHub
     ResourceResult = Shapes::StructureShape.new(name: 'ResourceResult')
     ResourceScopes = Shapes::StructureShape.new(name: 'ResourceScopes')
     ResourceSeverityBreakdown = Shapes::StructureShape.new(name: 'ResourceSeverityBreakdown')
+    ResourceSubCategory = Shapes::StringShape.new(name: 'ResourceSubCategory')
     ResourceTag = Shapes::StructureShape.new(name: 'ResourceTag')
     ResourceTagList = Shapes::ListShape.new(name: 'ResourceTagList')
     Resources = Shapes::ListShape.new(name: 'Resources')
@@ -1458,6 +1462,19 @@ module Aws::SecurityHub
     WorkflowStatus = Shapes::StringShape.new(name: 'WorkflowStatus')
     WorkflowUpdate = Shapes::StructureShape.new(name: 'WorkflowUpdate')
 
+    AIDetails.add_member(:host_resource_guid, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "HostResourceGuid"))
+    AIDetails.add_member(:host_resource_type, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "HostResourceType"))
+    AIDetails.add_member(:canonical_id, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "CanonicalId"))
+    AIDetails.add_member(:self_hosted_ai_model_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIModelResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_agent_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIAgentResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_model_serving_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIModelServingResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_external_endpoint_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIExternalEndpointResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_development_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIDevelopmentResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_agent_framework_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIAgentFrameworkResourceCount"))
+    AIDetails.add_member(:self_hosted_ai_agent_tools_and_identity_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedAIAgentToolsAndIdentityResourceCount"))
+    AIDetails.add_member(:self_hosted_total_ai_resource_count, Shapes::ShapeRef.new(shape: Integer, location_name: "SelfHostedTotalAIResourceCount"))
+    AIDetails.struct_class = Types::AIDetails
+
     AcceptAdministratorInvitationRequest.add_member(:administrator_id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "AdministratorId"))
     AcceptAdministratorInvitationRequest.add_member(:invitation_id, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location_name: "InvitationId"))
     AcceptAdministratorInvitationRequest.struct_class = Types::AcceptAdministratorInvitationRequest
@@ -7321,6 +7338,9 @@ module Aws::SecurityHub
     ResourceInUseException.add_member(:code, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Code"))
     ResourceInUseException.struct_class = Types::ResourceInUseException
 
+    ResourceInfo.add_member(:ai_details, Shapes::ShapeRef.new(shape: AIDetails, location_name: "AIDetails"))
+    ResourceInfo.struct_class = Types::ResourceInfo
+
     ResourceList.member = Shapes::ShapeRef.new(shape: Resource)
 
     ResourceNotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: NonEmptyString, location_name: "Message"))
@@ -7355,6 +7375,9 @@ module Aws::SecurityHub
     ResourceResult.add_member(:findings_summary, Shapes::ShapeRef.new(shape: ResourceFindingsSummaryList, location_name: "FindingsSummary"))
     ResourceResult.add_member(:resource_tags, Shapes::ShapeRef.new(shape: ResourceTagList, location_name: "ResourceTags"))
     ResourceResult.add_member(:resource_config, Shapes::ShapeRef.new(shape: ResourceConfig, required: true, location_name: "ResourceConfig"))
+    ResourceResult.add_member(:resource_sub_category, Shapes::ShapeRef.new(shape: ResourceSubCategory, location_name: "ResourceSubCategory"))
+    ResourceResult.add_member(:discovery_type, Shapes::ShapeRef.new(shape: DiscoveryType, location_name: "DiscoveryType"))
+    ResourceResult.add_member(:resource_info, Shapes::ShapeRef.new(shape: ResourceInfo, location_name: "ResourceInfo"))
     ResourceResult.struct_class = Types::ResourceResult
 
     ResourceScopes.add_member(:aws_organizations, Shapes::ShapeRef.new(shape: AwsOrganizationScopeList, location_name: "AwsOrganizations"))

data/lib/aws-sdk-securityhub/types.rb

@@ -10,6 +10,107 @@
 module Aws::SecurityHub
   module Types
 
+    # Contains information about self-hosted AI resources and their host
+    # resources. The fields that are present depend on the role of the
+    # resource.
+    #
+    # On a self-hosted AI resource (a resource with a `SelfHosted::AI::`
+    # resource type, such as `SelfHosted::AI::Model` or
+    # `SelfHosted::AI::Agent`), the `HostResourceGuid` and
+    # `HostResourceType` fields link the resource to its host. The
+    # `CanonicalId` field identifies what the resource is, enabling
+    # aggregation of identical resources across multiple hosts.
+    #
+    # On a host resource (such as an Amazon EC2 instance), the
+    # `SelfHostedAI*ResourceCount` fields contain the count for each
+    # `ResourceSubCategory` and the total count of self-hosted AI resources
+    # detected on the host.
+    #
+    # @!attribute [rw] host_resource_guid
+    #   The identifier of the host resource that hosts the self-hosted AI
+    #   resource. Present only on self-hosted AI resources.
+    #   @return [String]
+    #
+    # @!attribute [rw] host_resource_type
+    #   The `ResourceType` of the host resource that hosts the self-hosted
+    #   AI resource, such as `AWS::EC2::Instance`. Present only on
+    #   self-hosted AI resources.
+    #   @return [String]
+    #
+    # @!attribute [rw] canonical_id
+    #   The canonical identifier for the AI resource, independent of where
+    #   it is deployed. Multiple occurrences of the same resource on
+    #   different hosts share the same `CanonicalId`. For model resources,
+    #   the value follows the format `model/<purl>`, such as
+    #   `model/pkg:huggingface/meta-llama/llama-3-8b`. Present only on
+    #   self-hosted AI resources.
+    #   @return [String]
+    #
+    # @!attribute [rw] self_hosted_ai_model_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `Model` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_agent_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `Agent` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_model_serving_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `ModelServing` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_external_endpoint_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `ExternalEndpoint` detected on the host resource. Present only on
+    #   host resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_development_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `Development` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_agent_framework_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `AgentFramework` detected on the host resource. Present only on host
+    #   resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_ai_agent_tools_and_identity_resource_count
+    #   The number of self-hosted AI resources of `ResourceSubCategory`
+    #   `AgentToolsAndIdentity` detected on the host resource. Present only
+    #   on host resources.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] self_hosted_total_ai_resource_count
+    #   The total number of all self-hosted AI resources detected on the
+    #   host resource. Present only on host resources.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AIDetails AWS API Documentation
+    #
+    class AIDetails < Struct.new(
+      :host_resource_guid,
+      :host_resource_type,
+      :canonical_id,
+      :self_hosted_ai_model_resource_count,
+      :self_hosted_ai_agent_resource_count,
+      :self_hosted_ai_model_serving_resource_count,
+      :self_hosted_ai_external_endpoint_resource_count,
+      :self_hosted_ai_development_resource_count,
+      :self_hosted_ai_agent_framework_resource_count,
+      :self_hosted_ai_agent_tools_and_identity_resource_count,
+      :self_hosted_total_ai_resource_count)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] administrator_id
     #   The account ID of the Security Hub CSPM administrator account that
     #   sent the invitation.
@@ -21704,8 +21805,8 @@ module Aws::SecurityHub
     # The detailed Azure configuration for a connector.
     #
     # @!attribute [rw] aws_config_connector_arn
-    #   The ARN of the AWS Config connector used to establish the connection
-    #   to Azure.
+    #   The ARN of the multi-cloud configuration connector used to establish
+    #   the connection to Azure.
     #   @return [String]
     #
     # @!attribute [rw] scope_configuration
@@ -21730,8 +21831,8 @@ module Aws::SecurityHub
     # The configuration for connecting to an Azure environment.
     #
     # @!attribute [rw] aws_config_connector_arn
-    #   The ARN of the AWS Config connector used to establish the connection
-    #   to Azure.
+    #   The ARN of the multi-cloud configuration connector used to establish
+    #   the connection to Azure.
     #   @return [String]
     #
     # @!attribute [rw] scope_configuration
@@ -31033,6 +31134,23 @@ module Aws::SecurityHub
       include Aws::Structure
     end
 
+    # Additional details about a resource that are specific to its category.
+    # For AI/ML resources and their host resources, this structure contains
+    # `AIDetails`.
+    #
+    # @!attribute [rw] ai_details
+    #   Details that are specific to self-hosted AI resources and their host
+    #   resources.
+    #   @return [Types::AIDetails]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ResourceInfo AWS API Documentation
+    #
+    class ResourceInfo < Struct.new(
+      :ai_details)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The request was rejected because we can't find the specified
     # resource.
     #
@@ -31194,6 +31312,25 @@ module Aws::SecurityHub
     #   The configuration details of a resource.
     #   @return [Hash,Array,String,Numeric,Boolean]
     #
+    # @!attribute [rw] resource_sub_category
+    #   The AI/ML sub-grouping of the resource. Present only when
+    #   `ResourceCategory` is `AI/ML`.
+    #   @return [String]
+    #
+    # @!attribute [rw] discovery_type
+    #   Specifies how the resource was discovered. If the value is
+    #   `Managed`, the resource is natively provided by a cloud service
+    #   provider. If the value is `SelfHosted`, the resource is hosted on
+    #   customer-managed infrastructure, such as a compute instance or
+    #   container image.
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_info
+    #   Additional resource-type-specific details. For self-hosted AI
+    #   resources and their host resources, contains an `AIDetails`
+    #   structure.
+    #   @return [Types::ResourceInfo]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ResourceResult AWS API Documentation
     #
     class ResourceResult < Struct.new(
@@ -31214,7 +31351,10 @@ module Aws::SecurityHub
       :resource_detail_capture_time_dt,
       :findings_summary,
       :resource_tags,
-      :resource_config)
+      :resource_config,
+      :resource_sub_category,
+      :discovery_type,
+      :resource_info)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-securityhub.rb

@@ -54,7 +54,7 @@ module Aws::SecurityHub
   autoload :EndpointProvider, 'aws-sdk-securityhub/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-securityhub/endpoints'
 
-  GEM_VERSION = '1.160.0'
+  GEM_VERSION = '1.161.0'
 
 end
 

data/sig/client.rbs

@@ -4962,7 +4962,7 @@ module Aws
       def get_resources_statistics_v2: (
                                          group_by_rules: Array[
                                            {
-                                             group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType"),
+                                             group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId"),
                                              filters: Params::resources_filters?
                                            }
                                          ],

data/sig/params.rbs

@@ -1392,7 +1392,7 @@ module Aws
       type resources_composite_filter = {
       string_filters: Array[
         {
-          field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName")?,
+          field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")?,
           filter: {
             value: ::String?,
             comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -1412,7 +1412,7 @@ module Aws
         {
           string_filters: Array[
             {
-              field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName")?,
+              field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")?,
               filter: {
                 value: ::String?,
                 comparison: ("EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS" | "CONTAINS_WORD")?
@@ -1441,7 +1441,7 @@ module Aws
     }
 
       type resources_number_filter = {
-      field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown")?,
+      field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown" | "ResourceInfo.AIDetails.SelfHostedAIModelResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount" | "ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount")?,
       filter: {
         gte: ::Float?,
         lte: ::Float?,

data/sig/types.rbs

@@ -8,6 +8,21 @@
 module Aws::SecurityHub
   module Types
 
+    class AIDetails
+      attr_accessor host_resource_guid: ::String
+      attr_accessor host_resource_type: ::String
+      attr_accessor canonical_id: ::String
+      attr_accessor self_hosted_ai_model_resource_count: ::Integer
+      attr_accessor self_hosted_ai_agent_resource_count: ::Integer
+      attr_accessor self_hosted_ai_model_serving_resource_count: ::Integer
+      attr_accessor self_hosted_ai_external_endpoint_resource_count: ::Integer
+      attr_accessor self_hosted_ai_development_resource_count: ::Integer
+      attr_accessor self_hosted_ai_agent_framework_resource_count: ::Integer
+      attr_accessor self_hosted_ai_agent_tools_and_identity_resource_count: ::Integer
+      attr_accessor self_hosted_total_ai_resource_count: ::Integer
+      SENSITIVE: []
+    end
+
     class AcceptAdministratorInvitationRequest
       attr_accessor administrator_id: ::String
       attr_accessor invitation_id: ::String
@@ -7129,7 +7144,7 @@ module Aws::SecurityHub
     end
 
     class ResourceGroupByRule
-      attr_accessor group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType")
+      attr_accessor group_by_field: ("AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")
       attr_accessor filters: Types::ResourcesFilters
       SENSITIVE: []
     end
@@ -7140,6 +7155,11 @@ module Aws::SecurityHub
       SENSITIVE: []
     end
 
+    class ResourceInfo
+      attr_accessor ai_details: Types::AIDetails
+      SENSITIVE: []
+    end
+
     class ResourceNotFoundException
       attr_accessor message: ::String
       attr_accessor code: ::String
@@ -7181,6 +7201,9 @@ module Aws::SecurityHub
       attr_accessor findings_summary: ::Array[Types::ResourceFindingsSummary]
       attr_accessor resource_tags: ::Array[Types::ResourceTag]
       attr_accessor resource_config: untyped
+      attr_accessor resource_sub_category: ("Model" | "ModelServing" | "Agent" | "AgentFramework" | "AgentToolsAndIdentity" | "SafetyAndGuardrail" | "KnowledgeAndData" | "OrchestrationAndPipeline" | "ExternalEndpoint" | "Development" | "Other")
+      attr_accessor discovery_type: ("Managed" | "SelfHosted")
+      attr_accessor resource_info: Types::ResourceInfo
       SENSITIVE: []
     end
 
@@ -7241,13 +7264,13 @@ module Aws::SecurityHub
     end
 
     class ResourcesNumberFilter
-      attr_accessor field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown")
+      attr_accessor field_name: ("FindingsSummary.TotalFindings" | "FindingsSummary.Severities.Other" | "FindingsSummary.Severities.Fatal" | "FindingsSummary.Severities.Critical" | "FindingsSummary.Severities.High" | "FindingsSummary.Severities.Medium" | "FindingsSummary.Severities.Low" | "FindingsSummary.Severities.Informational" | "FindingsSummary.Severities.Unknown" | "ResourceInfo.AIDetails.SelfHostedAIModelResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIModelServingResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIExternalEndpointResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIDevelopmentResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentFrameworkResourceCount" | "ResourceInfo.AIDetails.SelfHostedAIAgentToolsAndIdentityResourceCount" | "ResourceInfo.AIDetails.SelfHostedTotalAIResourceCount")
       attr_accessor filter: Types::NumberFilter
       SENSITIVE: []
     end
 
     class ResourcesStringFilter
-      attr_accessor field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName")
+      attr_accessor field_name: ("ResourceGuid" | "ResourceId" | "AccountId" | "AccountName" | "Region" | "ResourceProvider" | "ResourceOwnerAccountId" | "ResourceOwnerOrgId" | "ResourceCloudPartition" | "ResourceRegion" | "ResourceCategory" | "ResourceType" | "ResourceName" | "FindingsSummary.FindingType" | "FindingsSummary.ProductName" | "ResourceSubCategory" | "DiscoveryType" | "ResourceInfo.AIDetails.HostResourceGuid" | "ResourceInfo.AIDetails.HostResourceType" | "ResourceInfo.AIDetails.CanonicalId")
       attr_accessor filter: Types::StringFilter
       SENSITIVE: []
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securityhub
 version: !ruby/object:Gem::Version
-  version: 1.160.0
+  version: 1.161.0
 platform: ruby
 authors:
 - Amazon Web Services